3Com Switch 4500 PWR 26-Port User manual

3Com Switch 4500 Family
Configuration Guide
Switch 4500 26-Port
Switch 4500 50-Port
Switch 4500 PWR 26-Port
Switch 4500 PWR 50-Port
Product Version: V3.03.02p02
Manual Version: 6W100-20100418
www.3com.com
3Com Corporation
350 Campus Drive, Marlborough, MA, USA 01752 3064

Copyright © 2006-2010, 3Com Corporation. All rights reserved. No part of this documentation may be
reproduced in any form or by any means or used to make any derivative work (such as translation,
transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or
as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.
You agree not to remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
All other company and product names may be trademarks of the respective companies with which they are
associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we
are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental
standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.

About This Manual
Organization
3Com Switch 4500 Family Configuration Guide is organized as follows:
Chapter Contents
1 CLI Configuration Details how to use command line interface.
2 Logging In to an Ethernet Switch Details how to logging In to an Ethernet Switch.
3 User Control Details how to configure user control.
4 Switching User Level Details how to configure switching user level.
5 Configuration File Management Details how to configure file management.
6 VLAN Overview Details VLAN Overview .
7 VLAN Configuration Details how to configure VLAN.
8 IP Addressing Configuration Details how to assign an IP address manually.
9 IP Performance Optimization Configuration Details how to configure IP performance.
10 Voice VLAN Configuration Details how to configure Voice VLAN.
11 GVRP Configuration Details how to configure GVRP.
12 Port Basic Configuration Details how to configure Ethernet port.
13 Link Aggregation Configuration Details how to configure link aggregation.
14 Port Isolation Configuration Details how to configure port isolation.
15 Port Security Configuration Details how to configure port security.
16 Port Binding Configuration Details how to configure port binding.
17 DLDP Configuration Details how to configure DLDP.
18 MAC Address Table Management Details how to configure MAC Address Table.
19 Auto Detect Configuration Details how to configure Auto Detect.
20 MSTP Configuration Details how to configure MSTP.
21 IP Routing Protocol Overview IP Routing Protocol Overview.
22Static Route Configuration Details how to configure Static Route.
23 RIP Configuration Details how to configure RIP.
24 IP Route Policy Configuration Details how to configure IP Route Policy.
25 Multicast Overview Details the main concepts in multicast.
26 Common Multicast Configuration Details how to configure the common multicast
function.
27 IGMP Snooping Configuration Details how to configure IGMP Snooping.
28 802.1x Configuration Details how to configure 802.1X.
29 Quick EAD Deployment Configuration Details how to configure quick EAD deployment.
30 HABP Configuration Details how to configure HABP.
31 System Guard Configuration Details how to configure System Guard.

Chapter Contents
32 AAA Overview Introduces the authentication, authorization and
accounting functions.
33 AAA Configuration Details how to configure AAA.
34 EAD Configuration Details how to configure EAD.
35 MAC Address Authentication Configuration Details how to configure MAC address authentication.
36 ARP Configuration Details how to configure ARP.
37 ARP Attack Defense Configuration Details how to configure ARP Attack Defense.
38 DHCP Overview DHCP Overview.
39 DHCP Server Configuration Details how to configure DHCP Server.
40 DHCP Relay Agent Configuration Details how to configure DHCP Relay Agent.
41 DHCP Snooping Configuration Details how to configure DHCP Snooping.
42 DHCP Packet Rate Limit Configuration Details how to configure DHCP Packet Rate Limit
Configuration.
43 DHCP/BOOTP Client Configuration Details how to configure DHCP/BOOTP Client.
44 ACL Configuration Details how to configure ACL.
45 QoS Configuration Details how to configure QoS.
46 Mirroring Configuration Details how to configure mirroring.
47-XRN Fabric Configuration Details how to configure XRN fabric.
48-Cluster Configuration Details how to configure cluster.
49 PoE Configuration Details how to configure PoE port.
50 PoE Profile Configuration Details how to configure PoE Profile.
51-UDP Helper Operation Details how to configure UDP Helper.
52 SNMP Configuration Details how to configure SNMP.
53 RMON Configuration Details how to configure RMON.
54 NTP Configuration Details how to configure NTP.
55 SSH Configuration Details how to configure SSH.
56 File System Management Configuration Details how to configure file system.
57 FTP and SFTP Configuration Details how to configure FTP and SFTP.
58 TFTP Configuration Details how to configure TFTP.
59 Information Center Details how to configure information center.
60 Boot ROM and Host Software Loading Details how to load Boot ROM and host software.
61 Basic System Configuration and Debugging Details how to configure basic system configuration
and debugging.
62 Network Connectivity Test Details how to test network connectivity.
63 Device Management Details how to Manage switch.
64 Scheduled Task Configuration Details how to configure Scheduled Task.
65 VLAN-VPN Configuration Details how to configure VLAN-VPN.
66 Selective QinQ Configuration Details how to configure selective QinQ.

