H3C S3100 Series Manuale utente

H3C S3100 Series Ethernet Switches

Operation Manual

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Document Version: 20100908-C-1.00

Product Version: Release 22XX Series

No part of this manual may be reproduced or transmitted in any form or by any means without prior

written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , Aolynk, , H3Care,

, TOP G, , IRF, NetPilot, Neocean, NeoVTL,

SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,

XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,

Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners.

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

H3C S3100 Series Ethernet Switches Operation Manual-Release 22XX Series describes the software

features for the H3C S3100 Series Ethernet Switches and guides you through the software

configuration procedures. It also provides configuration examples tohelp you apply software features to

different network scenarios.

This preface includes:

zAudience

zOrganization

zSoftware Version

zConventions

zAbout the H3C S3100 Documentation Set

zObtaining Documentation

zDocumentation Feedback

Audience

This documentation is intended for:

zNetwork planners

zField technical support and servicing engineers

zNetwork administrators working with the S3100 series

Organization

H3C S3100 Series Ethernet Switches Operation Manual-Release 22XX Series is organized as follows:

Part Features

01-CLI Operation zIntroduction to CLI

zCLI configuration

02-Login Operation

zLogging into a switch through the console port

zLogging in through Telnet/SSH

zLogging in using a modem

zLogging in through the web-based network management system

zLogging in through NMS

zUser control

03-Configuration File

Management Operation

zSaving and deleting the configuration file

zErasing the startup configuration file

zSpecifying a configuration file for next startup

04-VLAN Operation

zVLAN overview

zPort-based VLAN

zMAC-based VLAN (applicable only to the S3100-EI series)

zProtocol-based VLAN (applicable only to the S3100-EI series)

Part Features

05-Static Route Operation

zIntroduction to static route

zStatic route configuration

zTroubleshooting a static route

06-IP Address-IP Performance

Operation

zConfiguring an IP address for a switch

zConfiguring the TCP attributes for a switch

07-Voice VLAN Operation Voice VLAN (applicable only to the S3100-EI series)

08-GVRP Operation GARP VLAN registration protocol (GVRP)

09-Port Basic Configuration

Operation

zConfiguring port auto-negotiation speed

zLimiting traffic on individual ports

zEnabling flow control on a port

zDuplicating the configuration of a port to other ports

zConfiguring loopback detection for Ethernet port(s)

zEnabling loopback test

zConfiguring a port group

zEnabling the system to test connected cable

zConfiguring the interval to perform statistical analysis on port traffic

zDisabling Up/Down log output on a port

zConfiguring storm control on a port

zSetting the port state change delay

10-Link Aggregation Operation

zLink aggregation control protocol (LACP)

zManual aggregation

zStatic aggregation

11-Port Isolation Operation Port isolation group

12-Port Security-Port Binding

Operation

zConfiguring port security

zConfiguring port binding (applicable only to the S3100-EI series)

13-DLDP Operation Device link detection protocol (DLDP) (applicable only to the S3100-EI

series)

14-MAC Address Table

Management Operation

zManually configuring dynamic, static, and black hole MAC addresses

zSetting the MAC address aging timer

zSetting the maximum number of MAC addresses a port can learn

zDisabling MAC address learning for a VLAN (applicable only to the

S3100-EI series)

zAssigning MAC addresses for Ethernet ports

zConfiguring MAC address replication (applicable only to the S3100-EI

series)

15-MSTP Operation

zSTP/RSTP/MSTP overview and basic configuration

zPerforming mCheck operation

zGuard functions: BPDU Guard, Root Guard, Loop Guard, TC-BPDU

Attack Guard, and BPDU Drop (BPDU Drop is applicable only to the

S3100-EI series)

zDigest snooping

zRapid transition

zVLAN-VPN tunnel (applicable only to the S3100-SI series)

zMSTP maintenance configuration

zSending trap messages conforming to 802.1d standard

Part Features

16-Multicast Operation

zInternet group management protocol (IGMP) snooping v2&v3

zMulticast Listener Discovery (MLD) snooping v1&v3 (applicable only

to the S3100-EI series)

zIPv6 multicast VLAN configuration (applicable only to the S3100-EI

series)

zMulticast user control policy configuration (applicable only to the

S3100-EI series)

