CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800

Series Switches
Troubleshooting Guide 22 FAQs

22 FAQs

NOTE

The configuration process provided in this document is basic configuration and is for reference only. For
the detailed configuration process and precautions, see the product configuration guide.
Unless otherwise specified, this document uses configuration for V100R003 as an example and the
configuration takes effect in two stages. Note the following in the two-stage mode:
l After completing a configuration, you must run the commit command to commit the
configuration. Otherwise, the configuration will not take effect.
l In V100R003 and later versions, if you do not run the commit command after modifying a
configuration, the system prompt ~ is changed to *, prompting you that the configuration is not
committed. The system prompt * will be restored to ~ after you run the commit command to
commit the configuration.

22.1 Obtaining Documentation

22.2 Hardware - Chassis
22.3 Hardware - Power Module
22.4 Hardware - Fan Module
22.5 Hardware - Card
22.6 Hardware - Cable
22.7 Virtualization - Stack
22.8 Virtualization - SVF
22.9 Virtualization - VS
22.10 Basic Configurations - License
22.11 Basic Configurations - User Login
22.12 Basic Configurations - Configuration Deletion
22.13 Basic Configurations - File Management
22.14 Basic Configurations - System Startup
22.15 Basic Configurations - Commands
22.16 Basic Configurations - Web

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 394

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.17 Interface Management - Interface in Error-Down State

22.18 Interface Management - Optical Module
22.19 Interface Management - Interface Split
22.20 Interface Management - Ethernet Interface
22.21 Ethernet Switching - MAC
22.22 Ethernet Switching - Ethernet Link Aggregation
22.23 Ethernet Switching - VLAN
22.24 Ethernet Switching - QINQ
22.25 Ethernet Switching - GVRP
22.26 Ethernet Switching - STP/RSTP/MSTP
22.27 Ethernet Switching - M-LAG
22.28 Ethernet Switching - VBST
22.29 Ethernet Switching - Layer 2 Protocol Transparent Transmission
22.30 Network Management and Monitoring - Mirroring
22.31 Network Management and Monitoring - SNMP
22.32 Network Management and Monitoring - NetStream
22.33 Network Management and Monitoring - LLDP
22.34 Network Management and Monitoring - sFlow
22.35 Network Management and Monitoring - NQA
22.36 Network Management and Monitoring - OpenFlow
22.37 Network Management and Monitoring - Packet Capture
22.38 Network Management and Monitoring - Ping&Tracert
22.39 Network Management and Monitoring - Telemetry
22.40 IP Service - IPv4
22.41 IP Service - ARP
22.42 IP Service - DHCP
22.43 IP Service - IP Performance
22.44 IP Service - IPv6
22.45 IP Service - DHCPv6
22.46 IP Service - NAT
22.47 Security
22.48 Device Management - Hardware Management
22.49 Device Management - Information Center

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 395

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.50 Device Management - NTP

22.51 Reliability
22.52 TRILL
22.53 VXLAN
22.54 FCoE
22.55 DCB
22.56 QoS
22.57 IP Multicast
22.58 MPLS
22.59 VPN
22.60 IP Unicast Routing

22.1 Obtaining Documentation

22.1.1 How Do I Obtain Product Documents of CE Series

Switches?

1. Visit http://e.huawei.com, in which e indicates Enterprise, or enterprise services.

2. Click Support.
3. Select Switch in Enterprise Networking or input a specific model, for example,
CE12800.
The information platform is displayed. You can click the specific model.
4. In the Documentation column, click Product Documentation. Click the required
document to obtain it.
To obtain MIB Reference, Log Reference, or Alarm Reference, click Reference Guides.

22.1.2 How Do I Obtain Upgrade Guides of CE Series Switches?

Perform the following operations to download upgrade guides of CE series switches:

1. Visit http://e.huawei.com, in which e indicates Enterprise, or enterprise services.

2. Click Support.
3. Select Switch in Enterprise Networking or input a specific model, for example,
CE12800.
The information platform is displayed. You can click the specific model.
4. In the Documentation column, click Installation/Upgrade. Click the required
document to obtain it.

If you do not have the permission to download an upgrade guide, increase your user level.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 396

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.2 Hardware - Chassis

22.2.1 How Do I Calculate the Power Consumption of a CE Series

Switch?

CE12800, and CE12800E

The power consumption of a CE12800 or a CE12800E series switch is the total power
consumption of the chassis (including fan modules) and all modules installed in the chassis
(MPU x 2 + CMU x 2 + SFU x N + LPU x N). You can use the Hardware Configuration
Tool to calculate the power consumption of a switch.

CE8800, 7800, 6800, and 5800

You can use the Hardware Configuration Tool to calculate the power consumption of a
switch.

22.2.2 What Are Dimensions of CE Series Switches?

CE12800 and CE12800E

Table 22-1 lists dimensions of the CE12800 and CE12800E series switches.

Table 22-1 Dimensions of the CE12800 and CE12800E series switches

Device Model Dimensions (W x D x H) Remarks

CE12804 chassis 442 mm x 970 mm x 486.15 l The depth of 970 mm is the

mm (11U) distance from a fan module
handle to the outer edge of
the lower enclosure frame.
l When measured from a fan
module handle to the air
filter door, the depth is
986.5 mm.

CE12808 chassis 442 mm x 970 mm x 752.85 l The depth of 970 mm is the

mm (17U) distance from a fan module
handle to the outer edge of
the lower enclosure frame.
l When measured from a fan
module handle to the air
filter door, the depth is
986.5 mm.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 397

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Device Model Dimensions (W x D x H) Remarks

CE12812 chassis 442 mm x 970 mm x 975.1 l The depth of 970 mm is the

mm (22U) distance from a fan module
handle to the outer edge of
the lower enclosure frame.
l When measured from a fan
module handle to the air
filter door, the depth is
986.5 mm.

CE12816 chassis 442 mm x 1065 mm x 1597.4 l The depth of 1065 mm is

mm (36U) the distance from a fan
module handle to the outer
edge of the lower enclosure
frame.
l When measured from a fan
module handle to the air
filter door, the depth is 1085
mm.

CE12804S chassis 442 mm x 751 mm x 352.8 l The depth of 751 mm is the

mm (8U) distance from a fan module
handle to the outer edge of
the chassis header.
l When measured from a fan
module handle to the air
filter door, the depth is 766
mm.

CE12808S chassis 442 mm x 751 mm x 708.4 l The depth of 751 mm is the

mm (16U) distance from a fan module
handle to the outer edge of
the chassis header.
l When measured from a fan
module handle to the air
filter door, the depth is 766
mm.

CE12804E chassis 442 mm x 620 mm x 308.35 –

mm (7U)

CE12808E chassis 442 mm x 620 mm x 575.05 –

mm (13U)

CE12816E chassis 442 mm x 760 mm x 1019.55 –

mm (23U)

CE8800, CE7800, CE6800, and CE5800

Table 22-2 lists dimensions of the CE8800, CE7800, CE6800, and CE5800 series switches.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 398

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-2 Dimensions of the CE8800, CE7800, CE6800, and CE5800 series switches
Device Model Dimensions (W x D x H)

CE8860-4C-EI 442.0 mm x 600.0 mm x 88.1 mm

CE8861-4C-EI 442.0 mm x 600.0 mm x 88.1 mm

CE8868-4C-EI 442.0 mm x 600.0 mm x 88.1 mm

CE8850-64CQ-EI 442.0 mm x 600.0 mm x 88.1 mm

CE8850-32CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE7850-32Q-EI 442.0 mm x 607.0 mm x 43.6 mm

CE7855-32Q-EI 442.0 mm x 607.0 mm x 43.6 mm

CE6810-24S2Q-LI 442.0 mm x 600.0 mm x 43.6 mm

CE6810-32T16S4Q-LI 442.0 mm x 420.0 mm x 43.6 mm

CE6810-48S4Q-EI 442.0 mm x 600.0 mm x 43.6 mm

CE6810-48S4Q-LI 442.0 mm x 600.0 mm x 43.6 mm

CE6810-48S-LI 442.0 mm x 600.0 mm x 43.6 mm

CE6850-48S4Q-EI 442.0 mm x 600.0 mm x 43.6 mm

CE6850-48T4Q-EI 442.0 mm x 600.0 mm x 43.6 mm

CE6850-48S6Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6850-48T6Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6850U-24S2Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6850U-48S6Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6851-48S6Q-HI 442.0 mm x 420.0 mm x 43.6 mm

CE6855-48S6Q-HI 442.0 mm x 420.0 mm x 43.6 mm

CE6855-48T6Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6856-48S6Q-HI 442.0 mm x 420.0 mm x 43.6 mm

CE6856-48T6Q-HI 442.0 mm x 600.0 mm x 43.6 mm

CE6857-48S6CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6860-48S8CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6865-48S8CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6870-24S6CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6870-48S6CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6870-48T6CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 399

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Device Model Dimensions (W x D x H)

CE6875-48S4CQ-EI 442.0 mm x 600.0 mm x 43.6 mm

CE6880-24S4Q2CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6880-48S4Q2CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE6880-48T4Q2CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5880-48T4Q2CQ-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5810-24T4S-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5810-48T4S-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5850-48T4S2Q-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5850-48T4S2Q-HI 442.0 mm x 420.0 mm x 43.6 mm

CE5855-24T4S2Q-EI 442.0 mm x 420.0 mm x 43.6 mm

CE5855-48T4S2Q-EI 442.0 mm x 420.0 mm x 43.6 mm

22.2.3 What Requirements Should Cabinets for the CE Series

Switches Meet?

CE12800 and CE12800E

A standard 19-inch four-post cabinet or rack is recommended for the CE12800 and
CE12800E series switches. Use Huawei expandable guide rails to support the chassis in the
cabinet/rack. Expandable guide rails for the CE12804/CE12808/CE12812/CE12816 switches
are expandable between 700 mm to 900 mm, and expandable guide rails for the CE12804S/
CE12808S/CE12804E/CE12808E/CE12816E switches are expandable between 500 mm and
850 mm. If you use third-party guide rails or trays, ensure that they have sufficient load
bearing capacity.

A Huawei CE12800 and CE12800E cabinet can accommodate two CE12808 switches. To
install two CE12808 switches in the same cabinet, install a switch at the bottom and then
install the other on the top. Leave certain space above and below the two switches for cabling.

The power distribution unit (PDU) in the cabinet provides both 10 A PDU (C13) and 16 A
PDU (C19) sockets. If you want to connect a CE12800 or a CE12800E switch and another
small-sized device to the PDU simultaneously, properly plan the power cable connections to
ensure reliable power supply for the two devices. (Sockets on the PDU are divided into
different groups for proper power cable connections.) Ensure that the fault of one device does
not affect the other device.

A cabinet for the CE12800 and CE12800E series switches must meet the following
requirements:

l The cabinet/rack must provide reliable ground points for switch grounding. (The ground
cable delivered with a switch is 850 mm long.)

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 400

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l The cabinet/rack must meet the requirements for front-to-back airflow. The cabinet must
meet the requirements for front-to-back airflow, and the front and rear doors must have a
porosity rate of more than 50%.
l If you use AC power cables delivered from Huawei, ensure that an AC power outlet is
available within 3000 mm (cable distance) away from the switch.
l The cabinet must be installed on concrete floor or ESD floor (placed on the floor directly
or fixed by expansion bolts). If necessary, use an earthquake-proof cabinet complying
with GR63 Zone4 or Zone3 standard.
In addition to the preceding requirements, different models of the CE series have their own
requirements for a cabinet/rack, as described in Table 22-3.

Table 22-3 Requirements for a cabinet/rack

Dev Requirement
ice
Mod
el

CE1 l The width of the cabinet/rack must be at least 600 mm (distance A in Figure
2804 22-1), and a cabinet/rack with a width of 800 mm is recommended. When a 600
mm wide cabinet/rack is used, do not install any power strip or power
distribution unit (PDU) within the CE12804 chassis height at the rear interior
sides of the cabinet/rack. Otherwise, the power strip or PDU will hinder chassis
installation and operations on fan modules.
l The depth of the cabinet/rack must be at least 1100 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1200 mm is recommended. When a
1100 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 12 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 178 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 180 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 700 mm to 730 mm
(distance D in Figure 22-1).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 401

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Dev Requirement
ice
Mod
el

CE1 l The width of the cabinet/rack must be at least 600 mm (distance A in Figure
2808 22-1), and a cabinet/rack with a width of 800 mm is recommended. When a 600
mm wide cabinet/rack is used, do not install any power strip or PDU within the
CE12808 chassis height at the rear interior sides of the cabinet/rack. Otherwise,
the power strip or PDU will hinder chassis installation and operations on fan
modules.
l The depth of the cabinet/rack must be at least 1100 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1200 mm is recommended. When a
1100 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 18 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 266 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 180 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 700 mm to 730 mm
(distance D in Figure 22-1).

CE1 l The width of the cabinet/rack must be at least 600 mm (distance A in Figure
2812 22-1), and a cabinet/rack with a width of 800 mm is recommended. When a 600
mm wide cabinet/rack is used, do not install any power strip or PDU within the
CE12812 chassis height at the rear interior sides of the cabinet/rack. Otherwise,
the power strip or PDU will hinder chassis installation and operations on fan
modules.
l The depth of the cabinet/rack must be at least 1100 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1200 mm is recommended. When a
1100 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 23 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 359 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 180 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 700 mm to 730 mm
(distance D in Figure 22-1).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 402

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Dev Requirement
ice
Mod
el

CE1 l A cabinet/rack with a width of 800 mm (distance A in Figure 22-1) and a depth
2816 of 1200 mm (distance B in Figure 22-1) is recommended.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 37 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 521 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 180 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 800 mm to 825 mm
(distance D in Figure 22-1).

CE1 l The width of the cabinet/rack must be at least 600 mm (distance A in Figure
2804 22-1), and a cabinet/rack with a width of 800 mm is recommended. When a 600
S mm wide cabinet/rack is used, do not install any power strip or PDU within the
CE12804S chassis height at the rear interior sides of the cabinet/rack.
Otherwise, the power strip or PDU will hinder chassis installation and
operations on fan modules.
l The depth of the cabinet/rack must be at least 800 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1000 mm is recommended. When an
800 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 9 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 132 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 170 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be at least 450 mm
(distance D in Figure 22-1). When Huawei expandable guide rails are used, the
distance between front and rear mounting rails should be 500 mm to 850 mm.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 403

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Dev Requirement
ice
Mod
el

CE1 l The width of the cabinet/rack must be at least 600 mm (distance A in Figure
2808 22-1), and a cabinet/rack with a width of 800 mm is recommended. When a 600
S mm wide cabinet/rack is used, do not install any power strip or PDU within the
CE12808S chassis height at the rear interior sides of the cabinet/rack.
Otherwise, the power strip or PDU will hinder chassis installation and
operations on fan modules.
l The depth of the cabinet/rack must be at least 800 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1000 mm is recommended. When an
800 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 17 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 216 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 170 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be at least 450 mm
(distance D in Figure 22-1). When Huawei expandable guide rails are used, the
distance between front and rear mounting rails should be 500 mm to 850 mm.

CE1 l A cabinet/rack with a width of 800 mm (distance A in Figure 22-1) is

2804 recommended.
E l The depth of the cabinet/rack must be at least 800 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1000 mm is recommended. When an
800 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 8 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 111 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 170 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 500 mm to 850 mm
(distance D in Figure 22-1).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 404

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Dev Requirement
ice
Mod
el

CE1 l A cabinet/rack with a width of 800 mm (distance A in Figure 22-1) is

2808 recommended.
E l The depth of the cabinet/rack must be at least 800 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1000 mm is recommended. When an
800 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 14 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 192 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 170 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 500 mm to 850 mm
(distance D in Figure 22-1).

CE1 l A cabinet/rack with a width of 800 mm (distance A in Figure 22-1) is

2816 recommended.
E l The depth of the cabinet/rack must be at least 1100 mm (distance B in Figure
22-1), and a cabinet/rack with a depth of 1200 mm is recommended. When a
1100 mm deep cabinet/rack is used, the front and rear doors must be single-
swing doors.
l The cabinet/rack must have sufficient vertical space for switch installation: at
least 24 U.
l When each cabinet accommodates only one switch, the minimum load bearing
capacity required for each cabinet is 371 kg.
l It is recommended that the distance between the front mounting rails and the
front door should be 150 mm to 180 mm (distance C in Figure 22-1), and the
distance between front and rear mounting rails should be 700 mm to 730 mm
(distance D in Figure 22-1).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 405

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-1 Perspective view of a cabinet

CE8800, CE7800, CE6800, and CE5800

Table 22-4 describes the requirements of the CE8800, CE7800, CE6800, and CE5800 series
switches for a cabinet/rack.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 406

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-4 Requirements for the cabinet/rack

Item Requirement

Width Use a standard 19-inch four-post cabinet or rack. The CE7800,

CE6800, and CE5800 series switches and CE8850-32CQ-EI are
43.6 high. The CE8850-64CQ-EI, CE8860EI, CE8861EI, and
CE8868EI are 88.1 mm high. With their widths in compliance with
industry standards, these switches can be installed in a standard 19-
inch cabinet/rack.

Depth A separately purchased non-standard cabinet/rack must have

sufficient space for chassis installation. The cabinet for a CE5800,
CE6800 (420 mm deep), or CE8850-32CQ-EI switch must be no
less than 600 mm deep, and the cabinet for a CE6800 (600 mm
deep), CE7800, CE8850-64CQ-EI, CE8860EI, CE8861EI, or
CE8868EI switch must be no less than 800 mm deep.

Heat dissipation The CE8800, CE7800, CE6800, and CE5800 series switches use
front-to-back or back-to-front airflow design. The cabinet must
meet the requirement of the airflow.

Grounding The cabinet must have reliable ground points to ground the chassis.

Distance between When the CE8800, CE7800, CE6800, and CE5800 series switches
front and rear need to be installed in the same cabinet with a CE12800 switch,
mounting rails keep the distance between the front and rear mounting rails in the
range of 700 mm to 800 mm.

Cabling space On a switch, the side with power modules and fan modules is the
power supply side, and the side with service ports is the port side.
To ensure sufficient cabling space, reserve at least 130 mm of
vertical distance from the port side to the interior side of the
cabinet door, and at least 70 mm from the power supply side to the
interior side of the cabinet door.

22.2.4 Where Is the Management Port of a CE Series Switch

Located? How Is the Management Port Connected?

CE12800 and CE12800E

The CE12800 and CE12800E series switches have ETH (RJ45), Console (RJ45), and Mini
USB/Micro USB management ports, all of which are located at the front of an MPU.
Figure 22-2 shows the management ports on the CE-MPUA.

Figure 22-2 Management ports on the CE-MPUA

ETH management port
Console management port
Mini USB management port
GE0 CE-MPUA
RUN/ALM
ACT
STACK

GE1 USB ETH CONSOLE ACT RST

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 407

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

CE-MPUA-S and CE-MPUB-S have the same management ports on the front panel. Figure
22-3 shows the management ports on the CE-MPUA-S as an example.

Figure 22-3 Management ports on the CE-MPUA-S

ETH management port
Console management port
Mini USB management port

CE-MPUA-S
LINK LINK PWR FAN RUN/ALM
ACT

GE0 GE1 ACT GE0 GE1 ACT ETH CONSOLE RST STACK

Figure 22-4 shows the management ports on the CE-MPUA-E.

Figure 22-4 Management ports on the CE-MPUA-E

ETH management port
Console management port
Micro USB management port
GE0 CLK0 CE-MPUA-E
RUN/ALM
FAN
POWER
ACT
STACK

RST
GE1 CLK1 RS485 ETH CONSOLE

ETH management port (RJ45)

The ETH management port can be connected to a network management workstation for
device management.

GE0 CE-MPUA
RUN/ALM
ACT
STACK

GE1 USB ETH CONSOLE ACT RST

Attribute Description

Connector type RJ45

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 408

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Attribute Description

Working mode 10M/100M/1000M auto-sensing, half-duplex and

full-duplex supported

Standards compliance IEEE802.3ab

Maximum transmission distance 100 m

Applicable cable l When the ETH management port is working in

10M/100M mode, a Category 5 cable is
recommended.
l When the ETH management port is working in
1000M mode, a Category 5 or Category 5e cable
is recommended.

Console management port (RJ45)

NOTE

l The console port and Mini USB/Micro USB port are multiplexed and share one internal serial port.
You can use the console port or Mini USB/Micro USB port as the serial port according to your
needs. When the Mini USB/Micro USB is activated, the console port cannot be used.
l When both the console port and Mini USB/Micro USB port have a cable connected, the Mini USB/
Micro USB port is used.

The console port can be connected to a configuration terminal for onsite system configuration.

GE0 CE-MPUA
RUN/ALM
ACT
STACK

GE1 USB ETH CONSOLE ACT RST

Attribute Description

Connector type RJ45

Working mode Full-duplex universal asynchronous receiver/

transmitter (UART)

Electrical characteristics RS232

Baud rate 9600 bit/s (default value), which can be changed as

required

Applicable cable 8-core shielded cable

Mini USB/Micro USB management port

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 409

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The Mini USB/Micro USB management port can be connected to a configuration terminal for
onsite system configuration, but the configuration terminal must have a USB serial port driver
installed. The Mini USB/Micro USB port is used as the serial port once a link is established
on the port.

GE0 CE-MPUA
RUN/ALM
ACT
STACK

GE1 USB ETH CONSOLE ACT RST

CE8800, CE7800, CE6800, and CE5800

The CE8800, CE7800, CE6800, and CE5800 series switches (except the CE6850HI,
CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-HI, CE6875EI, CE8850-64CQ-EI,
CE8860EI, CE8861EI, and CE8868EI) have ETH (RJ45) and console (RJ45) management
ports.
Figure 22-5 shows the management ports on the CE8800, CE7800, CE6800, and CE5800
series switches (except the CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-
HI, CE6875EI, CE8850-64CQ-EI, CE8860EI, CE8861EI, and CE8868EI).

Figure 22-5 Management ports on the CE8800, CE7800, CE6800, and CE5800 series
switches (except the CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-HI,
CE6875EI, CE8850-64CQ-EI, CE8860EI, CE8861EI, and CE8868EI)
Console management port

ETH management port

STATUS CONSOLE CE5810-24T4S-EI STATUS

STATUS STATUS
SYS
MST

ACT
L/A

ID

ETH
PAC-150WA ~100-240V;50/60Hz,2.5A PWR1 FAN1 FAN2 PWR2 PAC-150WA ~100-240V;50/60Hz,2.5A

Front (power supply side)

The CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-HI, and CE6875EI have

ETH (combo), console (RJ45), and Mini USB management ports. The console (RJ45) and
Mini USB management ports are multiplexed.
Figure 22-6 shows the management ports on the CE6850HI, CE6855-48T6Q-HI,
CE6856-48T6Q-HI, CE6850U-HI, and CE6875EI.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 410

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-6 Management ports on the CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI,

CE6850U-HI, and CE6875EI
ETH management port
Console management port
Mini USBmanagement port

1 2 1 2 ID STAT STAT STAT STAT

PWR1
FAN1
CONSOLE
SYS
MST

060A-F
FAN-
060A-F
FAN-
USB

ACT

FAN2

PWR2
ETH

Front (power supply side)

Figure 22-7 shows the management ports on the CE8850-64CQ-EI, CE8860EI, CE8861EI,
and CE8868EI.

Figure 22-7 Management ports on the CE8850-64CQ-EI, CE8860EI, CE8861EI, and

CE8868EI
ETH management port
Console management port
Mini USBmanagement port

STAT

CE8860-4C-EI
FAN1

FAN2

FAN3

PWR1

1K2WA-F
整机条码

MAC地址

SLOT
180A-F
FAN-

180A-F
FAN-

1 2 3 4
1 2 ID STAT

PWR2
CONSOLE
SYS
MST

1K2WA-F
USB
ACT

STAT STAT
ETH

Front (power supply side)

All management ports of the CE8800, CE7800, CE6800, and CE5800 series switches are
located at the front of the chassis (power supply side).
ETH (combo), console (RJ45), and Mini USB management ports of the CE8800, CE7800,
CE6800, and CE5800 series switches have the same attributes as those management ports on
the CE12800 series switches.
ETH management port (Combo)
The ETH management port (combo) consists of an electrical port and an optical port. You can
connect the electrical or optical port to a configuration terminal or network management
workstation to set up the onsite or remote configuration environment. The electrical and
optical ports are multiplexed, and only one of them can work at a time.
l The electrical port uses a Category-5 or higher category network cable.
l The optical port uses a 100M or GE optical module and matching fibers. A 100M optical
module can be used only after the switch starts successfully.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 411

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

The combo port automatically selects the working mode as follows:

l If the optical port has no optical module installed and the electrical port has no network cable
connected, the port type depends on which port is connected first. If the electrical port is connected
by a network cable first, the electrical port is used for data switching. If the optical port has an
optical module installed first, the optical port is used for data switching.
l If the electrical port has a network cable connected and is in Up state, the electrical port is still
used for data switching when the optical port has an optical module installed.
l If the optical port has an optical module installed and is in Up state, the optical port is still used for
data switching when the electrical port has a network cable connected.
l If the optical port has an optical module and fiber installed and the electrical port has a network
cable connected, the optical port is used for data switching after the switch restarts.

22.2.5 What Is the Operating Temperature Range of the CE Series

Switches?
The CE series switches can operate normally within an ambient temperature range of 0°C to
40°C (altitude: 0 m to 1800 m).

NOTE

l When the altitude is between 1800 m and 4000 m, the highest operating temperature for the
CE12800&CE12800E series switches reduces by 1°C every time the altitude increases by 220 m.
l When the altitude is between 1800 m and 5000 m, the highest operating temperature for the
CE8800&7800&6800&5800 series switches reduces by 1°C every time the altitude increases by 220
m.
l The preceding temperature values refer to the ambient temperature, whereas the temperature shown
in the display command output is the PCB surface temperature near high-power chips in the chassis.
Whether the temperature is normal depends on whether it is within the temperature alarm threshold.
Therefore, if the displayed temperature of a switch does not exceed the alarm threshold, the switch is
operating under a normal temperature and has no risk of overtemperature.

22.2.6 Do the CE Series Switches Support Overtemperature

Protection?
The CE series switches support overtemperature protection. This function is implemented
using the following mechanisms:
1. Card software monitoring:
Temperature sensors of cards monitor temperature of key chips and report the
temperature data to the CMU. The CMU monitors card temperature and fan speeds in
corresponding zones. Once the temperature of a card exceeds the fatal temperature
threshold and the fan speed in the corresponding zone is abnormal, the monitoring
system powers off the card forcibly. When the card temperature restores to the normal
range, the monitoring system powers on the card.
2. Card hardware design:
Cards of CE series switches have temperature-sensitive hardware components to monitor
real-time temperature in high-temperature zones. Once the temperature of a card exceeds
the specified threshold, the card hardware shuts down power output so that the card
temperature can drop to the normal range.
The CE12800&CE12800E series switches support both two protection mechanisms, whereas
the CE8800&7800&6800&5800 series switches support only the first protection mechanism.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 412

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

All temperature alarm thresholds are set by thermal design engineers based on device running status
monitoring results, and alarm thresholds of different device models vary slightly. The hardware alarm
threshold for a device is higher than its software alarm threshold.

22.2.7 Can the Lower Enclosure Frame of a CE12800 Series Switch

Be Removed?

NOTE

Removing the lower enclosure frame is not recommended.

If the following conditions occur during installation of a CE12800 series switch, you can
remove the lower enclosure frame:

l If the chassis cannot be moved into the cabinet with the lower enclosure frame on the
chassis, remove the lower enclosure frame before placing the chassis into the cabinet.
NOTE

After 2/3 of the chassis is in the cabinet, install the lower enclosure frame back to the chassis (for
installing the air filter door), and then move the chassis completely in the cabinet.
l If the cabinet is not deep enough for the switch, determine whether the distance between
the front mounting rails and the front door meets the switch installation requirement. For
details, see 22.2.3 What Requirements Should Cabinets for the CE Series Switches
Meet?. If the front door cannot be closed after the switch is installed in the cabinet,
remove the lower enclosure frame from the chassis.

If lower enclosure frame is removed because the cabinet depth is small, the chassis
header and cable management frames cannot be installed either. Without cable
management frames, cables cannot be properly routed. This may affect normal service
operations. Therefore, use a qualified cabinet for the CE12800 series switches.

22.2.8 How Do I Power on a CE12800 or a CE12800E Series

Switch?

First check whether the input voltage for the switch is within the allowed range. If the input
voltage is normal, turn on the power switch of the power supply system, and then turn on the
power switch on the switch. (A CE12804S switch does not have a power switch.)

NOTE

After powering on a switch, check indicators on the switch to determine whether the switch is running
normally. For a CE12804/CE12808/CE12812/CE12816 switch, first check the indicators on the chassis
header. (The PWR, FAN, SFU, and MPU indicators should be steady green). For a CE12804S/
CE12808S/CE12804E/CE12808E/CE12816E switch, first check the indicators on the Main Control
Units (MPUs). (The PWR and FAN indicators should be steady green, and the RUN/ALM indicator
should be slow blinking green.) If the preceding indicators are in normal status, check indicators on
other modules.

Figure 22-8 shows the procedure for powering on a CE12800 switch for the first time.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 413

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-8 Procedure for powering on a CE12800 or a CE12800E switch for the first time

Start

Locate and
rectify the fault
Is input voltage in No
normal range?

Yes

Power on the switch

Locate and
rectify the fault

Are indicators on chassis No

header in normal state?

Yes

Are indicators on switch No

modules in normal state?

Yes

End

22.2.9 What Are Differences Between CE12800 AC, DC, and

AC&High-Voltage DC Chassis? What Modules Can Be Shared by
the Three Types of Chassis with the Same Specifications?
The AC, DC, and AC&high-voltage chassis of the CE12800 series differ in the power input
terminals and power modules they use.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 414

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Item AC Chassis DC Chassis AC&High-

Voltage DC
Chassis

Power input C20 straight male Two-OT input C20 straight male
terminal connector terminal connector

Power module 2700 W AC power 2200 W DC power 2700 W AC power

module and 3000 W module module and 3000
AC&high-voltage DC W AC&high-
power module voltage DC power
module
NOTE
The CE12804S and
CE12808S
AC&high-voltage
DC chassis do not
support 2700 W AC
power modules.

The CE12800 AC, DC, and AC&high-voltage chassis with the same specifications can use
the same types of LPUs, MPUs, and CMUs (CE12804S and CE12808S have no independent
CMUs), SFUs, and fan modules.

22.2.10 How Are Power Module Slots Distributed in a CE Series

Switch?

CE12800 and CE12800E

Slot layout in the CE12800 and CE12800E series switches

Chassis Front Rear Figure ID

Model

CE12804 2 MPU slots, 2 CMU 6 SFU slots, 9 fan Figure 22-9

chassis slots, 4 LPU slots, and 4 module slots, and a
power module slots power distribution unit

CE12808 2 MPU slots, 2 CMU 6 SFU slots, 13 fan Figure 22-10

chassis slots, 8 LPU slots, and 8 module slots, and a
power module slots power distribution unit

CE12812 2 MPU slots, 2 CMU 6 SFU slots, 17 fan Figure 22-11

chassis slots, 12 LPU slots, and module slots, and a
12 power module slots power distribution unit

CE12816 2 MPU slots, 2 CMU 6 SFU slots, 23 fan Figure 22-12

chassis slots, 16 LPU slots, and module slots, and a
20 power module slots power distribution unit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 415

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Front Rear Figure ID

Model

CE12804 2 MPU slots, 2 SFU 3 fan module slots and a Figure 22-13
S chassis slots, 4 LPU slots, and 4 power distribution unit
power module slots

CE12808 2 MPU slots, 4 SFU 6 fan module slots and a Figure 22-14
S chassis slots, 8 LPU slots, and 8 power distribution unit
power module slots

CE12804 2 MPU slots, 4 LPU 6 SFU slots and 6 Figure 22-15

E chassis slots, and 4 power single-fan module slots
module slots

CE12808 2 MPU slots, 8 LPU 6 SFU slots, 2 four-fan Figure 22-16

E chassis slots, and 8 power assembly module slots,
module slots and 3 single-fan module
slots

CE12816 2 MPU slots, 16 LPU 6 SFU slots, 4 four-fan Figure 22-17

E chassis slots, and 10 power assembly module slots,
module slots and 5 single-fan module
slots

NOTE

l In N+N backup mode, power module (PM) slots in the chassis are divided into area A and area B,
and power modules in the two areas work as a hot backup for each other.
l MPU: Main Processing Unit
l SFU: Switch Fabric Unit
l CMU: Centralized Monitoring Unit
l LPU: Line Processing Unit
l PM: power module
l FAN: fan module

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 416

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-9 Slot layout in the CE12804 chassis

Front Rear

Slot7-CMU Slot8-CMU
FAN7 FAN8 FAN9
Slot6-MPU
FAN5 FAN6
Slot5-MPU

Slot4-LPU Slot Slot Slot Slot Slot Slot

FAN3 9 10 11 12 13 14 FAN4
Slot3-LPU
Slot2-LPU S S S S S S
FAN1 F F F F F F FAN2
Slot1-LPU U U U U U U

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Area A Area B Area B Area A

Figure 22-10 Slot layout in the CE12808 chassis

Front Rear

Slot11-CMU Slot12-CMU
FAN11 FAN12 FAN13
Slot10-MPU
FAN9 FAN10
Slot9-MPU

Slot8-LPU
FAN7 FAN8
Slot7-LPU
Slot6-LPU Slot Slot Slot Slot Slot Slot
FAN5 13 14 15 16 17 18 FAN6
Slot5-LPU
S S S S S S
Slot4-LPU
FAN3
FAN1 F F F F F F FAN4
Slot3-LPU U U U U U U

Slot2-LPU
FAN1 FAN2
Slot1-LPU

PM5 PM6 PM7 PM8 Socket8 Socket7 Socket6 Socket5

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Area A Area B Area B Area A

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 417

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-11 Slot layout in the CE12812 chassis

Front Rear

Slot15-CMU Slot16-CMU
FAN15 FAN16 FAN17
Slot14-MPU
FAN13 FAN14
Slot13-MPU

Slot12-LPU
FAN11 FAN12
Slot11-LPU
Slot10-LPU
FAN9 FAN10
Slot9-LPU

Slot8-LPU Slot Slot Slot Slot Slot Slot

FAN7 17 18 19 20 21 22 FAN8
Slot7-LPU
Slot6-LPU S S S S S S
FAN5 F F F F F F FAN6
Slot5-LPU U U U U U U

Slot4-LPU
FAN3
FAN1 FAN4
Slot3-LPU
Slot2-LPU
FAN1 FAN2
Slot1-LPU

PM9 PM10 PM11 PM12 Socket12 Socket11 Socket10 Socket9

PM5 PM6 PM7 PM8 Socket8 Socket7 Socket6 Socket5

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Area A Area B Area B Area A

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 418

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-12 Slot layout in the CE12816 chassis

Front Rear

FAN19 FAN20 FAN21 FAN22 FAN23

Slot19-CMU Slot20-CMU
Slot18-MPU
FAN17 FAN18
Slot17-MPU

Slot16-LPU
FAN15 FAN16
Slot15-LPU
Slot14-LPU
FAN13 FAN14
Slot13-LPU

Slot12-LPU
FAN11 FAN12
Slot11-LPU
Slot10-LPU Slot Slot Slot Slot Slot Slot
FAN9 FAN10
Slot9-LPU 21 22 23 24 25 26

Slot8-LPU S S S S S S
FAN7 F F F F F F FAN8
Slot7-LPU U U U U U U
Slot6-LPU
FAN5 FAN6
Slot5-LPU

Slot4-LPU
FAN3 FAN4
Slot3-LPU
Slot2-LPU
FAN1 FAN2
Slot1-LPU

PM17 PM18 PM19 PM20 Socket20 Socket19 Socket18 Socket17

PM13 PM14 PM15 PM16 Socket16 Socket15 Socket14 Socket13

PM9 PM10 PM11 PM12 Socket12 Socket11 Socket10 Socket9

PM5 PM6 PM7 PM8 Socket8 Socket7 Socket6 Socket5

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Area A Area B Area B Area A

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 419
CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-13 Slot layout in the CE12804S chassis

Front Rear

Area A Area B Area B Area A

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Slot5-MPU Slot6-MPU
Slot4-LPU
Slot3-LPU
Slot8-SFU FAN1 FAN2 FAN3
Slot7-SFU
Slot2-LPU
Slot1-LPU

Figure 22-14 Slot layout in the CE12808S chassis

Front Rear

Slot9-MPU Slot10-MPU
Slot8-LPU
Slot7-LPU
Slot6-LPU FAN4 FAN5 FAN6

Slot5-LPU
Slot14-SFU
Slot13-SFU

Slot12-SFU
Slot11-SFU
Slot4-LPU FAN1 FAN2 FAN3
Slot3-LPU
Slot2-LPU
Slot1-LPU

PM5 PM6 PM7 PM8 Socket8 Socket7 Socket6 Socket5

PM1 PM2 PM3 PM4 Socket4 Socket3 Socket2 Socket1

Area A Area B Area B Area A

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 420

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-15 Slot layout in the CE12804E chassis

Front Rear

Slot4-LPU Slot Slot Slot Slot Slot Slot

FAN5 7 8 9 10 11 12 FAN6
Slot3-LPU
Slot2-LPU S S S S S S
FAN3
FAN1 F F F F F F FAN4
Slot1-LPU U U U U U U
Slot5-MPU Slot6-MPU
FAN1 FAN2
PM1 PM2 PM3 PM4

Area A Area B

Figure 22-16 Slot layout in the CE12808E chassis

Front Rear

Slot8-LPU
Slot7-LPU
Slot6-LPU
Slot5-LPU Slot Slot Slot Slot Slot Slot
Slot4-LPU 11 12 13 14 15 16
FAN4 FAN5
Slot3-LPU S S S S S S
F F F F F F
Slot2-LPU U U U U U U
Slot1-LPU
Slot9-MPU Slot10-MPU

PM PM PM PM PM PM PM PM
1 2 3 4 5 6 7 8 FAN1 FAN2 FAN3

Area A Area B

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 421

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-17 Slot layout in the CE12816E chassis

Front Rear

Slot16-LPU
Slot15-LPU
Slot14-LPU
Slot13-LPU
FAN8 FAN9
Slot12-LPU
Slot11-LPU
Slot10-LPU
Slot Slot Slot Slot Slot Slot
Slot9-LPU 19 20 21 22 23 24

Slot8-LPU S S S S S S
F F F F F F
Slot7-LPU U U U U U U
Slot6-LPU
Slot5-LPU
Slot4-LPU FAN6 FAN7
Slot3-LPU
Slot2-LPU
Slot1-LPU
Slot17-MPU Slot18-MPU

PM PM PM PM PM PM PM PM PM PM
1 2 3 4 5 6 7 8 9 10 FAN1 FAN2 FAN3 FAN4 FAN5

Area A Area B

CE8800, CE7800, CE6800, and CE5800

On the front panel of the CE8800, CE7800, CE6800, and CE5800 series switches (except the
CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-HI, CE6875EI, CE8860EI,
CE8861EI, and CE8868EI), the slots at two sides are power module slots, and the two slots in
the middle are fan module slots, as shown in Figure 22-18.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 422

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-18 Front panel of the CE8800, CE7800, CE6800, and CE5800 series switches
(except the CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI, CE6850U-HI, CE6875EI,
CE8860EI, CE8861EI, and CE8868EI)
1 3 4 2

Figure 22-19 shows the slots on the front panel of the CE6850HI, CE6855-48T6Q-HI,
CE6856-48T6Q-HI, CE6850U-HI, and CE6875EI switches.

Figure 22-19 Front panel of the CE6850HI, CE6855-48T6Q-HI, CE6856-48T6Q-HI,

CE6850U-HI, CE6875EI switches
Fan module slot Fan module slot Power module slot Power module slot

1 2 1 2 ID STAT STAT STAT STAT

PWR1
FAN1

CONSOLE
SYS
MST

060A-F
FAN-
060A-F
FAN-

USB

ACT
FAN2

PWR2
ETH

Figure 22-20 shows the slots on the front panel of the CE8860, CE8861, and CE8868 switch.

Figure 22-20 Front panel of the CE8860EI, CE8861EI, and CE8868EI switch
Fan module slot Fan module slot Power module slot Power module slot

STAT

CE8860-4C-EI
FAN1

FAN2

FAN3

PWR1

1K2WA-F
整机条码

MAC地址

SLOT
180A-F
FAN-

180A-F
FAN-

1 2 3 4
1 2 ID STAT
PWR2

CONSOLE
SYS
MST
1K2WA-F

USB
ACT

STAT STAT
ETH

Figure 22-21 shows the slots on the front panel of the CE8850-64CQ-EI switch.

Figure 22-21 Front panel of the CE8850-64CQ-EI switch

Power module slot Power module slot

Fan module slot Fan module slot Fan module slot

STAT

CE8850-64CQ-EI
FAN1

FAN2

FAN3

PWR1

1K2WA-F

整机条码

MAC地址

SLOT
180A-F
FAN-

180A-F
FAN-

180A-F
FAN-

1 2 3 4
1 2 ID STAT
PWR2

CONSOLE
SYS
MST
1K2WA-F

USB
ACT

STAT STAT STAT

ETH

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 423

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.2.11 What Does It Mean When the SYS Indicator on the

CE8800&7800&6800&5800 Series Switches Is Steady Red?
On the CE8800&7800&6800&5800 series switches (except the CE6850-48T4Q-EI), the
steady red state of the SYS indicator means one of the following:
l The system fails to start.
l At least one power module does not work normally.
l At least one fan module does not work normally.
On the CE6850-48T4Q-EI, the steady red state of the SYS indicator means one of the
following:
l The system fails to start.
l At least one power module does not work normally.
l At least one fan module does not work normally.
l The card power consumption exceeds the rated power of the power modules.

22.2.12 What Optical Modules Does the CE6850-48S4Q-EI

Support?
A CE6850-48S4Q-EI switch has 48 10GE SFP+ optical interfaces and 4 40GE QSFP+ optical
interfaces. The 10GE SFP+ optical interfaces supports 10GE and GE optical modules as well
as GE copper modules (supporting 10/100/1000 Mbit/s transmission rates). The 40GE QSFP+
optical interfaces support 40GE optical modules.

NOTE

A 40GE interface can be split into four 10GE interfaces.

22.2.13 What Is the Maximum Output Power of the

CE12800&CE12800E Series Switches?
Table 22-5 provides the maximum output power of each CE12800&CE12800E chassis
model.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 424

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-5 Maximum output power of CE12800&CE12800E switches

Chassis Model Maximum Output Maximum Output Maximum Output
Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12804 chassis Using PAC-2700WA l N+N backupc (N N+N backup, N+1

power modules: ≤ 2): 2200 W x 2 backup, and N+0
l 380 V three- = 4400 W modes (N ≤ 2): 3000
phase, 220 V W x 2 = 6000 W
l N+1 backup and
single-phase, or N+0 modes (N ≤
110 V dual-live- 3): 2200 W x 3 =
wire AC input: 6600 W
N+N backup, N
+1 backup, and
N+0 modes (N ≤
2): 2700 W x 2 =
5400 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 3): 1200
W x 3 = 3600
W
– N+0 mode (N
≤ 4): 1200 W
x 4 = 4800 W
Using
PHD-3000WA
power modules:
l 380 V three-
phase, 220 V
single-phase, or
110 V dual-live-
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
2): 3000 W x 2 =
6000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 3): 1500
W x 3 = 4500
W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 425

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

– N+0 mode (N
≤ 4): 1500 W
x 4 = 6000 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 426

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12808 chassis Using PAC-2700WA l N+N backupc (N N+N backup, N+1

power modules: ≤ 4): 2200 W x 4 backup, and N+0
l 380 V three- = 8800 W modes (N ≤ 4): 3000
phase, 220 V W x 4 = 12000 W
l N+1 back and N
single-phase, or +0 modes (N ≤
110 V dual-live- 5): 2200 W x 5 =
wire AC input: 11000 W
N+N backup, N
+1 backup, and
N+0 modes (N ≤
4): 2700 W x 4 =
10800 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 7): 1200
W x 7 = 8400
W
– N+0 mode (N
≤ 8): 1200 W
x 8 = 9600 W
Using
PHD-3000WA
power modules:
l 380 V three-
phase, 220 V
single-phase, or
110 V dual-live-
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
4): 3000 W x 4 =
12000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 7): 1500
Wx7=
10500 W
– N+0 mode (N
≤ 8): 1500 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 427

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

x 8 = 12000
W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 428

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12812 chassis Using PAC-2700WA l N+N backupc (N N+N backup, N+1

power modules: ≤ 6): 2200 W x 6 backup, and N+0
l 380 V three- = 13200 W modes (N ≤ 6): 3000
phase, 220 V W x 6 = 18000 W
l N+1 back and N
single-phase, or +0 modes (N ≤
110 V dual-live- 8): 2200 W x 8 =
wire AC input: 17600 W
N+N backup, N
+1 backup, and
N+0 modes (N ≤
6): 2700 W x 6 =
16200 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 11):
1200 W x 11
= 13200 W
– N+0 mode (N
≤ 12): 1200
W x 12 =
14400 W
Using
PHD-3000WA
power modules:
l 380 V three-
phase, 220 V
single-phase, or
110 V dual-live-
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
6): 3000 W x 6 =
18000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 11):
1500 W x 11
= 16500 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 429

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

– N+0 mode (N
≤ 12): 1500
W x 12 =
18000 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 430

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12816 chassis Using PAC-2700WA l N+N backupc (N N+N backup, N+1

power modules: ≤ 10): 2200 W x backup, and N+0
l 380 V three- 10 = 22000 W modes (N ≤ 10):
phase, 220 V 3000 W x 10 =
l N+1 back and N
single-phase, or 30000 W
+0 modes (N ≤
110 V dual-live- 13): 2200 W x 13
wire AC input: = 28600 W
– N+N backupc
(N ≤ 10):
2700 W x 10
= 27000 W
– N+1 back and
N+0 modes
(N ≤ 11):
2700 W x 11
= 29700 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 19):
1200 W x 19
= 22800 W
– N+0 mode (N
≤ 20): 1200
W x 20 =
24000 W
Using
PHD-3000WA
power modules:
l 380 V three-
phase, 220 V
single-phase, or
110 V dual-live-
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
10): 3000 W x 10
= 30000 W
l 110 V single-
live-wire AC
input:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 431

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

– N+1 backup
(N ≤ 19):
1500 W x 19
= 28500 W
– N+0 mode (N
≤ 20): 1500
W x 20 =
30000 W

CE12804S chassis Using l N+N backupc (N N+N backup, N+1

PHD-3000WA ≤ 2): 2200 W x 2 backup, and N+0
power modules: = 4400 W modes (N ≤ 2): 3000
l 380 V three- W x 2 = 6000 W
l N+1 backup and
phase, 220 V N+0 modes (N ≤
single-phase, or 3): 2200 W x 3 =
110 V dual-live- 6600 W
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
2): 3000 W x 2 =
6000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 3): 1500
W x 3 = 4500
W
– N+0 mode (N
≤ 4): 1500 W
x 4 = 6000 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 432

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12808S chassis Using l N+N backupc (N N+N backup, N+1

PHD-3000WA ≤ 4): 2200 W x 4 backup, and N+0
power modules: = 8800 W modes (N ≤ 4): 3000
l 380 V three- W x 4 = 12000 W
l N+1 back and N
phase, 220 V +0 modes (N ≤
single-phase, or 5): 2200 W x 5 =
110 V dual-live- 11000 W
wire AC input:
N+N backup, N
+1 backup, and
N+0 modes (N ≤
4): 3000 W x 4 =
12000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 7): 1500
Wx7=
10500 W
– N+0 mode (N
≤ 8): 1500 W
x 8 = 12000
W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 433

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12804E chassis l 220 V single- l N+N backup (N 240 V DC input:

phase AC input, ≤ 2): 2200 W x 2 l N+N backup (N
or 110 V dual- = 4400 W ≤ 2): 3000 W x 2
live-wire AC l N+1 backup (N ≤ = 6000 W
input: 3): 2200 W x 3 = l N+1 backup (N ≤
– N+N backup 6600 W 3): 3000 W x 3 =
(N ≤ 2): 3000 l N+0 mode (N ≤ 9000 W
W x 2 = 6000 4): 2200 W x 4 =
W l N+0 backup (N ≤
8800 W 4): 3000 W x 4 =
– N+1 backup 12000 W
(N ≤ 3): 3000
W x 3 = 9000
W
– N+0 backup
(N ≤ 4): 3000
Wx4=
12000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 3): 1500
W x 3 = 4500
W
– N+0 mode (N
≤ 4): 1500 W
x 4 = 6000 W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 434

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12808E chassis l 220 V single- l N+N backup (N 240 V DC input:

phase AC input, ≤ 4): 2200 W x 4 l N+N backup (N
or 110 V dual- = 8800 W ≤ 4): 3000 W x 4
live-wire AC l N+1 backup (N ≤ = 12000 W
input: 7): 2200 W x 7 = l N+1 backup (N ≤
– N+N backup 15400 W 7): 3000 W x 7 =
(N ≤ 4): 3000 l N+0 mode (N ≤ 21000 W
Wx4= 8): 2200 W x 8 =
12000 W l N+0 backup (N ≤
17600 W 8): 3000 W x 8 =
– N+1 backup 24000 W
(N ≤ 7): 3000
Wx7=
21000 W
– N+0 backup
(N ≤ 8): 3000
Wx8=
24000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 7): 1500
Wx7=
10500 W
– N+0 mode (N
≤ 8): 1500 W
x 8 = 12000
W

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 435

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Chassis Model Maximum Output Maximum Output Maximum Output

Power of AC Power of DC Power of High-
Power Modules Power Modules Voltage DC
Power Modules

CE12816E chassis l 220 V single- l N+N backup (N 240 V DC input:

phase AC input, ≤ 5): 2200 W x 5 l N+N backup (N
or 110 V dual- = 11000 W ≤ 5): 3000 W x 5
live-wire AC l N+1 backup (N ≤ = 15000 W
input: 9): 2200 W x 9 = l N+1 backup (N ≤
– N+N backup 19800 W 9): 3000 W x 9 =
(N ≤ 5): 3000 l N+0 mode (N ≤ 27000 W
Wx5= 10): 2200 W x 10
15000 W l N+0 backup (N ≤
= 22000 W 10): 3000 W x 10
– N+1 backup = 30000 W
(N ≤ 9): 3000
Wx9=
27000 W
– N+0 backup
(N ≤ 10):
3000 W x 10
= 30000 W
l 110 V single-
live-wire AC
input:
– N+1 backup
(N ≤ 9): 1500
Wx9=
13500 W
– N+0 mode (N
≤ 10): 1500
W x 10 =
15000 W

NOTE

N+N backupc: If the actual chassis power consumption exceeds the maximum output power provided by
power modules in the N+N backup mode, this backup mode cannot be used. The N+1 backup mode is
recommended in this case.
If the AC power modules use a 110 V power source, follow these suggestions:
1. Use double live wires. In this case, the output power of a power module is 2700 W/3000 W.
2. If only one live wire is used, the output power of a power module is 1200 W/1500 W. In this case, it
is recommended that you use more power modules or change the power module backup mode to
increase the output power.

22.3 Hardware - Power Module

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 436

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.3.1 How Do I Configure Power Modules for the CE Series

Switches?

CE12800 and CE12800E

Power redundancy modes for the CE12800 and CE12800E series switches

Power modules in a CE12800 or a CE12800E series switch can work in N+N backup, N+1
backup, or N+0 mode. To ensure power reliability, it is recommended that you use the N+N
backup mode and connect the power modules to two power supply systems. In this way, the
switch will not be powered off or restart if one power supply system fails.

NOTE

N is the number of power modules configured based on actual power consumption of a chassis. The
maximum power capacity of the system is the total maximum output power of N power modules.
l N+N backup: N power modules supply power for the chassis, and N power modules work as backup
to implement power redundancy.
l N+1 backup: N power modules supply power for the chassis, and one power module works as
backup to implement power redundancy.
l N+0 (no backup): N power modules supply power for the chassis, and no power module works as
backup.

The CE12800 and CE12800E series switches do not support the PoE function.

Power module configuration modes for the CE12800 and CE12800E series switches

Configuration of power modules varies depending on the power redundancy mode:

l In N+N backup mode, power module (PM) slots in the chassis are divided into area A
and area B, and power modules in the two areas work as a hot backup for each other, as
shown in Slot layout in the CE12804 chassis, Slot layout in the CE12808 chassis, Slot
layout in the CE12812 chassis, Slot layout in the CE12816 chassis, Slot layout in the
CE12804S chassis, Slot layout in the CE12808S chassis, Slot layout in the
CE12804E chassis, Slot layout in the CE12808E chassis, and Slot layout in the
CE12804E chassis. To use the N+N backup mode, install N power modules in the PM
slots in area A, and the other N power modules in the PM slots in area B. For example,
to use the 4+4 backup mode in a CE12812 chassis, install four power modules in any
four slots among PM1, PM2, PM5, PM6, PM9, and PM10, and the other four power
modules in any four slots among PM3, PM4, PM7, PM8, PM11, and PM12.
l In N+1 backup or N+0 mode, power module slots are not divided into two areas for
backup, and N+1 or N power modules can be installed in any PM slots. However, you
are advised to install (N+1)/2 or N/2 power modules in area A and the other power
modules in area B. (Here, area division used in the N+N backup mode is mentioned only
for convenience of description. Actually, area A and area B do not back up each other.) If
N+1 or N is an odd number, the redundant one can be installed in either area A or area B.
– For example, to use the 6+0 mode in a CE12812 chassis, you are advised to install
three power modules in any three slots among PM1, PM2, PM5, PM6, PM9, and
PM10, and the other three power modules in any three slots among PM3, PM4,
PM7, PM8, PM11, and PM12.
– To use the 6+1 backup mode in a CE12812 chassis, you are advised to install four
power modules in any four slots among PM1, PM2, PM5, PM6, PM9, and PM10,
and the other three power modules in any three slots among PM3, PM4, PM7, PM8,

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 437

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

PM11, and PM12. Alternatively, install three power modules in any three slots
among PM1, PM2, PM5, PM6, PM9, and PM10, and the other four power modules
in any four slots among PM3, PM4, PM7, PM8, PM11, and PM12.

CE8800&7800&6800&5800
The CE8800, CE7800, CE6800, and CE5800 series switches have two power module slots, in
which pluggable power modules can be installed to provide power to the chassis. A chassis
can use one or two power modules. Double power modules can provide higher reliability.
The CE8800, CE7800, CE6800, and CE5800 series switches support double power modules
working in 1+1 backup mode.
l When both power modules are working normally, each of them provides half of the
power required for the chassis.
l When one power module fails, the other one provides all power required for the chassis.
NOTE

l If only one power module is installed in a switch, the switch generates power module absence
alarms for the idle power slots.
l Failure of a single power module does not affect operations of the switch but will degrade the
reliability of the switch.
All power modules are hot swappable. The CE8800, CE7800, CE6800, and CE5800 series
switches do not support the PoE function.

NOTE
Power modules in a chassis must have the same power and same heat dissipation method.

22.3.2 What Types of Power Modules Do CE12800&CE12800E

Series Switches Support?

NOTE

Power modules of the CE12800&CE12800E series switches are hot swappable. After you remove a
power module from the chassis, wait at least 30 seconds before installing it back into the chassis.

l AC&high-voltage DC power modules that receive AC power inputs can be used together
with AC power modules in a chassis.
l In other cases, AC, DC, and AC&high-voltage DC power modules cannot be used together
in a chassis.

Table 22-6 lists the CE12804/CE12808/CE12812/CE12816/CE12804S/CE12808S switch

product and version support for various power modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 438

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-6 CE12804/CE12808/CE12812/CE12816/CE12804S/CE12808S switch product and

version support for power modules
Power CE12804 CE12808 CE12812 CE12816 CE12804 CE12808
Module Chassis Chassis Chassis Chassis S Chassis S Chassis
Name

PAC-2700 A A A A Not Not

WA maximum maximum maximum maximum supported supported
NOTE of 4 power of 8 power of 12 of 20
This modules modules power power
module supported supported modules modules
will not in an AC in an AC supported supported
be
chassis or chassis or in an AC in an AC
recomme
nded an an chassis or chassis or
since AC&high- AC&high- an an
January voltage voltage AC&high- AC&high-
2017. DC DC voltage voltage
chassis, chassis, DC DC
not not chassis, chassis,
supported supported not not
in a DC in a DC supported supported
chassis chassis in a DC in a DC
NOTE NOTE chassis chassis
This This NOTE NOTE
power power This This
module is module is power power
supported supported module is module is
in in supported supported
V100R00 V100R00 in in
1C00 and 1C00 and V100R00 V100R00
later later 1C00 and 3C00 and
versions. versions. later later
versions. versions.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 439

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Power CE12804 CE12808 CE12812 CE12816 CE12804 CE12808

Module Chassis Chassis Chassis Chassis S Chassis S Chassis
Name

PDC-2200 A A A A A A
WA maximum maximum maximum maximum maximum maximum
of 4 power of 8 power of 12 of 20 of 4 power of 8 power
modules modules power power modules modules
supported supported modules modules supported supported
in a DC in a DC supported supported in a DC in a DC
chassis, chassis, in a DC in a DC chassis, chassis,
not not chassis, chassis, not not
supported supported not not supported supported
in an AC in an AC supported supported in an in an
or or in an AC in an AC AC&high- AC&high-
AC&high- AC&high- or or voltage voltage
voltage voltage AC&high- AC&high- DC DC
DC DC voltage voltage chassis chassis
chassis chassis DC DC NOTE NOTE
NOTE NOTE chassis chassis This This
This This NOTE NOTE power power
power power This This module is module is
module is module is power power supported supported
supported supported module is module is in in
in in supported supported V100R00 V100R00
V100R00 V100R00 in in 5C00 and 5C00 and
2C00 and 2C00 and V100R00 V100R00 later later
later later 2C00 and 3C00 and versions. versions.
versions. versions. later later
versions. versions.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 440

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Power CE12804 CE12808 CE12812 CE12816 CE12804 CE12808

Module Chassis Chassis Chassis Chassis S Chassis S Chassis
Name

PHD-3000 A A A A A A
WA maximum maximum maximum maximum maximum maximum
of 4 power of 8 power of 12 of 20 of 4 power of 8 power
modules modules power power modules modules
supported supported modules modules supported supported
in an AC in an AC supported supported in an in an
chassis or chassis or in an AC in an AC AC&high- AC&high-
an an chassis or chassis or voltage voltage
AC&high- AC&high- an an DC DC
voltage voltage AC&high- AC&high- chassis, chassis,
DC DC voltage voltage not not
chassis, chassis, DC DC supported supported
not not chassis, chassis, in a DC in a DC
supported supported not not chassis chassis
in a DC in a DC supported supported NOTE NOTE
chassis chassis in a DC in a DC This This
NOTE NOTE chassis chassis power power
This This module is module is
NOTE NOTE
power power supported supported
This This
module is module is in in
power power
supported supported V100R00 V100R00
module is module is
in in 5C00 and 5C00 and
supported supported
V100R00 V100R00 later later
in in
5C00 and 5C00 and versions. versions.
V100R00 V100R00
later later 5C00 and 5C00 and
versions. versions. later later
versions. versions.

Table 22-7 lists the CE12804E/CE12808E/CE12816E switch product and version support for
various power modules.

Table 22-7 CE12800E series switch product and version support for power modules
Power Module CE12804E Chassis CE12808E Chassis CE12816E Chassis
Name

PAC3000S54 A maximum of 4 A maximum of 8 A maximum of 10

power modules power modules power modules
supported in the supported in the supported in the
chassis chassis chassis
NOTE NOTE NOTE
This module is This module is This module is
supported in supported in supported in
V200R002C50 and V200R002C50 and V200R002C50 and
later versions. later versions. later versions.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 441

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Power Module CE12804E Chassis CE12808E Chassis CE12816E Chassis

Name

PDC2200S54-CB A maximum of 4 A maximum of 8 A maximum of 10

power modules power modules power modules
supported in the supported in the supported in the
chassis chassis chassis
NOTE NOTE NOTE
This module is This module is This module is
supported in supported in supported in
V200R002C50 and V200R002C50 and V200R002C50 and
later versions. later versions. later versions.

22.3.3 What Are Specifications of AC Power Cables for the CE

Series Switches?

CE12800, CE12800E
The AC power cables applicable to the CE12800, CE12800E series switches depend on the
type of power sockets used in your equipment room. Two types of AC power cables are
available to suit different power sockets: PDU power cable and country-specific power cable.
l PDU power cables are delivered with a power distribution unit (PDU) with C20 straight
sockets. A PDU power cable has a C19 straight female connector at one end and a C20
straight male connector at the other end, as shown in Figure 22-22.
l Country-specific power cables are delivered in compliance with standards of the
destination country or region. For example, AC power cables used in China have PI
angle male connectors, as shown in Figure 22-23.
If PDUs with C20 straight sockets are available in a cabinet, use PDU power cables
complying with local standards.
If there is no PDU with C20 straight sockets in a cabinet, use power cables specific to the
country or region where the switch is used.

Figure 22-22 PDU power cable and PDU

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 442

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-23 China-specific power cable and power strip

Connection

An AC power cable transmits AC power to a chassis and allows maximum current of 16 A.

An AC power cable is connected in the following way:

l The C19 straight female connector is connected to a socket on the power distribution unit
at the rear of the CE12800 chassis.
l The country-specific connector or C20 straight male connector at the other end is
connected to an external power outlet.

CE8800, CE7800, CE6800, and CE5800

AC power cables applicable to the CE8800, CE7800, CE6800, and CE5800 series switches
include PDU power cables (C13 straight female to C14 straight male) and country-specific
power cables (C13 straight female to PI straight male). The two types of AC power cables
differ in the connector used to connect to the power outlet.

l 150 W/350 W/600 W AC power modules: The AC power sockets or directly connected
circuit breakers must have a current rating of 10 A.
l 350 W DC power modules: The directly connected circuit breakers must have a current
rating of 16 A.
l 600 W/1200 W AC&240 V DC power modules: The AC power sockets or directly
connected circuit breakers must have a current rating of 10 A.
l 600 W/1200 W high-voltage DC power modules: The directly connected circuit breakers
must have a current rating of 10 A.
NOTE

When 110 V power input is provided to a 1200 W AC&240 V DC power module, the AC power socket
or directly connected circuit breaker must have a current rating of 16 A.
If a switch uses two power modules for 1+1 power redundancy, the superior circuit breaker for the
power distribution box or PDU to which the power modules are connected must have a current rating of
25 A.
The AC power cables delivered with a switch must comply with the standards used in the delivery
destination.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 443

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.3.4 Do Power Modules for the CE Series Switches Have a

Power Switch?

CE12800 and CE12800E

Power modules for the CE12804/CE12808/CE12812/CE12816/CE12804S/CE12808S switch
does not have a power switch. There are two power switches on the front panel of the chassis
to control power supply to the chassis (except the CE12804S). It is recommended to turn on
both switches to power on the device. Both switches must be turned off to power off the
device.

Power modules for the CE12804E/CE12808E/CE12816E switch have a power switch.

CE8800&7800&6800&5800
Some power modules for the CE8800, CE7800, CE6800, and CE5800 switches have a power
switch, as listed in Table 22-8.

Table 22-8 Power modules for the CE8800, CE7800, CE6800, and CE5800 series switches

Power Have Power Switch

Module

PAC-150WA Yes

ES0W2PSA015 Yes
0

PAC-350WA-B Yes

PAC-350WA-F Yes

PDC-350WA-B No

PDC-350WA-F No

PAC-600WA-B Yes

PAC-600WA-F Yes

PAC-600WB-B No

PAC-600WB-F No

PHD-600WA-B No

PHD-600WA-F No

PAC-1K2WA-B No

PAC-1K2WA-F No

PHD-1K2WA-B No

PHD-1K2WA-F No

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 444

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Power Have Power Switch

Module

PDC-1K2WA-B No

PDC-1K2WA-F No

22.3.5 What Are Possible Causes of Power Module Alarms on the

CE Series Switches?
A power module reports alarms in the following conditions:
1. The power module fails to provide normal output due to environmental factors. For
example, the power module is not connected to any external power source, the
environment temperature is too high, or the input voltage is too high or too low. Alarms
generated in this condition are sent to the network management system. When such an
alarm is reported, you can fix the environmental problem to enable the power module to
work normally.
2. The power module has a fault that cannot be automatically rectified. For example, fans in
the power module fail, internal components of the power module overheat, or a fuse is
burnt. When such an alarm is reported, send the power module to Huawei or Huawei
agent for repair.
3. Software of the power module does not work normally. For example, software load has
not completed. When such an alarm is reported, upgrade software of the power module.

Power Module Indicators of CE12800&CE12800E Series Switches

Table 22-9 lists the indicators on 2700 W AC and 3000 W AC&high-voltage DC power
modules and describes the meaning of each indicator state.

Table 22-9 Description of indicators on the 2700 W AC and 3000 W AC&high-voltage DC

power modules
Indicator Color Description

Input Green l Steady on: The input power of the power

module is in the normal range.
l Blinking: The input voltage is out of the
normal range.
l Off: The power module receives no input
power.

Output Green l Steady on: The output power of the power

module is in the normal range.
l Off: The power module provides no output
power.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 445

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Indicator Color Description

Alarm Red l Off: The power module is working normally.

l Steady on: The power module has failed.
Possible causes include internal short circuit,
fan failure, output overvoltage,
overtemperature-triggered shutdown,
communication failure, and severely uneven
current.

Table 22-10 lists the indicators on a 2200 W DC power module and describes the meaning of
each indicator state.

Table 22-10 Description of indicators on a 2200 W DC power module

Indicator Color Description

INPUT Green l Steady on: The input power of the power

module is in the normal range.
l Blinking: The input voltage is out of the
normal range.
l Off: The power module receives no input
power.

OUTPUT Green l Steady on: The output power of the power

module is in the normal range.
l Off: The power module provides no output
power.

ALARM Red l Off: The power module is working normally.

l Steady on: The power module has failed.
Possible causes include internal short circuit,
fan failure, output overvoltage,
overtemperature-triggered shutdown,
communication failure, and severely uneven
current.

Power Module Indicator of CE8800&7800&6800&5800 Series Switches

Table 22-11, Table 22-12, Table 22-13, Table 22-14, and Table 22-15 describe the indicator
on AC, DC, and high-voltage DC power modules of the CE8800&7800&6800&5800.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 446

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-11 Indicator on 150 W (PAC-150WA)/350 W/600 W AC power modules

Indicator Color Description

STATUS: Green l Off: The AC power input is abnormal (for

running status example, no input, overvoltage, or undervoltage)
indicator or the AC power output is abnormal (for
example, overvoltage, overcurrent, short-circuit,
or overtemperature).
l Steady on: The power module is working
normally.

Table 22-12 Indicator on a 150 W (ES0W2PSA0150) AC power module

Indicator Color Description

STATUS: Green l Off: The power input is abnormal (for example,

running status no input, overvoltage, or undervoltage) or the
indicator power output is abnormal (for example,
undervoltage or overtemperature).
l Steady on: The power module is working
normally.
l Blinking: The power output is abnormal (for
example, output overvoltage, overcurrent, or short
circuit).

Table 22-13 Indicator on a 350 W/1200 W DC power module

Indicator Color Description

STATUS: Green l Off: The DC power input is abnormal (for

running status example, no input, overvoltage, or undervoltage)
indicator or the DC power output is abnormal (for
example, overvoltage, overcurrent, short-circuit,
or overtemperature).
l Steady on: The power module is working
normally.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 447

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-14 Indicator on the 600 W/1200 W AC&240 V DC power module

Indicator Color Description

STAT: running - Off: The power module receives no power input.

status indicator
Green l Steady on: The power module is working
normally.
l Blinking: The power module is in loading or
standby state, or the power cable has been
connected but the power module is not installed
in the switch.

Red Steady on:

l Fans of the power module fail.
l The power module is in overtemperature
protection state.
l The power input is abnormal (input undervoltage
or input overvoltage).
l The power output is abnormal (output
overcurrent, output short-circuit, or output
overvoltage).

Table 22-15 Indicator on the 600 W/1200 W high-voltage DC power module

Indicator Color Description

STAT: running - Off: The power module receives no power input.

status indicator
Green l Steady on: The power module is working
normally.
l Blinking: The power module is in loading or
standby state, or the power cable has been
connected but the power module is not installed
in the switch.

Red Steady on:

l Fans of the power module fail.
l The power module is in overtemperature
protection state.
l The power input is abnormal (input undervoltage
or input overvoltage).
l The power output is abnormal (output
overcurrent, output short-circuit, or output
overvoltage).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 448

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.3.6 Do Power Modules in a Switch Have Any Requirement on

Input Voltage Fluctuation?
Power modules used on CE series switches are independent of each other. You only need to
ensure that the input voltage of each power module fluctuates within the specified range and
do not need to care about differences in the voltage phases or amplitudes of different power
modules.

22.3.7 Does a 3000 W AC&High-Voltage DC Power Module

Support AC Power Input?
A 3000 W AC&high-voltage DC power module supports 220 V/110 V AC power input and
240 V DC input, and provides 53.5 V DC/3000 W output.

NOTE

When AC power supply is used and the input voltage is lower than or equal to 175 V AC, the rated
output power reduces to 1500 W.

22.3.8 Are Power Modules and Fan Modules of CE8800, CE7800,

CE6800, and CE5800 Series Switches Interchangeable?
Power modules and fan modules of CE8800, CE7800, CE6800, and CE5800 series switches
are not interchangeable. A switch must use the power modules and fan modules matching its
model. Table 22-16 lists the power modules and fan modules applicable to different CE8800,
CE7800, CE6800, and CE5800 models and version support for these modules.

If the CE8800, CE7800, CE6800, and CE5800 switches use power modules that do not match
their product models, the switches generate an alarm and may be powered off due to power
shortage.
When the power module and fan module use forcible heat dissipation, they must use the same
airflow method. For example, if the power module with back-to-front airflow is used, the fan
module with back-to-front airflow must be used. Type-B power modules can only be used
with type-B fan modules and cannot be used with type-F fan modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 449

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-16 Applicable power modules, fan modules, and version support
Series Model Power Module Fan Module

CE8800 CE8860-4C-EI 1200 W AC&240 V DC l FAN-180A-B

CE8861-4C-EI power modules: l FAN-180A-F
CE8868-4C-EI l PAC-1K2WA-B (P
means power module
CE8850-64CQ-EI and AC means
alternating current; B
means back-to-front
airflow, air exhaust on
power module panel.)
l PAC-1K2WA-F (F
means front-to-back
airflow, air intake on
power module panel.)

1200 W high-voltage DC
power modules:
l PHD-1K2WA-B
l PHD-1K2WA-F

1200 W DC power
modules:
l PDC-1K2WA-B
l PDC-1K2WA-F

CE8850-32CQ-EI 600 W AC power modules: l FAN-40HA-B

l PAC-600WA-B l FAN-40HA-F
l PAC-600WA-F

CE7800 CE7850-32Q-EI 600 W AC power modules: l FAN-40HA-B

CE7855-32Q-EI l PAC-600WA-B l FAN-40HA-F
l PAC-600WA-F

CE6800 CE6850-48S4Q- 350 W AC power modules: l FAN-40EA-B

EI l PAC-350WA-B l FAN-40EA-F
l PAC-350WA-F

350 W DC power modules:

l PDC-350WA-B (DC
means direct current)
l PDC-350WA-F

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 450

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Series Model Power Module Fan Module

CE6850-48T4Q- 350 W AC power modules: l FAN-40EA-B

EI l PAC-350WA-B l FAN-40EA-F
l PAC-350WA-F
NOTE
600 W AC power modules are
recommended for the
CE6850-48T4Q-EI of
V100R002C00 or a later
version.

