MA5800-X2>enable

MA5800-X2>config

MA5800-X2(config)#display board 0

MA5800-X2(config)#board confirm 0/0

zona horaria

MA5800-X2(config)#display timezone

MA5800-X2(config)#timezone GMT- 05:00

MA5800-X2(config)#display timezone

Reloj

MA5800-X2(config)#display time

MA5800-X2(config)#time 2025-08-06 5:07:00

MA5800-X2(config)# display time

MA5800-X2(config)#display sysman service state

MA5800-X2(config)#sysman service telnet enable (opcional)

Usuarios

MA5800-X2(config)#display terminal user-profile all

MA5800-X2(config)#terminal user-profile add

MA5800-X2(config)#terminal user name

MA5800-X2(config)#
Crear VLAN de servicio

vlan 200 smart

quit

Configurar PON y asociar VLAN

interface gpon 0/1

port 0 ont auto-find enable //Habilitar detección automática de ONTs

quit

interface gpon 0/1

port 0 vlan 200

Crear Perfiles de Línea y Servicio

Perfil de Línea (definición de ancho de banda y T-CONTs):

ont-lineprofile gpon profile-id 20

tcont 1 dba-profile-id 1

gem add 1 eth tcont 1

quit

Perfil de Servicio (definición de puertos y VLAN):

ont-srvprofile gpon profile-id 20

port eth 1 vlan 200

quit

Asociar VLAN a la ONT

service-port 1 vlan 200 gpon 0/0/0 ont 1 gemport 1 multi-service user-vlan 200

Guardar la configuración

save
ONTs detectadas:

display ont autofind all

Estado de ONT:

display ont info 0 1

AGREGAR LA ONT

#interface gpon 0/1

#ont add 0 sn-auth 4F454D543C0C1B0A omci ont-lineprofile-id 71 ont-srvprofile-id 71

ont auto-add-policy gpon equipment VSOL omci ont-lineprofile-id 20 ontsrvprofile-

id 20 auto-confirm enable

----->> criando uma rota default para a gerência apontando para o GW: 10.11.104.254 ip route-
static 0.0.0.0 0.0.0.0 10.11.104.254

MA5800-X2(config)# sysman service telnet enable

MA5800-X2(config)# display sysman service state

===============================================================
=============================================================== ==========
CONFIGURANDO GERENCIA INBAND - VLAN: 1000 ==========
===============================================================
=============================================================== --- Criando a VLAN
MA5800-X2(config)# vlan 1000 smart

--- Adicionando descrição em uma VLAN

MA5800-X2(config)# vlan desc 1000 description Gerencia-Inband --- Agregando a VLAN na(s)
porta(s) de uplink

MA5800-X2(config)# port vlan 1000 0/3 0-3 --- Atribuindo IP à VLAN de gerencia
MA5800-X2(config)# interface vlanif 1000

MA5800-X2(config-if-vlanif2000)# ip address 172.16.4.10 255.255.255.0 description gestion

MA5800-X2(config-if-vlanif2000)# quit

--- Configurando uma rota para a rede IP 172.16.4.0 (para a VLAN de gerência)

MA5800-X2(config)# ip route-static 172.16.4.0 255.255.255.0 172.16.4.1

===============================================================
===============================================================
==================== AUTO-SAVE ===================
===============================================================
===============================================================

MA5800-X2(config)# autosave time 03:00:00

MA5800-X2(config)# autosave type configuration

MA5800-X2(config)# autosave time on

MA5800-X2(config)# display autosave configuration

{ <cr>||<K> }: Command: display autosave configuration System autosave interval switch: off
Autosave interval: 1440 minutes Autosave type: configuration file System autosave modified
configuration switch: off Autosave interval: 30 minutes Autosave type: configuration file System
autosave time switch: on Autosave time: 03:00:00 Autosave type: configuration file

===============================================================
===============================================================
================== AUTO-BACKUP ===================

===============================================================
===============================================================

MA5800-X2(config)# file-server auto-backup configuration primary 10.11.104.103 tftp

MA5800-X2(config)# file-server auto-backup configuration primary 10.11.104.103 ftp user User

Name(<=40 chars):user01 User Password(<=40 chars):user01

MA5800-X2(config)# auto-backup period configuration enable

MA5800-X2(config)# auto-backup period configuration interval 1 time 05:00

MA5800-X2(config)# display auto-backup period configuration config { <cr>||<K> }: Command:

display auto-backup period configuration config Configuration file auto periodic backup switch:
enable Configuration file auto backup period : 1 Configuration file auto backup time : 05:00
==Configurando puertos de UPLINK:

MA5800-X2(config)# interface mpu 0/3

MA5800-X2(config-if-mpu-0/3)# speed 2 1000

MA5800-X2(config-if-mpu-0/3)# auto-neg 2 disable

MA5800-X2(config-if-mpu-0/3)# quit

MA5800-X2(config)# display board 0/3

===============================================================
===============================================================
=============================================================== CONFIGURANDO O
SERVIÇO GPON BRIDGE E PPPOE
===============================================================
=============================================================== --->> Passos para
configurar o serviço de internet: 1) Criar a VLAN 2) Associar VLAN nas portas de uplink 3) Criar os
DBAs 4) Criar os line-profile 5) Criar os srv-profile 6) Habilitar o auto-find nas portas GPON

