No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

AR500, AR510, and AR530 V200R007

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Transparent Bridging (TB) Configuration Commands

Transparent Bridging (TB) Configuration Commands

bridge

Function

The bridge command creates a bridge group and enter the bridge group view. If a bridge group has been created, you can directly enter the bridge group view.

The undo bridge command deletes a bridge group.

By default, no bridge group is created in the system.

Format

bridge bridge-id

undo bridge bridge-id

Parameters

Parameter Description Value
bridge-id

Specifies the number of a bridge group.

The value is an integer and its range depends of product models.
  • AR509GW-L-D-H and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Bridges transmit data at the link layer.

On small-scale networks (especially on distributed networks), bridges can reduce costs for network maintenance. Bridges allow end users to construct large-scale networks and expand the network scale without any special configurations.

Transparent bridges connect different LANs. The configuration of transparent bridges is easy and will not affect the existing LAN. You must create a bridge group by using the bridge command before adding interfaces to it.

Precautions

After a bridge group has been created by using the bridge command adds an interface to the bridge group.

  • The undo bridge bridge-id command is used to delete a bridge group. If the bridge group to be deleted has a Bridge-if interface, you need to delete the Bridge-if interface first. Otherwise, the undo bridge bridge-id command will not take effect.

  • After a bridge group has been deleted by using the undo bridge bridge-id command, the system deletes attribute configurations and static MAC entries of the bridge group, and removes member interfaces from the bridge group.

NOTE:

The same bridge group number can be used by multiple devices.

Example

# Create bridge group 3.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3]

bridge vlan-transmit enable

Function

The bridge vlan-transmit enable command enables an interface in a bridge group to transparently transmit VLAN IDs.

The undo bridge vlan-transmit enable command disables an interface in a bridge group from transparently transmitting VLAN IDs.

By default, an interface in a bridge group is disabled from transparently transmitting VLAN IDs.

Format

bridge vlan-transmit enable

undo bridge vlan-transmit enable

Parameters

None

Views

ATM interface view, GE interface view, Dialer interface view, Ethernet interface view( WAN side)

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In the scenario where transparent bridges connect different LANs, and VLAN IDs of packets are exchanged between LANs to isolate VLANs and enable communication within a VLAN, you can enable an interface in a bridge group to transparently transmit VLAN IDs. This prevents VLAN IDs to be discarded in the case that VLAN ID transmission is not supported.

After being enabled to transparently transmit VLAN IDs, the interface in a bridge group does not perform any operation on VLAN IDs in packets.

Prerequisites

Before enabling an interface to transparently transmit VLAN IDs, ensure that the interface has been added to a bridge group.

Precautions

If a bridge group is deleted or the interface enabled to transparently transmit VLAN IDs is removed from the bridge group, the system will delete the configuration of this command automatically.

VLANIF interfaces do not support VLAN ID transparent transmission.

Example

# Enable a specified interface in bridge group 3 to transparently transmit VLAN IDs.

<Huawei> system-view
[Huawei] interface gigabitethernet 1/0/0
[Huawei-GigabitEthernet1/0/0] bridge 3
[Huawei-GigabitEthernet1/0/0] bridge vlan-transmit enable
Related Topics

bridge (interface view)

Function

The bridge command adds an interface to a bridge group.

The undo bridge command removes an interface from a bridge group.

By default, an interface is not added to any bridge group.

Format

bridge bridge-id

undo bridge

Parameters

Parameter Description Value
bridge-id Specifies the number of the bridge group to which an interface is added.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a transparent bridge connects different LANs, you can run the bridge command to add an interface to a bridge group.

Prerequisites

The bridge command has been used to create a bridge group.

Precautions

After the bridge (interface view) command is run, an interface is added to a bridge group; after the undo bridge (interface view) command is run, an interface is removed from a bridge group.

  • The number of interfaces that can be added to a bridge group depends on device models:
    • AR510: 10
    • AR500&AR530&AR550&AR2500: 20
    Interfaces of different types can be added to the same bridge group, but Layer 2 interfaces cannot be added to a bridge group.
  • VLANIF interfaces in a super VLAN cannot be added to a bridge group.

  • QinQ termination Ethernet sub-interfaces and QinQ termination GE sub-interfaces do not support the transparent bridge function.

