3Com Switch 4500 PWR 26-Port User manual

3Com Switch 4500 Family
Configuration Guide
Switch 4500 26-Port
Switch 4500 50-Port
Switch 4500 PWR 26-Port
Switch 4500 PWR 50-Port
Product Version: V3.03.02p02
Manual Version: 6W100-20100418
www.3com.com
3Com Corporation
350 Campus Drive, Marlborough, MA, USA 01752 3064

Copyright © 2006-2010, 3Com Corporation. All rights reserved. No part of this documentation may be
reproduced in any form or by any means or used to make any derivative work (such as translation,
transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or
as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.
You agree not to remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
All other company and product names may be trademarks of the respective companies with which they are
associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we
are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental
standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.

About This Manual
Organization
3Com Switch 4500 Family Configuration Guide is organized as follows:
Chapter Contents
1 CLI Configuration Details how to use command line interface.
2 Logging In to an Ethernet Switch Details how to logging In to an Ethernet Switch.
3 User Control Details how to configure user control.
4 Switching User Level Details how to configure switching user level.
5 Configuration File Management Details how to configure file management.
6 VLAN Overview Details VLAN Overview .
7 VLAN Configuration Details how to configure VLAN.
8 IP Addressing Configuration Details how to assign an IP address manually.
9 IP Performance Optimization Configuration Details how to configure IP performance.
10 Voice VLAN Configuration Details how to configure Voice VLAN.
11 GVRP Configuration Details how to configure GVRP.
12 Port Basic Configuration Details how to configure Ethernet port.
13 Link Aggregation Configuration Details how to configure link aggregation.
14 Port Isolation Configuration Details how to configure port isolation.
15 Port Security Configuration Details how to configure port security.
16 Port Binding Configuration Details how to configure port binding.
17 DLDP Configuration Details how to configure DLDP.
18 MAC Address Table Management Details how to configure MAC Address Table.
19 Auto Detect Configuration Details how to configure Auto Detect.
20 MSTP Configuration Details how to configure MSTP.
21 IP Routing Protocol Overview IP Routing Protocol Overview.
22Static Route Configuration Details how to configure Static Route.
23 RIP Configuration Details how to configure RIP.
24 IP Route Policy Configuration Details how to configure IP Route Policy.
25 Multicast Overview Details the main concepts in multicast.
26 Common Multicast Configuration Details how to configure the common multicast
function.
27 IGMP Snooping Configuration Details how to configure IGMP Snooping.
28 802.1x Configuration Details how to configure 802.1X.
29 Quick EAD Deployment Configuration Details how to configure quick EAD deployment.
30 HABP Configuration Details how to configure HABP.
31 System Guard Configuration Details how to configure System Guard.

Chapter Contents
32 AAA Overview Introduces the authentication, authorization and
accounting functions.
33 AAA Configuration Details how to configure AAA.
34 EAD Configuration Details how to configure EAD.
35 MAC Address Authentication Configuration Details how to configure MAC address authentication.
36 ARP Configuration Details how to configure ARP.
37 ARP Attack Defense Configuration Details how to configure ARP Attack Defense.
38 DHCP Overview DHCP Overview.
39 DHCP Server Configuration Details how to configure DHCP Server.
40 DHCP Relay Agent Configuration Details how to configure DHCP Relay Agent.
41 DHCP Snooping Configuration Details how to configure DHCP Snooping.
42 DHCP Packet Rate Limit Configuration Details how to configure DHCP Packet Rate Limit
Configuration.
43 DHCP/BOOTP Client Configuration Details how to configure DHCP/BOOTP Client.
44 ACL Configuration Details how to configure ACL.
45 QoS Configuration Details how to configure QoS.
46 Mirroring Configuration Details how to configure mirroring.
47-XRN Fabric Configuration Details how to configure XRN fabric.
48-Cluster Configuration Details how to configure cluster.
49 PoE Configuration Details how to configure PoE port.
50 PoE Profile Configuration Details how to configure PoE Profile.
51-UDP Helper Operation Details how to configure UDP Helper.
52 SNMP Configuration Details how to configure SNMP.
53 RMON Configuration Details how to configure RMON.
54 NTP Configuration Details how to configure NTP.
55 SSH Configuration Details how to configure SSH.
56 File System Management Configuration Details how to configure file system.
57 FTP and SFTP Configuration Details how to configure FTP and SFTP.
58 TFTP Configuration Details how to configure TFTP.
59 Information Center Details how to configure information center.
60 Boot ROM and Host Software Loading Details how to load Boot ROM and host software.
61 Basic System Configuration and Debugging Details how to configure basic system configuration
and debugging.
62 Network Connectivity Test Details how to test network connectivity.
63 Device Management Details how to Manage switch.
64 Scheduled Task Configuration Details how to configure Scheduled Task.
65 VLAN-VPN Configuration Details how to configure VLAN-VPN.
66 Selective QinQ Configuration Details how to configure selective QinQ.

Chapter Contents
67 Remote-ping Configuration Details how to configure remote-ping.
68 IPv6 Configuration Details how to configure IPv6.
69 IPv6 Application Configuration Details how to configure IPv6 Application.
70 Password Control Configuration Details how to configure Password Control.
71 Access Management Configuration Details how to configure access management.
72 LLDP Configuration Details how to configure LLDP.
73 PKI Configuration Details how to configure PKI.
74 SSL Configuration Details how to configure SSL.
75 HTTPS Configuration Details how to configure HTTPS.
Conventions
The manual uses the following conventions:
Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by vertical bars. One is
selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets and separated by
vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by vertical bars. A
minimum of one or a maximum of all can be selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets and separated by
vertical bars. Many or none can be selected.
&<1-n> The argument(s) before the ampersand (&) sign can be entered 1 to n times.
# A line starting with the # sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface.
For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create
> Folder.

Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause bodily
injury.
Means reader be careful. Improper operation may cause data loss or damage to
equipment.
Means an action or information that needs special attention to ensure
successful configuration or good performance.
Means a complementary description.
Means techniques helpful for you to make configuration with ease.
Related Documentation
In addition to this manual, each 3com Switch 4500 documentation set includes the following:
Manual Description
3Com Switch 4500 Family Command Reference
Guide
Provide detailed descriptions of command line
interface (CLI) commands, that you require to manage
your switch.
3Com Switch 4500 Family Getting Started Guide This guide provides all the information you need to
install and use the 3Com Switch 4500 Family.
3Com Switch 4500 Family Release Notes
Contain the latest information about your product. If
information in this guide differs from information in the
release notes, use the information in the Release
Notes.
Obtaining Documentation
You can access the most up-to-date 3Com product documentation on the World Wide Web atthis URL:
http://www.3com.com.

Table of Contents
1CLI Configuration.......................................................................................................................................1-1
What Is CLI? ...........................................................................................................................................1-1
Entering the CLI......................................................................................................................................1-1
Entering CLI Through the Console Port..........................................................................................1-1
Entering CLI Through Telnet...........................................................................................................1-5
3Com Products CLI Descriptions............................................................................................................1-7
Command Conventions...................................................................................................................1-7
CLI View Description.......................................................................................................................1-8
Tips on Using the CLI............................................................................................................................1-12
Using the CLI Online Help.............................................................................................................1-12
Command Line Error Information..................................................................................................1-13
Typing and Editing Commands.....................................................................................................1-13
Displaying and Executing History Commands ..............................................................................1-14
Undo Form of a Command............................................................................................................1-15
Controlling CLI Display..................................................................................................................1-15
CLI Configurations ................................................................................................................................1-16
Configuring Command Aliases......................................................................................................1-16
Synchronous Information Output...................................................................................................1-17
Configuring Command Levels.......................................................................................................1-17
Saving Configurations ...................................................................................................................1-19
2Logging In to an Ethernet Switch.............................................................................................................2-1
Logging In to an Ethernet Switch............................................................................................................2-1
Introduction to the User Interface............................................................................................................2-1
Supported User Interfaces ..............................................................................................................2-1
User Interface Index........................................................................................................................2-1
Common User Interface Configuration............................................................................................2-2
Logging In Through the Console Port.....................................................................................................2-3
Introduction......................................................................................................................................2-3
Logging In Through the Console Port .............................................................................................2-3
Console Port Login Configuration ...................................................................................................2-5
Console Port Login Configuration with Authentication Mode Being None......................................2-7
Console Port Login Configuration with Authentication Mode Being Password...............................2-9
Console Port Login Configuration with Authentication Mode Being Scheme ...............................2-12
Logging In Through Telnet....................................................................................................................2-15
Introduction....................................................................................................................................2-15
Telnet Configuration with Authentication Mode Being None.........................................................2-18
Telnet Configuration with Authentication Mode Being Password .................................................2-19
Telnet Configuration with Authentication Mode Being Scheme....................................................2-22
Telnetting to a Switch....................................................................................................................2-25
Logging In Using a Modem...................................................................................................................2-28
Introduction....................................................................................................................................2-28
Configuration on the Switch Side..................................................................................................2-28
Modem Connection Establishment................................................................................................2-29
i

Logging In Through the Web-based Network Management System....................................................2-31
Introduction....................................................................................................................................2-32
Establishing an HTTP Connection ................................................................................................2-32
Configuring the Login Banner........................................................................................................2-33
Enabling/Disabling the WEB Server..............................................................................................2-34
Logging In Through NMS......................................................................................................................2-35
Introduction....................................................................................................................................2-35
Connection Establishment Using NMS .........................................................................................2-35
Configuring Source IP Address for Telnet Service Packets .................................................................2-35
Overview........................................................................................................................................2-36
Configuring Source IP Address for Telnet Service Packets..........................................................2-36
Displaying Source IP Address Configuration ................................................................................2-37
3User Control...............................................................................................................................................3-1
Introduction .............................................................................................................................................3-1
Controlling Telnet Users .........................................................................................................................3-2
Prerequisites....................................................................................................................................3-2
Controlling Telnet Users by Source IP Addresses..........................................................................3-2
Controlling Telnet Users by Source and Destination IP Addresses................................................3-2
Controlling Telnet Users by Source MAC Addresses .....................................................................3-3
Configuration Example....................................................................................................................3-3
Controlling Network Management Users by Source IP Addresses ........................................................3-4
Prerequisites....................................................................................................................................3-4
Controlling Network Management Users by Source IP Addresses.................................................3-4
Configuration Example....................................................................................................................3-5
Controlling Web Users by Source IP Address........................................................................................3-6
Prerequisites....................................................................................................................................3-6
Controlling Web Users by Source IP Addresses.............................................................................3-6
Disconnecting a Web User by Force...............................................................................................3-6
Configuration Example....................................................................................................................3-7
4Switching User Level.................................................................................................................................4-1
Overview.................................................................................................................................................4-1
Specifying the authentication mode for user level switching ..................................................................4-1
Adopting super password authentication for user level switching...................................................4-2
Adopting HWTACACS authentication for user level switching........................................................4-3
Switching to a specific user level............................................................................................................4-4
Configuration examples ..........................................................................................................................4-4
Super password authentication configuration example...................................................................4-4
HWTACACS authentication configuration example........................................................................4-5
5Configuration File Management...............................................................................................................5-1
Introduction to Configuration File............................................................................................................5-1
Configuration Task List ...........................................................................................................................5-2
Saving the Current Configuration....................................................................................................5-2
Erasing the Startup Configuration File ............................................................................................5-4
Specifying a Configuration File for Next Startup.............................................................................5-4
Displaying Switch Configuration......................................................................................................5-5
6VLAN Overview ..........................................................................................................................................6-1
VLAN Overview.......................................................................................................................................6-1
ii