7) display ont autofind all ------->> para encontrar o SN das ONUs 8) Confirmar ONU com SN, LINE e
SRV profile 9) Configurar o SERVICE-PORT para cada VLAN de serviço 10) Colocar a ONU em
BRIDGE -------->> *Opcional
===============================================================
=============================================================== VLAN 10: Servicio de
internet ===============================================================
=============================================================== 1) VLAN 10 - Internet
MA5800-X2(config)# vlan 10 smart MA5800-X2(config)# vlan desc 10 description Internet
MA5800-X2(config)# port vlan 10 0/3 0-3 MA5800-X2(config)# port vlan 10 0/4 0-3
******************************************************************** 2) MA5800-
X2(config)# dba-profile add profile-id 100 profile-name 100M type4 max 100000 MA5800-
X2(config)# dba-profile add profile-id 200 profile-name 2M type2 assure 2100 3) ----- Creando line-
profile 10 con la VLAN 10 ------------------------------------ MA5800-X2(config)# ont-lineprofile gpon
profile-id 10 profile-name FotonOne-10 MA5800-X2(config-gpon-lineprofile-10)# tcont 1 dba-
profile-id 100 MA5800-X2(config-gpon-lineprofile-10)# gem add 1 eth tcont 1 MA5800-X2(config-
gpon-lineprofile-10)# gem mapping 1 1 vlan 10 MA5800-X2(config-gpon-lineprofile-10)# commit
MA5800-X2(config-gpon-lineprofile-10)# quit ----- Creando line-profile 20 con la VLAN 30 para
internet y 31 para voz ----------------- MA5800-X2(config)# ont-lineprofile gpon profile-id 30 profile-
name "linage30" MA5800-X2(config-gpon-lineprofile-30)# tcont 1 dba-profile-id 30

MA5800-X2(config-gpon-lineprofile-30)# gem add 1 eth tcont 1 MA5800-X2(config-gpon-

lineprofile-30)# gem mapping 1 1 vlan 30 MA5800-X2(config-gpon-lineprofile-30)# tcont 2 dba-
profile-id 31 MA5800-X2(config-gpon-lineprofile-30)# gem add 2 eth tcont 2 MA5800-X2(config-
gpon-lineprofile-30)# gem mapping 2 1 vlan 31 MA5800-X2(config-gpon-lineprofile-30)# tcont 3
dba-profile-id 32 MA5800-X2(config-gpon-lineprofile-30)# gem add 3 eth tcont 3 MA5800-
X2(config-gpon-lineprofile-30)# gem mapping 3 1 vlan 32 MA5800-X2(config-gpon-lineprofile-30)#
commit MA5800-X2(config-gpon-lineprofile-30)# quit 4) -- Creando Service profile con 2 LAN
------------------ ont-srvprofile gpon profile-id 8120 profile-name "EG8120" ont-port eth 2 port vlan
eth 1 30 port vlan eth 2 30 commit -- Creando Service profile con 4 LAN y 1 POTS (Vlan 30 =
internet y vlan 31 = POTS) ------------------ ont-srvprofile gpon profile-id 30 profile-name "EG8141"
ont-port pots 1 eth 4 port vlan eth 1 30 port vlan eth 2 30 port vlan eth 3 30 port vlan eth 4 30 port
vlan iphost 31 commit ------------------------- AGGREGANDO ONU -------------------------------------
******** Identificando y Autenticando la ONU en el puerto PON 0/1 MA5600T(config)# interface
gpon 0/1 MA5600T(config-if-gpon-0/1)# port 1 ont-auto-find enable ---->>> Solo necesita ser
ejecutado 1 vez para habilitar a OLT para reconocer ONUs conectadas MA5603T(config-if-gpon-
0/1)# display ont autofind 1 --->> ((Para buscar o SN das ONUs en el puerto PON 1)) MA5800-
X2(config-if-gpon-0/1)# display ont autofind 1 { <cr>||<K> }: Command: display ont autofind 1
------------------------------------------------------- Number : 1 F/S/P : 0/1/1 Ont SN : 4857544360D3AC3D
(HWTC-60D3AC3D) ----------------

>>>>>>>>> Buscar SN da ONU Password : 0x00000000000000000000 Loid : Checkcode :

VendorID : HWTC Ont Version : AF6.A Ont SoftwareVersion : V3R017C10S120 Ont EquipmentID :
EG8120L Ont Customized Info : COMMON Ont autofind time : 22-04-2021 23:43:14-03:00
-------------------------------------------------- 5) MA5800-X2(config-if-gpon-0/1)# ont confirm sn-auth
4857544360D3AC3D omci ont- lineprofile-id 10 ont-srvprofile-id 0 desc Sr.Luiz { <cr>|ont-
type<K> }: MA5800-X2(config-if-gpon-0/1)# display ont info 1 0 { <cr>||<K> }: Command: display
ont info 1 0 ----------------------------------------- F/S/P : 0/1/1 ONT-ID : 0 Control flag : active Run state :
online Config state : normal <<------ Buscar NORMAL (Line-Profile) Match state : match <<------
Buscar MATCH (srv-profile) DBA type : SR ONT distance(m) : 15 6) MA5600T(config)# service-port
vlan 10 gpon 0/1/1 ont 0 gemport 1 multi-service user-vlan 10 7 - OPCIONAL) ---- Transformar la
ONU en modo BRIDGE: -->> Para configurar ONU Bridge hay que executar el comando abaijo. Se
for PPPoE/DHCP o IP estatico no és necesario. MA5600T(config)# interface gpon 0/1
MA5600T(config-if-gpon-0/1)# ont port native-vlan <PUERTO-PON> <ONU-ID> eth <PUERTO-ETH-
ONU> vlan <VLAN-ID> MA5600T(config-if-gpon-0/1)# ont port native-vlan 2 1 eth 1 vlan 10 ----->>
Configurando servicio de internet (VLAN 10) saliendo bridge (untag) por el puerto 'eth 1' de la
ONU