17-802.1x-System Guard

Operation

zBasic 802.1x configuration

zAdvanced 802.1x configuration

zConfiguring quick EAD deployment

zConfiguring HABP server

zConfiguring HABP client

zConfiguring system guard

18-AAA Operation

zAAA overview

zAAA configuration

zRADIUS configuration

zHWTACACS configuration

zEAD configuration

19-MAC Address Authentication

Operation

zMAC authentication overview

zConfiguring basic MAC authentication functions

zMAC address authentication enhanced function configuration

20-Web Authentication Operation

(Applicable only to the S3100-EI

series)

zIntroduction to web authentication

zWeb authentication configuration

zConfiguring an Auth-Fail VLAN for web authentication

zConfiguring a web authentication-free user

zConfiguring HTTPS access for web authentication

zCustomizing web authentication pages

zConfiguring web authentication transition

zConfiguring a proxy server port for web authentication

21-Triple Authentication Operation

(Applicable only to the S3100-EI

series)

zTriple authentication overview

zTriple authentication configuration

22-ARP Operation

zGratuitous ARP

zManually configuring ARP entries

zARP attack detection (applicable only to the S3100-EI series)

zARP packet rate limit (applicable only to the S3100-EI series)

23-DHCP Operation

zDHCP server (applicable only to the S3100-EI series)

zDHCP snooping

zDHCP packet rate limit (applicable only to the S3100-EI series)

zDHCP/BOOTP client

24-ACL Operation

zBasic/advanced ACLs (Only ACLs defined on S3100-EI series

switches can be applied to hardware directly.)

zLayer 2 ACLs (applicable only to the S3100-EI series)

zIPv6 ACLs (applicable only to the S3100-EI series)

25-QoS-QoS Profile Operation zQuality of Service (QoS)

zQoS profile (applicable only to the S3100-EI series)

26-Mirroring Operation zLocal port mirroring

zRemote port mirroring

Part Features

27-Stack-Cluster Operation

zStack

zHuawei Group Management Protocol (HGMP) v2

zNeighbor Discovery Protocol (NDP)

zNeighbor Topology Discovery Protocol (NTDP)

zCluster topology management function

zCluster synchronization function

28-PoE-PoE Profile Operation zPower over Ethernet (PoE)

zPoE profile

29-SNMP-RMON Operation zSimple network management protocol (SNMP)

zRemote monitoring (RMON)

30-NTP Operation zNetwork time protocol (NTP)

31-SSH Operation zConfiguring the SSH server

zConfiguring the SSH client

32-File System Management

Operation

zFile system management

zFile attribute configurable

33-FTP-SFTP-TFTP Operation

zOperating as an FTP server/FTP client

zOperating as an SFTP server/SFTP client

zOperating as a TFTP client

34-Information Center Operation

zSystem logs

zHierarchical alarms

zDebugging information output

35-System Maintenance and

Debugging Operation

zBoot ROM and host software loading

zBasic system configuration and debugging

zNetwork connectivity test

zDevice management

zScheduled task configuration

36-VLAN-VPN Operation

zVLAN-VPN (QinQ)

zConfiguring TPID value (applicable only to the S3100-EI series)

zConfiguring BPDU tunnels (applicable only to the S3100-EI series)

zSelective QinQ (applicable only to the S3100-EI series)

37-VLAN Mapping Operation zOne-to-one VLAN mapping (applicable only to the S3100-EI series)

zMany-to-One VLAN mapping (applicable only to the S3100-EI series)

38-HWPing Operation

zHWPing Server/HWPing client configuration

zNine test types, including ICMP test, DHCP test, FTP test, HTTP test,

DNS test, SNMP test, jitter test, TCP test, and UDP test

39-IPv6 Management Operation

zSupporting IPv6 address

zSupporting static IPv6 route

zSupporting ND snooping (applicable only to the S3100-EI series)

zSupporting ND detection (applicable only to the S3100-EI series)

zSupporting DHCPv6 snooping (applicable only to the S3100-EI series)

zSupporting IPv6 filtering (applicable only to the S3100-EI series)

zSupporting IPv6 DNS

zIPv6-based ping, traceroute, TFTP, and Telnet

40-DNS Operation zStatic domain name resolution

zDynamic domain name resolution

41-Smart Link-Monitor Link

Operation

zSmart Link (applicable only to the S3100-EI series)

zMonitor Link (applicable only to the S3100-EI series)