Introduction to VLAN .......................................................................................................................6-1
Advantages of VLANs .....................................................................................................................6-2
VLAN Fundamentals .......................................................................................................................6-2
VLAN Interface................................................................................................................................6-4
VLAN Classification.........................................................................................................................6-4
Port-Based VLAN....................................................................................................................................6-4
Link Types of Ethernet Ports...........................................................................................................6-4
Assigning an Ethernet Port to Specified VLANs .............................................................................6-5
Configuring the Default VLAN ID for a Port.....................................................................................6-5
7VLAN Configuration...................................................................................................................................7-1
VLAN Configuration ................................................................................................................................7-1
VLAN Configuration Task List.........................................................................................................7-1
Basic VLAN Configuration...............................................................................................................7-1
Basic VLAN Interface Configuration................................................................................................7-2
Displaying VLAN Configuration.......................................................................................................7-3
Configuring a Port-Based VLAN.............................................................................................................7-3
Port-Based VLAN Configuration Task List......................................................................................7-3
Configuring the Link Type of an Ethernet Port................................................................................7-3
Assigning an Ethernet Port to a VLAN............................................................................................7-4
Configuring the Default VLAN for a Port .........................................................................................7-5
Displaying and Maintaining Port-Based VLAN................................................................................7-5
Port-Based VLAN Configuration Example.......................................................................................7-5
8IP Addressing Configuration....................................................................................................................8-1
IP Addressing Overview..........................................................................................................................8-1
IP Address Classes.........................................................................................................................8-1
Special Case IP Addresses.............................................................................................................8-2
Subnetting and Masking..................................................................................................................8-2
Configuring IP Addresses.......................................................................................................................8-3
Configuring IP Addresses................................................................................................................8-3
Configuring Static Domain Name Resolution..................................................................................8-4
Displaying IP Addressing Configuration..................................................................................................8-4
IP Address Configuration Examples.......................................................................................................8-4
IP Address Configuration Example I ...............................................................................................8-4
IP Address Configuration Example II ..............................................................................................8-5
Static Domain Name Resolution Configuration Example................................................................8-6
9IP Performance Optimization Configuration...........................................................................................9-1
IP Performance Overview.......................................................................................................................9-1
Introduction to IP Performance Configuration.................................................................................9-1
Introduction to FIB...........................................................................................................................9-1
Configuring IP Performance....................................................................................................................9-1
IP Performance Configuration Task List..........................................................................................9-1
Configuring TCP Attributes..............................................................................................................9-1
Disabling ICMP to Send Error Packets ...........................................................................................9-2
Canceling the System-Defined ACLs for ICMP Attack Guard.........................................................9-2
Displaying and Maintaining IP Performance Configuration ....................................................................9-3
10 Voice VLAN Configuration....................................................................................................................10-1
Voice VLAN Overview...........................................................................................................................10-1
iii

How an IP Phone Works ...............................................................................................................10-1
How Switch 4500 Series Switches Identify Voice Traffic..............................................................10-3
Setting the Voice Traffic Transmission Priority .............................................................................10-4
Configuring Voice VLAN Assignment Mode of a Port...................................................................10-4
Support for Voice VLAN on Various Ports.....................................................................................10-4
Security Mode of Voice VLAN.......................................................................................................10-6
Voice VLAN Configuration ....................................................................................................................10-7
Configuration Prerequisites...........................................................................................................10-7
Configuring the Voice VLAN to Operate in Automatic Voice VLAN Assignment Mode................10-7
Configuring the Voice VLAN to Operate in Manual Voice VLAN Assignment Mode....................10-8
Displaying and Maintaining Voice VLAN.............................................................................................10-10
Voice VLAN Configuration Example...................................................................................................10-11
Voice VLAN Configuration Example (Automatic Voice VLAN Assignment Mode)......................10-11
Voice VLAN Configuration Example (Manual Voice VLAN Assignment Mode)..........................10-12
11 GVRP Configuration ..............................................................................................................................11-1
Introduction to GVRP............................................................................................................................11-1
GARP.............................................................................................................................................11-1
GVRP.............................................................................................................................................11-4
Protocol Specifications..................................................................................................................11-4
GVRP Configuration..............................................................................................................................11-4
GVRP Configuration Tasks ...........................................................................................................11-4
Enabling GVRP .............................................................................................................................11-4
Configuring GVRP Timers.............................................................................................................11-5
Configuring GVRP Port Registration Mode...................................................................................11-6
Displaying and Maintaining GVRP........................................................................................................11-7
GVRP Configuration Example ..............................................................................................................11-7
GVRP Configuration Example.......................................................................................................11-7
12 Port Basic Configuration.......................................................................................................................12-1
Ethernet Port Configuration ..................................................................................................................12-1
Combo Port Configuration.............................................................................................................12-1
Initially Configuring a Port .............................................................................................................12-1
Configuring Port Auto-Negotiation Speed.....................................................................................12-2
Limiting Traffic on individual Ports.................................................................................................12-3
Configuring Flow Control on a Port...............................................................................................12-4
Duplicating the Configuration of a Port to Other Ports..................................................................12-5
Configuring Loopback Detection for an Ethernet Port...................................................................12-5
Enabling Loopback Test................................................................................................................12-7
Enabling the System to Test Connected Cable ............................................................................12-8
Configuring the Interval to Perform Statistical Analysis on Port Traffic.........................................12-8
Enabling Giant-Frame Statistics Function.....................................................................................12-9
Disabling Up/Down Log Output on a Port .....................................................................................12-9
Setting the Port State Change Delay ..........................................................................................12-10
Displaying and Maintaining Basic Port Configuration .................................................................12-11
Ethernet Port Configuration Example .................................................................................................12-11
Troubleshooting Ethernet Port Configuration .....................................................................................12-12
13 Link Aggregation Configuration...........................................................................................................13-1
Overview...............................................................................................................................................13-1
iv