-->>-->> Solo necesita ejecutar este comando se requiere configurar ONU en modo Bridge. -->>-->>
Se for configurar ONU PPPoE/DHCP o IP estatica no necesita este comando ------ ENVIANDO
CONFIGURAÇÕES DE PPPoE PARA ONUs HUAWEI ------------------------------------- ----->> Definimos
modo de configuração da ONU por OMCI: MA5800-X2(config)# gpon ont home-gateway config-
method omci ---->> Criamos um profile para a porta WAN da ONU fazer NAT (só precisa de 1
profile): MA5800-X2(config)# ont wan-profile profile-id 30 profile-name WAN-NAT MA5800-
X2(config-wan-profile-30)# nat enable MA5800-X2(config-wan-profile-30)# quit ---> Enviando o
PPPoE para a ONU: MA5800-X2(config-if-gpon-0/1)# ont ipconfig 1 0 ip-index 0 pppoe vlan 10
user- account username usuario01 password usuario01 MA5800-X2(config-if-gpon-0/1)# ont wan-
config 1 0 ip-index 0 profile-id 30 MA5800-X2(config-if-gpon-0/1)# ont internet-config 1 0 ip-index
0 MA5800-X2(config-if-gpon-0/1)# ont port route 1 0 eth 1 enable MA5800-X2(config-if-gpon-
0/1)# ont port route 1 0 eth 2 enable ------- A5800-X2(config-if-gpon-0/1)# display ont wan-info 1 0
{ <cr>||<K> }: Command: display ont wan-info 1 0
--------------------------------------------------------------------- F/S/P : 0/1/1 ONT ID : 0
--------------------------------------------------------------------- Index : 1 Name :
OLT_C_INTERNET_PPPOE_WAN Service type : Internet Connection type : IP routed IPv4
Connection status : Connected <<<<<<< IPv4 access type : PPPoE IPv4 address : 10.10.10.200
<<<<<<<<

Subnet mask : 255.255.255.255 Default gateway : 10.10.10.100 Manage VLAN : 10 Manage priority
: 5 Option60 : No Switch : Enable MAC address : E4C2-D160-D3AD <<<<<<<< Priority policy :
Specified L2 encap-type : PPPoE MA5600T(config)# interface gpon 0/1 MA5800-X2(config-if-gpon-
0/1)# display port traffic 1 { <cr>||<K> }: Command: display port traffic 1
---------------------------------------------------------------- Traffic Information
---------------------------------------------------------------- Up traffic (kbps) : 0 Down traffic (kbps) : 0
---------------------------------------------------------------- Traffic of upstream broadcast frames(packets/s) :
0 Traffic of upstream multicast frames(packets/s) : 0 Traffic of upstream unicast
frames(packets/s) : 0 Traffic of downstream broadcast frames(packets/s) : 0 Traffic of downstream
multicast frames(packets/s) : 0 Traffic of downstream unicast frames(packets/s) : 0
----------------------------------------------------------------

Page

of 9

Other related materials

Keyboard-interactive authentication prompts from server:

| User Authentication

| User password:

End of keyboard-interactive prompts from server

Access denied

Keyboard-interactive authentication prompts from server:

| User Authentication

| User password:

End of keyboard-interactive prompts from server

┌──────────────────────────────────────────────────────────────────────┐

│ • MobaXterm Personal Edition v25.2 • │

│ (SSH client, X server and network tools) │

│ │

│ ⮞ SSH session to [email protected] │

│ • Direct SSH : ✓ │

│ • SSH compression : ✓ │

│ • SSH-browser : ✓ │

│ • X11-forwarding : ✗ (disabled or not supported by server) │

│ │
 │ ⮞ For more info, ctrl+click on help or visit our website. │

└──────────────────────────────────────────────────────────────────────┘

Huawei Integrated Access Software (MA5800).

Copyright(C) Huawei Technologies Co., Ltd. 2002-2023. All rights reserved.

-----------------------------------------------------------------------------

User last login information:

-----------------------------------------------------------------------------

Access Type : SSH

IP-Address : 10.100.0.250

Login Time : 2000-01-03 12:27:32+08:00

Logout Time : 2000-01-03 12:33:21+08:00

-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

User fail login information:

-----------------------------------------------------------------------------

Last Access Type : SSH

Last IP-Address : 10.100.0.50

Last Login Time : 2000-01-03 12:39:00+08:00

Login Failure Times : 1

-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

All user fail login information:

 -----------------------------------------------------------------------------

Access Type IP-Address Time Login Times

-----------------------------------------------------------------------------

SSH 10.11.104.250 2000-01-03 12:13:14+08:00 3

SSH 10.100.0.50 2000-01-03 12:39:16+08:00 2

SSH 10.100.0.250 2000-01-03 12:27:22+08:00 1

-----------------------------------------------------------------------------

MA5800-X2>enable

MA5800-X2#config

MA5800-X2(config)#?