600 W AC power modules:

l PAC-600WA-B
l PAC-600WA-F

CE6850-48S6Q- 600 W AC&240 V DC l FAN-060A-B

HI power modules: l FAN-060A-F
CE6850U-48S6Q l PAC-600WB-B
-HI l PAC-600WB-F
CE6850-48T6Q-
HI 600 W high-voltage DC
power modules:
CE6855-48T6Q-
HI l PHD-600WA-B
CE6856-48T6Q- l PHD-600WA-F
HI
1200 W DC power
CE6850U-24S2Q modules:
-HI
l PDC-1K2WA-B
CE6875-48S4CQ-
l PDC-1K2WA-F
EI

CE6810-48S4Q- 350 W DC power modules: l FAN-40EA-B

EI l PDC-350WA-B l FAN-40EA-F
CE6810-48S4Q- l PDC-350WA-F
LI
CE6810-48S-LI 600 W AC power modules:
CE6810-32T16S4 l PAC-600WA-B
Q-LI l PAC-600WA-F
CE6810-24S2Q-
LI
CE6851-48S6Q-
HI
CE6855-48S6Q-
HI
CE6856-48S6Q-
HI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 451

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Series Model Power Module Fan Module

CE6860-48S8CQ- 350 W DC power modules: l FAN-40HA-B

EI l PDC-350WA-B l FAN-40HA-F
CE6865-48S8CQ- l PDC-350WA-F
EI
CE6870-24S6CQ- 600 W AC power modules:
EI l PAC-600WA-B
CE6870-48S6CQ- l PAC-600WA-F
EI
CE6880-24S4Q2
CQ-EI
CE6880-48S4Q2
CQ-EI

CE6870-48T6CQ 600 W AC power modules: l FAN-40HA-B

-EI l PAC-600WA-B l FAN-40HA-F
CE6880-48T4Q2 l PAC-600WA-F
CQ-EI

CE6857-48S6CQ- 350 W DC power modules: l FAN-031A-B

EI l PDC350S12-CB l FAN-031A-F
l PDC350S12-CF

600 W AC power modules:

l PAC600S12-B
l PAC600S12-F

CE5800 CE5880-48T4Q2 600 W AC power modules: l FAN-40HA-B

CQ-EI l PAC-600WA-B l FAN-40HA-F
l PAC-600WA-F

CE5850-48T4S2 150 W AC power module: l FAN-40EA-B

Q-EI PAC-150WA l FAN-40EA-F
CE5850-48T4S2 350 W DC power modules:
Q-HI
l PDC-350WA-B
l PDC-350WA-F

CE5810-24T4S- 150 W AC power module: l FAN-40SB-B

EI PAC-150WA l FAN-40SB-F
CE5810-48T4S- 350 W DC power modules:
EI
l PDC-350WA-B
l PDC-350WA-F

CE5855-48T4S2 150 W AC power module: l FAN-040A-B

Q-EI ES0W2PSA0150 l FAN-040A-F
CE5855-24T4S2
Q-EI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 452

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Series Model Power Module Fan Module

350 W DC power modules:

l PDC-350WA-B
l PDC-350WA-F

22.3.9 What Are Differences Between PM and PEM?

Differences between PM and PEM are:

l A PM is a power module used to supply power to the equipment. Figure 22-24 shows
the appearance of a PM.

Figure 22-24 PM appearance

l A PEM is the power entry module on the chassis, an iron frame that provides power
inputs to PMs and provides other functions such as wave filtering. Generally, a PEM is
included in the chassis sales part. Figure 22-25 shows the appearance of a PEM.

Figure 22-25 PEM appearance

22.3.10 How Do I Calculate the Number of Power Modules

Required in a CE12800 or CE12800E Switch?

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 453

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The Hardware Configuration Tool helps you quickly calculate the number of power
modules required in a CE12800 or CE12800E switch. The calculator is also integrated in the
UniSTAR system.
You can also use the following formula to calculate the number of power modules required:
Minimum number of power modules required = Sum of maximum power consumption of all
working modules in the switch/Maximum power of a single power module (integral part of
the result) + 1
For example, a CE12808 switch uses 2700 W AC power modules and is configured with two
CE-CMUAs, five CE-SFU08As, two CE-MPUAs, and two CE-L48XS-EC line cards. Based
on the power consumption values of the cards provided in the "Cards" section of the
Hardware Description and the power consumption of the chassis (including fans) and power
modules, the sum of maximum power consumption of all modules can be obtained: 2519 W.
Therefore, a minimum of one 2700 W power module is required.
To ensure power reliability of a CE12800 switch, it is recommended that you use the N+N
backup mode with double power supply systems so that the failure of a single power supply
system will not cause power failure or restart of the switch. In the preceding example, the 1+1
backup mode is recommended.

22.3.11 Do CE Series Switches Support High-Voltage DC Power

Supply?
China's national standard for high-voltage DC power supply was released in December 2011
and took effect in February 2012. The standard defines power supply with 240 V DC (192 V
to 288 V). The International Electrotechnical Commission (IEC) released the 380 V DC (260
V to 400 V) power supply standard, ETSI EN 300 132-3-1 V2.1.1, in February 2012. Because
the two standards were released not long ago and define different voltage ranges, power
supply manufacturers have not released power supply products complying with the high-
voltage DC power supply standards. All the manufacturers use AC power modules in 240 V
DC power supply scenarios.
CE series AC chassis modules can work in a certain high-voltage DC voltage range. For
security purpose, power modules of the switches provide overvoltage protection function and
will cut off power supply when the input voltage exceeds the upper limit. The voltage
protection function prevents damage to power modules or other dangers caused by abnormal
input voltage. The voltage upper limit triggering overvoltage protection is larger than the
maximum input voltage allowed by a power module.
The 240 V DC input standard has higher requirements for power module protection
components and secure distance than the 220 V AC input standard. Current, AC power
modules can work with 240 V DC power input.

22.3.12 Are CE Series Switches Required to Use Matching Power

Modules?
CE series switches must use matching power modules. Using unmatched power modules may
cause unexpected risks. The chassis and power modules adopt foolproof designs to prevent
misuse of power modules.
For the mapping between CloudEngine chassis models and power modules, see the "Power
Module" section in the Hardware Description.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 454

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.3.13 What Are the Differences Among N+0, N+1, and N+N
Backup Modes of Power Modules?

In the N+1 backup mode, N power modules provide power supply, and one power module
acts as a backup. If one power module fails, the redundant power module provides power
supply to ensure normal operations of the switch.

In the N+N backup mode, N power modules provide power supply, and N power modules act
as backups. Even if all the N primary power modules fail, the N redundant power modules
can still ensure normal operations of the switch.

In the N+0 mode, N power modules provide power supply, and no redundant power module is
available. If one power module fails and the total output of the other power modules is smaller
than the actual power consumption of the switch, the switch cannot run normally.

22.3.14 Can a CE12808 Switch Be Configured with Four Power

Modules in the 2+2 Backup Mode?

The 2+2 power module configuration is supported as long as the output power of the power
modules is sufficient for the switch.

22.3.15 Are Power Cables and Power Modules of CE Series

Switches Hot Swappable?

All power modules of CE series switches are hot swappable.

All power cables are hot swappable if they are connected to matching power modules.

22.4 Hardware - Fan Module

22.4.1 How Is Heat Dissipated from the CE Series Switches?

CE12804/CE12808/CE12812/CE12816/CE12804S/CE12808S
NOTE

l The CE12804/CE12808/CE12812/CE12816 chassis use the same heat dissipation mode. The
CE12812 chassis is used as an example here.
l The CE12804S/CE12808S chassis use the same heat dissipation mode. The CE12808S chassis is
used as an example here.
l If a CE12800 chassis is not fully loaded with cards, cover vacant slots with filler panels to ensure
efficient heat dissipation and EMC compliance.

Figure 22-26 shows the airflow for heat dissipation of SFUs and power modules in a
CE12812 chassis.

l Cold air flows into the chassis from the air intake between the LPU cage and power
modules and reaches the bottom of the SFU cage. After cold air flows upwards through

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 455

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

the SFU cage, it turns into hot air and is exhausted from the chassis by the fan modules
above SFUs.
l Cold air flows into the power modules from air holes on power module panels and is
blown through the power module area by built-in fans of the power modules. Cold air
then becomes hot air, passes through the backplane, and goes out of the chassis from air
holes on the power distribution unit.

Figure 22-26 Airflow for heat dissipation of SFUs and power modules (side view)
Backplane

CMU FAN
Hot air
MPU

LPU

SFU
LPU
Front Rear

LPU

Cold air

PM Power distribution unit

Cold air
Backplane
Hot air

Figure 22-27 shows the airflow for heat dissipation of MPUs, CMUs, and LPUs in a
CE12812 chassis. Cold air flows into the chassis through air holes on these cards, and goes

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 456

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

through the cards to dissipate the heat. After that, cold air turns into hot air, bypasses the
backplane, and is finally exhausted from the chassis by the fan modules at two sides of the
SFUs.

Figure 22-27 Airflow for heat dissipation of MPUs, CMUs, and LPUs (top view)

Hot air Rear Hot air

FAN SFU FAN

Backplane

MPU、CMU、LPU

Cold air
Cold air
Front
Hot air

Figure 22-28 shows the airflow for heat dissipation of MPUs, SFUs, LPUs, and power
modules in a CE12808S chassis.
l Cold air flows into the chassis through air holes on panels of the MPUs, SFUs, LPUs,
and goes through these cards to dissipate the heat. After that, cold air turns into hot air,
goes through the backplane, and is finally exhausted from the chassis by the fan modules
at the rear of the chassis.
l Cold air flows into the power modules from air holes on power module panels and is
blown through the power module area by built-in fans of the power modules. Cold air
then becomes hot air, passes through the backplane, and goes out of the chassis from air
holes on the power distribution unit.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 457

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-28 Airflow for heat dissipation of MPUs, SFUs, LPUs, and power modules (side
view)

Backplane

Front MPU Rear

Cold air LPU Hot air

FAN

Cold air SFU Hot air

Cold air SFU Hot air

FAN
Cold air LPU Hot air

PM Power distribution unit

Cold air

Backplane Hot air

CE12804E/CE12808E/CE12816E
NOTE

l The CE12804E has a heat dissipation mode different from other chassises.
l The CE12808E/CE12816E chassis use the same heat dissipation mode. The CE12808E chassis is
used as an example here.
l If a CE12800 chassis is not fully loaded with cards, cover vacant slots with filler panels to ensure
efficient heat dissipation and EMC compliance.

The SFUs in the CE12804E chassis are cooled in the following way:

1. Cold air flows into the chassis from the SFU air intake vents below the chassis header at
the front of the chassis, and then arrives at the top of the SFUs.
2. Cold air goes down through the SFU cage and becomes hot air, which is exhausted out of
the chassis by the two fan modules at the bottom left and bottom right.

Figure 22-29 shows the airflow for heat dissipation of SFUs.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 458

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-29 Airflow for heat dissipation of the SFUs (side view)

Cold air

LPU

SFU
Front Rear
MPU

PM FAN Hot air

Cold air

Hot air

The MPUs and LPUs in the CE12804E chassis are cooled in the following way:
1. Front panels of the MPUs and LPUs have air holes. Cold air flows from these air holes
to the MPUs and LPUs.
2. Cold air turns into hot air and goes through two sides of the SFUs in the middle. Finally,
hot air is exhausted from the chassis by the fan modules at both sides of the SFU cage.
Figure 22-30 shows the airflow for heat dissipation of the MPUs and LPUs.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 459

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-30 Airflow for heat dissipation of the MPUs and LPUs (top view)
Hot air Rear Hot air

FAN SFU FAN

MPU、LPU

Cold air
Cold air
Front
Hot air

Power modules in the CE12804E chassis use a front-to-back airflow design.

1. There are air holes on power module panels. Cold air flows into the power modules from
these holes and is exhausted from the power module area by fans of the power modules.
2. Hot air is exhausted out of the chassis from the power module air exhaust area at the rear
lower part of the chassis.
Figure 22-31 shows the airflow for heat dissipation of power modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 460

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-31 Airflow for heat dissipation of the power modules (side view)

LPU

SFU
Front Rear
MPU

FAN
Cold air PM

Hot air

Cold air

Hot air

The SFUs in the CE12808E chassis are cooled in the following way:
1. Cold air flows into the chassis from the SFU air intake vents below the chassis header at
the front of the chassis, and then arrives at the top of the SFUs.
2. Cold air goes down through the SFU cage and becomes hot air, which is exhausted out of
the chassis by the three fan modules below the SFUs.
Figure 22-32 shows the airflow for heat dissipation of SFUs.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 461

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-32 Airflow for heat dissipation of the SFUs (side view)

Cold air

LPU

SFU
Front Rear

LPU

MPU

FAN Hot air

PM

Cold air

Hot air

The MPUs and LPUs in the CE12808E chassis are cooled in the following way:
1. Front panels of the MPUs and LPUs have air holes. Cold air flows from these air holes
to the MPUs and LPUs.
2. Cold air turns into hot air and goes through two sides of the backplane in the middle.
Finally, hot air is exhausted from the chassis by the fan modules at both sides of the SFU
cage.
Figure 22-33 shows the airflow for heat dissipation of the MPUs and LPUs.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 462

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-33 Airflow for heat dissipation of the MPUs and LPUs (top view)
Hot air Rear Hot air

FAN SFU FAN

MPU、LPU

Cold air
Cold air
Front
Hot air

Power modules in the CE12808E chassis use a front-to-back airflow design.

1. There are air holes on power module panels. Cold air flows into the power modules from
these holes and is exhausted from the power module area by fans of the power modules.
2. Hot air is exhausted out of the chassis from the power module air exhaust area at the rear
lower part of the chassis.
Figure 22-34 shows the airflow for heat dissipation of power modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 463

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-34 Airflow for heat dissipation of the power modules (side view)

LPU

SFU
Front Rear
LPU

MPU

FAN
Cold air PM

Hot air

Cold air

Hot air

CE8800&7800&6800&5800
The CE8800&7800&6800&5800 series switches are cooled through front-to-back or back-to-
front airflow, depending on the airflow directions of the fan modules and power modules used
in the chassis. Each fan module and power module has an airflow flag.
l Front-to-back airflow: Power modules and fan modules with front-to-back airflow are

identified by a or flag. Air flows into the chassis from the power
supply side and is exhausted from the port side, as shown in Figure 22-35 (using a
CE5800 chassis as an example).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 464

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Back-to-front airflow: Power modules and fan modules with back-to-front airflow are

identified by a or flag. Air flows into the chassis from the port side
and is exhausted from the power supply side, as shown in Figure 22-36 (using a CE5800
chassis as an example).
NOTE

l The CE5850EI and CE5810EI series switches support 1+1 redundancy of fan modules. A CE5850EI
or CE5810EI switch can work normally with a single fan module, but the device reliability degrades
in this case.
l The CE5850HI, CE5855EI, CE5880EI, CE6800, and CE7800 switches have two power modules,
each of which consists of two fans. The four fans in a switch work in 3+1 redundancy mode.
l Power modules using forced air cooling and fan modules in a switch must have the same airflow
direction. For example, power modules with back-to-front airflow must be used with fan modules
with back-to-front airflow.
l When a switch uses fanless 150 W AC power modules, it can use fan modules with either of the
airflow directions based on the actual conditions.

Figure 22-35 Front-to-back airflow

CONSOLE CE5850-48T4S2Q-EI
STATUS STATUS STATUS STATUS
SYS
MST

ACT
L/A

ID

ETH
PAC-150WA ~100-240V;50/60Hz,2.5A FAN-40EA-F PWR1 FAN1 FAN2 PWR2 FAN-40EA-F PAC-150WA ~100-240V;50/60Hz,2.5A

1 2
3 4
1 2
48
46 47
44 45
42 43
40 41
38 39
37
36
34 35
32 33
30 31
28 29
26 27
25
24
22 23
20 21
18 19
16 17
14 15
13
12
10 11
8 9
6 7
4 5
2 3
1

Cold air
Hot air

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 465

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-36 Back-to-front airflow

CONSOLE CE5850-48T4S2Q-EI
STATUS STATUS STATUS STATUS
SYS
MST

ACT
L/A

ID

ETH
PAC-150WA ~100-240V;50/60Hz,2.5A FAN-40EA-B PWR1 FAN1 FAN2 PWR2 FAN-40EA-B PAC-150WA ~100-240V;50/60Hz,2.5A

1 2
3 4
1 2
48
46 47
44 45
42 43
40 41
38 39
37
36
34 35
32 33
30 31
28 29
26 27
25
24
22 23
20 21
18 19
16 17
14 15
13
12
10 11
8 9
6 7
4 5
2 3
1

SYS
MST
STAT
SPEED

Cold air
STACK

4S2Q-EI
CE5850-48T
MODE/ID

Hot air

Airflow of a switch cannot be changed through software, but you can determine the airflow
by selecting specific power modules and fan modules.

l Power modules with different airflow directions or power values cannot be used in the
same switch.
l Fan modules with different airflow directions cannot be used in the same switch.
l An alarm will be generated if a switch does not use any power module and fan module
combination listed in Table 22-17.

Table 22-17 lists the combinations of power modules and fan modules allowed by
CE8800&7800&6800&5800 series switches.

Table 22-17 Allowed combinations of power modules and fan modules

Series Fan Module Power Module Airflow Chassis

Airflow Airflow

CE5800 Back-to-front N/A (no fans) Back-to-front

airflow airflow

Front-to-back N/A (no fans) Front-to-back

airflow airflow

Back-to-front Back-to-front airflow Back-to-front

airflow airflow

Front-to-back Front-to-back airflow Front-to-back

airflow airflow

CE6800 Back-to-front Back-to-front airflow Back-to-front

airflow airflow

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 466

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Series Fan Module Power Module Airflow Chassis

Airflow Airflow

Front-to-back Front-to-back airflow Front-to-back

airflow airflow

CE7800 Back-to-front Back-to-front airflow Back-to-front

airflow airflow

Front-to-back Front-to-back airflow Front-to-back

airflow airflow

CE8800 Back-to-front Back-to-front airflow Back-to-front

airflow airflow

Front-to-back Front-to-back airflow Front-to-back

airflow airflow

22.4.2 Why Are Fans in a CE Series Switch Run at Full Speed?

CE12800 and CE12800E

The following situations may cause full-speed running of fans in a CE12800 or CE12800E
series switch:

1. The cards in a zone overheat, and fans in this zone must run at full speed to lower card
temperature.
2. Some cards in a zone have all temperature sensors failed and card temperature cannot be
obtained.
3. Management channels in a zone are interrupted, so the system cannot obtain card
temperature in this zone.
4. The management channels of some fans are interrupted, so the speed of these fans cannot
be adjusted based on real-time card temperature.
5. If any of the preceding situations occurs in a zone, fans in the adjacent zones with
running cards also run at full speed.
6. No Centralized Monitoring Module (CMU) is installed in the switch or the CMUs in the
switch have failed.
7. Fans also run at full speed when you set the fan speed to the highest using the set fan-
speed command.

You can see alarm messages on the network management system in situations 1 to 5.

CE8800, CE7800, CE6800, and CE5800

The following situations may cause full-speed running of fans in a
CE8800&7800&6800&5800 series switch:

1. There is only one fan module in the switch. In this case, the switch generates fan module
absence alarms for idle fan slots, and fans in the present fan module work at full speed.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 467

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

2. Power modules and fan modules in the switch use different airflow designs. In this case,
the system reports alarms about inconsistent airflow directions of the power modules and
fan modules. Inconsistent airflow directions between power modules, fan modules, or
between power modules and fan modules degrade system reliability when the switch
needs to work in a high-temperature environment for a long time, and shorten service life
of the switch.
3. The management channels of some fans are interrupted, so the speed of these fans cannot
be adjusted based on real-time equipment temperature.
4. Fans also run at full speed when you set the fan speed to the highest using the set fan-
speed command.

22.4.3 Why Is the Indicator of a Fan Module Steady Red or

Blinking Red?

Possible Causes
l The fan module is not installed properly in the fan slot.
l Fan blades are blocked or stop rotating because of heavy dust.
l The fan module is faulty.

Troubleshooting Procedure
1. Pull out the fan module and reinstall it to ensure that it is securely installed in the slot.
(Fan modules are hot swappable.)
2. Remove the fan module from the chassis and check whether the fan blades are blocked
or whether there is too much dust on the fan blades.
– If fan blades are blocked by an obstacle, remove the obstacle.
– If the fan blades have heavy dust, use a brush to clean the fan blades.
3. If the problem persists, install another fan module of the same model into the fan slot. If
the new fan module can work normally, the original fan module has failed and needs to
be replaced.

22.4.4 What Are Possible Causes of Fan Module Alarms on the CE

Series Switches?
A fan module reports alarms in the following conditions:
1. The device management module cannot monitor the fan module because communication
with the fan module fails. In this case, a communication loss alarm is reported in this fan
slot and the indicator on the fan module fast blinks green.
2. The system cannot adjust the speed of fans in the fan module and considers the fan
module failed. In this case, a fan failure alarm is reported and the indicator on the fan
module slowly blinks red.

22.4.5 Are Fan Modules on CE Series Switches Hot Swappable?

Fan modules on CE series switches are hot swappable.
You can run the display device fan command to check the running status of fan modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 468

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.5 Hardware - Card

22.5.1 What Does it Mean When an Indicator Is Yellow on a Card

of a CE12800 or CE12800E Series Switch?
Table 22-18 describes the yellow indicators on various cards of a CE12800 or CE12800E
series switch.

Table 22-18 Yellow indicators on cards of a CE12800 or CE12800E series switch

Card Indicator Color Description
Name

MPU RUN/ALM: Yellow Steady on: The card is in power-off state. (For
running example, the card has been forcibly powered
SFU status off using the power off command or is about
CMU indicator to start.)

LPU RUN/ALM: Yellow l Steady on: The card is in power-off state.

running (For example, the card has been forcibly
status powered off using the power off command
indicator or is about to start.)
l Blinking: When the card is installed in the
CE12804/CE12808/CE12812/CE12816
chassis, you can run the set device id-led
{ on | off } [ slot slot-id ] command in the
diagnostic view to configure the PWR,
FAN, SFU, and MPU indicators on the
chassis header and RUN/ALM indicator of
the card to blink yellow simultaneously. In
this way, maintenance personnel can
quickly find the chassis and card.

Service port Yellow Blinking: The port is transmitting or receiving

indicator data.

22.5.2 Are Cards of the CE12800&CE12800E Series Switches Hot

Swappable?
All the cards of the CE12800&CE12800E series switches are hot swappable.

l Main Processing Units (MPUs) and Centralized Monitoring Units (CMUs) support 1:1
hot standby.
l Switch Fabric Units (SFUs) support N+M hot standby. To remove an SFU, hold down
the OFL button (at the bottom of the enlarged image) for at least 6s until the OFL

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 469

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

indicator turns red (at the top of the enlarged image). Then remove the SFU from the
chassis. Packets may be lost if you remove the SFU before the OFL indicator turns red.
CE-SFU04
RUN/ALM
OFL

OFL

22.5.3 What CMU Models Are Applicable to the CE12800 Series

Switches?
The CE12804S/CE12808S chassis do not have independent CMUs, and their monitoring
modules are integrated on the MPUs.
CMUs of the CE12804/CE12808/CE12812/CE12816 chassis include CE-CMUA and CE-
CMUB. They differ in the following ways:
l They monitor and manage different quantities of power modules and fan modules.
l They are applicable to different chassis models and installed in CMU slots with different
slot IDs.
Table 22-19 describes differences between the CE-CMUA and CE-CMUB

Table 22-19 Differences between the CE-CMUA and CE-CMUB

CMU Maximum Maximum Applicable Chassis Model and Slot ID
Model Number of Number of
Power Fan
Modules Modules
Monitored Monitored
and and
Managed Managed

CE- 12 17 l Slot 7 and slot 8 of a CE12804 chassis

CMUA l Slot 11 and slot 12 of a CE12808 chassis
l Slot 15 and slot 16 of a CE12812 chassis

CE- 20 23 Slot 19 and slot 20 of a CE12816 chassis

CMUB

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 470

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.5.4 What Are Functions of the Ports on a CE-CMU?

Figure 22-37 shows the ports on a CE-CMU.

Figure 22-37 Ports on a CE-CMU

ETH port RS485 port I/O port

CE-CMUA
RUN/ALM
ACT

ETH RS485 0 RS485 1 ALM IN ALM OUT

ETH port

It is a management port and supports rates of 10 Mbit/s, 100 Mbit/s, and 1000 Mbit/s. This
port is reserved for future use.
RS485 port

Ports RS485 0 and RS485 1 are reserved for future function extension.
I/O port

Ports ALM IN and ALM OUT are reserved for future function extension.

22.5.5 Do Ports on a CE-L24XS-EC Card Support GE Optical

Modules?
Yes, ports on a CE-L24XS-EC port card support GE optical modules. A CE-L24XS-EC card
provides packet processing and traffic management on twenty-four 10GE optical ports.
l When the 10GE ports work in 10GE mode, they support SFP+ 10GE optical modules,
and can work with 10GE Twinax high-speed cables or AOC cables.
l When the 10GE ports work in GE mode, they support SFP 1000BASE-X optical
modules and 1000BASE-T copper modules. When using a 1000BASE-T copper module,
a port supports 10M/100M/1000M auto-sensing.

22.5.6 What Are Differences Between CE-L24XS-ED and CE-

L48XS-EC Cards?
A CE-L24XS-ED card has 24 10GE optical interfaces that share one chip. A CE-L48XS-EC
card has 48 10GE optical interfaces that share two chips.
The ED and EC series interfaces cards support different numbers of FIB entries and ACLs,
but they have the same MAC address table size.

22.5.7 How Much Is the Power Consumption of a CE-L36LQ-EG

Card?

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 471

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The typical power consumption of a CE-L36LQ-EG card is 605 W, and its maximum power
consumption is 986 W.
You can obtain hardware specifications of the CE series switches using the Hardware Query
Tool.

22.5.8 How Do I Know Version Support for Various Cards of the

CE12800&CE12800E?
You can use the Hardware Query Tool to quickly find the version support for a card of the
CE12800&CE12800E or refer to the "Version Mapping" section of the specific card model
under "Cards" in the Hardware Description.

22.5.9 What Are the Naming Conventions of CE Series Switches

and Cards?

CE12800 and CE12800E

Figure 22-38 shows the naming conventions of the CE12800 and CE12800E series switches.

Figure 22-38 Naming conventions of the CE12800 and CE12800E series switches

CE128 04 S
A B C
Table 22-20 describes the naming conventions of the CE12800 and CE12800E series
switches.

Table 22-20 Naming conventions of the CE12800 and CE12800E series switches
Identifier Meaning Description

A CloudEngine series data Stands for the CE12800 series data center core
center core switches switches.

B Number of LPU slots l 04: The chassis has 4 line card slots.
l 08: The chassis has 8 line card slots.
l 12: The chassis has 12 line card slots.
l 16: The chassis has 16 line card slots.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 472

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Identifier Meaning Description

C Extended field S: slim, chassis with a smaller depth. Two slim

chassis models are available: CE12804S and
CE12808S.
E: Enhanced model. Three enhanced chassis
models are available: CE12804E, CE12808E,
and CE12816E.

Cards
Figure 22-39 shows the naming conventions of the CE12800's line cards.

Figure 22-39 Naming conventions of the CE12800's line cards

CE - L 24 L Q - EC1
A B C D E F
Table 22-21 describes the naming conventions of the CE12800's line cards.

Table 22-21 Naming conventions of the CE12800's line cards

Identifier Meaning Description

A Brand It is fixed as CE, representing CloudEngine.

B Line card type l L: Line Processing Unit for CE12800 series

switches
l F: Flexible Service Unit for CE12800 series
switches

C Number of interfaces on For a line card with different types of interfaces,

the card this field stands for the number of downlink
interfaces. It has two digits. The first digit is 0 if
the card has less than 10 interfaces.

D Interface rate l G: GE interface

l X: 10GE interface
l Y: 25GE interface
l L: 40GE interface
l C: 100GE interface

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 473

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Identifier Meaning Description

E Interface type l T: Base-T interface

l S: SFP/SFP+ interface
l X: XFP interface
l Q: QSFP+/QSFP28 interface
l F: CFP/CFP2/CFP4 interface
l C: CXP interface

F Line card specifications l BA/EA/EC/EC1: basic specifications

l ED/EF/EG/FD/FD1/FG/FG1/SD: enhanced
specifications

Figure 22-40 shows the naming conventions of the CE12800E's line cards.

Figure 22-40 Naming conventions of the CE12800E's line cards

Table 22-22 describes the naming conventions of the CE12800E's line cards.

Table 22-22 Naming conventions of the CE12800E's line cards

Identifier Meaning Description

A Brand It is fixed as CE, representing CloudEngine.

B Line card type l L: Line Processing Unit for CE12800E series

switches
l F: Flexible Service Unit for CE12800E series
switches

C Number of interfaces on For a line card with different types of interfaces,

the card this field stands for the number of downlink
interfaces. It has two digits. The first digit is 0 if
the card has less than 10 interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 474

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Identifier Meaning Description

D Interface rate l G: GE interface

l X: 10GE interface
l Y: 25GE interface
l L: 40GE interface
l C: 100GE interface

E Interface type l T: Base-T interface

l S: SFP/SFP+ interface
l X: XFP interface
l Q: QSFP+/QSFP28 interface
l F: CFP/CFP2/CFP4 interface
l C: CXP interface

F Line card specifications l ED/EG/EGA/FD: enhanced specifications

G Applicable chassis E: line card applicable to CE12800E chassis

model X: line card with the XGS chip

CE8800, CE7800, CE6800, and CE5800

Figure 22-41 shows the naming conventions of the CE8800, CE7800, CE6800, and CE5800
series switches.

Figure 22-41 Naming conventions of the CE8800, CE7800, CE6800, and CE5800 series
switches

CE6850U-48S6Q-EI
A B C D E F

Table 22-23 describes the naming conventions of the CE8800, CE7800, CE6800, and
CE5800 series switches.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 475

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-23 Naming conventions of the CE8800, CE7800, CE6800, and CE5800 series
switches
Ide Meaning
ntifi
er

A CloudEngine series data center switches

l CE88: CE8800 series
l CE78: CE7800 series
l CE68: CE6800 series
l CE58: CE5800 series

B Product model category:

l 10: basic model
l 50/51/55/56: advanced model
l 60/61/68:
– CE6860: advanced model
– CE8860/CE8861/CE8868: model supporting flexible service units
l 70: model with a large buffer size
l 80: model with Huawei-developed chips

C Special function flag. This flag is not present if the product does not provide special
functions.
U: model supporting Fiber Channel (FC) interfaces

D Number and type of downlink interfaces:

l T: GE/10GBase-T electrical interfaces.
l S: GE/10GE SFP+ or 25GE SFP28 optical interfaces.
l Q: 40GE QSFP+ optical interfaces.
l xC: For a model supporting flexible service units, x stands for the number of
slots and C is a slot identifier.

E Number and type of uplink interfaces:

l T: GE/10GBase-T electrical interfaces
l S: GE/10GE SFP+ optical interfaces
l Q: 40GE QSFP+ optical interfaces
l CQ: 40GE/100GE QSFP28 optical interfaces
NOTE
This field is not present in the product name if the product has only fixed interfaces and the
uplink and downlink interfaces are the same type or if the product supports flexible service
units.

F Product model type:

l LI: model providing basic functions
l EI: model providing enhanced functions
l HI: model providing advanced functions

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 476

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.6 Hardware - Cable

22.6.1 What Precautions Should Be Taken When Using Optical

Fibers?
Optical Fiber Overview
The connector type of an optical fiber is the same as the interface type of the optical module
to which the optical fiber is connected. Connector types of optical fibers include LC, SC, FC,
ST, MU, and MPO. LC connectors are the most widely used.
Optical fibers are classified into multimode and single-mode optical fibers:
l Most of multimode optical fibers are orange, but a few multimode optical fibers are other
colors. For example, optical fibers with MPO connectors are light green. Multimode
optical fibers can be used with multimode optical modules to implement low-cost, short-
distance transmission.
l Single-mode optical fibers are yellow. They can be used with single-mode optical
modules to implement long-distance transmission.
Precautions for use of Optical Fibers
l The bend radius of optical fibers must be larger than the minimum bend radius allowed
by the optical fibers. Otherwise, the optical fibers will be damaged, and quality of optical
signals will degrade.
l Do not look into an optical port without eye protection, or the laser may hurt your eyes.
l It is recommended that idle fiber connectors be covered with dust-proof caps to keep the
fiber connectors clean. An unclean fiber connector may degrade the quality of optical
signals or even cause link failures or error codes on the link.

22.6.2 What Are Active Copper/Optical Cables?

Active copper/optical cables can an external energy source to extend signal transmission
distances.
Table 22-24 lists the active high-speed copper cables supported by the CE series switches.

Table 22-24 Attributes of active high-speed copper cables

Model Length Electrical Connector Type
Attribute

SFP-10G-AC7M 7m Active SFP+ to SFP+

SFP-10G-AC10M 10 m Active SFP+ to SFP+

Table 22-25 lists the active optical cables (AOCs) supported by the CE series switches.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 477

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-25 Attributes of AOC cables

Model Length Electrical Connector Type
Attribute

SFP-10G-AOC-3M 3m Active SFP+ to SFP+

SFP-10G-AOC-5M 5m Active SFP+ to SFP+

SFP-10G-AOC-7M 7m Active SFP+ to SFP+

SFP-10G-AOC10M 10 m Active SFP+ to SFP+

SFP-10G-AOC20M 20 m Active SFP+ to SFP+

QSFP-H40G- 10 m Active QSFP+ to QSFP+

AOC10M

SFP-25G-AOC-3M 3m Active SFP28 to SFP28

SFP-25G-AOC-5M 5m Active SFP28 to SFP28

SFP-25G-AOC-7M 7m Active SFP28 to SFP28

SFP-25G-AOC-10M 10 m Active SFP28 to SFP28

QSFP-4SFP10- 10 m Active QSFP+ to 4*SFP+

AOC10M

CXP-100G- 10 m Active CXP to CXP

AOC10M

QSFP-100G- 10 m Active QSFP28 to QSFP28

AOC-10M

QSFP-100G- 30 m Active QSFP28 to QSFP28

AOC-30M

22.6.3 What Types of High-Speed Copper Cables Do CE Series

Switches Support?
NOTE

The CE series switches must use high-speed cables that are certified for Huawei Ethernet switches.
High-speed copper cables that are not certified for Huawei Ethernet switches cannot ensure transmission
reliability and may affect service stability. Huawei is not liable for any problem caused by the use of
high-speed copper cables that are not certified for Huawei Ethernet switches and will not fix such
problems.

Types of High-Speed Copper Cable

Table 22-26 describes different types of high-speed copper cable.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 478

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-26 Types of high-speed copper cable

Model Len Electric Connector Type Part Number
gth al
Attribu
te

SFP-10G-CU1M 1m Passive SFP+ to SFP+ 02310MUN

SFP-10G-CU3M 3m Passive SFP+ to SFP+ 02310MUP

SFP-10G-CU5M 5m Passive SFP+ to SFP+ 02310QPR

SFP-10G-AC7M 7m Active SFP+ to SFP+ 02310QPS

SFP-10G-AC10M 10 Active SFP+ to SFP+ 02310MUQ

m

QSFP-40G-CU1M 1m Passive QSFP+ to QSFP+ 02310MUG

QSFP-40G-CU3M 3m Passive QSFP+ to QSFP+ 02310MUH

QSFP-40G-CU5M 5m Passive QSFP+ to QSFP+ 02310MUJ

QSFP-4SFP10G-CU1M 1m Passive QSFP+ to 4*SFP+ 02310MUK

QSFP-4SFP10G-CU3M 3m Passive QSFP+ to 4*SFP+ 02310MUL

QSFP-4SFP10G-CU5M 5m Passive QSFP+ to 4*SFP+ 02310MUM

CXP-100G-CU1M5 1.5 Passive CXP to CXP 02311BKY

m

CXP-100G-CU3M 3m Passive CXP to CXP 02311BLA

SFP-25G-CU1M 1m Passive SFP28 to SFP28 02311NKS

SFP-25G-CU3M 3m Passive SFP28 to SFP28 02311NKV

SFP-25G-CU3M-N 3m Passive SFP28 to SFP28 02311MNV

SFP-25G-CU5M 5m Passive SFP28 to SFP28 02311MNW

QSFP28-100G-CU1M 1m Passive QSFP28 to QSFP28 02311KNW

QSFP28-100G-CU3M 3m Passive QSFP28 to QSFP28 02311KNX

QSFP28-100G-CU5M 5m Passive QSFP28 to QSFP28 02311KNY

QSFP-4SFP25G-CU1M 1m Passive QSFP28 to 4*SFP28 02311MNX

QSFP-4SFP25G-CU3M 3m Passive QSFP28 to 4*SFP28 02311MNY

QSFP-4SFP25G- 3m Passive QSFP28 to 4*SFP28 02311MPA

CU3M-N

QSFP-4SFP25G-CU5M 5m Passive QSFP28 to 4*SFP28 02311MPB

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 479

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Appearance and Structure

Figure 22-42 shows the appearance of SFP+ to SFP+ and SFP28 to SFP28 high-speed copper
cable.

Figure 22-42 Appearance of SFP+ to SFP+ and SFP28 to SFP28 high-speed copper cable

Figure 22-43 shows the appearance of QSFP+ to QSFP+ and QSFP28 to QSFP28 high-speed
copper cable.

Figure 22-43 Appearance of QSFP+ to QSFP+ and QSFP28 to QSFP28 high-speed copper
cable

Figure 22-44 shows the appearance of QSFP+ to 4*SFP+ and QSFP28 to 4*SFP28 high-
speed copper cable.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 480

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-44 Appearance of QSFP+ to 4*SFP+ and QSFP28 to 4*SFP28 high-speed copper
cable

Figure 22-45 shows the appearance of a CXP-CXP high-speed copper cable.

Figure 22-45 Appearance of a CXP to CXP high-speed copper cable

Figure 22-46 shows the structure of SFP+ to SFP+ and SFP28 to SFP28 high-speed copper
cable.

Figure 22-46 Structure of SFP+ to SFP+ and SFP28 to SFP28 high-speed copper cable
X1 X2

Figure 22-47 shows the structure of QSFP+ to QSFP+ and QSFP28 to QSFP28 high-speed
copper cable.

Figure 22-47 Structure of QSFP+ to QSFP+ and QSFP28 to QSFP28 high-speed copper
cable
X1 X2
Amphenol
Amphenol

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 481

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-48 shows the structure of QSFP+ to 4*SFP+ and QSFP28 to 4*SFP28 high-speed
copper cable.

Figure 22-48 Structure of QSFP+ to 4*SFP+ and QSFP28 to 4*SFP28 high-speed copper
cable

X2

X1 C

Figure 22-49 shows the structure of a CXP to CXP high-speed copper cable.

Figure 22-49 Structure of a CXP to CXP high-speed copper cable

X1 X2

22.6.4 What Precautions Should Be Taken When 1-to-4 Optical

Jumpers Are Routed Through Optical Distribution Frames?

If 1-to-4 optical jumpers are routed to optical distribution frames (ODFs) and connected to
four 10GE multimode optical fibers each to transmit data over a certain distance, pay attention
to the following points:

l Determine the fiber connector type (LC/FC) supported by the ODF and select
appropriate optical jumpers for the supported connector type.
l Optical jumpers on the switches at both ends must be connected to the ODFs at the same
sequence.
l Each pair of TX and RX optical fibers between the ODFs must be cross-connected to
ensure normal transmission between the optical modules at both ends.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 482

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Rx and Tx optical fibers

must be cross-connected
to ensure normal
ODF transmission between ODF
optical modules

Fiber connection
sequence between
two ends
1-to-4 optical CE12804 chassis 1A 1A
CE12804 chassis 1-to-4 optical
jumper CMU CMU 1B 1B CMU CMU jumper
MPU MPU
MPU 2A 2A MPU
LPU 2B 2B LPU
LPU LPU
LPU 3A 3A LPU
LPU 3B 3B LPU

4A 4A
PM1 PM2 PM3 PM4 PM1 PM2 PM3 PM4
4B 4B

NOTE

ODFs rarely support MOP optical jumpers. If the two switches are not far from each other, it is
recommended that they be directly connected using MPO-MPO optical fibers.

22.6.5 There Are 8-Strand, 12-Strand, and 24-Strand MPO Fibers

Available in the Market. What Are Their Differences? Which
Type Is More Suitable for the CE Series Switches?

MPO fibers are used for 40G and 100G optical modules. An MPO fiber consists of multiple
multi-mode fiber strands, and each multi-mode fiber strand provides one laser transmission
channel. Some fiber suppliers produce 8-strand MPO optical fibers, while some suppliers
produce 12-strand or 24-strand MPO fibers.
l A 40G optical module uses four channels to transmit laser and four channels to receive
laser. That is, a total of eight channels are required for a 40G optical module. 8-strand
and 12-strand MPO fibers use the same definition of fiber channels. Therefore, they are
equivalent in functionality when connecting to 40G optical modules.
l When 100G optical modules are used, choose MPO fibers according to the following
principles:
– Choose 24-strand fibers for CXP, CFP, and CFP2 modules.
– Choose 8-strand or 12-strand fibers for QSFP28 modules.

22.6.6 What Are the Pin Assignments of MPO Fibers?

NOTE

l The MPO-MPO, MPO-2*MPO, and MPO-3*MPO fibers have similar appearances except for the
number of MPO connectors at the other end (1, 2, and 3 respectively).
l The MPO-4*DLC, MPO-8*DLC, MPO-10*DLC, and MPO-12*DLC fibers have similar
appearances except for the number of DLC connectors at the other end (4, 8, 10, and 12 pairs
respectively).

Figure 22-50 shows the structure of an MPO-MPO fiber used for a 40GE optical module, and
Table 22-27 lists its pin assignments.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 483

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-50 Structure of an MPO-MPO fiber used for a 40GE optical module
X1 X2

1 1
2 2
3 3
4 4
5 5
6 6
7 7
8 8
9 9
10 10
11 11
12 12

Table 22-27 Pin assignments of an MPO-MPO fiber used for a 40GE optical module
X1 Pin X2 Pin

1 12

2 11

3 10

4 9

9 4

10 3

11 2

12 1

Figure 22-51 shows the structure of an MPO-MPO fiber used for a 100GE optical module,
and Table 22-28 lists its pin assignments.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 484

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-51 Structure of an MPO-MPO fiber used for a 100GE optical module
X1 X2

1 13 1 13
2 X1 14 2 X2 14
3 15 3 15
4 16 4 16
5 17 5 17
6 18 6 18
7 19 7 19
8 20 8 20
9 21 9 21
10 22 10 22
11 23 11 23
12 24 12 24

Table 22-28 Pin assignments of an MPO-MPO fiber used for a 100GE optical module
X1 Pin X2 Pin X1 Pin X2 Pin

1 24 13 12

2 23 14 11

3 22 15 10

4 21 16 9

5 20 17 8

6 19 18 7

7 18 19 6

8 17 20 5

9 16 21 4

10 15 22 3

11 14 23 2

12 13 24 1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 485

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-52 and Figure 22-53 show the structures of MPO-4*DLC and MPO-8*FC fibers.
Their ping assignments are the same, as listed in Table 22-29.

Figure 22-52 Structure of an MPO-4*DLC fiber

X2
1B
X1 1A
2B
2A

4B
1 4A
2
3
4
5
6
7
8
9
10
11
12

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 486

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-53 Structure of an MPO-8*FC fiber

X2
1B
X1 1A

2B

1
4A
2
3
4
5
6
7
8
9
10
11
12

Table 22-29 Pin assignments of MPO-4*DLC and MPO-8*FC fibers

X1 Pin X2 Pin

1 1B

2 2B

3 3B

4 4B

9 4A

10 3A

11 2A

12 1A

Figure 22-54 shows the structure of an MPO-2*MPO fiber, and Table 22-30 lists its pin
assignments.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 487

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-54 Structure of an MPO-2*MPO fiber

X2

X1

X3

13 1 1
X1 X2/X3
14 2 2
15 3 3
16 4 4
17 5 5
18 6 6
19 7 7
20 8 8
21 9 9
22 10 10
23 11 11
24 12 12

Table 22-30 Pin assignments of an MPO-2*MPO fiber

X1 Pin X2 Pin X3 Pin

2 12 NA

3 11 NA

4 10 NA

5 9 NA

7 NA 12

8 NA 11

9 NA 10

10 NA 9

14 1 NA

15 2 NA

16 3 NA

17 4 NA

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 488

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

X1 Pin X2 Pin X3 Pin

19 NA 1

20 NA 2

21 NA 3

22 NA 4

Figure 22-55 shows the structure of an MPO-3*MPO fiber, and Table 22-31 lists its pin
assignments.

Figure 22-55 Structure of an MPO-3*MPO fiber

X2

X1 X3

X4

13 1 1
X1 X2/X3/X4
14 2 2
15 3 3
16 4 4
17 5 5
18 6 6
19 7 7
20 8 8
21 9 9
22 10 10
23 11 11
24 12 12

Table 22-31 Pin assignments of an MPO-3*MPO fiber

X1 Pin X2 Pin X3 Pin X4 Pin

1 NA NA 9

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 489

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

X1 Pin X2 Pin X3 Pin X4 Pin

2 12 NA NA

3 11 NA NA

4 10 NA NA

5 9 NA NA

6 NA 12 NA

7 NA 11 NA

8 NA 10 NA

9 NA 9 NA

10 NA NA 12

11 NA NA 11

12 NA NA 10

13 NA NA 4

14 1 NA NA

15 2 NA NA

16 3 NA NA

17 4 NA NA

18 NA 1 NA

19 NA 2 NA

20 NA 3 NA

21 NA 4 NA

22 NA NA 1

23 NA NA 2

24 NA NA 3

Figure 22-56 shows the structure of an MPO-8*DLC fiber, and Table 22-32 lists its pin
assignments.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 490

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-56 Structure of an MPO-8*DLC fiber

X2
1B
X1 1A
2B
2A

8B
1 13 8A
2 14
3 15
4 16
5 17
6 18
7 19
8 20
9 21
10 22
11 23
12 24

Table 22-32 Pin assignments of an MPO-8*DLC fiber

X1 Pin X2 Pin X1 Pin X2 Pin

2 1A 14 1B

3 2A 15 2B

4 3A 16 3B

5 4A 17 4B

7 5A 19 5B

8 6A 20 6B

9 7A 21 7B

10 8A 22 8B

Figure 22-57 shows the structure of an MPO-10*DLC fiber, and Table 22-33 lists its pin
assignments.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 491

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

If a 100GE interface is split into eight 10GE interfaces, pins 5A/5B and 10A/10B of the MPO-10*DLC
fiber become unusable. The first to fourth 10GE ports use the pins 1A/1B, 2A/2B, 3A/3B, and 4A/4B
respectively; the fifth 10GE interface uses pins 6A/6B; the sixth to eighth 10GE interfaces use pins
7A/7B, 8A/8B, and 9A/9B respectively.

Figure 22-57 Structure of an MPO-10*DLC fiber

X2
1B
X1 1A
2B
2A

10B
1 13 10A
2 14
3 15
4 16
5 17
6 18
7 19
8 20
9 21
10 22
11 23
12 24

Table 22-33 Pin assignments of an MPO-10*DLC fiber

X1 Pin X2 Pin X1 Pin X2 Pin

2 1A 14 1B

3 2A 15 2B

4 3A 16 3B

5 4A 17 4B

6 5A 18 5B

7 6A 19 6B

8 7A 20 7B

9 8A 21 8B

10 9A 22 9B

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 492

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

X1 Pin X2 Pin X1 Pin X2 Pin

11 10A 23 10B

Figure 22-58 shows the structure of an MPO-12*DLC fiber, and Table 22-34 lists its pin
assignments.

Figure 22-58 Structure of an MPO-12*DLC fiber

X2
1B
X1 1A
2B
2A

12B
1 13 12A
2 14
3 15
4 16
5 17
6 18
7 19
8 20
9 21
10 22
11 23
12 24

Table 22-34 Pin assignments of an MPO-12*DLC fiber

X1 Pin X2 Pin X1 Pin X2 Pin

1 1A 13 1B

2 2A 14 2B

3 3A 15 3B

4 4A 16 4B

5 5A 17 5B

6 6A 18 6B

7 7A 19 7B

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 493

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

X1 Pin X2 Pin X1 Pin X2 Pin

8 8A 20 8B

9 9A 21 9B

10 10A 22 10B

11 11A 23 11B

12 12A 24 12B

22.6.7 What Types of Power Cables Do CE12800&CE12800E Series

Switches Support?
NOTE

The figures provided here are for reference only and may differ from the actually delivered cables.

AC Power Cable
The AC power cables applicable to the CE12800&CE12800E series switches depend on the
type of power sockets used in your equipment room. Two types of AC power cables are
available to suit different power sockets: PDU power cable and country-specific power cable.
l PDU power cables are delivered with a power distribution unit (PDU) with C20 straight
sockets. A PDU power cable has a C19 straight female connector at one end and a C20
straight male connector at the other end, as shown in Figure 22-59.
l Country-specific power cables are delivered in compliance with standards of the
destination country or region. For example, AC power cables used in China have PI
angle male connectors, as shown in Figure 22-60.
If PDUs with C20 straight sockets are available in a cabinet, use PDU power cables
complying with local standards.
If there is no PDU with C20 straight sockets in a cabinet, use power cables specific to the
country or region where the switch is used.

Figure 22-59 PDU power cable and PDU

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 494

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-60 China-specific power cable and power strip

Connection
An AC power cable transmits AC power to a chassis and allows maximum current of 16 A. It
is connected in the following way:
l The C19 straight female connector is connected to a socket on the power distribution unit
at the rear of the CE12800&CE12800E chassis.
l The country-specific connector or C20 straight male connector at the other end is
connected to an external power outlet.

DC Power Cable
DC power cables for a CE12800 or CE12800E switch include a -48 V power cable and an
RTN ground cable. DC power cables with the following cross-sectional areas are available: 16
mm2, 25 mm2, and 35 mm2.
You need to cut the delivered DC power cables into appropriate lengths according to actual
situations in your site and make DC power cables onsite.
Figure 22-61 shows the appearance of a DC power cable.

Figure 22-61 Appearance of a DC power cable

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 495

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-62 shows the structure of a DC power cable.

Figure 22-62 Structure of a DC power cable

JG2 M6 terminal OT M8 terminal

Connection
A DC power cable transmits DC power to a chassis and allows maximum current of 62 A. It
is connected in the following way:
l The JG2 M6 terminal is connected to power terminals on the power distribution unit at
the rear of CE12800&CE12800E chassis.
l The OT M8 terminal is connected to an external power source.

High-Voltage DC PDU Power Cable

Figure 22-63 shows a high-voltage DC PDU power cable.

Figure 22-63 High-voltage DC PDU power cable and high-voltage DC PDU

Connection
A high-voltage DC PDU power cable transmits 240 V high-voltage DC power to a chassis
and allows maximum current of 18.5 A. It is connected in the following way:
l The C19 straight female connector is connected to a socket on the power distribution unit
at the rear of the CE12800 chassis.
l The C20 straight male connector is connected as follows:
– If a high-voltage DC PDU is used, directly connect the C20 straight male connector
to a socket on the high-voltage DC PDU.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 496

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

– If a high-voltage DC power distribution box is used, make OT terminals for the

cable. Cut the C20 straight male connector off to expose the wires in the cable.
Connect the brown wire to a negative terminal on the DC power distribution box,
the blue wire to a positive terminal, and the yellow-green wire to protection ground.

22.6.8 What Types of Power Cables Do CE8800&7800&6800&5800

Series Switches Support?

AC Power Cable
NOTE

The AC power cables delivered with a switch must comply with the standards used in the delivery
destination. This section uses the AC power cables used in China as an example.

Two types AC power cables are applicable to the CE8800&7800&6800&5800 series

switches: C13 straight female to PI straight male AC power cable and C13 straight female to
C14 straight male AC power cable. The two types of AC power cables differ in the connector
used to connect to power outlets. The AC power outlets must have a current rating of 10 A.
Figure 22-64 shows a C13 straight female to PI straight male AC power cable.

Figure 22-64 C13 straight female to PI straight male AC power cable

PI straight male
C13 straight connector
female connector

Figure 22-65 shows a C13 straight female to C14 straight male AC power cable.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 497

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-65 C13 straight female to C14 straight male AC power cable

C13 straight C14 straight

female connector male connector

Connection
An AC power cable transmits power to an AC power module in the chassis. It is connected in
the following way:
l The C13 straight female connector is connected to the power socket on the AC power
module.
l The PI/C14 male connector is connected to an external power source.
When a 600/1200 W AC&240 V DC power module uses 240 V DC power input, it must be
connected to a power supply device using a C13 straight female to C14 straight male AC
power cable. This power cable is connected as follows:
l The C13 straight female connector is connected to the power socket on the power
module.
l The C14 straight male connector is connected to a high-voltage DC PDU. If a DC power
distribution box is used, make OT or cord end terminals for the cable. Cut the C14
straight male connector off and crimp OT or cord end terminals on the bare wires.
Connect the blue wire to a positive terminal on the DC power distribution box, the
brown wire to a negative terminal, and the yellow-green wire to a protection ground.

DC Power Cable
DC power cables consist of the power cable for a 350 W DC power module and the power
cable for a 1200 W DC power module.
Figure 22-66 shows the appearance of the power cable for a 350 W DC power module.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 498

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-66 Appearance of the power cable for a 350 W DC power module

Figure 22-67 shows the structure of the power cable for a 350 W DC power module.

Figure 22-67 Structure of the power cable for a 350 W DC power module

Figure 22-68 shows the appearance of the power cable for a 1200 W DC power module.

Figure 22-68 Appearance of the power cable for a 1200 W DC power module

Figure 22-69 shows the structure of the power cable for a 1200 W DC power module.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 499

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-69 Structure of the power cable for a 1200 W DC power module
RTN

+
-

X1

NEG

Connection

A DC power cable transmits power to a DC power module in the chassis. It is connected in

the following way:

l The X1 connector is connected to the power socket on the DC power module.

l The X2/X3 cord end terminal is connected to an external power source.

380 V High-Voltage DC Power Cable

Figure 22-70 shows a 380 V high-voltage DC power cable.

Figure 22-70 380 V high-voltage DC power cable (high-voltage DC straight female

connector to bare wires)

Bare wires

High-voltage DC
straight female
connector

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 500

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Connection

A 380 V high-voltage DC power cable has a high-voltage DC straight female connector at one
end and bare wires at the other end. It is used to connect a 600/1200 W high-voltage DC
power module to a power supply device:
l The high-voltage DC straight female connector is connected to the power socket on the
power module.
l The bare wires are connected to a 380 V high-voltage DC power distribution frame or
power distribution box. Crimp OT or cord end terminals on the bare wires, and then
connect the brown wire to a positive terminal, the blue wire to a negative terminal, and
the yellow-green wire to a protection ground.

22.6.9 Can a 16 A Power Module of the CE12800 Use a 10 A Power

Cable?

A power module must use a power cable matching its current rating. Using an unmatched
power cable may cause a failure of the power module.

22.6.10 How Do I Determine the Optical Modules and Cables

Supported by a Card or Switch?

CE12800&CE12800E
To determine the optical modules and cables supported by a card of the CE12800&CE12800E
series switches, see the "Indicators and Ports" section of the card model under "Cards" in the
Hardware Description.

CE8800&7800&6800&5800
To determine the optical modules and cables supported by a switch, see the "Appearance and
Structure" section of the specific chassis model under Chassis > Chassis Models in the
CloudEngine 8800&7800&6800&5800 Series Switches Hardware Description.

22.6.11 What Are the Types and Specifications of AC Power

Modules Delivered with CE12800&CE12800E Switches?

AC power cables need to be selected based on the type of power sockets used in your
equipment room. Two types of AC power cables are available to suit different power sockets:
PDU power cable and country-specific power cable.
l PDU power cables are delivered with a power distribution unit (PDU) with C20 straight
female sockets. A PDU power cable has a C19 straight female connector at one end and
a C20 straight male connector at the other end. The number of power cables delivered
with a switch is the same as the number of power modules.
l Country-specific power cables are delivered in compliance with standards of the
destination country or region. For example, AC power cables used in China have PI
angle male connectors. The number of power cables delivered with a switch is the same
as the number of power modules.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 501

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

PDU Power Cable

If PDUs with C20 straight sockets are available in a cabinet, use PDU power cables
complying with local standards. Select PDU power cables according to Table 22-35.

Table 22-35 PDU power cables applicable to different countries or regions

Country/Region Cable Description

China, Europe, Power Cords Cable,China /Europe/America/Korea Multiple

America, Korea Certificate AC Power 250V16A,3.0m,C20SM,H05VV-
F-1.5mm^2(3C) +14SJT3(3C),C19SF,PDU Cable

Australia Power Cords Cable,Australia AC Power 250V16A,

3.0m,C20SM,H05VV-F-1.5^2(3C),C19SF,PDU Power Cord

Japan Power Cords Cable,Japan AC Power 250V15A,

3.0m,C20SM,VCTF-2.0^2(3C),C19SF,PDU Power Cord

Country-Specific Power Cables

If there is no PDU with C20 straight sockets in a cabinet, use power cables specific to the
country or region where the switch is used. Select country-specific power cables according to
Table 22-36.

Table 22-36 Power cables applicable to different countries or regions

Country/Region Cable Description

China Power Cable,China AC Power Cable 250V16A,3.0m,PIAM,

227IEC53(RVV)2.5mm^2(3C),C19SF,Black

Japan Power Cable, Japan AC Power Cable 125V20A, 3.0m,PMAM,

HVCTF-3.5mm^2(3C), C19SF, Black

Brazil Power Cable,Brazil AC Power Cable 250V16A,3.0m,PJSM-

I,H05VV-F-1.5mm^2(3C),C19SF,Black

Europe Power Cable,Europe AC Power Cable 250V 16A,

3.0m,PFAM,H05VV-F-1.5mm^2(3C),C19SF,Black

Australia Power Cable,Australia AC Power Cable 250V16A,

3.0m,PISM,H05VV-F-2.5mm^2(3C),C19SF,Black

South Africa Power Cords Cable,South Africa AC Power 250V16A,

3.0m,PDAM,H05VVF-1.5mm^2(3C),C19SF,Black

America Power Cable,America AC Power Cable 125V20A,3.0m,PMAM,

12SJT(3C),C19SF,Black

India Power cord,India AC Power 250V 16A,3m,PD-III AM,IS

694-1.5mm^2(3C),C19SF,250V,16A,Black

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 502

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.6.12 What Are the Differences Between Power Entry Modules

of CE12800 AC Chassis and DC Chassis?

The power entry module (PEM) for an AC chassis provides C20 sockets for C19 straight
female connectors of AC power cables. The PEM for a DC chassis provides double DC power
terminals for each power module.

22.6.13 What Types of AC Power Cables Are Applicable to

CE8800&CE7800&CE6800&CE5800 Switches?

CE8800&CE7800&CE6800&CE5800 switches can receive AC power from country-specific

power sockets or C13 straight female sockets. In the first mode, the switches need to use
country-specific AC power cables. In the second mode, the switches need to use AC power
cables with a C13 straight female connector at one end and a C14 straight male connector at
the other end.

22.6.14 How Do I Identify Different Fibers from Their

Appearances?

Optical fibers are classified into multimode and single-mode optical fibers:
l Multimode optical fibers can be used with multimode optical modules to implement low-
cost, short-distance transmission. Multimode optical fibers are classified into OM1,
OM2, OM3, and OM4 types. OM1 and OM2 optical fibers are usually orange, whereas
OM3 and OM4 optical fibers are usually light green. For specifications of various optical
fibers, see the text printed on optical fibers.
l Single-mode optical fibers, usually G.652 fibers, can be used with single-mode optical
modules to implement long-distance transmission. Single-mode optical fibers are yellow.

22.6.15 What Type of Interface Standards Do CE Series Switches

Support?

Table 22-37 lists the interface standards supported by the CE series switches.

Table 22-37 Interface standards supported by the CE series switches

Interface Type Standards Compliance

GE electrical interface 10BASE-T, 100BASE-T, 1000BASE-T

FE/GE optical interface 100BASE-FX, 100BASE-LX, 100BASE-

EX, 100BASE-BX, 1000BASE-SX,
1000BASE-LX10, 1000BASE-EX,
1000BASE-ZX, 1000BASE-BX10-D/
1000BASE-BX10-U, 1000BASE-SX,
1000BASE-BX10-D, 1000BASE-BX10-U

10GE electrical interface 100BASE-T, 1000BASE-T, 10GBase-T

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 503

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Interface Type Standards Compliance

10GE optical interface 10GBASE-SR, 10GBASE-LR, 10GBASE-

LRM, 10GBASE-ER, 10GBASE-ZR,
10GBASE-uSR, 10GBASE-iLR,
10GBASE-BDER, 10GBASE-BX

25GE optical interface 25GBase-SR

40GE optical interface 40GBase-LR4, 40GBase-SR4, 40GBASE-

eSR4, 40GBASE-ER4, 40GBASE-iSM4,
40GBASE-eSM4, 40GBASE-BIDI,
40GBASE-LX4, 40GBASE-eSDLC-PAM4,
40GBASE-SDLC-PAM4, 40GBASE-LR4
Lite

100GE optical interface 100GBASE-SR4, 100GBASE-LR4,

100GBASE-PSM4, 100GBASE-CWDM4,
100GBASE-CLR4, 100GBASE-SR10,
100GBASE-LR10, 100GBASE-ER4,
100GBASE-ZR4, 100GBASE-eCWDM4

22.6.16 What Type of Connectors (Male or Female) Do 40GE

Optical Fibers Have?

40GE MPO optical fibers provided by Huawei have female connectors.

22.7 Virtualization - Stack

22.7.1 Which CE Series Switches Support Stack and How Many

Member Switches Does a Stack Contain at Most?
All models and versions of CE series switches support stack. For details, see Table 22-38.

Table 22-38 Device models and versions used to set up stacks

Device Series and Model Maximum Number of Version Support

Member Switches in a
Stack

CE12800 2 CE12804, CE12808,

l CE12804 CE12812: V100R001C00
and later versions
l CE12808
CE12816: V100R003C00
l CE12812 and later versions
l CE12816

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 504

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Device Series and Model Maximum Number of Version Support

Member Switches in a
Stack

CE12800S 2 V100R005C00 and later

l CE12804S versions
l CE12808S

CE12800E (equipped with 2 V200R002C50 and later

ED-E, EG-E, and EGA-E versions
series cards)
l CE12804E
l CE12808E
l CE12816E

CE5810EI 9 V100R002C00 and later

l CE5810-24T4S-EI versions
l CE5810-48T4S-EI

CE5850EI 16 V100R001C00 and later

l CE5850-48T4S2Q-EI versions

CE5855EI 9 V100R005C10 and later

l CE5855-24T4S2Q-EI versions
l CE5855-48T4S2Q-EI

CE5850HI 9 V100R003C00 and later

l CE5850-48T4S2Q-HI versions

CE5880EI 16 V200R005C10 and later

l CE5880-48T4Q2CQ-EI versions

CE6810EI 16 V100R003C00 and later

l CE6810-48S4Q-EI versions

CE6810LI 16 CE6810-48S-LI,
l CE6810-48S-LI CE6810-48S4Q-LI:
V100R003C10 and later
l CE6810-48S4Q-LI versions
l CE6810-24S2Q-LI CE6810-24S2Q-LI,
l CE6810-32T16S4Q-LI CE6810-32T16S4Q-LI:
V100R005C10 and later
versions

CE6850EI 16 V100R001C00 and later

l CE6850-48T4Q-EI versions
l CE6850-48S4Q-EI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 505

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Device Series and Model Maximum Number of Version Support

Member Switches in a
Stack

CE6850HI/CE6850U-HI 16 CE6850-48S6Q-HI:
l CE6850-48S6Q-HI V100R005C00 and later
versions
l CE6850-48T6Q-HI
CE6850-48T6Q-HI,
l CE6850U-24S2Q-HI CE6850U-24S2Q-HI,
l CE6850U-48S6Q-HI CE6850U-48S6Q-HI:
V100R005C10 and later
versions

CE6851HI 16 V100R005C10 and later

l CE6851-48S6Q-HI versions

CE6855HI 16 V200R001C00 and later

l CE6855-48T6Q-HI versions
l CE6855-48S6Q-HI

CE6856HI 16 V200R002C50 and later

l CE6856-48T6Q-HI versions
l CE6856-48S6Q-HI

CE6857EI 16 V200R005C10 and later

l CE6857-48S6CQ-EI versions

CE6860EI 16 V200R002C50 and later

l CE6860-48S8CQ-EI versions

CE6865EI 16 V200R005C00 and later

l CE6865-48S8CQ-EI versions

CE6870EI 9 CE6870-24S6CQ-EI,
l CE6870-24S6CQ-EI CE6870-48S6CQ-EI:
V200R001C00 and later
l CE6870-48S6CQ-EI versions
l CE6870-48T6CQ-EI CE6870-48T6CQ-EI:
V200R002C50 and later
versions

CE6875EI 9 V200R003C00 and later

l CE6875-48S4CQ-EI versions

CE6880EI 16 V200R002C50 and later

l CE6880-24S4Q2CQ-EI versions
l CE6880-48S4Q2CQ-EI
l CE6880-48T4Q2CQ-EI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 506

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Device Series and Model Maximum Number of Version Support

Member Switches in a
Stack

CE7850EI 16 V100R003C00 and later

l CE7850-32Q-EI In V100R003C00, at most versions
four CE7850EIs can set up a
stack. In V100R003C10 and
later versions, at most 16
CE7850EIs can set up a
stack.

CE7855EI 16 V200R001C00 and later

l CE7855-32Q-EI versions

CE8850EI 16 CE8850-32CQ-EI:
l CE8850-32CQ-EI V200R002C50 and later
versions
l CE8850-64CQ-EI
CE8850-64CQ-EI:
V200R005C00 and later
versions

CE8860EI 9 V100R006C00 and later

l CE8860-4C-EI versions

CE8861EI 9 V200R005C10 and later

l CE8861-4C-EI versions

CE8868EI 9 V200R005C10 and later

l CE8868-4C-EI versions

Pay attention to the following points:

l Switches of different series cannot set up a stack. For example, CE5850HI and
CE5850EI switches cannot set up a stack; CE6850HI and CE6851HI switches cannot
set up a stack.
l Switches of the same series but different models can set up a stack. For example,
CE5810-24T4S-EIs and CE5810-48T4S-EIs can set up a stack.
– CE6850-48T6Q-HIs can set up a stack with only CE6850-48T6Q-HIs but not
CE6850-48S6Q-HIs, CE6850U-48S6Q-HIs, or CE6850U-24S2Q-HIs.
– CE6870-48T6CQ-EIs can set up a stack with only CE6870-48T6CQ-EIs but not
CE6870-24S6CQ-EIs or CE6870-48S6CQ-EIs.
– CE8850-64CQ-EIs can set up a stack with only CE8850-64CQ-EIs but not
CE8850-32CQ-EIs.
l The CE12800E does not support the stack function after FD-X series cards are installed.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 507

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.7.2 What Ports Can Be Used to Set Up a Stack Among CE Series

Switches?
Stack Port Types of CE12800, CE12800E Series Switches

Table 22-39 Stack port requirements of CE12800, CE12800E series switches

Item Requirement Remarks

Type of ports used l 10GE optical All ports except GE ports can be used for stack
for stack connections ports connections.
l 10GE
electrical ports
l 40GE optical
ports
l 100GE optical
ports

Number of physical 1-32 It is recommended that you add at least two

member ports in a physical member ports to a stack port to
stack port improve stack link bandwidth and reliability.
NOTE
l Physical member ports in a stack port must be the same type. For example, 10GE and 40GE ports
cannot be added to the same stack port.
l 10GE optical ports and 10GE electrical ports can be added to the same stack port.
l 10GE optical ports derived from 40GE optical ports can be used for stack connections. If 40GE
optical ports have been configured as the stack physical member ports, they cannot be split.
l In V100R003C00 and V100R003C10, 10GE or 40GE optical ports derived from 100GE optical
ports cannot be used for stack connections. In V100R005C00 and later versions, 10GE, 25GE, or
40GE optical ports derived from 100GE optical ports can be used for stack connections.
l After 100GE QSFP28 optical ports have 100GE high-speed cables installed and are configured to
work at the rate of 40GE using the speed 40000 command, these ports cannot be used for stack
connections. If these ports have 40GE optical modules or high-speed cables (40GE auto-sensing),
they can be used for stack connections.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 508

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Stack Port Types of CE8800, CE7800, CE6800, and CE5800 Series Switches

Table 22-40 Stack port requirements of CE8800, CE7800, CE6800, and CE5800 series
switches
Item Requirement Remarks

Type of ports l 10GE electrical All ports except GE ports can be used for stack
used for stack ports connections.
connections l 10GE optical
ports
l 25GE optical
ports
l 40GE optical
ports
l 100GE optical
ports

Number of 1-16 It is recommended that you add at least two

physical physical member ports to a stack port to improve
member ports stack link bandwidth and reliability.
in a stack port

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 509

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Item Requirement Remarks

NOTE
l Physical member ports in a stack port must be the same type. For example, 10GE and 40GE ports
cannot be added to the same stack port.
l On the CE8860EI, CE8861EI, and CE8868EI, physical ports on different subcards can be added to
the same stack port.
l On the CE6850EI, CE6810EI, CE6810LI, and CE5850EI, if a 10GE port with port number in the
range 4N+1 to 4N+4 (N=0, 1, 2, 3...) is configured as a physical member port, all the ports with port
numbers 4N+1 to 4N+4 are configured as physical member ports. For example, if you configure
10GE1/0/1 as a physical member port, all the interfaces from 10GE1/0/1 to 10GE1/0/4 are
configured as physical member ports.
l Among the four 10GE optical ports of a CE5810-48T4S-EI, 10GE1/0/1 and 10GE1/0/2 must be
added to the same stack port, and 10GE1/0/3 and 10GE1/0/4 must be added to another stack port.
There is no such restriction on other models.
l To use 10GE optical ports of a CE5855-48T4S2Q-EI switch for stack connection, you can only add
10GE1/0/1 to 10GE1/0/2 and 10GE ports split from 40GE1/0/2 (40GE1/0/2:1 to 40GE1/0/2:4) to
the same logical stack port or add 10GE1/0/3 to 10GE1/0/4 and 10GE ports split from 40GE1/0/1
(40GE1/0/1:1 to 40GE1/0/1:4) to the same logical stack port. To use 40GE optical ports of a
CE5855-48T4S2Q-EI switch for stack connection, do not add 40GE1/0/1 and 40GE1/0/2 to the
same logical stack port.
l 10GE optical ports derived from 40GE optical ports on devices except CE7850EI and CE7855EI
can be used for stack connections. If 40GE optical ports have been configured as the physical
member ports, they cannot be split.
l Only 40GE ports aggregated from CE6810-48S-LI's 10GE ports can be used for stack connections.
l After 100GE QSFP28 optical ports have 100GE high-speed cables installed and are configured to
work at the rate of 40GE using the speed 40000 command, these ports cannot be used for stack
connections. If these ports have 40GE optical modules or high-speed cables (40GE auto-sensing),
they can be used for stack connections.
l 25GE SFP28 ports cannot be used for stack connections after their rate is configured to 10 Gbit/s or
1 Gbit/s using the port mode { 10ge | ge } command.
l When configuring ports of the CE8860EI, CE8861EI, CE8868EI, CE6857EI, CE6865EI, or
CE6860EI as stack member ports, pay attention to the following points:
l If a 25GE SFP28 optical port,10GE RJ45 electrical port or 10GE optical port with port number
in the range 4N+1 to 4N+4 (N=0, 1, 2, 3...) needs to be configured as a stack member port, all
the ports with port numbers 4N+1 to 4N+4 must be configured as stack member ports.
l If a 40GE QSFP+ optical port needs to be configured as a stack member port, two contiguous
ports must be configured as stack member ports; alternatively, four 10GE optical ports split from
two contiguous 40GE optical ports can be configured as stack member ports. A 40GE QSFP+
optical port can be split into two 10GE optical ports.
l On the CE8860EI, CE8861EI, and CE8868EI, 25GE interfaces in the CE88-D24S2CQ-U card
cannot be used to set up a stack.
l On the CE8850EI, if a 10GE optical port needs to be configured as a stack member port, two
contiguous ports must be configured as stack member ports. That is, both 10GE1/0/1 and 10GE1/0/2
must be configured as stack member ports.

22.7.3 Which Cables Can Be Used for Stack Connections?

Stack setup just requires ordinary service cables instead of dedicated stack cables. Optical
ports can be connected using high-speed cables, AOC cables, or optical modules+fibers.
Electrical ports can be connected using Category 6, Category 6A, or Category 7 cables.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 510

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

When setting up a stack, ensure that optical modules and cables on ports used for stack
connections are properly installed and these ports are Up.

NOTE

l 10GE optical ports can be used for stack connections only when they have 10GE optical modules
installed. They cannot be used for stack connections when having GE optical modules or GE copper
modules installed.
l SIP ports on the CE12800 and CE12800E can use network cables or LC fibers. When LC fibers are used,
the SIP ports must have GE optical modules installed.
l For CE8800, CE7800, CE6800, and CE5800, in V100R006C00, 40GE optical modules of the
QSFP-40G-SR-BD model cannot be used to set up a stack. This limitation does not apply to
V200R001C00 and later versions.