Example

# Create bridge group 2 and add a specified interface to bridge group 2.

<Huawei> system-view
[Huawei] bridge 2
[Huawei-bridge2] quit
[Huawei] interface gigabitethernet 1/0/0
[Huawei-GigabitEthernet1/0/0] bridge 2

# Create bridge group 3 and add a specified sub-interface to bridge group 3.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] quit
[Huawei] interface gigabitethernet 2/0/0.1
[Huawei-GigabitEthernet2/0/0.1] bridge 3

bridging disable

Function

The bridging disable command disables a bridge group from bridging protocol packets.

The undo bridging disable command enables a bridge group to bridge protocol packets.

By default, a bridge group is disabled from bridging all protocol packets.

Format

bridging { ip | others } disable

undo bridging { ip | others } disable

Parameters

Parameter Description Value
ip Enables a bridge group to bridge or disables a bridge group from bridging IP packets. -
others Enables a bridge group to bridge or disables a bridge group from bridging non-IP packets. -

Views

Bridge group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A bridge group is enabled to bridge all protocol packets by default. The bridging disable command can be used to disable a bridge group from bridging packets of a specified protocol, which can thus close upper layer applications, such as ARP.

Prerequisites

Before disabling a bridge group from bridging packets of a specified protocol, ensure that the bridge has been created.

Configuration Impact

You can run the bridging disable command to disable a bridge group from bridging function packets of a specified protocol.

Example

# Disable bridge group 3 from bridging IP packets.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] bridging ip disable

display bridge information

Function

The display bridge information command displays information about all bridge groups or a specified bridge group.

Format

display bridge [ bridge-id ] information

Parameters

Parameter Description Value
bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The display bridge information command can display information about a specified bridge group, including the management status, types of protocols for which the bridging function is enabled, whether the IP routing function is enabled, and whether the MAC address learning function is enabled.

The display bridge information command can display the configurations of the bridge-related command.

Precautions

When using this command, note the following points:
  • If bridge-id is not specified, the command output displays the configurations of all bridge groups.
  • If bridge-id is specified, the command output displays the configurations of a specified bridge group.

Example

# Display information about all bridge groups.

<Huawei> display bridge information
Bridge 1 :
    Status       : Undo Shutdown
    Bridging     : IP, Others
    Routing      : -
    MAC learning : Enable
  interface :total 6 interface(s) in the bridge
    Ethernet0/0/1 : Down
    Ethernet1/0/0 : Down
    Serial1/0/0 : Down
    Vlanif1 : Down
    Vlanif2 : Down
    Vlanif10 : Down
Bridge 2 :
    Status       : Undo Shutdown
    Bridging     : IP, Others
    Routing      : IP
    MAC learning : Enable
  interface :total 1 interface(s) in the bridge
    MFR0/0/2 : Down

# Display information about bridge group 1.

<Huawei> display bridge 1 information
Bridge 1 :
    Status       : Undo Shutdown
    Bridging     : IP, Others
    Routing      : -
    MAC learning : Enable
  interface :total 6 interface(s) in the bridge
    Ethernet0/0/1 : Down
    Ethernet1/0/0 : Down
    Serial1/0/0 : Down
    Vlanif1 : Down
    Vlanif2 : Down
    Vlanif10 : Down
Table 5-59  Description of the display bridge information command output

Item

Description

Bridge 1

Displays information about a bridge group.

  • If bridge-id is not specified, the command output displays information about all bridge groups.
  • If the specified interface is added to a bridge group, the command output displays the number of the bridge group.
  • If the specified bridge group number does not exist or the specified interface does not belong to any bridge group, no information is displayed.

Status

Specifies the management status of the bridge group, which can be either of the following:

  • Shutdown
  • Undo Shutdown

Bridging

Specifies types of protocols (IP and Others) for which the bridging function can be enabled. "-" indicates that the bridging function is disabled for both protocol types.

Routing

Indicates whether the IP routing function can be enabled in a bridge group.

  • IP: indicates that the IP routing function can be enabled in a bridge group.
  • -: indicates that the IP routing function cannot be enabled in a bridge group.

MAC learning

Indicates whether the MAC address learning function can be enabled in a bridge group.

  • Enable
  • Disable

interface

Specifies the interface added to a bridge group.

Related Topics

display bridge traffic

Function

The display bridge traffic command displays traffic statistics about interfaces in a bridge group.

