- Table of Contents
-
- H3C S3600 Series Ethernet Switches Operation Manual-Release 1510(V1.04)
- 00-1Cover
- 00-2Product Overview
- 01-CLI Operation
- 02-Login Operation
- 03-Configuration File Management Operation
- 04-VLAN Operation
- 05-IP Address and Performance Configuration Operation
- 06-Management VLAN Operation
- 07-Voice VLAN Operation
- 08-GVRP Operation
- 09-Port Basic Configuration Operation
- 10-Link Aggregation Operation
- 11-Port Isolation Operation
- 12-Port Security-Port Binding Operation
- 13-DLDP Operation
- 14-MAC Address Table Operation
- 15-Auto Detect Operation
- 16-MSTP Operation
- 17-Routing Protocol Operation
- 18-Multicast Operation
- 19-802.1x Operation
- 20-AAA-RADIUS-HWTACACS-EAD Operation
- 21-VRRP Operation
- 22-Centralized MAC Address Authentication Operation
- 23-ARP Operation
- 24-DHCP Operation
- 25-ACL Operation
- 26-QoS-QoS Profile Operation
- 27-Web Cache Redirection Operation
- 28-Mirroring Operation
- 29-IRF Fabric Operation
- 30-Cluster Operation
- 31-PoE-PoE Profile Operation
- 32-UDP Helper Operation
- 33-SNMP-RMON Operation
- 34-NTP Operation
- 35-SSH Terminal Service Operation
- 36-File System Management Operation
- 37-FTP and TFTP Operation
- 38-Information Center Operation
- 39-System Maintenance and Debugging Operation
- 40-VLAN-VPN Operation
- 41-HWPing Operation
- 42-DNS Operation
- 43-Access Management Operation
- 44-Appendix
- Related Documents
-
Title | Size | Download |
---|---|---|
38-Information Center Operation | 274 KB |
1.1 Information Center Overview
1.2 Information Center Configuration.
1.2.1 Enabling Synchronous Terminal Output
1.2.2 Enabling Information Output to a Log Host
1.2.3 Enabling Information Output to the Console
1.2.4 Enabling Information Output to a Monitor Terminal
1.2.5 Enabling Information Output to the Log Buffer
1.2.6 Enabling Information Output to the Trap Buffer
1.2.7 Enabling Information Output to the SNMP
1.3 Displaying and Debugging Information Center
1.4 Information Center Configuration Examples
1.4.1 Log Output to a UNIX Log Host
1.4.2 Log Output to a Linux Log Host
1.4.3 Log Output to the Console
Chapter 1 Information Center
1.1 Information Center Overview
An information center is an indispensable part of Ethernet switches and exists as an information hub of system software modules. The information center manages most information outputs; it sorts information carefully, and hence can screen information in an efficient way. Combined with the debugging program (debugging commands), it provides powerful support for network administrators and developers in network operation monitoring and fault diagnosis.
Information items output by S3600 series switches are presented in the following format:
<priority>timestamp sysname module/level/digest:content
Here, angle brackets “<>”, spaces, slashes “/” and colon are the fixed format of information.
Below is an example of log output to a log host:
<188>Apr 9 17:28:50:524 2004 H3C IFNET/5/UPDOWN:Line protocol on the interface M-Ethernet0/0/0 is UP (SIP=10.5.1.5 ,SP=1080)
The following describes the fields in front of the content field of an information item:
1) Priority
The calculation formula for priority is priority = facility × 8 + severity – 1. For Comware, the default facility value is 23 and severity ranges from 1 to 8. See Table 1-2 for description of severity levels.
Note that no character is permitted between the priority and time stamp. The priority takes effect only when the information is sent to the log host.
2) Time stamp
The time stamp sent to the log host is in the format of Mmm dd hh:mm:ss:ms yyyy, where:
“Mmm” represents the month, and the available values are: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, and Dec.
“dd” is the date, which shall follow a space if less than 10, for example, “ 7”.
“hh:mm:ss:ms” is the local time, where “hh” is in the 24-hour format, ranging from 00 to 23, both “mm” and ”ss” range from 00 to 59, “ms” ranges from 000 to 999.
“yyyy” is the year.
Note that a space separates the time stamp and the host name.
It refers to the system name of the host, which is “H3C” by default.
You can modify the host name with the sysname command. Refer to System Maintaining and Debugging part of the manual for detailed operations.