22.7.4 Can GE Optical Modules Be Used to Set Up a Stack?

GE optical modules cannot be used to set up a stack.

22.7.5 How Do I Configure Stack?

NOTE

The following example describes basic stack configurations. For details, see the related product configuration
manual.

Configuring Stack on CE12800 and CE12800E Series Switches

<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 //Set a stack member ID.
[*HUAWEI-stack] stack priority 150 //Set the stack priority.
[*HUAWEI-stack] stack domain 10 //Configure a stack domain ID.
[*HUAWEI-stack] stack link-type mainboard-direct //Configure the stack
connection mode.
[*HUAWEI-stack] quit
[*HUAWEI] commit
[~HUAWEI] port-group group1
[*HUAWEI-port-group-group1] group-member 10ge 1/0/1 to 10ge 1/0/2
[*HUAWEI-port-group-group1] group-member 10ge 2/0/1 to 10ge 2/0/2
[*HUAWEI-port-group-group1] shutdown //Shut down the physical member port to
be added to a logical stack port.
[*HUAWEI-port-group-group1] quit
[*HUAWEI] commit
[~HUAWEI] interface stack-port 1 //Create a logical stack port.
[*HUAWEI-Stack-Port1] port member-group interface 10ge 1/0/1 to 1/0/2 //Add
physical member ports to the logical stack port.
[*HUAWEI-Stack-Port1] port member-group interface 10ge 2/0/1 to 2/0/2
[*HUAWEI-Stack-Port1] quit
[*HUAWEI] commit
[~HUAWEI] port-group group1
[~HUAWEI-port-group-group1] undo shutdown //Open the shutdown physical
member ports.
[*HUAWEI-port-group-group1] quit
[*HUAWEI] commit
[~HUAWEI] quit
<HUAWEI> save //Save the configuration.
Warning: The current configuration will be written to the device. Continue? [Y/
N]: y
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack enable //Enable the stack function.
Warning: Make sure that one or more dual-active detection methods are configured
once the conversion is complete and the device ente
rs the stack mode.
Current configuration will be converted to the next startup saved-configuration

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 511

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

file of stack mode.

System will reboot. Continue? [Y/N]: y

Configuring Stack on CE8800, CE7800, CE6800, and CE5800 Series Switches

<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 renumber 2 inherit-config //Set a stack
member ID.
Warning: The stack configuration of member ID 1 will be inherited to member ID 2
after the device resets. Continue? [Y/N]: y
[*HUAWEI-stack] stack member 1 priority 150 //Set the stack priority.
[*HUAWEI-stack] stack member 1 domain 10 //Set a stack domain ID.
[*HUAWEI-stack] quit
[*HUAWEI] commit
[~HUAWEI] port-group group1
[*HUAWEI-port-group-group1] group-member 10ge 1/0/1 to 10ge 1/0/4
[*HUAWEI-port-group-group1] shutdown //Shut down the physical member port to
be added to a logical stack port.
[*HUAWEI-port-group-group1] quit
[*HUAWEI] commit
[~HUAWEI] interface stack-port 1/1 //Create a logical stack port.
[*HUAWEI-Stack-Port1/1] port member-group interface 10ge 1/0/1 to 1/0/2
[*HUAWEI-Stack-Port1/1] quit
[*HUAWEI] interface stack-port 1/2
[*HUAWEI-Stack-Port1/2] port member-group interface 10ge 1/0/3 to 1/0/4
[*HUAWEI-Stack-Port1/2] quit
[*HUAWEI] commit
[~HUAWEI] port-group group1
[~HUAWEI-port-group-group1] undo shutdown //Open the shutdown physical
member ports.
[*HUAWEI-port-group-group1] quit
[*HUAWEI] commit
[~HUAWEI] quit
<HUAWEI> save //Save the configuration.
Warning: The current configuration will be written to the device. Continue? [Y/
N]: y
<HUAWEI> reboot //Restart the device.
Warning: The system will reboot. Continue? [Y/N]: y

22.7.6 How Do I Troubleshoot a Stack Setup Failure?

Possible causes for a stack setup failure include incorrect configuration, faulty links. Perform
the following operations to troubleshoot a stack setup failure.
1. Check whether a stack can be set up between these member switches.
Run the display device command to view the member switch models and then determine
whether a stack can be set up between these switches. If not, replace these switches.
2. Check whether the stack configuration is correct.
Run the display stack configuration all command to check whether the stack
configuration meets requirements.
The following uses the display on a CE12800 or CE12800E switch as an example.
<HUAWEI> display stack configuration all
Oper : Operation
Conf : Configuration
* : Offline configuration
Isolated Port: The port is in stack mode, but does not belong to any Stack-
Port

Attribute Configuration:
---------------------------------------------------------------
MemberID Domain Priority Mode Enable
Oper(Conf) Oper(Conf) Oper(Conf) Oper(Conf) Oper
---------------------------------------------------------------

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 512

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

1(1) 10(10) 150(150) MB(MB) Enable

---------------------------------------------------------------

Stack-Port Configuration:
------------------------------------------------------------------------------
--
Stack-Port Member Ports
------------------------------------------------------------------------------
--
Stack-Port1/1 10GE1/1/0/1 10GE1/1/0/2
------------------------------------------------------------------------------
--

In the command output, the Oper(Conf) field indicates the current configuration and
next startup configuration.
– Check whether all member switches use the same stack domain ID. All member
switches must use the same stack domain ID. Otherwise, they cannot set up a stack.
If member switches use different stack domain IDs, run the stack member
{ member-id | all } domain domain-id command to change their stack domain IDs
to the same.
– (Applicable only to the CE12800 and CE12800E) Check whether all member
switches use the same stack connection mode. All member switches must use the
same stack connection mode. Otherwise, they cannot set up a stack. MB indicates
the default MPU connection mode, and LC indicates the LPU connection mode.
If member switches use different stack connection modes, run the stack member
{ member-id | all } link-type { mainboard-direct | linecard-direct } command to
change their stack connection modes to the same.
– (Applicable only to the CE12800 and CE12800E) Check whether the stacking
function has been enabled on member switches. Member switches must have the
stacking function enabled to set up a stack. Enable indicates that the stacking
function is enabled, and Disable indicates that the stacking function is disabled.
If member switches have the stacking function disabled, run the stack enable
command to enable this function.
– Check whether member switches have offline configuration. The configuration
marked with an asterisk (*) is offline configuration. If offline configuration exists,
you must delete it. This is because offline configuration may case a stack
configuration conflict, which will cause a failure to set up a stack.
3. Check whether stack connections are correct.
Check whether stack connections are consistent with the plan and configuration.
4. Check whether ports used for stack connections are Up.
Run the display interface brief command to check whether the ports used for stack
connections are physically up, including stack member ports and SIP ports (applicable
only to the CE12800 and CE12800E). If these ports are physically Down, check whether
optical modules and fibers are faulty.
In V100R005C00 and later versions, you can also run the display stack link-state last-
down-reason command to check the reason why the stack link protocol becomes Down.
The reason includes incorrect configuration or cable connection.
5. Check stack failure event information.
Run the display stack troubleshooting command to check whether stack failure events
occur. This command can record some failures occurring during a stack setup, including
configuration errors and connection errors. Troubleshoot these failures according to
failure event description.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 513

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> display stack troubleshooting

Total :1
------------------------------------------------------------------------------
----------
Seq Time Event Description
------------------------------------------------------------------------------
----------
1 2012-11-23 19:28:23.889 The devices belong to different stack domains,
and stack cannot be established.
(MemberID = 1,
DomainID = 10, PeerMemberID = 2,
PeerDomainID = 20)
------------------------------------------------------------------------------
----------

6. Collect the following information and contact technical support personnel.

– Results of the preceding troubleshooting procedure.
– Configuration file, logs, and diagnostic logs.

22.7.7 Do CE Series Switches Support Service Port Stacking?

CE series switches support service port stacking.

22.7.8 Can Stack Cards Be Used to Set Up a Stack for CE Series

Switches?
Stack cards cannot be used to set up a stack for CE series switches.

22.7.9 How Do I Load Patches to a Stack?

The process of loading patches to a stack is similar to that on a standalone switch.
1. Upload a patch package to the master switch.
2. Run the patch load filename all run command in the user view to load and run patches.
The patch file on the master switch will be automatically copied and loaded to other
member switches.
3. Run the display patch-information verbose command to check whether patches are
loaded successfully.

22.7.10 How Do I Load a License for a Stack System?

The following describes the procedure for loading a license in a stack system:
1. Apply for a license and upload the license file to the stack master.
A license is bound to the ESN of a physical device. Each stack member has an
independent ESN. You can apply for the same license for multiple ESNs or apply for a
license for each ESN. In a stack, you need to apply for and load the same license for each
stack member.
If there are multiple .dat license files, compress all the license files into a .zip file and
upload the .zip file to the stack master.
2. Run the license active file-name command in the user view to activate the uploaded
license file.
3. Run the display license command to check whether a license file has been loaded. If the
license status is Normal, the license file has been successfully loaded.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 514

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The following example describes how to load licenses in a stack of CE8800, CE7800,
CE6800, and CE5800 series switches.
l If there are multiple license files:
Compress multiple .dat license files into a .zip file, upload and load the .zip file to the
stack master.
<HUAWEI> license active license_file.zip

l If there is only one license file:

<HUAWEI> license active license_file.dat

22.7.11 Is a License File Loaded Before or After a Stack Is Set Up?

You can load a license file on switches before or after setting up a stack. The result is not
affected by the operation sequence.

22.7.12 How Many License Files Can Be Applied for a Stack?

When applying for license files for a stack, you can apply for a license file for each ESN or
apply for only one license file for multiple ESNs.

22.7.13 How Do I Perform a Master/Standby Switchover in a

Stack?
You can manually trigger a master/standby switchover in a stack if the current roles of
member switches do not meet your requirement. For example, you can perform a master/
standby switchover to change the roles after a restart or restore the original roles after an
upgrade.
The following example describes the master/standby switchover on a CE8800, CE7800,
CE6800, and CE5800.
<HUAWEI> display switchover state //Check whether the stack meets switchover
requirements.
Switchover State : Ready //You can perform a master/standby
switchover only when the stack is ready for the switchover.
Switchover Policy : Board Switchover
MainBoard : 1
SlaveBoard : 2
<HUAWEI> system-view
[~HUAWEI] slave switchover enable //Enable the switchover function.
[*HUAWEI] commit
[~HUAWEI] slave switchover //Perform a master/standby switchover.
Warning: This operation will switch the slave board to the master board.
Continue? [Y/N]: y

NOTE

Before a master/standby switchover is performed in a stack of CE12800 and CE12800E switches, ensure that
the master switch has two MPUs installed.

22.7.14 Will a Master/Standby Switchover Change the Stack

Member ID?
A master/standby switchover will not change the stack member ID.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 515

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.7.15 Can Four 10GE Ports of a CE5800 Provide Two Ports for
Stack Connections and the Other Two as Service Ports?
CE5810EI, CE5855EI and CE5850HI support this application but CE5850EI does not. When
10GE ports of a CE5850EI are used for stack connections, all the four 10GE ports must be
configured as physical member ports and cannot function as service ports again. This
restriction does not apply to CE5810EI, CE5855EI and CE5850HI.

22.7.16 Can Two 40GE Ports of a CE5855EI Be Added to the Same

Logical Stack Port?
Two 40GE ports of a CE5855-48T4S2Q-EI cannot be added to the same logical stack port.
Two 40GE ports of a CE5855-24T4S2Q-EI can be added to the same logical stack port.

22.7.17 Must Four Consecutive 10GE Ports Be Simultaneously

Configured for a Stack of CE6800 Series Switches?
Among CE6800 series switches, if 10GE ports of the CE6850EI, CE6810EI, or CE6810LI
need to be configured as physical member ports, four ports with consecutive port numbers 4N
+1 through 4N+4 (N is a natural number) must be simultaneously configured. This restraint
does not apply to other CE6800 models.

22.7.18 What Are Differences Between the MPU Connection

Mode and LPU Connection Mode of CE12800 and 12800E Member
Switches?
l In MPU connection mode, management links and forwarding links are separated,
ensuring high reliability. SIP ports on the MPUs and service ports on the LPUs must be
connected for member switches.
l In LPU connection mode, management links and forwarding links are integrated. Only
service ports on the LPUs are connected for member switches.

22.7.19 What Types of Cables Are Applicable to SIP Ports on the

MPU of a CE12800 or CE12800E Switch?
In MPU connection mode, stack management links are connected through SIP ports on
MPUs. A SIP port is a combo port consisting of a GE electrical port and a GE optical port. It
starts to work immediately after a cable is connected and does not require any configuration.
By default, the working mode of a combo port depends on whether the electrical port or
optical port has a cable connected first. If the electrical and optical ports have a cable
connected at the same time, the combo port works as an optical port.
Common cables applicable to SIP ports include network cables and LC fibers. When LC
fibers need to be used, GE optical modules must be used on SIP ports.

22.7.20 What Are the Requirements of the MPU Connection Mode

on SIP Port Connection of MPUs?
In MPU connection mode, MPUs of the master and standby chassis must be connected
through SIP interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 516

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

SIP ports are located on MPUs. Each MPU has two SIP ports, as shown in Figure 22-71. A
SIP port is a combo port consisting of a GE electrical port and a GE optical port. It starts to
work immediately after a cable is connected and does not require any configuration. By
default, the working mode of a combo port depends on whether the electrical port or optical
port has a cable connected first. If the electrical and optical ports are connected at the same
time, the optical port works.

Figure 22-71 SIP ports on an MPU

Figure 22-72 shows the recommended SIP port connections when each stack member switch
has two MPUs.

Figure 22-72 SIP port connections

MPU A MPU A

MPU B MPU B

SIP port

NOTE

It is recommended that MPUs of the master and standby chassis should be directly connected through four
cables to ensure reliability. Although a stack can still operate when the MPUs are directly connected through
one cable, reliability is low. Therefore, one cable is not recommended.

22.7.21 Can SIP Ports Run Services?

SIP ports on the MPUs of the CE12800 and CE12800E are used only for stack connections
and cannot run other services.

22.7.22 Must SIP Ports Be Configured?

SIP ports are plug-and-play and do not need to be configured using software.

22.7.23 How Can I Connect a Stack of CE12800 and CE12800E

Switches?
CE12800 and CE12800E switches have two connection modes, as shown in Figure 22-73.
l MPU connection mode: separates management links from forwarding links. In this
mode, management links are connected through the system interconnect ports (SIPs) on
MPUs, and forwarding links are connected through service ports on LPUs.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 517

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l LPU connection mode: integrates management links and forwarding links. In this mode,
management links and forwarding links are connected through service ports on LPUs
without requiring SIP ports on MPUs.

Figure 22-73 Stack connection modes of CE12800 and CE12800E

MPU connection mode LPU connection mode

MPU A MPU A MPU A MPU A

MPU B MPU B MPU B MPU B

LPU 1 LPU 1 LPU 1 LPU 1

LPU 2 LPU 2 LPU 2 LPU 2

CE12800 CE12800 CE12800 CE12800

SIP port
Service port

The MPU connection mode is recommended because it separates management links and
forwarding links and so ensures stack reliability.

22.7.24 How Are Stack Cables Connected for CE8800, CE7800,

CE6800, and CE5800 Series Switches?
Each CE8800, CE7800, CE6800, and CE5800 series switch has two logical stack ports. The
stack ports are Stack-Portn/1 and Stack-Portn/2, where n indicates the stack member ID of a
switch. Multiple physical member ports can be added to a logical stack port.
Member switches can be connected using a ring or chain topology. There is no requirement on
the sequence in which logical stack ports are connected.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 518

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-74 Stack cable connections

Chain topology
Stack-port1/1 Stack-port2/2

Stack-port2/1 Stack-port3/1
SwitchA SwitchB SwitchC

Ring topology
SwitchA
Stack-port1/1 Stack-port1/2

Stack-port2/1
Stack-port3/2

Stack-port2/2 Stack-port3/1
SwitchB SwitchC

22.7.25 How Many Member Ports Does a Stack Require?

On CE12800 and CE12800E series switches, you can configure 1 to 32 member ports for
stack connections. On CE8800, CE7800, CE6800, and CE5800 series switches, you can
configure 1 to 16 member ports for stack connections.

Member switches require at least one member port to set up a stack. To improve reliability, it
is recommended that two or more member ports be used to set up a stack.

22.7.26 Are Dedicated Cables Required for Setting Up a Stack of

CE Series Switches?
Common service cables are used to set up a stack of CE series switches, and no dedicated
stack cable is required. High-speed cables, active optical cables (AOCs), or optical modules
and optical fibers are used for connecting optical ports. Category-6, Category-6A, or
Category-7 network cables are used to connect electrical ports.

22.7.27 Can GE Ports Be Used to Set Up a Stack?

GE ports of CE switches cannot be used to set up a stack. 10GE ports that have GE optical
modules installed also cannot be used to set up a stack.

22.7.28 Can 10GE Ports Split from a 40GE Port Be Used to Set Up a
Stack?
On all switch models except the CE7850EI and CE7855EI, 10GE ports split from a 40GE
port can be used to set up a stack.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 519

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.7.29 Can CE6800s and CE5800s Set Up a Stack?

No. Only devices of the same series can set up a stack.

22.7.30 How Can I Add a Stack Member Switch Without Affecting

Services?
To add a member switch to a stack, perform the following operations in sequence:
1. Upgrade the software version of the new switch to the current stack system version to
prevent multiple restarts resulted from version synchronization and speed up stack setup.
2. Complete the stack configuration of the switch, save the configuration, and then power
off the switch.
3. Connect the switch to the stack using stack cables.
4. Power on the switch to enable it to join the stack without affecting the stack.

22.7.31 How to Replace One Stack Member Switch?

You may need to replace a faulty member switch in a stack. To prevent services from being
interrupted during the switch replacement, use inter-device link aggregation to connect
upstream and downstream devices for link backup.

CE8800, CE7800, CE6800, and CE5800 Series Switches

l Replace one member switch in a stack of two member switches.
SwitchA and SwitchB set up a stack. SwitchA is faulty and needs to be replaced by
SwitchC. You are advised to follow this procedure to complete the replacement:
a. Ensure that SwitchC has the same system software version and hardware model as
SwitchA before the replacement. To check the system software version and
hardware model of switches, run the display version and display device
commands.
b. Run the display stack, display stack configuration, and display interface brief
commands to check and record the stack status, stack configuration and interface
status.
c. Before connecting SwitchC with stack cables, power on and perform the stack
configuration on SwitchC in accordance with the stack configuration on SwitchA.
For details about the stack configuration, see the configuration guide. After the
configuration is complete, save the configuration and then restart SwitchC.
In addition to configuring stack commands one by one on SwitchC, you can copy
the stack configuration file of SwitchA to SwitchC to ensure the same configuration
on the two switches.
i. Change the stack member ID of SwitchC to the same as SwitchA and then
restart SwitchC to make the modification take effect. If SwitchC is a CE12800
and CE12800E switch, you also need to enable the stack function.
ii. After SwitchC starts, copy the stack configuration file to SwitchC. SwitchC
then restarts with this configuration file. Subsequently, SwitchC has the same
configuration as SwitchA.
d. After SwitchC starts, check whether it has the same stack configuration with
SwitchA again. If so, power off SwitchC.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 520

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

e. Run the display stack command to check whether SwitchA is the master switch. If
so, perform an active/standby switchover in the stack. If not, go to the next step.
<HUAWEI> display switchover state //Check whether the system meets
switchover requirements.
Switchover State : Ready //You can perform an active/
standby switchover only when the Switchover State field displays Ready.
Switchover Policy : Board Switchover
MainBoard : 1
SlaveBoard : 2
<HUAWEI> system-view
[~HUAWEI] slave switchover enable //Enable the active/standby
switchover function.
[*HUAWEI] commit
[~HUAWEI] slave switchover //Perform an active/standby switchover.
Warning: This operation will switch the slave board to the master board.
Continue? [Y/N]: y

After an active/standby switchover is performed, the master switch will restart.

After the switch restarts and joins the stack again, go to the next step. To check
whether the switch has joined the stack again, run the display stack command.
f. Power off and remove SwitchA.
g. Install SwitchC and connect cables to its service ports, stack ports, and ports that
have dual-active detection (DAD) configured.
h. Power on SwitchC so that SwitchC joins the stack as a new member. Run the
display stack command to check whether SwitchC can set up a stack with SwitchB.
i. After SwitchC and SwitchB set up a stack, run the display stack configuration and
display interface brief commands to check the stack configuration and interface
status. Ensure that the stack configuration is the same as that used before the device
replacement and interfaces become Up normally.
j. After confirming all services are normal, run the save command to save the stack
configuration.
k. If the current master and standby switches are different from those before the device
replacement, perform an active/standby switchover.
l Replace one member switch in a stack of three or more member switches (in a ring
topology).
In a stack set up by three or more member switches in a ring topology, the device
replacement procedure is similar to that in a stack of two member switches. For details,
see Replace one member switch in a stack of two member switches.
l Replace one member switch in a stack of three or more member switches (in a chain
topology).
In a stack set up by three or more member switches in a chain topology, the replacement
procedure of edge switches on both ends is similar to that in a stack of two member
switches. For details, see Replace one member switch in a stack of two member
switches. To replace an intermediate switch, change the stack connection topology to the
ring topology and then replace the switch according to Replace one member switch in a
stack of two member switches. The procedure is as follows:
a. On edge switches on both ends, create a logical stack port and add member ports
into the logical stack port, and then connect these ports using cables.
<HUAWEI> system-view
[~HUAWEI] interface stack-port 1/1 //Create a logical stack port.
[*HUAWEI-Stack-Port1/1] port member-group interface 10ge 1/0/1 to
1/0/2 //Add member ports into the logical stack port.
[*HUAWEI] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 521

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

After cables are connected, run the display stack topology command to check
whether the stack connection topology is changed to the ring topology.
b. After the stack connection topology changes to ring topology, replace the switch
according to Replace one member switch in a stack of two member switches.
c. To restore the stack connection topology to chain topology after the replacement,
remove the stack cables connected in step 1.

CE12800 and CE12800E Series Switches

In a stack of two CE12800 and CE12800E switches, replace the faulty member switch
according to Replace one member switch in a stack of two member switches of CE8800,
CE7800, CE6800, and CE5800 series switches.

22.7.32 How Can I Restart a Stack Member?

l In a stack of CE12800 and CE12800E switches, run the reset chassis chassis-id
command in the user view to restart the specified member switch.
l In a stack of CE8800, CE7800, CE6800, and CE5800 switches, run the reset slot slot-id
command in the user view to restart the specified member switch.

Before restarting a member switch, save the stack configuration to ensure that the restarted
switch can join the stack normally.

22.7.33 How Can I Configure Port Split in a Stack?

The port split procedure is the same in stack and non-stack scenarios. That is, run the port
split command in the system view, save the configuration, and then restart the board or
device.

22.7.34 Can Only One Service Port Be Used as a Stack Port?

Yes.

To improve reliability, you are advised to add at least two physical member ports to each stack
port.

22.7.35 How Many Times Member Switches Need to Restart If

Two CE5850EIs Set Up a Stack?
Each member switch needs to restart only once to set up a stack. Perform the following
operations in sequence:
1. Complete the stack configuration of the master switch, save the configuration, and then
restart the switch.
2. Complete the stack configuration of the standby switch, save the configuration, and then
power off the switch.
3. Connect the master and standby switches using stack cables, and then power on the
standby switch.

22.7.36 Does Stacking Support Inter-Chassis Link Aggregation?

Inter-chassis link aggregation is supported in a stack.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 522

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

It is recommended that upstream and downstream devices connect to a stack using inter-
chassis link aggregation to ensure link reliability.

22.7.37 How Do I Configure Inter-Chassis Link Aggregation?

The following example uses CE8800, CE7800, CE6800, and CE5800 series switches. In
Figure 22-75, SwitchA and SwitchB set up a stack and connect to SwitchC through inter-
chassis link aggregation.

Figure 22-75 Configuring inter-chassis link aggregation

SwitchA SwitchB

10GE1/0/1 10GE2/0/1

Eth-Trunk 1

10GE1/0/1 10GE1/0/2

SwitchC
iStack Link
Common Link
Eth-Trunk

The configuration procedure is as follows:

1. Configure an inter-chassis Eth-Trunk in the stack.
<iStack> system-view
[~iStack] interface eth-trunk 1
[*iStack-Eth-Trunk1] trunkport 10ge 1/0/1
[*iStack-Eth-Trunk1] trunkport 10ge 2/0/1
[*iStack-Eth-Trunk1] commit

2. Configure the Eth-Trunk on SwitchC.

<SwitchC> system-view
[~SwitchC] interface eth-trunk 1
[*SwitchC-Eth-Trunk1] trunkport 10ge 1/0/1
[*SwitchC-Eth-Trunk1] trunkport 10ge 1/0/2
[*SwitchC-Eth-Trunk1] commit

22.7.38 Why the Stack Configuration of the CE12800 and

CE12800E with Stack Member ID 2 Does Not Take Effect When
the Stack Has the Next Startup Configuration File Cleared and
Starts with a New Configuration File?
The following operations have been performed before this problem occurs:
1. Run the reset saved-configuration command in the stack to clear the next startup
configuration file.
2. Specify a new configuration file for the stack and restart the stack. In the new
configuration file, the stack configuration is as follows:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 523

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

#
stack member 1 domain 10
stack member 1 priority 150
#
stack member 2 domain 10
stack member 2 priority 120
#

3. Check the stack configuration after the stack restarts, finding that the stack priority of the
switch with stack member ID 2 is the same as that of the switch with stack member ID 1
but not the configured one.
<HUAWEI> display stack configuration
Oper : Operation
Conf : Configuration
* : Offline configuration
Isolated Port : The port is in stack mode, but does not belong to any Stack-
Port

Attribute Configuration:
-----------------------------------------
MemberID Domain Priority
Oper(Conf) Oper(Conf) Oper(Conf)
-----------------------------------------
1(1) 10(10) 150(150)
2(2) 10(10) 150(120)
-----------------------------------------
......

Possible causes for this problem include:

1. After the next startup configuration file is cleared for a stack, the stack member ID for
the next startup of each member switch becomes the default value 1. After the next
startup configuration file is specified for the stack and the stack restarts, each member
switch parses the configuration file based on their stack member IDs.
2. When the stack restarts, because of stack member ID conflicts, the master switch re-
assigns stack member ID 2 to the switch that fails the competition, and then the switch
that fails the competition restarts.
3. After the switch starts with stack member ID 2, it still parses the configuration of stack
member 1 to ensure that a stack can be set up normally because the stack configuration
of stack member 2 may not be included in the new configuration file or cannot set up a
stack. As a result, the stack configuration of stack member 2 in the configuration file
does not take effect.

22.7.39 Is Traffic Preferential Forwarding Enabled on an Eth-

Trunk by Default?
The local traffic preferential forwarding function on an Eth-Trunk is enabled by default.

To disable local traffic preferential forwarding, run the local-preference disable command in
the Eth-Trunk interface view.

22.7.40 How Do I Configure Local Traffic Preferential

Forwarding?
Run the undo local-preference disable command in the Eth-Trunk interface view to enable
local traffic preferential forwarding on the Eth-Trunk interface. By default, local traffic
preferential forwarding is enabled.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 524

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 10
[*HUAWEI-Eth-Trunk10] undo local-preference disable

22.7.41 What Is the Function of inherit-config?

You can run the stack member member-id renumber new-member-id [ inherit-config ]
command to change the stack member ID.
l If you specify inherit-config, the switch inherits the original stack configuration after it
restarts, including the stack priority, stack domain ID, and physical member port
configuration. The common service port configuration will be lost. For example, the port
split configuration will be lost, but the split configuration of physical member ports is
inherited.
l If you do not specify inherit-config, the current stack configuration and common service
port configuration are lost after the switch restarts, and the configuration related to the
new stack member ID in the configuration file takes effect.
l If the configuration file contains offline configuration for the new stack member ID, do
not specify inherit-config in the command.

22.7.42 What Are Difference Between CSS and iStack?

Cluster Switch System (CSS) technology is used to set up a stack of modular switches. iStack
technology is used to set up a stack of fixed switches. CSS and iStack have different
implementation methods but have the same functions.

22.7.43 Does a CE12800 and CE12800E CSS Support VS If a

License File Is Loaded on Only One Member Switch?
If only one member switch has a license file loaded after a CE12800 CSS is set up and the
license file supports VS, the entire CSS supports VS.

22.7.44 How Can I Change the Type of Physical Member Ports in

a Stack Without Interrupting Traffic?
The following solutions apply only to the stack of CE8800, CE7800, CE6800, and CE5800
series switches instead of the stack of CE12800 and CE12800E series switches.
In Figure 22-76, two switches set up a stack using 10GE ports. It is required that 10GE ports
be switched to 40GE ports without interrupting services. Perform the following operations to
meet this requirement:
1. Create a new logical stack port and add 40GE ports in the created logical stack port.
Connect the 40GE ports using cables to set up a stack in a ring topology.
2. Remove cables of 10GE ports and delete the stack configuration of these ports.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 525

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-76 Changing the type of stack member ports

10GE
Initial connection

1
10GE
Connected into a
ring topology
40GE
2

Removal of the 40GE

original 10GE link

If the stack has been set up in a ring topology, remove 10GE ports from the logical stack port,
remove their cables, add 40GE ports in the logical stack port, and then connect the 40GE
ports using cables.

22.7.45 How Do I Upgrade a Stack?

A stack can be upgraded using the traditional upgrade method (specify the next-startup files
and restart the entire stack) or the fast upgrade function. The fast upgrade function applies to a
stack with two member switches.

l System restart
a. Upload the new system software to the master switch and copy it to all the other
member switches. If a member switch has multiple MPUs, copy the new system
software to all MPUs.
b. Run the startup system-software system-file all command to specify the name of
the system software to use at the next startup.
c. Run the reboot command to restart the stack.
l Fast upgrade
a. Upload the new system software to the master switch and copy it to all the other
member switches. If a member switch has multiple MPUs, copy the new system
software to all MPUs.
b. Run the startup system-software system-file all command to specify the name of
the system software to use at the next startup.
c. Run the system-view command to enter the system view.
d. Run the stack command to enter the stack management view.
e. Run the stack upgrade fast command to start a fast upgrade.
After performing a fast upgrade, you can run the display stack upgrade status
command to check the upgrade status.

22.7.46 How Do I Split a Stack?

If a stack is not required, split the stack to restore the member switches to standalone
switches.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 526

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Splitting a stack of CE12800 and CE12800E Switches

1. Disable the stack function. After the stack function is disabled, the member switches
restart without a configuration file and automatically back up the stack configuration file
used before the stack splits.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] undo stack enable member all
Warning: Current configuration will be cleared.
System will reboot. Continue? [Y/N]: y

2. Remove stack cables.

Splitting a Stack of CE8800, CE7800, CE6800, and CE5800 Switches

1. Back up the stack configuration file in case the stack needs to be set up again.
<HUAWEI> copy stack.cfg stack_copy.cfg all

2. Clear the configuration file for next start and restart the switch.
<HUAWEI> reset saved-configuration
The configuration will be erased to reconfigure.Continue? [Y/N]: y
<HUAWEI> reboot
Warning: The current configuration will be saved to the next startup saved-
configuration file. Continue? [Y/N]: n
Warning: The system will reboot. Continue? [Y/N]: y

3. Remove stack cables.

22.7.47 How Do I Clear the Stack Configuration?

Clearing CE12800, CE12800E Stack Configuration
To clear stack configuration of a CE12800 or CE12800E switch, disable the stacking function
on this switch. After the stacking function is disabled on the switch, the switch restarts with
zero configuration.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] undo stack enable member all

Clearing CE8800, CE7800, CE6800, and CE5800 Stack Configuration

To clear stack configuration of CE8800, CE7800, CE6800, and CE5800, delete the stack
configuration one by one using commands, set the stack member ID to 1, and restart the
switch. If other service configurations do not need to be retained, clear the configuration file
for the next startup and restart the switch.

22.7.48 How Do I Change the Stack Member ID?

Changing CE12800 and CE12800E Stack Member ID
l When the stacking function is disabled on a switch, run the stack member new-member-
id command to change its stack member ID.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 2

l When the stacking function is enabled on a switch, run the stack member member-id
renumber new-member-id [ inherit-config ] command to change its stack member ID.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 527

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 renumber 2
Warning: The device will use the configuration of member ID 2 after the
device resets. Continue? [Y/N]: y

Changing CE8800, CE7800, CE6800, and CE5800 Stack Member ID

Run the stack member member-id renumber new-member-id [ inherit-config ] command to
change the stack member ID.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 renumber 2
Warning: The device will use the configuration of member ID 2 after the device
resets. Continue? [Y/N]: y

22.7.49 How Do I Change the Stack Domain ID?

A stack domain ID identifies a stack system on a network. Member switches in the same stack
system must have the same stack domain ID configured. Otherwise, these switches cannot set
up a stack system together.
By default, a switch has no stack domain ID. If a switch has no stack domain ID, the stack
domain ID configured for this switch takes effect after the switch configuration is saved. If
you change the existing stack domain ID later, the new ID takes effect after the switch
configuration is saved and the switch restarts.

Changing the Stack Domain ID of the CE12800 and CE12800E

l If the stacking function has not been enabled on the switch, run the stack domain
domain-id command to change the stack domain ID.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack domain 10

l If the stacking function has been enabled on the switch, run the stack member
{ member-id | all } domain domain-id command to change the stack domain ID.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 domain 10

Changing the Stack Domain ID of the CE8800, CE7800, CE6800, and CE5800
Run the stack member { member-id | all } domain domain-id command to change the stack
domain ID.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member 1 domain 10

22.7.50 Can Member Switches with Different System Software

Versions Set Up a Stack?
Member switches with different system software versions can set up a stack. Member
switches will synchronize with the system software version of the master switch, restart, and
then join the stack again.
The system software version synchronized from the master switch must be able to run on
other member switches; otherwise, these member switches cannot set up a stack.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 528

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

It is recommended that switches use the same system software version before they set up a
stack.

22.7.51 Does Stacking of CE12800 and CE12800E Switches Have

Restrictions on Slot IDs of Stack Cards?
Stacking of CE12800 and CE12800E switches does not have restrictions on slot IDs of stack
cards.

22.7.52 Does Stacking of CE12800 and CE12800E Switches Require

that Member Switches Use the Same Number of Stack Cards?
In V100R003C00 and earlier versions, stacking of CE12800 and CE12800E switches
requires that two member switches use the same number of stack cards.

In V100R003C10 and later versions, stacking of CE12800 and CE12800E switches does not
require that two member switches use the same number of stack cards.

22.7.53 How Do I Change a Stack from the LPU Connection Mode

to MPU Connection Mode?
Perform the following operations to change a stack from the LPU connection mode to MPU
connection mode:

1. Connect SIP ports on MPUs to meet cable connection requirements of the MPU
connection mode.
2. Run the stack member all link-type mainboard-direct command to change the stack
connection mode to MPU connection.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] stack member all link-type mainboard-direct
[*HUAWEI-stack] commit

3. Save the configuration and then restart the stack to make the configuration take effect.

22.7.54 How Do I Calculate the Stack Bandwidth?

The formula for calculating the stack bandwidth is: Stack Bandwidth = Number of stack
member ports in stack ports x Bandwidth of a single stack member port. For example, if two
switches set up a stack using four 10GE ports, the stack bandwidth is 40 Gbit/s (4x10G).

22.7.55 Can I Increase the Number of Stack Links After a Stack

Has Been Set Up?
After a stack has been set up, you can increase the number of stack links as required. To add
more stack links, add new ports to stack ports and then connect these new ports using cables.
In this process, you do not need to remove stack cables or restart the stack.

1. Add new ports to stack ports.

<HUAWEI> system view
[~HUAWEI] interface stack-port 1/1
[~HUAWEI-Stack-Port1/1] port member-group interface 10ge 1/0/3 to 1/0/4
[*HUAWEI-Stack-Port1/1] quit
[*HUAWEI] interface stack-port 2/1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 529

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

[*HUAWEI-Stack-Port2/1] port member-group interface 10ge 2/0/3 to 2/0/4

[*HUAWEI-Stack-Port2/1] commit

2. Connect these new ports.

If you connect new ports using cables and then add these ports to stack ports, you are advised
to shut down these ports before connecting them using cables and enable them after they have
been added to stack ports.

22.7.56 Will the Previous Service Port Configuration of a Switch

Change After this Switch Joins a Stack?
If this switch is the master switch, its service port configuration will not change. If this switch
is not the master switch, it will synchronize with the configuration of the master switch, and
the previous service port configuration will be lost.

22.7.57 Can Member Ports of Different Types Be Added to the

Same Stack Port?
Member ports in a stack port must be the same type. For example, 10GE and 40GE ports
cannot be added to the same stack port.

22.7.58 What Does an Asterisk (*) Mean in the Stack

Configuration?
The asterisk (*) before the switch configuration indicates that the configuration is the offline
configuration and that the corresponding switch or card is not properly installed. The offline
configuration may be generated in some conditions, for example, a stack splits, a stack
domain ID is changed, or a member switch or card is removed.

22.7.59 How Do I Restore Stack Member Ports as Ordinary

Service Ports?
Perform the following operations to restore stack member ports as ordinary service ports:
1. Remove stack member ports from a logical stack port. Two methods are available:
– In the stack port view, run the undo port member-group interface interface-type
{ interface-number1 [ to interface-number2 ] } &<1-32> command.
<HUAWEI> system view
[~HUAWEI] interface stack-port 1/1
[~HUAWEI-Stack-Port1/1] undo port member-group interface 10ge 1/0/1

– In the interface view, run the undo stack-port command.

<HUAWEI> system view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo stack-port

2. Delete the stack member port configuration from ports to restore the ports as ordinary
service ports. Two methods are available:
– In the stack management view, run the undo port mode stack interface interface-
type { interface-number1 [ to interface-number2 ] } &<1-32> command.
<HUAWEI> system-view
[~HUAWEI] stack
[~HUAWEI-stack] undo port mode stack interface 10ge 1/0/1

– In the interface view, run the undo port mode stack command.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 530

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> system view

[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo port mode stack

22.7.60 How Can I Configure DAD?

A stack has two dual-active detection (DAD) modes:
l DAD in direct mode through service ports: DAD is performed through dedicated
direct links between member switches, as shown in Figure 22-77.

Figure 22-77 DAD in direct mode

10GE1/0/1 10GE2/0/1

DAD Link
Stack Link

Perform the following configuration:

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] dual-active detect mode direct //Configure DAD in
direct mode on an interface.
Warning: The interface will block common data packets, except BPDU packets.
Continue? [Y/N]: y
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] interface 10ge 2/0/1
[*HUAWEI-10GE2/0/1] dual-active detect mode direct
Warning: The interface will block common data packets, except BPDU packets.
Continue? [Y/N]: y
[*HUAWEI-10GE2/0/1] commit
l DAD in relay mode through Eth-Trunk interfaces: DAD is performed through an
inter-device Eth-Trunk link connected to a relay agent, as shown in Figure 22-78.

Figure 22-78 DAD in relay mode

SwitchC

Relay
10GE1/0/1 10GE1/0/2
Eth-Trunk 1

10GE1/0/5 10GE2/0/5

DAD Link
Stack Link

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 531

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Perform the following configuration:

# Configure DAD in relay mode on the Eth-Trunk interface in the stack.
<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 1
[*HUAWEI-Eth-Trunk1] trunkport 10ge 1/0/5
[*HUAWEI-Eth-Trunk1] trunkport 10ge 2/0/5
[*HUAWEI-Eth-Trunk1] dual-active detect mode relay //Configure DAD on
the Eth-Trunk interface.
[*HUAWEI-Eth-Trunk1] commit

# Configure the DAD relay function on the Eth-Trunk interface of the relay agent.
<HUAWEI> system-view
[~HUAWEI] sysname SwitchC
[*HUAWEI] commit
[~SwitchC] interface eth-trunk 1
[*SwitchC-Eth-Trunk1] trunkport 10ge 1/0/1
[*SwitchC-Eth-Trunk1] trunkport 10ge 1/0/2
[*SwitchC-Eth-Trunk1] dual-active proxy //Configure the relay function
on the Eth-Trunk interface of the relay agent.
[*SwitchC-Eth-Trunk1] commit

l DAD through management interfaces: DAD is performed through the management

interfaces of member switches, as shown in Figure 22-79.

Figure 22-79 DAD through management interfaces

Management
network

MEth0/0/0 MEth0/0/0

DAD link
Stack link

Perform the following configuration:

<HUAWEI> system-view
[~HUAWEI] interface meth 0/0/0
[~HUAWEI-MEth0/0/0] ip address 192.168.10.1 24 //Configure an IP address
for the management interface.
[*HUAWEI-MEth0/0/0] dual-active detect enable //Configure DAD on the
management interface.
[*HUAWEI-MEth0/0/0] commit

22.7.61 Which Ports Can Be Used to Configure DAD?

The following ports can be used to configure DAD:
l Service port
l Eth-Trunk port

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 532

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Stack port (supported only when the stack is set up by CE12800 and CE12800E switches
in MPU connection mode)
l Management port

22.7.62 Can SIP Ports Be Used to Configure DAD?

SIP ports are only used for stack connections and cannot have DAD configured.

22.7.63 Can Stack Ports Be Used to Configure DAD?

Stack ports can be used to configure DAD only when the stack is set up by the CE12800 and
CE12800E switches in MPU connection mode.

22.7.64 Can Management Interfaces Be Used to Configure DAD?

Management interfaces of stack member switches can be used to configure DAD. To
configure DAD on a management interface, configure an IP address for the interface.

22.7.65 Must DAD Be Configured?

DAD is optional. To prevent the dual-active scenario caused by a stack split, you are advised
to configure DAD in a stack.

22.7.66 Can Dual-Active Detection Be Performed on Ports in a VS?

Yes.

22.7.67 Can DAD-Enabled Ports Run Services?

Ports configured with dual-active detection (DAD) in direct mode cannot run other services.
Eth-Trunks configured with DAD in relay mode can run other services properly.

22.7.68 Does a Blocked Port Still Support DAD After DAD in

Direct Mode Is Configured on It?
The blocked port still supports DAD.
After DAD in direct mode is configured on a port, the port is blocked and processes only
BPDU packets without forwarding common service packets. Because standard BPDUs are
used for DAD, the DAD function is not affected when the port is blocked.

22.7.69 Can I Log In to a Switch That Fails the DAD Competition

Through Its Management Network Port?
If a backup IP address has been configured for a switch that fails the DAD competition, you
can log in to the switch through its management network port. If no backup IP address is
configured for a switch that fails the DAD competition, its management network port will be
disabled.
Configure a backup IP address for a switch.
<HUAWEI> system-view
[~HUAWEI] interface meth 0/0/0
[~HUAWEI-MEth0/0/0] dual-active backup ip address 192.168.1.175 24 member all
[*HUAWEI-MEth0/0/0] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 533

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.7.70 What State Is an Eth-Trunk in After the Stack Split If

DAD Is Not Configured for the Stack?
As shown in the following figure, SwitchB and SwitchC set up a stack, and SwitchA and
SwitchD are dual-homed to both SwitchB and SwitchC through Eth-Trunk links.

Figure 22-80 Networking diagram

SwitchA

Eth-Trunk

SwitchB SwitchC

Eth-Trunk

SwitchD

l If the Eth-Trunk is configured in manual mode, no loop will occur on SwitchA and
SwitchD after the stack split. The traffic forwarding paths are the same as those before
the stack split, for example, SwitchA -> SwitchB -> SwitchD and SwitchA -> SwitchC -
> SwitchD.
l When the Eth-Trunk is configured in static LACP mode, the traffic forwarding paths are
the same before and after the stack split if the standby switch still uses the system MAC
address. If the standby switch uses its own MAC address after the stack split, traffic can
only be forwarded through one port and no loop will occur. This is because, in the static
LACP mode, a physical member port in the Eth-Trunk goes Down and only one physical
member port can go Up.

22.8 Virtualization - SVF

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 534

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.8.1 Which CE Series Switch Models and Versions Support

SVF?

SVF System of Fixed Switches

Table 22-41 Device models and versions used to set up SVF systems of fixed switches

Version Parent Switch Leaf Switch Remarks

Model Model

V100R00 CE6850-48S4Q-EI l CE5810-48T4S l In V100R005C00 and earlier

3C00 -EI versions, leaf switches in an
V100R00 l CE5810-24T4S SVF system must be the same
3C10 -EI series. For example,
CE5810-48T4S-EI and
l CE6810-48S4Q CE5810-24T4S-EI can belong
-EI to the same SVF system, but
V100R00 CE6850-48S4Q-EI l CE5810-48T4S CE6810-48S4Q-EI and
5C00 -EI CE5810-48T4S-EI cannot.
l Versions of leaf switches must
l CE5810-24T4S
be the initial version that
-EI
supports this model of
l CE6810-48S4Q switches as leaf switches or
-EI higher versions.
CE6810-48S4Q-EI l CE5810-48T4S l In V100R005C00, when a
-EI CE6810-48S4Q-EI functions
as a leaf switch, its last 40GE
l CE5810-24T4S
interface cannot be split.
-EI

CE7850-32Q-EI l CE6810-48S4Q
-EI

V100R00 CE6850-48S4Q-EI l CE5810-48T4S l In V100R005C10 and later

5C10 -EI versions, leaf switches in an
l CE5810-24T4S SVF system can be switches
-EI of different series and models.
For example, CE6810-48S4Q-
l CE6810-48S4Q EI and CE5810-48T4S-EI can
-EI belong to the same SVF
CE6810-48S4Q-EI l CE5810-48T4S system.
-EI l Versions of leaf switches must
be the initial version that
l CE5810-24T4S
supports this model of
-EI
switches as leaf switches or
l CE5850-48T4S higher versions.
2Q-EI
l In V100R005C10, when a
CE6810-48S4Q-EI,
CE6810-48S4Q-LI, or
CE6810-32T16S4Q-LI
functions as a leaf switch, its

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 535

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Version Parent Switch Leaf Switch Remarks

Model Model

CE7850-32Q-EI l CE6810-48S4Q last 40GE interface cannot be

-EI split. This limitation does not
l CE6810-48S-LI apply to a CE7850-32Q-EI
that functions as a parent
l CE6810-48S4Q switch.
-LI
In V100R006C00 and later
l CE6810-24S2Q versions, by default, when a
-LI CE6810-48S4Q-EI,
l CE6810-32T16 CE6810-48S4Q-LI, or
S4Q-LI CE6810-32T16S4Q-LI
functions as a leaf switch, its
l CE6850-48S6Q l CE5810-48T4S last 40GE interface cannot be
-HI -EI split. This limitation does not
l CE6850U-48S6 l CE5810-24T4S apply to a CE7850-32Q-EI
Q-HI -EI that functions as a parent
switch. If you need to split the
l CE6850U-24S2 l CE6810-48S4Q
last 40GE interface, run the
Q-HI -EI
device exclude leaf-type
l CE6810-48S-LI ce5810ei command to prevent
l CE6810-48S4Q a CE5810EI from joining an
-LI SVF system as a leaf switch.
l CE6810-24S2Q l When a CE6810LI functions
-LI as a leaf switch to establish an
SVF system with a parent
l CE6810-32T16
switch using 40GE high-speed
S4Q-LI
cables, both leaf and parent
V100R00 CE6850-48S4Q-EI l CE5810-48T4S switches need to be upgraded
6C00 -EI to V100R005C10SPC200 or a
later version.
l CE5810-24T4S
-EI
l CE6810-48S4Q
-EI

CE6810-48S4Q-EI l CE5810-48T4S
-EI
l CE5810-24T4S
-EI
l CE5850-48T4S
2Q-EI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 536

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Version Parent Switch Leaf Switch Remarks

Model Model

CE7850-32Q-EI l CE5850-48T4S
2Q-EI
l CE5855-48T4S
2Q-EI
l CE5855-24T4S
2Q-EI
l CE6810-48S4Q
-EI
l CE6810-48S-LI
l CE6810-48S4Q
-LI
l CE6810-24S2Q
-LI
l CE6810-32T16
S4Q-LI
l CE6850-48S6Q
-HI
l CE6850-48T6Q
-HI
l CE6851-48S6Q
-HI

l CE6850-48S6Q l CE5810-48T4S
-HI -EI
l CE6850U-48S6 l CE5810-24T4S
Q-HI -EI
l CE6850U-24S2 l CE6810-48S4Q
Q-HI -EI
l CE6810-48S-LI
l CE6810-48S4Q
-LI
l CE6810-24S2Q
-LI
l CE6810-32T16
S4Q-LI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 537

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Version Parent Switch Leaf Switch Remarks

Model Model

CE6851-48S6Q-HI l CE5855-48T4S
2Q-EI
l CE5855-24T4S
2Q-EI
l CE6810-48S-LI
l CE6810-48S4Q
-LI
l CE6810-24S2Q
-LI
l CE6810-32T16
S4Q-LI

V200R00 CE6850-48S4Q-EI l CE5810-48T4S

1C00 -EI
V200R00 l CE5810-24T4S
2C50 -EI
V200R00 l CE6810-48S4Q
3C00 -EI
V200R00 CE6810-48S4Q-EI l CE5810-48T4S
5C00 -EI
l CE5810-24T4S
-EI
l CE5850-48T4S
2Q-EI

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 538

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Version Parent Switch Leaf Switch Remarks

Model Model

l CE7850-32Q- l CE5850-48T4S
EI 2Q-EI
l CE7855-32Q- l CE5855-48T4S
EI 2Q-EI
l CE5855-24T4S
2Q-EI
l CE6810-48S4Q
-EI
l CE6810-48S-LI
l CE6810-48S4Q
-LI
l CE6810-24S2Q
-LI
l CE6810-32T16
S4Q-LI
l CE6850-48S6Q
-HI
l CE6850-48T6Q
-HI
l CE6851-48S6Q
-HI
l CE6850U-48S6
Q-HI
l CE6850U-24S2
Q-HI
NOTE
The
CE6850U-48S6Q-
HI/
CE6850U-24S2Q-
HI can function as a
leaf switch from
V200R002C50.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 539

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Version Parent Switch Leaf Switch Remarks

Model Model

l CE6850-48S6Q l CE5810-48T4S
-HI -EI
l CE6850U-48S6 l CE5810-24T4S
Q-HI -EI
l CE6850U-24S2 l CE6810-48S4Q
Q-HI -EI
l CE6850-48T6 l CE6810-48S-LI
Q-HI l CE6810-48S4Q
NOTE -LI
The l CE6810-24S2Q
CE6850-48T6Q-HI
-LI
can function as a
parent switch from l CE6810-32T16
V200R002C50. S4Q-LI

l CE6851-48S6Q l CE5855-48T4S
-HI 2Q-EI
l CE6855-48S6Q l CE5855-24T4S
-HI 2Q-EI
l CE6856-48S6Q l CE6810-48S-LI
-HI l CE6810-48S4Q
NOTE -LI
The
CE6856-48S6Q-HI l CE6810-24S2Q
can function as a -LI
parent switch from l CE6810-32T16
V200R002C50.
S4Q-LI

22.8.2 Is the SVF Function License Controlled?

SVF is a basic feature of CE series switches and is not license controlled.

22.8.3 How Do I Load a License for SVF?

To load a license for SVF, you only need to load the license on the parent switch. The
procedure is as follows:
1. Apply for a license and upload the license file to the parent switch.
You only need to apply for a license for the parent switch. If the parent switch is a
standalone device, use its ESN to apply for a license. If it is a stack of two devices, use
the ESNs of the two devices to apply for a shared license or use each ESN to apply for a
license.
2. Run the license active file-name command in the user view to activate the uploaded
license file.
– If there are multiple license files, run the license active file-name command
multiple times and specify different license file names. The system will then find
the matching ESN to activate the license files.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 540

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

– If there is only one license file, run the license active file-name command once.
3. Run the display license command to check whether a license file has been loaded.

22.8.4 How Do I Load Patches for SVF?

To load patches for SVF, you only need to load the patches on the parent switch. The
procedure is as follows:
1. Upload a patch file to the parent switch. The patch file must match the parent switch
model.
2. Run the patch load filename all run command in the user view to load and run patches.
3. Run the display patch-information verbose command to check whether patches are
loaded successfully.

22.8.5 Can CE6800s Have SVF Configured After They Set Up a

Stack?
When a CE6800 functions as the parent switch, it can have SVF configured after setting up a
stack; however, the stack can contain at most two member switches.
If a CE6800 functions as a leaf switch, it cannot set up a stack.

22.8.6 Can Leaf Switches in an SVF System Be Different Models?

In an SVF system of fixed switches running V100R005C10 or later versions, leaf switches
can be different models. In V100R005C00 and earlier versions, leaf switches must be the
same series. For example, CE5810-48T4S-EI and CE5810-24T4S-EI can belong to the same
SVF system, but CE6810-48S4Q-EI and CE5810-48T4S-EI cannot belong to the same SVF
system.

22.8.7 What Advantages and Disadvantages Do SVF Forwarding

Modes Provide?
Leaf switches in an SVF system of fixed switches support the following forwarding modes:
l Centralized forwarding: Leaf switches send all traffic to the parent switch for
forwarding.
l Distributed forwarding, Leaf switches look up local forwarding entries to forward traffic.
If they fail to find matching entries for Layer 3 traffic, they discard the traffic. If they fail
to find matching entries for Layer 2 traffic, they broadcast the traffic within the SVF
system.
l Hybrid forwarding: Leaf switches learn only local ARP and MAC address entries. (Only
service ports learn entries, while ports connecting to the parent switch do not learn
entries). They send broadcast and multicast traffic to the parent switch for forwarding
and look up local forwarding entries to forward unicast traffic. If they fail to find the
matching entries, they send unicast traffic to the parent switch for forwarding.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 541

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-42 Advantages and disadvantages of SVF forwarding modes

Forwarding Mode Advantage Disadvantage

Centralized forwarding Leaf and parent switches Leaf switches need to send
have the same entry all traffic to the parent
specifications; therefore, switch for forwarding,
low-cost leaf switches can leading to a high latency.
be deployed.

Distributed forwarding Leaf switches forward local The entry specifications of

traffic, achieving a low leaf switches depend on the
latency. specifications of leaf
switches. Therefore, some
functions are not supported
on leaf switches.

Hybrid forwarding Leaf and parent switches -

have the same entry
specifications; therefore,
low-cost leaf switches can
be deployed.
Leaf switches forward local
traffic instead of sending
traffic to the parent switch
for forwarding, achieving a
low latency.

22.8.8 Can the Parent and Leaf Switches in an SVF System Be

Connected Across Switches That Transparently Transmit
Packets?
No, they cannot because the parent and leaf switches must be directly connected.

22.8.9 How Do I Restart a Leaf Switch in an SVF System?

In an SVF system of fixed switches, run the reset slot slot-id command to restart the specified
leaf switch. slot-id or chassis-id specifies the ID of a leaf switch.

22.8.10 What Will Happen to a Leaf Switch After It Is Removed

from an SVF System?
After a leaf switch is removed from an SVF system, this leaf switch repeatedly restarts in leaf
mode until it joins this or another SVF system or until an administrator logs in to it through a
console port to restore it to the normal working mode.

22.8.11 How to Restore the Leaf Switch to the Stack Mode?

If the leaf switch is still in the SVF system, log in to the SVF system and perform the
following steps to remove the switch from the SVF system:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 542

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

1. Run the command in the switch mode stack member member-id command in the stack
management view to set the next startup mode of the leaf switch to the stack mode.
2. Run the reset slot slot-id command in the user view to restart the leaf switch.

If a leaf switch has been removed from an SVF system, perform the following steps to restore
the switch to the stack mode:
1. Log in to the switch through the console port.
2. During the startup process, press Ctrl+B to enter the BIOS menu. The prompt
information is "Press CTRL+B to enter BIOS menu or CTRL+E to boot DFX".
3. In the BIOS menu, choose 6. Modify stack parameters > 2. Modify stack
configuration > 2. Stack mode > 3. Return > 1. Continue to boot to set the working
mode of the switch to stack mode, and then choose to continue the startup

22.8.12 Do Leaf Switches Need to Be Upgraded Separately During

an SVF Upgrade?
During an SVF upgrade, leaf switches automatically synchronize their software versions with
the parent switch for an upgrade. Therefore, leaf switches do not need to be upgraded
separately during an SVF upgrade.

22.9 Virtualization - VS

22.9.1 In Which Versions Can VS Be Configured on CE12800 and

CE12800E and Is a License Required?
CE12800 switches support VS in V100R002C00 and later versions, and each switch can have
a maximum of 16 VSs (including the Admin-VS) configured.

CE12800E (equipped with ED-E, EG-E, and EGA-E series cards) switches support VS in
V200R002C50 and later versions, and each switch can have a maximum of 16 VSs (including
the Admin-VS) configured.

The CE12800E does not support the VS function after FD-X series cards are installed.

The VS function is under license control.

22.9.2 Do CE8800, CE7800, CE6800, and CE5800 Series Switches

Support VS?
CE8800, CE7800, CE6800, and CE5800 series switches do not support VS.

22.9.3 How Do I Assign Ports to VSs?

VSs work in group mode and port mode. The Admin-VS cannot be configured and can be
considered a VS in port mode.
l All the ports on the same forwarding chip of an LPU must be assigned to VSs in group
mode, as shown in Figure 22-81.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 543

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-81 Port assignment for VSs in group mode

VS1

LPU VS2

To check which ports on an LPU belong to the same chip, run the display device port-
map [ slot slot-id ] command in the user or system view.
<HUAWEI> display device port-map slot 1
-------------------------------------------------------------------------
Slot Type Engine Interface
-------------------------------------------------------------------------
1 CE-L24XS-EA 0 10GE1/0/0 - 10GE1/0/23
-------------------------------------------------------------------------
For example, if 24 ports on a CE-L24XS-EA belong to the same forwarding chip, all
these ports will be assigned to VSs in group mode.
l Any ports on an LPU can be assigned to VSs in port mode according to network
requirements, as shown in Figure 22-82.

Figure 22-82 Port assignment for VSs in port mode

VS1

LPU VS2

22.9.4 Can VSs Directly Communicate?

Each VS can be considered an independent device. VSs cannot directly communicate even if
they reside on the same physical device.
VSs can directly communicate only when they are connected using physical ports, similar to
direct communication between physical devices.

22.9.5 How Do I Configure VSs?

NOTE

The following example describes basic stack configurations. For details, see the related product configuration
manual.
<HUAWEI> system-view
[~HUAWEI] admin
[~HUAWEI-admin] virtual-system vs1 //Create a VS named vs1.
[*HUAWEI-admin-vs:vs1] port-mode group //Set the VS mode to group mode. Two
VS modes are available: group mode and port mode.
[*HUAWEI-admin-vs:vs1] assign interface 10GE 1/0/0 //Assign a physical port
to VS.
Warning: All configurations of the interfaces will be deleted. All interfaces of
the same group will be assigned. Continue? [Y/N]: y
[*HUAWEI-admin-vs:vs1] quit
[*HUAWEI-admin] commit
[~HUAWEI-admin] display virtual-system
---------------------------------------------
Name Status
---------------------------------------------
Admin-VS running
vs1 running
---------------------------------------------
If the status of a VS is running, the VS is created.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 544

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.9.6 How to Query Port Group Assignment Information on the

CE12800 and CE12800E Switches During VS Assignment?
The CE12800 and CE12800E switches support two VS assignment modes:
l Port mode: A port on an interface card can be allocated to any VS.
l Port group mode: All ports on the same forwarding chip of an interface card must be
assigned to the same VS.
During assignment of VSs in port group mode, learn about the mapping between ports and
forwarding chips to facilitate port planning. You can run the display device port-map [ slot
slot-id ] command on the CE12800 and CE12800E switches to view the mapping between
ports and forwarding chips.

22.9.7 Can Ports on Different Cards Be Allocated to the Same VS?

You can allocate ports on different boards to the same VS.

22.9.8 Can I Reset a VS Individually? Will Reset of One VS Affect

Other VSs?
You can reset a VS individually except Admin-VS. Resetting a VS does not affect other VSs.

22.9.9 Which Features Are Not Supported in a VS?

Support for most service features in a VS is the same as that on a physical device, except for
the features listed in Table 22-43.

Table 22-43 Support for features in a VS

Feature Support in a VS

Hardware management Hardware operations, such as device restart, card reset, and e-
label backup, can be performed only in the admin-VS and are not
supported in non-admin-VSs. VS information such as CPU and
memory usage can be viewed in non-admin-VSs.

Agile Controller-DCN Only the admin-VS can connect to the Agile Controller-DCN.

Number of VTY users The admin-VS supports a maximum of 21 VTY users.

In V100R003C00 and earlier versions, a non-admin-VS supports
a maximum of 5 VTY users. In versions later than
V100R003C00, a non-admin-VS supports a maximum of 20
VTY users.

Port split Ports assigned to non-admin-VSs cannot be split.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 545

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Feature Support in a VS

CSS l CSS can only be configured in the admin-VS.

l VSs can be created in a CSS. Configure the CSS before
creating VSs. If VSs are created before configuring the CSS,
the configuration may be lost.
l Similar to a single switch, a CSS supports a maximum of 16
VSs.
l In a CSS, dual-active detection (DAD) can only be configured
in the admin-VS.

MPLS, GRE, L3VPN, l Among all VSs in port mode, MPLS, GRE, L3VPN, VLL,
VLL, PWE3, VPLS, PWE3, VPLS, EVN and multicast functions can only be
EVN and multicast configured in the admin-VS.
l MPLS, GRE, L3VPN, VLL, PWE3, VPLS, EVN and
multicast functions can be configured in any VS in group
mode.

MPLS TE In V100R003C00 and earlier versions, MPLS TE functions can

only be configured in the admin-VS.
In V100R003C10 and later versions:
l Among all VSs in port mode, MPLS TE functions can only be
configured in the admin-VS.
l MPLS TE functions can be configured in any VS in group
mode.

TRILL l Transparent Interconnection of Lots of Links (TRILL) can be

configured in the admin-VS if there is no VS in port mode.
No VS in port mode can be configured after TRILL is
configured in the admin-VS.
l If VSs in port mode are configured, TRILL cannot be
configured in any VS in port mode, including the admin-VS.
l All VSs in group mode support TRILL configuration.

VXLAN In V100R003C10 and V100R005C00, VXLAN takes effect only

in the admin-VS.
From V100R005C10:
l Among all VSs in port mode, VXLAN function can only be
configured in the admin-VS.
l VXLAN function can be configured in any VS in group
mode.

M-LAG l Among all VSs in port mode, M-LAG can only be configured
in the admin-VS.
l M-LAG can be configured in any VS in group mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 546

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Feature Support in a VS

TCAM ACL l All VSs in group mode support TCAM ACL customization.
customization l In earlier versions of V100R006C00, among VSs in port
mode, only the admin-VS supports TCAM ACL
customization. In V100R006C00 and later versions, the VS in
port mode and TCAM ACL customization cannot be
configured simultaneously.

NTP NTP can only be configured in Admin-VS. After a VS is created,

the non-Admin-VS system time is the same as the Admin-VS
system time.

OpenFlow A switch can set up an OpenFlow connection with the controller

only in an admin-VS.

22.9.10 How Are Patch Files Loaded for VSs?

System patch files can only be loaded in the admin-VS, but not in each VS.

22.9.11 How Can I Switch from a VS Back to the Admin-VS?

After an administrator runs the switch virtual-system vs-name command in the user view to
switch from the Admin-VS to a specified VS, you can run the quit command in the user view
of the VS to exit from this VS and return to the user view of the Admin-VS.

22.9.12 How Many VSs Can Be Created on a CE12800 or

CE12800E?
A maximum of 16 VSs including the admin-VS can be created on a CE12800 or CE12800E.
When the default resource specifications are used, you can create seven VSs in port group
mode. To create more VSs in port group mode, adjust the number of VLANs to be used by
VSs.

22.9.13 Can VSs Be Created on CE12800 and CE12800E Switches

After They Set Up a Stack?
VSs can be created on CE12800 and CE12800E switches after they set up a stack.

22.9.14 Can Ports of Different Stack Member Switches Be

Allocated to the Same VS?
Ports of different stack member switches can be allocated to the same VS.

22.9.15 Why Cannot TRILL Be Configured in the Admin-VS After

VSs Are Configured in Port Mode?
There are the following constraints for configuring Transparent Interconnection of Lots of
Links (TRILL):

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 547

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l TRILL can be configured in the admin-VS if there is no VS in port mode. No VS in port

mode can be configured after TRILL is configured in the admin-VS.
l If VSs in port mode are configured, TRILL cannot be configured in any VS in port
mode, including the admin-VS.
l All VSs in group mode support TRILL configuration.

22.9.16 Can VSs in Group Mode and VSs in Port Mode Co-exist?
VSs in group mode and VSs in port mode can be configured on the same switch.

22.9.17 How Do I Change the Port Assignment Mode of a VS?

The port assignment mode that has been configured for a VS cannot be changed or deleted. To
change the port assignment mode of a VS, delete this VS, create the VS again, and then
specify a new port assignment mode for this VS.

22.9.18 Does a VS Have a Management Interface?

A VS has a management interface.
After a VS is created, the system virtualizes a management interface for this VS. An
administrator can configure an independent IP address for each virtualized management
interface.

22.9.19 How Do VSs Communicate?

VSs cannot communicate directly. If two VSs need to communicate, connect physical
interfaces between the two VSs using cables and then configure services to enable them to
communicate.

22.9.20 Does a VS Need to Be Restarted After Resources Are

Configured for this VS?
After resources are configured for a VS, both this VS and the device do not need to be
restarted.

22.9.21 How Do I Enter from the Admin-VS to a Non Admin-VS?

After creating a VS, an administrator can run the switch virtual-system vs-name command in
the user view to enter from the Admin-VS to this created VS.
After entering the VS, you can run the quit command in the user view of this VS to exit this
VS and return to the user view of the Admin-VS.

22.9.22 How Do I Assign a Port in a VS to Another VS?

Delete the port from the current VS and then add this port to another VS.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 548

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.9.23 If Some Ports in a Group Are Configured as Stack

Member Ports, Can Other Ports in This Group Be Assigned to a
VS in Group Mode?
In versions earlier than V100R005C00, after some ports in a group have been configured as
stack member ports, other ports in this group cannot be assigned to a VS in group mode.

In V100R005C00 and later versions, after some ports in a group have been configured as
stack member ports, other ports in this group can be assigned to a VS in group mode.

22.9.24 Does Creating or Deleting a VS Require the Switch to Be

Restarted?
Creating or deleting a VS does not require the switch to be restarted.

22.10 Basic Configurations - License

22.10.1 What Is Required When I Apply for a CE Series Switch

License?
When applying for a license, you must provide the following information:

l Authorization ID (LAC), Activation ID, or contact No.

You can obtain the information from the license authorization certificate.
l Equipment serial number (ESN). To apply for a license for a stack system, you need to
provide ESNs of all member devices.
The method of obtaining an ESN varies according to the software version:
– Versions earlier than V100R005C00
For CE12800 series switches, run the display esn command.
<HUAWEI> display esn
ESN of chassis 1 : 21023553380DCCE12808

For CE7800 series switches, run the display device manufacture-info command.
<HUAWEI> display device manufacture-info
-------------------------------------------------------------------------
---
Slot Card Type Serial-number Manu-date
-------------------------------------------------------------------------
---
1 -- CE7850-32Q-EI 210235925010E9000010 2014-09-19
FAN1 FAN-40HA-F 210235909610E9000038 2014-09-11
FAN2 FAN-40HA-F 210235909610E9000024 2014-09-11
PWR1 PAC-600WA-F 2102310PMJD0E9000037 2014-09-09
PWR2 PAC-600WA-F 2102310PMJD0E9000010 2014-09-08
-------------------------------------------------------------------------
---

– V100R005C00 and later versions

For CE12800, CE12800E, CE8800, CE7800, CE6800, and CE5800 series switches,
run the display sn license command.
<HUAWEI> display sn license
Equipment SN(ESN) for license:
Chassis 1 ESN: 21023553380DCCE12801

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 549

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

For details about the CE series switch license, including license introduction, common operations, and
application procedure, see the CloudEngine Series Switches License Use Guide.

22.10.2 What Features Are Licensed?

Tables list licensed features of CE series switches. Licensed features can be configured and
used only after the license is activated.

NOTE

l The FCF feature is controlled by two kinds of licenses: CE-LIC-FCF-ALL and CE-LIC-FCF-PORT.
For CE12800 and CE12800E series switches, the license CE-LIC-FCF-ALL supports FCF
configuration on all the interfaces. The license CE-LIC-FCF-PORT supports FCF configuration on a
total of 48 interfaces of the same card or different cards. You can load multiple CE-LIC-FCF-PORT
licenses to meet capacity expansion requirements. For CE8800, CE7800, and CE6800 series
switches, the license CE-LIC-FCF-PORT supports FCF configuration on a total of 16 interfaces.
l After a license is loaded, you can configure the Telemetry function only after the device is restarted
in the V200R003C00 version, and you can configure functions corresponding to other features
without the need of restarting the device.
l For the CE8868EI, after one of the following licenses is loaded, you need to run the active card-
license command to enable the corresponding license in the specified subcard slot. The CE8868EI
has four subcard slots. You can purchase licenses based on the number of required subcard slots.
l 25GE rate upgrade license: CE-LIC-25G01
l 40GE port license: CE-LIC-40G01
l 100GE port license: CE-LIC-100G01
l For the CE6880EI, the 1588v2 function has been controlled by the license since V200R005C10. If
the switch is upgraded from V200R005C00 to V200R005C10 or a later version, the 1588v2 function
is not affected, but the 1588v2 function configuration cannot be added or modified. You are advised
to apply for and load a 1588v2 license after the upgrade.

Table 22-44 License control items supported by the CE12800 series switches

License Model Minimum Before After License

Control Item Version License Activation
Required Activation

MPLS function CE128-LIC- V100R001C00 This function This function

of the MPLS does not take takes effect and
CE12800: effect and can be
DE0S00MPLS0 cannot be configured.
1 configured.

TRILL function CE128-LIC- V100R001C00 This function This function

of the TRILL does not take takes effect and
CE12800: effect and can be
DE0S0TRILL0 cannot be configured.
1 configured.

VS function of CE128-LIC-VS V100R002C00 This function This function

the CE12800: does not take takes effect and
DE0S0000VS0 effect and can be
1 cannot be configured.
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 550

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Minimum Before After License

Control Item Version License Activation
Required Activation

IPv6 function CE128-LIC- V100R002C00 This function This function

of the IPv6 does not take takes effect and
CE12800: effect and can be
CE128-LIC- cannot be configured.
IPv6 configured.

EVN function CE128-LIC- V100R003C00 This function This function

of the EVN does not take takes effect and
CE12800: effect and can be
CE128-LIC- cannot be configured.
EVN configured.
No license is
required when
EVN BGP is
applied for the
ARP broadcast
packet
suppression
function in a
VXLAN.

FCF for all CE128-LIC- V100R005C00 This function This function

ports of the FCFAL does not take takes effect and
CE12800: CE- effect and can be
LIC-FCF-ALL cannot be configured.
configured.

FCF for 48 CE128-LIC- V100R005C00 This function This function

ports of the FCF48 does not take takes effect and
CE12800: CE- effect and can be
LIC-FCF- cannot be configured.
PORT configured.

Telemetry CE128-LIC- V200R003C00 This function This function

function of the TLM does not take takes effect and
CE12800: CE- effect and can be
LIC-TLM cannot be configured.
configured.

MACsec CE128-LIC- V200R005C00 This function This function

function of the MACSEC does not take takes effect and
CE12800: CE- effect and can be
LIC-MACSEC cannot be configured.
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 551

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Minimum Before After License

Control Item Version License Activation
Required Activation

Function CE128-LIC- V100R003C00 The MPLS, The MPLS,

authorization BUN01 TRILL, VS, TRILL, VS,
package 1 of IPv6, and EVN IPv6, and EVN
the CE12800: functions do not functions take
CE128-LIC- take effect and effect and can
BUN01 cannot be be configured.
configured.

Function CE128-LIC- V100R005C00 The MPLS, The MPLS,

authorization BUN03 TRILL, VS, TRILL, VS,
package 3 of IPv6, EVN, and IPv6, EVN, and
the CE12800: FCF functions FCF functions
CE128-LIC- do not take take effect and
BUN03 effect and can be
cannot be configured.
configured.

Stacking CE128-LIC- V200R002C50 The MPLS, The MPLS,

enhancement ESTK TRILL, VS, TRILL, VS,
license of IPv6, EVN, and IPv6, EVN, and
service ports on FCF functions FCF functions
the CE12800: do not take take effect and
CE128-LIC- effect and can be
ESTK cannot be configured.
configured.