Format

display bridge traffic [ bridge bridge-id | interface interface-type interface-number ]

Parameters

Parameter Description Value
bridge bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR509GW-L-D-H and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.
interface-type Specifies the interface type. If the interface type is not specified, traffic statistics about all interfaces in a bridge group are displayed. -
interface-number Specifies the number of an interface. If the interface number is not specified, traffic statistics about interfaces of a specified type in a bridge group are displayed. -

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The display bridge traffic command can display traffic statistics of an interface or all interfaces in a bridge group, or about all interfaces in all bridge groups.

If no parameter is specified in this command, the command output displays traffic statistics on all interfaces in all bridge groups.

Example

# Display traffic statistics on all interfaces in all bridge groups.

<Huawei> display bridge traffic
Bridge 1 :
 Input  :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
 Output :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
Bridge 2 :
 Input  :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
 Output :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,

# Display traffic statistics on all interfaces in a specified bridge group.

<Huawei> display bridge traffic bridge 1
Bridge 1 :
 Input  :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
 Output :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,

# Displays traffic statistics on a specified interface in a bridge group.

<Huawei> display bridge traffic interface ethernet 1/0/0
Bridge 1 :
 Input  :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
 Output :
         0 total, 0 bpdu, 0 single,
         0 multi, 0 broadcast,
Table 5-60  Description of the display bridge traffic command output

Item

Description

Bridge 1

Displays information about the bridge group.
  • If no bridge group number is specified, the command output displays information about all bridges group.
  • If the specified interface belongs to a bridge group, the command output displays the number of the bridge group.
  • If the specified bridge group number does not exist or the specified interface does not belong to any bridge group, no information is displayed.

Input

Specifies statistics about incoming packets, including the total number of incoming packets, transparently-transmitted packets, unicast packets, multicast packets, and broadcast packets.

Output

Specifies statistics about outgoing packets, including the total number of outgoing packets, transparently-transmitted packets, unicast packets, multicast packets, and broadcast packets.

Related Topics

display interface bridge-if

Function

The display interface bridge-if command displays the status of and statistics about Bridge-if interfaces.

Format

display interface bridge-if [ bridge-id | main ]

Parameters

Parameter Description Value
bridge-id

Displays status and statistics about a bridge-if interface with an interface number.

If no Bridge-if interface number is specified, status and statistics about all Bridge-if interfaces are displayed.

The value is an integer and its range depends of product models.
  • AR509GW-L-D-H and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.
main

Displays status and traffic statistics about a bridge-if interface.

A bridge-if interface has no sub-interfaces. Status and traffic statistics about a bridge-if interface are displayed whether you specify the main parameter or not.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

If you need to monitor the status of a Bridge-if interface or locate the fault on a Bridge-if interface, you can run the display interface bridge-if command to view the status and traffic statistics of the interface. Based on the command output, you can collect traffic statistics and troubleshoot the interface.

Prerequisites

The Bridge-if interface specified in this command must be an existing one; otherwise, the system prompts an error.

Example

# Display information about a specified Bridge-if interface.

<Huawei> display interface bridge-if 1
Bridge-if1 current state : UP
Line protocol current state : UP
Description:HUAWEI, AR Series, Bridge-if1 Interface
Route Port,The Maximum Transmit Unit is 1500
Internet Address is 1.1.1.3/24
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-1419-3000
Physical is BRIDGE-IF
Current system time: 2010-10-13 08:43:04-08:00
    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
    Realtime 2 seconds input rate 0 bits/sec, 0 packets/sec
    Realtime 2 seconds output rate 0 bits/sec, 0 packets/sec
    Input: 8 packets,0 bytes,
           6 unicast,2 broadcast,0 multicast
    Output:9 packets,0 bytes,
           7 unicast,2 broadcast,0 multicast
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%
Table 5-61  Description of the display interface bridge-if command output

Item

Description

Bridge-if1 current state

Specifies the current physical status of the Bridge-if interface.
  • UP: indicates that the physical connection of the interface is normal.

  • DOWN: indicates that the physical connection of the interface is abnormal.

  • Administratively down: This state is displayed after the network administrator has run the shutdown command on the interface.

Line protocol current state

Specifies the link layer protocol status of the Bridge-if interface.
  • UP: indicates that the link layer protocol of the interface is Up.

  • DOWN: indicates that the link layer protocol of the interface is Down or no IP address is assigned to the interface.

Description

Indicates the description of an interface. The information allows users to know about functions of the interface and is used to identify the current interface.