Note that a space separates the host name and module name.
4) Module name
It indicates the modules that generate the information. The module name is in abbreviation form to indicate different modules. Table 1-1 lists some modules.
Table 1-1 Examples of modules generating the information
Module name |
Description |
8021X |
802.1x module |
ACL |
Access control list module |
ADBM |
Address base module |
AM |
Access management module |
ARP |
Address resolution protocol module |
CMD |
Command line module |
DEV |
Device management module |
DHCP |
Dynamic host configuration protocol module |
DNS |
Domain name system module |
ETH |
Ethernet module |
FIB |
Forwarding module |
FTM |
Fabric topology management module |
FTMCMD |
Fabric topology management command module |
FTPS |
FTP server module |
HA |
High availability module |
HABP |
Huawei authentication bypass protocol module |
HTTPD |
HTTP server module |
HWCM |
Huawei Configuration Management private MIB module |
HWP |
HWPing module |
IFNET |
Interface management module |
IGSP |
IGMP snooping module |
IP |
Internet protocol module |
LAGG |
Link aggregation module |
LINE |
Terminal line module |
MSTP |
Multiple spanning tree protocol module |
MTRACE |
Multicast traceroute query module |
NAT |
Network address translation module |
NDP |
Neighbor discovery protocol module |
NTDP |
Network topology discovery protocol module |
NTP |
Network time protocol module |
OSPF |
Open shortest path first module |
PKI |
Public key infrastructure module |
RDS |
Radius module |
RMON |
Remote monitor module |
RSA |
Revest, Shamir and Adleman encryption module |
SHELL |
User interface module |
SNMP |
Simple network management protocol module |
SOCKET |
Socket module |
SSH |
Secure shell module |
SYSMIB |
System MIB module |
TAC |
HWTACACS module |
TELNET |
Telnet module |
TFTPC |
TFTP client module |
VLAN |
Virtual local area network module |
VRRP |
VRRP (virtual router redundancy protocol) module |
VTY |
VTY (virtual type terminal) module |
XM |
Xmodem module |
default |
Default settings for all the modules |
Note that a slash (/) separates the module name and severity level.
Switch information falls into three categories: log information, debugging information and trap information. The information center classifies the information into eight levels by severity or emergency. The higher the information severity is, the lower the corresponding level is. For example, the “debugging” severity corresponds to level 8, and the “emergencies“ severity corresponds to level 1. If filtered by severity, the information of a severity level greater than the defined threshold will be filtered out for output. Therefore, when the severity threshold is set to “debugging”, all information will be output. See Table 1-2 for description of severities and corresponding levels.
Table 1-2 Severity definitions on the information center
Severity |
Value |
Description |
emergencies |
1 |
The system is unavailable. |
alerts |
2 |
Errors that need to be corrected immediately |
critical |
3 |
Critical errors |
errors |
4 |
Common errors |
warnings |
5 |
Warnings |
notifications |
6 |
Normal information that needs to be noticed |
informational |
7 |
Normal prompt information |
debugging |
8 |
Debugging information |
Note that a slash (/) separates the level and digest.
It is a phrase within 32 characters, abstracting the information contents.
A colon (:) separates the digest and information contents.
& Note:
The above section describes the log information format sent to a log server by a switch. Some log server software will resolve the received information as well as its format, so that you may see the log format displayed on the log server is different from the one described in this manual.
1.2 Information Center Configuration
The switch supports information output to six directions, and the system defaults to assign one information channel for each output direction, as shown in Table 1-3.
Table 1-3 Information channel names and numbers
Output direction |
Channel number |
Default channel name |
Console |
0 |
console |
Monitor terminal |
1 |
monitor |
Log host |
2 |
loghost |
Trap buffer |
3 |
trapbuffer |
Log buffer |
4 |
logbuffer |
SNMP |
5 |
snmpagent |
& Note:
Settings for the six output directions are independent. However, for any output direction, you must first enable the information center to make all other settings effective.
Information center of the Ethernet switch features:
l Supporting six information output directions, namely, console (console), monitor terminal (monitor), log host (loghost), trap buffer (trapbuffer), log buffer (logbuffer) and SNMP (snmp agent).
l Filtering information by severities (information is divided into eight severity levels).
l Filtering information by modules where information is generated.
l Language options (Chinese or English) for information output to a log host.