Table 22-45 License control items supported by the CE12800E series switches
License Model Product Before After License
Control Item Model and License Activation
Minimum Activation
Version

VS function of CE128E-LIC- CE12800E This function This function

the CE12800E: VS equipped with does not take takes effect and
DE0S0000VS0 the ED-E, EG- effect and can be
1 E, or EGA-E cannot be configured.
series cards: configured.
V200R002C50

IPv6 function CE128E-LIC- V200R002C50 This function This function

of the IPV6 does not take takes effect and
CE12800E: effect and can be
CE128-LIC- cannot be configured.
IPv6 configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 552

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Before After License

Control Item Model and License Activation
Minimum Activation
Version

NSH function CE128E-LIC- CE12800E This function This function

of the NSH equipped with does not take takes effect and
CE12800E: CE- the ED-E, EG- effect and can be
LIC-NSH E, or EGA-E cannot be configured.
series cards: configured.
V200R002C50

Telemetry CE128E-LIC- V200R003C00 This function This function

function of the TLM does not take takes effect and
CE12800E: CE- effect and can be
LIC-TLM cannot be configured.
configured.

Low-latency CE128E-LIC- CE12800E Low-latency This function

network AIF equipped with network takes effect and
function of the the FD-X series functions can be
CE12800E: CE- cards: excluding rapid configured.
LIC-LLETH V200R005C00 ECN
congestion flag
and dynamic
load balancing
do not take
effect and
cannot be
configured.

1588v2 (PTP) CE128E-LIC- CE12800E This function This function

function of the PTP equipped with does not take takes effect and
CE12800E: CE- the FD-X series effect and can be
LIC-PTP cards: cannot be configured.
V200R005C00 configured.
CE12800E
equipped with
the ED-E, EG-
E, and EGA-E
series cards:
V200R005C10

Discarded CE128E-LIC- CE12800E This function This function

packet capture TLM equipped with does not take takes effect and
function of the the FD-X series effect and can be
CE12800E: CE- cards: cannot be configured.
LIC-TLM V200R005C00 configured.

IOAM function CE128E-LIC- CE12800E This function This function

of the TLM equipped with does not take takes effect and
CE12800E: CE- the FD-X series effect and can be
LIC-TLM cards: cannot be configured.
V200R005C00 configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 553

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-46 License control items supported by the CE8800 series switches
License Model Product Model Before After License
Control Item and Minimum License Activation
Version Activation

VXLAN CE88-LIC- V100R006C00 This function This function

function of the VXLAN does not take takes effect and
CE8800: CE- effect and can be
LIC-VXLAN cannot be configured.
configured.

FCF for all CE88-LIC- V100R006C00 This function This function

ports of the FCFAL does not take takes effect and
CE8800: CE- effect and can be
LIC-FCF-ALL cannot be configured.
configured.

FCF for 16 CE88-LIC- V100R006C00 This function This function

ports of the FCF16 does not take takes effect and
CE8800: CE- effect and can be
LIC-FCF- cannot be configured.
PORT configured.

FCoE NPV CE88-LIC- V100R006C00 This function This function

function of the NPV does not take takes effect and
CE8800: CE- effect and can be
LIC-NPV cannot be configured.
configured.

Telemetry CE88-LIC- V200R003C00 This function This function

function of the TLM does not take takes effect and
CE8800: CE- effect and can be
LIC-TLM cannot be configured.
configured.

Low-latency CE88-LIC-AIF CE8850-64CQ- Low-latency Low-latency

network EI, CE8861EI, network network
function of the CE8868EI: functions functions take
CE8800: CE- V200R005C00 excluding rapid effect and can
LIC-LLETH ECN be configured.
congestion flag
and dynamic
load balancing
do not take
effect and
cannot be
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 554

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Model Before After License

Control Item and Minimum License Activation
Version Activation

1588v2 (PTP) CE88-LIC-PTP CE8850-64CQ- This function This function

function of the EI: does not take takes effect and
CE8800: CE- V200R005C00 effect and can be
LIC-PTP cannot be configured.
configured.

Discarded CE88-LIC- CE8850-64CQ- This function This function

packet capture TLM EI, CE8861EI, does not take takes effect and
function of the CE8868EI: effect and can be
CE8800: CE- V200R005C00 cannot be configured.
LIC-TLM configured.

IOAM function CE88-LIC- CE8850-64CQ- This function This function

of the CE8800: TLM EI, CE8861EI, does not take takes effect and
CE-LIC-TLM CE8868EI: effect and can be
V200R005C00 cannot be configured.
configured.

25GE rate CE88-LIC-25G CE8868EI: The SFP28 The SFP28

upgrade of the V200R005C10 interface works interface works
CE8800: CE- at the rate of 10 at the rate of 25
LIC-25G01 Gbit/s. Gbit/s.

40GE port of CE88-LIC-40G CE8868EI: The CE88- The CE88-

the CE8800: V200R005C10 D16Q subcard D16Q subcard
CE-LIC-40G01 cannot be can be
registered, and registered, and
the interface is the interface is
unavailable. available.

100GE port of CE88- CE8868EI: The CE88- The CE88-

the CE8800: LIC-100G V200R005C10 D8CQ subcard D8CQ subcard
CE- cannot be can be
LIC-100G01 registered, and registered, and
the interface is the interface is
unavailable. available.

Finance-level CE88-LIC- V200R005C10 Enhanced dual- Enhanced dual-

high reliability FINHA active active
of the CE8800: detection detection
CE-LIC- (DAD) in a (DAD) in a
FINHA stack system stack system
cannot take takes effect and
effect and can be
cannot be configured.
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 555

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Model Before After License

Control Item and Minimum License Activation
Version Activation

Function CE88-LIC- V100R006C00 The VXLAN, For a device

authorization BUN01 FCF, and NPV supporting the
package 1 of functions do VXLAN, FCF,
the CE8800: not take effect or NPV
CE88-LIC- and cannot be function, the
BUN01 configured. corresponding
function takes
effect and can
be configured
on the device.

Table 22-47 License control items supported by the CE7800 series switches
License Model Product Model Before After License
Control Item and Minimum License Activation
Version Activation

VXLAN CE-LIC- V100R003C10S This function This function

function of the VXLAN PC100 does not take takes effect and
CE7800: CE- effect and can be
LIC-VXLAN cannot be configured.
configured.

FCF for all CE78-LIC- V100R005C00 This function This function

ports of the FCFAL does not take takes effect and
CE7800: CE- effect and can be
LIC-FCF-ALL cannot be configured.
configured.

FCF for 16 CE78-LIC- V100R005C00 This function This function

ports of the FCF16 does not take takes effect and
CE7800: CE- effect and can be
LIC-FCF- cannot be configured.
PORT configured.

FCoE NPV CE78-LIC- V100R005C00 This function This function

function of the NPV does not take takes effect and
CE7800: CE- effect and can be
LIC-NPV cannot be configured.
configured.

Telemetry CE78-LIC- V200R003C00 This function This function

function of the TLM does not take takes effect and
CE7800: CE- effect and can be
LIC-TLM cannot be configured.
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 556

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Model Before After License

Control Item and Minimum License Activation
Version Activation

Finance-level CE78-LIC- V200R005C10 Enhanced dual- Enhanced dual-

high reliability FINHA active active
of the CE7800: detection detection
CE-LIC- (DAD) in a (DAD) in a
FINHA stack system stack system
cannot take takes effect and
effect and can be
cannot be configured.
configured.

Function CE78-LIC- V100R005C00 The VXLAN, For a device

authorization BUN01 FCF, and NPV supporting the
package 1 of functions do VXLAN, FCF,
the CE7800: not take effect or NPV
CE78-LIC- and cannot be function, the
BUN01 configured. corresponding
function takes
effect and can
be configured
on the device.

Table 22-48 Functional license control items supported by the CE6800 series switches
License Model Product Model Before After License
Control Item and Minimum License Activation
Version Activation

VXLAN CE68-LIC- CE6855HI, This function This function

function of the VXLAN CE6856HI, does not take takes effect and
CE6800: CE- CE6850HI, effect and can be
LIC-VXLAN CE6850U-HI, cannot be configured.
CE6851HI, configured.
CE6857EI,
CE6860EI,
CE6865EI,
CE6870EI,
CE6875EI, and
CE6880EI:
V100R005C00

FCF for all CE68-LIC- CE6800 series This function This function
ports of the FCFAL switches does not take takes effect and
CE6800: CE- excluding the effect and can be
LIC-FCF-ALL CE6810LI and cannot be configured.
CE6880EI: configured.
V100R005C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 557

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Model Before After License

Control Item and Minimum License Activation
Version Activation

FCF for 16 CE68-LIC- CE6800 series This function This function

ports of the FCF16 switches does not take takes effect and
CE6800: CE- excluding the effect and can be
LIC-FCF- CE6810LI and cannot be configured.
PORT CE6880EI: configured.
V100R005C00

FCOE NPV CE6800-LIC- CE6800 series This function This function

function of the NPV switches does not take takes effect and
CE6800: CE- excluding the effect and can be
LIC-NPV CE6810LI, cannot be configured.
CE6870EI, configured.
CE6875EI, and
CE6880EI:
V100R005C00

NSH function CE68-LIC- CE6880EI: This function This function

of the CE6800: NSH V200R002C50 does not take takes effect and
CE-LIC-NSH effect and can be
cannot be configured.
configured.

Telemetry CE68-LIC- V200R003C00 This function This function

function of the TLM does not take takes effect and
CE6800: CE- effect and can be
LIC-TLM cannot be configured.
configured.

MACsec CE68-LIC- CE6875EI: This function This function

function of the MACSEC V200R005C00 does not take takes effect and
CE6800: CE- effect and can be
LIC-MACSEC cannot be configured.
configured.

Low-latency CE68-LIC-AIF CE6865EI: Low-latency This function

network V200R005C00 network takes effect and
function of the functions can be
CE6800: CE- excluding rapid configured.
LIC-LLETH ECN
congestion flag
and dynamic
load balancing
do not take
effect and
cannot be
configured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 558

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Model Product Model Before After License

Control Item and Minimum License Activation
Version Activation

1588v2 (PTP) CE68-LIC-PTP CE6865EI: This function This function

function of the V200R005C00 does not take takes effect and
CE6800: CE- CE6880EI: effect and can be
LIC-PTP V200R005C10 cannot be configured.
configured.

Discarded CE68-LIC- CE6857EI, This function This function

packet capture TLM CE6865EI: does not take takes effect and
function of the V200R005C00 effect and can be
CE6800: CE- cannot be configured.
LIC-TLM configured.

IOAM function CE68-LIC- CE6865EI: This function This function

of the CE6800: TLM V200R005C00 does not take takes effect and
CE-LIC-TLM effect and can be
cannot be configured.
configured.

Finance-level CE68-LIC- CE6800 series Enhanced dual- Enhanced dual-

high reliability FINHA switches active active
of the CE6800: excluding the detection detection
CE-LIC- CE6880EI: (DAD) in a (DAD) in a
FINHA V200R005C10 stack system stack system
cannot take takes effect and
effect and can be
cannot be configured.
configured.

Function CE68-LIC- CE6800 series The VXLAN, For a device

authorization BUN01 switches FCF, and NPV supporting the
package 1 of excluding the functions do VXLAN, FCF,
the CE6800: CE6810LI: not take effect or NPV
CE68-LIC- V100R005C00 and cannot be function, the
BUN01 configured. corresponding
function takes
effect and can
be configured
on the device.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 559

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-49 Functional license control items supported by the CE5800 series switches
License Model Product Model Before After License
Control Item and Minimum License Activation
Version Activation

VXLAN CE58-LIC- CE5880EI: This function This function

function of the VXLAN V200R005C10 does not take takes effect and
CE5800: CE- effect and can be
LIC-VXLAN cannot be configured.
configured.

NSH function CE58-LIC- CE5880EI: This function This function

of the CE5800: NSH V200R005C10 does not take takes effect and
CE-LIC-NSH effect and can be
cannot be configured.
configured.

Telemetry CE58-LIC- CE5880EI: This function This function

function of the TLM V200R005C10 does not take takes effect and
CE5800: CE- effect and can be
LIC-TLM cannot be configured.
configured.

22.10.3 Why Does a License File Fail to Be Activated?

The possible causes for a license activation failure include:
l The product type or device ESN does not match the license file. In this case, you need to
apply for a new license that matches the product type or device ESN.
l The license revoke command has been run to revoke the license file. To verify whether
this command has been executed, run the display license revoke-ticket command. If a
character string (revocation code) is displayed, the command has been run. Use the
revocation code and other required information to apply for a new license. For details
about the other required information, see What Is Required When I Apply for a CE
Series Switch License.

22.10.4 How Do I Load a License for a Stack System?

The following describes the procedure for loading a license in a stack system:
1. Apply for a license and upload the license file to the stack master.
A license is bound to the ESN of a physical device. Each stack member has an
independent ESN. You can apply for the same license for multiple ESNs or apply for a
license for each ESN. In a stack, you need to apply for and load the same license for each
stack member.
If there are multiple .dat license files, compress all the license files into a .zip file and
upload the .zip file to the stack master.
2. Run the license active file-name command in the user view to activate the uploaded
license file.
3. Run the display license command to check whether a license file has been loaded. If the
license status is Normal, the license file has been successfully loaded.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 560

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The following example describes how to load licenses in a stack of CE8800, CE7800,
CE6800, and CE5800 series switches.
l If there are multiple license files:
Compress multiple .dat license files into a .zip file, upload and load the .zip file to the
stack master.
<HUAWEI> license active license_file.zip

l If there is only one license file:

<HUAWEI> license active license_file.dat

22.10.5 Do I Need to Apply for a New License After the Device Is

Upgraded?
After the device is upgraded, the old license file is still valid and the functions supported in
the license file remain unchanged.
If you want to use the new licensed functions of the new version, you must apply for the
license for the new functions.

22.10.6 Can a License File Be Successfully Loaded If Its Version Is

Later Than the System Software Version?
Yes.

22.10.7 What Should I Do When a License File Changes to the

Trial State?
A license file in trial state cannot be activated again. If the trial period expires, successfully
delivered configurations of a licensed feature will be retained and used normally. You can
delete existing service configurations related to the licensed feature, but cannot add new
configurations. Therefore, you need to apply for a new license and activate it before the
current license expires. Otherwise, services will be affected.
If a license file has changed to the trial state, send the revocation code and switch ESN to
[email protected] to bind the license to the ESN again.

22.10.8 Do I Need to Manually Load and Activate the License on

the Standby MPU?
No. The standby MPU automatically synchronizes the license file from the active MPU.

22.10.9 What Should I Do If the License Activation Code Is Lost?

If the license activation code is lost, you can use either of the following methods to obtain it:
l If you have a license authorization certificate, obtain the license activation code from the
certificate, as shown in the following figure.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 561

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-83 License authorization certificate

NOTE
A license authorization certificate is in electronic PDF format or printed format and made together with
the sales contract. The printed certificates are delivered with the products. The electronic certificates in
PDF format are sent to the customers' email boxes by the license management system.
l If you do not have a license authorization certificate, send an email that contains the
Huawei contract number of the purchased device to [email protected] to seek
technical support.
NOTE

If you do not have the Huawei contract number, contact the dealer.

22.10.10 Does a Switch Need to Restart After a License Is

Activated?
After a license is loaded, you can configure the Telemetry function only after the device is
restarted, and you can configure functions corresponding to other features without the need of
restarting the device.

22.10.11 How Do I View the Loaded License?

Run the display license command in any view to view license file information in the system.
<HUAWEI> display license
Active License : flash:/LICORTF197173-8A8BCCA031_CloudEngine12800.dat //

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 562

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Activated license file name and path

License state : Demo
Revoke ticket : No ticket //License revocation code

RD of Huawei Technologies Co., Ltd.

Product name : CloudEngine 12800

Product version : V100R006
License Serial No : LIC20140724008A50
Creator : Huawei Technologies Co., Ltd.
Created Time : 2014-07-24 15:31:50
Feature name : CELIC
Authorize type : demo
Expired date : 2014-09-22
Trial days : -

Item name Item type Value Description

-------------------------------------------------------------
DE0S00MPLS01 Function YES CE128-LIC-MPLS
DE0S0000VS01 Function YES CE128-LIC-VS
DE0S0TRILL01 Function YES CE128-LIC-TRILL
CE128-LIC-IPv6 Function YES CE128-LIC-IPv6
CE128-LIC-EVN Function YES CE128-LIC-EVN

Master board license state: Demo. The license for the current configuration will
expire in 12 day(s).
Apply for authentic license before the current license expires.

22.10.12 How Do I Obtain a License File?

After you purchase a license, you can obtain the license file (*.dat file) based on the license
authorization code (LAC) and device ESN using the following methods:
l Visit the website app.huawei.com/isdp, click Password Activation under License
Activation, enter the activation code and ESN as prompted to complete license
activation, and then download the license file.
l Send the LAC and device ESN to [email protected] to obtain the license file.

22.10.13 How Do I View a License Revocation Code?

Run the following command in any view to view a license revocation code:
l CE12800 and CE12800E series switches: Run the display license revoke-ticket
[ chassis chassis-number ] command.
l CE8800, CE7800, CE6800, and CE5800 series switches: Run the display license
revoke-ticket [ slot slot-id ] command.
chassis-number indicates a stack chassis ID, and slot-id indicates a switch slot ID.
<HUAWEI> display license revoke-ticket
Info: The revoke ticket is:
LIC20121103006100:27C1B773ED11D9F877855CDAEE74ABFE60E07126.

22.10.14 Which CE Switches Support the NQA Function and Is a

License Required?

Version Support
The following table lists the models and minimum software versions supporting NQA.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 563

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-50 Products and minimum version supporting NQA

Product Model Minimum Version Required

CE8868EI/CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI/CE6860EI/CE6856HI/ V200R002C50
CE6880EI

CE6857EI V200R005C10

CE6875EI V200R003C00

CE6865EI V200R005C00

CE5880EI V200R005C10

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R005C10

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

NOTE

The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6 function is enabled
on an interface of the CE6810LI, the configured IPv4 or IPv6 address can only be used to manage the switch.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 564

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

License Support
CE12800 and CE12800E series switches:

The NQA IPv6 function can be used only after the IPv6 feature is enabled, whereas the IPv6
feature is under license control. By default, the IPv6 feature is disabled on new purchased
CE12800 and CE12800E series switche. To use the IPv6 feature, apply for and purchase the
license from the equipment supplier.

CE8800, CE7800, CE6800, and CE5800 Series Switches:

NQA is a basic feature of CE8800, CE7800, CE6800, and CE5800 Series Switches and is not
under license control.

22.10.15 How Do I Revoke a License?

Run the following commands in the user view to revoke a license, change it to the trial state,
and obtain a revocation code.
l On CE12800 and CE12800E series switches, run the license revoke [ chassis chassis-
number ] command.
l On CE8800, CE7800, CE6800, and CE5800 series switches, run the license revoke
[ slot slot-id ] command.

chassis-number specifies a stacked chassis ID, and slot-id specifies a switch's slot ID.
<HUAWEI> license revoke
Warning: The license will switch to trial state. Continue? [Y/N]: y
MainBoard:
Info: Succeeded in revoking the license. The revoke ticket is
LIC201411261KSC50:87CE09A70A7401C7D0E1853B7931E3FA755AC88D.

22.10.16 Which ESN Should Be Bound by a License When A

Switch Is Equipped with Dual MPUs?

A license is bound to the backplane ESN of a switch, that is, the chassis ESN.
<HUAWEI> display sn
Chassis 1:
Equipment SN(ESN): 210211377210E2000079
License ESN: 210211377210E2000079
----------------------------------------------------------------------------
Slot Sub Type SN P/N
----------------------------------------------------------------------------
-- -- BackPlane 210211377210E2000079 02113772
1 -- CE-L48XS-EA 021KNW10D1000065 03021KNW
2 -- CE-L24XS-EF 022GGE10D8000020 03022GGE
5 -- CE-L36CQ-FD 023CLS10G4000122 03023CLS
6 -- CE-L48GT-EA 022BEU10D7000114 03022BEU
7 -- CE-L48XS-ED -- --
9 -- CE-L24XS-ED -- --
11 -- CE-L48XS-EA 021KNW10D2000002 03021KNW
13 -- CE-MPUA 021NUD10D1000120 03021NUD
14 -- CE-MPUA 021NUD10E1000495 03021NUD
15 -- CE-CMUA 021NMV10E1000648 03021NMV
16 -- CE-CMUA 021NMV10E1000632 03021NMV
---- More ----

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 565

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.10.17 Which ESN (IPS Card or Switch ESN) Is Used to Apply

for a License for IPS Card Functions on a CE12800 Switch?
Use the IPS card ESN to apply for a license for IPS card functions on a switch.

22.10.18 Can a Commercial License and a Non-commercial License

Be Merged?
No.

22.11 Basic Configurations - User Login

22.11.1 How Do I Configure Stelnet-based Login?

To log in the device using Stelnet, you need to configure an authentication mode. Currently,
the device supports the following authentication modes: RSA, password, password-rsa, DSA,
password-dsa, ECC, password-ecc, and all. The following describes how to configure two
authentication modes (password and RSA) for Stelnet-based login.

Networking Description
As shown in Figure 22-84, the device functions as an SSH server and has reachable routes to
PC1 and PC2, and the IP address of the management interface on the SSH server is
10.137.217.203. Two login users client001 and client002 need to be configured on the SSH
server. PC1 uses client001 to log in to the SSH server and undergoes a password
authentication; PC2 uses client002 to log in to the SSH server and undergoes an RSA
authentication.

Figure 22-84 Networking diagram for logging in to the device using STelnet

10.137.217.10/24 10.137.217.203/24
PC1

10.137.217.20/24 SSH Server

PC2

Precautions
Take the following precautions when configuring STelnet-based login:
l STelnet V1 has security vulnerabilities. You are advised to log in to the device using
STelnet V2.
l Before configuring STelnet-based login, install the SSH server login software on PC1,
and install the key pair generation software, public key conversion software, and SSH

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 566

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

server login software on PC2. This example uses the third-party software PuTTY as the
SSH server login software.

Procedure
1. Generate a local key pair on the SSH server.
<HUAWEI> system-view
[~HUAWEI] sysname SSH Server
[*HUAWEI] commit
[~SSH Server] rsa local-key-pair create //Generate local RSA host and
server key pairs.
The key name will be: SSH Server_Host
The range of public key size is (512 ~ 2048).
NOTE: Key pair generation will take a short while.
Input the bits in the modulus [default = 2048] : 2048 //You are advised to
set the size of the key pairs to 2048 to improve device security. In
V200R001C00 and later versions, the switch supports only 2048-bit key pairs.
You do not need to enter the value.
[*SSH Server] commit

2. Create an SSH user on the server.

# Configure the VTY user interface.
[~SSH Server] user-interface vty 0 4 //Enter the VTY 0-VTY 4 user interface
view.
[~SSH Server-ui-vty0-4] authentication-mode aaa //Set the authentication
mode for user login to AAA authentication.
[*SSH Server-ui-vty0-4] user privilege level 3 //Set the user level to 3.
[*SSH Server-ui-vty0-4] protocol inbound ssh //Configure the VTY user
interface to support SSH.
[*SSH Server-ui-vty0-4] quit

# Create an SSH user named client001 and configure the password authentication mode
for the user.
[*SSH Server] aaa
[*SSH Server-aaa] local-user client001 password irreversible-cipher
Huawei@123 //Configure the local user name and password.
[*SSH Server-aaa] local-user client001 level 3 //Set the user level to 3.
[*SSH Server-aaa] local-user client001 service-type ssh //Set the service
type for the local user to SSH.
[*SSH Server-aaa] quit
[*SSH Server] ssh user client001 authentication-type password //Set the
authentication mode for client001 to password authentication.

# Create another SSH user named client002 and configure related information for the
user.
a. Create an SSH user named client002 and configure the RSA password
authentication mode for the user.
[*SSH Server] ssh user client002 authentication-type rsa //Set the
authentication mode for client002 to RSA authentication.
[*SSH Server] ssh authorization-type default root

b. Run puttygen.exe on PC2 to generate the public and private key files.
Select SSH2 RSA and click Generate. By moving the cursor in the blank area to
generated the key.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 567

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-85 PuTTY Key Generator (1)

After the key is generated, click Save public key to save the key as the key.pub
file.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 568

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-86 PuTTY Key Generator (2)

Click Save private key. In the PuTTYgen Warning dialog box that is displayed,
click Yes. The private key is saved as the private.ppk file.

Figure 22-87 PuTTY Key Generator (3)

c. Run sshkey.exe on the client. Convert the generated public key to the character
string required for the device.
Open the key.pub file.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 569

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-88 ssh key convert (1)

Click Convert(C). The original and converted public keys are displayed.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 570

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-89 ssh key convert (2)

d. On the SSH server, enter the RSA public key generated on PC2.
[*SSH Server] rsa peer-public-key rsakey001 //Enter the RSA public key
view.
[*SSH Server-rsa-public-key] public-key-code begin //Enter the RSA
public key editing view.
[*SSH Server-rsa-public-key-rsa-key-code] 30820108 02820101 00DD8904
1A5E30AA 976F384B 5DB366A7 //Edit the public key.
[*SSH Server-rsa-public-key-rsa-key-code] 048C0E79 06EC6B08 8BB9567D
75914B5B 4EA7B2E5 1938D118
[*SSH Server-rsa-public-key-rsa-key-code] 4B863A38 BA7E0F0D BE5C5AE4
CA55B192 B531AC48 B07D21E3
[*SSH Server-rsa-public-key-rsa-key-code] 62E3F2A5 8C04C443 CF51CF51
136B5B9E 812AB1B7 1250EB24
[*SSH Server-rsa-public-key-rsa-key-code] A4AE5083 A1DB18EC E2395C9B
B806E8F0 0BE24FB5 16958784
[*SSH Server-rsa-public-key-rsa-key-code] 403B617F 8AAAB1F8 C6DE8C3C
F09E4D23 7D1C17BF 4AAF09C4
[*SSH Server-rsa-public-key-rsa-key-code] 74C083AF 17CD3075 3396B322
32C57FF0 B1991971 02F1033B
[*SSH Server-rsa-public-key-rsa-key-code] 81AA6D47 44520F23 685FAF72
04BA4B6E 615EF224 14E64E2A
[*SSH Server-rsa-public-key-rsa-key-code] 331EEB7F 188D9805 96DBFD30
0C947A5A BA879DC4 F848B769
[*SSH Server-rsa-public-key-rsa-key-code] 513C35CD B52B2917 02B77693
F79910EE 5287F252 977F985E

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 571

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

[*SSH Server-rsa-public-key-rsa-key-code] 5F186C94 93F26780 4E7F5F9D

5287350A 0A4F4988 1BF6AB7C
[*SSH Server-rsa-public-key-rsa-key-code] 1B020125
[*SSH Server-rsa-public-key-rsa-key-code] public-key-code end //Exit
the RSA public key editing view.
[*SSH Server-rsa-public-key] peer-public-key end //Exit the RSA public
key view.

e. On the SSH server, bind the RSA public key to the client002 user.
[*SSH Server] ssh user client002 assign rsa-key rsakey001
[*SSH Server] commit

3. Enable the STelnet service on the SSH server.

[~SSH Server] stelnet server enable
[*SSH Server] commit

4. Configure the STelnet service type for the client001 and client002 users.
[~SSH Server] ssh user client001 service-type stelnet
[*SSH Server] ssh user client002 service-type stelnet
[*SSH Server] commit

Verification
After the configuration is complete, use PuTTY to log in to the SSH server from the PC.
d(The output information may vary according to version. Therefore, the output information on
your device may be different from that provided in this example.)
l Log in to the SSH server as the client001 user from PC1 in password authentication
mode.
# Log in to the device using PuTTY, enter the device's IP address, and select the SSH
protocol.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 572

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-90 Logging in to the SSH server using PuTTY in password authentication
mode

# Click Open. On the displayed page, enter the user name client001 and password
Huawei@123, then press Enter to log in to the SSH server.
login as: client001
Sent username "client001"
[email protected]'s password:

Info: The max number of VTY users is 21, the number of current VTY users
online is 2, and total number of terminal users online is 2.
The current login time is 2012-08-04 20:09:11+00:00.
First login successfully.
<SSH Server>

l Log in to the SSH server as the client002 user from PC2 in RSA authentication mode.
# Log in to the device using PuTTY, enter the device's IP address, and select the SSH
protocol.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 573

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-91 PuTTY Configuration - RSA authentication mode (1)

# Choose Connection > SSH in the navigation tree. The page shown in Figure 22-92 is
displayed. Select 2 under Preferred SSH protocol version.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 574

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-92 PuTTY Configuration - RSA authentication mode (2)

# Choose Connection > SSH > Auth in the navigation tree. The page shown in Figure
22-93 is displayed. Select the private.ppk file corresponding to the public key
configured on the server.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 575

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-93 PuTTY Configuration - RSA authentication mode (3)

# Click Open. Enter the user name client002 at the prompt, and press Enter. You have
logged in to the SSH server.
login as: client002
Authenticating with public key "rsa-key"

Info: The max number of VTY users is 5, the number of current VTY users
online is 2, and total number of terminal users online is 2.
The current login time is 2012-08-06 04:30:23+00:00.
First login successfully.
<SSH Server>

22.11.2 What Are the Common Causes of SSH Login Failures?

How Do I Handle the Problem?
The common causes of SSH login failures are as follows:
1. The configuration is incorrect. For example, the STelnet service is disabled on the
switch.
Solution: See How Do I Configure Stelnet-based Login?. Check whether the
configuration is correct and complete.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 576

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

2. The switch functions as the SSH server and its SSH version is later than that of the SSH
client. The SSH login fails because the SSH versions are different.
Solution:
– In V100R002C00, run the ssh server compatible-ssh1x disable command in the
system view to configure the SSH server to be compatible with earlier SSH
versions. By default, compatibility with earlier SSH versions is enabled.
– In V100R003C00 and later versions, run the ssh server compatible-ssh1x enable
command in the system view to configure the SSH server to be compatible with
earlier SSH versions. By default, compatibility with earlier SSH versions is
disabled.
3. The switch functions as an SSH client and connects to the SSH server for the first time.
The authentication fails because the SSH server's public key is not configured on the
switch.
Solution: Run the ssh client first-time enable command in the system view to enable
first-time authentication on the SSH client. By default, the function is disabled. Access
the SSH server and save the SSH server's public key on the SSH client. The switch uses
the saved public key to authenticate the SSH server next time it connects to the server.
4. The SSH service type is not configured. By default, no service type is configured.
Solution: Run the ssh user user-name service-type { stelnet | all } command in the
system view to set the SSH service type to STelnet or all.
If the fault persists, contact technical support personnel.

22.11.3 What Should I Do If the Account Is Locked After Multiple

Login Failures?
If a user enters incorrect passwords for six consecutive times within 5 minutes when logging
in to the server using Telnet or STelnet, the IP address of the client or the user name will be
locked for 5 minutes by default. (You can run the local-user authentication lock duration
duration-time command in the AAA view to set the automatic unlock time. The value ranges
from 0 to 1000, in minutes. The default automatic unlock time is 5 minutes.)

Table 22-51 Mapping between authentication modes and IP address or user name locking
Login Mode Authentication Mode Authentication Mode
Causing IP Address Causing User Name
Locking Locking

Telnet Password and none AAA

STelnet DSA, ECC, and RSA Password, password-DSA,

password-ECC, and
password-RSA

l After the IP address of a client is locked, wait for 5 minutes until the system
automatically unlocks the IP address, and attempt to log in to the switch. Alternatively,
use another account to log in to the switch and perform the following operation to unlock
the IP address in advance.
– Telnet login

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 577

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

# Unlock the IP address 10.1.2.3.

<HUAWEI> activate vty ip-block ip-address 10.1.2.3

– STelnet login
# Unlock the IP address 10.1.2.3.
<HUAWEI> activate ssh server ip-block ip-address 10.1.2.3

l If the current user name is locked, use another user name to log in to the switch, and run
the activate aaa local-user user-name command in the user view to unlock the user
name.
# Unlock the user name admin1234.
<HUAWEI> activate aaa local-user admin1234

22.11.4 Must the First Login to a CE Switch Be Implemented

Through a Serial Cable?

If you log in to a CE switch for the first time, you need to connect your terminal and the
switch through a serial cable. CE12800E allow you to use a Micro USB port for fist login,
and CE12800, CE8860EI, CE8861EI, CE8868EI, CE8850-64CQ-EI, CE6875EI, CE6850HI,
CE6856-48T6Q-HI, CE6855-48T6Q-HI, and CE6850U-HI also allow you to use a mini USB
port for first login. That is, you can connect your terminal and the switch through a Mini
USB/Micro USB cable for first login.

22.12 Basic Configurations - Configuration Deletion

22.12.1 What Is Configuration Rollback?

If faults are caused by an incorrect configuration or an unexpected configuration result occurs
on the network after the configuration is committed, you can roll back to the original
configuration.

Configuration rollback is similar to the system restore function of the Windows operating
system. A configuration rollback point is generated each time the commit command is
executed. You can run the rollback configuration last number-of-commits command in the
user view to roll back the current configuration to a previous configuration rollback point.
number-of-commits specifies the configuration rollback point.

For example, run the following commands to create VLANIF 2 and configure an IP address
for VLANIF 2.
<HUAWEI> system-view
[~HUAWEI] vlan batch 2
[*HUAWEI] interface vlanif 2
[*HUAWEI-Vlanif2] ip address 192.168.0.1 255.255.255.0
[*HUAWEI-Vlanif2] commit
[~HUAWEI-Vlanif2] quit
[~HUAWEI] quit

Run the rollback configuration last 1 command in the user view to roll back the
configuration to the previous configuration rollback point.
<HUAWEI> rollback configuration last 1
Warning: This operation will revert configuration changes to the previous status.
Continue? [Y/N]: y

Run the display configuration commit changes last 1 command in any view to check the
configuration changes at configuration rollback point 1.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 578

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> display configuration commit changes last 1

Building configuration
#
- vlan batch 2
#
- interface Vlanif2
- ip address 192.168.0.1 255.255.255.0
#

NOTE

The command output provided here is used for reference only. The output information on your device
may differ from that provided in this example.

22.12.2 How Do I Delete Inactive Configurations from a Card or

Switch That Is Not Installed?
If a card or switch is not installed, you can configure the card or switch in advance. The
configuration is called offline configuration or inactive configuration.
To delete inactive configurations, perform the following operation:
# Delete the inactive configuration in slot 1.
<HUAWEI> system-view
[~HUAWEI] clear inactive-configuration slot 1
Warning: The inactive configuration of slot 1 will be deleted and can't be
restored.
Are you sure to continue? [Y/N]: y

NOTE

l For CE8800&CE7800&CE6800&CE5800 series switches, the clear inactive-configuration

command can be used only in a stack or an SVF system.
l Before running this command, ensure that the specified card or switch is not installed.
l This command deletes inactive configurations from the specified card or switch, so an error message
will be displayed if a user commits other configurations that depend on the deleted configurations.

22.13 Basic Configurations - File Management

22.13.1 How Do I Enable the FTP Server on the Device?

Refer to the following procedure to enable the FTP server function on the device (Assume
that the local user name and password are admin1234 and Helloworld@6789 respectively):
<HUAWEI> system-view
[~HUAWEI] ftp server enable
[*HUAWEI] aaa
[*HUAWEI-aaa] local-user admin1234 password irreversible-cipher Helloworld@6789
[*HUAWEI-aaa] local-user admin1234 level 3
[*HUAWEI-aaa] local-user admin1234 service-type ftp //Set the service type
of the user admin1234 to FTP.
[*HUAWEI-aaa] local-user admin1234 ftp-directory flash: //Set the FTP
working directory of the user admin1234 to flash:/.
[*HUAWEI-aaa] commit
[~HUAWEI-aaa] return
<HUAWEI> save
Warning: The current configuration will be written to the device. Continue? [Y/
N]: y

After the configuration is complete, you can connect to the device from your PC through FTP.
Assume that the management IP address of the FTP server is 10.1.1.1. You can perform the

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 579

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

following steps on your PC to connect to the device (The messages may vary according to the
operating system of the PC, and the following messages are for reference only):
C:\Documents and Settings\Administrator> ftp 10.1.1.1
Connected to 10.1.1.1.
220 FTP service ready.
User (10.136.23.5:(none)): admin1234 //Enter the user name admin1234.
331 Password required for admin1234.
Password: //Enter the password Helloworld@6789. The password will not be
displayed on the terminal.
230 User logged in.
ftp> binary
200 Type set to I.
ftp> put devicesoft.cc //Upload the system file devicesoft.cc to the device.
200 Port command okay.
150 Opening BINARY mode data connection for /devicesoft.cc
226 Transfer complete.
ftp: 4342 bytes sent in 223.23Seconds 560.79Kbytes/sec.
ftp> get vrpcfg.cfg //Back up the configuration file vrpcfg.cfg to the PC.
200 Port command okay.
150 Opening BINARY mode data connection for /vrpcfg.cfg
226 Transfer complete.
ftp: 4342 bytes received in 0.04Seconds 120.6Kbytes/sec.

22.14 Basic Configurations - System Startup

22.14.1 How Do I Specify Files for Next Startup?

Files for next startup include system software, configuration files, and patch files. Commands
for specifying files for next startup vary depending on the file type:

l To specify basicsoft.cc as the system software for next startup, run:

<HUAWEI> startup system-software basicsoft.cc

l To specify vrpcfg.cfg as the configuration file for next startup, run:

<HUAWEI> startup saved-configuration vrpcfg.cfg

NOTE

After specifying the configuration file for next startup, do not save the current configuration when
using the reboot command to restart the device. When the following message is displayed, enter
N:
Warning: The current configuration will be saved to the next startup saved-configuration file.
Continue? [Y/N]: N
Alternatively, run the copy source-filename startup destination-filename [ slot slot-id |
all ] command to copy the configuration file and set the file copy as the configuration
file for next startup. This command has been supported since V200R005C00.
NOTE

CE12800 and CE12800E series switches do not support slot slot-id and all parameters.
l To specify patch.pat as the patch file for next startup, run (all indicates all cards or stack
member switches):
<HUAWEI> startup patch patch.pat all

22.14.2 Do CE Series Switches of Different Models Use the Same

System Software Package?
A device must run the system software package that matches the device model.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 580

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l The system software package used by the CE12800E series switches is different from
that used by the CE12800 series switches. (The file name extension of the system
software package is .cc.)
The system software package of V200R002C50SPC800 is used as an example.
– The system software package used by the CE12800E series switches is named as
CE12800E-V200R002C50SPC800.cc.
– The system software package used by the CE12800 series switches is named as
CE12800-V200R002C50SPC800.cc.
NOTE

The system software of the CE12800E equipped with the ED-E, EG-E, or EGA-E series cards is
different from that of the CE12800E equipped with the FD-X series cards. For example, the name
of the system software is CE12800E-V200R005C00.cc when the ED-E, EG-E, or EGA-E series
cards are installed, and the name of the system software is CE12800E-X-V200R005C10.cc when
the FD-X series cards are installed. Supported configurations differ depending on the system
software. Before replacing the system software, verify that the current configurations match the
system software of the device.
l CE8800, CE7800, CE6800, and CE5800 series switches of EI/HI/LI models have
corresponding system software packages that are named based on the switch models.
For example:
– CE7850EI-V100R003C00SPC600.cc
– CE6810EI-V100R003C00SPC600.cc
– CE6850EI-V100R003C00SPC600.cc
– CE5810EI-V100R003C00SPC600.cc
– CE5850EI-V100R003C00SPC600.cc
– CE5850HI-V100R003C00SPC600.cc
Some models are further classified into the optical and electrical models. For example,
for CE6870EI series switches, the system software package used by the
CE6870-48T6CQ-EI is different from that used by other CE6870EI switches.
– The system software package used by the CE6870-48T6CQ-EI is named as
CE6870T-EI-V200R002C50SPC800.cc.
– The system software package used by other CE6870EI switches is named as
CE6870S-EI-V200R002C50SPC800.cc.

22.14.3 How Do I Handle System Startup Faults?

Common system startup faults are as follows:
l Symptom 1: The switch cannot be powered on and the power indicator is off.
Troubleshooting method:
a. Check whether the power supply is normal, whether the power module works
properly, and whether the power switch of the power module is turned on.
b. If the switch passes the preceding checks, a hardware fault may occur. Contact
technical support personnel.
l Symptom 2: The switch is normally powered on, relevant indicators are steady on, but
the BIOS menu is not displayed.
Troubleshooting method: A hardware fault or software error may occur. Contact
technical support personnel.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 581

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Symptom 3: The switch restarts repeatedly, the BIOS menu is displayed, but the switch
fails to register.
Troubleshooting method:
a. Check whether the system software package is damaged. If the system displays
error messages indicating that the size of the system software package is incorrect
or CRC check fails, the system software package is damaged. You are advised to
use the BIOS menu to upload the correct system software package again.
b. Check whether the MPU successfully obtains the system software package. For
details, see How Do I Handle an MPU's Failure to Obtain the System Software
Package During a Startup.
c. Check whether the memory is normal. Restart the switch, and press CTRL+T
within 3 seconds when "Press CTRL+T for full memory test" is displayed to enter
the BIOS memory test menu to test the system memory. If the test result shows that
the memory is abnormal, contact technical support personnel.

22.14.4 How Do I Handle an MPU's Failure to Obtain the System

Software Package During a Startup?
If an MPU of a switch restarts repeatedly and the console display shows the following
information, the MPU fails to obtain the system software package.
*************************************************************
* Copyright (C) <2012-2013> Huawei Technologies Co., Ltd. *
*************************************************************

CloudEngine BIOS Version: 221 (Oct 24 2013 - 16:37:30)

Board Name ..................................... CE-MPUA
SDRAM Memory Initializing ...................... BEGIN
SDRAM Memory Size .............................. 8 Gbytes
SDRAM Memory Initializing ...................... DONE

Press CTRL+T for full memory test .............. skip

Starting ...

Press CTRL+B to enter BIOS menu or CTRL+E to boot DFX: 0

The startup file is NULL, please set the correct startup file.
Auto boot fail ...

If this fault occurs, perform the following steps to locate the fault (save operation records):
Step 1: Enter the BIOS menu and view the system flash directory to check whether the switch
contains the system software package (with the file name extension .cc).
l If so, go to step 2.
l If not, go to step 4.
Take system software package CE12800-V100R002C00SPC200.cc as an example. The
operation procedure is as follows:
Press CTRL+B to enter BIOS menu: //Press CTRL+B to enter the BIOS menu.

Password: //Enter the BIOS password. The default password is

[email protected].

BIOS Menu (Version: 221)

1. Continue to boot

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 582

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

2. Update from serial interface

3. Update from ethernet interface
4. Modify startup parameters
5. File system
6. Modify BIOS password
7. Modify console password
8. Reboot

Enter your choice(1-8): 5

File system Submenu

1. List flash files

2. Upload file to server
3. Return

Enter your choice(1-3): 1

...
71803089 Sun Jan 23 08:58:44 2000 CE12800-V100R002C00SPC200.cc

In the file system submenu, select 3. Return to return to the BIOS menu.
Step 2: Check and modify system startup parameters, and specify the system software
package in the flash directory as the next startup file.
1. Check the current startup file. The operation procedure is as follows:
BIOS Menu (Version: 221)

1. Continue to boot
2. Update from serial interface
3. Update from ethernet interface
4. Modify startup parameters
5. File system
6. Modify BIOS password
7. Modify console password
8. Reboot

Enter your choice(1-8): 4

Startup Submenu

1. Display current startup configuration

2. Modify startup configuration
3. Return

Enter your choice(1-3): 1

Current boot disk : flash
Current startup file : <NULL>
Current config file : <NULL>
2. Modify system startup parameters. The operation procedure is as follows:
Startup Submenu

1. Display current startup configuration

2. Modify startup configuration
3. Return

Enter your choice(1-3): 2

'.' = clear field; Ctrl+C = quit; Enter = use current configuration

Current startup file is "<NULL>", modify the file name if needed.

Input the new file name: CE12800-V100R002C00SPC200.cc //Specify the next
startup file.
The startup file has been modified from "<NULL>" to "CE12800-
V100R002C00SPC200.cc".

Current config file is "<NULL>", modify the file name if needed.

Input the new file name: //Retain the original configuration file and
press Enter to return to the startup submenu.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 583

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Startup Submenu

1. Display current startup configuration

2. Modify startup configuration
3. Return

Enter your choice(1-3): 1 //Check whether the startup file is

successfully changed.
Current boot disk : flash
Current startup file : CE12800-V100R002C00SPC200.cc
Current config file : <NULL>

Select 3. Return to return to the BIOS menu.

Step 3: In the BIOS menu, select 8. Reboot to restart the switch and observe the BIOS
display to check whether the switch can start normally. If not, go to step 4.
Step 4: If the flash memory does not contain the system software package, or the MPU still
fails to restart after the path is reconfigured, reload the system software package. The
operation procedure is as follows:
Log in to Huawei enterprise technical support website to download the system software
package of the corresponding version and load it on the switch. After loading the system
software package, check whether the switch starts normally.
Step 5: If the MPU still fails to start or register after the system software package is reloaded,
the MPU is faulty. Collect the following information and send the information to technical
support personnel.
1. Collect operation records on the serial interface or network interface, and save the
records in a text file.
2. Collect user logs and diagnostic logs. For details, see How Do I Collect Logs of a
Device.
3. Observe the blue E-USB storage indicator in the inner left side of the MPU panel. The
indicator can be steady on, blink fast, blink slowly, or be off.
4. After collecting the preceding information, connect the serial cable to another MPU. The
switch restarts normally. After entering the command line interface, run the power { off |
on } slot slot-id command in the user view or system view to power off and then power
on the faulty MPU and check whether the switch starts normally.

To prevent information loss, power off the MPU after collecting the preceding
information.

22.14.5 What Should I Do Upon a Failure to Log In to a Switch

Through Third-Party Terminal Emulation Software?
By default, flow control is disabled on a switch. When logging in to a switch through the
console interface using third-party terminal emulation software, you need to deselect flow
control parameters on the third-party terminal emulation software to ensure that flow control
parameter settings on both ends are the same. Otherwise, the login fails. SecureCRT is used as
an example to describe how to disable flow control.

1. Click to create a connection, as shown in Figure 22-94.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 584

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-94 Creating a connection

2. Set the connected interface and communication parameters, as shown in Figure 22-95.
Select the serial interface that is connected to the switch on your PC. For example, on a
PC running a Windows OS, you can view interface information in Device Manager.
Communication parameter settings on the terminal emulation software must be the same
as the default values on the switch, which are: 9600 bit/s baud rate, 8 data bits, 1 stop bit,
no parity check, and no flow control.
NOTE

By default, no flow control mode is configured on the switch. Because RTS/CTS is selected in the
software by default, you need to deselect RTS/CTS; otherwise, you cannot enter commands.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 585

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-95 Setting the connected interface and communication parameters

NOTE

A PC may have more than one serial interface. Select the interface to which the console cable is
connected.
If you modify the serial interface communication parameters on the switch, modify the communication
parameters on the PC to ensure that they use the same communication parameter settings, and then set
up the connection again.

22.14.6 How Do I Upgrade a Switch?

Preparations
Obtain the system software package (.cc file) and patch file (.pat file).
l To obtain a system software package (.cc file), log in to Huawei official website, choose
a CE series switch, click the Downloads tab page, and select the software version.
l The method of obtaining a patch file (.pat file) is the same as that of obtaining a system
software package.

Upgrade Process
1. Upload the system software package and patch file to the switch. For details on how to
upload a file, see 22.13.1 How Do I Enable the FTP Server on the Device?.
2. Configure the system software package for next startup. The following uses a CE12800
as an example, if the CE12800 has two MPUs, copy the system software package to the
standby MPU and specify the next startup file for the standby MPU.
<HUAWEI> copy CE12800-V100R006C00SPC300.cc slave#flash:
<HUAWEI> startup system-software CE12800-V100R006C00SPC300.cc all

3. Configure the patch file for next startup.

<HUAWEI> startup patch patch.pat all

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 586

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

4. Restart the switch.

<HUAWEI> reboot

NOTE

It is recommended that you upgrade member switches in a stack system respectively.

22.14.7 Does a CE Switch Need to Be Restarted After a Patch Is

Loaded?

The CE switch does not need to be restarted. If a fault has occurred, see the precaution in
patch release notes to determine whether to restart the switch or card for fault rectification.

22.14.8 Checking the Running Status of a Patch

You can run the display patch-information verbose command in any view to check detailed
information about a patch file.

# Display the running status of a patch in the system.

<HUAWEI> display patch-information verbose
Patch Package Name :flash:/PATCH.PAT
Patch Package Version :V100R006SPH001
Patch Package State :Running
Patch Package Run Time:2017-11-14 14:02:43

****************************************************************************
* Information about patch errors is as follows: *
****************************************************************************
SlotId CurrentVersion
----------------------------------------------------------------------------
No patch error occurs on any board

Board Info :
----------------------------------------------------------------------------------
------------
SlotId ProcId State PatchType Valid PatchEffectiveTime
PatchFileName
----------------------------------------------------------------------------------
------------
1 1049 Running C YES 2017-11-14 14:02:09.297
HP000012.pat
1 1049 Running C YES 2017-11-14 14:02:09.308
HP000028.pat
----------------------------------------------------------------------------------
------------
Total = 2

The running status of a patch can be:

l Idle: No patch is installed.
l Deactive: The patch status is Deactive.
l Active: The patch status is Active.
l Running: The patch status is Running.

22.15 Basic Configurations - Commands

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 587

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.15.1 Why Do Command Configurations Fail to Take Effect?

The system allows configurations to take effect immediately or in two stages.
l Run the system-view command to enter the system view and edit configurations in two-
stage mode. After running a configuration command, you need to run the commit
command to make the configuration take effect.
l Run the system-view immediately command to enter the system view and edit
configurations in immediate mode. After you run a configuration command and press
Enter, the configuration immediately takes effect.
For V100R003C00 and later versions, if a user modified the configuration in the two-stage
mode but did not commit the configuration, the system prompt changes from ~ to *,
reminding the user that the configuration has not been committed. The system prompt will
change back to ~ after the user runs the commit command. Configurations that are not
committed will not be saved in the configuration file.

22.15.2 Which Commands Can Take Effect Without Being

Committed?
In two-phase validation mode, you must run the commit command for the configuration to
take effect. However, you do not need to run the commit command in the following cases:
l Query commands (such as display interface) are run.
l Maintenance commands (such as slave switchover, dual-active restore, stack upgrade
fast rollback-timer, stack upgrade fast stack member, switch mode, and reset
keepalive packets count) are run.
l Commands are run to enter the existing views (such as the stack view and physical
interface view) on a physical device. For example, the interface 10ge1/0/1 command is
run.
l The existing configurations on a device are reconfigured.

22.15.3 What Precautions Should Be Taken When I Change the

Command Level?
When changing the level of a command using the command-privilege level level view view-
name command-key command, pay attention to the following points:
l command-key specifies the command whose level is to be changed, and view view-name
specifies the command view. For example, if the level of the display interface command
is to be changed, the value of the view-name parameter can only be global because the
display interface command can be executed in any view.
l When the prefix of commands is specified, the level of all commands starting with the
prefix is to be changed. For example, you can run the command-privilege level 2 view
shell display interface command to change the level of all commands starting with
display interface to level 2 in the user view.

22.15.4 What Are the Differences Between the reboot and reboot
fast Commands?
When the reboot command is executed, the system displays a message asking you whether to
save the configuration before restart.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 588

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

When the reboot fast command is executed, the system restarts quickly without displaying
any message and the unsaved configuration is lost.

22.15.5 What Can I Do If Configurations Cannot Be Deleted?

If configurations cannot be deleted, clear the configuration file using either of the following
methods:

Exercise caution when you use the command. You are advised to use it under the guidance of
technical personnel.

l Enable the switch to start with the default configuration.

Run the reset saved-configuration command to clear the configuration file for next
startup. Restart the switch. When you are asked whether to save the configuration, select
N.
<HUAWEI> reset saved-configuration
The action will delete the saved configuration on the device.
The configuration will be erased to reconfigure.Continue? [Y/N]: y
Warning: Now the configuration on the device is being deleted.
..........
Info: Succeeded in clearing the configuration in the device.
<HUAWEI> reboot
slot 1:
Next startup system software: flash:/basicsoftware.cc
Next startup saved-configuration file: NULL
Next startup paf file: default
Next startup patch package: NULL
Warning: The current configuration will be saved to the next startup saved-
confi
guration file. Continue? [Y/N]: n
Warning: The system will reboot. Continue? [Y/N]: y

l Restart the switch with no configuration using the BIOS/BootLoader menu. The
following uses the CE6850EI as an example.
Enter the BIOS main menu, and select 4 to access the startup submenu. Then select 2 to
modify startup configurations.
BIOS Menu (Version: 281)

1. Continue to boot
2. Update from serial interface
3. Update from ethernet interface
4. Modify startup parameters
5. File system
6. Modify BIOS password
7. Modify console password
8. Restore factory defaults
9. Reboot

Enter your choice(1-9): 4

Startup Submenu

1. Display current startup configuration

2. Modify startup configuration
3. Return

Enter your choice(1-3): 2

'.' = clear field; Ctrl+C = quit; Enter = use current

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 589

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

configuration

Current startup file is "software.cc", modify the file name if needed.

Input the new file name: softwarenew.cc
The startup file has been modified from "software.cc" to "softwarenew.cc".

Current config file is "vrpcfg.cfg", modify the file name if

needed.
Input the new file name: . //Enter a period (.) to make the switch to
start with no configuration.

Current patch file is "patchfile.PAT", modify the file name if needed.

Input the new file name: patchfilenew.PAT
The patch file has been modified from "patchfile.PAT" to "patchfilenew.PAT".

22.16 Basic Configurations - Web

22.16.1 Do CE Series Switches Support Web-based Management

System?
CE series switches do not support the web-based management system.

22.17 Interface Management - Interface in Error-Down

State

22.17.1 Why Does the Interface Status Display ERROR

DOWN(link-flap)? How Do I Restore the Interface to Up State?
If the interface status displays ERROR DOWN(link-flap), the interface has link flapping
protection enabled and has frequently alternated between Up and Down states. By default, if
an interface alternates between Up and Down states five times within 10 seconds, the device
shuts down the interface and records the interface status as ERROR DOWN(link-flap). If the
device detects frequent Up/Down state changes on an interface, the device shuts down the
interface to prevent frequent network topology changes, or triggers an active/standby link
switchover if there is a standby link to ensure uninterrupted service transmission.

NOTE

By default, link flapping protection is enabled on CE series switches in V100R002C00 with the patch
V100R002SPH006 loaded as well as V100R003C00 and later versions.

You can run the display interface command to view the interface status.

<HUAWEI> display interface 10GE 1/0/1

10GE1/0/1 current state : ERROR DOWN(link-flap) (ifindex: 5)
Line protocol current state : DOWN
---- More ----

If an interface is in ERROR DOWN(link-flap) state, you are advised to perform the following
operations:
1. Check historical alarms. If many Up/Down alarms of the interface were generated for a
long time, the interface status is unstable. You are advised to check whether the optical
modules and optical fibers on the local and remote interfaces are normal.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 590

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

2. Restore the interface to Up state. By default, an interface in ERROR DOWN state does
not automatically go Up. Run the shutdown and undo shutdown commands to
manually enable the interface. In V200R002C50 and later versions, you can remove and
reinstall the transmission medium on an optical interface to manually restore the
interface to Up state. If an interface is not in Error-Down state, run the error-down
auto-recovery cause link-flap interval interval-value command to configure the
interface to automatically go Up when it is in ERROR DOWN(link-flap) state.
To disable the device from detecting Up/Down events on an interface, you can perform either
of the following operations:
l Disable link flapping detection on the interface. To disable link flapping detection on an
interface, enter the interface view first.
– In V100R002C00 and earlier versions, run the undo port link-flap trigger error-
down command to disable link flapping detection.
– In V100R002C00 with the patch V100R002SPH006 loaded as well as
V100R003C00 and later versions, run the port link-flap threshold 0 command to
disable link flapping detection.
NOTE

If link flapping detection is disabled on an interface, the system does not detect faults caused by
link flapping on the interface in real time. Exercise caution when deciding to perform this
operation.
l Adjust the link flapping detection threshold. If the network adapter of a server
disconnects intermittently during server startup, the device may incorrectly determine the
interface status. You can run the port link-flap { interval interval-value threshold
threshold-value | interval interval-value | threshold threshold-value } command to
increase the link flapping detection threshold.
For more Error-Down troubleshooting methods, see CloudEngine Series Switches Error-
Down Mechanism.

22.18 Interface Management - Optical Module

22.18.1 What Precautions Should Be Taken When Using Optical

Modules?
Identifying Optical Module
Generally, an optical module has a label attached, identifying the speed, center wavelength,
and mode (single-mode or multimode) of the optical module.
Depending on the transmit power and overload power, optical modules are classified in to
short-distance and long-distance optical modules. Optical signals of different bands can travel
different distances. Transmission distances of optical modules are affected by attenuation and
dispersion of optical signals during transmission. Generally, a distance of less than 2 km is
considered a short transmission distance, a distance of 10 km to 20 km is considered a
medium transmission distance, and a distance beyond 20 km is considered a long transmission
distance. The optical modules used on CE series switches support up to 100 km of
transmission distance.
Center wavelengths of optical modules include:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 591

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l 850 nm: multimode optical modules. They are often used for short-distance transmission.
l 1310 nm: mostly single-mode optical modules and a few multimode optical modules.
They are often used for medium- or long-distance transmission.
l 1550 nm: single-mode optical modules. They are often used for long-distance
transmission.

You can also obtain optical module information in the following ways:

l Read documents about optical modules.

l Install an optical module on an interface of the matching type, and then run the display
interface transceiver command to check optical module information.
NOTE

GE and 10GE optical modules look the same. You can identify them by the interface type and speed on
the labels attached to the optical modules:
l eSFP or SFP identifies a GE optical module. SFP+ or XFP identifies a 10GE optical module.
l A GE optical module has GE or 1.25G on its label, whereas a 10GE optical module has 10G on its
label.

Precautions for use of Optical Modules

l The transmit power of a long-distance optical module is often larger than its overload
power. Therefore, when using such optical modules, select optical fibers of an
appropriate length to ensure that the actual receive power is smaller than the overload
power. If the optical fibers connected to a long-distance optical module are too short, use
an optical attenuator to reduce the receive power on the remote optical module.
Otherwise, the remote optical module may be burnt.
l It is recommended that idle optical modules be covered with dust-proof plugs to keep the
optical modules clean. An unclean optical module may degrade the quality of optical
signals or even cause link failures or error codes on the link.
l An optical module usually has Rx/Tx flags or in/out arrowheads (▼/▲) to help you
identify the transmitter and receiver. The transmitter on one end must be connected to
receiver on the other end. Otherwise, the link between two ends cannot go Up.

To avoid injury to your eyes, do not look into optical modules on a device without eye
protection, whether they are long-distance or short-distance optical modules.

22.18.2 How Do I Select Optical Modules and Fibers?

Optical modules work with optical fibers to transmit optical signals. An optical module works
in full-duplex mode with a pair of optical fibers, one for transmission and one for receiving,
as shown in the following figure.
Interface 1 Interface 2
Optical fiber
Rx Tx
Optical module Optical module
Tx Rx
Optical fiber

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 592

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Both optical modules and fibers support two modes: single mode and multimode. The
following table describes mapping between optical modules and fibers.

Optical Module Optical Fiber Working Status

Single-mode optical Single-mode optical fiber Work normally

module

Single-mode optical Multimode optical fiber Can work in a short term

module

Multimode optical Multimode optical fiber Work normally

module

Multimode optical Single-mode optical fiber Cannot work

module

22.18.3 Can GE Optical Modules Be Used on 10GE Interfaces?

Except for 10GE optical interfaces on the CE-L48XS-FG card, 10GE optical interfaces on CE
series switches support GE optical modules and GE copper modules. When GE optical
modules are installed, 10GE optical interfaces work only at the rate of 1000 Mbit/s.
When a GE copper module is installed on a 10GE optical interface, the interface works as
follows:
l In V100R001C00, the interface cannot connect to a 10M/100M interface.
l In V100R002C00 and later versions,
– Interfaces 24-35 on the CE-L48XS-FDA/CE-L48XS-FD card cannot be connected
to 10M/100M interfaces. Under other circumstances, 10GE optical interfaces can be
connected to 10M/100M interfaces.
– On the CE8860EI, CE8861EI, CE8868EI, and CE6860EI, such an interface cannot
connect to a 10M/100M/1000M interface.
– On the CE5810EI, CE6857EI, CE6865EI, and CE6875EI, such an interface can
only connect to a 1000M interface.
– On the CE6880-24S4Q2CQ-EI, such an interface can only connect to a 100M/
1000M interface.
– On the CE6880-48S4Q2CQ-EI, interfaces 1 to 12 can connect to 10M/100M/
1000M interfaces, whereas interfaces 13 to 48 can only connect to 100M/1000M
interfaces.
– On other switch models, such an interface can only connect to a 10M/100M
interface.
– In V200R005C00 and earlier versions, 10GE optical ports on the CE-L48XS-FD1
do not support GE optical or copper modules. In V200R005C10 and later versions,
10GE optical ports on the CE-L48XS-FD1 support GE optical and copper modules.
When a GE copper module is installed on a 10GE optical port, the port supports
only the rate of 1000 Mbit/s.

22.18.4 What Type of Cable Can a 40GE Optical Port Use?

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 593

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

When a 40GE optical port works in 40GE mode, it can use:

l QSFP+ optical module and LC optical fiber
l QSFP+ optical module and MPO-MPO optical fiber
l QSFP+ to QSFP+ high-speed cable
l QSFP+ to QSFP+ AOC cable
When a 40GE optical port works in 4*10GE mode, it can use:
l QSFP+ optical module and MPO-4*DLC or MPO-8*FC optical fiber
l QSFP+ to 4*SFP+ high-speed cable
l QSFP+ to 4*SFP+ AOC cable
High-speed cable
Figure 22-96 shows the appearance of a QSFP+ to QSFP+ high-speed cable.

Figure 22-96 Appearance of a QSFP+ to QSFP+ high-speed cable

Figure 22-97 shows the appearance of a QSFP+ to 4*SFP+ high-speed cable.

Figure 22-97 Appearance of a QSFP+ to 4*SFP+ high-speed cable

Table 22-52 describes usage scenarios of high-speed cables and cable connections in these
scenarios.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 594

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-52 High-speed cable usage scenarios and connections

High-speed cable Connection

QSFP+ to QSFP+ l Scenario 1: used for 40GE optical port connection or stacking
high-speed cable between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 40GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
Both ends connect to a 40GE optical port.

QSFP+ to 4*SFP+ When a 40GE optical port is split into four 10GE optical ports:
high-speed cable l Scenario 1: used for 10GE optical port connection or stacking
between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 10GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
One end connects to the 40GE optical port, and the other end
connects to four 10GE optical ports.

Optical Fiber

Figure 22-98 shows the appearance of an LC single-mode fiber.

Figure 22-98 Appearance of an LC single-mode fiber

Figure 22-99 shows the appearance of an LC multi-mode fiber.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 595

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-99 Appearance of an LC multi-mode fiber

Figure 22-100 shows the appearance of an MPO-MPO fiber.

Figure 22-100 Appearance of an MPO-MPO fiber

Figure 22-101 shows the appearance of an MPO-4*DLC fiber.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 596

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-101 Appearance of an MPO-4*DLC fiber

Figure 22-102 shows the appearance of an MPO-8*FC fiber.

Figure 22-102 Appearance of an MPO-8*FC fiber

Table 22-53 describes usage scenarios of optical fibers and fiber connections in these
scenarios.

NOTE

Table 22-53 describes connections of pigtails at two ends of the optical fibers. Generally, optical ports of
two switches are not directly connected by optical fibers. An optical distribution frame (ODF) is usually
deployed between the two switches.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 597

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-53 Optical fiber usage scenarios and connections

Optical Fiber Connection

LC/PC fiber l Scenario 1: used for 100GE/40GE/10GE optical port connection

or stacking between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 40GE/10GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
Both ends connect to a 100GE/40GE/10GE optical port. A 100GE
optical port uses a CFP or CFP2 optical module; a 40GE optical port
uses a QSFP+ optical module; a 10GE optical module uses an SFP+
optical module.

MPO-MPO fiber l Scenario 1: used for 100GE/40G optical port connection or

stacking between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 40GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
Both ends connect to a 100GE/40GE optical port. A 100GE optical
port uses a CFP, CXP, or CFP2 optical module; a 40GE optical port
uses a QSFP+ optical module.

MPO-4*DLC fiber When a 40GE optical port is split into four 10GE optical ports:

MPO-8*FC fiber l Scenario 1: used for 10GE optical port connection or stacking
between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 10GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
One end connects to the 40GE optical port using a QSFP+ optical
module, and the other end connects to four 10GE optical ports using
SFP+ optical modules.

AOC cable
Figure 22-103 shows the appearance of a QSFP+ to QSFP+ AOC cable.

Figure 22-103 Appearance of a QSFP+ to QSFP+ AOC cable

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 598

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-104 shows the appearance of a QSFP+ to 4*SFP+ AOC cable.

Figure 22-104 Appearance of a QSFP+ to 4*SFP+ AOC cable

Table 22-54 describes usage scenarios of AOC cables and cable connections in these
scenarios.

Table 22-54 AOC cable usage scenarios and connections

Optical Fiber Connection

QSFP+ to QSFP+ l Scenario 1: used for 40GE optical port connection or stacking
AOC cable between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 40GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
Both ends connect to a 40GE optical port.

QSFP+ to 4*SFP+ When a 40GE optical port is split into four 10GE optical ports:
AOC cable l Scenario 1: used for 10GE optical port connection or stacking
between CE12800&CE12800E series switches or
CE8800&7800&6800&5800 series switches
l Scenarios 2: used for 10GE connection between
CE12800&CE12800E and CE8800&7800&6800&5800
switches
One end connects to the 40GE optical port, and the other end
connects to four 10GE optical ports.

22.18.5 Can 40G-SR and 40G-iSR Optical Modules Communicate

with Each Other? What Are Differences of Them?
40G-SR and 40G-iSR optical modules provide similar features and can communicate with
each other. They differ in the maximum transmit power. A 40G-iSR optical module has lower
maximum transmit power than a 40G-SR optical module.
Compared to 40G-SR optical modules, 40G-iSR optical modules are more suitable for
connecting to four 10GE-SR optical modules when 40GE ports are split into 10GE ports.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 599

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.18.6 Are the CE Series Switches Required to Use Optical

Modules That Are Certified for Huawei Ethernet Switches?
The CE series switches must use optical modules that are certified for Huawei Ethernet
switches. Optical or copper modules that are not certified for Huawei Ethernet switches
cannot ensure transmission reliability and may affect service stability. Huawei is not liable for
any problem caused by the use of optical modules that are not certified for Huawei Ethernet
switches and will not fix such problems.

NOTE

To know which optical modules are certified for Huawei Ethernet switches, see "Optical Modules" in the
Hardware Description. All the optical modules listed in this section have been certified for Huawei
Ethernet switches. You can also contact Huawei Technical Assistance Center (TAC) to certify your
optical modules.

22.18.7 How Can I Determine Whether an Optical Module Is

Officially Delivered by Huawei?
You can check whether an optical module is officially delivered by Huawei using one of the
following methods:
l Use the barcode scanning software to scan the two-dimensional code on the optical
module label, obtain the barcode, and contact Huawei engineers to check. The barcode
scanner is recommended as the barcode scanning software.
l Obtain the optical module serial number and contact Huawei engineers to check. View
the optical module serial number in one of the following methods.
– View the optical module label.
– Run the display device elabel command to view the optical module electronic
label. BarCode indicates the optical module serial number.
<HUAWEI> display device elabel
The command is being executed. Please wait...
......
[Port_10GE1/0/3]
/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0

[Board Properties]
BoardType=PLRXPLSCS4322N
BarCode=CB45UF1A2
Item=
Description=10300Mb/sec-850nm-LC-80m(0.05mm)-30m(0.0625mm)-300m(OM3)
Manufactured=2011-11-07
VendorName=JDSU
IssueNumber=
CLEICode=
BOM=
......

– Run the display interface [ interface-type interface-number | slot slot-id ]

transceiver verbose command to view optical module information. Manu. Serial
Number indicates the optical module serial number.
<HUAWEI> display interface 10ge 1/0/3 transceiver

10GE1/0/3 transceiver information:

-------------------------------------------------------------------
Common information:
Transceiver Type :10GBASE_SR

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 600

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Connector Type :LC

Wavelength (nm) :850
Transfer Distance (m) :30(62.5um/125um OM1)
80(50um/125um OM2)
300(50um/125um OM3)
400(50um/125um OM4)
Digital Diagnostic Monitoring :YES
Vendor Name :JDSU
Vendor Part Number :PLRXPLSCS4322N
Ordering Name :
-------------------------------------------------------------------
Manufacture information:
Manu. Serial Number :CB45UF1A2
Manufacturing Date :2011-11-07
Vendor Name :JDSU
-------------------------------------------------------------------
......

l If the device runs V100R003 or a later version, you can check whether an optical module
is certified for Huawei Ethernet switches to determine whether the optical module is
officially delivered by Huawei. If not, an alarm is generated. Therefore, you can check
whether an alarm is generated to determine whether an optical module is officially
delivered by Huawei.
The following alarm is generated when an optical module that is not certified for Huawei
Ethernet switches is detected. You can determine the interface where such an optical
module resides using EntPhysicalName.
1.3.6.1.4.1.2011.5.25.219.2.4.9 hwOpticalUnAuthorized
The optical module was not certified by HUAWEI.
(EntPhysicalIndex=[EntPhysicalIndex], EntPhysicalName=[EntPhysicalName],
EntityTrapFaultID=[EntityTrapFaultID], Reason=[Reason])

NOTE

When an interface detects an optical module that is not certified for Huawei Ethernet switches, an alarm
is generated. The generation of alarms is controlled by the alarm function. By default, the alarm
function is enabled. You can run the undo transceiver non-certified-alarm disable command in the
interface view to enable the alarm function.

22.18.8 Why Are Alarms About Optical Modules That Are Not
Certified for Huawei Ethernet Switches Generated When Optical
Modules Having the Huawei Logo Are Used?
Vendor information of optical modules early delivered from Huawei may not be recorded.
Therefore, alarms about optical modules that are not certified for Huawei Ethernet switches
are generated. You can run the transceiver non-certified-alarm disable command to disable
the alarm function for these optical modules.
<HUAWEI> system-view
[~HUAWEI] transceiver non-certified-alarm disable
[*HUAWEI] commit

22.18.9 How Can I Disable the Alarm Function for Optical

Modules That Are Not Certified for Huawei Ethernet Switches?
Run the transceiver non-certified-alarm disable command to disable the alarm function for
optical modules that are not certified for Huawei Ethernet switches.
<HUAWEI> system-view
[~HUAWEI] transceiver non-certified-alarm disable
[*HUAWEI] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 601

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.18.10 Which Type of Optical Modules Can Be Used on QSFP+

Optical Ports of CE Series Switches?
QSFP+ optical ports of CE series switches must use QSFP+ (40GE) optical modules and
cables.
When a 40GE optical port works in 4*10GE mode, it can use:
l QSFP+ optical module and MPO-4*DLC or MPO-MPO-8*FC optical fiber
l QSFP+ to 4*SFP+ high-speed cable
l QSFP+ to 4*SFP+ AOC cable

22.18.11 How Do I Query the Optical Power of an Interface?

You can run the display interface [ interface-type interface-number | slot slot-id ]
transceiver verbose command to check the optical power of interfaces.
<HUAWEI> display interface 10ge 1/0/1 transceiver verbose

10GE1/0/1 transceiver information:

-------------------------------------------------------------------
......
-------------------------------------------------------------------
Diagnostic information:
Temperature (Celsius) :33.59
Voltage (V) :3.37
Bias Current (mA) :6.30
Bias High Threshold (mA) :10.50
Bias Low Threshold (mA) :2.50
Current RX Power (dBm) :0.50 //Indicate the current
receive power of the optical module.
Default RX Power High Threshold (dBm) :3.01 //Indicate the receive power
upper threshold of the optical module.
Default RX Power Low Threshold (dBm) :-15.02 //Indicate the receive power
lower threshold of the optical module.
Current TX Power (dBm) :-2.38 //Indicate the current
transmit power of the optical module.
Default TX Power High Threshold (dBm) :3.01 //Indicate the transmit
power upper threshold of the optical module.
Default TX Power Low Threshold (dBm) :-9.00 //Indicate the transmit
power lower threshold of the optical module.
-------------------------------------------------------------------

When the receive or transmit power of an optical module exceeds the upper threshold or falls
below the lower threshold, the optical module may fail to work properly.