Introduction to Link Aggregation....................................................................................................13-1
Introduction to LACP .....................................................................................................................13-1
Consistency Considerations for the Ports in Aggregation.............................................................13-1
Link Aggregation Classification.............................................................................................................13-2
Manual Aggregation Group...........................................................................................................13-2
Static LACP Aggregation Group....................................................................................................13-3
Dynamic LACP Aggregation Group...............................................................................................13-4
Aggregation Group Categories.............................................................................................................13-5
Link Aggregation Configuration.............................................................................................................13-6
Configuring a Manual Aggregation Group.....................................................................................13-6
Configuring a Static LACP Aggregation Group.............................................................................13-7
Configuring a Dynamic LACP Aggregation Group........................................................................13-8
Configuring a Description for an Aggregation Group....................................................................13-9
Displaying and Maintaining Link Aggregation Configuration ................................................................13-9
Link Aggregation Configuration Example............................................................................................13-10
Ethernet Port Aggregation Configuration Example .....................................................................13-10
14 Port Isolation Configuration .................................................................................................................14-1
Port Isolation Overview.........................................................................................................................14-1
Port Isolation Configuration...................................................................................................................14-1
Displaying and Maintaining Port Isolation Configuration ......................................................................14-2
Port Isolation Configuration Example....................................................................................................14-2
15 Port Security Configuration..................................................................................................................15-1
Port Security Overview..........................................................................................................................15-1
Introduction....................................................................................................................................15-1
Port Security Modes......................................................................................................................15-1
Port Security Features...................................................................................................................15-6
Port Security Configuration Task List....................................................................................................15-7
Enabling Port Security...................................................................................................................15-7
Setting the Maximum Number of Secure MAC Addresses Allowed on a Port..............................15-8
Setting the Port Security Mode......................................................................................................15-9
Configuring Port Security Features.............................................................................................15-10
Configuring Guest VLAN for a Port in macAddressOrUserLoginSecure mode..........................15-11
Ignoring the Authorization Information from the RADIUS Server................................................15-12
Configuring Secure MAC Addresses...........................................................................................15-12
Displaying and Maintaining Port Security Configuration.....................................................................15-14
Port Security Configuration Examples................................................................................................15-14
Port Security Mode autoLearn Configuration Example...............................................................15-14
Port Security Mode macAddressWithRadius Configuration Example.........................................15-15
Port Security Mode userLoginWithOUI Configuration Example..................................................15-17
Port Security Mode macAddressElseUserLoginSecureExt Configuration Example...................15-19
Port Security Mode macAddressAndUserLoginSecureExt Configuration Example....................15-21
Guest VLAN Configuration Example...........................................................................................15-23
16 Port Binding Configuration...................................................................................................................16-1
Port Binding Overview...........................................................................................................................16-1
Introduction....................................................................................................................................16-1
Configuring Port Binding ...............................................................................................................16-1
Displaying and Maintaining Port Binding Configuration........................................................................16-2
v

Port Binding Configuration Example.....................................................................................................16-2
Port Binding Configuration Example .............................................................................................16-2
17 DLDP Configuration...............................................................................................................................17-1
Overview...............................................................................................................................................17-1
Introduction....................................................................................................................................17-1
DLDP Fundamentals.....................................................................................................................17-2
DLDP Configuration..............................................................................................................................17-8
Performing Basic DLDP Configuration..........................................................................................17-8
Resetting DLDP State ...................................................................................................................17-9
Displaying and Maintaining DLDP...............................................................................................17-10
DLDP Configuration Example.............................................................................................................17-10
18 MAC Address Table Management........................................................................................................18-1
Overview...............................................................................................................................................18-1
Introduction to MAC Address Table ..............................................................................................18-1
Introduction to MAC Address Learning .........................................................................................18-1
Managing MAC Address Table .....................................................................................................18-3
Configuring MAC Address Table Management....................................................................................18-4
MAC Address Table Management Configuration Task List..........................................................18-4
Configuring a MAC Address Entry ................................................................................................18-5
Setting the MAC Address Aging Timer..........................................................................................18-6
Setting the Maximum Number of MAC Addresses a Port Can Learn...........................................18-6
Enabling Destination MAC Address Triggered Update.................................................................18-7
Displaying MAC Address Table Information.........................................................................................18-7
Configuration Example..........................................................................................................................18-8
Adding a Static MAC Address Entry Manually..............................................................................18-8
19 Auto Detect Configuration ....................................................................................................................19-1
Introduction to the Auto Detect Function...............................................................................................19-1
Auto Detect Configuration.....................................................................................................................19-1
Auto Detect Basic Configuration ...................................................................................................19-2
Auto Detect Implementation in Static Routing...............................................................................19-2
Auto Detect Implementation in VLAN Interface Backup................................................................19-3
Auto Detect Configuration Examples....................................................................................................19-4
Configuration Example for Auto Detect Implementation with Static Routing................................19-4
Configuration Example for Auto Detect Implementation with VLAN Interface Backup.................19-5
20 MSTP Configuration...............................................................................................................................20-1
Overview...............................................................................................................................................20-1
Spanning Tree Protocol Overview.................................................................................................20-1
Rapid Spanning Tree Protocol Overview....................................................................................20-10
Multiple Spanning Tree Protocol Overview.................................................................................20-10
MSTP Implementation on Switches ............................................................................................20-14
Protocols and Standards.............................................................................................................20-15
MSTP Configuration Task List............................................................................................................20-15
Configuring Root Bridge......................................................................................................................20-17
Configuring an MST Region........................................................................................................20-17
Specifying the Current Switch as a Root Bridge/Secondary Root Bridge...................................20-18
Configuring the Bridge Priority of the Current Switch..................................................................20-20
Configuring How a Port Recognizes and Sends MSTP Packets................................................20-20
vi