1.2.1 Enabling Synchronous Terminal Output
To prevent your input from being interrupted by system information output, you can enable the synchronous terminal output function, which echoes your input after each system output. This makes your work with ease, for you no longer worry about losing uncompleted inputs.
Table 1-4 Enable synchronous terminal output
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable synchronous terminal output |
info-center synchronous |
Optional By default, synchronous terminal output is disabled. |
& Note:
Running the info-center synchronous command during debugging information collection may result in a command prompt echoed after each item of debugging information. To avoid unnecessary output, you are recommended to disable synchronous terminal output in such cases.
1.2.2 Enabling Information Output to a Log Host
Table 1-5 lists the related configurations on the switch.
Table 1-5 Enable information output to a log host
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output for a specified switch in a fabric |
info-center switch-on { unit unit-id | master | all } [ debugging | logging | trapping ]* |
By default, debugging information output is enabled, and log and trap information output are disabled for the master switch in a fabric. Debugging, log and trap information output are all disabled for other switches in the fabric. |
Enable information output to a log host |
info-center loghost host-ip-addr [ channel { channel-number | channel-name } | facility local-number | language { chinese | english } ]* |
Required By default, the switch does not output information to the log host. After you configure the switch to output information to the log host, the switch uses information channel 2 by default. Be sure to set the correct IP address. A loopback IP address will cause an error message prompting that this address is invalid. |
Configure the source interface through which log information is sent to the log host |
info-center loghost source interface-type interface-number |
Optional |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of the time stamp to be sent to the log host |
info-center timestamp loghost { date | no-year-date | none } |
Optional |
& Note:
l To view the debugging information of specific modules, you need to set the information type as debug in the info-center source command, and enable debugging for corresponding modules through the debugging command.
1.2.3 Enabling Information Output to the Console
Table 1-6 lists the related configurations on the switch.
Table 1-6 Enable information output to the console
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output to the console |
info-center console channel { channel-number | channel-name } |
Required By default, the switch uses information channel 0 to output log/debugging/trap information to the console. |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of time stamp |
info-center timestamp { log | trap | debugging } { boot | date | none } |
Optional |
To view log/debugging/trap output information on the console, you should also enable the corresponding log/debugging/trap information terminal display on the switch.
For example, to view log information of the switch on the console, you should not only enable log information output to the console, but also enable log information terminal display with the terminal logging command.
Perform the following operations in user view.
Table 1-7 Enable debugging/log/trap terminal display
Operation |
Command |
Description |
Enable the debugging/log/trap information terminal display function |
terminal monitor |
Optional By default, this function is enabled for console users. |
Enable debugging information terminal display function |
terminal debugging |
Optional By default, the debugging information terminal display is disabled. |
Enable log information terminal display function |
terminal logging |
Optional By default, log information terminal display is enabled. |
Enable trap information terminal display function |
terminal trapping |
Optional By default, trap information terminal display is enabled |
1.2.4 Enabling Information Output to a Monitor Terminal
Table 1-8 lists the related configurations on the switch.
Table 1-8 Enable information output to a monitor terminal
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output to Telnet terminal or dumb terminal |
info-center monitor channel { channel-number | channel-name } |
Required By default, a switch outputs log/debugging/trap information to user terminal through information channel 1. |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of time stamp |
info-center timestamp { log | trap | debugging } { boot | date | none } |
Optional This is to set the time stamp format for log/debugging/trap information output. This determines how the time stamp is presented to users. |
& Note:
l When there are multiple Telnet users or dumb terminal users, they share some configuration parameters including module filter, language and severity level threshold. In this case, change to any such parameter made by one user will also be reflected on all other user terminals.
l To view debugging information of specific modules, you need to set the information type as debug when defining the information source, and enable debugging for corresponding modules through the debugging command.
To view the log/debugging/trap output information on the monitor terminal, you should enable the corresponding log/debugging/trap display function on the switch.
For example, to view log information of the switch on a monitor terminal, you need to not only enable log information output to the monitor terminal, but also enable log information terminal display function with the terminal logging command.
Perform the following configuration in user view.
Table 1-9 Enable debugging/log/trap terminal display
Operation |
Command |
Description |
Enable the debugging/log/trap information terminal display function |
terminal monitor |
Optional By default, this function is enabled for console users. |
Enable debugging information terminal display function |
terminal debugging |
Optional By default, debugging information terminal display is disabled. |
Enable log information terminal display function |
terminal logging |
Optional By default, log information terminal display is enabled. |
Enable trap information terminal display function |
terminal trapping |
Optional By default, trap information terminal display is enabled. |
1.2.5 Enabling Information Output to the Log Buffer
Table 1-10 lists the related configurations on the switch.