22.18.12 How Can I View the Serial Number of an Optical

Module?
Run the display device elabel command to view the serial number of an optical module.
<HUAWEI> display device elabel
......
[Port_10GE1/0/1]
/$[ArchivesInfo Version]
/$ArchivesInfoVersion=

[Board Properties]
BoardType=AFBR-703SDZ
BarCode=AD1148A084M
Item=

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 602

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Description=10300Mb/sec-850nm-LC-30(62.5um/125um OM1),80(50um/125um OM2),300(50um/

125um OM3),400(50um/125um OM4)
Manufactured=2011-12-05
VendorName=AVAGO
IssueNumber=
CLEICode=
BOM=
......

In the command output, the BarCode field indicates the serial number.

22.18.13 How Do I View Information About Optical Modules?

You can run the display interface [ interface-type interface-number | slot slot-id ]
transceiver [ verbose ] command to check information about optical modules.

22.18.14 What Information Is Provided on the Label Attached on

an Optical Module?

Generally, the label of an optical module provides the following information: manufacturer,
serial number, speed, center wavelength, mode (single-mode/multimode), and transmission
distance.

l There are FE, GE, 10GE, 25GE, 40GE, and 100GE optical modules to suit various
interface speeds, as well as those with special speeds, including 2G, 4G, 8G, and 16G
optical modules.
l Center wavelengths of optical modules include:
– 850 nm: multimode optical modules. They are often used for short-distance
transmission.
– 1310 nm: mostly single-mode optical modules and a few multimode optical
modules. They are often used for medium- or long-distance transmission.
– 1550 nm: single-mode optical modules. They are often used for long-distance
transmission.
l Depending on core diameters and features, optical fibers are classified into single-mode
and multimode fibers. Generally, multimode fibers have large core diameters and severe
dispersion, so they transmit optical signals over short distances. Single-mode fibers have
small dispersion and can transmit optical signals over long distances.
l Optical signals of different wavelengths can travel different distances. Transmission
distances of optical modules are affected by attenuation and dispersion of optical signals
during transmission. Generally, a distance of less than 2 km is considered a short
transmission distance, a distance of 10 km to 20 km is considered a medium transmission
distance, and a distance beyond 20 km is considered a long transmission distance. The
optical modules used on CE series switches support a transmission distance of up to 100
km.

22.18.15 What 100GE Interface Form Factors Do the CE Switches

Support? What Types of 100GE Interfaces Can Interconnect?

The CE series switches support CFP, CFP2, CXP, and QSFP28 form factors for 100GE
interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 603

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Two 100GE optical interfaces can interconnect successfully when the following two
conditions are met:
l The two interfaces comply with the same standard. For example, a 100GBASE-SR10
interface with the CFP form factor can interconnect with a 100GBASE-SR10 interface
with the CXP form factor.
l Interface parameters (wavelength and physical interface attributes) are the same. For
example, a 100GBASE-SR10 interface with the CFP form factor and a 100GBASE-
eSR10 interface with the CFP2 form factor can interconnect because they both have 100
Gbit/s speed and 850 nm wavelength.

22.18.16 Can the CE Series Switches Use Optical Modules

Matching Other Huawei Products?
The CE switches can use the optical modules matching Huawei S series switches, AR series
routers, WLAN products, and firewall products. (Part numbers of these optical modules start
with 0231). If you want to use optical modules matching products other than the listed ones,
consult Huawei technical support.

22.18.17 Do the CE Series Switches Support BIDI Optical

Modules?
Table 22-55 lists the single-fiber-bidirectional (BIDI) optical modules supported by the CE
series switches and their technical specifications.
NOTE

BIDI optical modules must be used in pairs. For example, an SFP-GE-LX-SM1310-BIDI module must
be used with an SFP-GE-LX-SM1490-BIDI module.

Table 22-55 Technical specifications of BIDI optical modules

Op SFP-10G- SFP-10G- SFP-GE- SFP-GE- SFP-FE- SFP-FE-
tic ER- ER- LX- LX- LX- LX-
al SM1270- SM1330- SM1310- SM1490- SM1310- SM1550-
Mo BIDI BIDI BIDI BIDI BIDI BIDI
dul (Single- (Single- (Single- (Single- (Single- (Single-
e Fiber- Fiber- Fiber- Fiber- Fiber- Fiber-
Mo Bidirectio Bidirectio Bidirectio Bidirectio Bidirectio Bidirectio
del nal nal nal nal nal nal
Module) Module) Module) Module) Module) Module)

Par 02311BJC 02311BJB 02315285 02315286 02315203 02315202

t
nu
mb
er

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 604

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Op SFP-10G- SFP-10G- SFP-GE- SFP-GE- SFP-FE- SFP-FE-

tic ER- ER- LX- LX- LX- LX-
al SM1270- SM1330- SM1310- SM1490- SM1310- SM1550-
Mo BIDI BIDI BIDI BIDI BIDI BIDI
dul (Single- (Single- (Single- (Single- (Single- (Single-
e Fiber- Fiber- Fiber- Fiber- Fiber- Fiber-
Mo Bidirectio Bidirectio Bidirectio Bidirectio Bidirectio Bidirectio
del nal nal nal nal nal nal
Module) Module) Module) Module) Module) Module)

Ver V100R005 V100R005 V100R001 V100R001 V100R002 V100R002

sio C10 and C10 and C00 and C00 and C00 and C00 and
n later later later later later later
sup versions versions versions versions versions versions
por
t

22.18.18 Can 100G Optical Modules of CE Series Switches

Interoperate with Cisco CPAK 100G Optical Modules?

l Huawei CFP and CFP2 100G optical modules can interoperate with Cisco CPAK 100G
optical modules.
l Among QSFP28 100G optical modules, only the ones with 10 km transmission distance
can interoperate with Cisco CPAK 100G optical modules.
l Among CXP 100G optical modules, only the 100GBASE-SR10 modules can
interoperate with Cisco CPAK 100G optical modules.

22.19 Interface Management - Interface Split

22.19.1 Which 40GE Interfaces of CE Series Switches Support the

Interface Split Function?
The following interfaces do not support interface split:
l 40GE interfaces on the CE5850-48T4S2Q-EI
l 100GE interfaces that connect to 40GE media on the CE-L48XS-FDA card
l 40GE1/0/3 to 40GE1/0/6 on the CE5880EI and CE6880EI
l 40GE1/0/1 and 40GE1/0/2 on the CE6880EI that are switched into 100GE interfaces

A 40GE interface on the following cards can be split into two 10GE interfaces:
l A CE88-D16Q card
l A 40GE interface on a CE-L48XS-FDA card can be split into two 10GE interfaces. The
two 40GE interfaces on the CE-L48XS-FDA card must be split simultaneously so that
converted 10GE interfaces can work properly.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 605

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

A 40GE or 100GE interface on the following models and cards can be split into four 10GE
interfaces:
l CE switch models excluding the preceding models
l A QSFP28 interface (or a 100GE interface converted from a 40GE interface) that
connects to a 40GE optical module on the CE8860EI, CE8861EI, CE8868EI, CE8850EI,
CE6870EI, CE6875EI, CE6860EI, CE-L12CQ-FD card, CE-L36CQ-FD card, CE-
L36CQ-FG card, CE-L36CQ-FD1 card, CE-L36CQ-SD card, CE-L16CQ-FD card, FD-
X series cards, CEL16CQEG-E card, CEL24XSEGA-E card, CEL48XSEGA-E card,
CE-L36LQ-FD card, and CE-L24LQ-FD card

22.19.2 Can I Directly Connect 10GE Interfaces Converted from

40GE Interfaces?
If you run the port split command to configure two 40GE interfaces at both ends of a link
into 10GE interfaces respectively, you can use a flange to connect some converted 10GE
interfaces and add the interfaces into an Eth-Trunk to increase the link bandwidth. The other
converted 10GE interfaces that are not connected through the flange can be used for other
purposes.
For example, split a 40GE interface on a CE7850EI into four 10GE interfaces, and add two
converted 10GE interfaces into an Eth-Trunk to provide a bandwidth of 20 Gbit/s.

Figure 22-105 Connecting converted 10GE interfaces through a flange

1. Configure the interface split mode. (Only the CE8850-64CQ-EI, CE7850EI and CE7855EI
support this step.)
<HUAWEI> system-view
[~HUAWEI] port split mode mode2 slot 1 //Configure the interface split mode.
Warning: This operation may cause the split configurations on the board to be
lost. This mode will take effect after board is reset.
Continue? [Y/N]: y
[*HUAWEI] commit
[~HUAWEI] quit
<HUAWEI> save
<HUAWEI> reset slot 1 //Restart the switch to make the configuration take effect.

2. Configure interface split.

<HUAWEI> system-view
[~HUAWEI] port split dimension interface 40ge 1/0/1 split-type 4*10GE //Split
40GE1/0/1 into four 10GE interfaces. A 40GE interface on the CE8860EI, CE8861EI
and CE8868EI can be split into two 10GE interfaces.
Warning: This operation will cause all the other configurations on the port to be
lost, and the configuration will take effect after
the board is reset. Continue? [Y/N]: y
[*HUAWEI] commit
[~HUAWEI] quit
<HUAWEI> save
<HUAWEI> reset slot 1 //Restart the switch to make the configuration take effect
on device models that do not support dynamic interface split.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 606

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

For device models that support dynamic interface split, see Configuration - Interface Management
Configuration Guide - Ethernet Interface Configuration - Configuring Attributes for an Optical Interface
- Configuring Interface Split.

3. Create an Eth-Trunk.
<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 2 //Create an Eth-Trunk.
[*HUAWEI-Eth-Trunk2] trunkport 40ge 1/0/1:1 to 1/0/1:2 //Add 40GE1/0/1:1 and
40GE1/0/1:2 to Eth-Trunk 2.
[*HUAWEI-Eth-Trunk2] commit

22.19.3 How Do I Determine the Port Status Through Indicators

After a 40GE Port Is Split into Four 10GE Ports?

CE12800 and CE12800E

When a 40GE port on these cards is configured as four 10GE ports, the four indicators (1, 2,
3, 4) on the right of the panel show the sequence numbers of the 10GE ports. A CE-L12LQ-
EF card is used as an example here to describe the indicators.

Figure 22-106 Mapping between 10GE ports and sequence number indicators
1 23

CE-L12LQ-EF
1
RUN/ALM
2
3
4

40GE
0 1 2 3 4 5 6 7 8 9 10 11 Breakout

CE-L12LQ-EF
1
RUN/ALM
1
2 2
3 3
4 4

40GE
Breakout

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 607

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-56 Description of indicators on the CE-L12LQ-EF

Number Indicator Col Description
or

1 One single-color Gre l Steady on: A link has been

indicator for each port en established on the port.
NOTE l Blinking: The port is
Arrowheads show the transmitting or receiving
positions of ports. A
data.
down arrowhead
indicates a port at the NOTE
bottom, and an up l A port indicator shows the
arrowhead indicates a status of the corresponding
port at the top. 40GE port by default.
l After a 40GE port is
configured as four 10GE ports,
this indicator shows the status
of a 10GE port. The indicated
10GE port is identified by
sequence number indicators 1,
2, 3, 4. For the mapping
between the four 10GE ports
and sequence number
indicators, see Figure 22-106.
For example, if indicator 1 is
on, the port indicator shows the
status of the first 10GE port
derived from the 40GE port

2 When one or more Gre An optical port indicator (1 in

40GE Breakout button, 40GE ports are split en Figure 22-106) shows the status
used to manually into four 10GE ports, of a 10GE port derived from the
control the 10GE port these indicators corresponding 40GE port:
sequence number identify the sequence l When indicator 1 is on, each
indicators numbers of the 10GE 40GE port indicator shows
ports. the status of the first 10GE
l Automatic control port derived from the
mode: Indicators 1, corresponding 40GE port.
2, 3, 4 turn on in
l When indicator 2 is on, each
cyclic order, with
40GE port indicator shows
each indicator
the status of the second
keeping on for 5s.
10GE port derived from the
l Manual control corresponding 40GE port.
mode: Press the
40GE Breakout l When indicator 3 is on, each
button to turn on 40GE port indicator shows
the 10GE port the status of the third 10GE
sequence number port derived from the
indicators corresponding 40GE port.
cyclically. For l When indicator 4 is on, each
example, if you 40GE port indicator shows
press the 40GE the status of the fourth 10GE
Breakout button port derived from the
when indicator 3 is corresponding 40GE port.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 608

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Number Indicator Col Description

or

3 on, indicator 3 is The following is an example:

10GE port sequence still on. When you The first two 40GE ports (0 and
number indicators (1, press the button a 1) shown in Figure 22-106 are
2, 3, 4) second time, both split into four 10GE ports,
indicator 4 turns and the other 40GE ports (2 to
on. Indicators 1 11) are not split.
and 2 turn on in
l When indicator 1 is on, the
sequence when you
indicator of 40GE port 0
press the 40GE
shows the status of the first
Breakout button a
10GE port derived from
third and fourth
40GE port 0, and the
time. The control
indicator of 40GE port 1
mode restores to
shows the status of the first
the default
10GE port derived from
automatic mode
40GE port 1. Indicators of
60s after you stop
40GE ports 2 to 11 still show
pressing the 40GE
the status of these 40GE
Breakout button.
ports.
NOTE
The automatic control l When indicator 2 is on, the
mode is used by indicator of 40GE port 0
default. shows the status of the
second 10GE port derived
from 40GE port 0, and the
indicator of 40GE port 1
shows the status of the
second 10GE port derived
from 40GE port 1. Indicators
of 40GE ports 2 to 11 still
show the status of these
40GE ports.

CE8800, CE7800, CE6800, and CE5800

CE6850-48T4Q-EI is used as an example here to describe usage of the indicators after 40GE
ports are split into 10GE ports.
After a 40GE port on the CE6850-48T4Q-EI is configured as four 10GE ports, the 10GE port
numbers are identified by 40GE Breakout indicators 1, 2, 3, 4, as shown in Figure 22-107.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 609

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-107 Mapping between 10GE ports and sequence number indicators
1 2
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
SYS
MST
STAT
SPEED
STACK

MODE/ID 40GE 1 2 3 4
CE7850-32Q-EI Breakout

29 30 31 32

40GE 1 2 3 4
Breakout

1
2
3
4

Table 22-57 Description of 40GE Breakout indicators

Number Indicator Colo Description
r

1 One single-color Gree l Steady on: A link has been established

indicator for each n on the port.
40GE port l Blinking: The port is transmitting or
NOTE receiving data.
Arrowheads show the
NOTE
positions of ports. A
down arrowhead l A port indicator shows the status of the
indicates a port at the corresponding 40GE port by default.
bottom, and an up l After a 40GE port is configured as four
arrowhead indicates a 10GE ports, this indicator shows the status
port at the top. of a 10GE port. The sequence number of
the indicated 10GE port is identified by
40GE Breakout indicators 1, 2, 3, 4, as
shown in Figure 22-107. For example, if
indicator 1 is on, the port indicator shows
the status of the first 10GE port derived
from the 40GE port.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 610

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Number Indicator Colo Description

r

2 40GE Breakout Gree An optical port indicator (1 in Figure

indicators 1/2/3/4 n 22-107) shows the status of a 10GE port
NOTE derived from the corresponding 40GE
When one or more port:
40GE ports are split
l When indicator 1 is on, each 40GE
into four 10GE ports,
these indicators port indicator shows the status of the
identify the sequence first 10GE port derived from the
numbers of the 10GE corresponding 40GE port.
ports.
l When indicator 2 is on, each 40GE
Indicators 1, 2, 3, 4 port indicator shows the status of the
turn on in cyclic order,
second 10GE port derived from the
with each indicator
keeping on for 5s. corresponding 40GE port.
l When indicator 3 is on, each 40GE
port indicator shows the status of the
third 10GE port derived from the
corresponding 40GE port.
l When indicator 4 is on, each 40GE
port indicator shows the status of the
fourth 10GE port derived from the
corresponding 40GE port.
The following is an example:
The first two 40GE ports (1 and 2) shown
in Figure 22-107 are both split into four
10GE ports, and the last two 40GE ports
(3 and 4) are not split.
l When Breakout indicator 1 is on, the
indicator of 40GE port 1 shows the
status of the first 10GE port derived
from 40GE port 1, and the indicator of
40GE port 2 shows the status of the
first 10GE port derived from 40GE
port 2. Indicators of 40GE ports 3 and
4 still show the status of the two 40GE
ports.
l When Breakout indicator 2 is on, the
indicator of 40GE port 1 shows the
status of the second 10GE port derived
from 40GE port 1, and the indicator of
40GE port 2 shows the status of the
second 10GE port derived from 40GE
port 2. Indicators of 40GE ports 3 and
4 still show the status of the two 40GE
ports.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 611

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.19.4 What Split Types Do 100GE Interfaces of CE Series

Switches Support?
The following table lists the split types supported by 100GE interfaces.

Table 22-58 Split types supported by 100GE interfaces

Product Card Split Type
Model

CE12800 and CE-L04CF-EF and CE-L04CF-EC l 10*10GE

CE12800E l 8*10GE
l 2*40GE
l 1*40GE

CE-L08CC-EC l 3*40GE
l 12*10GE

CE-L12CF-EG l 2*40GE
l 8*10GE
NOTE
If a 100GE interface of the CE-L12CF-
EG card connects to a CFP2-100G-
LR4 optical module, the 100GE
interface cannot be split into eight
10GE interfaces.

CE-L36CQ-FD, CE-L36CQ-FG, 4*25GE

CE-L36CQ-FD1, CE-L36CQ-SD,
CE-L16CQ-FD, CE-L48XS-FDA,
CE-L12CQ-FD, FD-X series cards

CE-L36LQ-FD, CE-L24LQ-FD 4*25GE

(100GE interface converted from
40GE interface)
NOTE
Some interfaces on the CEL36LQ-E
series cards can be configured as
100GE interfaces, but the 100GE
interfaces cannot be split.

CEL24XSEGA-E, CEL48XSEGA- 4*10GE

E, and CEL16CQEG-E

CE-L08CF-FG1 Interface split is not supported.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 612

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Card Split Type

Model

CE8860EI, – 4*25GE
CE8861EI, For 100GEx/1/2 of the
CE8868EI CE88_D24S2CQ and
CE88_D24S2CQ_U, 100GEx/1/1
of the CE88_D24T2CQ,
100GEx/1/8 of the CE88_D8CQ,
40GEx/1/13 and 40GEx/1/14 of the
CE88_D16Q on the CE8861EI and
CE8868EI, the interface split
function and the IOAM function are
mutually exclusive and cannot be
configured together. When the
interface split function is canceled
and the IOAM function is then
configured, the IOAM function
takes effect only after the device is
restarted.

CE8850EI – 4*25GE

CE6880EI – Interface split is not supported.

CE6870EI – 4*25GE
and
CE6875EI

CE6860EI – 4*25GE
and For 100GE1/0/3 on the CE6865EI,
CE6865EI the interface split function and the
IOAM function are mutually
exclusive and cannot be configured
together.

22.19.5 How Are Converted Interfaces Numbered?

Two numbering rules exist after interfaces are split: dimension numbering rule in
V100R003C00 and later versions and interface sequence numbering rule in versions earlier
than V100R003C00.
Numbering rules after 40GE interfaces are split
For example, a 40GE interface is numbered 40GE x/y/n and is split into four 10GE interfaces.
The converted 10GE interfaces are numbered using the following two rules:
l The dimension numbering rule adds a new dimension to the original interface number. If
the dimension numbering rule is used, the converted 10GE interfaces are numbered
40GE x/y/n:1, 40GE x/y/n:2, 40GE x/y/n:3, and 40GE x/y/n:4.
l The interface sequence numbering rule numbers converted interfaces based on the
interface sequence. If the interface sequence numbering rule is used, converted interfaces

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 613

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

on different switches are numbered in the following ways. CE5800, CE7800 and
CE8800 series switches do not support this numbering rule.
– On CE6800 series switches, a 10GE interface converted from 40GE x/y/n is
numbered 10GE x/y/[48 + 4(n - 1) + z]. z indicates the interface location and the
value of z ranges from 1 to 4.
– On CE12800 series switches, a 10GE interface converted from 40GE x/y/0/n is
numbered 10GE x/y/0/(4n + z). z indicates the interface location and the value of z
ranges from 0 to 3.
A 40GE interface on a CE88-D16Q card can be split into two 10GE interfaces. For example,
two 10GE interfaces converted from 40GE 1/1/1 are numbered: 40GE 1/1/1:1 and 40GE
1/1/1:2.
Numbering rules after 100GE interfaces are split
For example, a 100GE interface is numbered 100GE x/y/0/n and is split. Take a 100GE
interface on a CE-L04CF-EF card as an example. The converted interfaces are numbered
using the following two rules:
l If the dimension numbering rule is used, the 100GE interface supports the following split
types:
– If the 100GE interface is split into ten 10GE interfaces, a converted 10GE interface
is numbered 100GE x/y/0/n:z. z indicates the interface location and the value of z
ranges from 1 to 10.
– If the 100GE interface is split into eight 10GE interfaces, a converted 10GE
interface is numbered 100GE x/y/0/n:z. z indicates the interface location and the
value of z ranges from 1 to 8.
– If the 100GE interface is configured as two 40GE interfaces, a converted 40GE
interface is numbered 100GE x/y/0/n:z. z indicates the interface location and the
value of z is 1 or 2.
– If the 100GE interface is configured as one 40GE interface, the converted 40GE
interface is numbered 100GE x/y/0/n:1.
l If the interface sequence numbering rule is used, the 100GE interface supports the
following split types:
– If the 100GE interface is split into ten 10GE interfaces, a converted 10GE interface
is numbered 10GE x/y/0/(10n + z). z indicates the interface location and the value
of z ranges from 0 to 9.
– If the 100GE interface is split into eight 10GE interfaces, a converted 10GE
interface is numbered 10GE x/y/0/(10n + z). z indicates the interface location and
the value of z ranges from 0 to 7.
– If the 100GE interface is configured as two 40GE interfaces, a converted 40GE
interface is numbered 40GE x/y/0/(2n + z). z indicates the interface location and the
value of z is 0 or 1.
– If the 100GE interface is configured as one 40GE interface, the 40GE interface is
numbered 40GE x/y/0/2n.

22.19.6 Can Converted Interfaces Be Added to an Eth-Trunk?

Converted interfaces can be added to an Eth-Trunk. The configuration method is the same as
that of common physical interfaces.
# Add the converted interface 40GE1/0/1:1 to Eth-Trunk2.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 614

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 2
[*HUAWEI-Eth-Trunk2] trunkport 40ge 1/0/1:1
[*HUAWEI-Eth-Trunk2] commit

22.19.7 How Can I Use a 1-to-4 Cable on a 40GE Interface?

You can use a 1-to-4 cable on a 40GE interface in the following scenarios:
l If the remote interfaces are 10GE interfaces and the local 40GE interface is split, you can
use a 1-to-4 cable to connect to the remote 10GE interfaces, as shown in Figure 22-108.
l If the remote interfaces are 40GE interfaces, you can use 1-to-4 cables to connect to the
ODFs no matter whether the interfaces are split (requirements for interface split
configurations at both ends of a link are the same), as shown in Figure 22-109. It is
recommended that interfaces at both ends of a link are not split, so that service traffic can
be forwarded at the 40 Gbit/s line rate.
For the usage of the ODF and corresponding usage precautions, see 22.6.4 What
Precautions Should Be Taken When 1-to-4 Optical Jumpers Are Routed Through
Optical Distribution Frames?.

Figure 22-108 Connecting a split 40GE interface to the remote 10GE interfaces

10GE

10GE
C

Ampheno
l

40GE 10GE
A

High-speed cable

10GE

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 615

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-109 Connecting a 1-to-4 cable to the ODF

Rx and Tx optical fibers
must be cross-connected
to ensure normal
ODF transmission between ODF
optical modules

Fiber connection
sequence between
two ends
1-to-4 optical CE12804 chassis 1A 1A
CE12804 chassis 1-to-4 optical
jumper CMU CMU 1B 1B CMU CMU jumper
MPU MPU
MPU 2A 2A MPU
LPU 2B 2B LPU
LPU LPU
LPU 3A 3A LPU
LPU 3B 3B LPU

4A 4A
PM1 PM2 PM3 PM4 PM1 PM2 PM3 PM4
4B 4B

22.20 Interface Management - Ethernet Interface

22.20.1 Can a 10GE Interface on a CE Series Switch Connect to a

GE Interface?
A 10GE optical interface can connect to a GE optical interface in the following situations:
l The 10GE optical interface has a GE optical module installed. No other configuration is
required.
l The 10GE optical interface has a GE copper module installed and negotiates with the
remote interface to use the same rate and duplex mode.

By default, auto-negotiation is enabled on a 10GE electrical interface. A 10GE electrical

interface can connect to a GE electrical interface when they negotiate to use the same rate and
duplex mode.

You can run the display interface [ interface-type [ interface-number ] ] command in any
view to check the Speed and Duplex fields of the local and remote interfaces to determine
whether the two interfaces use the same rate and duplex mode.

22.20.2 Can I Configure Parameters Such as Rate, Auto-

Negotiation Mode, and Flow Control on Interfaces of CE Series
Switches?

You can use Interface Query Tool to obtain interface attributes such as the default auto-
negotiation status, rate, and support for the auto-negotiation and flow control auto-negotiation
configuration based on the interface type and connection medium.

To use the interface query tool for CE series switches, visit http://support.huawei.com/
onlinetoolsweb/DC/en/interface_query.html.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 616

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.20.3 Why Is an Interface in Down State?

If the indicator of a connected interface on CE series switches is off, the interface does not go
Up. Run the display interface command on the device to view the interface status.
<HUAWEI> display interface 10ge 1/0/1
10GE1/0/1 current state : DOWN (ifindex: 3303)
Line protocol current state : DOWN
---- More ----

In the preceding command output, the current state field displays Down, indicating that the
interface cannot work properly.

Common Causes
The possible causes are as follows:
l The interface is manually shut down.
l The cable or optical fiber is faulty.
l The optical module is faulty.
l The local and remote interfaces fail to negotiate parameters including the duplex mode
and rate.

Troubleshooting Procedure
1. Check whether the interface has been manually shut down using the shutdown
command. If so, run the undo shutdown command in the interface view to enable the
interface.
2. Connect the interface to another interface. If the interface is still Down, replace the
optical module and optical fiber or cable on the interface to check whether the interface,
optical module, or optical fiber/cable has failed.
3. Check whether the negotiate parameters including the duplex mode and rate.of local and
remote interfaces are same. If not, change them to same.
4. If the fault persists, see "Interface Troubleshooting" in the Troubleshooting - Hardware.

22.20.4 What Should I Do If I Receive an Alarm Indicating that

the Traffic Rate Exceeds the Alarm Threshold?
A device generates an alarm (hwIfMonitorInputRateRising or hwIfMonitorOutputRateRising)
when the incoming or outgoing traffic rate on an interface exceeds the bandwidth alarm
threshold. If such an alarm is generated, the burst traffic rate on an interface has exceeded the
bandwidth alarm threshold on the interface. First, you need to determine on which interface
the problem has occurred using the following method:

Determining the interface for which the alarm is generated

In V100R002, a bandwidth threshold exceeding alarm does not display the interface name.
Contact technical support personnel and provide the EntityPhysicalIndex to obtain the
interface name.
In V100R003 and later versions, the alarm message directly displays the interface name, as
shown in the following example.
01DEVM/4/hwIfMonitorOutputRateRising(t):CID=0x80fc0101-
OID=1.3.6.1.4.1.2011.5.25.41.4.7;Interface output flow bandwidth usage

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 617

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

exceeded the trap threshold. (Interface=52, BandWidthUsage=100,

TrapThreshold=90, InterfaceName=10GE1/0/48)

Troubleshooting Procedure
After determining the interface, run the display interface brief command, and view the
bandwidth usage of incoming and outgoing traffic on the interface in the last 300 seconds in
the InUti/OutUti field. Perform the following operations based on the actual situation.
l If burst traffic exceeds the upper alarm threshold instantly and does not affect services,
you are advised to run the trap-threshold { input-rate | output-rate } bandwidth-in-use
[ resume-rate resume-threshold ] command in the interface view to increase the upper
alarm threshold.
l If the traffic rate on an interface remains high for a long time, you are advised to expand
the link bandwidth. Determine the link bandwidth based on the traffic volume on the
network to ensure that bandwidth can be fully used and packet loss will not occur.
l If you consider that the alarm severity is too high and want to mask this alarm, run the
undo snmp-agent trap enable feature-name devm [ trap-name trap-name ] command
in the system view to mask this type of alarms on all the interfaces. After the alarms are
masked, the device still record alarm messages, but does not display them.

22.20.5 Can I Use MIB to Obtain the Number of Packets

Discarded by an Interface?
You can use MIB to obtain the number of packets discarded by an interface of CE series
switches. The objects with the OIDs 1.3.6.1.2.1.2.2.1.13 and 1.3.6.1.2.1.2.2.1.19 indicate the
number of packets discarded in the inbound and outbound directions of an interface
respectively.
For CE12800 and CE12800E series switches, pay attention to the following points:
l In versions earlier than V100R005C00, the number of discarded packets obtained
through MIB is always 0 to improve the NMS monitoring and query performance.
l In V100R005C00 and later versions, you can run the set if-mib discard-statistics
enable command in the system view to enable the function of using MIB to collect
statistics about packets discarded by an interface.

22.20.6 Can Optical Interfaces on CE Series Switches Be

Connected Using a Single Optical Fiber?
Optical interfaces on CE series switches can be connected using a single optical fiber in
V100R002C00 and later versions.
Only optical interfaces that have optical modules pre-configured or have non-single-fiber
bidirectional optical modules installed support single-fiber unidirectional connections.

NOTE

For types of single-fiber directional optical modules, see 22.18.17 Do the CE Series Switches Support
BIDI Optical Modules?. Optical modules except for single-fiber directional optical modules support
single-fiber unidirectional connections.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 618

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.20.7 Do Ethernet Interfaces on CE Series Switches Support

Switching Between Layer 2 and Layer 3 Modes?
In the earlier versions of V100R005C10, ethernet interfaces on all CE series switches
(excluding the CE6810LI) support switching between Layer 2 and Layer 3 modes, For
V100R005C10 and later versions, ethernet interfaces on all CE series switches support. And
work in Layer 2 mode by default, You can run the undo portswitch command in the interface
view to switch an interface to Layer 3 mode.
For example, switch 10GE1/0/1 to Layer 3 mode.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] undo portswitch
[*HUAWEI-10GE1/0/1] commit

NOTE

l Before running the undo portswitch command in the interface view to switch an interface to Layer
3 mode, delete all the non-default configurations on the interface.
l Before running the portswitch command in the interface view to switch an interface from Layer 3
mode to Layer 2 mode, delete all the Layer 3 service configurations on the interface.
l Before configuring the undo portswitch and undo portswitch batch commands on the CE12800E
that has the FD-X series cards installed, CE6865EI, CE6857EI, CE6855HI, CE6856HI, CE7855EI,
CE8861EI, and CE8868EI, run the vlan reserved for main-interface startvlanid to endvlanid
command in the system view to configure a dedicated reserved VLAN for Layer 3 main interfaces.
l The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6 function is
enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address can only be used to
manage the switch.

22.20.8 What Are the Differences Between MTU and Frame

Length?
l The maximum transmission unit (MTU) indicates the Layer 3 packet length, namely IP
packet length.
l The frame length indicates the Layer 2 Ethernet frame length.
The following figure uses standard Ethernet frames to compare MTU and frame length.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 619

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-110 Differences between MTU and frame length

MTU
Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 620
IP packet Network layer
Destination Source
MAC MAC
Type IP packet FCS Data link layer
CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.20.9 Do CE12800 Series Switches Support Layer 3 Sub-interface

Traffic Statistics Collection?
Since V200R001C00, CE12800 series switches support Layer 3 sub-interface traffic statistics
collection.

22.20.10 Why Does an Interface Receive CRC Error Packets? What

Should I Do?
If an interface receives CRC error packets, link faults such as packet loss occur.
Check the interface status, receive optical power of the optical module, and link quality. You
are advised to change the optical module or fiber, and then check whether the interface still
receives CRC error packets.

22.20.11 What Precautions Should Be Taken When Optical

Interfaces Are Connected?
When optical interfaces are connected, the interfaces cannot go Up if the installed optical
modules or fibers are abnormal. When connecting optical interfaces, pay attention to the
following points:
1. Check whether the optical module type is supported by the switch interfaces based on the
switch model and interface type. It is recommended that optical modules that are
certified by Huawei Ethernet switches be used on CE series switches.
2. Ensure that the parameter settings such as the rate, wavelength, and transmission
distance of connected optical modules are the same.
3. Ensure that the optical fiber model matches the optical module type.
A multi-mode optical fiber can be used with a single-mode optical module if the
transmission distance is short. However, you are advised to use a multi-mode optical
fiber with a multi-mode optical module. Single-mode optical fibers can only be used
with single-mode optical modules.
Some optical modules may provide different transmission distances when working with
different optical fibers. Therefore, select proper optical fibers according to the
transmission distance.
4. Check whether the working modes of connected optical modules are correct, including
the receive power, transmit power, and current.
– If the transmit power of an optical module is too high or low, replace the optical
module.
– If the receive power of an optical module is too low or too high, perform the
following operations:
i. Replace the optical module or fiber.
ii. Check whether the transmission distance of the optical module and optical
fiber type meets requirements.
iii. Use an optical power meter to measure the optical power attenuation of each
part of links and recover the problematic link.
5. Ensure that the parameter settings such as the interface status, rate, and auto-negotiation
mode of connected optical interfaces are the same.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 621

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

If connected optical interfaces do not go Up, locate the faults by referring to Two Connected Optical
Interfaces Cannot Go Up.

22.20.12 Why Does Packet Loss Occur on an Interface?

Switch interfaces discard packets when traffic is overloaded or burst traffic occurs.

22.20.13 Why Is the device transceiver Command Configuration

Displayed on an Interface?

The device transceiver command pre-configures the transmission medium type on an

interface.

When a transmission medium is installed on an interface, the interface automatically

generates a device transceiver command configuration record that specifies the medium type.
No action is required in this case.

22.20.14 What Is the Buffer of an Interface on a CE Switch?

Buffer threshold parameters of an interface include the reserved buffer threshold, threshold
for triggering flow control, threshold for stopping flow control, and headroom buffer size.

For CE switches running V200R003C00 and later versions, you can run the flow-control
[ input | output ] buffer { reserved reserved-value | xon xon-value | xoff xoff-value | hdrm
hdrm-value } command in the interface view to modify values of the buffer threshold
parameters of an interface.

The following tables list default values and value ranges of different buffer threshold
parameters on interfaces of different models of devices.

Table 22-59 Value ranges and default values of the xoff and xon parameters in a standalone
scenario
Card reserved xoff xoff- xon xon-value hdrm hdrm-
reserved-value value value

EA, EC, BA, - Value range: 1 Value range: 1 -

ED, EC, EF, to 100000 to 100000
EC1, and EG Default value: Default value:
series cards 20000 200

FD, FDA, FG, - Value range: 1 Value range: 1 -

FD1, FG1, SD to 10000 to 100000
series cards Default value: Default value:
5120 128

ED-E, EG-E, - Value range: 1 Value range: 1 -

and EGA-E to 49152 to 49152
series cards Default value: Default value:
200 50

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 622

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Card reserved xoff xoff- xon xon-value hdrm hdrm-

reserved-value value value

FD-X series Value range: 1 Value range: 1 Value range: 1 Value range: 1
cards to 131071 to 131071 to 131071 to 4095
Default value: 7 Default value: Default value: Default value:
1024 912 256

Table 22-60 Value ranges and default values of threshold parameters on CE8800, CE7800,
CE6800, and CE5800 series switches
Product reserved xoff xoff- xon xon-value hdrm hdrm-
reserved-value value (Threshold value
(Reserved (Threshold for Stopping (Headroom
Buffer for Triggering Flow Control) Buffer Size)
Threshold) Flow Control)

CE5810EI Value range: 1 Value range: 1 Value range: 1 Value range: 1

to 8191 to 8191 to 8191 to 4095
Default value: Default value: Default value: Default value:
12 91 24 256

CE5850EI and Value range: 1 Value range: 1 Value range: 1 Value range: 1
CE5855EI to 32767 to 32767 to 4095 to 4095
Default value: 7 Default value: Default value: Default value:
16383 on a 3840 100 on a 40GE
40GE interface interface and 16
and 4095 on on other
other interfaces interfaces

CE5850HI, Value range: 1 Value range: 1 Value range: 1 Value range: 1

CE6810LI, to 65535 to 65535 to 65535 to 4095
CE6810EI, and Default value: 1 Default value: Default value: Default value:
CE6850EI 500 100 592

CE6850HI, Value range: 1 Value range: 1 Value range: 1 Value range: 1

CE6851HI, to 131071 to 131071 to 131071 to 4095
CE6850U-HI, Default value: 7 Default value: Default value: Default value:
CE6856HI, 1024 912 256
CE6857EI,
CE6865EI,
CE6855HI,
CE8861EI,
CE8868EI

CE6870EI and - Value range: 1 Value range: 1 -

CE6875EI to 100000 to 100000
Default value: Default value:
5120 128

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 623

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product reserved xoff xoff- xon xon-value hdrm hdrm-

reserved-value value (Threshold value
(Reserved (Threshold for Stopping (Headroom
Buffer for Triggering Flow Control) Buffer Size)
Threshold) Flow Control)

CE5880EI, - Value range: 1 Value range: 1 -

CE6880EI to 49152 to 49152
Default value: Default value:
200 50

CE7850EI and Value range: 1 Value range: 1 Value range: 1 Value range: 1
CE7855EI to 131071 to 131071 to 131071 to 4095
Default value: 7 Default value: Default value: Default value:
1024 912 256

CE6860EI, Value range: 1 Value range: 1 Value range: 1 Value range: 1

CE8850EI, and to 32767 to 32767 to 32767 to 32767
CE8860EI Default value: 8 Default value: Default value: Default value:
400 398 512

22.20.15 Can a Management Interface Be Switched to Layer 2

Mode?

A management interface cannot be switched to Layer 2 mode.

22.20.16 Can I Perform Loopback Detection on an Interface to

Check Whether Packet Loss Occurs on the Link?

After loopback detection is enabled on an interface of a CE switch, a test packet sent from the
interface is sent back to the interface inside the system. This function can only be used to
check whether the interface functions properly, that is, this function cannot be used to check
packets sent and received on this interface or check whether packet loss occurs on the link.

22.20.17 Can 40GE and 100GE Interfaces of the CE-L36LQ-FD

Card Be Used Simultaneously?

By default, the CE-L36LQ-FD card has 36 40GE interfaces. The 40GE optical interfaces
numbered 4n and 4n+1 (n is an integer that ranges from 0 to 8) can be switched into 100GE
interfaces using the port mode 100ge command. If a 40GE interface is switched into a
100GE interface, the interface can work at the rates of 40 Gbit/s and 100 Gbit/s, and other
40GE interfaces that are not switched can work properly.

# Switch 40GE1/0/1 into 100GE1/0/1.

<HUAWEI> system-view
[~HUAWEI] port mode 100ge interface 40ge 1/0/1
Warning: This operation will delete current port(s) and create new port(s), and
all configurations of the current port(s) will be cleared. Continue? [Y/N]: y

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 624

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.21 Ethernet Switching - MAC

22.21.1 In Which Situation Does MAC Address Flapping Occur?

MAC address flapping occurs when a MAC address is learned by two interfaces in the same
VLAN. The MAC address entry learned later replaces the earlier one. MAC address flapping
is usually caused by Layer 2 loops.

22.21.2 How Often Can CE Series Switches Detect MAC Address

Flapping?
The maximum MAC address flapping detection count is 65535. When the MAC address
flapping detection count is larger than 65535, the value of MoveNum in the display mac-
address flapping command output is still 65535. MAC address flapping seldom occurs at a
large scale. If the maximum MAC address flapping detection count is reached, run the reset
mac-address flapping record command to clear MAC address flapping records.

22.21.3 How Often Does a Switch Report Alarms After Detecting

MAC Address Flapping?
In earlier versions of V100R005C10, a switch reports an alarm about MAC address flapping
after detecting MAC address flapping three times, and the frequency cannot be configured.
In V100R005C10 and later versions, a switch reports an alarm about MAC address flapping
after detecting MAC address flapping 10 times. You can run the mac-address flapping
detection [ security-level { low | middle | high } ] command to configure the security level
for MAC address flapping detection.
If MAC address flapping occurs for 10 consecutive times and the period between two
consecutive MAC address flapping events is shorter than the aging time of MAC address
entries (5 minutes by default), an alarm is reported when the 10th MAC address flapping is
detected.

22.21.4 The Interface Restores to Be Up Within the Aging Time.

Can a Switch Detect MAC Address Flapping in the Remaining
Aging Time?
By default, the aging time of flapping MAC addresses is 300 seconds. If the error-down
auto-recovery cause mac-address-flapping interval interval-value command is used to set
the recovery delay to be smaller than the aging time of flapping MAC addresses, the interface
restores to be Up after the recovery delay and when the MAC address does not flap. During
the remaining aging time, the switch does not detect MAC address flapping because the aging
time is not reached. To detect MAC address flapping, you are advised to set the interface
recovery delay to be larger than the aging time of MAC addresses.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 625

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.21.5 Do CE Series Switches Support the MAC Address

Triggered ARP Entry Update Function?
CE series switches of V100R003C10 and later versions support the MAC address triggered
ARP entry update function.

22.21.6 How Do I Check the Mapping Between the Downstream

Device and Interface?

Run the display mac-address command in any view to check the mapping between the MAC
address of the downstream device and interface.

22.21.7 How Do I Process MAC Address Flapping?

1. Determine the interface where MAC address flapping occurs.

Run the display mac-address flapping command to check all historical records of MAC
address flapping on the switch. (The following information is used for reference only.
The display depends on the device configuration.)
<HUAWEI> display mac-address flapping
MAC Address Flapping Configurations :
------------------------------------------------------------------------------
-
Flapping detection : Enable
Aging time(s) : 300
Quit-VLAN Recover time(m) : --
Exclude VLAN-list : --
Security level : Middle
------------------------------------------------------------------------------
-
S : start time E : end time (D) : error down
------------------------------------------------------------------------------
-
Time VLAN MAC Address Original-Port Move-Ports
MoveNum
------------------------------------------------------------------------------
-
S:2011-12-11 11:00:08 3 0000-08cc-2206 10GE1/0/1 10GE1/0/2 120
E:2011-12-11 11:33:13

------------------------------------------------------------------------------
-
Total items on slot 1: 1

Original-Port: indicates the interface that learns the MAC address first. Move-Ports
indicates the interface that learns the MAC address later. There may be multiple values
of Move-Ports.
2. Check whether a loop occurs.
– Run the display interface brief | include up command to check traffic on the
interface. Run this command multiple times to check traffic.
When the switch is deployed on a network where loops occur, the response speed of
the switch is slow. Check traffic on all interfaces in Up state. The values of InUti
(inbound bandwidth usage) and OutUti (outbound bandwidth usage) increase
gradually on the interface where a loop occurs, and even approximate 100%,
exceeding service traffic.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 626

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Compare bandwidth usage of interface traffic with that of normal services. If

bandwidth usage of interface traffic is much larger than that of normal services, a
loop may occur.
n If a broadcast storm occurs on only one interface, a self-loop may occur or a
loop may occur on the downstream device.
n If broadcast storms occur on two interfaces, a loop may occur between
interfaces.
n If a broadcast storm occurs on more interfaces, a self-loop may occur and a
loop may occur on the downstream device or between interfaces.
– Run the display logbuffer command to check whether a large number of logs are
generated.
When a loop occurs, packets of some protocols such as OSPF are lost or looped
back to the local device, or there are multiple copies of replicated packets. As a
result, the protocol status may become unstable. If there are many logs about the
preceding information, a loop may occur.
– Run the display cpu-defend statistics [ history ] [ packet-type packet-type ] { all |
slot slot-id } command to check whether protocol packets such as ARP packets sent
to the CPU are suppressed and discarded.
Eliminate the loop when there is the loop on the network.
– Check whether network cables are incorrectly connected and whether basic
configurations are correct.
– If services are seriously affected and need to be restored immediately, remove the
interface from the VLAN where a loop occurs, shut down the interface where a loop
occurs, and remove the fiber where a loop occurs.
3. Check whether terminals use the same MAC address or whether there are MAC attacks
from malicious users.
If the alarm about MAC address flapping involves one or few MAC addresses and the
interface statistics are normal, check whether terminals connected to the interface that
sends the alarm about MAC address flapping use the same MAC address. If the
terminals use the same MAC address, change the MAC address of terminals or use other
methods to prevent this situation. If there are MAC attacks from malicious users, prevent
the malicious users from connecting to the network.
NOTE

When multiple network adapters connect to a server, add the interface of the switch connected to the
server to the Eth-Trunk or disable MAC address flapping detection in a VLAN.
4. Collect information and seek technical support.
NOTE

When MAC address flapping occurs, see An Alarm About MAC Address Flapping Is Generated on
a CE Switch.

22.21.8 How Many MAC Addresses Do CE Series Switches

Support?
The display mac-address summary command can be executed to view MAC address entries
supported by CE series switches.

# View MAC address entries of the CE12800 and CE12800E.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 627

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> display mac-address summary

Summary information of slot 1:
Capacity of this slot : 221184
-----------------------------------
Static : 0
Blackhole : 1
Dyn-Local : 0
Dyn-Remote : 0
Dyn-Trunk : 0
OAM : 0
Sticky : 0
Security : 0
Authen : 0
Guest : 0
Mux : 0
Tunnel : 0
Snooping : 0
Evn : 0
In-used : 1
-----------------------------------
Capacity of this slot indicates the number of MAC address entries. The value varies
according to device models.

22.22 Ethernet Switching - Ethernet Link Aggregation

22.22.1 What Are LAG Specifications of CE Series Switches?

CE6870EI, CE6875EI and CE12800 Series Switches
Run the assign forward eth-trunk mode { 128 | 256 | 512 | 1024 } command in the system
view to set the number of LAGs supported by the switch. By default, a maximum of 512
LAGs can be configured on the switch.
l When 128 is specified, the switch allows a maximum of 128 LAGs and each LAG
supports a maximum of 128 member interfaces. (Starting from V200R003C00, only the
CE12800 supports 128.)
l When 256 is specified, the switch allows a maximum of 256 LAGs and each LAG
supports a maximum of 64 member interfaces.
l When 512 is specified, the switch allows a maximum of 512 LAGs and each LAG
supports a maximum of 32 member interfaces.
l When 1024 is specified, the switch allows a maximum of 1024 LAGs and each LAG
supports a maximum of 16 member interfaces.

CE12800E Series Switches

l CE12800E configured with ED-E, EG-E, or EGA-E series cards: The CE12800E allows
a maximum of 1024 LAGs and each LAG supports a maximum of 64 member interfaces.
l CE12800E configured with FD-X series cards: Run the assign forward eth-trunk mode
{ 64 | 128 | 256 | 512 | 1024 } command in the system view to set the number of LAGs
supported by the switch. By default, a maximum of 128 LAGs can be configured on the
switch.
– When 64 is specified, the switch allows a maximum of 64 LAGs and each LAG
supports a maximum of 32 member interfaces.
– When 128 is specified, the switch allows a maximum of 128 LAGs and each LAG
supports a maximum of 16 member interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 628

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

– When 256 is specified, the switch allows a maximum of 256 LAGs and each LAG
supports a maximum of 8 member interfaces.
– When 512 is specified, the switch allows a maximum of 512 LAGs and each LAG
supports a maximum of 4 member interfaces.
– When 1024 is specified, the switch allows a maximum of 1024 LAGs and each
LAG supports a maximum of 2 member interfaces.

CE8800, CE7800, CE6800, and CE5800 Series Switches (Excluding CE6870EI and
CE6875EI)
Table 22-61 describes LAG specifications supported by other models of CE8800, CE7800,
CE6800, and CE5800 series switches except the CE5810EI, CE5880EI and CE6880EI. The
CE5810EI allows a maximum of 128 LAGs and each LAG supports a maximum of 8 member
interfaces. The CE5880EI and CE6880EI allow a maximum of 1024 LAGs and each LAG
supports a maximum of 64 member interfaces.

Table 22-61 LAG specifications supported by other models of CE8800, CE7800, CE6800,
and CE5800 series switches
Version Configurable Specification Default Value

V100R005C00 On the CE6810LI, run the assign forward eth- CE6810LI: 48

trunk mode { 24 | 48 | 96 } command in the Other models
system view. except the
On other models except the CE6810LI, run the CE6810LI: 128
assign forward eth-trunk mode { 64 | 128 }
command in the system view.

V100R005C10 Run the assign forward eth-trunk mode { 64 | 128

and later 128 | 256 | 512 | 1024 } command in the system
versions view.

NOTE

After the assign forward eth-trunk mode command is used to change the number of LAGs supported
by the switch, restart the switch to make the configuration take effect.

CE6810LI of V100R005C00:
l When 24 is specified, the switch allows a maximum of 24 LAGs and each LAG supports
a maximum of 32 member interfaces.
l When 48 is specified, the switch allows a maximum of 48 LAGs and each LAG supports
a maximum of 16 member interfaces.
l When 96 is specified, the switch allows a maximum of 96 LAGs and each LAG supports
a maximum of 8 member interfaces.
On other models:
l When 64 is specified, the switch allows a maximum of 64 LAGs and each LAG supports
a maximum of 32 member interfaces.
l When 128 is specified, the switch allows a maximum of 128 LAGs and each LAG
supports a maximum of 16 member interfaces.
V100R005C10 and later versions:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 629

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l When 64 is specified, the switch allows a maximum of 64 LAGs and each LAG supports
a maximum of 32 member interfaces.
l When 128 is specified, the switch allows a maximum of 128 LAGs and each LAG
supports a maximum of 16 member interfaces.
l When 256 is specified, the switch allows a maximum of 256 LAGs and each LAG
supports a maximum of 8 member interfaces.
l When 512 is specified, the switch allows a maximum of 512 LAGs and each LAG
supports a maximum of 4 member interfaces.
l When 1024 is specified, the switch allows a maximum of 1024 LAGs and each LAG
supports a maximum of 2 member interfaces.

22.22.2 Which Types of Interfaces Can Join the Same Eth-Trunk?

In versions earlier than V200R002C50, only Ethernet interfaces working at the same rate can
join the same Eth-Trunk.
For example, GE and 10GE interfaces or 10GE and 40GE interfaces cannot join the same
Eth-Trunk, whereas GE electrical and optical interfaces can join the same Eth-Trunk.
In V200R002C50 and later versions, Ethernet interfaces working with diffferent rates can join
the same Eth-Trunk.

22.22.3 Which Working Modes Does an Eth-Trunk Support?

Table 22-62 describes the working modes supported by an Eth-Trunk.

Table 22-62 Working modes of an Eth-Trunk

Link Aggregation Mode Usage Scenario Version

Manual load balancing mode This mode is used when the remote All versions
device does not support LACP.

LACP mode Static LACP This mode is used when the remote All versions
mode device supports LACP.

Dynamic The dynamic LACP mode is used V100R003C00 and

LACP mode only when CE series switches later versions
connect to servers. You are advised
to deploy the static LACP mode in
other scenarios. If the dynamic
LACP mode is used in other
scenarios, network loops may occur.

NOTE

By default, an Eth-Trunk works in manual load balancing mode.

Ensure that the local and remote devices use the same Eth-Trunk working mode.

22.22.4 What Is the Load Balancing Principle of an Eth-Trunk?

An Eth-Trunk uses 16 timeslots to send packets in a polling manner at each sending interval.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 630

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

When the number of Eth-Trunk member interfaces is nth power of 2, traffic can evenly load
balanced. For example, when an Eth-Trunk has 2, 4, or 8 member interfaces(divided by 16),
the Eth-Trunk can obtain an integral value of timeslots and the load balancing is even. If the
number of Eth-Trunk member interfaces is not nth power of 2 (for example, 3), one interface
can send packets six times and the other two interfaces can send packets five times. In this
case, the load balancing is uneven.
It is recommended that the number of Eth-Trunk member interfaces is nth power of 2 to
achieve even load balancing.

22.22.5 How Is the Problem of Uneven Load Balancing of an Eth-

Trunk Solved?
Load balancing modes in different service scenarios are different. When Eth-Trunk load
balancing is uneven, use the following methods to solve the problem:
1. Disable preferential forwarding of local traffic.
Run the local-preference disable command to disable preferential forwarding of local
traffic in scenarios where the inter-chassis stack or Eth-Trunk is deployed and unicast
traffic is unevenly load balanced.
2. Check whether the number of Eth-Trunk member interfaces is the nth power of 2.
If the number of Eth-Trunk member interfaces is not the nth power of 2, adjust the
number of Eth-Trunk member interfaces.
3. Adjust the load balancing mode.
– If the IP address in packets changes frequently, use load balancing based on the
source or destination IP address so that traffic can be evenly load balanced among
physical links.
– If the MAC address in packets changes frequently and the IP address is fixed, use
load balancing based on the source or destination MAC address so that traffic can
be evenly load balanced among physical links.
– If packets are random, you are advised to add the hash factor.
4. Adjust the hash algorithm.
– CE12800E that has the FD-X series cards installed, CE8800, CE7800, CE6800, and
CE5800 (excluding the CE5880EI, CE6870EI, CE6875EI and CE6880EI): eth-
trunk { hash-mode hash-mode-id | universal-id universal-id } *
– CE6870EI, CE6875EI and CE12800: eth-trunk { src-interface | seed seed-data |
universal-id universal-id | hash-mode hash-mode-id } *
– CE5880EI, CE6880EI and CE12800E that has the ED-E/EG-E/EGA-E series cards
installed: eth-trunk universal-id universal-id
NOTE

The load balancing mode is only valid for the outbound interface of traffic. In multi-level load balancing
scenarios, if traffic of the inbound interface is uneven, change the load balancing mode of the outbound
interface on the uplink device.
In the scenario where Eth-Trunk and ECMP are deployed and traffic is unevenly load balanced, configure
different hash algorithms for the Eth-Trunk and ECMP and change the value of universal-id as needed.

22.22.6 What Is the Default Load Balancing Mode?

By default, an Eth-Trunk works in manual load balancing mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 631

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.22.7 How Do I Configure Traffic Replication Using Another

Method But Not Flow Mirroring?
When the switch that uses other functions such as port mirroring replicates traffic of the
uplink interface to the downlink Eth-Trunk, traffic many be unevenly load balanced on the
downlink Eth-Trunk. You can run the port downlink interface-type { interface-number1 [ to
interface-number2 ] } &<1-5> command to configure the switch to replicate traffic of uplink
interfaces to the downlink Eth-Trunk.
# Configure the switch to replicate traffic on 10GE1/0/1 to Eth-Trunk 1.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] port downlink interface eth-trunk 1
[*HUAWEI-10GE1/0/1] commit

NOTE

l Uplink and downlink interfaces cannot be located on the CE-L24XS-EA, CE-L48XS-EA, CE-
L48GT-EA, CE-L48GT-EC, CE-L48GS-EA, or CE-L48GS-EC card.
l CE12800 of V100R003C10 and later versions supports traffic replication, Only the CE6870EI and
CE6875EI of CE8800, CE7800, CE6800, and CE5800 series switches support traffic replication,
other devices do not support this function.
l All the interfaces that join the downlink Eth-Trunk replicate traffic on uplink interfaces.
l The switch can replicate traffic of up to 24 uplink interfaces to downlink interfaces, and traffic on
one uplink interface can be replicated to up to 5 downlink interfaces.
l This function is invalid for the Eth-Trunk that contains GE member interfaces.

22.22.8 Do CE Series Switches Support Inter-card Link

Aggregation?
CE12800 and CE12800E switches support inter-card link aggregation. It is recommended that
member interfaces on different cards use the same interface numbers, as shown in Figure
22-111.

Figure 22-111 Recommended deployment when multiple Eth-Trunk member interfaces are
deployed on different cards

0 2 4 ...
Slot 1 ...
1 3 5 ...

Eth-Trunk1 Eth-Trunk2 Eth-Trunk3

0 2 4 ...
Slot 2 ...
1 3 5 ...

22.22.9 How Is the LACP Mode Configured When a CE Switch

Connects to a Third-Party Device Through an Eth-Trunk?

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 632

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Run the mode { lacp-static | lacp-dynamic | manual [ load-balance ] } command in the Eth-
Trunk interface view to configure the LACP mode of the Eth-Trunk on the CE switch.

When a CE switch connects to a third-party device, the LACP modes must be consistent.
Mainstream network devices that connect to CE switches include devices from Cisco, Juniper,
and H3C. The following table describes the mapping between aggregation modes.

Table 22-63 Mapping between link aggregation modes on a Cisco device and a Huawei
device

Working Mode on a Cisco Device Working Mode on a Huawei Device

on manual (default mode)

active (LACP) lacp-static

passive (LACP) lacp-static

auto (PAgP) Interworking is not supported.

desirable (PAgP) Interworking is not supported.

Table 22-64 Mapping between link aggregation modes on a Juniper device and a Huawei
device

Working Mode on a Juniper Device Working Mode on a Huawei Device

Manual mode manual (default mode)

LACP lacp-static

Table 22-65 Mapping between link aggregation modes on a H3C device and a Huawei device

Working Mode on an H3C Device Working Mode on a Huawei Device

Static LACP mode manual (default mode)

LACP lacp-static

22.22.10 How Can CE Series Switches Communicate With

Servers?

Analysis of Interworking Between the CE Series Switch and Linux Server

The interworking mode used by a Huawei CE series switch to connect to a Linux server
depends on the binding mode of network adapters of the server. For details, see Table 22-66.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 633

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-66 Interworking mode of a Huawei CE series switch and a Linux server
Network Adapter Switch Description
Binding Mode Interworking Mode

Mo round-robin Configure link The MAC addresses of network

de0 aggregation in manual adapters of the server are changed to
mode. be the same so that switches
interwork with the server using link
aggregation in manual mode.

Mo active-backup Add connected The server uses two network adapters

de1 interfaces to the same that function as active and standby
VLAN. ones. All data is transmitted by the
active interface. When a fault occurs
on the link of the active interface, the
link of the standby interface replace
the faulty link to transmit data. It is
recommended that two interfaces of
the switch be added to the same
VLAN.

Mo load balancing Configure link Network adapters of a server transmit

de2 aggregation in manual data based on a specified hash policy,
mode. so the switch needs to interwork with
the server using link aggregation in
manual mode.

Mo broadcast Two switches are Network adapters of a server provide

de3 connected and join two copies of a packet, and send
different VLANs. them through two interfaces. You are
advised to use two switches and add
them to different VLANs.

Mo 802.3ad Configure link Network adapters of a server are

de4 aggregation in LACP bound in LACP mode, and the switch
mode. connects to the server using link
aggregation in LACP mode.

Mo transmit load Connect two switches. Network adapters of a server use

de5 balancing adaptive transmission load balancing,
so no configuration is required on the
switch.

Mo adaptive load Configure link Network adapters of a server use

de6 balancing aggregation in manual adaptability load balancing (ALB),
mode. and the switch needs to use link
aggregation in manual mode.

Analysis of Interworking Between the CE Series Switch and Windows Server

The interworking mode used by a Huawei CE series switch to connect to a Windows server
depends on the binding mode of network adapters of the server. For details, see Table 22-67.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 634

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-67 Interworking mode of a Huawei CE series switch and a Windows server
Network Adapter Switch Interworking Description
Binding Mode Mode

Adapter fault Add connected Network adapters of a server use AFT,

tolerance (AFT) interfaces of the switch so you are advised to add connected
to the same VLAN. interfaces of the switch to the same
VLAN.

ALB Add connected Network adapters of a server use ALB,

interfaces of the switch so you are advised to add connected
to the same VLAN. interfaces of the switch to the same
VLAN.

Switch fault Connect two switches. Network adapters of a server use SFT, so
tolerance (SFT) two switches are used.

Static link Configure link Network adapters of a server use SLA,

aggregation (SLA) aggregation in manual so the switch needs to use link
mode. aggregation in manual mode.

Dynamic LACP Configure link Network adapters of a server are bound

aggregation in LACP in LACP mode, and the switch connects
mode. to the server using link aggregation in
LACP mode.

A server generally has multiple network adapters. You can configure network adapter
aggregation to improve bandwidth and reliability. This document describes how to connect
CE series switches to servers using network adapter groups consisting of mainstream network
adapters, including Intel(R) Server Adapter I340, HP Ethernet 1Gb 4-port 331T, and
Mellanox ConnectX Ethernet Adapter.
l Intel(R) Server Adapter I340 Network Adapter Group
Table 22-68 describes the five modes supported by Intel(R) Server Adapter I340
network adapter group.

Table 22-68 Modes supported by Intel(R) Server Adapter I340 network adapter group
Server Mode Network Adapter Description
Group Mode

Active/Standby Adapter fault tolerance Each group supports two to eight

mode network adapters working at different
rates or in full-duplex mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 635

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Server Mode Network Adapter Description

Group Mode

Adaptability load If the switch interface, cable, or active

balancing network adapter fails, the network
adapter group provides load balancing
and fault tolerance for traffic
transmission. If receive load balancing
(RLB) is enabled, you must choose the
active and standby network adapters.
Each group supports two to eight
network adapters working at different
rates or in full-duplex mode.

Exchanger fault Each group supports a maximum of two

tolerance network adapters working at different
rates or in full-duplex mode.

Load balancing IEEE 802.3ad dynamic Each group supports two to eight
mode link aggregation network adapters working at the same
rate and in full-duplex mode.

Static link aggregation Each group supports two to eight

network adapters working at the same
rate and in full-duplex mode.

l HP Ethernet 1Gb 4-port 331T Network Adapter Group

Table 22-69 describes the modes supported by HP Ethernet 1Gb 4-port 331T network
adapter group.

Table 22-69 Modes supported by HP Ethernet 1Gb 4-port 331T network adapter group
Server Network Adapter Group Description
Mode Mode

- Automatic (Recommended) Default configuration. If the default

configuration mode is used, check
whether member network adapters
in the network adapter group
connect to the same switch
supporting 802.3ad dynamic LACP
to choose the network adapter group
mode.
l If so, choose the 802.3ad
Dynamic with Fault Tolerance
mode.
l If not, choose the Transmit Load
Balancing with Fault Tolerance
(TLB) mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 636

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Server Network Adapter Group Description

Mode Mode

Active/ Network Fault Tolerance Only Member network adapters connect

Standby (NFT) to different switches. The active
mode network adapter is in active state
and other network adapters are in
standby state. This mode provides
the fault tolerance function, but does
not provide the bandwidth increase
and load balancing functions.

Load 802.3ad Dynamic with Fault Dynamic link aggregation.

balancing Tolerance
mode
Switch-assisted Load Balancing Load balancing and fault tolerance
with Fault Tolerance (SLB) with the assistance of the switch.
Member network adapters in the
network adapter group must connect
to the same switch, and switch
interfaces connecting to the server
must be configured to work in static
link aggregation (SLA) mode.

Transmit Load Balancing with Load balancing and fault tolerance

Fault Tolerance (TLB) at the transmit end. Data packets
sent by the server can be load
balanced, but data packets may not
be load balanced at the receive end.

l Mellanox ConnectX Ethernet Adapter network adapter group

Table 22-70 describes the modes supported by Mellanox ConnectX Ethernet Adapter
network adapter group.

Table 22-70 Modes supported by Mellanox ConnectX Ethernet Adapter network adapter
group

Server Mode Network Adapter Group Description

Mode

Active/Standby Fault Tolerance Adapter fault tolerance.

mode
Switch Fault Tolerance Switch fault tolerance.

Load balancing Send Load Tolerance Load balancing and fault

mode tolerance at the transmit end.

Load Balancing (Send & Load balancing at the transmit

Receive) and receive ends.

Adaptive Load Balancing Adaptive load balancing.

Dynamic Link Aggregation Dynamic link aggregation.

(802.3ad)

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 637

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Server Mode Network Adapter Group Description

Mode

Static Link Aggregation Static link aggregation.

(802.3ad)

22.23 Ethernet Switching - VLAN

22.23.1 How Do I Configure the Link Type of an Interface?

Descriptions of link types

Table 22-71 Link types and applications

Type Usage Scenario

Access An access interface on a switch is used to connect a user host. The

access interface sends only untagged Ethernet frames to the remote
device.

Trunk A trunk interface on a switch is used to connect to another switch.

The trunk interface allows Ethernet frames from multiple VLANs to
pass.

Hybrid A hybrid interface on a switch can connect either to a host or to

another switch. The hybrid interface allows Ethernet frames from
multiple VLANs to pass, and can be configured to determine whether
the Ethernet frames from the outbound interface carry tags.

Configurations of link types

The following provides configuration examples of three link types. By default, the link type
of an interface is access.
l Access interface
<HUAWEI> system-view
[~HUAWEI] vlan batch 3
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type access //Set the link type to access.
[*HUAWEI-10GE1/0/1] port default vlan 3 //Set the default VLAN ID of the
access interface to 3.
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] commit

l Trunk interface
<HUAWEI> system-view
[~HUAWEI] vlan batch 10 to 30
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type trunk //Set the link type to trunk.
[*HUAWEI-10GE1/0/1] port trunk allow-pass vlan 10 to 30 //Set the range of
VLANs allowed by the trunk interface to 10-30.
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 638

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Hybrid interface
<HUAWEI> system-view
[~HUAWEI] vlan batch 3 to 9
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port link-type hybrid //Set the link type to hybrid.
[*HUAWEI-10GE1/0/1] port hybrid untagged vlan 3 to 5 //Set the range of
VLANs allowed by the hybrid interface in untagged mode to 3-5.
[*HUAWEI-10GE1/0/1] port hybrid tagged vlan 6 to 9 //Set the range of VLANs
allowed by the hybrid interface in tagged mode to 6-9.
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] commit

22.23.2 Do CE Series Switches Support VLAN Aggregation?

All models of CE series switches support VLAN aggregation, also called super-VLAN.

22.23.3 Does MUX VLAN Apply to the Data Center Network

Where Multiple Tenants Are Isolated?
On data center networks, multiple tenants need to be isolated, but a switch cannot accurately
isolate tenants. MUX VLAN applies to office networks of small-scale enterprises, and does
not apply to data center networks where multiple tenants need to be isolated.

22.23.4 What Are VLAN Specifications Supported by CE

Switches?

CE switches support 4063 VLANs. The VLAN ID ranges from 1 to 4094. VLAN 1 exists by
default, and VLANs 4064 to 4094 are default reserved VLANs. You can run the vlan
reserved vlan-id command in the system view to adjust the range of reserved VLANs.

You can run the vlan vlan-id or vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10> command in
the system view to create other VLANs except reserved VLANs.

22.23.5 Why Is the VLANIF Interface Not Up?

The VLANIF interface can go Up only when there is the physical interface in Up state in the
VLAN corresponding to the VLANIF interface.

22.23.6 How Are VLAN Traffic Statistics Obtained Through

SNMP?

Check the MIB object with the OID of 1.3.6.1.4.1.2011.5.25.42.3.1.3.4.1 through the SNMP
agent.

22.23.7 How Many VLANIF Interfaces Can Be Created on the

CE6810LI?

In V100R005C00 and earlier versions, only one VLANIF interface can be created on the
CE6810LI. The VLANIF interface is used for in-band management only, and is not used for
data forwarding.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 639

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

In V100R005C10 and later versions, a maximum of 64 VLANIF interfaces can be created on

the CE6810LI.

NOTE

The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6 function is
enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address can only be used to
manage the switch.

22.23.8 How Many Sub-VLANs Can Be Added to a Super-VLAN?

For the CE12800 and CE12800E series, CE5880EI, CE6870EI, CE6875EI, and CE6880EI, a
maximum of 256 sub-VLANs can be added to the same super-VLAN.

For CE8800, CE7800, CE6800, and CE5800 series switches excluding the CE5880EI,
CE6870EI, CE6875EI, and CE6880EI:
l In earlier versions of V200R002C50, a maximum of 32 sub-VLANs can be added to the
same super-VLAN.
l In V200R002C50 and later versions, a maximum of 256 sub-VLANs can be added to the
same super-VLAN.

22.23.9 What Are the Functions of VLAN and VLANIF Interfaces?

Functions of VLAN assignment are as follows:

l Limits broadcast domains. Broadcast domains are limited to conserve bandwidth and
improve network efficiency.
l Enhances LAN security. Packets from different VLANs are transmitted separately. Hosts
in a VLAN cannot communicate directly with hosts in another VLAN.
l Improves network robustness. A fault in a VLAN does not affect hosts in other VLANs.
l Allows flexible construction of virtual groups. With VLAN technology, hosts in different
geographical locations can be grouped together, simplifying network construction and
maintenance.

Functions of configuring VLANIF interfaces are as follows: A VLANIF interface is a VLAN-

based Layer 3 logical interface and can be configured with an IP address. After VLANs are
assigned, users in the same VLAN can communicate with each other while users in different
VLANs cannot. To implement communication between VLANs, you can configure a logical
Layer 3 interface (VLANIF interface).

22.24 Ethernet Switching - QINQ

22.24.1 Do CE Series Switches Support Selective QinQ?

CE series switches support selective QinQ starting from V100R003C00.

Selective QinQ can be implemented based on the VLAN ID or MQC. The CE5880EI and
CE6880EI switches do not support VLAN ID-based selective QinQ. The CE6870EI and
CE6875EI switch do not support MQC-based selective QinQ. Other models support both.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 640

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.25 Ethernet Switching - GVRP

22.25.1 Do CE Switches Support GVRP?

CE12800E that has the ED-E/EG-E/EGA-E series cards installed, CE5880EI and CE6880EI
switches do not support GVRP. Other CE switches support GVRP starting from
V200R001C00.

22.26 Ethernet Switching - STP/RSTP/MSTP

22.26.1 How Do I Configure STP When a CE Series Switch

Connects to a Server?
Concepts

If a specified port of a CE switch directly connects to a server but not another switch, you can
configure the port as an edge port. Then the port does not participate in spanning tree
calculation, which shortens the network topology convergence time and improves network
stability.

Normally, an edge port will not receive BPDUs. If a switch is attacked by forged BPDUs, the
edge port will receive the BPDUs. The switch then sets the edge port as a non-edge port and
recalculates the spanning tree, resulting in network flapping. You can enable BPDU protection
to prevent the attacks.

Configuration

When a CE switch connects to a server, configure the port directly connects to the server as an
edge port and configure BPDU protection simultaneously. The RSTP mode is used as the
example:
<HUAWEI> system-view
[~HUAWEI] stp mode rstp //Configure the device to work in RSTP mode.
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] stp edged-port enable //Configure the port as the edge port.
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] stp bpdu-protection //Enable BPDU protection.
[*HUAWEI] commit

22.26.2 How Is Network Flapping Due to Eth-Trunk Member

Interface Change Prevented?
When some Eth-Trunk member interfaces go Up or Down, the path cost of the Eth-Trunk will
change. STP recalculates the path cost, causing the network topology change. Then STP
recalculates the spanning tree, resulting in network flapping.

Run the stp [ process process-id ] [ instance instance-id ] cost cost command in the Eth-
Trunk interface view to set the path cost of the Eth-Trunk to a fixed value. Then member
interface change does not affect the path cost of the Eth-Trunk, and the network topology is
not affected.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 641

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

For example, set the path cost of the Eth-Trunk to 200.

<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 1
[*HUAWEI-Eth-Trunk1] stp cost 200
[*HUAWEI-Eth-Trunk1] commit

22.26.3 Why Does the STP Cost Increase After an Eth-Trunk

Member Interface Goes Down?
On an STP network, the cost of an Eth-Trunk interface is the sum of the path costs of all
member interfaces. A higher interface rate indicates a smaller cost.
When an active Eth-Trunk member interface goes Down, the rate of Eth-Trunk decreases, and
therefore the cost increases.

22.27 Ethernet Switching - M-LAG

22.27.1 How Are Some Interfaces Configured Not to Enter the

Error-Down State When the Peer-link Fails on an M-LAG
Network?
On a dual-homing Ethernet, VXLAN, or IP network where M-LAG is deployed, when the
peer-link fails but DAD detects that the heartbeat status is normal, interfaces except the
management interface, peer-link interface, and stack interface on the backup device all enter
the Error-Down state. When the faulty peer-link is restored, the M-LAG interface in Error-
Down state goes Up after 2 minutes by default and other physical interfaces in Error-Down
state go up automatically.
In practice, uplink interfaces running routing protocols or DAD-enabled heartbeat interfaces
should not enter the Error-Down state. You can configure the interfaces that are not M-LAG
member interfaces to enter the Error-Down state.
# Configure Eth-Trunk 2 on the backup device to enter the Error-Down state.
<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 2
[*HUAWEI-Eth-Trunk2] m-lag unpaired-port suspend
[*HUAWEI-Eth-Trunk2] commit

l When the peer-link fails but the heartbeat status is normal, only the interface where the
m-lag unpaired-port suspend command is configured enters the Error-Down state in
addition to the M-LAG interface in Error-Down state.
l The m-lag unpaired-port suspend command cannot be configured on the M-LAG
interface. It is recommended that this command be configured on both the M-LAG
master and backup devices.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 642

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.27.2 In M-LAG Networking, After a Server Is Dual-homed to

CEs, Traffic Is Reachable on One Device But Unreachable on the
Other Device. How Is the Problem Solved?
The cause is that the LACP M-LAG system priorities and IDs of two CEs in the M-LAG are
inconsistent. Eth-Trunks on both devices configured with M-LAG must use the same LACP
M-LAG system priority and ID.
l In V100R006C00 and earlier versions, run the lacp m-lag priority priority command on
the Eth-Trunks of both devices configured with M-LAG to set the same LACP M-LAG
system priority and run the lacp m-lag system-id mac-address command to set the same
LACP M-LAG system ID.
l In V200R001C00 and later versions, the slave device in the M-LAG automatically
synchronizes the LACP M-LAG system priority and ID of the master device through the
peer-link.

22.28 Ethernet Switching - VBST

22.28.1 Which Version Starts to Support VBST?

Starting from V100R006C0, CE switches support VBST.

22.28.2 Can VBST and MSTP Interwork?

VBST is mainly used to interwork with PVST, PVST+, and Rapid PVST+. MSTP is
recommended in other situations.

22.29 Ethernet Switching - Layer 2 Protocol Transparent

Transmission

22.29.1 What Is the Principle of Layer 2 Protocol Transparent

Transmission?
Layer 2 protocol packets are transparently transmitted based on the following principles:
l The destination multicast MAC address of a Layer 2 protocol packet is replaced with a
specified multicast MAC address on the ingress Provider Edge (PE) of the ISP network.
l The devices on the ISP network determine whether to process the protocol packet based
on the configured transparent transmission mode.
l When the Layer 2 protocol packet reaches the egress, the PE restores the destination
multicast MAC address of the Layer 2 protocol packet to the standard destination
multicast MAC address based on the mapping between the specified destination
multicast MAC address and the Layer 2 protocol configured on the device. The egress
PE also determines whether to process the packet based on the configured transparent
transmission mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 643

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.30 Network Management and Monitoring - Mirroring

22.30.1 How Do I Configure Port Mirroring?

Perform the following operations to configure port mirroring:
1. Run the system-view command to enter the system view.
2. Run the observe-port [ observe-port-index ] interface interface-type interface-number
command to configure a local observing port.
To configure multiple local observing ports, run this command multiple times.
3. Run the interface interface-type interface-number command to enter the interface view.
4. Run the port-mirroring observe-port observe-port-index { both | inbound |
outbound } command to copy traffic to a specified observing port.
To copy traffic to multiple observing ports, run this command multiple times.
5. Run the commit command to commit the configuration.

Configuring 1:1 Port Mirroring

You can copy packets on a mirrored port to an observing port. For example, copy incoming
packets on mirrored port 10GE1/0/1 to observing port 10GE1/0/2.
<HUAWEI> system-view
[~HUAWEI] observe-port 1 interface 10ge 1/0/2
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port-mirroring observe-port 1 inbound
[*HUAWEI-10GE1/0/1] commit

Configuring 1:N Port Mirroring

You can copy packets on one mirrored port to N observing ports. For example, copy incoming
packets on mirrored port 10GE1/0/1 to observing ports 10GE1/0/2 and 10GE1/0/3.
<HUAWEI> system-view
[~HUAWEI] observe-port 1 interface 10ge 1/0/2
[*HUAWEI] observe-port 2 interface 10ge 1/0/3
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port-mirroring observe-port 1 inbound
[*HUAWEI-10GE1/0/1] port-mirroring observe-port 2 inbound
[*HUAWEI-10GE1/0/1] commit

Configuring N:1 Port Mirroring

You can copy packets on N mirrored ports to one observing port. For example, copy incoming
packets on mirrored ports 10GE1/0/1 and 10GE1/0/2 to observing port 10GE1/0/3.
<HUAWEI> system-view
[~HUAWEI] observe-port 1 interface 10ge 1/0/3
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] port-mirroring observe-port 1 inbound
[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] interface 10ge 1/0/2
[*HUAWEI-10GE1/0/2] port-mirroring observe-port 1 inbound
[*HUAWEI-10GE1/0/2] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 644

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.30.2 How Can I Configure Traffic Mirroring?

Perform the following operations to configure traffic mirroring:
1. Configure an observing port.
a. Run the system-view command to enter the system view.
b. Run the observe-port [ observe-port-index ] interface interface-type interface-
number command to configure a local observing port.
To configure multiple observing ports, run the preceding commands multiple times.
c. Run the commit command to commit the configuration.
2. Configure a traffic classifier.
a. Run the system-view command to enter the system view.
b. Run the traffic classifier classifier-name [ type { and | or } ] command to create a
traffic classifier and enter the traffic classifier view or enter the existing traffic
classifier view.
c. Run the if-match match command to configure a matching rule in the traffic
classifier.
d. Run the commit command to commit the configuration.
3. Configure a traffic behavior.
a. Run the system-view command to enter the system view.
b. Run the traffic behavior behavior-name command to create a traffic behavior.
c. Run the mirroring observe-port observe-port-index command to mirror traffic
matching the rule to the specified observing port.
d. Run the commit command to commit the configuration.
4. Configure a traffic policy.
a. Run the system-view command to enter the system view.
b. Run the traffic policy policy-name command to create a traffic policy.
c. Run the classifier classifier-name behavior behavior-name command to configure
a traffic behavior for the specified traffic classifier in the traffic policy. That is, bind
the traffic classifier and traffic behavior to the traffic policy.
d. Run the commit command to commit the configuration.
5. Apply the traffic policy.
Among CE8800, CE7800, CE6800, and CE5800 series switches, only the CE6870EI,
CE6875EI, CE6880EI, and CE5880EI allow applying a traffic policy in the outbound
direction, and the CE6880EI and CE6875EI support this function since V200R003C00.
– Apply the traffic policy to an interface.
i. Run the system-view command to enter the system view.
ii. Run the interface interface-type interface-number command to enter the
interface view.
iii. Run the traffic-policy policy-name { inbound | outbound } command to
apply the traffic policy to the interface.
iv. Run the commit command to commit the configuration.
– Apply the traffic policy to a VLAN.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 645

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

i. Run the system-view command to enter the system view.

ii. Run the vlan vlan-id command to enter the VLAN view.
iii. Run the traffic-policy policy-name { inbound | outbound } command to
apply the traffic policy to the VLAN.
iv. Run the commit command to commit the configuration.
– Apply the traffic policy globally or to a specified board.
i. Run the system-view command to enter the system view.
ii. Run the traffic-policy policy-name global [ slot slot-id ] { inbound |
outbound } command to apply the traffic policy globally or to a specified
board.
iii. Run the commit command to commit the configuration.

In Figure 22-112, HostA connects to SwitchA through 10GE1/0/1, and the server directly
connects to 10GE1/0/2 on SwitchA. The server needs to monitor packets that carry 802.1p
priority 6 and are sent from HostA.

Figure 22-112 Local traffic mirroring networking

10GE1/0/1 10GE1/0/2

HostA SwitchA Server

<HUAWEI> system-view
[~HUAWEI] sysname SwitchA
[*HUAWEI] commit
[~SwitchA] observe-port 1 interface 10ge 1/0/2 //Configure an observing port.
[*SwitchA] commit
[~SwitchA] traffic classifier c1 //Configure a traffic classifier.
[*SwitchA-classifier-c1] if-match 8021p 6 //Define a matching rule in the
traffic classifier.
[*SwitchA-classifier-c1] commit
[~SwitchA-classifier-c1] quit
[~SwitchA] traffic behavior b1 //Configure a traffic behavior.
[*SwitchA-behavior-b1] mirroring observe-port 1 //Mirror traffic that
matches the rule to the observing port.
[*SwitchA-behavior-b1] commit
[~SwitchA-behavior-b1] quit
[~SwitchA] traffic policy p1 //Configure a traffic policy.
[*SwitchA-trafficpolicy-p1] classifier c1 behavior b1 //Bind the traffic
classifier and traffic behavior to the traffic policy.
[*SwitchA-trafficpolicy-p1] commit
[~SwitchA-trafficpolicy-p1] quit
[~SwitchA] interface 10ge 1/0/1
[~SwitchA-10GE1/0/1] traffic-policy p1 inbound //Apply the traffic policy to
the inbound direction of 10GE1/0/1.
[*SwitchA-10GE1/0/1] commit

22.30.3 How Do I Configure VLAN Mirroring?

Perform the following operations to configure VLAN mirroring.
1. Run the system-view command to enter the system view.
2. Run the observe-port [ observe-port-index ] interface interface-type interface-number
command to configure a local observing port.
To configure multiple observing ports, run the preceding command multiple times.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 646

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

3. Run the vlan vlan-id command to enter the VLAN view.

4. Run the mirroring observe-port observe-port-index { inbound | outbound | both }
command to copy traffic of the VLAN to the specified observing port.
To copy traffic to multiple observing ports, run this command multiple times.
Only the CE12800E that has the ED-E/EG-E/EGA-E series cards installed, CE6880EI,
and CE5880EI support outbound VLAN mirroring. That is, they support the outbound
and both parameters.
5. Run the commit command to commit the configuration.
For example, you can run the following command to copy traffic of VLAN 10 to the
observing port 10GE1/0/2.
<HUAWEI> system-view
[~HUAWEI] observe-port 1 interface 10ge 1/0/2
[*HUAWEI] vlan 10
[*HUAWEI-vlan10] mirroring observe-port 1 inbound
[*HUAWEI-vlan10] commit

22.30.4 Do CE Series Switches Support Port Mirroring?

CE series switches support port mirroring.

22.30.5 Do Stacked CE12800s Support Inter-Chassis Mirroring?

In a stack system, the observing and mirrored ports in traffic mirroring can be configured on
different chassis. In V100R003C00 and earlier versions, the observing and mirrored ports in
port mirroring must be configured on the same chassis. In V100R003C10 and later versions,
the observing and mirrored ports in port mirroring can be configured on different chassis.
Packets mirrored from one chassis to the other may be changed or discarded. Therefore, you
are not advised to configure the observing and mirrored ports on different chassis.

22.30.6 How Many Observing Ports Do CE Series Switches

Support?
On CE12800&CE12800E series switches
l A CE12800 or CE12800E (except the CE12800E that has the FD-X series cards
installed) can have a maximum of eight observing ports configured and use these
observing ports simultaneously.
l A CE12800E that has the FD-X series cards installed can have a maximum of four
observing ports configured and use these observing ports simultaneously.
l Since V100R003C00, a CE12800 has supported a maximum of 128 observing port
groups, but can use at most 8 observing port groups at a time. Each observing port group
can have at most 64 observing ports. An observing port group is a group of observing
ports. Packets copied to an observing port group will be copied to all the observing ports
in the group.
l The CE12800E does not support observing port groups.
On CE8800, CE7800, CE6800, and CE5800 series switches
l In V100R006C00 and earlier versions, the switch can have a maximum of eight
observing ports configured but can use at most two observing ports at a time. Each
observing port can be used to copy both incoming and outgoing traffic.
l In V200R001C00 and later versions, a switch can have a maximum of eight observing
ports configured. A CE6880EI, CE6870EI, CE6875EI, or CE5880EI switch can use at

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 647

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

most eight observing ports at a time, while other switch models can use at most four
observing ports at a time. On a CE6880EI or CE5880EI switch, each observing port can
be used to copy both incoming and outgoing traffic. On a switch except CE6880EI and
CE5880EI, the maximum numbers of available observing ports for incoming and
outgoing traffic are calculated separated. When the same observing port is specified for
both incoming and outgoing traffic, the remaining number of observing ports for
incoming and outgoing traffic is 2 not 3.
l A CE6870EI or CE6875EI switch also supports observing port groups and can have at
most 128 observing port groups configured, but can use at most 8 observing port groups
at a time. Each observing port group contains at most 64 member ports. An observing
port group is a group of observing ports. Packets copied to an observing port group will
be copied to all its member ports.

22.30.7 Do CE Series Switches Support VLAN Mirroring?

CE series switches support VLAN mirroring since V100R003C10.

22.30.8 Can Packets Be Mirrored from One Mirrored Port to

Multiple Observing Ports?
CE12800 series switches support 1:N mirroring. On a CE12800E switch, 1:N mirroring is not
supported in traffic mirroring.
CE8800, CE7800, CE6800, and CE5800 series switches support 1:N mirroring in port
mirroring but not in traffic mirroring and vlan mirroring.

22.30.9 Can an Eth-Trunk Be Configured as a Mirrored Port?

An Eth-Trunk can be configured as a mirrored port.
l If an Eth-Trunk is configured as a mirrored port, its member ports cannot be configured
as mirrored ports.
l If a member port of an Eth-Trunk is configured as a mirrored port, the Eth-Trunk cannot
be configured as a mirrored port.

22.30.10 Can an Eth-Trunk Function as an Observing Port?

An Eth-Trunk can function as an observing port, but member ports in an Eth-Trunk cannot
function as observing ports.

22.30.11 Do CE Series Switches Support N:1 Port Mirroring?

CE series switches support N:1 port mirroring. That is, packets on N ports can be copied to
one observing port.

22.30.12 Do CE8800, CE7800, CE6800, and CE5800 Series Switches

Support Inter-Device Mirroring?
CE8800, CE7800, CE6800, and CE5800 series switches support inter-device mirroring when
the switches are configured in a stack. If the mirrored ports are physical member ports in a
stack, inter-device mirroring is not supported. On the CE6870EI and CE6875EI, packets
mirrored from one device to the other may be changed or discarded. Therefore, you are not
advised to configure the observing and mirrored ports on different devices.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 648

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.30.13 Can Mirroring Be Deployed on Different Cards of a

CE12800?
Yes.

22.30.14 Do CE Series Switches Support M:N Port Mirroring?

CE series switches support M:N port mirroring. That is, packets on M ports can be copied to
N observing ports.

22.30.15 Why Does MAC Address Learning Need to Be Disabled

When Layer 2 Remote Port Mirroring Is Configured in Some
Scenarios?
First, you need to understand how mirrored packets are forwarded to the monitoring device
after Layer 2 remote port mirroring is configured.
As shown in Figure 22-113, in Layer 2 remote port mirroring, the remote observing port
receives the mirrored packets from the mirrored port, adds another VLAN tag (VLAN 10) to
the packets tagged with VLAN 20, and then forwards the mirrored packets to the server by
following the Layer 2 forwarding process. The destination MAC address of mirrored packets
is the same as that of the original packets, but not the server's MAC address. To reach the
server, the mirrored packets must be treated as unknown unicast packets and forwarded in
broadcast mode. The mirrored packets can be forwarded to the server in broadcast mode as
long as the MAC address table of VLAN 10 contains no entry matching the destination MAC
address of the mirrored packets.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 649

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-113 Mirrored packet forwarding in a Layer 2 remote port mirroring scenario

Internet

VLAN 20
SwitchB

SwitchA
VLAN 10
VLAN 20

Server

HostA HostB

Mirrored port
Remote observing port
Original packets
Mirrored packets

In most Layer 2 remote mirroring scenarios, intermediate devices will not learn destination
MAC addresses of mirrored packets in the corresponding VLANs. This means that mirrored
packets can be forwarded to the monitoring devices in broadcast mode. In the following
scenarios, however, Layer 2 remote port mirroring will fail because destination MAC
addresses of mirrored packets can be learned in the corresponding VLANs.
l The original service traffic and mirrored traffic are forwarded in the same VLAN.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 650

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-114 Layer 2 remote port mirroring fails when the original service traffic and
mirrored traffic are forwarded in the same VLAN
MacS
DNS Server

VLAN 10
SwitchB’s MAC address table MacS MacS
MacA MacA
VLAN 10 VLAN 10
Outbound 10GE1/0/3 VLAN 10
MAC VLAN
interface 10GE1/0/2
SwitchB VLAN 10
MacA VLAN 10 10GE1/0/1
MacS VLAN 10 10GE1/0/3 10GE1/0/1 Server

VLAN 10
MacS MacS
MacA MacA
VLAN 10 VLAN 10
VLAN 10

SwitchA

MacS VLAN 10
MacA
VLAN 10

R&D

HostA HostB
MacA MacB
Mirrored port
Remote observing port
Original packets
Mirrored packets

As shown in Figure 22-114, a company configures Layer 2 remote port mirroring on

SwitchA to monitor the traffic sent from employees in the R&D department to the DNS
server. The original traffic and mirrored traffic are both forwarded through VLAN 10.
When SwitchA receives the packets sent from HostA to the DNS server, it copies the
packets and forwards the mirrored packets in VLAN 10. The mirrored packets and
original packets all use the MAC address of the DNS server as the destination MAC
address. SwitchB between HostA and the DNS server learns the MAC address entry
matching the DNS server. Therefore, SwitchB forwards the mirrored packets with the
destination MAC address set to the DNS server MAC address according to the learned
MAC address entry in VLAN 10. As a result, Layer 2 remote port monitoring fails.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 651

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

To resolve this problem, use different VLANs to forward the original service traffic and
mirrored traffic, as shown in Figure 22-115. If the original service traffic and mirrored
traffic need to be forwarded in the same VLAN, run the mac-address learning disable
command on the intermediate devices to disable MAC address learning in this VLAN.
However, disabling MAC address learning will cause a waste of link bandwidth.

Figure 22-115 Original service traffic and mirrored traffic are forwarded in different
VLANs
MacS
DNS Server

VLAN 20
MacS MacS
SwitchB’s MAC address table MacA MacA
VLAN 20 VLAN 10
10GE1/0/3 VLAN 20
Outbound
MAC VLAN 10GE1/0/2
interface
SwitchB VLAN 10
MacA VLAN 20 10GE1/0/1
MacS VLAN 20 10GE1/0/3 10GE1/0/1 Server

VLAN 20
VLAN 10
MacS MacS
MacA MacA
VLAN 20 VLAN 10
VLAN 20

SwitchA
VLAN 20

MacS
MacA
VLAN 20

R&D

HostA HostB
MacA MacB
Mirrored port
Remote observing port
Original packets
Mirrored packets

l Mirrored packets from different source MAC addresses are forwarded in the same
VLAN.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 652

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-116 Layer 2 remote port mirroring fails when mirrored packets from different
source MAC addresses are forwarded in the same VLAN
Server

VLAN 10
MacD MacA
SwitchA MacA MacD SwitchC
VLAN 10 VLAN 10

VLAN 10 VLAN 10
10GE1/0/2 10GE1/0/1
SwitchB

Outbound
MAC VLAN
interface Marketing
R&D
MacA VLAN 10 10GE1/0/2
MacD VLAN 10 10GE1/0/1
SwitchB’s MAC address table

HostA HostB HostC HostD

MacA MacB MacC MacD

Mirrored port
Remote observing port
Mirrored packets from SwitchA
Mirrored packets from SwitchC

As shown in Figure 22-116, a company configures Layer 2 remote port mirroring on

SwitchA and SwitchC to monitor communication traffic between the R&D and
marketing departments. All mirrored packets are forwarded in VLAN 10, and the
original communication traffic between the two departments is forwarded in another
VLAN. When packets sent from downstream hosts arrive at the mirrored port on
SwitchA and SwitchC, SwitchA and SwitchC copy the packets and forward the mirrored
packets in VLAN 10. Source MAC addresses of the mirrored packets are MAC
addresses of sender hosts, which can be learned in the MAC address table of SwitchB.
Because destination MAC addresses of the mirrored packets are MAC addresses of
destination hosts, SwitchB forwards the mirrored packets according to the matching
entries found in its MAC address table. Layer 2 remote port mirroring fails.
Use any of the following methods to solve the preceding problem:
– Run the mac-address learning disable command on SwitchB to disable MAC
address learning in VLAN 10. Figure 22-117 shows the packet flows after MAC
address learning is disabled in VLAN 10.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 653

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-117 MAC address learning is disabled in VLAN 10

Server

VLAN 10
SwitchA SwitchC

VLAN 10 VLAN 10
SwitchB
MAC address learning is disabled in VLAN 10

R&D Marketing

HostA HostB HostC HostD

MacA MacB MacC MacD

Mirrored port
Remote observing port
Mirrored packets from SwitchA
Mirrored packets from SwitchC

– Configure port mirroring on SwitchB: configure the ports connected to SwitchA

and SwitchC as mirrored ports, and configure the port connected to the monitoring
server as a local observing port. Figure 22-118 shows the packet flow after port
mirroring is configured on SwitchB.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 654

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-118 Local port mirroring is configured on SwitchB

Server

VLAN 10
SwitchA SwitchC

VLAN 10 VLAN 10
SwitchB

R&D Marketing

HostA HostB HostC HostD

MacA MacB MacC MacD

Mirrored port
Remote observing port
Mirrored packets from SwitchA
Mirrored packets from SwitchC

– Use different VLANs to forward the mirrored packets in different directions, as

shown in Figure 22-119.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 655

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-119 Mirrored packets in different directions are forwarded in different

VLANs
Server

VLAN 20
VLAN 10
MacD MacA
SwitchA MacA MacD SwitchC
VLAN 10 VLAN 20

VLAN 10 VLAN 20
10GE1/0/2 10GE1/0/1
SwitchB

Outbound
MAC VLAN
interface Marketing
R&D
MacA VLAN 10 10GE1/0/2
MacD VLAN 20 10GE1/0/1

SwitchB’s MAC address table

HostA HostB HostC HostD

MacA MacB MacC MacD

Mirrored port
Remote observing port
Mirrored packets from SwitchA
Mirrored packets from SwitchC

22.30.16 Do CE Series Switches Support Outbound Traffic

Mirroring?
CE12800 series switches support outbound traffic mirroring.
Among CE8800, CE7800, CE6800, and CE5800 series switches:
l The CE5880EI, CE6870EI, and CE6875EI support outbound traffic mirroring.
l The CE6880EI supports outbound traffic mirroring since V200R003C00.
l Other switch models do not support outbound traffic mirroring.

22.31 Network Management and Monitoring - SNMP

22.31.1 How Do I Configure the SNMP Community Name?

Three SNMP versions are available: v1, v2c, and v3. SNMPv1 and SNMPv2c support
community names, but SNMPv3 does not support.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 656

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Run the snmp-agent community { read | write } { community-name | cipher community-

name } [ alias alias-name ] command in the system view to set the SNMP community name.

NOTE

The alias alias-name parameter is only supported in V100R003C00 and later versions. To facilitate
identification of community names, set alias for community names. The alias are stored in the configuration
file as plain text.

Note the following points when configuring SNMP community names:

l By default, the system checks the community name complexity. The community name
that fails the check is not allowed.
The community name must meet the following requirements:
– The community name contains at least eight characters.
– The community name must be a combination of at least two of uppercase letters A
to Z, lowercase letters a to z, digits, and special characters (excluding question
masks and spaces). If the character string is quoted by double quotation marks, the
character string can contain spaces.
To ensure SNMP community name security, do not disable community name complexity
check by running the snmp-agent community complexity-check disable command.
l If you set different rights (read or write) for the same community name, the last
configuration takes effect.
For example, set the read/write community name for SNMPv2c to Private123.
<HUAWEI> system-view
[~HUAWEI] snmp-agent sys-info version v2c //Configure the SNMP version as SNMPv2c
[*HUAWEI] snmp-agent community write Private123 //Configure the read-write
community name as Private123
[*HUAWEI] commit

22.31.2 How Do I View SNMP Community Names?

You can run the display snmp-agent community command to view the configured SNMP
community names in cipher text; however, the community names in plain text cannot be
displayed.

22.31.3 How Can I Delete SNMP Community Names?

The configured SNMP community names are displayed in ciphertext. If you know the SNMP
community name (for example, Public@123), run the undo snmp-agent community
Public@123 command in the system view to delete it. If you do not know the community
name, run the display current-configuration configuration snmp-agent command in any
view to check SNMP configurations. Find out the SNMP community name, and then run the
undo snmp-agent community { read | write } cipher community-name command in the
system view to delete the SNMP community name.
<HUAWEI> display current-configuration configuration snmp-agent
#
snmp-agent
snmp-agent local-engineid 800007DB03200BC7391301
snmp-agent community read cipher %^%#m2@"'Za-F(q#lZ;,8kw4|H1q9!-2)@Ov7'6>-g&AjG%:
0[gss*QnC,S{W#$K6ydA%Q~[`0ybRj~G^H0(%^%#
#
snmp-agent sys-info version v3
<HUAWEI> system-view
[~HUAWEI] undo snmp-agent community read cipher %^%#m2@"'Za-F(q#lZ;,8kw4|
H1q9!-2)@Ov7'6>-g&AjG%:0[gss*QnC,S{W#$K6ydA%Q~[`0ybRj~G^H0(%^%#
[*HUAWEI] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 657

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.31.4 How Do I Configure a Switch to Communicate with an

NMS Through SNMP?
Three SNMP versions are available: v1, v2c, and v3. SNMPv1 and SNMPv2c use community
name-based authentication, whereas SNMPv3 uses user security module and view-based
access control module. SNMPv3 is recommended due to its enhanced security.
This section describes how to configure SNMPv2c and SNMPv3 on a switch.

Configuring SNMPv2c
Set the SNMP version to v2c and read/write community name to Private123, and configure
access control.
<HUAWEI> system-view
[~HUAWEI] acl 2001
[*HUAWEI-acl4-basic-2001] rule permit source 192.168.1.0 0.0.0.255 //Allow only
the NMS on network segment 192.168.1.0 to access the switch.
[*HUAWEI-acl4-basic-2001] commit
[~HUAWEI-acl4-basic-2001] quit
[~HUAWEI] snmp-agent mib-view included alliso iso //Set the MIB view name to
alliso and accessed view includes iso.
[*HUAWEI] snmp-agent sys-info version v2c //The SNMP version used by the switch
must be the same as the SNMP version used by the NMS; otherwise, the switch
cannot communicate with the NMS.
[*HUAWEI] snmp-agent community write Private123 mib-view alliso acl 2001
[*HUAWEI] snmp-agent target-host trap address udp-domain 10.1.1.2 params
securityname adminNMS1234 v2c
//Set the IP address of trap host to 10.1.1.2, security name to
adminNMS1234, and trap version to v2c.
[*HUAWEI] commit

After the preceding configuration is complete, the NMS can connect to the switch using the
configured read/write community name.

Configuring SNMPv3
The security levels of the trap host, user, and user group are in descending order.
The security levels include:
l privacy: authentication and encryption
l authentication: authentication and no encryption
l none: no authentication and no encryption
If the user group is at the privacy level, the user and trap host must be at the privacy level. If
the user group is at the authentication level, the user and trap host must be at the privacy or
authentication level.
Set the user group name to huawei_group and security level to privacy, and configure access
control.
<HUAWEI> system-view
[~HUAWEI] acl 2001
[*HUAWEI-acl4-basic-2001] rule permit source 192.168.1.0 0.0.0.255 //Allow only
the NMS on network segment 192.168.1.0 to access the switch.
[*HUAWEI-acl4-basic-2001] commit
[~HUAWEI-acl4-basic-2001] quit
[~HUAWEI] snmp-agent mib-view included alliso iso //Set the MIB view name to
alliso and accessed view includes iso.
[*HUAWEI] snmp-agent sys-info version v3 //The SNMP version used by the switch

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 658

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

must be the same as the SNMP version used by the NMS; otherwise, the switch
cannot communicate with the NMS.
[*HUAWEI] snmp-agent group v3 huawei_group privacy write-view alliso acl 2001
[*HUAWEI] snmp-agent usm-user v3 huawei_user group huawei_group //Set the SNMPv3
user name to huawei_user and add the user to user group huawei_group.
[*HUAWEI] snmp-agent usm-user v3 huawei_user authentication-mode sha
Please configure the authentication password (8-255)
Enter Password: //Enter the authentication password.
Confirm Password: //Confirm the authentication password.
[*HUAWEI] snmp-agent usm-user v3 huawei_user privacy-mode aes256
Please configure the privacy password (8-255)
Enter Password: //Enter the encryption password.
Confirm Password: //Confirm the encryption password.
[*HUAWEI] snmp-agent target-host trap address udp-domain 10.1.1.2 params
securityname huawei_user v3 privacy
//Set the IP address of trap host to 10.1.1.2, security name to
huawei_user, and trap version to v3.
[*HUAWEI] commit

After the preceding configuration is complete, the NMS can connect to the switch using the
configured user name, authentication password, and encryption password.

22.31.5 Why Cannot a Device Connect to the NMS Through

SNMP?
If a reachable route exists between the device and NMS but the device cannot connect to the
NMS, run the display logbuffer command in any view of the device to check the SNMP
login failure log (SNMP/3/SNMP_AUTHEN_FAILED: Failed to login through SNMP). The
failure reasons recorded in the log are as follows:

Table 22-72 Failure reasons and suggestions

Failure reason Description Suggestion

Version is incorrect The SNMP versions on Run the display snmp-agent

the device and NMS are sys-info version command in
inconsistent. any view to check whether the
SNMP versions on the device
and NMS are the same. If not,
run the snmp-agent sys-info
version command in the system
view to set the SNMP version
on the device.

Packet is too large The size of an SNMP Run the snmp-agent packet
packet sent by the NMS max-size command in the
exceeds the threshold set system view to increase the
on the device. packet size threshold.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 659

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

PDU decode error Decoding error. The l Reason 1:

possible causes are: – If the SNMP engine ID
l Reason 1: The SNMP has been configured on
engine IDs used by the NMS, run the
the NMS and device display snmp-agent
are different. local-engineid
l Reason 2: The SNMP command in any view to
packet is modified. check whether the
SNMP engine IDs on the
l Reason 3: The time NMS and device are the
window of the SNMP same. If not, run the
packet is incorrect. snmp-agent local-
engineid engineid
command in the system
view to set the local
SNMP engine ID on the
device or change the
engine ID on the NMS
to make them consistent.
– If the SNMP engine ID
is not configured on the
NMS, run the display
snmp-agent local-
engineid command in
any view to check the
SNMP engine ID on the
device. Obtain the
SNMP packet header to
check whether the
SNMP engine ID in the
packet is the same as the
displayed local SNMP
engine ID. If not, run the
snmp-agent local-
engineid engineid
command in the system
view to set the local
SNMP engine ID on the
device or wait until the
NMS synchronizes the
SNMP engine ID from
the device.
l Reason 2:
The network is undergoing
an attack. Find out the
attack source, eliminate the
attack, and connect the
device to the NMS again.
l Reason 3:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 660

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

The network is unstable and

network delay is long.
Connect the device to NMS
again when the network is
stable.

Community is incorrect The community names The configured SNMP

on the NMS and device community name is stored in
are different. cipher text. The community
name displayed by the display
snmp-agent community
command in any view is also in
cipher text. If you have
forgotten the community name,
run the snmp-agent
community { read | write }
community-name command in
the system view to configure a
new read/write community
name, which must be the same
as that used on the NMS.

ACL denied The IP address used by Run the display acl {acl-
the NMS to send SNMP number | name acl-name | all }
request packets is denied command in any view to check
by an ACL. ACL configuration.
If the IP address used by the
NMS to send requests is denied
by the ACL, run the rule
command in the corresponding
ACL view to allow the NMS to
access the device.
If the NMS is on a VPN but no
VPN instance name is bound to
the ACL rule, run the rule
command in the corresponding
ACL view to bind the ACL rule
to the VPN instance.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 661

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

UsmUser Name is incorrect The SNMPv3 USM user l If the device uses an
names or AAA local user SNMPv3 USM user name
names configured on the to communicate with the
NMS and device are NMS, run the display
different. snmp-agent usm-user
command in any view to
check whether the SNMPv3
USM user name is the same
as that configured on the
NMS. If not, modify the
SNMPv3 USM user name
on the NMS or device to
make them consistent.
l If the device uses an
SNMPv3 AAA local user
name to communicate with
the NMS, run the display
snmp-agent local-user
command in any view to
check whether the SNMPv3
AAA local user name is the
same as that configured on
the NMS. If not, modify the
SNMPv3 AAA user name
on the NMS or device to
make them consistent.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 662

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

Wrong Protocol Parameter The security level of the Run the display snmp-agent
SNMPv3 user is lower group and display snmp-agent
than that of the SNMPv3 usm-user commands in any
user group. view to check the security
levels of the SNMPv3 user
group and user. If the security
level of the SNMPv3 user is
lower than that of the user
group, run the snmp-agent
usm-user v3 user-name
authentication-mode { md5 |
sha } command in the system
view to set an authentication
password for the SNMPv3 user
and the snmp-agent usm-user
v3 user-name privacy-mode
{ 3des168 | aes128 | aes192 |
aes256 | des56 } command in
the system view to set an
encryption password for the
SNMPv3 user.
The SNMPv3 security levels in
descending order are as
follows:
l Level 1: privacy
(authentication and
encryption)
l Level 2: authentication
(only authentication)
l Level 3: noauthentication
(no authentication, no
encryption)
The security level of the
SNMPv3 user cannot be lower
than the security level of the
user group; otherwise, the
device cannot communicate
with the NMS.

Context name is incorrect The contextname on the Set the contextname on the
NMS is incorrect. NMS to be empty.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 663

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

Wrong Privacy Parameters The SNMPv3 USM l If the encryption methods

for USM User encryption method or are different:
password configured on Run the snmp-agent usm-
the NMS is different user v3 user-name privacy-
from that on the device. mode { 3des168 | aes128 |
aes192 | aes256 | des56 }
command in the system
view to set the SNMPv3
USM encryption method
and password to be the same
as those on the NMS.
l If the encryption passwords
are different:
The SNMPv3 USM
encryption password is
stored in cipher text. If you
have forgotten the SNMPv3
USM encryption password,
run the snmp-agent usm-
user v3 user-name privacy-
mode { 3des168 | aes128 |
aes192 | aes256 | des56 }
command in the system
view to set the SNMPv3
USM encryption password
to be the same as that on the
NMS.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 664

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

Wrong Authentication The SNMPv3 USM l If the authentication

Parameters for USM User authentication method or methods are different:
password configured on Run the snmp-agent usm-
the NMS is different user v3 user-name
from that on the device. authentication-mode
{ md5 | sha } command in
the system view to set the
SNMPv3 USM
authentication method and
password to be the same as
those on the NMS.
l If the authentication
passwords are different:
The SNMPv3 USM
authentication password is
stored in cipher text. If you
have forgotten the SNMPv3
USM authentication
password, run the snmp-
agent usm-user v3 user-
name authentication-mode
{ md5 | sha } command in
the system view to set the
SNMPv3 USM
authentication password to
be the same as that on the
NMS.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 665

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

Wrong Security level for The SNMPv3 USM user Run the display snmp-agent
USM User security level on the usm-user command in any
NMS is higher than that view to check whether an
on the device. authentication or encryption
method is configured for the
SNMPv3 USM user.
l If no authentication or
encryption method is
configured for SNMPv3
USM user on the device,
this indicates that the
security level of the
SNMPv3 USM user on the
device is noauthentication.
However, the security level
of the SNMPv3 USM user
on the NMS is
authentication. Perform the
following operations:
– Run the snmp-agent
usm-user v3 user-name
authentication-mode
{ md5 | sha } command
in the system view to set
the SNMPv3 USM
authentication password
to be the same as that on
the NMS.
– Change the security
level of SNMPv3 USM
user on the NMS to be
the same as that on the
device.
l If an authentication method
is configured for the
SNMPv3 USM user on the
device, this indicates that
the security level of
SNMPv3 USM user on the
device is authentication.
However, the security level
of the SNMPv3 USM user
on the NMS is privacy.
Perform the following
operations:
– Run the snmp-agent
usm-user v3 user-name
privacy-mode

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 666

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Failure reason Description Suggestion

{ 3des168 | aes128 |
aes192 | aes256 |
des56 } command in the
system view to set the
SNMPv3 USM
encryption password to
be the same as that on
the NMS.
– Change the security
level of SNMPv3 USM
user on the NMS to be
the same as that on the
device.

Wrong Authentication The authentication The authentication and

Parameters for Local User password for AAA local encryption passwords for
user on the NMS is SNMPv3 AAA local user are
different from that on the stored in cipher text. If you
device. have forgotten the
authentication or encryption
Wrong Privacy Parameters The encryption password password for SNMPv3 AAA
for Local User for AAA local user on local user, run the snmp-agent
the NMS is different local-user v3 user-name
from that on the device. { authentication-mode { md5
| sha } privacy-mode
{ 3des168 | aes128 | aes192 |
aes256 | des56 } command in
the system view to set the
authentication and encryption
passwords for SNMPv3 AAA
local user to be the same as
those on the NMS.

Pipeline is full The NMS has sent too Reduce the number of SNMP
many SNMP request request packets sent by the
packets to congest the NMS.
channel.

22.31.6 How Can I Change the Minimum Length of an SNMP

Community Name?
Run the snmp-agent community complexity-check disable command in the system view to
disable complexity check for community names. Then you can change the minimum length of
an SNMP community name. A community name that does not meet complexity requirement
may be attacked and decrypted by malicious users, affecting device security. Therefore, you
are advised not to disable complexity check for community names.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 667

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.31.7 How Can I Disable the Interface Up/Down Traps?

By default, the interface status trap function is globally disabled. Therefore, when an interface
changes status, no trap is generated. To enable the interface status trap function globally, run
the snmp-agent trap enable feature-name ifnet [ trap-name { linkdown | linkup } ]
command in the system view. After the linkdown and linkup traps are enabled globally, the
device sends a trap when an interface changes its status. To disable the interface status trap,
perform the following operations:
1. Run the interface interface-type interface-number command to enter the interface view.
2. Run the undo enable snmp trap updown command to disable the interface status trap
function.
3. Run the commit command to commit the configuration.

22.31.8 How Can I Restrict SNMP Access Rights of NMSs?

There are two methods to restrict SNMP access rights: based on an access control list (ACL)
and based on MIB view. The two methods can be used together.
The ACL applied to SNMP follows these rules:
l When permit is specified in an ACL rule, the NMS with the source IP address specified
in the rule is allowed to access the switch.
l When deny is specified in an ACL rule, the NMS with the source IP address specified in
the rule is not allowed to access the switch.
l If the packets from an NMS do not match any rule in an ACL, this NMS is not allowed
to access the switch.
l If an ACL does not have rules, any NMS is allowed to access the switch.
SNMP access control based on MIB view is to specify the MIB objects that can be monitored
and managed by NMSs.
l Configure SNMP access control based on ACL.
a. Configure ACL rules.
b. Specify ACL rules for the SNMP agent, community name, user group, or user
name.
n Run the snmp-agent acl acl-number command to configure the SNMP ACL.
Only the NMS matching the rule can access the switch through the SNMP
user.
n Run the snmp-agent community { read | write } { community-name | cipher
community-name } acl acl-number command to specify the ACL for SNMP
community name. After the command is executed, only the NMS using the
specified community name and matching the ACL can access the switch.
n Run the snmp-agent group v3 group-name { authentication | privacy |
noauthentication } acl acl-number command to specify the ACL for an
SNMPv3 user group. After the command is executed, only the NMS using the
user name in the specified user group and matching the ACL can access the
switch.
n Run the snmp-agent usm-user v3 user-name acl acl-number command to
specify the ACL for an SNMPv3 user. After the command is executed, only
the NMS using the specified SNMPv3 user name and matching the ACL can
access the switch.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 668

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Configure SNMP access control based on MIB view.

a. Run the snmp-agent mib-view { excluded | included } view-name oid-tree
command to create a MIB view and specify the MIB objects that the NMS can
monitor and manage.
b. Specify the MIB view for the SNMP community name or user group.
n Run the snmp-agent community { read | write } { community-name | cipher
community-name } mib-view view-name command to specify the MIB view
for SNMP community name. After the command is executed, the NMS using
this community name can monitor and manage only the objects in the specified
MIB view.
n Run the snmp-agent group v3 group-name { authentication | privacy |
noauthentication } [ read-view read-view | write-view write-view | notify-
view notify-view ] * command to specify the MIB view for an SNMPv3 user
group. After the command is executed, the NMS using the user name in this
SNMPv3 user group can monitor and manage only the objects in the specified
MIB view.
# Configure ACL 2001 to allow only the NMS on 192.168.1.0 to access the switch.
<HUAWEI> system-view
[~HUAWEI] acl 2001
[*HUAWEI-acl4-basic-2001] rule permit source 192.168.1.0 0.0.0.255
[*HUAWEI-acl4-basic-2001] rule deny source any
[*HUAWEI-acl4-basic-2001] commit
[~HUAWEI-acl4-basic-2001] quit

# Configure the MIB view named alliso and the accessed view includes iso.
[~HUAWEI] snmp-agent mib-view included alliso iso
[*HUAWEI] commit

# Allow some NMSs using the specified SNMP community name to access only the objects
in the MIB view alliso on the switch.
[~HUAWEI] snmp-agent community write private_user mib-view alliso acl 2001
[*HUAWEI] commit

# Allow some NMSs using the user names in the specified SNMPv3 user group to access only
the objects in the MIB view alliso on the switch.
[~HUAWEI] snmp-agent group v3 huawei_group privacy write-view alliso acl 2001
[*HUAWEI] commit

# Allow some NMSs using the user names in an SNMPv3 user group to manage the switch.
[~HUAWEI] snmp-agent usm-user v3 huawei_user acl 2001
[*HUAWEI] commit

22.31.9 How Can I View and Change the Engine ID?

To view the local SNMP engine ID, run the display snmp-agent local-engineid command.
To set the local SNMP engine ID, run the snmp-agent local-engineid engineid command. An
SNMP engine ID on a network must be unique.
The value of engineid is a hexadecimal string of 10-64 characters. It consists of an enterprise
ID and device information. If you want to manually set an SNMP engine ID, follow these
rules:
l The first four bytes are the vendor's private engine ID allocated by Internet Assigned
Numbers Authority (IANA). The engine ID of Huawei devices is 2011 in decimal

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 669

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

notation. The first binary digit has a fixed value 1. Therefore, the engine ID in
hexadecimal format is 800007DB.
l The device information is configured manually. You are advised to use the IP address or
MAC address of the switch as device information to uniquely identify the switch.

22.31.10 Why Is the CPU Usage Degraded After the Interface

Information Access Method Used by the NMS Is Changed?
The NMS can use either the get-next or get mode to access interface information. In the get-
next mode, a switch receives a request for interface information from the NMS, obtains the
interface information from the buffer, and then report the information to the NMS. In the get
mode, a switch receives a request for interface information from the NMS, collects
information about the specified interface in real time, and then report the information to the
NMS. If the NMS needs to frequently access interface information or access a huge bulk of
information, the get mode will cause a high CPU usage because the switch collects
information in real time. Therefore, the get-next mode is recommended.

22.31.11 Can the SNMP Read Community Name and Write

Community Name Be the Same?
The SNMP read community name cannot be configured the same as the write community
name. Otherwise, the later configuration overrides the previous configuration.

22.31.12 What Are the Requirements for the Length of an SNMP

Community Name?
By default, the system checks the community name complexity. The community name must
meet the following requirements:
l The length ranges from 8 to 32 characters.
l The name contains at least two types of the following: uppercase letters A to Z,
lowercase letters a to z, digits, and special characters (excluding question marks and
spaces). If the string is enclosed in double quotation marks (" "), the string can contain
spaces.
If the complexity check of a community name is disabled by using the snmp-agent
community complexity-check disable command, the community name can contain 1 to 32
characters. However, to ensure the security of SNMP community names, you are not advised
to disable the complexity check.

22.31.13 How Can I View the SNMP Configurations?

To view the SNMP configurations on the device, run the display current-configuration
configuration snmp command.

22.31.14 How Can I Delete the SNMP Configurations?

The undo snmp-agent command disables the SNMP Agent function, but it cannot delete the
SNMP configurations. If you run the snmp-agent command after undo snmp-agent, you can
see that the SNMP configurations still exist.
To delete an SNMP configuration permanently, run the undo command with corresponding
parameters.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 670

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.31.15 How Many SNMP Community Names Does a CE Switch

Support?
A CE switch supports a maximum of 20 SNMP community names.

22.31.16 How Can I Disable SNMP Versions?

Run the snmp-agent sys-info version { { v1 | v2c | v3 } * | all } disable command in the
system view to disable SNMP versions.

22.31.17 Why Does a Switch Record an SNMP/4/SNMP_IPLOCK

Log?
By default, the IP address blacklist of SNMP is enabled. If an NMS fails to log in to the
switch through SNMP, the NMS IP address is added to the SNMP blacklist and locked for 1s.
At the same time, the switch records an SNMP/4/SNMP_IPLOCK log. For the SNMP login
failure reasons, see 22.31.5 Why Cannot a Device Connect to the NMS Through SNMP?.
To disable IP address blacklist, run the snmp-agent blacklist ip-block disable command in
the system view. After the blacklist is disabled, the switch will not record the SNMP/4/
SNMP_IPLOCK log.

22.31.18 What Are a Plaintext Password and a Ciphertext

Password?
A plaintext password is a password that is not encrypted using an encryption algorithm, rather
than the password displayed on the screen when you enter it through the keyboard. For
example, when you configure the authentication password of a SNMPv3 USM user, the
system prompts you to enter the password. Assume that the password you enter is
Huawei@123. Here, Huawei@123 is a plaintext password. When you set up an SNMPv3
connection between the NMS and a device, the password you enter on the NMS is a plaintext
password.
HUAWEI> system-view
[~HUAWEI] snmp-agent usm-user v3 u1 group g1
[*HUAWEI] snmp-agent usm-user v3 u1 authentication-mode sha
Please configure the authentication password (8-255)
Enter Password: //Enter the authentication password Huawei@123.
Confirm Password: //Confirm the authentication password Huawei@123.
[*HUAWEI] commit

A ciphertext password is a password that is obtained after a device encrypts a plaintext

password through an encryption algorithm. It does not mean a password that is not displayed
on the screen when you enter it through the keyboard. In principle, a ciphertext password
cannot be directly compiled. Generally, you can obtain a ciphertext password from the
configuration file.
[~HUAWEI] display this
...
#
snmp-agent usm-user v3 u1
snmp-agent usm-user v3 u1 group g1
snmp-agent usm-user v3 u1 authentication-mode sha cipher %^
%#kdnL).JrtW=Cf0(r<IOPg7\DXWh.G~%Zex6,u'!D%^%#
...

In the preceding information, %^%#kdnL).JrtW=Cf0(r<IOPg7\DXWh.G~%Zex6,u'!D%^%#

is a ciphertext password that is generated after Huawei@123 is encrypted using the SHA
algorithm.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 671

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Generally, if no password has been used or a password is used on a small-scale network, a

plaintext password is configured. If a configuration file is used for batch deployment, a
ciphertext password is configured and the cipher parameter is generally used in the password
configuration. If a ciphertext password is configured, you need to enter a plaintext password
when logging in to a device using protocols such as STelnet, NETCONF, or SNMP.

22.31.19 Why Does an SNMP MIB Operation Performed by the

NMS Not Take Effect on a Device?
Assume that the NMS has set up an SNMP connection with a device and then operates on an
SNMP MIB object. If the operation does not take effect on the device, the SNMP MIB object
is not included in the MIB objects that the NMS can access. To check the MIB objects that the
NMS can access, perform the following steps:
1. Check the SNMP configuration on the device.
<HUAWEI> display current-configuration configuration snmp-agent
#
snmp-agent
snmp-agent local-engineid 800007DB03200BC7391301
snmp-agent community write cipher %^%#M(VE75y$]*r&h\Q2ZE96~,
\#PThr[Y_5;}9zfoHSUDHF(vI^u-e"xp8F/Q65xGE\2#W%hU^,d`(V,Du#%^%# mib-view
allextisis acl 2001
//Configure the rights that the SNMPv1 or SNMPv2c community name has on a
MIB view.
#
snmp-agent sys-info version all
snmp-agent group v3 admin privacy write-view allextisis acl 2001 //Configure
the rights that the SNMPv3 user group has on a MIB view.
#
snmp-agent mib-view excluded allextisis isisMIB //Create a MIB view, and
specify the MIB objects that the NMS can monitor and manage.
snmp-agent usm-user v3 nms2-admin
snmp-agent usm-user v3 nms2-admin group admin
snmp-agent usm-user v3 nms2-admin authentication-mode sha cipher %^%#p$(+$9#z/
CbPuu,=4N9I9l0=BRSi{FZyfl"nFInU%^%#
snmp-agent usm-user v3 nms2-admin privacy-mode aes128 cipher %^%#
%UhCY<o`oH(.eq=/}G;'z}cT>@9Nw=)Z;J(iHA7-%^%#
If no MIB view is specified in the SNMP community name configuration, the MIB
objects that the NMS can access are restricted within the ViewDefault view. If no read-
only MIB view is specified using the read-view parameter in the SNMP user group
configuration, the MIB objects that the NMS can access (with read-only access granted)
are restricted within the ViewDefault view. If no read-write MIB view is specified using
the write-view parameter in the SNMP user group configuration, the NMS cannot write
data into the device through the MIB.
The ViewDefault view includes sub-objects except snmpVacmMIB, snmpUsmMIB, and
snmpCommunityMIB under the internet object.
For details about the SNMP access rights of the NMS, see How Can I Restrict SNMP
Access Rights of NMSs?.
2. Check whether the MIB object operated by the NMS is included in the MIB objects that
the NMS can access. If not, reconfigure the MIB view. If so, contact technical support
personnel.

22.31.20 Can I Obtain Information About the Standby Device in a

Stack Through SNMP?
In a stack, you can use SNMP to obtain information about the entire stack, including
information about the master, standby, and slave devices.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 672

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

You can query basic information about each member device in the stack to learn which device
is the standby device. hwStackMemberInformationTable provides information about basic
attributes of a stack member device, including the stack priority, role, and device type. In this
table, hwStackRole indicates the stack role. As shown in the following figure, hwStackRole.
2[integer]standby[2] indicates that the ID of the standby device in the stack is 2. In
hwStackRole.2, 2 indicates the stack ID.

To query information, for example, the fan status, about the standby device in a stack, you can
query the hwEntityFanState object. As shown in the following figure, hwEntityFanState.
2.2[integer]normal[1] indicates the fan status of the standby device. In hwEntityFanState.2.2,
the first 2 indicates the stack ID, and the second 2 indicates the fan ID.

22.31.21 Why Does a Device Not Send Traps to eSight?

Assume that an SNMP connection is set up between a device and eSight and that eSight is
configured as the trap host on the device. If the device generates a trap but eSight does not
receive the trap, the possible cause is as follows: The device is connected to eSight through

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 673

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

SNMPv3, but the notify view name is not configured on the device. To resolve the problem,
perform the following steps:
1. Run the display snmp-agent statistics command to check SNMP packet statistics. If 0
Trap PDU sent is displayed, the device does not send any traps. In this case, go to step
2. If the value of Trap-PDU sent is not 0, the device has sent traps. In this case, contact
technical support personnel.
<HUAWEI> display snmp-agent statistics
3158 Messages delivered to the SNMP entity
0 Messages which were for an unsupported version
0 Messages which used an SNMP community name not known
0 Messages which represented an illegal operation for the community supplied
0 ASN.1 or BER errors in the process of decoding
3152 Messages passed from the SNMP entity
0 SNMP PDUs which had badValue error status
0 SNMP PDUs which had genErr error status
0 SNMP PDUs which had noSuchName error status
0 SNMP PDUs which had tooBig error status
3135 MIB objects retrieved successfully
0 MIB objects altered successfully
0 GetRequest PDU accepted and processed
3158 GetNextRequest PDU accepted and processed
0 GetBulkRequest PDU accepted and processed
3152 GetResponse PDU sent
0 SetRequest PDU accepted and processed
0 Trap PDU sent
0 Inform PDU sent
0 Inform PDU received with no acknowledgement
0 Inform PDU received with acknowledgement

2. Run the display current-configuration configuration snmp-agent command to check

the SNMP configuration. If snmp-agent group v3 huawei_group privacy write-view
alliso acl 2001 is displayed in the command output, the notify-view notify-view
parameter is not configured in the SNMPv3 user group configuration. In this case, go to
step 3. Otherwise, contact technical support personnel.
<HUAWEI> display current-configuration configuration snmp-agent
#
snmp-agent
snmp-agent local-engineid 800007DB037079903D7E91
#
snmp-agent sys-info version v3
snmp-agent group v3 huawei_group privacy write-view alliso acl 2001
snmp-agent target-host trap address udp-domain 192.168.251.3 vpn-instance
mgmt params securityname esight v3 privacy
#
snmp-agent mib-view included alliso iso
snmp-agent usm-user v3 esight
snmp-agent usm-user v3 esight group huawei_group
snmp-agent usm-user v3 esight authentication-mode sha cipher %^%#|OLYKh;!YC3Ge
+Q~%I@%G+4=Bx~tuRi}Ce7wk6/=%^%#
snmp-agent usm-user v3 esight privacy-mode aes128 cipher %^%#(D]o
+=4rE)_DL&3va~S0<L<L"+-]9*(/TK@g|EzV%^%#
#
snmp-agent packet max-size 1500
#
snmp-agent trap enable
#
return

3. Configure the notify view name of the SNMPv3 user group.

<HUAWEI> system-view
[~HUAWEI] snmp-agent group v3 huawei_group privacy write-view alliso notify-
view alliso acl 2001
[*HUAWEI] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 674

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.32 Network Management and Monitoring - NetStream

22.32.1 Can I Configure NetStream and Mirroring on the Same

Interface?
l On CE12800 series switches:
– In V100R005C00 and earlier versions: NetStream and port mirroring cannot be
configured on the same interface. NetStream conflicts with MQC-based traffic
mirroring and VLAN mirroring. After NetStream is configured on an interface, you
are advised not to configure any MQC-based traffic mirroring or VLAN mirroring
to contain this interface.
– In V100R005C10 and later versions: NetStream sampling can use the snoop
resources. When NetStream sampling is configured to use snoop resources, you can
configure inbound NetStream and port mirroring on the same interface.
l On CE12800E series switches:
NetStream and port mirroring can be configured on the same interface.
l On CE8800, CE7800, CE6800, and CE5800 series switches:
On a CE switch except CE6880EI and CE5880EI, NetStream uses mirroring resources
by default; therefore, NetStream and port mirroring cannot be configured on the same
interface. NetStream conflicts with MQC-based traffic mirroring and VLAN mirroring.
After NetStream is configured on an interface, do not configure any MQC-based traffic
mirroring or VLAN mirroring to contain this interface.
On a CE6880EI or CE5880EI, NetStream and port mirroring can be configured on the
same interface.
On a CE6875EI or CE6870EI, when inbound NetStream sampling uses snoop resources,
port mirroring and inbound NetStream can be configured on the same interface.

22.32.2 Which CE Switches Support NetStream?

The following table lists the models and minimum software versions supporting NetStream.

Table 22-73 Minimum versions supporting NetStream

Product Minimum Version Required

CE8868EI/CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 675

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6810-48S4Q-LI/CE6810-48S-LI V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI V100R005C10

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6860EI/CE6856HI/CE6870-48T6CQ-EI/ V200R002C50
CE6880-24S4Q2CQ-EI/
CE6880-48S4Q2CQ-EI/
CE6880-48T4Q2CQ-EI

CE6857EI V200R005C10

CE6875EI V200R003C00

CE6865EI V200R005C00

CE5880EI V200R005C10

CE5810EI V100R002C00

CE5850EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R006C00

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

22.32.3 What Can I Do If the Length of Interface Index Obtained

Through SNMP Is Different from the Length of Interface Index
Carried in NetStream Packet?
By default, the interface index in a NetStream packet contains 16 bits, while the interface
index obtained by the NMS through SNMP contains 32 bits. Therefore, the interface index
lengths are different in the default situation.
Run the netstream export ip index-switch 32 command in the system view to set the length
of interface index carried in a NetStream packet to 32 bits. Then the length of interface index

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 676

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

obtained through SNMP is the same as the length of the interface index carried in a
NetStream packet.

To view the mapping between 32-bit and 16-bit interface indexes, run the display netstream
map command in the diagnostic view. InterfaceName indicates the interface name, IfnetIndex
indicates the 32-bit interface index, and NSIndex indicates the 16-bit interface index.
<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display netstream map
Netstream index information in map:
----------------------------------------------------------------------
InterfaceName IfnetIndex NSIndex
----------------------------------------------------------------------
MEth6/0/0 1494 1
Sip6/0/0 1331 2
Sip6/0/1 1332 3
NULL0 4 4
InLoopBack0 5 5
MEth0/0/0 1333 6
40GE2/0/0 1334 7
40GE2/0/1 1335 8
40GE2/0/2 1336 9
40GE2/0/3 1337 10
40GE2/0/4 1338 11
40GE2/0/5 1339 12
40GE2/0/6 1340 13
40GE2/0/7 1341 14
40GE2/0/8 1342 15
40GE2/0/9 1343 16
40GE2/0/10 1344 17
40GE2/0/11 1345 18

22.32.4 How Do I Configure NetStream?

CE switches provide the NetStream feature to collect statistics on original flows, aggregation
flows, flexible flows, and Layer 2 flows. The following describes how to configure NetStream
to collect statistics on IPv4 original flows. For details about how to configure NetStream to
collect statistics on other types of flows, see the CE switch product documentation.

# Set the NetStream sampling rate. Set the sampling rate in both the inbound and outbound
directions of 10GE1/0/1 to 8192.
<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] netstream sampler random-packets 8192 inbound
[*HUAWEI-10GE1/0/1] netstream sampler random-packets 8192 outbound
[*HUAWEI-10GE1/0/1] quit

# Set the NetStream flow aging mode and aging time. Set the inactive aging time to 100
seconds and enable FIN- and RST-based aging.
[*HUAWEI] netstream timeout ip inactive 100
[*HUAWEI] netstream timeout ip tcp-session

# Set the source IP address, destination IP address, and destination port number of the
exported packets carrying original flow statistics.
[*HUAWEI] netstream export ip source 10.1.2.1
[*HUAWEI] netstream export ip host 10.1.2.2 6000

# Set the version of exported NetStream packets.

[*HUAWEI] netstream export ip version 9

# Enable NetStream statistics collection on 10GE1/0/1 for incoming and outgoing packets.
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] netstream outbound ip
[*HUAWEI-10GE1/0/1] netstream inbound ip

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 677

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] commit

22.32.5 What Are NetStream and sFlow? What Are Their

Differences?
NetStream and sFlow supported by CE switches are both used to collect statistics on and
analyze traffic on the network.
NetStream collects packet statistics based on flows. It samples inbound and outbound traffic
on each interface, classifies network traffic based on the key factors in packets (for example,
source IP address, destination IP address, source port number, and destination port number),
and filters as well as aggregates data. Users can customize templates to classify and collect
statistics on network traffic.
sFlow is a traffic monitoring technique that collects and analyzes traffic statistics based on
packets. It provides complete traffic information from Layer 2 to Layer 4. Network
administrators can analyze traffic transmission on the data center network in real time to
quickly detect abnormal flows and locate the source of attack traffic. This ensures stable
running of the data center network.
The following table compares NetStream and sFlow.

Table 22-74 Comparison between NetStream and sFlow

NetStream sFlow

NetStream can be deployed at the access, sFlow can be deployed at the access,
aggregation, or core layer based on service aggregation, or core layer based on service
requirements to learn about the service requirements to analyze traffic transmission
types on the network, network traffic on the data center network in real time. With
characteristics, and network running status. sFlow, users can quickly detect abnormal
With NetStream, users can detect network flows and locate the source of attack traffic.
structure defects or performance bottlenecks
in a timely manner.

NetStream is completely based on flows. sFlow is not completely based on flows.

(For example, if two packets belong to the (The flow status is not reserved.)
same flow, they are recorded in one flow
and the flow status is reserved before flow
statistics exporting.)

The cache is required for NetStream and its The cache is unnecessary. The ASIC chip
capacity affects NetStream performance. directly delivers received packets to the
The cache increases costs. CPU, which then exports the data to the
sFlow collector.

This method is flexible. Users can This method is inflexible, and no template
customize a template to obtain key can be customized.
information in network traffic.

22.33 Network Management and Monitoring - LLDP

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 678

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.33.1 How Can I View Neighboring Devices?

Run the display lldp neighbor brief command in any view to check brief information about
neighboring devices, such as the device names and interfaces connecting to the local device.
The neighbor information can be displayed only when LLDP is globally enabled on the local
and neighboring devices.

For example, check neighbor information of a device.

<HUAWEI> display lldp neighbor brief
Local Interface Exptime(s) Neighbor Interface Neighbor Device
-------------------------------------------------------------------------------
10GE1/0/4 119 10GE1/0/1 HUAWEI

Table 22-75 Description of the display lldp neighbor brief command output
Item Description

Local Interface Interface on the local device connecting to a

neighboring device.

Exptime(s) Aging time of a neighbor, in seconds.

Neighbor Interface Interface on the neighboring device

connecting to the local device.

Neighbor Device Name of a neighbor device.

22.33.2 LLDP MIB Object Names and OIDs

LLDP MIB objects include HUAWEI-LLDP-MIB, LLDP-EXT-DOT1-MIB, LLDP-EXT-
DOT3-MIB, and LLDP-MIB.

HUAWEI-LLDP-MIB: an extension of LLDP-MIB. It enables you to enable or disable the

Link Layer Discovery Protocol (LLDP) globally, configure management IPv4 addresses, clear
the statistics on received and sent LLDP packets, and enable or disable the trap function
globally. To support LLDP MDN, this object provides the MDN neighbor query function and
sending trap to NMS when MDN neighbor changes. The root object is
1.3.6.1.4.1.2011.5.25.134.

LLDP-EXT-DOT1-MIB: TLVs defined by IEEE802.1, including the TLV advertisement

enablement configuration and query for local and remote VLAN IDs, VLAN names, protocol
VLANs, and protocol types. The root object is 1.0.8802.1.1.2.1.5.32962.

LLDP-EXT-DOT3-MIB: TLVs defined by IEEE802.3, including the TLV advertisement

enablement configuration and query for local and remote auto-negotiation capabilities,
powering capabilities, link aggregation, and maximum frame length. The root object is
1.0.8802.1.1.2.1.5.4623.

LLDP-MIB: configures LLDP, queries statistics on sent and received LLDPDUs, and queries
local and remote device information. In addition, this object can configure the traps sent to the
NMS when the specific events happen. The root object is 1.0.8802.1.1.2.

For details about LLDP MIB objects, see the MIB reference.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 679

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.33.3 Does the CE Switch Support CDP Commands?

The CE switches do not support CDP commands, but support the lldp mdn enable command.
After this command is run, the device can discover the neighbors that use non-standard
discovery protocols, such as CDP.

22.33.4 How Can a Device Discover Neighbors?

l When the neighbor device uses LLDP:
LLDP must be enabled on both local and neighbor devices.
l When the neighbor device uses a non-standard discovery protocol, such as CDP:
LLDP and MDN must be enabled on the local device. The non-standard discovery
protocol must be enabled on the neighbor device.

22.33.5 Does a Management Interface Support LLDP?

Currently, LLDP cannot be run on a management interface.

22.34 Network Management and Monitoring - sFlow

22.34.1 Is a License Required to Support sFlow?

On CE12800:

All IPv6 functions on CE12800 series switches are controlled by license, so sFlow (IPv6)
requires license.

sFlow (IPv4) does not require license.

On CE12800E configured with FD-X series cards:

All IPv6 functions on CE12800E series switches are controlled by license, so sFlow (IPv6)
requires license.

sFlow (IPv4) does not require license.

On CE12800E configured with ED-E/EG-E/EGA-E series cards:

CE12800E does not support sFlow when configured with ED-E/EG-E/EGA-E series cards.

On CE8800, CE7800, CE6800, and CE5800:

sFlow does not require license.

22.34.2 Which CE Switch Models Support sFlow?

The following table lists the models and minimum software versions supporting sFlow.

Table 22-76 Minimum versions supporting sFlow

Product Minimum Version Required

CE8868EI/CE8861EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 680

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6810-48S4Q-LI/CE6810-48S-LI V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI V100R005C10

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6860EI/CE6856HI/CE6870-48T6CQ-EI V200R002C50

CE6857EI V200R005C10

CE6875EI V200R003C00

CE6865EI V200R005C00

CE5810EI V100R002C00

CE5850EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R006C00

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

22.34.3 What Is the Meaning of sFlow Sampling Rate?

The sFlow sampling rate refers to the sampling rate applied when sFlow uses flow sampling.
To configure the sFlow sampling rate, run the following command: sflow sampling
{ collector { collector-id } &<1-2> | rate rate | length { length | head-only } | inbound |
outbound } *

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 681

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

In the command, rate rate indicates the denominator of the flow sampling rate. The actual
sampling rate is 1/rate. For example, the default rate is 8192, indicating that one packet is
sampled every 8192 packets.

22.35 Network Management and Monitoring - NQA

22.35.1 What Are the NQA Test Types Supported by CE Switches?

The following types of NQA tests can be configured on CE switches: ICMP jitter test, ICMP
test, TCP test, trace test, UDP jitter test, LSP ping test, LSP trace test, and DNS test.

The LSP ping test and LSP trace test are supported only on the CE12800, CE8860EI,
CE8850EI, CE7855EI, CE7850EI, CE6875EI, CE6870EI, CE6865EI, CE6860EI, CE6857EI,
CE6856HI, CE6855HI, CE6851HI, CE6850HI, and CE6850U-HI.

22.35.2 Key Parameters of an NQA Test

Key parameters of an NQA test include frequency, interval, probeCount, timeout, and
jitter-packetnum.

l The frequency parameter indicates the interval at which an NQA test instance is
automatically performed. It is configured using the frequency interval command.
l The interval parameter indicates the interval at which probe packets are sent in an NQA
test instance. It is configured using the interval { milliseconds interval | seconds
interval } command.
l The probeCount parameter indicates the number of probes to be sent each time for an
NQA test instance. It is configured using the probe-count number command.
Except for the ICMP jitter and UDP jitter tests, the number of probes is equal to the
number of probe packets. For the ICMP jitter and UDP jitter tests, the number of probe
packets is calculated as follows: probeCount x jitter-packetnum.
l The timeout parameter indicates the timeout period of a probe for an NQA test instance.
It is configured using the timeout time command.
l The jitter-packetnum parameter indicates the number of packets sent in each probe for
an NQA test instance. It is configured using the jitter-packetnum number command.

The frequency value varies according to the test instance type. If the frequency value does not
meet the frequency verification formula, the test result may be "no result".

Test Instance Type Frequency Verification Formula

l ICMP test instance frequency > interval x (probeCount - 1) +

l LSP ping test instance timeout
l TCP test instance

l ICMP jitter test instance frequency > interval x (probeCount x

l UDP jitter test instance jitter-packetnum - 1) + timeout

l LSP trace test instance frequency ≥ 60

l Trace test instance

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 682

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Test Instance Type Frequency Verification Formula

DNS test instance frequency > timeout

22.36 Network Management and Monitoring - OpenFlow

22.36.1 How Do I Check the OpenFlow User Policy Entry

Information on a CE Switch?
The OpenFlow user policy table on a CE switch is configured on the Agile Controller and
then delivered by the Agile Controller to the CE switch. The OpenFlow user policy entry
information includes the priority, protocol type, source IP address, destination IP address,
next-hop IP address, and outbound interface. You can run the display openflow flows
standard command to view the information.
<HUAWEI> display openflow flows standard
------------------------------------------------------------
Entry ID: 0
Priority: 123
Match Information:
Protocol: 6
SIP/MASK: 10.2.2.2/255.255.255.255
DIP/MASK: 10.1.1.1/255.255.255.255
SrcPort : 8080
DstPort : 8080
DSCP : 12
Instruction Information:
Write Actions:
Set DSCP : 30
OutPort : 10GE1/0/1
NextHop : 10.136.68.210
Fail Action: forward
------------------------------------------------------------

Table 22-77 Description of the display openflow flows standard command output
Item Description

Entry ID User policy entry ID.

Priority User policy entry priority. A larger value

indicates a higher priority.

Match Information User policy entry matching information.

Protocol Protocol type.

SIP/MASK Source IP address/mask.

DIP/MASK Destination IP address/mask.

SrcPort Source port number.

DstPort Destination port number.

DSCP DSCP priority.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 683

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Item Description

Instruction Information Action instruction set. The switch matches

packets against user policy entries, and
takes actions on the positively matching
packets.

Write Actions Action in the action instruction set.

Set DSCP DSCP priority. The positively matching

packets are processed based on DSCP
priorities.

OutPort Outbound interface number. The positively

matching packets are sent out through this
interface.

NextHop Next-hop IP address. The positively

matching packets are sent to this IP address.

Fail Action Action taken on the positively matching

packets upon an execution failure of the
action in the instructions, including:
l forward: forwards the packets based on
the routes in the routing table.
l discard: discards the packets.

22.36.2 Which CE Switch Models Support the OpenFlow Agent?

The following table lists the models and minimum software versions supporting the
OpenFlow Agent. The OpenFlow Agent feature complies with openflow-spec-v1.4.0.

Table 22-78 Products and minimum version supporting the OpenFlow Agent
Product Minimum Version Required

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C10

CE7855EI V200R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 684

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI/CE6860EI/CE6856HI/ V200R002C50
CE6880EI

CE6857EI V200R005C10

CE6875EI V200R003C00

CE6865EI V200R005C00

CE5880EI V200R005C10

CE12804/CE12808/CE12812/CE12816 V100R003C10

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

22.37 Network Management and Monitoring - Packet

Capture

22.37.1 How Is Packet Capture Configured?

CE switches support two packet capture modes:
l Capture forwarded packets: If an error occurs in forwarded traffic (for example, the
traffic status does not match the traffic model), it is recommended that you configure the
device to capture the forwarded packets for analysis so that the device can quickly
identify invalid packets. This function ensures correct data transmission on the network.
Run the capture-packet interface { interface-type interface-number } &<1-4> [ vxlan
[ vni vni-id ] [ tag-format { none | single } ] [ acl acl-number ] | [ vlan vlan-id | inner-
vlan inner-vlan-id | acl { acl-number | ipv6 acl6-number } ] * ] [ clear payload ]
destination { terminal | file file-name } * [ time-out time | packet-num number |
packet-len { length | total-packet } ] * command in the user view to configure a capture
instance for forwarded packets.
NOTE

Only the CE12800, CE12800E, CE8868EI, CE8861EI, CE8860EI, CE8850EI, CE7855EI,

CE7850EI, CE6880EI, CE6875EI, CE6870EI, CE6865EI, CE6860EI, CE6857EI, CE6856HI,
CE6855HI, CE6851HI, CE6850HI, CE6850U-HI, and CE5880EI can capture the packets based on
the specified VXLAN inner information.
The CE12800, CE12800E (except CE12800E configured with FD-X series cards), CE6875EI, and
CE6870EI do not support the inner-vlan inner-vlan-id parameter.
l Capture the packets sent to the CPU: If the CPU of a device works abnormally, for
example, has a high CPU usage, it is recommended that you configure the device to
capture the packets sent to the CPU for analysis. This helps you detect and handle invalid
packets promptly to ensure stable running of the CPU.
Run the capture-packet local-host [ interface { interface-type interface-number }
&<1-4> ] [ acl { { acl-number | name acl-name } | ipv6 { acl6-number | name acl6-

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 685

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

name } } | vlan vlan-id | inner-vlan inner-vlan-id ] * destination { terminal | file file-

name } * [ time-out time | packet-num number | packet-len { length | total-packet } ] *
command in the user view to configure the device to capture the packets sent to the CPU.

22.38 Network Management and Monitoring -

Ping&Tracert

22.38.1 In Which Situations the tracert Command Output

Contains *?
If the tracert to one device times out, the tracert command displays * * * for this device. This
does not affect the execution of the tracert command.