The description command is used to configure or modify the description of an interface.

Route Port

Indicates the Layer 3 interface.

The Maximum Transmit Unit is

Indicates the MTU of the interface. By default, the MTU is 1500 bytes. Packets larger than the MTU are fragmented before being sent. If fragmentation is disabled, packets will be discarded.

The mtu command is used to configure or modify the MTU of an interface.

Internet Address is

Indicates the IP address of an interface.

If no IP address is configured on the current interface, the system displays "Internet protocol processing: disabled".

IP Sending Frames' Format is

Format of the Ethernet frame sent by the Bridge-if interface.

The default frame format is PKTFMT_ETHNT_2. When receiving frames, the Ethernet protocol can identify the following formats:

  • PKTFMT_ETHNT_2
  • Ethernet_SNAP
  • 802.2
  • 802.3

Hardware address is

MAC address of the Bridge-if interface.

Physical is

Specifies the interface type.

Current system time

Specifies the current time of the system.

If the time zone is configured and the daylight saving time is used, the system time is displayed in the format of YYYY/MM/DD HH:MM:SS UTC±HH:MM DST.

Last 300 seconds input rate

Last 300 seconds output rate

Indicates the rates at which bytes and packets are sent and received by the interface in the last 300 seconds.

Each time this command is run, the value of this field is re-counted. The rates at which bytes or packets are sent 300s before this command is run is displayed, in the number of bytes or packets per 300s.

The set flow-stat interval command is used to configure or modify the interval at which traffic statistics are collected.

Realtime 2 seconds input rate

Realtime 2 seconds output rate

Indicates the real-time rates at which packets are sent and received within 2 seconds.

It refers to the interval between two display interface commands that are run on the same interface. The maximum value is the statistical interval displayed in the previous piece of information.

NOTE:

This field is displayed only when you view statistics about a logical interface.

Input

Total number of packets and bytes received on the interface
  • packets: indicates the total number of packets.
  • bytes: indicates the total number of bytes.
  • unicast: indicates the number of unicast packets.
  • broadcast: indicates the number of broadcast packets.
  • multicast: indicates the number of multicast packets.
NOTE:

Total number of packets received on the interface = Number of unicast packets + Number of broadcast packets + Number of multicast packets.

Output

Total number of packets and bytes sent by the interface
  • packets: indicates the total number of packets.
  • bytes: indicates the total number of bytes.
  • unicast: indicates the number of unicast packets.
  • broadcast: indicates the number of broadcast packets.
  • multicast: indicates the number of multicast packets.
NOTE:

Total number of packets sent by the interface = Number of unicast packets + Number of broadcast packets + Number of multicast packets.

Input bandwidth utilization

Indicates the percentage of the rate at which packets are received to the total bandwidth.

Output bandwidth utilization

Indicates the percentage of the rate at which packets are sent to the total bandwidth.

Related Topics

display mac-address aging-time bridge

Function

The display mac-address aging-time bridge command displays the aging time for dynamic MAC address entries in the bridge group.

Format

display mac-address aging-time bridge

Parameters

None.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

After the bridge group is configured on a device, to view the aging time for dynamic MAC address entries in the bridge group, run the display mac-address aging-time bridge command all view. To set the aging time, run the mac-address aging-time command in the system view . The command output helps verify the configuration and analyze faults.

Precautions

If a MAC address entry does not age, the aging time in the command output is 0s.

Example

# Display the aging time of dynamic MAC address entries.

<Huawei> display mac-address aging-time bridge
  Aging time: 300 seconds
Table 5-62  Description of the display mac-address aging-time bridge command output

Item

Description

Aging time:

Aging time (in seconds) for dynamic MAC entries in the bridge group, in seconds.

The aging time can be configured using the mac-address aging-time bridge command in the system view.

display mac-address bridge

Function

The display mac-address bridge command displays MAC address entries of a bridge group.

Format

display mac-address [ mac-address | interface-type interface-number ] bridge bridge-id [ verbose ]

display mac-address [ static | dynamic ] interface-type interface-number bridge bridge-id [ verbose ]

display mac-address [ static | dynamic | blackhole ] bridge bridge-id

Parameters

Parameter Description Value
mac-address

Displays the MAC address entries of a bridge group with a specified unicast MAC address.

The value is in the format of H-H-H. H is a hexadecimal number that contains four digits, such as 00e0 and fc01. A MAC address cannot be FFFF-FFFF-FFFF or any multicast MAC addresses.