Table 1-10 Enable information output to the log buffer
Operation |
Command |
Description |
Enter system view |
— |
|
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output to the log buffer |
info-center logbuffer [ channel { channel-number | channel-name } | size buffersize ]* |
Optional By default, the switch uses information channel 4 to output log information to the log buffer, which can holds up to 512 items by default. |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of time stamp |
info-center timestamp { log | trap | debugging } { boot | date | none } |
Optional This is to set the time stamp format for log/debugging/trap information output. This determines how the time stamp is presented to users. |
& Note:
To view debugging information of specific modules, you need to configure the information type as debug in the info-center source command, and enable debugging on corresponding modules with the debugging command as well.
1.2.6 Enabling Information Output to the Trap Buffer
Table 1-11 lists the related configurations on the switch.
Table 1-11 Enable information output to the trap buffer
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output to the trap buffer |
info-center trapbuffer [channel { channel-number | channel-name } | size buffersize]* |
Optional By default, the switch uses information channel 3 to output trap information to the trap buffer, which can holds up to 256 items by default. |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of time stamp |
info-center timestamp { log | trap | debugging } { boot | date | none } |
Optional This is to set the time stamp format for log/debugging/trap information output. This determines how the time stamp is presented to users. |
& Note:
To view debugging information of specific modules, you need to set the information type as debug in the info-center source command, and enable debugging on corresponding modules with the debugging command as well.
1.2.7 Enabling Information Output to the SNMP
Table 1-12 lists the related configurations on the switch.
Table 1-12 Enable information output to the SNMP
Operation |
Command |
Description |
Enter system view |
system-view |
— |
Enable the information center |
info-center enable |
Optional By default, the information center is enabled. |
Enable information output to the SNMP |
info-center snmp channel { channel-number | channel-name } |
Required By default, the switch outputs trap information to SNMP through channel 5. |
Define an information source |
info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } { level severity | state state } ]* |
Required |
Set the format of time stamp |
info-center timestamp { log | trap | debugging } { boot | date | none } |
Optional This is to set the time stamp format for log/debugging/trap information output. This determines how the time stamp is presented to users. |
& Note:
l To view debug information of specific modules, you need to set the information type as debug in the info-center source command, and enable debugging on corresponding modules with the debugging command as well.
l To send information to a remote SNMP workstation properly, related configurations are required on both the switch and the SNMP workstation.
1.3 Displaying and Debugging Information Center
After the above configurations, you can execute the display command in any view to display the running status of the information center, and thus validating your configurations. You can also execute the reset command in user view to clear the information in the log buffer and trap buffer.
Table 1-13 Display and debug information center
Operation |
Command |
Description |
Display information on an information channel |
display channel [ channel-number | channel-name ] |
The display command can be executed in any view |
Display the operation status of information center, the configuration of information channels, the format of time stamp and the information output in case of fabric |
display info-center [ unit unit-id ] |
|
Display the status of log buffer and the information recorded in log buffer |
display logbuffer [ unit unit-id ] [ level severity | size buffersize ]* [ | { begin | exclude | include } regular-expression ] |
|
Display the summary information recorded in log buffer |
display logbuffer summary [ level severity ] |
|
Display the status of trap buffer and the information recorded in trap buffer |
display trapbuffer [ unit unit-id ] [ size buffersize ] |
|
Clear information recorded in log buffer |
reset logbuffer [ unit unit-id ] |
The reset command can be executed in user view |
Clear information recorded in trap buffer |
reset trapbuffer [ unit unit-id ] |
1.4 Information Center Configuration Examples
1.4.1 Log Output to a UNIX Log Host
I. Network requirements
The switch sends the following log information in English to the UNIX log host whose IP address is 202.38.1.10: the log information of the two modules ARP and IP, with severity higher than “informational”.
II. Network diagram
Figure 1-1 Network diagram for log output to a Unix log host
III. Configuration procedure
1) Configure the switch:
# Enable the information center.
<H3C> system-view
[H3C] info-center enable
# Disable the function of outputting information to log host channels.
[H3C] undo info-center source default channel loghost
# Configure the host whose IP address is 202.38.1.10 as the log host. Set the output language to English. Permit ARP and IP modules to output information with severity level higher than informational to the log host.