Part Features

42-ARP and IP Attack Defense

Operation

zSupporting ARP packet filtering based on gateway’s address

(applicable only to the S3100-EI series)

zSupporting configuring the maximum number of dynamic ARP entries

a VLAN interface can learn (applicable only to the S3100-EI series)

zSupporting ARP/IP attack defense based on 802.1x (applicable only to

the S3100-EI series)

zSupporting ARP source MAC address consistency check

43-LLDP Operation

zBasic Link Layer Discovery Protocol (LLDP) configuration

zCDP compatibility (applicable only to the S3100-EI series)

zLLDP trapping

44-PKI Operation zPKI overview

zPKI configuration

45-SSL Operation zConfiguring an SSL server policy

zConfiguring an SSL client policy

46-HTTPS Operation zHTTPS overview

zHTTPS configuration

47-Ethernet OAM Operation

(Applicable only to the S3100-EI

series)

zConfiguring basic ethernet OAM functions

zConfiguring the Ethernet OAM connection detection timers

zConfiguring link monitoring

zEnabling OAM remote loopback

48-CFD Operation

(Applicable only to the S3100-EI

series)

zConfiguring basic CFD settings

zConfiguring CC on MEPs

zConfiguring LB on MEPs

zConfiguring LT on MEPs

Software Version

H3C S3100 Series Ethernet Switches Operation Manual-Release 22XX Series and H3C S3100 Series

Ethernet Switches Command Manual-Release 22XX Series are for the software version Release 22XX

Series of the S3100-SI series and S3100-EI series switches.

Comparedwith Release 21XX Series,some new features are addedin Release 22XX Series. For more

information, see Table -1.

Table -1 Added features

Software

version Added features compared with the earlier version

Release 2108P04 Part

Configuring MAC address replication (applicable only to

the S3100-EI series) 14-MAC Address Table

Management Operation

Setting the offline detect timer for MAC authentication on

the Ethernet port view 19-MAC Address

Authentication Operation

Configuring a web authentication-free user on the Ethernet

port view (applicable only to the S3100-EI series)

Configuring web authentication transition (applicable only

to the S3100-EI series)

Release

2211P06

Configuring a proxy server port for web authentication

(applicable only to the S3100-EI series)

20-Web Authentication

Operation

Software

version Added features compared with the earlier version

Release 2108P04 Part

Limit broadcast traffic in pps 09-Port Basic Configuration

Operation

Multicast user control policy configuration (applicable only

to the S3100-EI series)

Disables the EPON ONU from dropping unknown multicast

packets (applicable only to the S3100-EI series)

16-Multicast Operation

Unicast trigger function of 802.1x (applicable only to the

S3100-EI series) 17-802.1X-System Guard

Operation

Triple authentication (applicable only to the S3100-EI

series) 21-Triple Authentication

Operation

Cluster synchronization function 27-Stack-Cluster Operation

Many-to-one VLAN mapping (applicable only to the

S3100-EI series) 37-VLAN Mapping Operation

DHCPv6 snooping options 18 and 37 Functions

(applicable only to the S3100-EI series) 39-IPv6 Management

Operation

Ethernet OAM configuration (applicable only to the

S3100-EI series) 47-Ethernet OAM Operation

Release

2211P02

CFD configuration (applicable only to the S3100-EI series) 48-CFD Operation

MAC-based VLAN configuration (applicable only to the

S3100-EI series) 04-VLAN Operation

Configuring QoS priority settings for voice traffic on an

interface (applicable only to the S3100-EI series) 07-Voice VLAN Operation

Configuring port auto-negotiation speed

Configuring storm control on a port 09-Port Basic Configuration

Operation

Extended LACP functions 10-Link Aggregation

Operation

Guest VLAN for a Port in macAddressOrUserLoginSecure

mode function

Configuring an aging time for learned security MAC

address entries

IPv6-supported port binding (applicable only to the

S3100-EI series)

12-Port Security-Port Binding

Operation

Suppressing flooding of unknown multicast traffic in a

VLAN

MLD snooping (applicable only to the S3100-EI series)

IPv6 multicast VLAN (applicable only to the S3100-EI

series)