-

blackhole

Displays the MAC address blackhole entries of a bridge group.

Specifies a blackhole entry, which will not be aged. After being configured and saved, the entries are not lost after the system is reset or the I/O interface board is hot swapped.

-
static

Displays the MAC address static entries of a bridge group.

Specifies a static entry, which will not be aged. After being configured and saved, the entries are not lost after the reset or hot plug of the I/O interface board.

-
dynamic

Displays the MAC address dynamic entries of a bridge group.

Specifies a dynamic entry, which will be aged. Dynamic entries will lose after the system is reset or the I/O interface board is hot swapped.

-
bridge bridge-id

Displays the MAC address entries of a bridge group with a specified bridge ID.

The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H,and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.
verbose

Displays the detailed MAC address entries of a bridge group.

-
interface-type interface-number

Displays the MAC address entries of a bridge group with a specified interface.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

The display mac-address bridge command can display the MAC address entry of a specific bridge group. You can display MAC address entries about a MAC address or MAC address type (blackhole, static, and dynamic).

Example

# Display static MAC entries of bridge group 2.

<Huawei> display mac-address 0001-0001-0001 bridge 2
-------------------------------------------------------------------------------
MAC Address       VLAN/Bridge             Learned-From               Type
-------------------------------------------------------------------------------
0001-0001-0001       -/2                Eth0/0/1                    static

-------------------------------------------------------------------------------
Total items displayed = 1

# Display the details of the MAC address entries with a specified interface and a bridge id.
[Huawei] display mac-address Ethernet 0/0/1 bridge 10 verbose
-------------------------------------------------------------------------------
MAC Address : 0001-0002-0002              VLAN/Bridge :    -/10
Learned-From: Eth0/0/1                     Type : static

-------------------------------------------------------------------------------
Total items displayed = 1
# Display the static MAC address entries on a specified interface and a specified Bridge.
[Huawei] display mac-address static Ethernet 0/0/1 bridge 10 verbose 
-------------------------------------------------------------------------------
MAC Address : 0001-0002-0002              VLAN/Bridge :    -/10
Learned-From: Eth0/0/1                     Type : static

-------------------------------------------------------------------------------
Total items displayed = 1
Table 5-63  Description of the display mac-address Command Output

Item

Description

MAC Address

Specifies a MAC address.

VLAN/Bridge/VSI

Specifies the VLAN, Bridge or Virtual Switch Instance (VSI) to which the outbound interface belongs.

Learned-From

  • static: Indicates an interface on which the MAC addresses of the static type are configured.
  • dynamic: Indicates an interface from which the MAC addresses of the dynamic type are learned.
  • blackhole: The value is always displayed as "-"

Type

Specifies a type of MAC addresses entry.
  • static: indicates static MAC address entries, which are configured by users and delivered to I/O interface boards. Static MAC address entries will not age. In addition, they will not lose even if the system is reset or the I/O interface board is hot swapped.

  • blackhole: indicates blackhole MAC address entries, which are configured by users and delivered to I/O interface boards. Blackhole entries are used to discard frames carrying specified destination MAC addresses. Blackhole MAC address entries will not age. In addition, they will not lose even if the system is reset or the I/O interface board is hot swapped.

  • dynamic: indicates dynamic MAC address entries, which are learned and stored by I/O interface boards. Dynamic MAC address entries will age. They will be removed from the forwarding table if the system is reset or the I/O interface board is hot swapped.

Total items displayed

Specifies the total number of MAC address entries that can be displayed.

interface bridge-if

Function

The interface bridge-if command creates a Bridge-if interface and enter the Bridge-if interface view.

The undo interface bridge-if command deletes a Bridge-if interface.

By default, no Bridge-if interface is created in a bridge group.

Format

interface bridge-if bridge-id

undo interface bridge-if bridge-id

Parameters

Parameter Description Value
bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Generally, Local Area Network (LAN) users that need to be interconnected belong to the same network segment or aggregated network segment. A bridge connects multiple LANs at the link layer. If users in a bridge group need to access another network, link-layer bridging cannot meet the requirement. Transparent Bridging integrated with routing can meet the requirement.

Integrated routing has the ability to route between different networks by using Bridge-if interfaces.

After configuring a Bridge-if interface, you must run the routing ip command on the Bridge-if interface to enable the IP packet routing function.