---------------------------------------------

Command of config Mode:

---------------------------------------------

aaa AAA(Authentication, Authorization, Accounting) view

acl Specify ACL configuration information

ancp ANCP configuration command

anti-rogueont Anti rogue ONT

arp <Group> ARP command group

arp-detect Arp Detect

as-notation The AS notation

auto-backup Auto backup

auto-vccv Config the auto vccv

autounloop Automatic unloop

bfd Specify Bidirectional Forwarding Detection (BFD)

bfd-pw Bidirectional Forwarding Detection for Pseudo Wire

bgp Border Gateway Protocol(BGP)

bind Bind IP

bits Set BITS attribute

board Reset board

bpdu BPDU

bridge-domain Bridge-domain

btv Broadband TV

build-configuration Configuration file build mode

bulk-stat Set the bulk statistic module

car-group Car-Group

car-threshold Priority CAR threshold

cfm Continuity Fault Management

channel-group TWDM PON channel-group

classification <Group>ONT traffic classification profile command

group

clear Clear the current login failure information in the

system

command Modify command level parameters

config System config

cos-group-table CoS-group table

cos-queue-map 802.1p priority and queue map

cos-queue-map-profile Cos queue map profile

cos-remark Set CoS remark

cpu-defend CPU Defend

cpu-overload-control Set bucket parameters

crypto Crypto

dba-profile <Group>DBA profile configuration command group

dcn Data Communication Network

debugging <Group> debugging command group

dedicated-net Dedicated network

default Configure default MAC pool

default-policy Configure default policy

defaultvlan Configure default VLAN type

dhcp DHCP

dhcp-option82 DHCP-option82

dhcp-server Add DHCP server IP addresses

dhcpv6 DHCPv6 command group

dhcpv6-option DHCPv6 option command group

dhcpv6-server Add DHCPv6 server IPv6 addresses

dim Dynamic integrity measurement

display Display information

dns Specify domain name system

dot1ad Set dot1ad TPID

dot1x 802.1X

dpbo-esel DPBO-ESEL

dscp-to-dscp DSCP-to-DSCP mapping table

dscp-to-pbits DSCP mapping table

dtls Datagram Transport Level Security

dual-parenting Dual parenting

early-drop <Group>early-drop command group

ed25519 Specify ED25519 module configuration information

efm Ethernet fault management

emdi Enhance media delivery index

emu <Group> EMU command group

enterprise Enterprise

epon <Group>EPON command group

erps Ethernet ring protection switching

esi Ethernet Segment Identifier

eth Eth global config

evpl EVPL

evpn EVPN global config

evpn-route-origin EVPN route origin

explicit-path Specify path explicitly

fan FAN speed priority

filter-list Filter-list

firewall Enter firewall command group

frame Set frame attribute

gpon <Group>GPON command group

hqos Hierarchical QoS

hwtacacs-server Add or delete HWTACACS server template

icmp ICMP protocol

if-mib If-mib

igmp IGMP keyword

info-center Specify message output configuration information

interface Change into MPU command mode

io-packetfile Activate the patch file of the board software packet

ip Specify IP configurations for the system

ip-detect IP detect

ipdr Create a session

ipprec-to-pbits IP precedence mapping table

ipv4 IPv4 configuration commands

ipv6 <Group> IPv6 command group

isis Intermediate System to Intermediate System (ISIS)

isolate Port isolation group

keychain Keychain authentication

lacp Configure LACP Protocol

license Local License

line-rate Limit the rate of the outbound packets of the

interface

link-aggregation Operate link aggregation group

linktrap Link trap switch of the port

lldp Link Layer Discovery Protocol

load System load command

lspv Lsp verification

mac-address MAC address table

mac-count-zero Maximum MAC address learning number is zero

mac-pool Configure/display MAC pool

manual-set Manual set PW fault configuration information

mass-sip-alarm Mass sip alarm info

merge HQoS merge queue

mirror Add mirror

mmi-mode Activating the machine-machine mode

monitor Monitoring

monitor-link Monitor link group

mpls <Group> MPLS command group

mtu-protocol Protocol MTU

multi-service-port Add multi-service-port

multicast Multicast

multicast-queue Multicast queue

multicast-unknown Multicast-unknown keyword

multicast-vlan Setup and enter multicast VLAN mode

nac Neighbor automatic communication

netconf NETCONF

network Network

nqa Network Quality Analysis(NQA)

ntp-service Specify NTP(Network Time Protocol) configuration

information

ont <Group>ONT command group

ont-alarm-policy Alarm policy profile

ont-digitmap-profile Ont digitmap profile

ont-ethoam Enter ONT ETHOAM mode

ont-if-h248 Ont h248 interface

ont-if-mgcp Ont MGCP interface

ont-if-sip Ont SIP interface

ont-lineprofile <Group>ONT line profile command group

ont-mg-attribute-profile Ont mg attribute profile

ont-mgc-profile Ont mgc profile

ont-pots-profile Config pots profile

ont-pstnport Ont pstnport config

ont-sipagent-profile ONT SIP agent profile

ont-sippstnuser Sippstnuser

ont-siprightflag-profile ONT SIP right flag Profile

ont-slaprofile Ont-slaprofile

ont-srvprofile <Group>ONT service profile command group

ont-voip-media Ont voip media

ont-voipsignal Bind ONT VoIP signal profile

ont-voipsignal-profile ONT VoIP signal profile

onu Set the function of managing the ONU through the NAT

proxy for the OLT

onu-switch ONU switch

optical-alarm-profile Optical alarm profile

ospf Open Shortest Path First (OSPF)