After the tracert 10.1.2.2 command is run on switch A, by default, switch A displays the
following information:
<SwitchA> tracert 10.1.2.2
traceroute to 10.1.2.2(10.1.2.2), max hops: 30 ,packet length: 40,press CTRL_C to
break
1 10.1.1.2 10 ms 4 ms 4 ms
2 10.1.2.2 6 ms 4 ms 3 ms

If you do not want to expose switch B's IP address on other devices (displayed as * on switch
A), run the icmp name ttl-exceeded send disable command in the system view of switch B
to disable switch B from sending ICMP TTL timeout packets. Then, when the tracert
10.1.2.2 command is run on switch A, the following information is displayed:
<SwitchA> tracert 10.1.2.2
traceroute to 10.1.2.2(10.1.2.2), max hops: 30 ,packet length: 40,press CTRL_C to
break
1 * * *
2 10.1.2.2 6 ms 4 ms 3 ms

10GE1/0/1 10GE1/0/2
10.1.1.1/24 10.1.2.1/24
10GE1/0/1 10GE1/0/1
SwitchA 10.1.1.2/24 SwitchB 10.1.2.2/24 SwitchC

22.38.2 What Is a Ping Delay?

Network latency indicates the round-trip period of time during which a source device sends a
packet to the destination device and then the destination device returns a packet to the source
device.

Possible causes of long network latency are as follows:

1. Multiple hops on the packet forwarding path. The transmission time of packets in the
physical medium can be ignored because optical and electrical signals are transmitted at
a high speed. However, the time that a switch spends processing packets cannot be
ignored. When packets are transmitted through too many hops, the network latency is
long.
2. Insufficient network bandwidth. When the network through which packets are
transmitted does not have sufficient bandwidth, network congestion occurs and packets
need to wait in queues, resulting in long network latency.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 686

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

3. Insufficient memory space. When a switch receives a large number of packets, the switch
does not have sufficient memory space to process these packets, resulting in slow packet
processing speed and long network latency.
You can run the ping command to test network latency. The test results are only for reference
and cannot be used as an absolute value of network latency measurement. No reference value
is available for determining whether the ping latency is normal because requirement for
network latency varies depending on network status. Other measurement methods such as
network quality analysis (NQA) are also required to accurately measure network latency. Pay
attention to the following points when analyzing a ping latency:
1. When a switch forwards packets through the hardware at a high speed, network latency
is short. For example, ping a PC connected to the switch. When packets need to be
processed by the CPU, network latency is long. For example, ping a gateway.
Though network latency is long when the switch pings the gateway, packets are normally
forwarded because the packets are processed by the underlying chip rather than the CPU.
You can run undo icmp echo-reply fast disable command to enable the fast ICMP reply
function on the switch to shorten network latency when the switch pings the gateway.
After the function is enabled, the switch quickly responds to received Echo Request
packets destined for its own IP address. The CPU of the LPU directly responds to the
received ICMP packets, improving the processing speed of ICMP packets and shortening
network latency.
2. The processing priority of ICMP packets has been minimized to prevent impacts of
common ping attacks on the switch, so that ICMP packets are the last to be transmitted
and processed. Therefore, the network latency is long.

22.38.3 What Is Ping?

Ping Overview
Ping is a common method to troubleshoot device accessibility failures. It uses a series of
Internet Control Message Protocol (ICMP) packets to determine:
l Whether a remote device is accessible.
l Whether packets have been lost during remote access.
l How long the round-trip delay is in communication between the local and remote
devices.

Ping Implementation
The following is a sample of ping operation procedure.
In Figure 22-120, PC1 attempts to ping PC2 (11.1.1.2).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 687

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-120 Ping implementation

10.1.1.1/24 10.1.1.2/24 11.1.1.1/24 11.1.1.2/24

a b

PC1 Switch PC2

1.ARP Request
(DIP 10.1.1.2 SIP 10.1.1.1)
2.ARP Reply
(DIP 10.1.1.1 SIP 10.1.1.2)
3.ICMP Echo Request
(DIP 10.1.1.2 SIP 10.1.1.1) 4.ARP Request
(DIP 11.1.1.2 SIP 11.1.1.1)
5.ARP Reply
(DIP 11.1.1.1 SIP 11.1.1.2)
6.ICMP Echo Request
(DIP 11.1.1.2 SIP 10.1.1.1)
7.ICMP Echo Reply
(DIP 10.1.1.1 SIP 11.1.1.2)
8.ICMP Echo Reply
(DIP 10.1.1.1 SIP 11.1.1.2)

1. The ping program generates an ICMP request packet.

a. The ICMP Echo Request packet is transmitted to the IP layer along the protocol
stack. Then the IP packet header (including the source and destination IP addresses)
is encapsulated in the ICMP Echo Request packet.
During encapsulation, the IP layer determines that the source and destination IP
addresses are located on different network segments according to the IP addresses
and masks in the ICMP packet.
b. The ICMP Echo Request packet is then transmitted to the link layer. The ICMP
Echo Request packet cannot be encapsulated with the Ethernet frame header
because the destination MAC address is unknown.
c. PC1 searches for the next hop in the FIB table because the source and destination IP
addresses are located on different network segments.
i. If the next hop is not found, PC1 cannot obtain the IP address or MAC address
of the next hop. The ICMP request packet thus cannot be encapsulated with the
Ethernet frame header. The ping operation fails.
ii. If the next hop is found, PC1 obtains the IP address of the next hop. However,
the MAC address of the next hop is unknown. PC1 sends an ARP request
packet to request the MAC address of the next hop.
2. After the next-hop port (port a 10.1.1.2/24) receives the ARP request packet, it finds that
the destination address is a local address. Then port a responds with a unicast ARP reply
packet that contains the MAC address mapping 10.1.1.2/24 to PC1.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 688

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

3. When receiving the ARP reply packet, PC1 obtains the MAC address of the next hop.
Then PC1 encapsulates the ICMP Echo Request packet into an Ethernet frame and sends
the Ethernet frame to the switch.
Before sending the ARP request packet to the switch, PC1 fills the mapping between its
own IP address and MAC address into the packet. When receiving the ARP request
packet from PC1, the switch fills the address mapping of PC1 into the local ARP cache.
This improves efficiency of subsequent communication between the switch and PC1 and
reduces communication data.
4. After receiving the ICMP Echo Request packet, the switch removes the Ethernet frame
header, and sends the packet to the IP layer. The IP layer finds that the destination
address 11.1.1.2/24 is not a local address, so it searches the routing table and re-
encapsulates the packet.
The switch does not know the destination MAC address (MAC address matching
11.1.1.2/24), so the switch sends a broadcast ARP request packet.
5. PC2 receives the ARP request packet and finds that the destination address of the packet
is a local address, so PC2 returns a unicast ARP reply packet that contains the MAC
address matching 11.1.1.2/24.
In addition, PC2 records the mapping between the IP address and MAC address of the
switch's port b into the local ARP cache.
6. The switch obtains the MAC address of PC2 from the ARP reply packet, encapsulates an
Ethernet frame header into the packet, and sends the packet to PC2.
7. After receiving the packet, PC2 removes the Ethernet frame header. When finding that
the packet is the ICMP request packet, PC2 sends an ICMP reply packet to PC1. In this
case, the source IP address becomes IP address 11.1.1.2/24 of PC2 and the destination IP
address becomes 10.1.1.1/24 of PC1.
Since the source and destination IP addresses are located on different network segments,
PC2 searches the FIB table for the next hop. The next hop is the switch's port b
(11.1.1.1/24). As mentioned in preceding steps, PC2 has recorded the address mapping
of the switch's port b in the ARP cache, so PC2 does not need to send an ARP request
packet to the switch. Instead, PC2 obtains the MAC address matching 11.1.1.1/24 from
its local ARP cache, encapsulates the MAC address into the ICMP reply packet, and
sends the packet to the switch.
Similarly, the switch does not need to send an ARP request packet to PC1. The switch
directly encapsulates PC1's MAC address found in the ARP cache into the ICMP reply
packet. Then the switch sends the packet to PC1.
8. After receiving the packet, PC1 decapsulates the Ethernet frame header and IP header.
Finally, it learns that the packet is an ICMP reply packet and the ping operation
succeeds.

22.39 Network Management and Monitoring - Telemetry

22.39.1 What Is a Microburst?

Definition
A microburst refers to a situation in which a large amount of burst data is received in
milliseconds, so that the burst data rate is tens or hundreds times higher than the average rate
or even exceeds the port bandwidth.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 689

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The NMS or network performance monitoring software calculates the real-time network
bandwidth at an interval of seconds to minutes. In such an interval, the network traffic seems
to be stable, as shown in Figure 22-121. However, at lower levels of granularity, for example,
milliseconds, the traffic rate exhibits a sawtooth pattern, as shown in Figure 22-122. Many
microbursts occur in the actual traffic.

An example of a microburst in extreme situations is as follows: A 10GE link transmits traffic

at an average rate of 1 Gbit/s. However, traffic at the rate of 10 Gbit/s is transmitted in the
first 100 milliseconds but no traffic is sent in the remaining 900 milliseconds. A microburst
occurs when traffic is transmitted at the rate of 10 Gbit/s in the first 100 milliseconds.

Figure 22-121 Traffic statistics at a higher level of granularity

Figure 22-122 Traffic statistics at a lower level of granularity

Common Misunderstandings
Common misunderstandings on microbursts include:
1. Why cannot microbursts be presented in the value of Input peak rate on port statistics
of a switch?
On a switch, the packet rate is the quotient of the total number of packets in a specific
period of time divided by the period. For CE series switches, the values of Input peak
rate and Last 300 seconds input rate are calculated based on a period of 300 seconds
by default. The value of Input peak rate is the highest average rate in all historical
statistics periods. The interval for collecting statistics on a port is configurable, but the
minimum interval is 10 seconds.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 690

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Therefore, microbursts that occur in milliseconds cannot be presented in the value of

Input peak rate.
Why cannot switches support a collection interval of 10 ms? If switches support a
collection interval of 10 ms, microbursts will be presented in the port traffic statistics.
This is because the CPU needs to poll chips to collect statistics on packets of a port.
However, a switch has a large number of ports, especially in scenarios where switches
are stacked or 40GE/100GE ports are split. Polling at an interval of 10 ms is CPU-
intensive. As a result, the switch will respond slowly or even does not respond.
2. Why is no alarm reported for microbursts upon buffer exhaustion?
Similarly, the CPU uses the polling mechanism to query the buffer usage. If the CPU
frequently polls the buffer usage, the CPU may be overloaded. As a result, the switch
will respond slowly or even does not respond.
3. The traffic curve seems to be smooth on the NMS, but actually microbursts have
occurred. Why does the NMS fail to detect the microbursts though it monitors the port
traffic around the clock?
Both the data reported by CE series switches and interval for the NMS to monitor data
are accurate to seconds. The second-level traffic graph cannot present microbursts that
occur in milliseconds.
4. Currently, the port rate and utilization are low. Therefore, microbursts will seldom occur.
This is a wrong understanding. There is no linear relationship between the average rate
and burst rate. A low port rate or utilization does not mean a low burst rate.
5. Switches record the number of packets discarded due to congestions. Therefore, switches
cause microbursts or packet loss.
This is a wrong understanding. Burst traffic is generated by service terminals. Except for
a small number of protocol packets, switches do not generate other traffic. However, the
burst may be aggravated on switches. For example, if multiple ports send data to a single
port concurrently, the convergence ratio is improper, and the burst peak value is
exacerbated. Therefore, the source of bursts needs to be located based on the traffic
source and networking.
6. Service traffic is random on servers. Therefore, servers will not encounter heavy traffic
bursts.
Service traffic is either sent constantly at a stable rate or alternately sent at a high speed
with severe bursts.
The randomness of services is not equivalent to that of TCP packets. If the sending
window is not full, the traditional TCP packet mechanism always wants to occupy more
bandwidth resources to send packets out as soon as possible. Therefore, bursts are more
likely to occur in the traditional TCP packet mechanism. Bursts are severer on server
ports with higher bandwidths.

Impact
When a microburst exceeds the forwarding capability of the switch, the switch buffers the
burst data for later transmission. If the switch does not have sufficient buffer space, the excess
data can only be discarded, causing congestion and packet loss.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 691

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-123 Impact of microbursts

1MB Buffer

10G 10G 10G

Port1 Port2 Port3

Figure 22-123 shows a typical millisecond-level microburst scenario. Assume that Port1 and
Port2 respectively send 5 MB data to Port3 at a line rate of 10 Gbit/s. The total transmission
rate is 20 Gbit/s. Port3 supports only a rate of 10 Gbit/s, which is a half of the total
transmission rate. It sends only 5 MB data out and buffers the other 5 MB data for
transmission later. However, the switch has only 1 MB buffer space. Therefore, 4 MB data is
discarded due to insufficient buffer space. Without considering overhead data such as the
inter-frame gap, preamble, frame checksum, and packet header, the microburst duration is 4
ms (5 MB/10 Gbit/s).
Typically, a switch is equipped with a buffer space of 1 to 20 MB. In the preceding scenario
where two ports transmit data at a rate of 10 Gbit/s, the maximum microburst duration is
shorter than 16 ms (20 MB/10 Gbit/s). On an actual network, traffic may be originated from
multiple ports to one port. In this scenario, more buffer space is consumed, and severer
congestion and packet loss occur upon microbursts.

Detection Method
You can use the packet capture tools and Wireshark to detect microbursts.
On the Wireshark, open a file of captured packets and choose Statistics > I/O Graph to view
the traffic graph, as shown in Figure 22-124.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 692

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-124 Traffic graph in the Wireshark

To view the millisecond-level burst traffic in the IO graph, change the unit for the y-axis to
Bits and the interval to 1 ms, as shown in Figure 22-125.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 693

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-125 Wireshark IO graph

Countermeasures
You can take the following countermeasures to mitigate microbursts:
1. For problems such as severe bursts, intensive buffer utilization, poor performance on
lossy lines, and large delay and jitter in traditional TCP congestion control mechanisms,
use common improvement technologies in the industry to minimize the possibility of
microbursts.
2. During network service traffic planning, avoid scenarios with an excessively high
convergence ratio (traffic is transmitted from multiple ports to one port), and expand the
capacity in a timely manner for ports with severe bursts to eliminate burst bottlenecks.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 694

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

3. On the CE12800E, CE5850EI, CE5855EI, CE5850HI, CE5880EI, and CE6800,

CE7800, and CE8800 series switches, to mitigate network congestion, run the qos burst-
mode enhanced command in the interface view to set the burst traffic buffer mode to
enhanced.
4. If the delay is controllable and the buffer is sufficient, run the qos queue queue-index
shaping { percent cir cir-percent-value [ pir pir-percent-value ] | cir cir-value [ kbps |
mbps | gbps ] [ cbs cbs-value [ bytes | kbytes | mbytes ] | pir pir-value [ kbps | mbps |
gbps ] [ cbs cbs-value [ bytes | kbytes | mbytes ] pbs pbs-value [ bytes | kbytes |
mbytes ] ] ] } command to enable the traffic shaping function on the downlink ports of
the upstream switch connected to the switch on which congestion occurs. This reduces
the instantaneous peak of the traffic and controls the burst. Be aware that this solution
will increase the packet forwarding delay.
5. Run the dcb pfc enable [ pfc-profile-name ] [ mode { auto | manual } ] command to
enable the flow control function on interfaces of all devices on the network. When
congestion occurs on a device, the device instructs the upstream device to reduce the
packet sending rate or even stop sending packets. After the congestion is eliminated,
packets can be sent normally. Be aware that this solution will increase the packet
forwarding delay.

22.40 IP Service - IPv4

22.40.1 How Do I Configure Primary and Secondary IP

Addresses?
Generally, an interface needs only a primary IP address. In some special scenarios, you need
to configure secondary IP addresses for an interface. For example, when a switch connects to
a physical network through an interface (only one idle interface is available) and hosts on the
physical network belong to two network segments, you must configure both primary and
secondary IP addresses for this interface, so that the switch can communicate with all the
hosts.

NOTE
Each Layer 3 interface can have a maximum of 255 secondary IP addresses.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 695

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-126 Configuring primary and secondary IP addresses

Switch
10GE1/0/1
VLANIF100
172.16.1.1/24
172.16.2.1/24 sub

LSW

172.16.1.3/24 172.16.1.2/24 172.16.2.3/24 172.16.2.2/24

Configure the primary and secondary IP addresses on CE series switches as follows:

<HUAWEI> system-view
[~HUAWEI] vlan batch 100
[*HUAWEI] interface vlanif 100
[*HUAWEI-Vlanif100] ip address 172.16.1.1 24 //Configure a primary IP address
for the interface.
[*HUAWEI-Vlanif100] ip address 172.16.2.1 24 sub //Configure a secondary IP
address for the interface.
[*HUAWEI-Vlanif100] quit
[*HUAWEI] commit

On an Ethernet interface, run the undo portswitch command to switch the interface mode to
Layer 3 first, and then you can configure IP addresses for it.

22.40.2 Can a CE Switch Run IPv4 and IPv6 Services

Simultaneously?
CE series switches excluding the CE6810LI can run IPv4 and IPv6 services simultaneously.
CE12800 and 12800E series switches support IPv6 only after a license is loaded.

NOTE

The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6 function is
enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address can only be used to
manage the switch.

22.40.3 Does the CE6810LI Support Layer 3 Forwarding?

The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6
function is enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address can
only be used to manage the switch.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 696

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.41 IP Service - ARP

22.41.1 Why ARP Entry Does Not Contain VLAN Information?

If an ARP entry does not have VLAN information, the entry contains a Layer 3 interface. If
an ARP entry has VLAN information and the included interface is not a Layer 3 sub-
interface, the entry contains a Layer 2 interface.
Run the display arp commands to view ARP entries. For example, the ARP entries in
V100R003C00 are as follows:
l The ARP entry of which the IP address is 10.1.1.2 and MAC address is 04f9-388d-e685
is learned from 10GE1/0/3, the VLAN ID is 101, and remaining time of the entry is 5
minutes.
l The ARP entry of which the IP address is 10.1.1.3 and MAC address is 0023-0045-0067
is a static entry, the outbound interface is 10GE1/0/3, and the VLAN ID is 101.
l The ARP entry of which the IP address is 10.1.1.4 and MAC address is 0025-9e95-7c32
is learned from 10GE1/0/13 and remaining time of the entry is 3 minutes.
l The ARP entry of which the IP address is 10.1.1.5 and MAC address is 306b-2079-2202
is of type I, indicating that 10.1.1.5 is the IP address of 10GE1/0/14.
<HUAWEI> display arp network 10.1.1.0 24
ARP Entry Types: D - Dynamic, S - Static, I -
Interface

EXP: Expire-
time

IP ADDRESS MAC ADDRESS EXP(M) TYPE/VLAN INTERFACE VPN-

INSTANCE
------------------------------------------------------------------------------

10.1.1.3 0023-0045-0067 S/101

10GE1/0/3

10.1.1.1 306b-2079-2205 I
Vlanif101

10.1.1.2 04f9-388d-e685 5 D/101 10GE1/0/3

10.1.1.4 0025-9e95-7c32 3 D 10GE1/0/13
10.1.1.5 306b-2079-2202 I
10GE1/0/14
------------------------------------------------------------------------------

Total:5 Dynamic:2 Static:1 Interface:2

22.41.2 What Does Incomplete in an ARP Entry Mean?

If the MAC ADDRESS field of an ARP entry in the display arp command output displays
Incomplete, the ARP entry is temporary. When IP packets trigger ARP Miss messages, the
switch generates temporary ARP entries based on the ARP Miss messages, and sends ARP
request packets to the destination network segment.
l Within the aging time of the temporary ARP entries:

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 697

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

– Before the switch receives ARP reply packets, IP packets matching the temporary
ARP entries are discarded and do not trigger ARP Miss messages.
– After the switch receives ARP reply packets, it generates correct ARP entries to
replace the temporary ARP entries.
l If the aging time of the temporary ARP entries expires, the switch clears the temporary
ARP entries.

22.41.3 How Do I View IP Addresses of Servers Directly

Connected to a Switch and Server Interfaces Connected to the
Switch?
You can run the display arp command to view IP addresses and interfaces of servers directly
connected to a switch. Meanings of fields in the command output are as follows:
l The IP ADDRESS field displays IP addresses of servers directly connected to the
switch.
l The INTERFACE field displays switch interfaces connected to servers.
– If the type of an interface in the INTERFACE field is VLANIF, run the display
vlan vlan-id command to view detailed physical interface information.
– If the type of an interface in the INTERFACE field is VBDIF, run the display
bridge-domain bd-id command to view detailed physical interface information.
<HUAWEI> display arp
ARP Entry Types: D - Dynamic, S - Static, I - Interface, O - OpenFlow
EXP: Expire-time

IP ADDRESS MAC ADDRESS EXP(M) TYPE/VLAN INTERFACE VPN-INSTANCE

------------------------------------------------------------------------------
192.168.1.12 0000-0a41-0202 I - MEth0/0/1 r2
192.168.1.1 0000-0a41-0200 17 D-6 MEth0/0/1 r2
192.168.1.11 0000-0a41-0201 I - Vlanif2 r1
192.168.1.1 0000-0a41-0200 17 D-6 Vlanif12 r1
1.1.1.2 0001-0203-0405 O Vbdif1
1.1.1.3 0001-0203-0405 O Vbdif1

------------------------------------------------------------------------------
Total:6 Dynamic:2 Static:0 Interface:2 OpenFlow:2

22.41.4 Do CE Series Switches Support IP Address Conflict

Detection?
CE series switches support the following two types of IP address conflict detection:
l IP address conflict detection between a switch and other devices
A CE switch can detect whether its IP address conflicts with the IP address of another
device without any configuration. If an IP address conflict of this type occurs, the switch
records the ARP/4/ARP_DUPLICATE_IPADDR log and reports the
ARP_1.3.6.1.4.1.2011.5.25.165.2.2.2.1 hwArpsGatewayConflict alarm.
l IP address conflict detection between downstream devices connected to a switch
After the arp ip-conflict-detect enable command is run in the system view, a CE switch
can detect whether IP addresses of downstream devices connected to the switch conflict.
If an IP address conflict of this type occurs, the switch records the ARP/4/
ARP_IP_CONFLICT_DETECT log and reports the
ARP_1.3.6.1.4.1.2011.5.25.123.2.6 hwEthernetARPIPConflictEvent alarm.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 698

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.41.5 How Do I Determine Which ARP Resource Allocation

Mode Should Be Configured?
For the CE12804, CE12808, CE12812, CE12816, CE12804S, CE12808S, CE12800E
equipped with the ED-E/EG-E/EGA-E card, CE5880EI, CE6870EI, CE6875EI, and
CE6880EI, learned ARP information is saved into EEDB entries of the chip. ARP resource
allocation modes are classified depending on the mode in which ARP information is stored
into EEDB entries:
l global
In Figure 22-127, the global mode indicates that ARP information is identified based on
the key composed of the IP address, logical interface index, and physical interface index.
ARP information is stored on all chips based on the same resource index, that is, ARP
information stored on each chip is the same.
In this mode, the maximum number of ARP resources of the device refers to that of the
chip with minimum specifications among all chips.

Figure 22-127 global mode

Chip 0 Chip 1 ... ... Chip N

ARP 1 ARP 1 ARP 1 ARP 1 ARP 1

ARP 2 ARP 2 ARP 2 ARP 2 ARP 2

......

......

......

......

......

ARP N ARP N ARP N ARP N ARP N

l local
In Figure 22-128, the local mode indicates that ARP information is identified based on
the key composed of the IP address, logical interface index, and physical interface index.
ARP information is stored only on the chip where the outbound interface is located, that
is, ARP information stored on each chip is different.
In local mode, the maximum number of ARP resources of the device is relevant to the
chip where the outbound interface is located.
– If all outbound interfaces corresponding to ARP information are located on the
same chip, the maximum number of ARP resources of the device is that of the chip.
– If all outbound interfaces corresponding to ARP information are located on
different chips, the maximum number of ARP resources of the device is the sum of
ARP resources of all chips.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 699

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-128 local mode

Chip 0 Chip 1 ... ... Chip N

ARP 1 ARP 2 ARP 3 ARP 4 ARP 5

......

......

......

......

......
ARP N ARP N ARP N ARP N ARP N

l extend
In Figure 22-129, the extend mode indicates that ARP information is identified based on
the key composed of the highest 44 bits of a MAC address. ARP information is stored on
all chips based on the same resource index, that is, ARP information stored on each chip
is the same. The difference between extend and global modes is that ARP information
corresponding to contiguous MAC addresses is aggregated in extend mode. That is,
ARP information with the same highest 44 bits of a MAC address corresponds to the
same ARP resource.
In local mode, the maximum number of ARP resources of the device depends on
whether MAC addresses are contiguous.
– If MAC addresses corresponding to ARP information is noncontiguous, the
maximum number of ARP resources of the device refers to that of the chip with
minimum specifications among all chips.
– If MAC addresses corresponding to ARP information is contiguous, the maximum
number of ARP resources of the device refers to that of the chip with minimum
specifications among all chips multiplied by 16.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 700

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-129 extend mode

Chip 0 Chip 1 ... ... Chip N

ARP ARP ARP ARP ARP

1～16 1～16 1～16 1～16 1～16

ARP ARP ARP ARP ARP

17～32 17～32 17～32 17～32 17～32
......

......

......

......

......
ARP ARP ARP ARP ARP
N-16～N N-16～N N-16～N N-16～N N-16～N

By default, the CE12804, CE12808, CE12812, CE12816, CE12804S, CE12808S, CE6870EI,

and CE6875EI use the global mode for ARP resource allocation; the CE12800E equipped
with ED-E/EG-E/EGA-E series cards, CE5880EI, and CE6880EI use the extend mode for
ARP resource allocation. Run the arp resource-mode { global | local | extend } command in
the system view to change the ARP resource allocation mode based on ARP information.

NOTE

l The CE5880EI and CE6880EI use the extend mode, which cannot be changed.
l Only the CE12804, CE12808, CE12812, CE12816, CE12804S, and CE12808S support the local
mode for ARP resource allocation. This mode has high requirements for network deployment.
Exercise caution when you use this mode. To use this mode, contact technical support personnel.

22.41.6 What Can I Do If the Alarm "The number of ARP

exceeded the warning threshold" Is Generated on the Device?
If the alarm The number of ARP exceeded the warning threshold is generated on the
device, the number of used ARP forwarding resources has exceeded a specified alarm
threshold.

Depending on the number of remaining ARP forwarding resources on the device, this alarm
can be generated in either of the following situations, as indicated by different message
digests:
l If the message digest is hwBoardResWarningThresholdExceed_active, the number of
remaining ARP forwarding resources on the device is insufficient. The number of used
forwarding resources has exceeded the alarm threshold 75%.
Dec 6 2017 04:30:43-08:00 DC08-CR03 %%01FEI/4/
hwBoardResWarningThresholdExceed_active(l):CID=0x807f042c-
alarmID=0x095e2029;The number of forwarding resources reaches the alarm
threshold. (Slot = 1, Threshold = 75, Reason = 174, Description : The number
of ARP exceeded the warning threshold.)

l If the message digest is hwBoardResThresholdExceed_active, the remaining ARP

forwarding resources on the device are about to be exhausted. The number of used
forwarding resources has exceeded the alarm threshold 90%.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 701

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Dec 6 2017 02:35:43-08:00 DC08-CR03 %%01FEI/2/

hwBoardResThresholdExceed_active(l):CID=0x807f042c-alarmID=0x095e2022;The
number of forwarding resources reaches the alarm threshold. (Slot = 1,
Threshold = 90, Reason = 174, Description : The number of ARP exceeded the
warning threshold.)

If the alarm The number of ARP exceeded the warning threshold is generated on the
device, use either of the following methods to clear the alarm:
l Increase the number of ARP forwarding resources supported by the device.
– For the CE12804, CE12808, CE12812, CE12816, CE12804S, CE12808S,
CE6870EI, and CE6875EI, if MAC addresses corresponding to ARP entries are
contiguous, run the arp resource-mode extend command in the system view to set
the ARP resource allocation mode to extend.
– For the CE12800E equipped with CEL24XSED-E, CEL48XSED-E, CEL24LQED-
E, CEL36LQED-E, or CEL36CQFD-X cards, CE5855EI, CE6850HI, CE6850U-
HI, CE6851HI, CE6855HI, CE6856HI, CE6857EI, CE6860EI, CE6865EI,
CE7850EI, CE7855EI, CE8850EI, CE8861EI, CE8868EI, and CE8860EI, run the
system resource large-arp command in the system view to set the system resource
mode to large-arp.
l Reduce the usage of ARP forwarding resources on the device.
Properly plan network deployment, reduce the number of terminals connected to the
device, and prevent all Layer 3 packets from being forwarded by the device. These
measures help reduce the number of ARP entries learned by the device.

22.42 IP Service - DHCP

22.42.1 Do CE Series Switches Support DHCP?

l CE series switches can only function as DHCP relay agents and DHCP servers, but
cannot function as DHCP clients.
l The CE6810LI does not support IPv4 Layer 3 forwarding. After the IPv4 function is
enabled on an interface of the CE6810LI, the configured IPv4 address can only be used
to manage the switch.
l Table 22-79 lists CE series switches supporting DHCP and the minimum version
required.

Table 22-79 Products and minimum version supporting DHCP

Product Minimum Version Required

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE8860EI V100R006C00

CE8861EI V200R005C10

CE8868EI V200R005C10

CE7850EI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 702

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875-48S4CQ-EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R005C10

CE5880EI V200R005C10

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

22.42.2 How Do I Prevent a DHCP Server from Allocating an IP

Address in Use to Another Client?

To prevent a DHCP server from allocating an IP address in use to another client, run the dhcp
server ping { packet number | timeout milliseconds } * command in the system view of the
DHCP server to set the maximum number of ping packets to be sent and the maximum
response time of a ping packet.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 703

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

If this command is run, the DHCP server sends a ping packet to check whether an IP address
is in use before allocating the IP address to a client. If there is no response to the ping packet
within the maximum response time specified by milliseconds, the DHCP server continues to
send ping packets until the number of sent ping packets reaches the maximum number
specified by number. If there is still no response, the DHCP server considers that no device on
the local network segment uses the IP address, and allocates the IP address to the client.

The time for the DHCP server to detect whether an IP address is in use should not be too
long; otherwise, DHCP clients cannot obtain IP addresses. It is recommended that the
configured total detection time (maximum number number of sent ping packets x maximum
response time milliseconds of a ping packet) be less than 8 seconds.

22.42.3 Do CE Series Switches Support Interface-based DHCP?

No. CE series switches support system-based DHCP. After a DHCP address pool is
configured in the system view of a switch as a DHCP server, the switch can allocate IP
addresses in the address pool to DHCP clients connected to all interfaces of the switch.

22.43 IP Service - IP Performance

22.43.1 Can CE Switches Ping Broadcast Addresses?

RFC 1122 does not specify whether broadcast addresses should be successfully pinged, but
provides two opposing ideas as an additional discussion. One idea is that broadcast addresses
can be successfully pinged. The ping of broadcast address is a good diagnosis method that can
be used to locate faults on network nodes. The other idea disapproves of the ping of broadcast
address because the network may be attacked if broadcast addresses can be successfully
pinged.

If the ping command is run on a device, the device sends ICMP packets to check the network
connectivity. You can run commands on a Huawei device to configure the device to response
or not response to an ICMP packet whose destination address is a broadcast address.
Therefore, broadcast addresses can be successfully pinged or cannot be pinged on Huawei
devices, meeting customer's different requirements.

l Run the icmp broadcast-address echo disable command to disable the device to
response to an ICMP packet whose destination address is a broadcast address.
l Run the undo icmp broadcast-address echo disable command to enable the device to
response to an ICMP packet whose destination address is a broadcast address.

By default, the device responses to an ICMP packet whose destination address is a broadcast
address.

22.44 IP Service - IPv6

22.44.1 Do CE Series Switches Support IPv6?

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 704

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l The CE6810LI does not support IPv6 Layer 3 forwarding. After the IPv6 function is
enabled on an interface of the CE6810LI, the configured IPv6 address can only be used
to manage the switch.
l In versions earlier than V200R002C50, the CE5855EI does not support IPv6. However,
interfaces on a CE5855EI provide the IPv6 capability when the switch functions as a leaf
switch in an SVF system and the SVF forwarding mode is set to centralized or hybrid.
l Table 22-80 lists CE series switches supporting IPv6 and the minimum version required.
CE12800 and 12800E series switches support IPv6 only after a license is loaded.

Table 22-80 Products and minimum version supporting IPv6

Product Minimum Version Required

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE8860EI V100R006C00

CE8861EI V200R005C10

CE8868EI V200R005C10

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875-48S4CQ-EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R002C00

CE5850HI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 705

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5855EI V200R002C50

CE5880EI V200R005C10

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

22.44.2 What Are Possible Causes for IPv6 Address Conflict on an

Interface?

In V100R002 and later versions, the possible reasons for IPv6 address conflict on an interface
are as follows:
l The peer interface directly connected to the local interface has been configured with the
same IPv6 address as that of the local interface.
l After the inloop detection function is enabled on an Ethernet interface, the link local
IPv6 address status of the interface is DUPLICATE, and the global unicast IPv6 address
status of the interface is TENTATIVE (the address is a tentative address and does not
pass the duplicate address detection). You can run the undo loopback command in the
Ethernet interface view to disable the loopback detection mode on the interface.
l Loops exist on the network.
NOTE

By default, the device performs duplicate address detection after an interface is configured with an IPv6
address. You can run the display ipv6 interface interface-type interface-number command in any view
to check whether the IPv6 address of the interface conflicts with other IPv6 addresses.

22.44.3 What Are Possible Causes for Failure in Learning ND

Entries?

In V100R002 and later versions, the possible causes for failure in learning ND entries are as
follows:
l The physical status or protocol status of the interface is Down. You can run the display
ipv6 interface interface-type interface-number command in any view to check the
physical status and protocol status of the interface.
l The STP state of the interface is Discarding. You can run the display stp brief command
in any view to check the STP state of the interface.
l The number of ND entries or IPv6 routes exceeds the limit.
– You can run the display ipv6 neighbors command in any view to check
information about ND entries.
– You can run the display ipv6 routing-table statistics command in any view to
check statistics information about IPv6 routes.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 706

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.45 IP Service - DHCPv6

22.45.1 Do CE Series Switches Support DHCPv6?

l In versions earlier than V200R002C50, CE series switches can only function as DHCPv6
relay agents. In V200R002C50 and later versions, CE series switches can function as
DHCPv6 relay agents and DHCPv6 servers.
l Table 22-81 lists CE series switches supporting DHCPv6 and the minimum version
required.

Table 22-81 Products and minimum version supporting DHCPv6

Product Minimum Version Required

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE8860EI V100R006C00

CE8861EI V200R005C10

CE8868EI V200R005C10

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R003C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875-48S4CQ-EI V200R003C00

CE6880EI V200R002C50

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 707

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5810EI V100R003C00

CE5850EI/CE5850HI V100R003C00

CE5855EI V200R002C50

CE5880EI V200R005C10

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

22.46 IP Service - NAT

22.46.1 Do CE Series Switches Support NAT?

In V100R005C00 and earlier versions, CE series switches do not support NAT.
In V100R005C10 and later versions, only CE12800 series switches support NAT after having
the firewall card CE-FWA installed.

22.47 Security

22.47.1 Do CE Series Switches Support AD Authentication?

No.

22.47.2 Do CE Series Switches Support Reflective ACL?

No.

22.47.3 Do CE Series Switches Support 802.1x Authentication?

CE series switches have supported 802.1x authentication since V100R003C10.

22.47.4 Do CE Series Switches Support Portal Authentication?

No.

22.47.5 What Are the Differences of HWTACACS Authentication

Between CE Switches and Other Huawei Data Communication
Devices?
If an HWTACACS server does not accept the user names carrying domain names, disable the
switch from sending the user names carrying domain names to the HWTACACS server.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 708

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The command used on CE switches is hwtacacs server user-name domain-excluded, and

the command used on firewalls, S series switches, and routers is undo hwtacacs-server user-
name domain-included. To ensure that CE switches can log in to the HWTACACS server,
understand the configuration differences between products before configuring HWTACACS
authentication.

22.48 Device Management - Hardware Management

22.48.1 How Do I Query the Serial Number of a Device?
To query the serial number of a device, view the serial number label attached to the device or
run a display command.
l Viewing the Serial Number Label Attached to the Device
Serial number labels are attached to CE series switches. You can view these labels to
obtain the serial numbers of CE switches. The serial number label of CE12800 and
CE12800E switches is attached to the rear of the chassis, as shown in Figure 22-130.
The serial number label of a CE8800, CE7800, CE6800, and CE5800 switch is drawable
and attached to the front of the chassis on the power supply side, as shown in Figure
22-131.

Figure 22-130 CE12800 and 12800E's serial number label

Serialᒿࡇਧḷㆮ
Number Label

SN:21021141 SN:2102
7810DC000242 7810DC00
Y ET1BS12708S0 FAN7 FAN8 FAN9 Y ET1BS12

FAN5 FAN6

FAN3 No dragglng or lifting with fan handles. No dragglng or lifting with fan handles. FAN4
⾷↘⭞伄᡽ᣀᢁᩢᣢૂᤌ᣿䇴༽Ⱦ ⾷↘⭞伄᡽ᣀᢁᩢᣢૂᤌ᣿䇴༽Ⱦ

FAN1 FAN2

9 10 11 12 13 14

CE-SFU04 CE-SFU04 CE-SFU04 CE-SFU04 CE-SFU04 CE-SFU04

RUN/ALM RUN/ALM RUN/ALM RUN/ALM RUN/ALM RUN/ALM

OFL OFL OFL OFL OFL OFL

LiftingHazard.May result in injury or LiftingHazard.May result in injury or

equipment damage. equipment damage.
⾷↘⭞↚ᣀᢁᣢ儎䇴༽Ⱦਥ㜳Րሲ㠪Ӱ䓡՚
ᇩᡌ䇴༽ᦕඅȾ
9 10 11 12 13 14 ⾷↘⭞↚ᣀᢁᣢ儎䇴༽Ⱦਥ㜳Րሲ㠪Ӱ䓡՚
ᇩᡌ䇴༽ᦕඅȾ

PEM

Per Input:~100-120/200-240V 50/60Hz; 16A MAX

Figure 22-131 CE8800, CE7800, CE6800, and CE5800's serial number label
STATUS STATUS CONSOLE CE6850-48S4Q-EI STATUS STATUS
SYS
MST

ACT
L/A

ID

ETH
PWR1 FAN1 FAN2 PWR2

Serialᒿࡇਧḷㆮ
Number Label

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 709

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l Running a display Command

– Run the display device elabel command to view the serial number of the device.
This command applies to all the versions of CE12800 and CE12800E and CE8800,
CE7800, CE6800, and CE5800 series switches.
In the following example, the display device elabel command is executed on a
CE12800 switch.
<HUAWEI> display device elabel
The command is being executed. Please wait...

[BackPlane_1]

/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0

[Board Properties]
BoardType=CE12804-AC
BarCode=2102113774P0E4000003
Item=02113774
... ...
BarCode in BackPlane_1 in the command output indicates the serial number.
The display device elabel command can also display serial numbers of components
on the device, including LPUs, power modules, fan modules, and optical modules.
– Run the display sn [ all ] command to view the serial number of the device. This
command applies to V100R005C00 and later versions of CE12800 and CE12800E
and CE8800, CE7800, CE6800, and CE5800 series switches.
In the following example, the display sn [ all ] command is executed on a CE12800
switch.
<HUAWEI> display sn
Chassis 1:
Equipment SN(ESN): 2102113774P0E4000003
License ESN: 2102113774P0E4000003
... ...
This command can also display the serial numbers of fan modules, power modules,
and optical modules of the device.

22.48.2 How Do I View the Device Status?

Run the display device command to check device status information.
<HUAWEI> display device
CE12804's Device status:
----------------------------------------------------------------------------------
---------
Slot Card Type Online Power Register Alarm
Primary
----------------------------------------------------------------------------------
---------
1 - CE-L24LQ-EA Present On Registered Normal NA
3 - CE-L12LQ-EA Present On Registered Normal NA
4 - CE-L48XS-EF Present On Registered Normal NA
6 - CE-MPUA Present On Registered Normal Master
7 - CE-CMUA Present On Registered Normal Master
8 - CE-CMUA Present On Registered Normal Slave
9 - CE-SFU04C Present On Registered Normal NA
10 - CE-SFU04C Present On Registered Normal NA
11 - CE-SFU04B Present On Registered Normal NA
PWR1 - PAC-2700WA Present On Registered Normal NA
FAN1 - FAN-12C Present On Registered Normal NA
FAN2 - FAN-12C Present On Registered Normal NA
FAN3 - FAN-12C Present On Registered Normal NA
FAN4 - FAN-12C Present On Registered Normal NA

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 710

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

FAN5 - FAN-12C Present On Registered Normal NA

FAN6 - FAN-12C Present On Registered Normal NA
FAN7 - FAN-12C Present On Registered Normal NA
FAN8 - FAN-12C Present On Registered Normal NA
FAN9 - FAN-12C Present On Registered Normal NA
----------------------------------------------------------------------------------
---------

In the command output, the Online field indicates the component online status, the Register
field indicates the component registration status, and the Alarm field indicates the component
operating status.

22.48.3 How Do I View the Device Power Consumption?

Run the display device power system command to view the device power consumption.
<HUAWEI> display device power system
Average power consumption: 846 W
Current power consumption: 847 W
Power manage cycle: 1 hour
Power manage mode: Standard

Power Redundant: Non

Total Power Capacity without Backup: 2700 W
Total Power Capacity with Backup: 2700 W
Total Power Allocated: 2470 W
Total Power Available: 165 W
Total Power reserved for MPU,SFU,CMU and FAN Board(s): 65 W
......

In the command output, the Average power consumption field indicates the average device
power, the Total Power Allocated field indicates the consumed device power, and the Total
Power Available field indicates the remaining device power.

22.48.4 How Do I View the Device Temperature?

Run the display device temperature all command to view the device temperature.
<HUAWEI> display device temperature all
---------------------------------------------------------------------
Slot Card SensorID Status Major Fatal Current
(Celsius) (Celsius) (Celsius)
---------------------------------------------------------------------
1 -- 1 NORMAL 72 101 44
-- 2 NORMAL 72 100 43
-- 3 NORMAL 69 97 48
-- 4 NORMAL 82 110 60
-- 5 NORMAL 85 110 57
-- 6 NORMAL 94 110 57
-- 7 NORMAL 84 110 58
-- 8 NORMAL 77 105 57
6 -- 1 NORMAL 62 95 34
-- 2 NORMAL 62 93 30
-- 3 NORMAL 87 95 33
-- 4 NORMAL 99 105 44
7 -- 1 NORMAL 65 125 33
8 -- 1 NORMAL 65 125 33
9 -- 1 NORMAL 68 88 43
PWR1 -- 1 -- -- -- 46
-- 2 -- -- -- 28
---------------------------------------------------------------------
N/A:Sensor not available

In the command output, the Status field indicates the temperature status, the Current field
indicates the current temperature, the Major field indicates the upper threshold for a major

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 711

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

temperature alarm, and the Fatal field indicates the upper threshold for a fatal temperature
alarm.

22.48.5 How Can I View Electronic Labels?

Run the display device elabel command to view a device electronic label.
<HUAWEI> display device elabel
The command is being executed. Please wait...

[BackPlane_1]

/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0

[Board Properties]
BoardType=CE12804-AC
BarCode=2102113774P0E4000003
Item=02113774
... ...

22.48.6 How Can I View the Power of Power Modules?

Run the display device power command to view the power module power.
<HUAWEI> display device power
-----------------------------------------------------------------------------
PowerNo Present Mode State Current Voltage ActualPower RatedPower
(Ampere) (Volt) (Watts) (Watts)
-----------------------------------------------------------------------------
PWR1 YES AC Supply 16.0 53.5 858 2700
PWR2 NO -- -- -- -- -- --
PWR3 NO -- -- -- -- -- --
PWR4 NO -- -- -- -- -- --
-----------------------------------------------------------------------------
N/A:Power not available

In the command output, the ActualPower field indicates the current power, while the
RatedPower field indicates the rated power.

22.48.7 What Are the OIDs for Obtaining CPU Usage and Memory
Usage?
Table 22-82 lists OIDs for obtaining CPU usage and memory usage.

Table 22-82 OIDs for obtaining CPU usage and memory usage
Object OID Description

hwEntityCpuUsage 1.3.6.1.4.1.2011.5.25.31.1.1. CPU usage of an entity.

1.1.5

hwEntityMemUsage 1.3.6.1.4.1.2011.5.25.31.1.1. Memory usage of an entity.

1.1.7

22.48.8 How Do I Download MIB Files?

The method to download MIB files is similar to the method to download the system software.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 712

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

1. Log in to http://support.huawei.com/enterprise or http://support.huawei.com and

then search for the required device model and version, for example, CE12800
V100R006C00SPC600.
2. Enter the software download page to obtain the required MIB compressed file and
decompress it. For example, the MIB compressed file of V100R006C00SPC600 is
named CE-MIBFILE-V100R006C00SPC600.rar.

22.48.9 How Can I Quickly Locate the Cause of High CPU Usage
and Collect Relevant Information?
When CPU usage of a device is high, you can perform the following steps to quickly locate
the cause and collect information. Then you can report the information to technical support
personnel.
1. Run the display cpu command to view the services having high CPU usage.
<HUAWEI> display cpu
CPU utilization statistics at 2016-02-02 02:07:22 366 ms
System CPU Using Percentage : 6%
CPU utilization for five seconds: 6%, one minute: 6%, five minutes: 6%.
Max CPU Usage : 38%
Max CPU Usage Stat. Time : 2016-02-01 12:29:26 821 ms
State: Non-overload
Overload threshold: 90%, Overload clear threshold: 75%, Duration: 480s
---------------------------
ServiceName UseRate
---------------------------
SYSTEM 6%
AAA 0%
ARP 0%
CMF 0%
......

2. Run the display system service service-name command in the diagnostic view to check
the names of components having high CPU usage.
<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display system service SYSTEM
Service : SYSTEM
------------------------------------------------------------------------------
--
Component CID CGID Process HaState CpuUsage
MemUsage
------------------------------------------------------------------------------
--
DFS 0x81DE271D 0x1DE271B 10003 PRIMARY 0%
4006312
TELC 0x8091271F 0x91271D 10001 PRIMARY 0%
19000
SSHC 0x80922720 0x92271E 10001 PRIMARY 0%
41208
SSHS 0x80932723 0x932721 10001 PRIMARY 0%
48844

3. Run the display system thread process process-id command in the diagnostic view
repeatedly to check information about the processes having high CPU usage.
<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display system thread process 10003
Info: Operating, please wait for a moment......done.
------------------------------------------------------------------------------
-
Process ID Thread ID Thread Type BindComp BindCpu BindFlag
Usage
------------------------------------------------------------------------------

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 713

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

-
10003 1210525456 main thread Bind all Free
0%
10003 1227637888 DefSch0200 Free all Free
0%
10003 1227506816 IPC0000 Free all Free
0%
10003 1227768960 DefSch0300 Free all Free
0%
10003 1237476480 DefSch0100 Free all Free
0%
10003 1237607552 DefSch0101 Free all Free
0%
10003 1226847360 DMS_PIPE_RECV_TASK Free all Free
0%
10003 1218028672 TICK Free all Free
0%
10003 1226716288 DMS_TIPC_SEND Free all Free
0%
10003 1217766528 BOX_Out Free all Free
0%
10003 1217897600 VCLK Free 0 Free
0%
10003 1237738624 CliGetThreadCpu Free all Free
0%
------------------------------------------------------------------------------
-
Total = 12

4. Run the display system thread callstack process process-id thread-id command in the
diagnostic view to check process call stack information.
<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display system thread callstack process 10003 1210525456
Thread 1210525456 (Thread MainThread):
#00 libc.so.6(epoll_wait)
#01 location(Frame_FdMainThread)
#02 location(Frame_Main)
#03 location(main)
#04 libc.so.6()
#05 libc.so.6()

22.48.10 How Do I Know the System MAC Address of a Switch?

To check the system MAC address of a switch, run the display system mac-address
command.

22.48.11 Can the System MAC Address of a Switch Be Changed?

MAC addresses of CE12800 and 12800E series switches cannot be changed.
On CE8800, CE7800, CE6800, and CE5800 series switches, MAC addresses cannot be
changed in V100R006C00 and earlier versions but can be changed in V200R001C00 and later
versions.

22.48.12 How Do I Check the Reason Why a Card Was Reset?

To check the reason why a card was reset, run the display device board reset slot-id
command in diagnostic mode. The following is an example:
<HUAWEI> system-view
[~HUAWEI] diagnose
[~HUAWEI-diagnose] display device board reset 1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 714

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Since V100R005C00, this command can be run in any view.

22.48.13 How Can I Perform an Active/Standby Switchover on

CE12800 and CE12800E Switches?
After an active/standby switchover is performed on CE12800 and CE12800E switches, the
standby MPU becomes the new active MPU. Perform the following steps to replace the faulty
switch:
<HUAWEI> system-view
[~HUAWEI] slave switchover enable //Enable the active/standby switchover
function.
[*HUAWEI] commit
[~HUAWEI] slave switchover //Perform an active/standby switchover.

22.48.14 How Can I Stop the Display of Diagnostic Information

After Running the display diagnostic-information Command
through a Console Interface?
After the display diagnostic-information command is executed through a Console interface,
it takes a long period to display diagnostic information when a lot of information needs to be
displayed. However, pressing CTRL+C may be unable to immediately stop the display of
diagnostic information.

To stop the display of diagnostic information, log in to the device through Telnet and then run
the kill user-interface console command to terminate the Console interface connection.
<HUAWEI> kill user-interface console 0

22.48.15 Why Cannot a Switch Start and Why Are DHCP

Discovery Errors Generated on the Console Port?
CE series switches support Zero Touch Provisioning since V100R003C00. After being
powered on, an unconfigured device will repeatedly execute the ZTP process to complete
automatic deployment until automatic deployment succeeds or administrators press CTRL+C
to stop it.

22.48.16 Why Cannot ZTP Execution Information Be Displayed

Through the Console Port of CE12800 and CE12800E Switches?
On CE12800 and CE12800E Switches with two MPUs, you can only log in and check ZTP
execution information through the Console port of the active MPU. If you log in through the
Console port of the standby MPU, ZTP execution information cannot be queried and the
system displays only the following information:
Info: The system is busy with ZTP on master console, please wait or abort ZTP
throught master console.

To view ZTP execution information, log in through the Console port of the active MPU.

22.48.17 How Do I Disable ZTP?

Since V100R006C00, you can run the set ztp disable command in the user view to disable
ZTP. After ZTP is disabled, the device does not run the ZTP process when it is unconfigured.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 715

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

If the device is running the ZTP process, you can log in to the device through the console port
and enter CTRL+C to terminate the ZTP process.

22.48.18 How Can I Use OPS?

CE series switches support Open Programmability System (OPS) from V100R003C00. OPS
allows users to develop and deploy network management policies using open RESTful APIs.
With the programmability, OPS implements rapid service expansion, automatic function
deployment, intelligent device management, helping reduce network operation and
maintenance costs and facilitate network operations.
To implement OPS, perform the following operations:
1. Make a Python script. You can use a Python script to manage system resources through
open RESTful APIs, for example, configure IP addresses for interfaces, enable, and
disable interfaces.
2. Upload the Python script to a device and install the script.
3. Configure an assistant, and bind a trigger condition as well as the Python script to the
assistant. When the trigger condition is met, the device executes the Python script.
If the Python script is not bound to an assistant, the script can also be manually executed.
The following example describes how to implement OPS.
In Figure 22-132, uplink of SwitchA needs to be monitored so that the SwitchA can
automatically set the downlink to Down when the uplink is Down.

Figure 22-132 Networking diagram

10GE1/0/1

SwitchA

10GE1/0/2

Perform the following steps to replace the faulty switch:

1. Create a Python script named shutdown.py. The script enables a device to automatically
set a downlink interface to Down when it detects that an uplink interface is Down.
2. Upload the Python script to SwitchA and install the script.
<HUAWEI> system-view
[~HUAWEI] sysname SwitchA
[*HUAWEI] commit
[~SwitchA] quit
<SwitchA> ops install file shutdown.py

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 716

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

3. Configure an assistant on SwitchA, bind the trigger condition as an interface Down

event, and configure the device to execute the Python script when the trigger condition is
met.
<SwitchA> system-view
[~SwitchA] ops
[~SwitchA-ops] assistant shutdownint
[*SwitchA-ops-assistant-shutdownint] condition alarm feature ifnet name
linkDown
[*SwitchA-ops-assistant-shutdownint] execute 1 python shutdown.py
[*SwitchA-ops-assistant-shutdownint] commit

22.48.19 What Does Reserved Power Mean?

Run the display device power system command to view the device power information.
<HUAWEI> display device power system
Total Power Capacity without Backup: 2700 W
Total Power Capacity with Backup: 2700 W
Total Power Allocated: 2470 W
Total Power Available: 165 W
Total Power reserved for MPU,SFU,CMU and FAN Board(s): 65 W
......

In the command output, Total Power reserved for MPU,SFU,CMU and FAN Board(s)
indicates the power reserved for MPUs, SFUs, CMUs, and fan modules. MPUs, SFUs,
CMUs, and fan modules are mandatory components that ensure the normal device operation.
The reserved power is reserved only for the mandatory components. When the corresponding
component is not installed, the system reserves the rated power for it. After the component is
installed to the device, the system reduces the rated power from the reserved power, but does
not reduce the rated power from the available power. That is, when the MPUs, SFUs, CMUs,
and fan modules are installed to the device, their corresponding power values are reduced
from the reserved power of the device, without affecting the available power of the device.

22.48.20 What Do I Do If the Device Displays an Alarm "The PHY

chip cannot work properly"?
You can run the display device alarm hardware command on a CE series switch to view
hardware alarm information on the switch. If the alarm "The PHY chip cannot work properly"
is displayed when you run this command, the chip is not operational. Reset the card and then
check whether the fault has been rectified. You are advised to replace the faulty card
regardless of whether the fault has been rectified after the card is reset.

22.49 Device Management - Information Center

22.49.1 How Do I Collect Logs of a Device?

Logs, including user logs and diagnostic logs, record user operations, system faults, and
system security information.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 717

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-83 Methods for collecting logs

Log Information Operation Remarks

User logs <HUAWEI> save logfile The collected log information

is saved in the log.log file in
flash:/logfile.
When the log.log file exceeds
the specified size, the system
compresses it into a zip file
and names the compressed file
log_slot-id_time.log.zip. In the
log name, slot-id and time
indicate the slot ID and log file
generation time.

Diagnostic logs <HUAWEI> system-view The collected log information

[~HUAWEI] diagnose
[~HUAWEI-diagnose] save is saved in the diag.log file in
logfile diagnose-log flash:/logfile.
When the diag.log file exceeds
the specified size, the system
compresses it into a zip file
and names the compressed file
diaglog_slot-id_time.log.zip.
In the log name, slot-id and
time indicate the slot ID and
log file generation time.

Diagnostics <HUAWEI> system-view The collected log information

[~HUAWEI] diagnose
information of the [~HUAWEI-diagnose] collect is saved in the
system diagnostic information diagnostic_information.zip
file in flash:/logfile or flash:/.
If the collect diagnostic
information command is
executed repeatedly, the
diagnostic_information.zip
file will be updated and
overwrite the old one.

If the collected log information is saved in the logfile, you can run the following command to
enter the logfile and view log files that are generated when the fault occurs (for example,
March 10, 2018), in order to export files.
<HUAWEI> cd logfile/ //Enter the logfile.
<HUAWEI> dir //View files in the logfile.
Directory of flash:/
logfile/

Idx Attr Size(Byte) Date Time FileName

0 -rw- 1,215,581 Mar 10 2018 01:28:07 diag.log
1 -rw- 598,074 Mar 08 2018 18:00:28
diaglog_6_20180308180027.log.zip
2 -rw- 585,565 Mar 09 2018 22:31:53

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 718

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

diaglog_6_20180309223152.log.zip
3 -rw- 577,576 Mar 10 2018 05:39:09
diaglog_6_20180310053908.log.zip
4 lrw- 42 Mar 10 2018 06:20:34 diagnostic_information.zip ->
flash:/diagnostic_information.zip //This file is a link file. -> indicates
that the former one the link file of the latter one, and the operating system
diagnosis information can be exported in both directories.
5 -rw- 7,392,575 Mar 10 2018 19:22:18 log.log
6 -rw- 171,657 Mar 08 2018 13:44:38
log_6_20180308134437.log.zip
7 -rw- 71,056 Mar 09 2018 02:44:38
log_6_20180309024438.log.zip
8 -rw- 73,260 Mar 09 2018 15:33:09
log_6_20180309153309.log.zip
9 -rw- 71,613 Mar 10 2018 04:21:34
log_6_20180310042134.log.zip

NOTE
To collect logs of the standby MPU, you can run the cd slave#flash command to enter the directory of the
standby MPU, then run the cd logfile/ command to enter the logfile, and run the dir to view the files in the
logfile.

When the log files are generated, you can export the files from the device using FTP, SFTP, or
SCP. For details, see Local File Management.

NOTE

You can also run the display logbuffer and display trapbuffer commands to view the log and trap
information on the device, and save the information in diagnostic files on a disk. For details, see Diagnostic
File Obtaining Guide.

22.49.2 How Do I Enable and Disable the Alarm Function on a

Console Port?
By default, a terminal displays alarm or log information on a device when you log in to a
device through a console port. You can run commands to determine whether a terminal
displays the information.
l Disable prompt information.
<HUAWEI> undo terminal alarm //Disable a terminal from displaying
alarm information.
<HUAWEI> undo terminal logging //Disable a terminal from displaying log
information.
<HUAWEI> undo terminal debugging //Disable a terminal from displaying
debugging information.
<HUAWEI> undo terminal monitor //Disable a terminal from displaying
prompt information.

After the undo terminal monitor command is executed, all prompt information will not
be displayed, including alarm, log, and debugging information.
l Enable prompt information.
<HUAWEI> terminal monitor //Enable a terminal to display prompt
information.
<HUAWEI> terminal alarm //Enable a terminal to display alarm
information.
<HUAWEI> terminal logging //Enable a terminal to display log
information.
<HUAWEI> terminal debugging //Enable a terminal to display debugging
information.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 719

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.49.3 How Can I View Log and Alarm Information?

l Run the following command to view log information:
<HUAWEI> display logbuffer

l Run the following command to view alarm information:

<HUAWEI> display trapbuffer

22.49.4 How Can I Shield a Log Or Alarm?

Run the info-center filter-id { id | bymodule-alias modname alias } command in the system
view to filter the specified log or alarm information.
For example, to shield the alarms hwnetconfserverconnectioninterrupt and
hwnetconfserverconnectionresume of the NETCONF module:
<HUAWEI> system-view
[~HUAWEI] info-center filter-id bymodule-alias netconf
hwnetconfserverconnectioninterrupt
[*HUAWEI] info-center filter-id bymodule-alias netconf
hwnetconfserverconnectionresume
[*HUAWEI] commit

22.49.5 Where Are the Uploaded Logs Saved on a Log Server?

When logs are uploaded to a log server, the logs are saved in a specified directory set on the
log server.

22.49.6 Why Does Log Information Fail to Be Exported to the

Console?
Log information fails to be exported to the console because the log display or display on the
console function is disabled. To export log information to the console, enable the log display
and display on the console functions.
<HUAWEI> terminal logging
<HUAWEI> terminal monitor

22.49.7 How Many Logs Can Be Stored in a Log Buffer?

By default, a log buffer can store a maximum of 512 logs. You can set the maximum number
of logs stored in a log buffer using the info-center logbuffer size command. A maximum of
10,240 logs can be stored in a log buffer.
For example, set the maximum number of logs stored in a log buffer to 1000.
<HUAWEI> system-view
[~HUAWEI] info-center logbuffer size 1000
[*HUAWEI] commit

22.49.8 What Is the Format of Log Information?

The following figure shows the log format of CE series.

Figure 22-133 Format of output log information

<Int_16>Time Host %%ddModule/Severity/Brief(l):CID=Z-alarmID=F;Desc

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 720

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Field Name Description

<Int_16> Leading character Is added to the log information to be sent to a log

host and is not added to the log information saved
on a local device.

Time Timestamp Date and time when a log is output.

The format of the log timestamp is configurable.

Host Host name The default name is HUAWEI.

%% Huawei identifier The log is output by a Huawei device.

dd Version number Version of the log format.

Module Module name Name of the module by which logs are output.

Severity Log level Severity of a log.

Brief Description Further description of a log.

(l) Information type Log information.

CID=Z- System component ID System component ID and alarm ID of the log.

alarmID=F and alarm ID Z indicates the system component ID.
F indicates the alarm ID. Only logs generated by
alarms have the alarm ID.

Desc Information about Detailed information about the system

details component output. Each time before the log is
output, the module fills up its contents.

22.49.9 How Can I Configure Logs at a Certain Level and Higher

to Be Sent to the Log Server?
You can configure the device to send logs at a specified level and higher to the log server. For
example, configure the device to send logs at the notification and higher levels to the log
server with IP address 192.168.10.1.
<HUAWEI> system-view
[~HUAWEI] info-center loghost 192.168.10.1 channel loghost level notification
[*HUAWEI] commit

22.49.10 Which Logs Will the System Record?

A running device records the following logs:
l User logs: record users' command operations and information about port and protocol
status switching. User logs are saved in log.log files.
l Diagnostic logs: record key processes or events occurring during device operation to
locate faults. Diagnostic logs are saved in diag.log files.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 721

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.49.11 How Are Logs Saved?

System generated logs are first saved in the memory buffer and then automatically saved by
the system in log files (including log.log and diag.log) at an interval of 30 minutes or when
the memory buffer is full. You can also manually save logs in the memory buffer to log files
using commands.

User logs are saved in the log.log file in flash:/logfile, and diagnostic logs are saved in the
diag.log file in flash:/logfile. When the log file size reaches 8 MB, the system compresses the
log file into a log_slot-id_time.log.zip or diaglog_slot-id_time.log.zip file. slot-id and time
indicate the slot ID and log file generation time.

The storage space for saving user logs and diagnostic logs is limited. To view the storage
space and usage, run the display logfile storage-usage command. The log storage space
cannot be adjusted currently. When the remaining storage space of a type of log is less than
20% of the total space, the system deletes the earliest compressed log file to ensure that the
latest logs can be recorded.

22.49.12 Do Log Files Need to Be Manually Deleted?

Log files do not need to be manually deleted.

When log files occupy more than 80% of the whole storage space or the number of log files
exceeds the upper threshold, the system deletes the earliest log file to ensure that the latest
logs can be recorded.

22.49.13 Why Is a Switch's Log Time Different from the NMS's

Log Time?
A switch sends logs to the NMS according to the standard UTC time; however, the log time
displayed on the NMS does not carry the time zone. If a time zone is configured on the
switch, the log time displayed on the switch is different from that displayed on the NMS.

22.49.14 How Are VS Logs Saved?

VSs record only user logs in log.log files without recording diagnostic logs in diag.log files.
Log files are saved in the logfile directory of a VS.

In versions earlier than V100R006C00, VSs and the Admin-VS share the flash storage space.
The log storage space of VSs is not fixed and depends on the upper-level directory size. In
V100R006C00 and later versions, VSs can be assigned independent flash storage space. In
this situation, the log storage space of VSs depends on the storage space of these VSs.

22.49.15 How Do I View the Log Storage Space?

Run the display logfile storage-usage command to view the log storage space and usage of
the device.

22.49.16 How Do I Upload Logs to a Server?

Run the info-center loghost ip-address command in the system view to upload logs to a
specified server. ip-address specifies the IP address of this server. Ensure that there are
reachable routes between the switch and server.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 722

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> system-view
[~HUAWEI] info-center loghost 192.168.2.2
[*HUAWEI] commit

22.49.17 Is There Any Action Required When the Device Displays

a Message Indicating Insufficient Log Storage Space?
When the log storage space of the device is insufficient, the system deletes the earliest
compressed log file to ensure that the latest logs can be recorded. No action is required.

22.50 Device Management - NTP

22.50.1 Can the NTP Function Be Configured on VSs?

Only the Admin-VS supports the NTP function.

22.50.2 Why Is There a Great Time Difference Between the NTP

Client and the NTP Server After NTP Clock Synchronization?
The reason is that a time zone is configured on the NTP client or server. NTP cannot
synchronize the time zone setting. For example, if Beijing time (UTC + 8) is set to the NTP
server while the NTP client adopts the default UTC time, after NTP clock synchronization,
the time of the NTP server will be eight hours earlier than that of the NTP client.
You are advised to set the same time zone for the NTP server and client. Otherwise, the NTP
server time and client time may differ greatly after NTP clock synchronization.

22.50.3 What NTP Operating Modes Does a CE Switch Support?

The following table lists the NTP operating modes supported by a CE switch.

Operati Usage Scenario Deployment Location and

ng Synchronization
Mode Direction

Unicast The unicast client/server mode is used on a You only need to configure
client/ higher stratum on a synchronization subnet. the client. The server only
server In this mode, the IP address of the server needs to be configured with
mode needs to be obtained in advance. an NTP primary clock.
Note that the client can be
synchronized to the server but
the server cannot be
synchronized to the client.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 723

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Operati Usage Scenario Deployment Location and

ng Synchronization
Mode Direction

Symmetri The symmetric peer mode is used on a lower You only need to configure
c peer stratum on the synchronization subnet. In this the symmetric active peer.
mode mode, a symmetric active peer and a The symmetric passive peer
symmetric passive peer can be synchronized does not need to be
with each other. configured with an NTP
command.
In symmetric peer mode, a
symmetric peer of a higher
stratum is synchronized to a
symmetric peer of a lower
stratum.

Broadcast When the IP address of a server or a Relevant commands need to

mode symmetric peer is not determined, or when be run on the server and the
the clocks of a large number of devices need client.
to be synchronized on a network, clock Note that the client can be
synchronization can be implemented in synchronized to the server but
broadcast mode. the server cannot be
synchronized to the client.

Multicast The multicast mode applies to the high-speed Relevant commands need to
mode network that has multiple clients and does not be run on the server and the
require high precision. In a typical scenario, client.
one or more clock servers on the network Note that the client can be
periodically send multicast packets to clients, synchronized to the server but
and the clients synchronize time based on the the server cannot be
multicast packets. synchronized to the client.

Manycast The manycast mode applies to the scenario Relevant commands need to
mode where servers are scattered on a network. The be run on the server and the
client can discover and synchronize to the client.
closest manycast server. The manycast mode Note that the client can be
applies to the scenario where the servers are synchronized to the server but
not stable and clients on the entire network do the server cannot be
not need to be configured again due to a synchronized to the client.
change of the server.

22.50.4 How Do I Configure the NTP Clock Source?

The NTP clock source provides the NTP clock service for the entire network. Devices on the
network must synchronize the clock with the NTP clock source.
This section describes how to configure the NTP clock source on a CE switch that uses the
unicast client/server mode as the NTP operating mode.
In unicast client/server mode, a CE switch functions as the NTP clock source after it is
configured as the unicast server and its time is synchronized with an authoritative clock
(GPS).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 724

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

After the local clock of the CE switch is configured as the NTP clock source, other devices on the network
synchronize time with the CE switch. Exercise caution when performing this configuration to prevent clock
errors on network devices. It is recommended that a high-precision clock source (such as the GPS) be used if
the user network requires high clock precision.

# Configure the NTP master clock, enable NTP authentication, and enable the NTP server
function.
<HUAWEI> system-view
[~HUAWEI] ntp refclock-master 1
[*HUAWEI] ntp authentication enable
[*HUAWEI] ntp authentication-keyid 42 authentication-mode hmac-sha256 Hello@123456
[*HUAWEI] ntp trusted authentication-keyid 42
[*HUAWEI] undo ntp server disable
[*HUAWEI] commit

22.51 Reliability

22.51.1 Can the IP Address of VRRP-enabled VLANIF Interface

and VRRP Virtual IP Address Be on Different Network
Segments?

No.

22.51.2 Which Solution Can Be Used When the Number of VRIDs

Is Insufficient?

The VRID range varies depending on the interface card:

l CE-L48XS-EA, CE-L24XS-EA, CE-L24LQ-EA, CE-L48GS-EA, CE-L48GT-EA, CE-

L48GS-EC, and CE-L48GT-EC: 1 to 7
l CE-L36LQ-FD, CE-L12CQ-FD, CE-L24LQ-FD, CE-L36CQ-FD, CE-L36CQ-FG, CE-
L36CQ-FD1, CE-L36CQ-SD, CE-L16CQ-FD, CE-L08CF-FG1, CE-L48XS-FDA, CE-
L48XS-FG, CE-L48XS-FD1, and CE-L48XS-FD: 1 to 255
Each card supports a maximum of eight VRIDs.
l Other cards: 1 to 255
Each card supports a maximum of eight VRIDs. Each VS in port group mode supports a
maximum of eight VRIDs, and all VSs in port mode support a total of eight VRIDs.

The VRID on an interface must be unique, but different interfaces can be bound to VRRP
groups with the same VRID. If the number of VRIDs is insufficient, bind different interfaces
to VRRP groups with the same VRID.

22.51.3 How Is the Timeout Interval of VRRP Packets Set?

If the VRRP backup does not receive VRRP packets from the VRRP master within the
timeout interval, the VRRP backup considers that the VRRP master does not work properly.
Then the VRRP backup becomes the master.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 725

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The timeout interval of VRRP packets cannot be configured directly on a CE series switch.
The calculation formula is as follows:
(3*Advertisement_Interval) + Skew_time
Where,
Advertisement_Interval specifies the interval for sending VRRP packets. The default value is
1s.
The value of Skew_Time is as follows:
Skew_Time = (256 - Priority)/256
The value of Skew_Time ranges from 0 to 1.
You can run the vrrp vrid timer advertise command to change the interval for sending
VRRP packets to adjust the timeout interval of VRRP packets.
After the configuration is complete, run the display vrrp verbose command. The
TimerConfig field displays the configured interval for sending VRRP packets.
<HUAWEI> display vrrp verbose
Vlanif100 | Virtual Router 1
State : Master
Virtual IP : 10.1.1.100
Master IP : 10.1.1.2
Send VRRP Packet To Subvlan : all
PriorityRun : 120
PriorityConfig : 120
MasterPriority : 120
Preempt : YES Delay Time : 20 s Remain : --
TimerRun : 2 s
TimerConfig : 2 s
Auth Type : MD5 Auth Key : ******
Virtual MAC : 0000-5e00-0101
Check TTL : YES
Config Type : Normal
Track BFD : atob Priority Reduced :20
BFD-session State : UP
Create Time : 2014-10-07 15:43:42
Last Change Time : 2014-10-07 15:44:03

22.51.4 Can a VRRP-enabled CE Series Switch Interwork with a

Non-Huawei Device?
VRRP is a public protocol. A VRRP-enabled CE series switch can interwork with a non-
Huawei device.

22.51.5 Which Features Does BFD Support?

BFD can be used with static route, RIP, OSPF, IS-IS, BGP, VRRP, PIM, LDP-LSP, RSVP,
CR-LSP, VXLAN, SR-TE, and M-LAG.
l Only CE12800 supports BFD for RSVP and BFD for CR-LSP.
l Only CE12800, CE8868EI, CE8861EI, CE8860EI, CE8850EI, CE7855EI, CE7850EI,
CE6870EI, CE6865EI, CE6857EI, CE6860EI, CE6850HI, CE6850U-HI, CE6856HI,
CE6855HI, and CE6851HI support BFD for LDP-LSP.
l Only CE12800, CE12800E, CE8868EI, CE8861EI, CE8860EI, CE8850EI, CE7855EI,
CE7850EI, CE6880EI, CE6870EI, CE6865EI, CE6857EI, CE6860EI, CE6850HI,

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 726

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

CE6850U-HI, CE6856HI, CE6855HI, CE5880EI, and CE6851HI support BFD over

VXLAN.
l Only CE12800 supports BFD for SR-TE.

22.51.6 Can the Device Configured with a Single-hop BFD

Session Interwork with the Device Configured with a Multi-hop
BFD Session?

The device configured with a single-hop BFD session cannot interwork with the device
configured with a multi-hop BFD session.

When a BFD session is configured on a CE series switch and the outbound interface of the
BFD session is specified, the BFD session is a single-hop BFD session. Otherwise, the BFD
session is a multi-hop BFD session. Devices of a BFD session must be configured with the
same BFD session type (single-hop or multi-hop); otherwise, the BFD session cannot be
established.

22.51.7 Do CE Series Switches Support Smart Link?

The following table lists the support for Smart Link.

