No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Common Operation Guide

CloudEngine 12800, 12800E, 8800, 7800, 6800, and 5800 Series Switches

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Unidirectional Communication on an Interface

Configuring Unidirectional Communication on an Interface

If a switch can receive and send packets, there is a possibility that the switch forwards user traffic to other devices, causing a security risk. With the unidirectional communication function, a switch can only receive packets but cannot send packets, ensuring data security. You can configure the unidirectional communication function on an interface using the following methods:

Method 1: Configuring the Interface as a Unidirectional Single-Fiber Communication Interface

When two optical modules are connected through a single fiber, packets can be sent in only one direction, which is unidirectional single-fiber communication.

# Enable the unidirectional single-fiber communication function on 10GE1/0/1.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] single-fiber enable
[*HUAWEI-10GE1/0/1] commit
  • In versions earlier than V100R005C00, optical interfaces that have no optical module installed or have optical modules (not single-fiber bidirectional optical modules) installed support the single-fiber enable command.

  • In V100R005C00 and later versions, only optical interfaces that have optical modules pre-configured or have optical modules (not single-fiber bidirectional optical modules) installed support the single-fiber enable command.

Method 2: Configuring the Interface as a Single-Fiber Receiving Interface

This method has been supported since V100R005C10. The interface can only receive packets but cannot send packets.

# Enable the single-fiber receiving function on 10GE1/0/1.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] single-fiber rx
[*HUAWEI-10GE1/0/1] commit

Method 3: Disabling a Common Interface from Receiving or Sending Packets (Supported by Only CE12800&12800E Series Switches)

Run the shutdown { transmit | receive } command in the interface view to disable the interface from receiving or sending packets.

# Disable 10GE1/0/1 from sending packets.

<HUAWEI> system-view
[~HUAWEI] interface 10ge 1/0/1
[~HUAWEI-10GE1/0/1] shutdown transmit
[*HUAWEI-10GE1/0/1] commit
  • Disabling an interface from receiving or sending packets is not a single-fiber function. Therefore, the interface can go Up only after it has two fibers installed and properly negotiates with the remote interface.

  • Running the shutdown { transmit | receive } command does not affect the Up or Down state of the interface. You can configure this function on the interface regardless of whether the remote interface supports this function.

  • Running this command in the interface view disables the interface from receiving or sending packets, and affects packet exchange between devices. Exercise caution when deciding to run this command.

Translation
Download
Updated: 2018-10-08

Document ID: EDOC1000102369

Views: 143691

Downloads: 3160

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next