ospfv3 OSPF version 3 for IPv6

osu <Group>OSU loading command group

outer-ethertype Set the outer Ethernet type of the port and VLAN(s)

overload-aware Awareness of overload

packet Packet

packet-filter Filter packets based on acl

packet-policy Packet policy

pads Protocol aided diagnosis system

path-constraint Configuration of path constraint

pbits-to-pbits Priority mapping table

pim Specify Protocol Independent Multicast (PIM)

configuration information
pim-ipv6 PIM IPv6 status and configuration information

pitp Set PITP status

pki Pubic key infrastructure

policy-based-route Specify a policy for policy based routing

port VLAN standard port

port-shaping Port traffic shaping

portal Portal

portal-server Portal server

pppoe PPPoE

priority-group Priority group

protect-group Protect group

protocol Configure protocol force forwarding switch

ptp <Group> ptp command group

ptp-adaptive <Group> 1588ACR command group

pw PW information

pw-ac-binding PW AC binding

pw-description PW description

pw-para Specifing PW parameter configuration

pw-protect PW protect

pw-redundancy PW redundancy

pw-revertive-mode Recovery mode

qos-acl The Qos based on ACL

qos-policy-profile QoS policy profile

queue-buffer CoS queue buffer

queue-policy Queue policy

queue-scheduler CoS queue scheduling mode

queue-shaping Queue shaping

queue-wred Set WRED profile of the queue(s)

quit Exit from current mode and enter prior mode

rack Set Rack description attribute

radius-server Configure a RADIUS server template

raio Relay Agent Information Options

raio-anid ANID

raio-anip ANIP

raio-format Set user-defined RAIO format string

raio-mode Set relay agent info option mode

raio-profile RAIO profile

rate Rate

reset Reset

return Enter the privileged mode

ring Configure/display ring check information

rip <Group> rip command group

ripng Specify RIPng(Routing Information Protocol for

IPv6)configuration information

rn <Group> Remote node command group

route Routing Module

route-policy Create a route policy or enter the route policy

command mode

router Configure router information

rsa RSA

security Security command

service-port Service port

service-port-bundle Service virtual port bundle

set Set operation

shaping Traffic shaping

shutdown Deactivate the port on the standby board

simulate Simulate

sm2 Specify SM2 module configuration information

snmp-agent Specify SNMP(Simple Network Management Protocol)

configuration information

snmp-profile <Group>SNMP profile command group

ssh Specify SSH (secure shell) configuration information

ssl Security socket layer

ssl-policy-file SSL policy file

stacking VLAN stacking

start Start keyword

static-cr-lsp Static CR-LSP configuration

stop Stop keyword

stp Spanning tree protocol

subboard Delete subboard

subscriber HQoS subscriber

super Modify super password parameters

supervlan VLAN aggregation

switch Switch language mode

syslog <Group> syslog command group

sysman Configuration of the management channel

system Device configuration information

tcp Specify TCP(Transmission Control Protocol)

 configuration information

tdm-connect TDM connect

telnet Establish a Telnet connection

temperature Set the temperature threshold of the system

terminal User operate (add, delete, modify attribute)

test Enter test mode

time Time information

time-range Specify time-range configuration information

traffic Configure traffic table

traffic-burst-detect Traffic burst detection

traffic-limit Limit the rate of the packets

traffic-mirror Mirror the packets

traffic-priority Specify new priority of the packets

traffic-redirect Redirect the packets

traffic-statistic Count the packets

traffic-suppress Set traffic suppression

tunnel Tunnel

tunnel-policy Tunnel policy

tunnel-selector Tunnel policy selector

undo Negate a command or set its defaults

upgrade Upgrade board to the version of slave-area

vdsl VDSL

video-quality-monitor Video quality monitor

vlan VLAN

vmac Configure/display VMAC information

vrrp-snoop <Group> VRRP-SNOOPING command group

vsi Virtual switch instance

vtp-cdp VTP-CDP

vxlan Vxlan

wred-profile WRED profile

xpon XPON

xpon-profile-copy XPON profile copy

---------------------------------------------

Command of privilege Mode:

---------------------------------------------

active Enable configuration

alarm Send simulative alarm

app Application

autosave Set automatic saving info

backup <Group> backup command group

baudrate Set serial baudrate

client Users information

command-file Command file

debugging Enable system debugging functions

dhcp DHCP

diagnose Change into diagnose mode

disable Turn off privileged mode commands

display Display information

event <Group> Event command group

file File system command word

file-server File server information

ftp FTP configuration

infoswitch Set output switch of information terminal

load Load configuration command

local-user Local user

loghost Log server configuration operation

patch Patch operation

ping Ping function

pppoe PPPoE

reboot Reboot system,active board or standby board

reset Reset operation

resource System resources(mem,message,cpu)

rollback System rollback command

run Run command file

save The command of saving immediately

send Send a message to other tty lines

set Set the operative time of undo rollback function

ssh Specify SSH (secure shell) configuration information

super Modify super password parameters

syslog <Group> syslog command group

sysman Configuration of the management channel

sysname Set system network name

system <Group> system command group

terminal User operate (add, delete, modify attribute)

time Set the time-stamp between NMS and network element

timezone Set time zone

tracert Trace route to host

trap TRAP
trap-sync Set trap synchronization switch

undo Negate a command or set its defaults

vlan VLAN

---------------------------------------------

Command of user Mode:

---------------------------------------------

clear Clear operation

cls Clear screen

debugging Enable system debugging functions

display Display information

echo Echo

help Description of the interactive help system

history-command The session history command

idle-timeout The interval of terminal timeout

interactive ML string

lock Lock the current user terminal interface

mpls Multiprotocol Label Switching(MPLS)

refresh Do soft reset

reset Reset operation

save Save logfile

scroll Auto or manual scroll function

set Set operation

smart Enable or disable smart function

snmp-agent Specify SNMP(Simple Network Management Protocol)

configuration information

stelnet Establish an Stelnet connection

super Modify super password parameters

telnet Open a telnet connection

terminal Set the terminal line characteristics

undo Negate a command or set its defaults

upgrade Upgrade

MA5800-X2(config)#display ?

---------------------------------------------

Command of config Mode:

---------------------------------------------

affinity-mapping Affinity mapping

arp Display ARP entries

bfd Specify Bidirectional Forwarding Detection (BFD)

bgp Border Gateway Protocol(BGP)

board Display information of board

current-configuration Current configuration

dcn Data Communication Network

debugging Debugging info

default-parameter Display default configuration parameter value

diagnostic-information System information for diagnosis

dns DNS status and configuration information

ed25519 Display ED25519 module status and configuration

information

evpn Ethernet Virtual Private Network

explicit-path Specify explicit path

interface Show information of interfaces

ip IP information

ipv6 IPv6 status and configuration information

isis ISIS status and configuration information

keychain Keychain configuration

l2vpn Operate on MPLS L2VPN

log <Group> log command group

logbuffer Log buffer status and configuration information

logfile Display log file information

master-key Master key

mpls Multiprotocol Label Switching (MPLS) status and

configuration information

neid Net-Element ID

ntp-service NTP(Network Time Protocol) service

packet-filter Display the configuration information of packet filter

paf PAF(Product Adaptive File)

pim PIM status and configuration information

qos-acl The Qos based on ACL

qos-info QoS interface configuration information

router Configure router information

saved-configuration The saved configuration information

security System security information

segment-routing Segment Routing

snmp-agent SNMP status and configuration information

ssh SSH status and configuration information

syslog Syslog source address configuration information

sysman Sysman
traffic-statistics Traffic-statistics

tunnel-selector Tunnel policy selector

udp UDP module

vxlan Virtual eXtensible Local Area Network

---------------------------------------------

Command of privilege Mode:

---------------------------------------------

aaa AAA(Authentication,Authorization,Accounting)

