OPTICAL MODULE ANTI-FAKE DETECTION PRINCIPLE

1.3.15 opticalmodule anti-fake detection

This function is used to detect whether the optical module used on the Ruijie device is Ruijie original optical module.

Non-Ruijie original certified optical module quality can not be guaranteed, resulting in user data communication quality is affected. Optical module anti-fake detection function is used to identify this risk, when the non-Ruijie original certified optical module insert into the Ruijie equipment, the equipment will be automatically identified and issued an alarm message.

The optical module anti-fake detection function is enable by default on the Ruijie equipment, the user can also be configured to turn off the optical module anti-fake detection.

Working principle:

Each Ruijie original certified optical module has a unique anti-fake code, the device to read the anti-fake code to determine whether the original optical module; if not the original optical module, it will print syslog alarm information, and send the alarm TRAP.

Turn off the optical module anti-fake detection function

Fiber antifake ignore in the global configuration mode, configure the optical module anti-fake detection function.

? Turn off the optical module anti-fake detection function

? Optional configuration. Use this command to disable this function when no optical module anti-fake detection is required.

? Optical module anti-fake detection function is turned on by default, when a non-original optical module is inserted, several alarms are printed. After configuring the anti-fake detection of the optical module, and then insert the non-original module, there will be no alarm information.

【Command format】 fiber antifake ignore

【Parameter Description】 Null

【Default configuration】 The optical module anti-fake detection function is enabled by default

【Command mode】 Global configuration mode

【User Guide】 User can re-enable the optical module anti-fake detection function of the device by executing the no fiber antifake ignore command.

【False positives ofoptical module detection】

1. Check whether the model and the version of the optical module belong to Ruijie's injected anti-fake module.
2. If the early optical module is not imported into the anti-fake, in the case of clear is the optical module of our company (if the syslog suggested Serial NO and the value of the module label is consistent) can ignore the log prompt.
3. If it is a new module, make sure already imported the anti-fake, plug the optical module, enter the following information (please collect the cause of problem):

debug lsm fiber-transceiver

Examples:

RG-S2910C-48GT2XS-HP-E

Note: Mandatory on combo ports for the configuration of the links at 1Gbps, since ports 49/50 have a fixed configuration of 10Gbps

fiber antifake ignore

no fiber antifake enable

interface GigabitEthernet 0/47

medium-type fiber

description CONEXION SWITCH IP: 10.1.0.3

port-group 1 mode active

no poe enable

!

interface GigabitEthernet 0/48

medium-type fiber

description connection switch IP: 10.1.0.3

port-group 1 mode active

no poe enable

!

interface TenGigabitEthernet 0/49

!

interface TenGigabitEthernet 0/50

!

interface AggregatePort 1

description connection switch IP: 10.1.0.3

switchport mode trunk

ip dhcp snooping trust

!

RG-S5750-48GT4XS-HP-H

For SFP + type ports, for its functionality, it was necessary to reduce its speed to 1000 to raise the links in these types of ports.

interface TenGigabitEthernet 0/49

storm-control broadcast pps 3000

speed 1000

description connection switch IP: x.x.x.x

switchport mode trunk

ip dhcp snooping trust

!

interface TenGigabitEthernet 0/50

storm-control broadcast pps 3000

speed 1000

description connection switch IP: 10.1.0.20

switchport mode trunk

ip dhcp snooping trust

!

interface TenGigabitEthernet 0/51

storm-control broadcast pps 3000

speed 1000

description connection switch IP: x.x.x.x

switchport mode trunk

ip dhcp snooping trust

!

interface TenGigabitEthernet 0/52

storm-control broadcast pps 3000

speed 10G

description connection switch IP: x.x.x.x

switchport mode trunk

ip dhcp snooping trust