Configuring the MSTP Operation Mode......................................................................................20-21
Configuring the Maximum Hop Count of an MST Region...........................................................20-22
Configuring the Network Diameter of the Switched Network......................................................20-23
Configuring the MSTP Time-related Parameters........................................................................20-23
Configuring the Timeout Time Factor..........................................................................................20-25
Configuring the Maximum Transmitting Rate on the Current Port..............................................20-25
Configuring the Current Port as an Edge Port ............................................................................20-26
Setting the Link Type of a Port to P2P........................................................................................20-27
Enabling MSTP............................................................................................................................20-28
Configuring Leaf Nodes ......................................................................................................................20-29
Configuring the MST Region.......................................................................................................20-29
Configuring How a Port Recognizes and Sends MSTP Packets................................................20-29
Configuring the Timeout Time Factor..........................................................................................20-30
Configuring the Maximum Transmitting Rate on the Current Port..............................................20-30
Configuring a Port as an Edge Port.............................................................................................20-30
Configuring the Path Cost for a Port ...........................................................................................20-30
Configuring Port Priority ..............................................................................................................20-32
Setting the Link Type of a Port to P2P........................................................................................20-33
Enabling MSTP............................................................................................................................20-33
Performing mCheck Operation ...........................................................................................................20-33
Configuration Prerequisites.........................................................................................................20-33
Configuration Procedure..............................................................................................................20-34
Configuration Example................................................................................................................20-34
Configuring Guard Functions..............................................................................................................20-34
Configuring BPDU Guard............................................................................................................20-34
Configuring Root Guard...............................................................................................................20-35
Configuring Loop Guard..............................................................................................................20-37
Configuring TC-BPDU Attack Guard...........................................................................................20-37
Configuring Digest Snooping..............................................................................................................20-39
Introduction..................................................................................................................................20-39
Configuring Digest Snooping.......................................................................................................20-39
Configuring Rapid Transition ..............................................................................................................20-40
Introduction..................................................................................................................................20-40
Configuring Rapid Transition.......................................................................................................20-42
Configuring VLAN-VPN Tunnel...........................................................................................................20-43
Introduction..................................................................................................................................20-43
Configuring VLAN-VPN tunnel....................................................................................................20-43
MSTP Maintenance Configuration......................................................................................................20-44
Introduction..................................................................................................................................20-44
Enabling Log/Trap Output for Ports of MSTP Instance...............................................................20-44
Configuration Example................................................................................................................20-44
Enabling Trap Messages Conforming to 802.1d Standard.................................................................20-45
Displaying and Maintaining MSTP......................................................................................................20-45
MSTP Configuration Example.............................................................................................................20-46
VLAN-VPN Tunnel Configuration Example ........................................................................................20-48
21 IP Routing Protocol Overview ..............................................................................................................21-1
Introduction to IP Route and Routing Table..........................................................................................21-1
IP Route.........................................................................................................................................21-1
vii

Routing Table................................................................................................................................21-1
Routing Protocol Overview ...................................................................................................................21-3
Static Routing and Dynamic Routing.............................................................................................21-3
Classification of Dynamic Routing Protocols.................................................................................21-3
Routing Protocols and Routing Priority .........................................................................................21-4
Load Sharing and Route Backup ..................................................................................................21-4
Routing Information Sharing..........................................................................................................21-5
Displaying and Maintaining a Routing Table ........................................................................................21-5
22 Static Route Configuration ...................................................................................................................22-1
Introduction to Static Route...................................................................................................................22-1
Static Route...................................................................................................................................22-1
Default Route.................................................................................................................................22-2
Static Route Configuration....................................................................................................................22-2
Configuration Prerequisites...........................................................................................................22-2
Configuring a Static Route ............................................................................................................22-2
Displaying and Maintaining Static Routes.............................................................................................22-2
Static Route Configuration Example.....................................................................................................22-3
Troubleshooting a Static Route.............................................................................................................22-4
23 RIP Configuration...................................................................................................................................23-1
RIP Overview........................................................................................................................................23-1
Basic Concepts..............................................................................................................................23-1
RIP Startup and Operation............................................................................................................23-2
RIP Configuration Task List ..................................................................................................................23-2
Basic RIP Configuration........................................................................................................................23-3
Configuration Prerequisites...........................................................................................................23-3
Configuring Basic RIP Functions...................................................................................................23-3
RIP Route Control.................................................................................................................................23-4
Configuration Prerequisites...........................................................................................................23-5
Configuring RIP Route Control......................................................................................................23-5
RIP Network Adjustment and Optimization...........................................................................................23-8
Configuration Prerequisites...........................................................................................................23-8
Configuration Tasks.......................................................................................................................23-8
Displaying and Maintaining RIP Configuration ...................................................................................23-10
RIP Configuration Example.................................................................................................................23-10
Troubleshooting RIP Configuration.....................................................................................................23-11
Failed to Receive RIP Updates...................................................................................................23-11
24 IP Route Policy Configuration ..............................................................................................................24-1
IP Route Policy Overview .....................................................................................................................24-1
Introduction to IP Route Policy......................................................................................................24-1
Filters.............................................................................................................................................24-1
IP Route Policy Configuration Task List................................................................................................24-2
Route Policy Configuration ...................................................................................................................24-2
Configuration Prerequisites...........................................................................................................24-3
Defining a Route Policy.................................................................................................................24-3
Defining if-match Clauses and apply Clauses...............................................................................24-3
IP-Prefix Configuration..........................................................................................................................24-5
Configuration Prerequisites...........................................................................................................24-5
viii

