Cisco vs Huawei Essential Command Mapping

SOURCE: https://forum.huawei.com/carrier/en/thread-82497.html

What I LIKE in Huawei after few weeks using it
-open SFP
that mean you can use any sfp brand, it will not complain, but I don’t know that will void warranty
in Aruba you can use 3rd party sfp but that will void warranty
in Ruckus open SFP as well but won’t void warranty
-1 year warranty
like Cisco
unlike Aruba and Ruckus which is limited lifetime warranty (the best in warranty, you can have 100 years warranty)
-price could be cheaper than anything else
that’s why most countries using it nowadays
-almost all the switches are L3 switch
if you want more feature such as vxlan, just add license
-telco in mind
you can have AC or DC power module in the back. if you want to change AC to DC, just add DC module
if you want more poe power just add two AC power modules
it has anti static port in the back

NEED TO IMPROVE
-save need in User mode
unlike Cisco that you type “do wr me” in config mode
unlike Aruba that you just type “wr me” in any mode
-who answer in forum is not technical enough compare to Cisco and Aruba forum

CiscoHuawei
[no equivalent: shows the files used for startup]display startup (user mode)
??
aaaaaa
bootboot bootrom
clear access-list countersreset acl counter all (user mode)
clear countersreset (user mode)
clear cryptoipsec sa
ike sa
clear interfacereset counters interface
clear ip bgpreset bgp all
clear ip cefreset ip fast-forwarding
clear ip route *reset ip routing-table statistics protocol all
clockclock
conf tsystem-view
copy running-configsave filename
debug / no debugdebugging / undo debugging
debug pvc negodebug atm all (very dangerous – might crash router)
disablesuper 0 (number is privilege level from 0 to 3, where 3 is default and equivalent to “enable” on Cisco)
enablesuper
enable secret (conf mode)super pass cipher (system mode)
endreturn or ctrl+z
exitquit
ip tacacshwtacacs nas-ip (this command doesn’t exist !!!)
mtumtu
noundo
pingping
reloadreboot
router bgpbgp
router riprip
sendsend (user mode)
showdisplay
show atm pvcdisplay atm pvc-info
show clockdisplay clock
show controllerdisplay controller (but not relevant for non-modular chassis)
show crypto isakmp keydisplay ike peer
show crypto isakmp policedisplay ike proposal
show crypto isakmp sadisplay ike sa
show dsl int atm 0display dsl status interface atm 2/0
show flashdir flash: (user mode)
show frame-relay pvcdisplay fr pvc-info
show interfacesdisplay interface
show ip bgpdisplay bgp routing-table
show ip interfacedisplay ip interface
show ip nat translationdisplay nat session
show ip routedisplay routing-table
show loggingdisplay logbuffer
show policy-map interfacedisplay qos policy interface
show portdisplay port-mapping
show snmpdisplay snmp-agent statistics
show startupdisplay saved-configuration
show techdisplay diagnostic-information
show usersdisplay users
show versiondisplay version
shutdownshutdown
snmp-servertftp-server (system mode)
tacacs-serverhwtacacs scheme (system mode)
telnettelnet
terminal lengthscreen-length disable
undo screen-length disable
terminal monitorterminal debugging (user mode)
terminal no monitorundo terminal debugging (user mode)
traceroutetracert
write erasereset saved-configuration
write mem (or wr or copy run start)save
write terminal (sh run)display current-configuration

Enabling Portfast

ARUBANETWORKS:

CISCO

JUNIPER:
SOURCE
https://randymukti.wordpress.com/2015/03/29/configuring-stp-portfast-on-juniper-platform-edge-port-juniper/
https://www.juniper.net/documentation/en_US/junos/topics/example/security-spanning-trees-bpdu-protection-els.html

-to enable
interfaces {
interface-range ACCESS {
member-range ge-0/0/6 to ge-0/0/45;
}
protocols {
rstp {
interface ACCESS {
edge;
}
bpdu-block-on-edge;
}
ethernet-switching-options {
bpdu-block {
disable-timeout 60;
}