16-Multicast Operation

Mandatory 802.1X authentication domain 17-802.1x-System Guard

Operation

Per user type AAA

Configuring the sending mode of accounting start requests

Multiple secondary RADIUS servers

Release 2209

IPv6-supported RADIUS authentication

18-AAA Operation

Software

version Added features compared with the earlier version

Release 2108P04 Part

Web authentication 20-Web Authentication

Operation

DHCP Server (applicable only to the S3100-EI series)

Removing DHCP snooping entries

Automatic Configuration

23-DHCP Operation

IPv6 ACL (applicable only to the S3100-EI series) 24-ACL Operation

VLAN marking 25-QoS-QoS Profile

Operation

IPv6-supported SNMP 29-SNMP-RMON Operation

Configuring command alias

Enabling auto power down on the 1000 Mbps uplink port

Scheduled task configuration

35-System Maintenance and

Debugging Operation

New HWPing commands, including: adv-factor, datafill,

description, display hwping statistics, filesize, history

keep-time, history-record enable, hwping-agent clear,

hwping-agent max-requests, sendpacket passroute,

statistics, statistics keep-time, test-time begin, and ttl.

38-HWPing Operation

ND snooping function (applicable only to the S3100-EI

series)

ND detection function (applicable only to the S3100-EI

series)

DHCPv6 snooping function (applicable only to the

S3100-EI series)

IPv6 filtering function (applicable only to the S3100-EI

series)

39-IPv6 Management

Operation

ARP packet filtering based on gateway’s address

(applicable only to the S3100-EI series)

Configuring the maximum number of dynamic ARP entries

a VLAN interface can learn (applicable only to the

S3100-EI series)

ARP/IP attack defense based on 802.1x (applicable only to

the S3100-EI series)

42-ARP and IP Attack

Defense Operation

LLDP 43-LLDP Operation

PKI 44-PKI Operation

SSL 45-SSL Operation

HTTPS 46-HTTPS Operation

Conventions

This section describes the conventions used in this documentation set.

Command conventions

Convention Description

Boldface Bold text represents commands and keywords that you enter literally as shown.

italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are

optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars,

from which you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical

bars, from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by

vertical bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by

vertical bars, from which you may select multiple choices or none.

&<1-n> The argument or keyword and argument combination before the ampersand (&)

sign can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface Window names, button names, field names, and menu items are in Boldface.

For example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create

> Folder.

Symbols

Convention Description

Means reader be extremely careful. Improper operation may cause bodily

injury.

Means reader be careful. Improper operation may cause data loss or damage to

equipment.

Means an action or information that needs special attention to ensure

successful configuration or good performance.

Means a complementary description.

Means techniques helpful for you to make configuration with ease.

About the H3C S3100 Documentation Set

The H3C S3100 documentation set includes:

Altri manuali per S3100 Series

Indice

Altri manuali H3C Router di rete

H3C

H3C AR 18-22-24 Manuale utente

H3C

H3C S3610 Series Manuale utente

H3C

H3C S12516CR Manuale operativo e di manutenzione

H3C

H3C S3100-52P Istruzioni per l'installazione

H3C

H3C CR16000-F Manuale di installazione

H3C

H3C CR19000-20 Manuale utente

H3C

H3C S3610 Series Manuale utente

H3C

H3C H3C S7500E Series Manuale di installazione

H3C

H3C CR16000-F Manuale utente

H3C

H3C SR6600 SPE-FWM Manuale utente

H3C

H3C MSR 20 Series Manuale utente

H3C

H3C CR16000-F Manuale utente

H3C

H3C S5500-SI Series Manuale utente

H3C

H3C MSR 2600 Series Manuale utente

H3C

H3C H3C S7500E Series Manuale utente

H3C

H3C SR6600-X Manuale utente

H3C

H3C S5500-EI series Manuale utente

H3C

H3C MSR 5600 Manuale di installazione

H3C

H3C SR8800-F Manuale utente

H3C

H3C MSR 5600 Manuale utente

H3C

H3C SR6602-X Manuale utente

H3C

H3C MSR 3600 Manuale utente

H3C

H3C S9500 Series Istruzioni per l'installazione

H3C

H3C SR6600 SPE-FWM Manuale di installazione

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza