No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Interface Management

CloudEngine 12800 and 12800E V200R003C00

This document describes the interface management configuration, including basic interface configuration, Ethernet interface configuration, and logical interface configuration.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Unidirectional Single-Fiber Communication

Configuring Unidirectional Single-Fiber Communication

Context

During network management and maintenance, the administrator may need to send traffic from users to a specified server for analysis, recording, and processing. If a server can receive and send packets, there is a possibility that the server forwards user traffic to other devices, causing a security risk. The unidirectional single-fiber communication function can address this issue. A single fiber means that two optical modules are connected by only one fiber, and unidirectional communication means that packets can be sent in only one direction. With this function, a switch can only send but cannot receive packets, and an analysis server can only receive but cannot send packets. The data security on the analysis server is ensured.

An optical module provides a TX end and an RX end. Generally, two optical modules are connected by two fibers. The TX and RX ends of one module are respectively connected to the RX and TX ends of another module. A device transmits and receives packets through two independent fibers. If the unidirectional single-fiber communication function is disabled, two devices cannot communicate with each other through a single fiber. After this function is configured, the devices can use only one fiber to communicate with each other.

As shown in Figure 2-5, SwitchA is connected to the upper-layer traffic distribution device through 10GE2/0/1. The traffic sent from the traffic distribution device enters SwitchA through 10GE2/0/1. SwitchA transmits packets through 10GE2/0/2, and the analysis server receives packets through the optical interface. After the unidirectional single-fiber function is configured on interface 10GE2/0/2, you only need to connect the TX end of the optical module on 10GE2/0/2 to the RX end of the optical module on the analysis server through one fiber. Then the switch can transmit packets to the analysis server through a single fiber, and the analysis server can receive packets through a single fiber. In addition, the TX end of the optical module on the analysis server is not connected, so the analysis server cannot transmit packets, ensuring data security on the server.

Figure 2-5 Networking diagram of unidirectional single-fiber communication

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The interface view is displayed.

  3. (Optional) Run device transceiver transceiver-type

    The medium type is pre-configured on the interface.

    You can configure single-fiber communication on an interface only after an optical module (a non-single-fiber bidirectional optical module) is installed on the interface. If no optical module is installed on the interface, you can run this command to pre-configure the medium type of the interface as fiber.

  4. Perform either of the following operations based on requirements: (The two commands cannot be used together and the command configured later takes effect.)

    • Run single-fiber enable

      The unidirectional single-fiber communication function is configured.

      By default, the unidirectional single-fiber communication function is disabled. After this command is configured on an interface, the interface will be in Down state if no optical module is installed on the interface or a single-fiber bidirectional optical module or high-speed cable is installed.

    • Run single-fiber rx

      The single-fiber receiving function is configured.

      By default, the single-fiber receiving function is disabled. After this command is configured on an interface, the interface is in Up state only when both the local and remote optical modules are installed and can properly receive optical signals. The interface can only receive packets but cannot send packets. This configuration takes effect only when the optical fiber is connected to the RX end of the local optical module.

  5. Run commit

    The configuration is committed.

Translation
Download
Updated: 2019-05-05

Document ID: EDOC1100004195

Views: 18659

Downloads: 37

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next