-to check EDGE on/off
# run show spanning-tree interface detail | match “Link type”
Link type : Pt-Pt/NONEDGE
Link type : Pt-Pt/NONEDGE
Link type : Pt-Pt/NONEDGE
Link type : Pt-Pt/NONEDGE
Link type : Pt-Pt/NONEDGE
Link type : Pt-Pt/EDGE

RESULT:
EDGE ON
Mac 26s
Win 5s

EDGE OFF
Mac 28s
Win 9s


Ruckus ICX Rollback

I am curios on how to do rollback config in Ruckus when you didn’t cancel the job anything within 1hr.
That feature is standard in Juniper since long time a go
That is useful when you do remotely. In case you miss configure something like netmask that causing you disconnected and impossible for you to reconnect unless you console manually.

After post my question into Ruckus forum, Ruckus employee said that feature is not available.
https://forums.ruckuswireless.com/ruckuswireless/topics/cron-job-nhmrkgp88t9wp?topic-reply-list%5Bsettings%5D%5Bfilter_by%5D=all&topic-reply-list%5Bsettings%5D%5Bpage%5D=1#reply_20614638

Got an idea from how Aruba did rollback.
Two things I need to solve which are alias and cron job.
Smarter guy answer my post and here the steps although not perfect enough

STEPS
to create an alias
#conf t
#alias bkup=copy flash flash file startup-config backup
#alias restor=copy flash flash file backup startup-config
to create a cron job
#conf t
#batch buffer 1 &
#restor &
#end
#execute batch 1 after 00:00:01
#sh batch schedule
Batch buffer 1 will be executed 0 days 0 hours 0 minutes 52 seconds from now
NOTE:can’t put reload on batch
http://docs.ruckuswireless.com/fastiron/08.0.61/fastiron-08061-commandref/GUID-02AE6631-717F-4E29-9213-8213C4D168B8.html

to reload after 2min
#reload 00:00:02
Those steps achieve my goal but almost perfect because
1. I can’t put reload in batch (see notes above), that’s why I need to put batch and reload in consecutive order

2. will be better if I can copy backup to running-config directly
I can do that but not affect current running-config
for example
current hostname SW1
wr me
copy startup-config to backup
change hostname to SW2
copy backup to running-config
those wont change my running hostname

Using Nginx as Load Balancer in Docker

-pull nginx

# docker pull nginx
# docker pull nginxdemos/hello

-run two nginx
because I want to set static ip to www1 and www2.
I need to create my own network

# docker network create –subnet=172.10.0.0/24 vlan10
# docker run –name=www1 –hostname=www1 –net vlan10 –ip 172.10.0.11 -p 81:80 -d nginxdemos/hello

# docker run –name=www2 –hostname=www2 –net vlan10 –ip 172.10.0.12 -p 82:80 -d nginxdemos/hello

-create nginx load balancer
# cat nginx.conf
upstream loadbalance {
    least_conn;
    server 192.168.88.66:81;
    server 192.168.88.66:82;
}
server {
    location / {
        proxy_pass http://loadbalance;
    }

}

# cat Dockerfile
FROM nginx
RUN rm /etc/nginx/conf.d/default.conf

COPY nginx.conf /etc/nginx/conf.d/default.conf

# docker build -t nginxbalancer .

# docker container run -p 80:80 -d nginxbalancer

-test accessing http://192.168.88.66

it should show “Server address:”

-test shutdown both www1 and www2
# docker stop www1

# docker stop www2

test accessing http://192.168.88.66

it should show bad gateway

-test run www1 again
# docker start www1
it should show “Server address:”

Replacing Acer E5-476G LCD

I have Acer Aspire E5-476G which the LCD screen has a white screen on a quarter of it.
It also has vertical lines.
It is a common problem in Acer.
I never encounter an LCD problem in Dell after using it for 6 years

After searching, I found that it has 2 types.
HD 1366×768 Glossy or FHD 1920×1080 Matte
The price difference on AliExpress is only $3, but I can’t wait for 1 month if shipping from China.