Prerequisites

A bridge group has been configured before you create a Bridge-if interface in the bridge group.

Precautions

A bridge group where a Bridge-if interface has been created can be deleted only after the created Bridge-if interface is deleted.

  • A Bridge-if interface uniquely identifies a bridge group and a bridge group can be configured with only one Bridge-if interface.

  • Currently, a Bridge-if interface can be configured with an MTU, descriptions, an IP address, a MAC address, static routes, Domain Name Service (DNS), and IP security (IPSec).

Example

# Create a Bridge-if interface.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] quit
[Huawei] interface bridge-if 3
[Huawei-Bridge-if3]
Related Topics

mac-address aging-time bridge

Function

The mac-address aging-time bridge command sets the aging time for MAC address entries of bridge groups.

The undo mac-address aging-time bridge command restores the default aging time for MAC address entries of bridge groups.

By default, the aging time for MAC address entries of bridge groups is 300s.

Format

mac-address aging-time seconds bridge

undo mac-address aging-time bridge

Parameters

Parameter Description Value
seconds Specifies the aging time for MAC address entries of bridge groups.

The value can be 0 or in the range of 60 to 3825. The value is expressed in seconds. The default value is 300. The value 0 indicates that dynamic MAC address entries will not be aged out.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The mac-address aging-time bridge command can be used to set the aging time for MAC address entries of bridge groups.

After the aging time has been set, only dynamic MAC address entries will age, and non-dynamic MAC address entries will not. If the aging time is set to 0, none of dynamic MAC address entries will age.

Configuration Impact

The configured aging time takes effect on the dynamic MAC address entries of all bridge groups that are configured on a device. After the mac-address aging-time bridge command is run, the dynamic MAC address entries learned by bridge groups will age when the configured aging time expires.

Example

# Set the aging time for MAC address entries of bridge groups to 500s.

<Huawei> system-view
[Huawei] mac-address aging-time 500 bridge

mac-address blackhole bridge

Function

The mac-address blackhole bridge command configures a blackhole MAC address entry for a bridge group.

The undo mac-address blackhole bridge command deletes the blackhole MAC address entry that is configured for a bridge group.

By default, no blackhole MAC address entry is configured for any bridge group.

Format

mac-address blackhole mac-address bridge bridge-id

undo mac-address blackhole [ mac-address ] bridge bridge-id

Parameters

Parameter Description Value
mac-address Specifies a unicast MAC address for a bridge group.

The value is in the format of H-H-H. H is a hexadecimal number that contains four digits, such as 00e0 and fc01. A MAC address cannot be FFFF-FFFF-FFFF or any multicast MAC addresses.

bridge bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enhance network security on a stable network, the mac-address blackhole bridge command can be run to configure a blackhole MAC address entry for a bridge group. When configuring a blackhole MAC address entry, no outbound interface needs to be specified.

Precautions

If the source or destination MAC address of a packet is a blackhole MAC address, the device discards the packet.

A blackhole MAC address entry configured using the mac-address blackhole bridge command is not associated with blackhole entries in a VLAN.

Example

# Configure a blackhole MAC address entry for a bridge group.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] quit
[Huawei] interface gigabitethernet 1/0/0
[Huawei-GigabitEthernet1/0/0] bridge 3
[Huawei-GigabitEthernet1/0/0] quit
[Huawei] mac-address blackhole 0002-0002-0002 bridge 3

mac-address (Bridge-if interface view)

Function

The mac-address command configures a MAC address for the Bridge-if interface of the current bridge group.

The undo mac-address command deletes the MAC address that is configured for the Bridge-if interface of the current bridge group.

By default, the MAC address of the Bridge-if interface is the system MAC address.

Format

mac-address mac-address

undo mac-address

Parameters

Parameter Description Value
mac-address Specifies a MAC address of a Bridge-if interface.

The MAC address is in the format of H-H-H. H is a hexadecimal number that contains four digits, such as 00e0 and fc01. A MAC address cannot be FFFF-FFFF-FFFF or any multicast MAC addresses.

Views

Bridge-if interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The MAC address of a Bridge-if interface is the system MAC address, and may conflict with the MAC address of another interface (a physical or logical interface). If the MAC address of the Bridge-if interface conflicts with that of a member interface in the bridge group, Layer 3 traffic forwarding on the Bridge-if interface may fail.

In this case, you must run the mac-address command to reconfigure a MAC address for the Bridge-if interface.