Configuring an ip-prefix list............................................................................................................24-5
Displaying IP Route Policy....................................................................................................................24-5
IP Route Policy Configuration Example................................................................................................24-6
Controlling RIP Packet Cost to Implement Dynamic Route Backup.............................................24-6
Troubleshooting IP Route Policy...........................................................................................................24-9
25 Multicast Overview.................................................................................................................................25-1
Multicast Overview................................................................................................................................25-1
Information Transmission in the Unicast Mode.............................................................................25-1
Information Transmission in the Broadcast Mode.........................................................................25-2
Information Transmission in the Multicast Mode...........................................................................25-3
Roles in Multicast ..........................................................................................................................25-3
Common Notations in Multicast.....................................................................................................25-4
Advantages and Applications of Multicast.....................................................................................25-4
Multicast Models ...................................................................................................................................25-5
Multicast Architecture............................................................................................................................25-5
Multicast Address..........................................................................................................................25-6
Multicast Protocols ........................................................................................................................25-8
Multicast Packet Forwarding Mechanism ...........................................................................................25-10
Implementation of the RPF Mechanism......................................................................................25-11
RPF Check..................................................................................................................................25-11
26 Common Multicast Configuration........................................................................................................26-1
Common Multicast Configuration..........................................................................................................26-1
Configuring Suppression on the Multicast Source Port.................................................................26-1
Configuring a Multicast MAC Address Entry.................................................................................26-2
Configuring Dropping Unknown Multicast Packets.......................................................................26-3
Displaying and Maintaining Common Multicast Configuration .............................................................26-3
27 IGMP Snooping Configuration..............................................................................................................27-1
IGMP Snooping Overview.....................................................................................................................27-1
Principle of IGMP Snooping..........................................................................................................27-1
Basic Concepts in IGMP Snooping...............................................................................................27-2
Work Mechanism of IGMP Snooping............................................................................................27-3
Configuring IGMP Snooping.................................................................................................................27-5
Enabling IGMP Snooping..............................................................................................................27-5
Configuring the Version of IGMP Snooping ..................................................................................27-6
Configuring Timers........................................................................................................................27-6
Configuring Fast Leave Processing ..............................................................................................27-7
Configuring a Multicast Group Filter..............................................................................................27-8
Configuring the Maximum Number of Multicast Groups on a Port................................................27-9
Configuring IGMP Snooping Querier...........................................................................................27-10
Suppressing Flooding of Unknown Multicast Traffic in a VLAN..................................................27-11
Configuring Static Member Port for a Multicast Group................................................................27-11
Configuring a Static Router Port..................................................................................................27-12
Configuring a Port as a Simulated Group Member.....................................................................27-13
Configuring a VLAN Tag for Query Messages............................................................................27-14
Configuring Multicast VLAN ........................................................................................................27-14
Displaying and Maintaining IGMP Snooping ......................................................................................27-16
IGMP Snooping Configuration Examples ...........................................................................................27-16
ix

Configuring IGMP Snooping........................................................................................................27-16
Configuring Multicast VLAN ........................................................................................................27-18
Troubleshooting IGMP Snooping........................................................................................................27-20
28 802.1x Configuration..............................................................................................................................28-1
Introduction to 802.1x............................................................................................................................28-1
Architecture of 802.1x Authentication............................................................................................28-1
The Mechanism of an 802.1x Authentication System...................................................................28-3
Encapsulation of EAPoL Messages..............................................................................................28-3
802.1x Authentication Procedure..................................................................................................28-5
Timers Used in 802.1x...................................................................................................................28-8
802.1x Implementation on a 3Com 4500 Series Switch ...............................................................28-9
Introduction to 802.1x Configuration...................................................................................................28-12
Basic 802.1x Configuration.................................................................................................................28-13
Configuration Prerequisites.........................................................................................................28-13
Configuring Basic 802.1x Functions............................................................................................28-13
Timer and Maximum User Number Configuration.......................................................................28-14
Advanced 802.1x Configuration..........................................................................................................28-15
Configuring Proxy Checking........................................................................................................28-16
Configuring Client Version Checking...........................................................................................28-16
Enabling DHCP-triggered Authentication....................................................................................28-17
Configuring Guest VLAN.............................................................................................................28-17
Configuring 802.1x Re-Authentication.........................................................................................28-18
Configuring the 802.1x Re-Authentication Timer ........................................................................28-18
Displaying and Maintaining 802.1x Configuration...............................................................................28-19
Configuration Example........................................................................................................................28-19
802.1x Configuration Example....................................................................................................28-19
29 Quick EAD Deployment Configuration................................................................................................29-1
Introduction to Quick EAD Deployment ................................................................................................29-1
Quick EAD Deployment Overview.................................................................................................29-1
Operation of Quick EAD Deployment............................................................................................29-1
Configuring Quick EAD Deployment.....................................................................................................29-2
Configuration Prerequisites...........................................................................................................29-2
Configuration Procedure................................................................................................................29-2
Displaying and Maintaining Quick EAD Deployment ....................................................................29-3
Quick EAD Deployment Configuration Example...................................................................................29-3
Troubleshooting ....................................................................................................................................29-5
30 HABP Configuration ..............................................................................................................................30-1
Introduction to HABP.............................................................................................................................30-1
HABP Server Configuration..................................................................................................................30-1
HABP Client Configuration....................................................................................................................30-2
Displaying and Maintaining HABP Configuration..................................................................................30-2
31 System Guard Configuration................................................................................................................31-1
System Guard Overview.......................................................................................................................31-1
Guard Against IP Attacks ..............................................................................................................31-1
Guard Against TCN Attacks ..........................................................................................................31-1
Layer 3 Error Control.....................................................................................................................31-1
CPU Protection..............................................................................................................................31-1
x