acl ACL status and configuration information

alarm

ancp ANCP configuration command

anti-rogueont Anti rogue ONT

app Application

arp <Group> ARP command group

arp-detect Arp Detect

auto-backup Auto backup

auto-vccv Display the auto-vccv information

autounloop Automatic unloop

bgp BGP information

bind Bind IP

bits Set BITS attribute

board Display information of board

bpdu BPDU

bridge-domain Bridge-domain

buffer Display buffer occupancy

build-configuration Configuration file build mode

bulk-stat Set the bulk statistic module

car-group Car-Group

car-threshold Priority CAR threshold

cfm Continuity Fault Management

channel-group TWDM PON channel-group

classification <Group>ONT traffic classification profile command

group

client Information of the client established with a

connection

command Command whose level is modified

command-file Command file

config System config

cos-group-table CoS-group table

cos-queue-map 802.1p priority and queue map

cos-queue-map-profile Cos queue map profile

cos-remark CoS and corresponding remarked CoS

cpu Display used percent of cpu

cpu-defend CPU Defend

cpu-overload-control Display bucket parameters

current-configuration Current configuration

data Display data synchronization status

dba-profile <Group>DBA profile configuration command group

debugging Enable system debugging functions

dedicated-net Dedicated network

default-parameter Display default configuration parameter value

default-policy Display default policy setting

dhcp DHCP

dhcp-client All of the interfaces that enabled DHCP client

function

dhcp-option82 DHCP-option82

dhcp-server Show the relevant information of DHCP server

dhcpv6 DHCPv6 command group

dhcpv6-option DHCPv6 option command group

dhcpv6-server Add DHCPv6 server IPv6 addresses

dim Dynamic integrity measurement

dot1ad Dot1ad TPID

dot1x 802.1X

dpbo-esel DPBO-ESEL

dscp-to-dscp DSCP-to-DSCP mapping table

dscp-to-pbits DSCP mapping table

dual-parenting Dual parenting

dynamic Dynamic user

early-drop <Group>early-drop command group

ed25519 Display ED25519 module status and configuration

information

efm Ethernet fault management

emdi Enhance media delivery index

emergency-call Emergency call

emu Emu serial baudrate

enterprise Enterprise

epon <Group>EPON command group

erps Ethernet ring protection switching

esi Ethernet Segment Identifier

eth Eth global config

fan FAN speed priority

fault Display the board fault list

file File system information

file-server Display file server configuration

firewall Enter firewall command group

frame Display information about Frame

ftp FTP configuration

gemport GEM port

gpon <Group>GPON command group

gre Generic Routing Encapsulation

host Host

hqos Hierarchical QoS

hwtacacs-server HWTACACS template and server configuration information

icmp ICMP protocol

icmpv6 ICMPv6 status and configuration information

if-mib If-mib

igmp IGMP keyword

io-packetfile IO packet file in flash

ip Specify IP configurations for the system

ip-detect IP detect

ipdr IPDR protocol

ipprec-to-pbits IP precedence mapping table

ipv6 <Group> IPv6 command group

isis ISIS status and configuration information

isolate Port isolation group

lacp Link Aggregation Control Protocol

link-aggregation Link aggregation group

linktrap Link trap switch of the port

lldp Link Layer Discovery Protocol

location Display MAC address location

log Display operation log

lspv Lsp verification

mac-address MAC address table

mac-count-zero Maximum MAC address learning number is zero

mac-pool Configure/display MAC pool

mass-sip-alarm Mass sip alarm info

merge HQoS merge queue

mini-system Mini system

mirror Display mirror information

monitor Monitoring

monitor-link Monitor link group

mpls Multiprotocol Label Switching (MPLS) status and

configuration information

mtu-protocol Protocol MTU

multi-portid Multicast GEM port

multicast Multicast

multicast-queue Multicast queue

multicast-source Multicast-source keyword

multicast-unknown Multicast-unknown keyword

nac Neighbor automatic communication

netconf NETCONF

network Network

norollback Display undo rollback time information

nqa Specify an NQA test class

ntp-service NTP(Network Time Protocol) service

ont <Group>ONT command group

ont-alarm-policy Alarm policy profile

ont-digitmap-profile Ont digitmap profile

ont-learned-mac The mac that the ont learned

ont-lineprofile ONT line profile

ont-mg-attribute-profile Ont mg attribute profile

ont-mgc-profile Ont mgc profile

ont-pots-profile Config pots profile

ont-sipagent-profile ONT SIP agent profile

ont-siprightflag-profile ONT SIP right flag Profile

ont-slaprofile Ont-slaprofile

ont-srvprofile ONT service profile

ont-voip-media Ont voip media

ont-voipsignal-profile ONT VoIP signal profile

onu Display the state of the function of managing the ONU

through the NAT proxy for the OLT

onu-switch ONU switch

optical-alarm-profile Optical alarm profile

ospf Open Shortest Path First (OSPF)

ospfv3 OSPF version 3 for IPv6

outer-ethertype Set the outer Ethernet type of the port and VLAN(s)
overload-aware Awareness of overload

packet Packet

packet-policy Packet policy

pbits-to-pbits Priority mapping table

pim PIM status and configuration information

pitp Display PITP config status

pki Pubic key infrastructure

policy-based-route Specify a policy for policy based routing

port Display port information

port-shaping Port traffic shaping

portal Portal

portal-server Portal server

power Query system power

pppoe PPPoE

MA5800-X2(config)#display current-configuration

{ <cr>|include-default<K>|interface<K>|ont<K>|port<K>|section<K>|service-port<K>||<K> }:

Command:

display current-configuration

[Active: H901MPSG; Standby: H901MPSG]

[Patch Info: SPH207]

[MA5800V100R022: 5012]

[pre-config]

<pre-config>
board add 0/0 H903PISB

board add 0/1 H907CGHF

[sysmode]

<sysmode>

switch vdsl mode to tr129

xpon mode switch-to profile-mode

sysmode end

[global-config]

<global-config>

terminal user name buildrun_new_password root *j$3b$XTDwK+!

8P8nrWrXQraYJ$vfy{+<&JjTjX0n$N3xq%;Vat@"[[.OTRY~Bkz:B)$* 7

0000:00:00:00:00:00 2000:01:02:02:00:18 root 1 first-login-info 0 self-changed-password 1 "-----"

terminal user name buildrun_new_password manatv *~uc$3b$1TN$5dlI5Ql}

[BR"F(]J$yCi;QCUz4TPyGQ(kg6.YB1y15zb]8J2c*o%1xT$L$* 0

2000:01:03:11:26:54 2000:01:03:12:10:04 root 2 first-login-info 0 self-changed-password 1 "-----"

system modify logon password enable all

system user password security mode enhance

system user password security-length 12

terminal user name history_password root *j$3b$QZ)ENC'Zi;lvR~>F&H|

M$aCVw7;jLL~Fsv'~sNh;@GHw}M{qJD~31r+M0gXo)$*

terminal user name history_password manatv *~uc$3b$D$xlE3&r7A$LR~BZ%;\

>$YiqN)<4ir/:VSl)~J`|SIVAb<DU*Q.:U^X*&oU[/$*

ssh client key-exchange sftp dh_group_exchange_sha256 curve25519_sha256

ssh client dh-exchange sftp min-len 2048

xpon ont optical-ddm quick-query disable

ont-lineprofile gpon profile-id 0 profile-name "line-profile_default_0"

omcc encrypt off

tcont 0 dba-profile-id 2

tcont 1 dba-profile-id 0

commit

quit

[device-config]

<device-config>

board add standby sub0 CPCG

system hardware-recovery disable serial-link

[public-config]

<public-config>

monitor uplink-port traffic port 0/3/0

monitor uplink-port traffic port 0/3/1

monitor uplink-port traffic port 0/3/2

monitor uplink-port traffic port 0/3/3

monitor uplink-port traffic port 0/4/0

monitor uplink-port traffic port 0/4/1

monitor uplink-port traffic port 0/4/2

monitor uplink-port traffic port 0/4/3

sysman service telnet enable

sysman service dhcp-relay disable

sysman service dhcpv6-relay disable

xpon ont default-fec 0/1 enable

#

[dnet-config]