Configuration Impact

After the MAC address of the Bridge-if interface is changed, the device sends gratuitous ARP packets to the remote device so that the remote device can refresh its ARP entries.

Example

# Configure a MAC address for Bridge-if 1.

<Huawei> system-view
[Huawei] interface bridge-if 1
[Huawei-Bridge-if1] mac-address 0001-2345-abcd

mac-address static bridge

Function

The mac-address static bridge command configures a static MAC address entry for a bridge group. The outbound interface of the configured static entry belongs to a specific bridge group.

The undo mac-address bridge command deletes the static MAC address entry that is configured for a bridge group.

By default, no static MAC address entry is configured for a bridge group.

Format

mac-address static mac-address interface-type interface-number [ vlan vlan-id ] bridge bridge-id

undo mac-address static mac-address interface-type interface-number vlan vlan-id bridge bridge-id

undo mac-address [ static | dynamic | all ] [ interface-type interface-number ] [ vlan vlan-id | bridge bridge-id ]

undo mac-address mac-address bridge bridge-id

Parameters

Parameter Description Value
mac-address Specifies a unicast MAC address for a bridge group. The value is in the format of H-H-H. H is a hexadecimal number that contains four digits, such as 00e0 and fc01. A MAC address cannot be FFFF-FFFF-FFFF or any multicast MAC addresses.
interface-type interface-number Specifies the type and number of an interface. -
vlan vlan-id indicates the VLAN ID. The value can be 1 or 4094.
bridge bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.
all Indicates all MAC address entries. -
dynamic Specifies a dynamic entry, which will be aged. Dynamic entries will be lost after the system is reset or the I/O interface board is hot swapped. -

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To enhance network security on a stable network, the mac-address static bridge command can be run to configure a static MAC address entry for a bridge group.

Prerequisites

Interfaces must have been added to the bridge group. The interface can be a Layer 3 interface or a Layer 2 interface that has been added to a VLAN (and the VLANIF interface has been added to the bridge group).

Precautions

After a static MAC address entry has been configured for a bridge group, the bridge group forwards packets based on the configured static MAC address entry.

Example

# Configure a static MAC address entry for a bridge group.
<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] quit
[Huawei] interface gigabitethernet 1/0/0
[Huawei-GigabitEthernet1/0/0] bridge 3
[Huawei-GigabitEthernet1/0/0] quit
[Huawei] mac-address static 0001-0001-0001 gigabitethernet 1/0/0 bridge 3

map bridge broadcast

Function

The map bridge broadcast command configures a PVC to send and receive bridge packets.

The undo map bridge broadcast command prohibits a PVC from sending and receiving bridge packets.

By default, a PVC on an ATM interface is not configured to send and receive bridge packets.

NOTE:

Only the AR509G-L-D-H and AR509GW-L-D-H support this command.

Format

map bridge broadcast

undo map bridge broadcast

Parameters

None

Views

ATM-PVC view, IMA-PVC view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When two Ethernet networks communicate with each other by using ATM links or IMA group links, the Ethernet frames need to be transmitted by means transparent bridging (TB). The map bridge broadcast command can be run to allow a PVC to send and receive bridge packets.

Prerequisites

Interfaces have been added to a bridge group.

Precautions

On an ATM interface, only one PVC is allowed to send and receive bridge packets.

If a PVC is deleted, the configuration (sending and receiving bridge packets) of the PVC will also be automatically deleted.

Example

# Configure PVC 1/102 to send and receive bridge packets.

<Huawei> system-view
[Huawei] interface atm 1/0/1
[Huawei-Atm1/0/1] bridge 2
[Huawei-Atm1/0/1] pvc 1/102
[Huawei-atm-pvc-Atm1/0/1-1/102] map bridge broadcast

reset bridge statistics

Function

The reset bridge statistics command clears the traffic statistics in a bridge group.

Format

reset bridge bridge-id statistics

Parameters

Parameter Description Value
bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR509GW-L-D-H and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

User view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The reset bridge statistics command can be used to clear the traffic statistics in the current bridge group.

Precautions

After the reset bridge statistics command is run, the traffic statistics in a bridge group will be cleared.

The traffic statistics cannot be restored after being cleared. Exercise caution when running the reset bridge statistics command.