Table 22-84 Products and minimum version supporting Smart Link

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6850EI V100R002C00

CE6810EI V100R003C00

CE6810-48S4Q-LI/CE6810-48S-LI V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI V100R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 727

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI V100R005C10

CE6850U-HI V100R005C10

CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6880EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

CE5880EI V200R005C10

CE5850EI V100R002C00

CE5810EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R005C10

22.51.8 Can an Uplink Interface in Down State in the Monitor

Link Group Trigger All Downlink Interfaces to Go Down
An uplink interface in Down state in the Monitor Link group trigger all downlink interfaces to
go Down. When all uplink interfaces fail, the Monitor Link group fails and all downlink
interfaces are in Down state.

22.51.9 How Do CE Series Switch Implement Association

Between Uplink and Downlink Interfaces?
CE series switches implement association between uplink and downlink interface through
Monitor Link. The configuration is as follows:
<HUAWEI> system-view
[~HUAWEI] monitor-link group 2
[*HUAWEI-mtlk-group2] port 10ge 1/0/1 uplink
[*HUAWEI-mtlk-group2] port 10ge 2/0/1 downlink 1
[*HUAWEI-mtlk-group2] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 728

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.51.10 How Do I Delete an Interface from an ERPS Ring?

Run the shutdown command in the interface view to shut down the interface, and then run
the undo erps ring command to delete the interface from the ERPS ring.

22.51.11 Do CE Series Switches Support RRPP?

CE series switches do not support RRPP.

22.52 TRILL
NOTE

CE8861EI, CE8868EI, CE6880EI, CE6865EI, CE6857EI, CE5880EI, CE5810EI and CE6810LI does not
support TRILL.

22.52.1 Do CE Series Switches Support Transparent Transmission

of BPDUs on a TRILL Network?
In V100R003C00 and earlier versions, CE series switches do not support transparent
transmission of BPDUs on a TRILL network.

In V100R003C10 and later versions, you can configure association between TRILL and
MSTP for transparent transmission of BPDUs on a TRILL network without changing the root
bridge.

22.52.2 Can Loop Detection Be Configured on TRILL Devices'

Ports?
TRILL network-side ports do not support loop detection. Currently, you can perform the
following operations to eliminate loops when user devices connect to a TRILL network:
l Configure the AF function on the edge device of the TRILL network so that only one
device forwards user traffic.
l In V100R002C00 and later versions, configure association between TRILL and MSTP
(changing the root bridge) when an MSTP network connects to a TRILL network. In
V100R003C10 and later versions, configure association between TRILL and MSTP
(retaining the root bridge).
l In V100R003C00 or V100R003C10, configure E-Trunk dual-homing access to TRILL
for active-active access if user devices are servers or network devices are dual-homed to
the TRILL network.
l In V100R005C00 and later versions, configure M-LAG dual-homing access to TRILL
for active-active access if user devices are servers or network devices are dual-homed to
the TRILL network.

22.53 VXLAN

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 729

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.53.1 What Models of CloudEngine Series Switches Support

VXLAN?
CE series switches excluding the CE5810EI, CE5850EI, CE5850HI, CE5855EI, CE6810EI,
CE6810LI, and CE6850EI support VXLAN.

22.53.2 Does VXLAN Require the License?

The VXLAN function is a basic feature of the CE12800 and CE12800E and is not under
license control.

The VXLAN function of the CE8800, CE7800, CE6800, and CE5800 is controlled by the
license. By default, the VXLAN function is disabled on a newly purchased device. To use the
VXLAN function, apply for and purchase the license from the equipment supplier.

22.53.3 What Is the MAC Address Range Supported by a VBDIF

Interface?
When a VBDIF interface is not configured with a MAC address, the MAC address is
automatically allocated by the system. You can run the display interface vbdif command to
check the MAC address.

You can run the mac-address mac-address command on the VBDIF interface to configure a
MAC address for the VBDIF interface. The MAC address ranges on different device models
are different.
l The CE12800E (equipped with ED-E, EG-E, and EGA-E series cards) supports 500 any
unicast MAC addresses.
l The CE12800E (equipped with FD-X series cards) supports 1000 any unicast MAC
addresses.
l When CE12800 works in non-enhanced mode, the following situation will occur:
– If the switch is equipped with the EA series card, CE-L48GT-EC card, or CE-
L48GS-EC card, the MAC address supported by the switch is in the range of
0000-5e00-0100 to 0000-5e00-0107, and a maximum of eight MAC addresses are
allowed.
– If the switch is equipped with other cards but not the preceding cards, the MAC
address supported by the switch is in the range of 0000-5e00-0100 to
0000-5e00-0107 and a maximum of eight MAC addresses are allowed.
In enhanced mode, the MAC address supported by the switch is in the range of
0000-5e00-0100 to 0000-5e00-01ff and a maximum of 16 MAC addresses are allowed.
l The CE8800, CE7800, CE6800, and CE5800 series switches running a version earlier
than V200R002C50 support MAC addresses in the range of 0000-5e00-0100 to
0000-5e00-01ff. Among these models, the CE6870EI/CE6875EI supports a maximum of
16 MAC addresses, while the other models support a maximum of 256 MAC addresses.
In V200R002C50 and later versions, the CE6870EI/CE6875EI supports a maximum of
16 MAC addresses in the range of 0000-5e00-0100 to 0000-5e00-01ff. The CE6865EI/
CE6857EI/CE8861EI/CE8868EI supports a maximum of 1000 any unicast MAC
addresses, while the other models support a maximum of 500 any unicast MAC
addresses.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 730

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.53.4 What Can I Do If the Length of the Packet Encapsulated

with the VXLAN Header Exceeds the MTU of the Underlay
Network Device?
The CE series switch functions as the VXLAN gateway to encapsulate the VXLAN header
into data packets that enter the VXLAN tunnel. After VXLAN encapsulation, the
encapsulated packets have 54 bytes more than original data packets. The length of
encapsulated packets may exceed the MTU of the underlay network device. As a result,
packets are discarded by the network device.
You can use one of the following methods or a combination of them based on the functions
supported by the underlay network device:
1. Configure the maximum length of Jumbo frames allowed by the underlay network
device so that the maximum length of Jumbo frames is larger than the length of VXLAN
packets.
2. Configure the MTU of the underlay network device so that the MTU is larger than the
length of VXLAN packets.
3. Deploy the VXLAN gateway on the device that supports packet fragmentation and
reassembly. Then the device fragments and reassembles VXLAN packets so that
VXLAN packets can be forwarded on the underlay network.

22.53.5 Does a VS Support VXLAN?

In V100R003C10 and V100R005C00, only the Admin-VS supports VXLAN.
Starting from V100R005C10, only the Admin-VS in port mode supports VXLAN; all VSs in
group mode support VXLAN.

22.53.6 Does VXLAN Support IPv6?

In versions earlier than V200R002C50, VXLANs can only be IPv4 networks. In
V200R002C50 and later versions, overlay networks can be IPv6 networks.
In versions earlier than V200R003C00, underlay networks of VXLAN networks can only be
IPv4 networks. In V200R003C00 and later versions, underlay networks can be IPv6
networks.

22.53.7 Which CE Series Switches Need to Be Configured with the

service type tunnel Command When They Function as VXLAN
Layer 3 Gateways?
When a CE6850HI, CE6850U-HI, CE6851HI, CE6860EI, CE7850EI, CE8850EI, or
CE8860EI switch functions as a VXLAN Layer 3 gateway, configure a service loopback
interface on the switch to loop back service packets of the VXLAN Layer 3 gateway.
Perform the following configurations:
<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 1
[*HUAWEI-Eth-Trunk1] service type tunnel //Enable the service loopback function
in the Eth-Trunk interface view.
[*HUAWEI-Eth-Trunk1] trunkport 10ge 1/0/1 //Add an idle member interface to the
Eth-Trunk.
[*HUAWEI-Eth-Trunk1] commit

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 731

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

For the CE6860-48S8CQ-EI, an internal interface of the system can be configured as a

member interface of an Eth-Trunk. In this case, physical interface resources are not occupied.
Perform the following configurations:
<HUAWEI> system-view
[~HUAWEI] interface eth-trunk 1
[*HUAWEI-Eth-Trunk1] service type tunnel internal
[*HUAWEI-Eth-Trunk1] commit

22.54 FCoE

22.54.1 Do CE Series Switches Support FCoE?

The following table describes the products and minimum version supporting FCoE.

Table 22-85 Products and minimum version supporting FSB (CE12800)

Series Product Minimum Version
Required

CE12800 CE12804/CE12808/ V100R003C00

CE12812

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-86 Products and minimum version supporting FCF (CE12800)

Series Product Minimum Version
Required

CE12800 CE12804/CE12808/ V100R005C00

CE12812/CE12816/
CE12804S/CE12808S

Table 22-87 Products and minimum version supporting FCoE (CE8800)

Series Function Product Minimum
Version Required

CE8800 FCF, NPV and FSB CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE8868EI V200R005C10

CE8861EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 732

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-88 Products and minimum version supporting FCoE (CE7800)

Series Function Product Minimum
Version Required

CE7800 FSB CE7850EI V100R003C00

CE7855EI V200R001C00

FCF and NPV CE7850EI V100R005C00

CE7855EI V200R001C00

Table 22-89 Products and minimum version supporting FCoE (CE6800)

Series Function Product Minimum
Version Required

CE6800 FSB CE6850EI V100R001C00

CE6810EI V100R003C00

CE6810-48S4Q-LI/ V100R003C10
CE6810-48S-LI

CE6810-32T16S4Q- V100R005C10
LI/CE6810-24S2Q-
LI

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI V100R005C10

CE6850U-HI V100R005C10

CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ- V200R001C00
EI/
CE6870-48S6CQ-EI

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 733

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Series Function Product Minimum

Version Required

FCF and NPV CE6850EI V100R005C00

CE6810EI V100R005C00

CE6850HI V100R005C00

CE6850U-HI V100R005C10

CE6851HI V100R005C10

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6857EI V200R005C10

FCF CE6870-24S6CQ- V200R001C00

EI/
CE6870-48S6CQ-EI

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

22.54.2 Do CE Series Switches Support FC?

In V100R005C10 and later versions, only the CE6850U-HI supports FC. In V200R003C00
and later versions, only the CE8860EI and CE6850U-HI support FC. In V200R003C00 and
later versions, only the CE8860EI, CE8861EI, and CE6850U-HI support FC.

22.54.3 Can the CE8860EI, CE8868EI, CE8861EI, and CE6850U-HI

Be Used as an FC Switch?
Yes, the CE8860EI, CE8868EI, CE8861EI, and CE6850U-HI can be used as an FC switch.
The CE8860EI, CE8868EI, CE8861EI, and CE6850U-HI used as an FC switch support
single-hop FCF and NPV.
The CE8860EI, CE8868EI, CE8861EI, and CE6850U-HI used as an FC switch do not support
multi-hop FCF.

22.54.4 Do FC and FCoE Require the License?

The FCF function of the CE12800 is controlled by the license. By default, the FCF function is
disabled on a newly purchased device. To use the FCF function, apply for and purchase the
license from the equipment supplier.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 734

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

The FCF and NPV functions of the CE8800&7800&6800 are controlled by the license. By
default, the FCF and NPV functions are disabled on a newly purchased device. To use the
FCF and NPV functions, apply for and purchase the license from the equipment supplier.
There are two types of licenses for the FCF function:
l CE-LIC-FCF-ALL
The FCF function can be configured on all interfaces.
l CE-LIC-FCF-PORT
The FCF function can be configured on a maximum of 48 interfaces of the same card or
different cards of the CE12800.
The FCF function can be configured on a maximum of 16 interfaces of the
CE8800&7800&6800.
Multiple licenses of CE-LIC-FCF-PORT can be loaded on the device to meet expansion
requirements.
The FSB function is a basic function of the switch, and can be used without a license.

22.54.5 How Do I Check WWPNs of the Storage Device and

Server After FCoE Is Configured?
After the FCoE configuration is complete, you can check registration information about the
storage device and server on the device enabled with the FCF function.
<HUAWEI> display fcoe name-server brief
The Name-Server Information:
-------------------------------------------------------------------------------
Interface FC-ID WWPN
-------------------------------------------------------------------------------
FCoE1/0/1 16.00.01 30:00:00:68:50:40:30:02
FCoE1/0/2 16.00.02 30:00:00:68:50:40:30:01
-------------------------------------------------------------------------------
Total: 2

22.54.6 How Do I Add the Storage Device and Server to a Zone?

On an FCoE network, you can use zones to control access between ENodes to improve the
network security.
A zone contains multiple members, and ENodes can join different zones. Members in the
same zone can communicate with each other, whereas members in different zones cannot.
Member nodes can be added to a zone based on the WWPN, WWNN, FC_ID, and FC or
FCoE interface. The WWPN mode is recommended.
<HUAWEI> system-view
[~HUAWEI] zone zone1
[*HUAWEI-zone-zone1] member wwpn 20:00:00:9f:be:30:20:10
[*HUAWEI-zone-zone1] quit
[*HUAWEI] commit

22.54.7 What Is FCoE Compatibility on a CE Switch?

The following table describes the compatibility when the FCoE device connects to the third-
party network adapter, server, storage device, or switch.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 735

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Y indicates compatible, N indicates incompatible, N/A indicates that the function is not
supported or there is no such a scenario. The hyphen (-) indicates that compatibility is not
ensured.

NOTE

l Interworking compatibility is not ensured in the scenarios that are not listed in the following table.
l Only the CE8861EI, CE8860EI and CE6850U-HI support Fiber Channel (FC) interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 736

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-90 Interworking with the network adapter

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks
factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

Emule LPe16 Windo FC N/A N/A N/A N/A Y The network

x 002 ws adapter uses
HBA Server the built-in
2012 drive of
RedHa VMWARE
t 5.5, and there
Enterp are many
rise problems
Linux about this
7 network
adapter. The
SUSE network
Linux adapter goes
Enterp online slowly,
rise the rate is
Linux about half of
12 the full
VMwa bandwidth,
re 5.5 and the disk
cannot be
found after the
storage
devices are
registered
with the FCF
again. To
solve the
problems,
upgrade the
drive to
10.0.725.203.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 737

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

LPe12 VMW FC N/A N/A N/A N/A Y None

002 ARE
HBA 5.1.0
Windo
ws
Server
2008
SP2
Windo
ws
Server
2008
R2
SP1
RedHa
t
Enterp
rise
Linux
6
SUSE
Linux
Enterp
rise
Linux
11
Solaris
11

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 738

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

LPe11 Windo FC N/A N/A N/A N/A Y None

002 ws
HBA Server
2008
SP2
RedHa
t
Enterp
rise
Linux
5
SUSE
Linux
Enterp
rise
Linux
10
Solaris
10
VMwa
re 5.0

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 739

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

LPe12 Windo FC N/A N/A N/A N/A Y The network

50 ws adapter users
HBA Server a later version
2008 of VMWARE
Windo 5.1u2. It can
ws be registered
Server normally.
2008 After the
R2 network
SP1 adapter
initiates IO,
RedHa the optical
t module does
Enterp not work and
rise the interface
Linux becomes
6 Down.
SUSE
Linux
Enterp
rise
Linux
11
VMwa
re 5.1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 740

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

LPe11 Windo FC N/A N/A N/A N/A Y None

50 ws
HBA Server
2008
SP2
RedHa
t
Enterp
rise
Linux
5
SUSE
Linux
Enterp
rise
Linux
10
VMwa
re 5.0

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 741

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

LPe11 Windo FC N/A N/A N/A N/A Y The network

1 ws adapter does
HBA Server not support
2008 VMWARE
SP2 operating
RedHa system.
t
Enterp
rise
Linux
5
SUSE
Linux
Enterp
rise
Linux
10
VMwa
re 5.0

OCe VMW FCoE Y Y Y Y - None

11100 ARE
CNA Win
Server
2008

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 742

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

Qlogic QLE2 VMW FC N/A N/A N/A N/A Y None

462 ARE
HBA 5.1.0
VMW
ARE
5.0
Windo
ws
Server
2008
SP2
RedHa
t
Enterp
rise
Linux
5
SUSE
Linux
Enterp
rise
Linux
10
Solaris
10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 743

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

QLE2 VMwa FC N/A N/A N/A N/A Y None

562 re 5.1
HBA Windo
ws
Server
2008
R2
SP1
RedHa
t
Enterp
rise
Linux
6
SUSE
Linux
Enterp
rise
Linux
11
Solaris
11

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 744

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

QLE2 Windo FC N/A N/A N/A N/A Y The

672 ws destination
HBA Server FC_ID in
2012 PLOGI
RedHa packets sent
t by the
Enterp network
rise adapter is the
Linux FC_ID of the
7 NPV switch,
and the NPV
SUSE switch directly
Linux discards the
Enterp PLOGI
rise packets. As a
Linux result, the host
12 where the
network
adapter is
installed
cannot
discover the
remote host.
Restart the
host where the
network
adapter is
installed.
Then PLOGI
packets do not
use the FC_ID
of the NPV
switch as the
destination
FC_ID.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 745

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

The Cisco
switch used as
the NPV
switch does
not respond to
PLOGI
packets with
the FC_ID of
the NPV
switch as the
destination
FC_ID.
When both the
FCF and NPV
device are
used, it is
recommended
that zone
members on
the FCF be
added to the
zone based on
the WWN. Do
not use the
interface
mode.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 746

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

8200 VMW FCoE Y Y Y Y Y l When the

Series ARE FCoE-
CNA Win enabled
Server device
2008 connects to
the QLogic
network
adapter,
the QLogic
network
adapter
that does
not receive
responses
retransmits
FLOGI
requests
every 20s.
The FCoE-
enabled
device
enters the
VLAN
Request
state after
a period of
time. That
is, the link
recovery
period may
be as long
as 3
minutes.
l When both
the FCF
and FSB

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 747

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

are used,
the dual-
homing
networking
is
recommen
ded. In
single-
homing
networking
, when the
FCoE-
enabled
device
connects to
the Qlogic
network
adapter,
the link
recovery
period is
long.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 748

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

Intel X520 VMW FCoE Y Y Y Y - l DCB

Series ARE parameters
CNA Win need to be
Server manually
2008 set.
l When the
Intel
X520-2
network
adapter
connects to
an FCoE
FCF, there
is a low
probability
that the
following
problem
occurs.
After
receiving
FLOGI
ACC
packets,
the FCoE
FCF enters
the VLAN
Request
state and
does not
send
PLOGI
packets.
This
problem is
solved

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 749

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

after the
network
adapter is
disabled.

Broca 18602 VMW FC N/A N/A N/A N/A Y None

de HBA ARE
5.1.0

1860 VMW FC N/A N/A N/A N/A Y None

HBA ARE
5.5
Windo
ws
Server
2012
RedHa
t
Enterp
rise
Linux
7
SUSE
Linux
Enterp
rise
Linux
12

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 750

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

425 VMW FC N/A N/A N/A N/A Y None

HBA ARE
5.0
Windo
ws
Server
2008
SP2
RedHa
t
Enterp
rise
Linux
5
SUSE
Linux
Enterp
rise
Linux
10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 751

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

825 VMW FC N/A N/A N/A N/A Y None

HBA ARE
5.1
Windo
ws
Server
2008
R2
SP1
RedHa
t
Enterp
rise
Linux
6
SUSE
Linux
Enterp
rise
Linux
11

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 752

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

1000 VMW FCoE Y Y Y Y Y When the

Series ARE FCoE FCF
CNA Win connects to
Server the Brocade
2008 1020 network
adapter, you
must
configure
independent
ETS priority
groups for
FCoE and
iSCSI services
and enable
PFC for
queues with
priorities.
Otherwise,
DCBX
negotiation
may fail.

ATTO FC-42 Windo FC N/A N/A N/A N/A Y None

ES ws
HBA Server
2008
SP2

FC-82 Windo FC N/A N/A N/A N/A Y None

EN ws
HBA Server
2008
R2
SP1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 753

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Oper Funct CE1 CE CE CE6 CE68 Remarks

factur l ating ion 2800 880 780 800 50U-
er Syste 0 0 (Ex HI
m clu
din
g
the
CE6
810
LI
and
CE6
850
U-
HI)

HP AH40 HP FC N/A N/A N/A N/A Y None

1A UX
11.31

AT094 HP FC N/A N/A N/A N/A Y None

– UX
60001 11.32

Table 22-91 Blade server

Manu Mode Netw SFU CE1 CE CE CE CE68 Remarks
factur l ork 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

Huawe E9000 CX311 FCoE Y Y Y Y N/A The Brocade

i -10GE network
/CNA adapter
provides FCoE
functions and
supports FCF
and NPV
modes.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 754

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Netw SFU CE1 CE CE CE CE68 Remarks

factur l ork 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

Broca FCF N/A N/A N/A N/A Y The Brocade

de FC network
SFU adapter
provides FC
E6000 Broca NPV N/A N/A N/A N/A Y functions and
de FC supports FCF
SFU and NPV
modes. To use
the NPV
mode, load a
license. By
default, the
FCF mode is
used.

T8000 Qlogic FCF/N N/A N/A N/A N/A Y None

FC PV
SFU

IBM Blade HBA FC N/A N/A N/A N/A Y None

Center
E

Dell Power HBA FC N/A N/A N/A N/A Y None

Edge
M1000
e

Force CNA FSB Y Y Y Y - None

10 mxl

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 755

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Netw SFU CE1 CE CE CE CE68 Remarks

factur l ork 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

H3C C8000 Emule FSB Y Y Y Y - None

x
FlexFa
bric
10GB-
2-
PORT
554FL
B
Adapt
er

Table 22-92 Storage

Manu Mode Netw Funct CE1 CE CE CE CE68 Remarks
factur l ork ion 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

Huawe Ocean Brocad FCoE Y Y Y Y N/A The switch

i Stor e CNA functions as
the FCoE FCF.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 756

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Netw Funct CE1 CE CE CE CE68 Remarks

factur l ork ion 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

S5500 Chelsi FC N/A N/A N/A N/A Y None

T v3 o T4
HBA

8G FC N/A N/A N/A N/A Y None

PMC

SmartI FC N/A N/A N/A N/A Y None

O FC

QLogi FC N/A N/A N/A N/A Y The network

c 16G adapter does
FC not send
registration
messages
(FLOGI)
repeatedly.
When the FC
interface Up
event is
reported
slowly, the
storage device
may fail to go
online.

Ocean CNA FCoE Y Y Y Y Y None

Stor
S5600
T

EMC VNX4 CNA FCoE Y Y Y Y - None

500

VNX5 HBA FC N/A N/A N/A N/A Y None

300

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 757

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Manu Mode Netw Funct CE1 CE CE CE CE68 Remarks

factur l ork ion 2800 880 780 680 50U-
er Adapt 0 0 0 HI
er (Ex
clu
din
g
the
CE
681
0LI
and
CE
685
0U-
HI)

VNX5 CNA FCoE Y Y Y Y - The switch

500 functions as
the FCoE FCF.

NetAp FAS20 HBA FC N/A N/A N/A N/A Y None

p 00

FAS80 CNA FCoE Y Y Y Y - The switch

40 functions as
the FCoE FCF.

HP EVA8 HBA FC N/A N/A N/A N/A Y None

100

IBM DS430 HBA FC N/A N/A N/A N/A Y None

0

SUN ST618 HBA FC N/A N/A N/A N/A Y None

0

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 758

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-93 Switch

Man Mod Devi CE C C C CE CE88- Remarks
ufact el ce 12 E8 E7 E6 685 D24S2CQ-U
urer Role 80 80 80 80 0U- (16G)
0 0 0 0 HI
(e
xc
lu
di
ng
C
E6
81
0L
I
an
d
C
E6
85
0
U-
H
I)

HUA SNS2 FC N/ N/ N/ N/ Y - None

WEI 120 FCF A A A A

SNS5 FC N/ N/ N/ N/ Y -
120 FCF A A A A

SNS2 FC N/ N/ N/ N/ Y -
124 FCF A A A A

SNS2 FC N/ N/ N/ N/ Y -
248 FCF A A A A

Cisco N5K FCoE N/ Y Y Y Y - The CE12800

FCF A does not support
FCoE NPort
Virtualization
(NPV).
The CE6870EI
and CE6875EI
do not support
FCoE NPV.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 759

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Man Mod Devi CE C C C CE CE88- Remarks

ufact el ce 12 E8 E7 E6 685 D24S2CQ-U
urer Role 80 80 80 80 0U- (16G)
0 0 0 0 HI
(e
xc
lu
di
ng
C
E6
81
0L
I
an
d
C
E6
85
0
U-
H
I)

FCoE N N N N N - The Cisco

NPV Nexus 5000 that
functions as the
FCoE NPV
device cannot
connect to FCFs
from other
vendors.

FC N/ N/ N/ N/ Y - When a server
FCF A A A A and a storage
device connect
to the N5K FCF,
the server
cannot detect
the storage
device.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 760

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Man Mod Devi CE C C C CE CE88- Remarks

ufact el ce 12 E8 E7 E6 685 D24S2CQ-U
urer Role 80 80 80 80 0U- (16G)
0 0 0 0 HI
(e
xc
lu
di
ng
C
E6
81
0L
I
an
d
C
E6
85
0
U-
H
I)

FC N/ N/ N/ N/ Y - When the N5K

NPV A A A A functions as the
FC NPV device
and connects to
the CE FCF, if
an ENode is
online and the
shutdown and
undo shutdown
commands are
configured on
the FC interface
of the CE, the
FC interface in
Up state lasts for
more than 90s.
When no ENode
is online, the FC
interface in Up
state lasts for
less than 5s.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 761

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Man Mod Devi CE C C C CE CE88- Remarks

ufact el ce 12 E8 E7 E6 685 D24S2CQ-U
urer Role 80 80 80 80 0U- (16G)
0 0 0 0 HI
(e
xc
lu
di
ng
C
E6
81
0L
I
an
d
C
E6
85
0
U-
H
I)

MDS FCoE N/ Y Y Y - - When the CE

9K FCF A switch functions
as the FCoE
NPV device and
connects to the
MDS9250i, do
not use the Eth-
Trunk. Use
single interfaces
and dual planes
to ensure
reliability.

FC N/ N/ N/ N/ - - None
FCF A A A A

FC N/ N/ N/ N/ - - None
NPV A A A A

Broca VDX FCoE N/ Y Y Y Y - When a server

de 6730 FCF A and a storage
device connect
6510 FC N/ N/ N/ N/ - - to an NPV
FCF A A A A device (CE
300 FC N/ N/ N/ N/ - - switch) and
FCF A A A A Brocade 8000
FCF, and are
registered, a
zone is

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 762

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Man Mod Devi CE C C C CE CE88- Remarks

ufact el ce 12 E8 E7 E6 685 D24S2CQ-U
urer Role 80 80 80 80 0U- (16G)
0 0 0 0 HI
(e
xc
lu
di
ng
C
E6
81
0L
I
an
d
C
E6
85
0
U-
H
I)

8000 FC N/ N/ N/ N/ Y - configured on
FCF A A A A the Brocade
8000 FCF. In
this case, the
server cannot
detect the
storage device.

DCX FC N/ N/ N/ N/ - Y DCX8510 8B
8510 FCF A A A A (Fifth
generation)

22.54.8 Can Multiple Physical Interfaces on a CE Series Switch

Join the Same FCoE Interface?

Multiple physical interfaces cannot join an FCoE interface. One physical interface
corresponds to one FCoE interface.

22.54.9 How Do I Check FCoE Registration Information About the

Server and Storage Device on a CE Series Switch?

FCoE registration information can be queried through the display fcoe name-server
command.

# Display brief ENode registration information on all FCoE interfaces.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 763

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

<HUAWEI> display fcoe name-server brief

The Name-Server Information:
-------------------------------------------------------------------------------
Interface FC-ID WWPN
-------------------------------------------------------------------------------
FCoE-Port1 03.80.01 20:00:90:e2:ba:08:3c:7f
FCoE-Port2 03.80.06 20:00:20:0b:c7:98:24:ca
-------------------------------------------------------------------------------
Total: 2

Table 22-94 Description of the display fcoe name-server brief command output
Item Description

Interface FCoE interface.

FC-ID FC_ID of the FCoE session.

WWPN World Wide Node Name (WWNN).

Total Total number of brief ENode registration

information.

# Display ENode registration information on FCoE-Port1.

<HUAWEI> display fcoe name-server interface fcoe-port 1
The Name-Server Information:
--------------------------------------------------------------------------------
FC-ID : 03.80.01
WWPN : 20:00:90:e2:ba:08:3c:7f
WWNN : 10:00:90:e2:ba:08:3c:7f
FC-4 Type Supported : FCP
FC-4 Feature : -
Symbolic Name : Intel-FCoE
--------------------------------------------------------------------------------
Total: 1

Table 22-95 Description of the display fcoe name-server interface command output
Item Description

FC-ID FC_ID of the FCoE session.

WWPN World Wide Port Name (WWPN).

WWNN World Wide Node Name (WWNN).

FC-4 Type Supported Supported FC-4 type:

l FCP
l IP

FC-4 Feature FC-4 attribute.

Symbolic Name Symbolic name of the FCoE interface.

Total Total number of ENode registration

information.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 764

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.54.10 What Is the Rate of an FC Interface of a CE Series Switch?

Only the CE8860EI, CE8861EI, and CE6850U-HI support FC interfaces.
l For the CE8860EI and CE8861EI:
– When the 16G FC optical module is used, the rate can be 4000 Mbit/s, 8000 Mbit/s,
or 16000 Mbit/s.
NOTE

The maximum rate supported by a 16GE FC optical port is 14 Gbit/s.

– When the 8G FC optical module is used, the rate can be 4000 Mbit/s or 8000
Mbit/s.
– When the 4G FC optical module is used, the rate can be 4000 Mbit/s.
l For the CE6850U-HI:
– When the 8G FC optical module is used, the rate can be 2000 Mbit/s, 4000 Mbit/s,
or 8000 Mbit/s.
– When the 4G FC optical module is used, the rate can be 2000 Mbit/s or 4000
Mbit/s.
– When the 2G FC optical module is used, the rate can be 2000 Mbit/s.
In non-auto-negotiation mode, if interfaces on two connected devices work at different rates,
use the speed command to change the rates of the interfaces to be the same so that the two
devices can communicate.

22.55 DCB

22.55.1 How the Backpressure Timer Value and the Number of

Required PFC Frames Are Calculated?
PFC is a Priority-based Flow Control mechanism. After DCB is enabled on the device and
negotiation is successful, the device sends a backpressure signal to a queue where congestion
occurs.
The backpressure timer value and number of required PFC frames are calculated as follows:
l Backpressure timer value = 512 x Time(n)/Interface bandwidth
l Number of required PFC frames = Interface bandwidth/(512 x Time(n))
Figure 22-134 shows the PFC frame format.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 765

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Figure 22-134 PFC frame format

6octets Destination address

6octets Source address

2octets Ethertype

2octets Control opcode

ms octet 1s octet
2octets Priority enable vector 0 E(7)…E(n)…E(0)

Time(0)

16octets Time(n)

Time(7)

26octets Pad(transmit as zero)

4octets CRC

Table 22-96 Fields in a PFC frame

Item Description

Destination address Destination MAC address, which has a fixed value of 01-80-
c2-00-00-01.

Source address Source MAC address.

Ethertype Ethernet frame type. The value is 88-08.

Control opcode Control code. The value is 01-01.

Priority enable Priority-enable vector. E(n) corresponds to queue n and determines

vector whether backpressure is enabled for queue n.
l When E(n) is 1, backpressure is enabled for queue n.
l When E(n) is 0, backpressure is disabled for queue n.

Time(0)-Time(7) Backpressure timer. The unit is the time at which an interface sends
512 bits. If Time(n) is 0, backpressure is canceled.

Pad(transmit as Reserved.
zero) The value of this field is 0 during PFC frame transmission.

CRC Cyclic Redundancy Check (CRC).

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 766

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.56 QoS

22.56.1 After a Traffic Policy Defining an ACL Rule and Traffic

Statistics Is Applied and Traffic Matches the ACL Rule, the
Statistics in the display acl Command Output Is 0. Why?
The display acl displays statistics on traffic sent to the control plane.
The traffic statistics function is used to collect statistics on traffic in the forwarding plane. The
statistics do not contain traffic sent to the control plane.
After a traffic policy defining an ACL rule and traffic statistics is applied and traffic matches
the ACL rule, the statistics in the display acl command output is 0.
Run the display traffic-policy statistics command to check statistics on traffic matching a
traffic policy applied to an interface.

22.56.2 What Precautions Should I Take When Configuring

Traffic Statistics Collection on CE12800 and CE12800E Series
Switches?
For the configuration procedure and precautions of the traffic statistics collection function on
the CE12800 and CE12800E series switches, see CloudEngine Series Switches Traffic
Statistics Collection.
Website: http://support.huawei.com/enterprise/en/doc/EDOC1000091661?idPath=7919710|
21782165|21782236|22318638|7542409

22.56.3 How Do I Configure the Priority of a Traffic Classifier?

When the classifier classifier-name behavior behavior-name [ precedence precedence-
value ] command is used in the traffic policy view to bind the traffic classifier and traffic
behavior, you can specify precedence precedence-value to set the priority of the traffic
classifier:
l The value of precedence-value is an integer that ranges from 0 to 65535. A smaller value
represents a higher priority.
l If precedence-value is not specified, the system automatically allocates a priority to a
traffic classifier. The allocated priority is a multiple of 5 based on the highest priority of
the current traffic classifier.
For example, if the highest priority of the current traffic classifier is 7, the system
allocate the priority of 10 to the traffic classifier when precedence-value is not specified.

22.56.4 Does the CE12800 and 12800E Support Queue-based

Traffic Statistics on Multicast Packets?
The support for queue-based traffic statistics on multicast packets on CE12800 and 12800E
series switches is as follows:
l CE12800

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 767

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

For CE-L48XS-FDA cards, CE12800 series switches do not support queue-based traffic
statistics on multicast packets. They support only queue-based traffic statistics on unicast
packets. To check the queue-based traffic statistics on unicast packets on an interface,
run the display qos queue statistics interface interface-type interface-number command
in any view.
For cards other than CE-L48XS-FDA, queue-based traffic statistics on multicast packets
can be collected. Traffic statistics on multicast packets can also be collected
independently. To check the queue-based traffic statistics on multicast packets on an
interface, run the display qos queue statistics multicast interface interface-type
interface-number command in any view.
l CE12800E equipped with ED-E/EG-E/EGA-E series cards
The CE12800E equipped with ED-E/EG-E/EGA-E series cards supports queue-based
traffic statistics on multicast packets, which are included in queue-based traffic statistics
and cannot be collected separately. To check the queue-based traffic statistics on an
interface, run the display qos queue statistics interface interface-type interface-number
command in any view.
l CE12800E equipped with FD-X series cards
The CE12800E equipped with FD-X series cards supports queue-based traffic statistics
on multicast packets. To check the queue-based traffic statistics on multicast packets on
an interface, run the display qos queue statistics multicast interface interface-type
interface-number command in any view.

22.56.5 How Do I Configure and Apply an IP-based Traffic Policy

to Differentiate Internet Traffic?
When the CE needs to classify received Internet traffic, configure an IP-based traffic policy
on the interface of the CE connected to the Internet in the inbound direction.
10GE1/0/1 on the CE is connected to the Internet. The CE needs to distribute received packets
with the source IP address on 192.168.1.0/24 to 10GE1/0/2 and discard other packets.
<HUAWEI> system-view
[~HUAWEI] acl 3000 //Create an ACL to match packets with the source IP address
on 192.168.1.0/24.
[*HUAWEI-acl4-advance-3000] rule permit ip source 192.168.1.0 0.0.0.255
[*HUAWEI-acl4-advance-3000] quit
[*HUAWEI] traffic classifier redirect1
[*HUAWEI-classifier-redirect1] if-match acl 3000
[*HUAWEI-classifier-redirect1] quit
[*HUAWEI] traffic behavior redirect1
[*HUAWEI-behavior-redirect1] redirect interface 10ge 1/0/2
[*HUAWEI-behavior-redirect1] quit
[*HUAWEI] traffic classifier redirect2
[*HUAWEI-classifier-redirect2] if-match any //Configure a matching rule to match
all packets.
[*HUAWEI-classifier-redirect2] quit
[*HUAWEI] traffic behavior redirect2
[*HUAWEI-behavior-redirect2] deny
[*HUAWEI-behavior-redirect2] quit
[*HUAWEI] traffic policy redirect //Create a traffic policy and bind traffic
classifiers and traffic behaviors to the traffic policy.
[*HUAWEI-trafficpolicy-redirect] classifier redirect1 behavior redirect1
precedence 5 //The traffic classifier that references ACL 3000 has a higher
priority, so this traffic classifier is first matched.
[*HUAWEI-trafficpolicy-redirect] classifier redirect2 behavior redirect2
precedence 10
[*HUAWEI-trafficpolicy-redirect] quit
[*HUAWEI] interface 10ge 1/0/1
[*HUAWEI-10GE1/0/1] traffic-policy redirect inbound

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 768

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

[*HUAWEI-10GE1/0/1] quit
[*HUAWEI] commit

22.56.6 How Do I Check Statistics on Packets Matching ACL

Rules When a Traffic Policy Containing ACL Rules and
Redirection Is Applied to a CE12800 and 12800E?
When ACL-based MQC and ACL-based simplified traffic policy are configured on a
CE12800 and 12800E, disable traffic statistics and then run the display acl hardware
statistics command to check statistics on packets matching ACL rules.
The display acl all command cannot display statistics on packets that match ACL rules in
MQC and the ACL-based simplified traffic policy.
<HUAWEI> display acl all
Total nonempty ACL number is 1

Advanced ACL 3000, 1 rule

ACL's step is 5
rule 5 permit ip dscp cs1 (0 times matched)

0 times matched indicates the number of times software ACL rules match services.
l Packets of FTP, TFTP, Telnet, SNMP, HTTP, routing, and multicast are sent to the CPU
and match software ACL rules. You can use the display acl all command to check the
number of times packets match ACL rules.
l When ACL-based MQC and ACL-based simplified traffic policy are configured on a
CE12800 and 12800E, packets are forwarded through the hardware and match hardware
ACL rules. The display acl hardware statistics command is used to check statistics on
packets matching hardware ACL rules. In addition, you must first use the statistics
enable command in the traffic behavior view to enable traffic statistics and the traffic-
statistics command in the interface, system, VLAN, or QoS group view to enable traffic
statistics of simplified traffic policy.

22.56.7 How Do I Apply a Traffic Policy to a VLANIF Interface to

Allow only TCP Packets in ESTABLISHED State to Pass
Through?
NOTE

Only the CE12800E equipped with FD-X series cards, CE6850HI, CE6850U-HI, CE6851HI,
CE6855HI, CE6856HI, CE6857EI, CE6860EI, CE6865EI, CE7850EI, CE7855EI, CE8850EI,
CE8861EI, CE8868EI, and CE8860EI support this mode.

Networking Requirements
You want to apply a traffic policy to allow only TCP packets in ESTABLISHED state to be
sent from VLANIF 30 to VLANIF 150 and discard other packets sent in this direction.
Procedure
1. Configure the traffic classifiers c1, c2, and c3.
<HUAWEI> system-view
[~HUAWEI] acl 3000
[*HUAWEI-acl4-advance-3000] rule permit tcp tcp-flag established // Match
TCP packets in ESTABLISHED state.
[*HUAWEI-acl4-advance-3000] quit
[*HUAWEI] traffic classifier c1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 769

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

[*HUAWEI-classifier-c1] if-match acl 3000

[*HUAWEI-classifier-c1] quit
[*HUAWEI] traffic classifier c2
[*HUAWEI-classifier-c2] if-match vlan 30 // Match
packets in VLAN 30.
[*HUAWEI-classifier-c2] quit
[*HUAWEI] traffic classifier c3
[*HUAWEI-classifier-c3] if-match qos-local-id 1 // Match
packets with the local ID set to 1.
[*HUAWEI-classifier-c3] quit
[*HUAWEI] commit

2. Configure traffic behaviors b1, b2, and b3.

[~HUAWEI] traffic behavior b1
[*HUAWEI-behavior-b1] permit // Allow
packets to pass through.
[*HUAWEI-behavior-b1] quit
[*HUAWEI] traffic behavior b2
[*HUAWEI-behavior-b2] remark qos-local-id 1 // Re-mark
the local ID as 1.
[*HUAWEI-behavior-b2] quit
[*HUAWEI] traffic behavior b3
[*HUAWEI-behavior-b3] deny // Discard
packets.
[*HUAWEI-behavior-b3] quit
[*HUAWEI] commit

3. Configure traffic policies p1 and p2.

[~HUAWEI] traffic policy p1
[*HUAWEI-trafficpolicy-p1] classifier c1 behavior b1 precedence 1 // Allow
TCP packets in ESTABLISHED state to pass through.
[*HUAWEI-trafficpolicy-p1] classifier c2 behavior b2 precedence 5 // Re-mark
the QoS local ID as 1 for packets that do not match c1 in VLAN 30.
[*HUAWEI-trafficpolicy-p1] quit
[~HUAWEI] traffic policy p2
[*HUAWEI-trafficpolicy-p2] classifier c3 behavior b3 // Discard
packets with the local ID set to 1.
[*HUAWEI-trafficpolicy-p2] quit
[*HUAWEI] commit

4. Apply the traffic policy p1 in the inbound direction of VLANIF 30.

[~HUAWEI] interface Vlanif 30
[~HUAWEI-Vlanif30] traffic-policy p1 inbound
[*HUAWEI] commit

5. Apply the traffic policy p2 in the outbound direction of VLANIF 150.

[~HUAWEI] interface Vlanif 150
[~HUAWEI-Vlanif150] traffic-policy p2 outbound
[*HUAWEI] commit

22.57 IP Multicast

22.57.1 What Multicast Features Do CloudEngine Series Switches

Support?
CloudEngine series switches support the following multicast features.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 770

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Internet Group Management Protocol (IGMP)

Table 22-97 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R006C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 771

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5880EI V200R005C10

Multicast Listener Discovery (MLD)

Table 22-98 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI V100R002C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 772

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5850EI V100R002C00

CE5850HI V100R003C00

IPv4 Protocol Independent Multicast (PIM)

Table 22-99 Minimum version supporting PIM-SM

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 773

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R006C00

CE5880EI V200R005C10

Table 22-100 Minimum version supporting Bidir-PIM

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 774

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI/CE5850EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R006C00

Table 22-101 Minimum version supporting PIM-DM

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816/ V100R006C00
CE12804S/CE12808S

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R006C00

CE7855EI V200R001C00

CE6810EI/CE6850EI/CE6850HI/ V100R006C00
CE6850U-HI/CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI/CE5850EI/CE5855EI/CE5850HI V100R006C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 775

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5880EI V200R005C10

IPv6 PIM

Table 22-102 Minimum version supporting PIM-SM (IPv6)

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI V100R002C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 776

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5850EI V100R002C00

CE5850HI V100R003C00

Table 22-103 Minimum version supporting Bidir-PIM (IPv6)

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI/CE6850EI V100R003C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI/CE5850EI/CE5850HI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 777

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Multicast Source Discovery Protocol (MSDP)

Table 22-104 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R006C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 778

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE5880EI V200R005C10

Multicast VPN

Table 22-105 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816/ V100R005C10
CE12804S/CE12808S

IPv4 Multicast Route Management

Table 22-106 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 779

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R006C00

CE5880EI V200R005C10

IPv6 Multicast Route Management

Table 22-107 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 780

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI V100R002C00

CE5850EI V100R002C00

CE5850HI V100R003C00

Internet Group Management Protocol Snooping (IGMP Snooping)

Table 22-108 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810-48S4Q-LI/CE6810-48S-LI V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI V100R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 781

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R005C10

CE5880EI V200R005C10

MLD Snooping (Multicast Listener Discovery Snooping)

Table 22-109 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816/ V200R002C50
CE12804S/CE12808S

CE12800E configured with FD-X series V200R005C00

cards

CE8861EI/CE8868EI V200R005C10

CE8860EI V200R002C50

CE8850-32CQ-EI V200R002C50

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 782

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE8850-64CQ-EI V200R005C00

CE7850EI/CE7855EI V200R002C50

CE6810LI/CE6810EI/CE6850EI/ V200R002C50
CE6850HI/CE6850U-HI/CE6851HI/
CE6855HI/CE6856HI/CE6860EI/
CE6870-24S6CQ-EI/CE6870-48S6CQ-EI

CE6857EI V200R005C10

CE6865EI V200R005C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE5810EI/CE5850EI/CE5850HI V200R002C50

Static Multicast MAC Address

Table 22-110 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6810-48S4Q-LI/CE6810-48S-LI V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI V100R005C10

CE6810EI V100R003C00

CE6850EI V100R001C00

CE6850-48S6Q-HI V100R005C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 783

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R001C00

CE5850HI V100R003C00

CE5855EI V100R005C10

CE5880EI V200R005C10

Multicast VLAN

Table 22-111 Minimum version supporting this feature

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E V200R002C50

CE8861EI/CE8868EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 784

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE7855EI V200R001C00

CE6810EI V100R003C00

CE6850EI V100R002C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875EI V200R003C00

CE6880EI V200R002C50

CE5810EI V100R002C00

CE5850EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R005C10

CE5880EI V200R005C10

22.57.2 How Do I Configure Multiple Static RPs on a Multicast

Network?
You can run either of the following commands to configure static RPs and specify ACLs in
the commands to define different group address ranges that the static RPs serve.
l On an IPv4 network: run static-rp rp-address [ basic-acl-number | acl-name acl-name ]
[ preferred ] [ bidir ]. (The bidir keyword is supported in V100R002C00 and later
versions.)
l On an IPv6 network: run static-rp rp-address [ basic-acl6-number | acl6-name acl6-
name ] [ preferred ] [ bidir ]. (The bidir keyword is supported in V100R003C00 and
later versions.)

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 785

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

NOTE

If you do not specify an ACL or specify an ACL with no rules configured in the preceding commands, only
one static RP can be configured, and the static RP serves all the multicast groups. If you specify an ACL with
rules configured, the configured static RP serves only the multicast groups that match the ACL.
If both static and dynamic RPs are configured, which type of RP takes effect depends on the preferred
keyword in the preceding commands. If the preferred keyword is not specified, the dynamic RP takes
precedence over the static RP. If this keyword is specified, the static RP takes precedence over the dynamic
RP.
If the bidir keyword is not specified, the configured static RP serves only the Protocol Independent Multicast
Sparse Mode (PIM-SM) network. If this keyword is specified, the configured static RP serves only the
Bidirectional PIM (Bidir-PIM) network.
To enable static RPs to function normally, perform the same static-rp configuration on all the devices in a
PIM domain.

# On an IPv4 PIM-SM network, specify different static RPs for group addresses in different
ranges and ensure that the static RPs are preferred.
<HUAWEI> system-view
[~HUAWEI] acl number 2001
[*HUAWEI-acl4-basic-2001] rule permit source 225.1.0.0 0.0.255.255
[*HUAWEI-acl4-basic-2001] quit
[*HUAWEI] acl number 2002
[*HUAWEI-acl4-basic-2002] rule permit source 226.1.0.0 0.0.255.255
[*HUAWEI-acl4-basic-2002] quit
[*HUAWEI] multicast routing-enable
[*HUAWEI] pim
[*HUAWEI-pim] static-rp 10.10.10.1 2001 preferred //Specify 10.10.10.1 as a
static RP and configure it to serve only groups in the range of 225.1.0.0/16.
[*HUAWEI-pim] static-rp 10.10.20.1 2002 preferred //Specify 10.10.20.1 as a
static RP and configure it to serve only groups in the range of 226.1.0.0/16.
[*HUAWEI-pim] quit
[*HUAWEI] commit

# On an IPv6 Bidir-PIM network, specify different static RPs for group addresses in different
ranges and ensure that the static RPs are preferred.
<HUAWEI> system-view
[~HUAWEI] acl ipv6 name rp1
[*HUAWEI-acl6-advance-rp1] rule permit ipv6 destination ff03::101 128
[*HUAWEI-acl6-advance-rp1] quit
[*HUAWEI] acl ipv6 name rp2
[*HUAWEI-acl6-advance-rp2] rule permit ipv6 destination ff04::101 128
[*HUAWEI-acl6-advance-rp2] quit
[*HUAWEI] multicast ipv6 routing-enable
[*HUAWEI] pim ipv6
[*HUAWEI-pim6] bidir-pim //Enable Bidir-PIM.
[*HUAWEI-pim6] static-rp fc00:10::1 acl6-name rp1 preferred bidir //Specify
fc00:10::1 as a static RP and configure it to serve only group ff03::101.
[*HUAWEI-pim6] static-rp fc00:20::1 acl6-name rp2 preferred bidir //Specify
fc00:20::1 as a static RP and configure it to serve only group ff04::101.
[*HUAWEI-pim6] quit
[*HUAWEI] commit

22.57.3 How Do I Change the Aging Time of Multicast Traffic

Triggered Entries in a VLAN?
If no multicast data is sent to a multicast group, matching (S, G) or (*, G) entries need to be
deleted. Therefore, the device needs to periodically detect presence of multicast flows sent to
the multicast group to determine whether to delete the matching entry. You can use the
multicast layer-2 source-lifetime lifetime command to set the aging time of multicast traffic
triggered entries in a VLAN. If the device does not receive multicast data sent to a group
within the aging time, the device deletes the corresponding (S, G) or (*, G) entry. The aging
time enables the device to update multicast entries and release entry resources in a timely
manner.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 786

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

By default, the aging time of a multicast traffic triggered entry in a VLAN is 210 seconds.
You can set a proper aging time for (S, G) or (*, G) entries according to the number of
multicast entries used on your network. If a large number of multicast entries are used on your
network, a too short aging time will make the multicast forwarding table incomplete.
However, if the aging time is too long, invalid entries will be retained for a long time, wasting
system resources. The following table lists the recommended aging time values for different
quantities of multicast entries.
Number of Entries Recommended Aging Time

Within 1000 Default value

1000 to 2000 1000 seconds

2000 to 8000 2000 seconds

More than 8000 3000 seconds or 4000 seconds

The following example sets the aging time of multicast traffic triggered entries to 1000
seconds in VLAN 100.
<HUAWEI> system-view
[~HUAWEI] igmp snooping enable
[*HUAWEI] vlan 100
[*HUAWEI-vlan100] igmp snooping enable
[*HUAWEI-vlan100] multicast layer-2 source-lifetime 1000
[*HUAWEI-vlan100] commit

22.57.4 Why No Reporter Information Is Displayed in the display

igmp group Command Output?
If the display igmp group does not display any reporter information, the specified group has
no group members.
Normally, after users join a group dynamically by sending IGMP Report messages, the
display igmp group command can display IGMP group information. The following is an
example:
<HUAWEI> display igmp group
Interface group report information of VPN instance: public net
Vlanif100(10.1.6.2):
Total 1 IGMP Group reported
Group Address Last Reporter Uptime Expires
225.1.1.2 10.1.6.10 00:02:04 00:01:17

In the command output, Group Address indicates the IP address of the group that users have
joined, and Last Reporter indicates the last host that has sent an IGMP Report message for
the group.

22.57.5 Do VSs Support Multicast Functions?

Among all VSs in port mode, only the admin-VS supports multicast configuration. All VSs in
group mode support multicast configuration.

22.58 MPLS

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 787

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.58.1 Does MPLS Require the License?

The MPLS function is a basic feature of the CE6850HI, CE6851HI, CE6850U-HI,
CE6855HI, CE6856HI, CE6857EI, CE6860EI, CE6865EI, CE6870EI, CE6875EI, CE7850EI,
CE7855EI, CE8850EI, CE8860EI, CE8861EI, CE8868EI switches and is not under license
control.

The MPLS function of the CE12800 is controlled by the license. By default, the MPLS
function is disabled on a newly purchased device. To use the MPLS function, apply for and
purchase the license from the equipment supplier.

22.58.2 Do Layer 3 Sub-interfaces Support MPLS?

Starting from V200R002C50, Layer 3 sub-interfaces on switches excluding the CE6857EI,
CE6865EI, CE8861EI and CE8868EI support MPLS.

22.58.3 Why Does the Switch Allocate MPLS Labels Only to

Routes with 32-Bit Masks?
After MPLS LDP is enabled, LSPs are set up automatically, leading to a waste of resources.
To prevent resource waste, the system triggers LSP setup according to host IP routes
(excluding direct routes) with 32-bit masks by default.

You can also run the lsp-trigger { all | host | ip-prefix ip-prefix-name | none } command to
modify an LSP setup triggering policy based on actual needs.

22.58.4 Do CE Series Switches Support MPLS?

The CE12800 supports MPLS LDP, MPLS QoS, MPLS TE, and SR-TE.

The CE8800, CE7800, CE6800, and CE5800 support MPLS LDP and MPLS QoS.

The following tables describe the products and minimum version supporting MPLS features.

Table 22-112 Products and minimum version supporting MPLS LDP and MPLS QoS
Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE6850-48S6Q-HI V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V100R005C10
CE6851HI

CE6855HI V200R001C00

CE6856HI V200R002C50

CE6857EI V200R005C10

CE6860EI V200R002C50

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 788

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6865EI V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6875-48S4CQ-EI V200R003C00

CE7850EI V100R003C10

CE7855EI V200R001C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE8860EI V100R006C00

CE8861EI V200R005C10

CE8868EI V200R005C10

Table 22-113 Products and minimum version supporting MPLS TE

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-114 Products and minimum version supporting SR-TE

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816/ V200R002C50
CE12804S/CE12808S

22.59 VPN

22.59.1 Do CE Series Switches Support VPN?

The CE12800 supports GRE, BGP/MPLS IP VPN, BGP/MPLS IPv6 VPN, VLL, PWE3, and
VPLS.
The CE12800E supports MCE. The CE12800E configured with FD-X series cards supports
GRE.
The CE8800&CE7800&CE6800&CE5800 support GRE, MCE, IPv6 MCE, and VPLS. In
V200R002C50 and later versions, the CE8860EI, CE8850EI, CE7850EI, CE7855EI,

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 789

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

CE6870EI, CE6860EI, CE6856HI, CE6855HI, CE6851HI, CE6850HI, and CE6850U-HI

support BGP/MPLS IP VPN. In V200R005C00 and later versions, the CE8850EI, CE8860EI,
CE7850EI, CE7855EI, CE6870EI, CE6875EI, CE6860EI, CE6856HI, CE6855HI, CE6850U-
HI, CE6851HI, and CE6850HI support VPLS, the CE6865EI supports BGP/MPLS IP VPN
and VPLS. In V200R005C10 and later versions, the CE6857EI, CE8868EI, and CE8861EI
support BGP/MPLS IP VPN and VPLS.

The following tables describe the products and minimum version supporting VPN features.

Table 22-115 Products and minimum version supporting GRE (CE12800&12800E)

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E (configured with FD-X series V200R005C00

cards)

Table 22-116 Products and minimum version supporting GRE (CE8800&7800&6800&5800)

Product Minimum Version Required

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6850EI/CE6810EI V100R003C00

CE6850HI V100R005C00

CE6850U-HI/CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 790

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE6857EI V200R005C10

CE5850EI/CE5810EI/CE5850HI V100R003C00

Table 22-117 Products and minimum version supporting BGP/MPLS IP VPN (CE12800)
Product Minimum Version Required

CE12804/CE12808/CE12812 V100R001C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-118 Products and minimum version supporting BGP/MPLS IP VPN

(CE8800&7800&6800&5800)
Product Minimum Version Required

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V200R002C50

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V200R002C50

CE7855EI V200R002C50

CE6870EI V200R002C50

CE6860EI V200R002C50

CE6856HI V200R002C50

CE6855HI V200R002C50

CE6851HI V200R002C50

CE6850HI V200R002C50

CE6850U-HI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 791

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-119 Products and minimum version supporting BGP/MPLS IPv6 VPN (CE12800)

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R003C00
V100R002C00 supports only IPv6 MCE.

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-120 Products and minimum version supporting BGP/MPLS IPv6 VPN
(CE8800&7800&6800&5800)

Product Minimum Version Required

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V200R005C00

CE8850-32CQ-EI V200R005C00

CE8850-64CQ-EI V200R005C00

CE7850EI V200R005C00

CE7855EI V200R005C00

CE6870EI V200R005C00

CE6860EI V200R005C00

CE6856HI V200R005C00

CE6855HI V200R005C00

CE6851HI V200R005C00

CE6850HI V200R005C00

CE6850U-HI V200R005C00

CE6875EI V200R005C00

CE6865EI V200R005C00

CE6857EI V200R005C10

Table 22-121 Products and minimum version supporting MCE

Product Minimum Version Required

CE12800E V200R002C50

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 792

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6850EI V100R001C00

CE6850HI V100R005C00

CE6810EI V100R003C00

CE6850U-HI/CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6880EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

CE5880EI V200R005C10

CE5850EI V100R001C00

CE5810EI V100R002C00

CE5850HI V100R003C00

CE5855EI V100R006C00

Table 22-122 Products and minimum version supporting IPv6 MCE

Product Minimum Version Required

CE8868EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 793

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE8861EI V200R005C10

CE8860EI V100R006C00

CE8850-32CQ-EI V200R002C50

CE8850-64CQ-EI V200R005C00

CE7850EI V100R003C00

CE7855EI V200R001C00

CE6850EI V100R002C00

CE6850HI V100R005C00

CE6810EI V100R003C00

CE6850U-HI/CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

CE5850EI/CE5810EI V100R002C00

CE5850HI V100R003C00

Table 22-123 Products and minimum version supporting VLL

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-124 Products and minimum version supporting PWE3

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 794

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE12804S/CE12808S V100R005C00

Table 22-125 Products and minimum version supporting VPLS (CE12800)

Product Minimum Version Required

CE12804/CE12808/CE12812 V100R002C00

CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

Table 22-126 Products and minimum version supporting VPLS

(CE8800&7800&6800&5800)
Product Model Minimum Version Required

CE6850-48S6Q-HI V200R005C00

CE6850-48T6Q-HI/CE6850U-HI/ V200R005C00
CE6851HI

CE6855HI V200R005C00

CE6856HI V200R005C00

CE6860EI V200R005C00

CE6865EI V200R005C00

CE6857EI V200R005C10

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R005C00

CE6870-48T6CQ-EI V200R005C00

CE6875-48S4CQ-EI V200R005C00

CE7850EI V200R005C00

CE7855EI V200R005C00

CE8850-32CQ-EI V200R005C00

CE8850-64CQ-EI V200R005C00

CE8860EI V200R005C00

CE8868EI V200R005C10

CE8861EI V200R005C10

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 795

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.59.2 How Is the IP Address of a VPN Instance Pinged?

When performing the ping operation, specify -vpn-instance vpn-instance-name.
# Ping the IPv4 address of a VPN instance.
<HUAWEI> ping -vpn-instance vpna 10.1.1.2

# Ping the IPv6 address of a VPN instance.

<HUAWEI> ping ipv6 vpn-instance vpna FC00::1

22.59.3 Do CE Series Switches Support L2TP?

CE series switches do not support L2TP.

22.59.4 Does VPN Require the License?

The CE12800 supports GRE, BGP/MPLS IP VPN, BGP/MPLS IPv6 VPN, VLL, PWE3, and
VPLS. CE12800E supports MCE only.
The CE8800&CE7800&CE6800&CE5800 support GRE, MCE, IPv6 MCE, and VPLS.
CE6880EI and CE5880EI support MCE only. In V200R002C50 and later versions, the
CE8860EI, CE7850EI, CE7855EI, CE6870EI, CE6860EI, CE6856HI, CE6855HI,
CE6851HI, CE6850HI, and CE6850U-HI support BGP/MPLS IP VPN. In V200R003C00
and later versions, the CE6875EI supports BGP/MPLS IP VPN. In V200R005C00 and later
versions, the CE8850EI, CE8860EI, CE7850EI, CE7855EI, CE6870EI, CE6875EI,
CE6860EI, CE6856HI, CE6855HI, CE6850U-HI, CE6851HI, and CE6850HI support VPLS,
the CE6865EI supports BGP/MPLS IP VPN and VPLS. In V200R005C10 and later versions,
the CE6857EI, CE8868EI, and CE8861EI support BGP/MPLS IP VPN and VPLS.
For CE12800 switches:
l GRE is a basic feature of a switch and is not under license control.
l You can use the BGP/MPLS IP VPN and BGP/MPLS IPv6 VPN feature only after the
MPLS function is enabled. The MPLS function is controlled by a license. By default,
MPLS is disabled on a new device. To use the MPLS function, apply for and purchase
the license from the equipment supplier. You can use the MCE function independently
without the need to enable MPLS, and MCE is not under license control.
l You can use the VLL, VPLS, and PWE3 feature only after the MPLS function is
enabled. The MPLS function is controlled by a license. By default, MPLS is disabled on
a new device. To use the MPLS function, apply for and purchase the license from the
equipment supplier.
For CE12800E switches:
MCE is a basic feature of a switch and is not under license control.
For CE8800, CE7800, CE6800, and CE5800 switches:
l GRE is a basic feature of a switch and is not under license control.
l You can use the BGP/MPLS IP VPN feature only after the MPLS function is enabled.
MPLS is a basic feature of switches and is not under license control.
l MCE is a basic feature of a switch and is not under license control.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 796

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

l You can use the VPLS feature only after the MPLS function is enabled. MPLS is a basic
feature of switches and is not under license control.

22.59.5 What is VPN Target in VPN Instances?

A VPN target, also called the route target (RT), is a BGP extension community attribute.
BGP/MPLS IP VPN uses VPN targets to control VPN routes advertisement.

A VPN instance is associated with one or more VPN target attributes. VPN target attributes
are classified into the following types:

l Export target: After a PE device learns IPv4 routes from directly connected sites, it
converts the routes to VPN-IPv4 routes and sets the export target attribute for those
routes. The export target attribute is advertised with the routes as a BGP extended
community attribute.
l Import target: After a PE device receives VPN-IPv4 routes from other PE devices, it
checks the export target attribute of the routes. If the export target is the same as the
import target of a VPN instance on the local PE device, the local PE device adds the
route to the VPN routing table.

BGP/MPLS IP VPN uses VPN targets to control advertisement and receiving of VPN routes
between sites. VPN export targets are independent of import targets. An export target and an
import target can be configured with multiple values to implement flexible VPN access
control and VPN networking.

For example, if the import target of a VPN instance contains 100:1, 200:1, and 300:1, any
route with the export target of 100:1, 200:1, or 300:1 is added to the routing table of the VPN
instance.

22.59.6 How Is GRE Interworking Implemented on a CE Series

Switch and a Cisco Switch?

A CE series switch can interwork with a Cisco switch through GRE, and they support the
Keepalive function of a GRE tunnel. The configuration example is as follows (basic
configurations including routing are not provided):

Tunnel interface configuration on a Cisco switch:

interface Loopback0
ip address 1.1.1.1 255.255.255.255
interface Tunnel1
ip address 3.1.1.2 255.255.255.0
keepalive 10 3
tunnel source Loopback0
tunnel destination 2.2.2.2

Tunnel interface configuration on a CE series switch:

interface Tunnel1
ip address 3.1.1.1 255.255.255.0
tunnel-protocol gre //The tunnel interface on a Cisco switch uses GRE by
default.
keepalive period 10 //The minimum Keepalive period on a Cisco switch is 10s.
source 2.2.2.2
destination 1.1.1.1

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 797

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.59.7 After a CE Series Switch Interworks with a Cisco Switch

Through GRE, the Tunnel Interface Alternates Between Up and
Down Frequently. How Is This Problem Solved?

1. Check whether the route for establishing a tunnel interface is valid. If the route is invalid,
troubleshoot the route problem.
2. For the tunnel interface configured with the Keepalive function, check the traffic and
CPU usage of the tunnel interface on the Cisco switch. Traffic on the tunnel interface of
an old Cisco switch is forwarded by the CPU. If there is heavy traffic, Keepalive packets
cannot be forwarded normally. As a result, the tunnel interface becomes Down.
SW8-Cisco#show processes cpu | exclude 0.00%
CPU utilization for five seconds: 69%/29%; one minute: 71%; five minutes:
77%

PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY

Process
69 19200 795133 24 0.15% 0.17% 0.24% 0 Fifo Error
Detec
99 6882 155468 44 0.15% 0.03% 0.04% 0 hpm main
process
207 5865876 6447738 909 34.08% 33.99% 39.39% 0 IP Input //If
this process occupies high CPU, disable the Keepalive function on both tunnel
interfaces. If the tunnel interfaces are stable, they cannot normally forward
Keepalive packets become the traffic volume is high. In this case, the tunnel
interfaces will go Down.

22.59.8 Do CE Series Switches Support GRE?

The following table lists products and minimum version supporting GRE.

Table 22-127 Products and minimum version supporting GRE (CE12800)

Product Minimum Version Required

CE12804/CE12808/CE12812/CE12816 V100R003C00

CE12804S/CE12808S V100R005C00

CE12800E (configured with FD-X series V200R005C00

cards)

Table 22-128 Products and minimum version supporting GRE

(CE8800&CE7800&CE6800&CE5800)
Product Minimum Version Required

CE8868EI V200R005C10

CE8861EI V200R005C10

CE8860EI V100R006C00

CE7850EI V100R003C00

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 798

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Product Minimum Version Required

CE7855EI V200R001C00

CE6850EI/CE6810EI V100R003C00

CE6850HI V100R005C00

CE6850U-HI/CE6851HI V100R005C10

CE6855HI V200R001C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI V200R001C00

CE6870-48T6CQ-EI V200R002C50

CE6856HI V200R002C50

CE6860EI V200R002C50

CE6875EI V200R003C00

CE6865EI V200R005C00

CE6857EI V200R005C10

CE5850EI/CE5810EI/CE5850HI V100R003C00

22.60 IP Unicast Routing

22.60.1 Do CE Series Switches Support GR and NSR? Do Routing

Protocols Flap upon an Active/Standby Switchover?
CE series switches support the non-stop routing (NSR) function. When they perform an
active/standby switchover, the routing protocols do not flap.

NOTE

NSR is enabled on the device by default and does not need to be configured.

Support for graceful restart (GR) of CE series switches varies according to the routing
protocols:
l The Routing Information Protocol (RIP) does not support GR.
l The Open Shortest Path First (OSPF), Intermediate System to Intermediate System (IS-
IS), and Border Gateway Protocol (BGP) do not support the GR restarter function
(replaced by NSR), but support the GR helper function.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 799

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

Table 22-129 Impacts of GR and NSR on the network upon an active/standby switchover
Active/Standby Active/Standby Active/Standby
Switchover Without GR Switchover with GR Switchover with NSR
or NSR

Neighbor relationships are Neighbor relationships are Neighbor relationships are

re-established. re-established. re-established.

Routes are re-calculated. Routes are re-calculated. Routes are re-calculated.

The forwarding table The forwarding table The forwarding table

changes. remains unchanged. remains unchanged.

Packets are lost during No packet is lost during No packet is lost during
forwarding and services are forwarding and services are forwarding and services are
interrupted. not affected. not affected.

The entire network detects Except the neighbors of The entire network does not
route changes and route devices that perform the detect route changes.
flapping occurs for a short active/standby switchover,
period of time. other routers do not detect
route changes.

- The GR restarter requires Neighbors are not required

neighbors to support the GR to support NSR.
helper function. The GR
helper function does not
allow multiple neighbors to
perform active/standby
switchovers in GR mode
simultaneously.

22.60.2 The load-balance profile cl Command Is Configured to

Enable Local Traffic Preferential Forwarding in a CE12800 Stack.
Where cl in the Command Needs to Be Invoked?
By default, the local traffic preferential forwarding function is disabled on the CE12800. It
can be enabled using a command. An example is as follows:
# Enable local traffic preferential forwarding in load balancing profile cl.
<HUAWEI> system-view
[~HUAWEI] load-balance profile cl
[*HUAWEI-load-balance-profile-cl] ecmp local-preference enable
[*HUAWEI-load-balance-profile-cl] commit

l You can run the load-balance profile profile-name command to create a global load
balancing profile and enter the load balancing profile view. Parameter profile-name
specifies a profile name and does not need to be invoked.
By default, there is a load balancing profile named default. The CE12800 supports only
one load balancing profile.
l You can run the display load-balance profile profile-name command to view detailed
information about a specified load balancing profile. If you run the load-balance profile

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 800

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

profile-name command to specify a profile name different from that of the existing load
balancing profile, the profile is renamed and the configuration in the profile remains
unchanged.

22.60.3 How Can I Configure the CE Series Switches to Ignore the

Destination MAC Address of Packets for Layer 3 Forwarding?
During network maintenance, traffic is often mirrored and then forwarded to a specific device
for analysis. In most cases, a device forwards only packets whose destination MAC address is
the local Layer 3 interface's MAC address according to routes, and forwards other packets at
Layer 2 or discards other packets. If necessary, the device can also forward other packets at
Layer 3 after it is configured to ignore the destination MAC address of packets.
# Configure the device to ignore the destination MAC address of packets.
Only the CE12800, CE6870EI and CE6875EI support this configuration.
<HUAWEI> system-view
[~HUAWEI] ip routing ignore-mac
[*HUAWEI] commit

22.60.4 What Are Differences Between the Internal and External

Preferences of a Router?
Routers define external preference and internal preference. Value 0 indicates direct routes and
value 255 indicates routes learned from unreliable sources. A smaller value indicates a higher
preference. External preferences are manually configured for routing protocols. Table 22-130
lists the default external preferences of routing protocols.

Table 22-130 Routing protocols and their default external preferences

Routing Protocol or Default External Preference
Route Type

Direct 0

OSPF 10

IS-IS 15

Static 60

RIP 100

OSPF ASE 150

OSPF NSSA 150

IBGP 255

EBGP 255

NOTE

Except the CE6810LI, other CE series switches in V100R006C00 and later versions allow users to
manually configure the preference of direct routes. In addition, the preference of each static route varies.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 801

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

During route selection, the device first compares the external preferences of routes. When the
same external preference is set for different routing protocols, the device selects the optimal
route based on the internal preference. Internal preferences of routing protocols cannot be
manually configured. Table 22-131 lists the internal preferences of routing protocols.

Table 22-131 Internal preferences of routing protocols

Routing Protocol or Route Internal Preference
Type

Direct 0

OSPF 10

IS-IS Level-1 15

IS-IS Level-2 18

Static 60

RIP 100

OSPF ASE 150

OSPF NSSA 150

IBGP 200

EBGP 20

22.60.5 Why OSPF Routes Cannot Be Viewed After BGP Imports

the OSPF Routes Between CE Series Switches?
This problem is caused by routing policy-based filtering. In the routing policy, the network
segment to be re-advertised is not added to the IP prefix list. As a result, imported OSPF
routes cannot be queried in the routing table.

22.60.6 Why External Routes Imported by OSPF on CE Series

Switches Cannot Be Viewed in the Routing Table?
This problem is caused by routing loop detection. By default, routing loop detection is
enabled on CE switches. When OSPF VPN multi-instance is deployed on a Multi-VPN-
Instance CE (MCE) device, and DN Bit is set in Type 3, Type 5, or Type 7 LSAs,
corresponding routes cannot be calculated and viewed in the routing table because routing
loop detection will be performed during OSPF route calculation. To address this problem, run
the vpn-instance-capability simple command on the MCE to disable routing loop detection
in the OSPF instance.

22.60.7 Can CE Series Switches Establish an OSPF Neighbor

Relationship Using Secondary IP Addresses?
CE series switches cannot establish an OSPF neighbor relationship using secondary IP
addresses.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 802

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800
Series Switches
Troubleshooting Guide 22 FAQs

22.60.8 Do CE8800&7800&6800&5800 Series Switches Support

OSPF and OSPFv3?
OSPF is a basic feature of CE8800&7800&6800&5800 series switches except the CE6810LI
and is not under license control.
OSPFv3 is a basic feature of CE8800&7800&6800&5800 series switches except the
CE6810LI and CE5855EI and is not under license control.
l The CE6810LI does not support IPv4 or IPv6 Layer 3 forwarding. After the IPv4 or IPv6
function is enabled on an interface of the CE6810LI, the configured IPv4 or IPv6 address
can only be used to manage the switch.
l In V200R001C00 and earlier versions, the CE5855EI does not support IPv6. However,
interfaces on a CE5855EI provide the IPv6 capability when the switch functions as a leaf
switch in a super virtual fabric (SVF) system and the SVF forwarding mode is set to
centralized or hybrid. In V200R002C50 and later versions, the CE5855EI supports IPv6.

22.60.9 Do CE Series Switches Support Association Between

Static Routes and NQA?
CE series switches except the CE6810LI support association between static routes and NQA.
To specify the administrator name of the NQA test instance associated with the specified
static route and specify the NQA test instance name, run the ip route-static ip-address { mask
| mask-length } { nexthop-address | vpn-instance vpn-instance-name nexthop-address } track
nqa admin-name test-name command.

Issue 09 (2019-03-05) Copyright © Huawei Technologies Co., Ltd. 803