<dnet-config>

dedicated-net dedicated-net-id 0 dedicated-net-name "DNet-0"

[mpu]

<mpu-0/3>

interface mpu 0/3

auto-neg 0 disable

speed 0 10000

auto-neg 1 disable

speed 1 10000

auto-neg 2 enable

speed 2 1000

auto-neg 3 enable

speed 3 1000

<mpu-0/4>

interface mpu 0/4

auto-neg 0 disable

speed 0 10000

auto-neg 1 disable

speed 1 10000

auto-neg 2 enable

speed 2 1000

auto-neg 3 enable
speed 3 1000

[gpon]

<gpon-0/1>

interface gpon 0/1

port combo-mode 0 wdm

port 0 ont-password-renew extra 1440

port combo-mode 1 wdm

port 1 ont-password-renew extra 1440

port combo-mode 2 wdm

port 2 ont-password-renew extra 1440

port combo-mode 3 wdm

port 3 ont-password-renew extra 1440

port combo-mode 4 wdm

port 4 ont-password-renew extra 1440

port combo-mode 5 wdm

port 5 ont-password-renew extra 1440

port combo-mode 6 wdm

port 6 ont-password-renew extra 1440

port combo-mode 7 wdm

port 7 ont-password-renew extra 1440

port combo-mode 8 wdm

port 8 ont-password-renew extra 1440

port combo-mode 9 wdm

port 9 ont-password-renew extra 1440

port combo-mode 10 wdm

port 10 ont-password-renew extra 1440

port combo-mode 11 wdm

port 11 ont-password-renew extra 1440

port combo-mode 12 wdm

port 12 ont-password-renew extra 1440

port combo-mode 13 wdm

port 13 ont-password-renew extra 1440

port combo-mode 14 wdm

port 14 ont-password-renew extra 1440

port combo-mode 15 wdm

port 15 ont-password-renew extra 1440

[platform-config]

<platform-config>

autosave type data

autosave interval off

autosave interval 1440

autosave time on

autosave time 01:30:00

autosave type configuration

autosave interval off

autosave interval 1410

autosave time on

autosave time 01:00:00

autosave interval configuration 30

#
[emu-config]

<emu-config>

emu add 0 h801pmu 0 0 "H802PMUB"

emu add 1 fan 0 1 "H902FMSA"

[bbs-config]

<bbs-config>

monitor uplink-port non-unicast port 0/3/0

monitor uplink-port non-unicast port 0/3/1

monitor uplink-port non-unicast port 0/3/2

monitor uplink-port non-unicast port 0/3/3

monitor uplink-port non-unicast port 0/4/0

monitor uplink-port non-unicast port 0/4/1

monitor uplink-port non-unicast port 0/4/2

monitor uplink-port non-unicast port 0/4/3

[abs-config]

<abs-config>

monitor uplink-port pppoe port 0/3/0

monitor uplink-port pppoe port 0/3/1

monitor uplink-port pppoe port 0/3/2

monitor uplink-port pppoe port 0/3/3

monitor uplink-port pppoe port 0/4/0

monitor uplink-port pppoe port 0/4/1

monitor uplink-port pppoe port 0/4/2

monitor uplink-port pppoe port 0/4/3

nac bind pki-domain default

[pki-config]

<pki-config>

pki domain default

pki import-certificate local filename huawei_equipment.crt

pki import-certificate trusted-ca filename huawei_access_product_ca.crt

pki import-certificate trusted-ca filename huawei_access_product_newroot.crt

pki import-certificate trusted-ca filename huawei_access_product_newsub.crt

pki import-certificate trusted-ca filename huawei_access_product_newwithold.crt

pki import-certificate trusted-ca filename huawei_equipment_root_ca.crt

pki switch preset-certificate chain link

[snmp]

<snmp>

snmp-agent local-engineid 800007DB034CD6294993E6

[ip-tunnel-profile]

<ip-tunnel-profile>

ip tunnel priority-profile gre index 0 name "default-profile-0" inbound dscp-outer dscp-inner

ip tunnel priority-profile vxlan index 0 name "default-profile-0" inbound dscp-outer cos-inner

set neid 0x9969AC

#
[aaa]

<aaa>

aaa

authentication-scheme "default"

authorization-scheme "default"

accounting-scheme "default"

domain "default"

[Interface]

<MEth0>

interface MEth0

ip address 10.100.0.2 255.255.255.0

<NULL0>

interface NULL0

undo dcn

[post-system]

<post-system>

ssh user "manatv" authentication-type password

ssh user "root" authentication-type password

 ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr
chacha20_poly1305

ssh server hmac sha2_512 sha2_256

ssh server key-exchange dh_group_exchange_sha256 curve25519_sha256

ssh server dh-exchange min-len 3072

ssh server publickey x509v3-ssh-rsa rsa_sha2_256 rsa_sha2_512 x509v3-rsa2048-sha256 ed25519

ntp-service server source-interface all disable

ntp-service ipv6 server source-interface all disable

ssh client publickey rsa_sha2_256 rsa_sha2_512 ed25519

ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr chacha20_poly1305

ssh client hmac sha2_512 sha2_256

ssh client key-exchange dh_group_exchange_sha256 curve25519_sha256

[source-interface]

<source-interface>

sysman server source ssh meth 0

sysman server source snmp meth 0

sysman server source snmp any-interface

sysman server source telnet meth 0

sysman server source telnet any-interface

return

MA5800-X2(config)#