Example

# Clear the traffic statistics in bridge group 10.

<Huawei> system-view
[Huawei] bridge 10
[Huawei-bridge10] quit
[Huawei] quit
<Huawei> reset bridge 10 statistics
Related Topics

reset counters interface bridge-if

Function

The reset counters interface bridge-if command clears the traffic statistics on a Bridge-if interface.

Format

reset counters interface bridge-if [ bridge-id ]

Parameters

Parameter Description Value
bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR509GW-L-D-H and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

User view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To locate faults in a bridge group, the reset counters interface bridge-if command can be used to clear the original traffic statistics.

Precautions

After the reset counters interface bridge-if command is run, the traffic statistics on the Bridge-if interface of a bridge group will be cleared.

The traffic statistics cannot be restored after being cleared. Exercise caution when running the reset counters interface bridge-if command.

Example

# Clear the traffic statistics on Bridge-if 1.

<Huawei> reset counters interface bridge-if 1

routing ip

Function

The routing ip command enables a bridge group to route IP protocol packets.

The undo routing ip command disables a bridge group from routing IP protocol packets.

By default, a bridge group is disabled from routing IP protocol packets.

Format

routing ip

undo routing ip

Parameters

None

Views

Bridge group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Generally, LAN users that need to be interconnected belong to the same network segment or aggregated network. A bridge connects multiple LANs at the link layer. If users in a bridge group need to access another network, link-layer bridging cannot meet the requirement.

Integrated routing and bridging can meet the requirement. In the integrated bridging and routing function, a Bridge-if interface can be created and the routing ip command can be run on the bridge group to configure the IP protocol packet routing function. This allows interconnection between different network segments.

Prerequisites

The bridge command has been run to create bridge groups.

The IP routing function cannot be configured if any member interface in the bridge group is configured with an IP address. Before configuring the IP routing function, make sure that none of the member interfaces has an IP address.

Precautions

A Bridge-if interface can forward IP protocol packets only when the routing ip command is run.

Example

# Enable the IP routing function for bridge group 3.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] routing ip

shutdown (bridge view)

Function

The shutdown command shuts down a specified bridge group.

The undo shutdown command starts a specified bridge group.

By default, a bridge group is started.

Format

shutdown

undo shutdown

Parameters

None

Views

Bridge group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To shut down traffic in a bridge group, the shutdown command can be used to shut down the bridge group.

Precautions

After the shutdown command is run, the traffic in a specified bridge group is shut down. If the bridge group has a Bridge-if interface, running the shutdown command makes the physical status of the interface to go Down, disables the forwarding function of the Bridge-if interface, shuts down traffic in the bridge group, and interrupts services.

The shutdown command is used to shut down only the traffic being forwarded in a bridge group and on the Bridge-if interface, and the member interfaces in the bridge group will not be shut down. If the member interfaces in the bridge group are also forwarding the traffic that does not belong to any bridge group, the traffic will not be affected by the shutdown command.

Example

# Shut down bridge group 3.

<Huawei> system-view
[Huawei] bridge 3
[Huawei-bridge3] shutdown

undo mac-address bridge

Function

The undo mac-address bridge command deletes MAC address entries of a bridge group.

Format

undo mac-address mac-address bridge bridge-id

Parameters

Parameter Description Value
mac-address

Specifies the MAC address.

The value is in the format of H-H-H. H is a 4-digit hexadecimal number, such as 00e0 and fc01. If an H contains less than four hexadecimal digits, the first digits contained in the H are 0s. For example, if an H is e0, it is equal to 00e0. FFFF-FFFF-FFFF is invalid for a MAC address.
bridge-id Specifies the number of a bridge group.
The value is an integer and its range depends of product models.
  • AR503GW-LM7, AR503GW-LcM7, AR509G-L-D-H, AR509GW-L-D-H, and AR510 series the value ranges from 1 to 4.
  • AR530 series, the value ranges from 1 to 16.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The undo mac-address bridge command can be used to delete MAC address entries of a bridge group.

Configuration Impact

Dynamic MAC address entries of a specified bridge group or an interface in a bridge group are deleted.

Precautions

MAC address entries of a bridge group cannot be restored after being deleted. Therefore, exercise caution when running the undo mac-address bridge command.

Example

# Delete MAC address entries of a specified bridge group.

<Huawei> system-view
[Huawei] undo mac-address bridge 200
Translation
Download
Updated: 2019-02-18

Document ID: EDOC1000097293

Views: 36964

Downloads: 101

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next