[H3C] info-center loghost 202.38.1.10 facility local4 language english
[H3C] info-center source arp channel loghost log level informational debug state off trap state off
[H3C] info-center source ip channel loghost log level informational debug state off trap state off
2) Configure the log host:
The operations here are performed on SunOS 4.0. The operations on other manufacturers' UNIX operation systems are similar.
Step 1: Execute the following commands as the super user (root user).
# mkdir /var/log/H3C
# touch /var/log/H3C/information
Step 2: Edit the file “/etc/syslog.conf” as the super user (root user) to add the following selector/action pairs.
# H3C configuration messages
local4.info /var/log/H3C/information
& Note:
When you edit the file “/etc/syslog.conf”, note that:
l A note must start in a new line, starting with a “#” sign.
l In each pair, a tab should be used as a separator instead of a space.
l No space is allowed at the end of a file name.
l The facility and received log information severity level specified in the file “/etc/syslog.conf” must be the same as those corresponding parameters configured in the commands info-center loghost and info-center source. Otherwise, log information may not be output to the log host normally.
Step 3: After the log file “information” is created and the file “/etc/syslog.conf” is modified, execute the following command to send a HUP signal to the system daemon “syslogd”, so that it can read its new configuration file “/etc/syslog.conf”.
# ps -ae | grep syslogd
147
# kill -HUP 147
After all the above operations, the switch can make records in the corresponding log file.
& Note:
Through combined configuration of the device name (facility), information severity level threshold (severity), module name (filter) and the file “syslog.conf”, you can sort information precisely for filtering.
1.4.2 Log Output to a Linux Log Host
I. Network requirements
The switch sends the following log information in English to the Linux log host whose IP address is 202.38.1.10: All modules' log information, with severity higher than “errors”.
II. Network diagram
Figure 1-2 Network diagram for log output to a Linux log host
III. Configuration procedure
1) Configure the switch:
# Enable the information center.
<H3C> system-view
[H3C] info-center enable
# Configure the host whose IP address is 202.38.1.10 as the log host. Set the output language to English. Permit all modules to output information with severity level higher than error to the log host.
[H3C] info-center loghost 202.38.1.10 facility local7 language english
[H3C] info-center source default channel loghost log level errors debug state off trap state off
2) Configure the log host:
Step 1: Execute the following commands as a super user (root user).
# mkdir /var/log/H3C
# touch /var/log/H3C/information
Step 2: Edit the file “/etc/syslog.conf” as the super user (root user) to add the following selector/action pairs.
# H3C configuration messages
local7.info /var/log/H3C/information
& Note:
Note the following items when you edit file “/etc/syslog.conf”.
l A note must start in a new line, starting with a “#" sign.
l In each pair, a tab should be used as a separator instead of a space.
l No space is permitted at the end of the file name.
l The facility and received log information severity specified in file “/etc/syslog.conf” must be the same with those corresponding parameters configured in commands info-center loghost and info-center source. Otherwise, log information may not be output to the log host normally.
Step 3: After the log file “information” is created and the file “/etc/syslog.conf” is modified, execute the following commands to view the process ID of the system daemon “syslogd”, stop the process, and then restart the daemon "syslogd" in the background with the “-r” option.
# ps -ae | grep syslogd
147
# kill -9 147
# syslogd -r &
& Note:
In case of Linux log host, the daemon “syslogd” must be started with the “-r” option.
After all the above operations, the switch can record information in the corresponding log file.
& Note:
Through combined configuration of the device name (facility), information severity level threshold (severity), module name (filter) and the file “syslog.conf”, you can sort information precisely for filtering.
1.4.3 Log Output to the Console
I. Network requirements
The switch sends the following information to the console: the log information of the two modules ARP and IP, with severity higher than “informational”.
II. Network diagram
Figure 1-3 Network diagram for log output to the console
III. Configuration procedure
# Enable the information center.
<H3C> system-view
[H3C] info-center enable
# Disable the function of outputting information to the console channels.
[H3C] undo info-center source default channel console
# Enable log information output to the console. Permit ARP and IP modules to output information with severity level higher than informational to the console.
[H3C] info-center console channel console
[H3C] info-center source arp channel console log level informational debug state off trap state off
[H3C] info-center source ip channel console log level informational debug state off trap state off
# Enable terminal display.
<H3C> terminal monitor
<H3C> terminal logging