Configuring System Guard....................................................................................................................31-2
Configuring System Guard Against IP Attacks..............................................................................31-2
Configuring System Guard Against TCN Attacks..........................................................................31-2
Enabling Layer 3 Error Control......................................................................................................31-3
Configuring CPU Protection ..........................................................................................................31-3
Displaying and Maintaining System Guard Configuration ....................................................................31-4
32 AAA Overview ........................................................................................................................................32-1
Introduction to AAA...............................................................................................................................32-1
Authentication................................................................................................................................32-1
Authorization..................................................................................................................................32-1
Accounting.....................................................................................................................................32-2
Introduction to ISP Domain ...........................................................................................................32-2
Introduction to AAA Services................................................................................................................32-2
Introduction to RADIUS.................................................................................................................32-2
Introduction to HWTACACS..........................................................................................................32-6
33 AAA Configuration.................................................................................................................................33-1
AAA Configuration Task List.................................................................................................................33-1
Creating an ISP Domain and Configuring Its Attributes................................................................33-2
Configuring an AAA Scheme for an ISP Domain..........................................................................33-3
Configuring Dynamic VLAN Assignment.......................................................................................33-6
Configuring the Attributes of a Local User.....................................................................................33-8
Cutting Down User Connections Forcibly....................................................................................33-10
RADIUS Configuration Task List.........................................................................................................33-10
Creating a RADIUS Scheme.......................................................................................................33-12
Configuring RADIUS Authentication/Authorization Servers........................................................33-12
Configuring Ignorance of Assigned RADIUS Authorization Attributes........................................33-13
Configuring RADIUS Accounting Servers...................................................................................33-14
Configuring Shared Keys for RADIUS Messages.......................................................................33-15
Configuring the Maximum Number of RADIUS Request Transmission Attempts.......................33-16
Configuring the Type of RADIUS Servers to be Supported........................................................33-16
Configuring the Status of RADIUS Servers.................................................................................33-17
Configuring the Attributes of Data to be Sent to RADIUS Servers .............................................33-18
Configuring the Local RADIUS Server........................................................................................33-19
Configuring Timers for RADIUS Servers.....................................................................................33-20
Enabling Sending Trap Message when a RADIUS Server Goes Down.....................................33-21
Enabling the User Re-Authentication at Restart Function...........................................................33-21
HWTACACS Configuration Task List..................................................................................................33-23
Creating a HWTACACS Scheme................................................................................................33-23
Configuring TACACS Authentication Servers.............................................................................33-23
Configuring TACACS Authorization Servers...............................................................................33-24
Configuring TACACS Accounting Servers..................................................................................33-25
Configuring Shared Keys for HWTACACS Messages................................................................33-25
Configuring the Attributes of Data to be Sent to TACACS Servers ............................................33-26
Configuring the Timers Regarding TACACS Servers.................................................................33-27
Displaying and Maintaining AAA Configuration..................................................................................33-28
Displaying and Maintaining AAA Configuration...........................................................................33-28
Displaying and Maintaining RADIUS Protocol Configuration......................................................33-28
xi

Displaying and Maintaining HWTACACS Protocol Configuration...............................................33-29
AAA Configuration Examples..............................................................................................................33-29
Remote RADIUS Authentication of Telnet/SSH Users ...............................................................33-29
Local Authentication of FTP/Telnet Users...................................................................................33-31
HWTACACS Authentication and Authorization of Telnet Users .................................................33-32
Auto VLAN Configuration Example.............................................................................................33-33
Troubleshooting AAA..........................................................................................................................33-34
Troubleshooting RADIUS Configuration......................................................................................33-34
Troubleshooting HWTACACS Configuration ..............................................................................33-35
34 EAD Configuration.................................................................................................................................34-1
Introduction to EAD...............................................................................................................................34-1
Typical Network Application of EAD .....................................................................................................34-1
EAD Configuration ................................................................................................................................34-1
EAD Configuration Example.................................................................................................................34-2
35 MAC Address Authentication Configuration ......................................................................................35-1
MAC Address Authentication Overview................................................................................................35-1
Performing MAC Address Authentication on a RADIUS Server...................................................35-1
Performing MAC Address Authentication Locally .........................................................................35-1
Related Concepts..................................................................................................................................35-2
MAC Address Authentication Timers ............................................................................................35-2
Quiet MAC Address.......................................................................................................................35-2
Configuring Basic MAC Address Authentication Functions..................................................................35-2
MAC Address Authentication Enhanced Function Configuration.........................................................35-4
MAC Address Authentication Enhanced Function Configuration Task List..................................35-4
Configuring a Guest VLAN............................................................................................................35-4
ConfiguringtheMaximumNumberofMACAddressAuthenticationUsersAllowedtoAccessaPort.........35-6
Displaying and Maintaining MAC Address Authentication Configuration.............................................35-7
MAC Address Authentication Configuration Examples.........................................................................35-7
36 ARP Configuration.................................................................................................................................36-1
Introduction to ARP...............................................................................................................................36-1
ARP Function ................................................................................................................................36-1
ARP Message Format...................................................................................................................36-1
ARP Table.....................................................................................................................................36-3
ARP Process.................................................................................................................................36-3
Introduction to Gratuitous ARP......................................................................................................36-4
Configuring ARP ...................................................................................................................................36-4
Configuring Gratuitous ARP..................................................................................................................36-5
Displaying and Debugging ARP............................................................................................................36-6
ARP Configuration Examples ...............................................................................................................36-6
37 ARP Attack Defense Configuration......................................................................................................37-1
ARP Attack Defense Configuration.......................................................................................................37-1
Introduction to Maximum Number of Dynamic ARP Entries a VLAN Interface Can Learn...........37-1
Introduction to ARP Source MAC Address Consistency Check....................................................37-1
Introduction to ARP Attack Detection............................................................................................37-1
Introduction to ARP Packet Rate Limit..........................................................................................37-3
Introduction to ARP Packet Filtering Based on Gateway's Address.............................................37-3
Configuring ARP Attack Defense..........................................................................................................37-4
xii