I try to fix myself because Repair Shop charges me double of the LCD price.
Which is in between $50-$70 range

After searching on Youtube, I think I can do myself.
But I have a backup plan too. Which is find a local store with the cheapest LCD price and cheapest installation fee.
Installation fee only $3.5
So I bought from a local store. HD type only $32
I have 2 options, which are doing it myself and save $3.5 or let the shop do it for me.

If I do it myself, I’ll have experience on it and will be useful if the same thing happens next time

WHERE TO BUY:
https://www.bukalapak.com/p/komputer/aksesoris-226/aksesoris-lainnya-241/1gw8lhc-jual-led-lcd-14-0-slim-30-pin-laptop-acer-e5-476-e5-476g-es1-432-z476-z1402
https://www.aliexpress.com/item/32983308130.html

PREPARATIONS:
-Phillips screwdrivers
-guitar plectrum ( a small triangle plastic). You can use any thin plastic actually (ATM or CC card)

STEPS:

Distinguish Original SanDisk

In Indonesia, there are 2 SanDisk Distributor. Previously 4 but now only 2 left

1. PT. Astrindo Senayasa
Mangga Dua Square, Ruko blok G No. 24-27, Jl. Gunung Sahari Raya no. 1 Jakarta Utara 10730 Indonesia
Tel: +6221 2938 2288 Fax: +6221 2938 2289

“GENUINE PRODUCT ASTRINDO” hologram on the package

2. PT. Datascrip
Jl Selaparang Blok. B-15 Kav. 9 Komp. Kemayoran Jakarta Pusat 10610 Indonesia
Tel: +6221 6544515 ex. 280 Fax: +6221 6544811-12

“DATASCRIP” hologram on the package

Hologram ASTRINDO GENUINE PRODUCT
HoloAstrindo.jpeg
Hologram Datascrip
HoloDatascrip.jpeg
-check
Made in China
Font thinner
2019-05-29 13_00_18-SanDisk.pdf - Foxit Reader.png
PackIn.jpg
2019-05-29 13_02_27-SanDisk.pdf - Foxit Reader.png
-check Read/Write test with Android “A1 SD Bench” app
BenchOri.jpeg
-check with Windows H2testw app
2019-05-27 22_22_13-H2testw _ Progress.png

Automatically backup config to scp or tftp when “write mem”

In Cisco, I can automatically backup config using scp or tftp to other location every time I issue “wr me”

How to achieve the same in other brand?

CISCO:
archive
path scp://root:eve@10.0.10.70/$h
write-memory

 

FORTIGATE:

 

HP:

 

JUNIPER:
https://forum.ivorde.com/junos-system-configuration-archival-is-not-working-over-scp-t19351.html

 

RUCKUS:

 

iDrac Network connection has been dropped

PROBLEMS:
Using iDrac Virtual Console
‘The viewer has terminated
Reason : The network connection has been dropped.’

SOLUTIONS:
Edit C:\Program Files (x86)\Java\jre1.8.0_181\lib\security\java.security
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, DES40_CBC, RC4_40

Recovery partition shown up on my Desktop

Since update windows 10 to update 1803, recovery partition shown up as drive D on my Desktop.
Here how to hide it
-run cmd as Administrator
> diskpart
DISKPART> list vol
  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ———-  —  ———–  —–  ———-  ——-  ———  ——–
  Volume 0     E                       DVD-ROM         0 B  No Media
  Volume 1     D                NTFS   Partition    450 MB  Healthy
  Volume 2     C                NTFS   Partition   1862 GB  Healthy    Boot
  Volume 3                      FAT32  Partition    100 MB  Healthy    System
DISKPART> select vol 1
Volume 1 is the selected volume.
DISKPART> remove letter=d
DiskPart successfully removed the drive letter or mount point.