No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - Security

AR500, AR510, and AR530 V200R007

This document describes the configurations of Security, including AAA, DAA,NAC, BRAS Access, ACL, Firewall, Deep Security Defense, Local Attack Defense;Attack Defense, Traffic Suppression, ARP Security, Port Security, DHCP Snooping, IPSG, URPF, PKI, SSL, HTTPS, Keychain, separating the management plane from the service plane, security risks.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Creating an HSB Service

Creating an HSB Service

Context

An HSB service establishes an HSB channel for transmitting packets of other services and maintains the link status by notifying the HSB group of the faulty link.

An HSB service provides the following functions:
  • Establishing an HSB channel: A TCP channel is established for sending HSB packets by setting the IP addresses and port numbers of the local and peer devices. The HSB service provides packet sending and receiving for other services and notifies link status changes.
  • Maintaining the link status of the HSB channel: HSB packets are sent and retransmitted to prevent long TCP interruption that is not detected by the protocol stack. If a device does not receive an HSB packet from the peer device within the period (retransmission interval x retransmission times), the local device receives a message indicating the exception and then re-establishes a channel to the peer.

After the HSB service configuration is complete, HSB channel parameters cannot be modified directly. To modify these parameters, delete the HSB service first and then reconfigure these parameters. The configured parameters take effect only after the HSB function is enabled.

Procedure

  1. Run:

    system-view

    The system view is displayed.

  2. Run:

    hsb-service service-index

    An HSB service is created and the HSB service view is displayed.

  3. Run:

    service-ip-port local-ip local-ip-address peer-ip peer-ip-address local-data-port local-port peer-data-port peer-port

    An HSB channel is established.

    The channel parameters must be set at the local device and the peer device. The destination IP address and port number of the local device must be the same as the IP address and port number of the peer device.

  4. (Optional) Run:

    service-keep-alive detect retransmit retransmit-times interval interval-value

    The retransmission times and interval of HSB packets are set.

    NOTE:
    • By default, the HSB packet retransmission interval is 3 seconds and retransmission times is 5.
    • The HSB packet parameters, including retransmission interval and retransmission times, must be set the same on both ends.

Translation
Download
Updated: 2019-05-25

Document ID: EDOC1000097287

Views: 13521

Downloads: 40

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next