ARP Attack Defense Configuration Task List................................................................................37-4
Configuring the Maximum Number of Dynamic ARP Entries that a VLAN Interface Can Learn..37-5
Configuring ARP Source MAC Address Consistency Check........................................................37-5
ARP Packet Filtering Based on Gateway’s Address.....................................................................37-5
Configuring ARP Attack Detection ................................................................................................37-6
Configuring the ARP Packet Rate Limit Function .........................................................................37-7
ARP Attack Defense Configuration Example........................................................................................37-8
ARP Attack Defense Configuration Example I..............................................................................37-8
ARP Attack Defense Configuration Example II...........................................................................37-10
ARP Attack Defense Configuration Example III..........................................................................37-11
ARP Attack Defense Configuration Example IV..........................................................................37-11
38 DHCP Overview......................................................................................................................................38-1
Introduction to DHCP............................................................................................................................38-1
DHCP IP Address Assignment .............................................................................................................38-1
IP Address Assignment Policy ......................................................................................................38-1
Obtaining IP Addresses Dynamically............................................................................................38-2
Updating IP Address Lease...........................................................................................................38-2
DHCP Packet Format............................................................................................................................38-3
Protocol Specification............................................................................................................................38-4
39 DHCP Server Configuration..................................................................................................................39-1
Introduction to DHCP Server ................................................................................................................39-1
Usage of DHCP Server .................................................................................................................39-1
DHCP Address Pool......................................................................................................................39-1
DHCP IP Address Preferences .....................................................................................................39-3
XRN Support .................................................................................................................................39-3
DHCP Server Configuration Task List ..................................................................................................39-4
Enabling DHCP.....................................................................................................................................39-4
Configuring the Global Address Pool Based DHCP Server..................................................................39-5
Configuration Task List..................................................................................................................39-5
Enabling the Global Address Pool Mode on Interface(s)..............................................................39-5
Creating a DHCP Global Address Pool.........................................................................................39-6
Configuring an Address Allocation Mode for the Global Address Pool.........................................39-6
Configuring a Domain Name Suffix for the DHCP Client..............................................................39-9
Configuring DNS Servers for the DHCP Client.............................................................................39-9
Configuring WINS Servers for the DHCP Client .........................................................................39-10
Configuring Gateways for the DHCP Client ................................................................................39-11
Configuring BIMS Server Information for the DHCP Client.........................................................39-11
Configuring Option 184 Parameters for the Client with Voice Service........................................39-11
Configuring the TFTP Server and Bootfile Name for the DHCP Client.......................................39-14
Configuring a Self-Defined DHCP Option ...................................................................................39-14
Configuring the Interface Address Pool Based DHCP Server............................................................39-15
Configuration Task List................................................................................................................39-15
Enabling the Interface Address Pool Mode on Interface(s).........................................................39-16
Configuring an Address Allocation Mode for an Interface Address Pool....................................39-17
Configuring a Domain Name Suffix for the DHCP Client............................................................39-19
Configuring DNS Servers for the DHCP Client...........................................................................39-19
Configuring WINS Servers for the DHCP Client .........................................................................39-20
xiii

Configuring BIMS Server Information for the DHCP Client.........................................................39-21
Configuring Option 184 Parameters for the Client with Voice Service........................................39-21
Configuring the TFTP Server and Bootfile Name for the DHCP Client.......................................39-22
Configuring a Self-Defined DHCP Option ...................................................................................39-23
Configuring DHCP Server Security Functions....................................................................................39-24
Prerequisites................................................................................................................................39-24
Enabling Unauthorized DHCP Server Detection.........................................................................39-24
Configuring IP Address Detecting...............................................................................................39-24
Configuring DHCP Accounting Functions...........................................................................................39-25
Introduction to DHCP Accounting................................................................................................39-25
DHCP Accounting Fundamentals................................................................................................39-25
DHCP Accounting Configuration.................................................................................................39-26
Enabling the DHCP Server to Process Option 82 ..............................................................................39-26
Displaying and Maintaining the DHCP Server....................................................................................39-26
DHCP Server Configuration Examples...............................................................................................39-27
DHCP Server Configuration Example.........................................................................................39-27
DHCP Server with Option 184 Support Configuration Example .................................................39-29
DHCP Accounting Configuration Example..................................................................................39-30
Troubleshooting a DHCP Server ........................................................................................................39-32
40 DHCP Relay Agent Configuration ........................................................................................................40-1
Introduction to DHCP Relay Agent .......................................................................................................40-1
Usage of DHCP Relay Agent........................................................................................................40-1
DHCP Relay Agent Fundamentals................................................................................................40-1
Option 82 Support on DHCP Relay Agent ....................................................................................40-2
DHCP Inform Message Handling Feature Used in XRN System.........................................................40-3
Configuring the DHCP Relay Agent......................................................................................................40-4
DHCP Relay Agent Configuration Task List..................................................................................40-4
Enabling DHCP .............................................................................................................................40-4
Correlating a DHCP Server Group with a Relay Agent Interface..................................................40-5
Configuring DHCP Relay Agent Security Functions .....................................................................40-6
Configuring the DHCP Relay Agent to Support Option 82............................................................40-8
Configuring DHCP Inform Message Handling Feature Used in XRN System......................................40-9
Displaying and Maintaining DHCP Relay Agent Configuration ............................................................40-9
DHCP Relay Agent Configuration Example........................................................................................40-10
Troubleshooting DHCP Relay Agent Configuration............................................................................40-10
41 DHCP Snooping Configuration.............................................................................................................41-1
DHCP Snooping Overview....................................................................................................................41-1
Introduction to DHCP Snooping....................................................................................................41-1
Introduction to DHCP-Snooping Option 82 ...................................................................................41-2
Introduction to IP Filtering .............................................................................................................41-4
Configuring DHCP Snooping................................................................................................................41-5
Configuring DHCP Snooping.........................................................................................................41-5
Configuring DHCP Snooping to Support Option 82......................................................................41-6
Configuring IP Filtering..................................................................................................................41-9
Displaying and Maintaining DHCP Snooping Configuration...............................................................41-10
DHCP Snooping Configuration Examples ..........................................................................................41-11
DHCP-Snooping Option 82 Support Configuration Example......................................................41-11
xiv