Chapter Contents
67 Remote-ping Configuration Details how to configure remote-ping.
68 IPv6 Configuration Details how to configure IPv6.
69 IPv6 Application Configuration Details how to configure IPv6 Application.
70 Password Control Configuration Details how to configure Password Control.
71 Access Management Configuration Details how to configure access management.
72 LLDP Configuration Details how to configure LLDP.
73 PKI Configuration Details how to configure PKI.
74 SSL Configuration Details how to configure SSL.
75 HTTPS Configuration Details how to configure HTTPS.
Conventions
The manual uses the following conventions:
Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by vertical bars. One is
selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets and separated by
vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by vertical bars. A
minimum of one or a maximum of all can be selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets and separated by
vertical bars. Many or none can be selected.
&<1-n> The argument(s) before the ampersand (&) sign can be entered 1 to n times.
# A line starting with the # sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface.
For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create
> Folder.

Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause bodily
injury.
Means reader be careful. Improper operation may cause data loss or damage to
equipment.
Means an action or information that needs special attention to ensure
successful configuration or good performance.
Means a complementary description.
Means techniques helpful for you to make configuration with ease.
Related Documentation
In addition to this manual, each 3com Switch 4500 documentation set includes the following:
Manual Description
3Com Switch 4500 Family Command Reference
Guide
Provide detailed descriptions of command line
interface (CLI) commands, that you require to manage
your switch.
3Com Switch 4500 Family Getting Started Guide This guide provides all the information you need to
install and use the 3Com Switch 4500 Family.
3Com Switch 4500 Family Release Notes
Contain the latest information about your product. If
information in this guide differs from information in the
release notes, use the information in the Release
Notes.
Obtaining Documentation
You can access the most up-to-date 3Com product documentation on the World Wide Web atthis URL:
http://www.3com.com.

Table of Contents
1CLI Configuration.......................................................................................................................................1-1
What Is CLI? ...........................................................................................................................................1-1
Entering the CLI......................................................................................................................................1-1
Entering CLI Through the Console Port..........................................................................................1-1
Entering CLI Through Telnet...........................................................................................................1-5
3Com Products CLI Descriptions............................................................................................................1-7
Command Conventions...................................................................................................................1-7
CLI View Description.......................................................................................................................1-8
Tips on Using the CLI............................................................................................................................1-12
Using the CLI Online Help.............................................................................................................1-12
Command Line Error Information..................................................................................................1-13
Typing and Editing Commands.....................................................................................................1-13
Displaying and Executing History Commands ..............................................................................1-14
Undo Form of a Command............................................................................................................1-15
Controlling CLI Display..................................................................................................................1-15
CLI Configurations ................................................................................................................................1-16
Configuring Command Aliases......................................................................................................1-16
Synchronous Information Output...................................................................................................1-17
Configuring Command Levels.......................................................................................................1-17
Saving Configurations ...................................................................................................................1-19
2Logging In to an Ethernet Switch.............................................................................................................2-1
Logging In to an Ethernet Switch............................................................................................................2-1
Introduction to the User Interface............................................................................................................2-1
Supported User Interfaces ..............................................................................................................2-1
User Interface Index........................................................................................................................2-1
Common User Interface Configuration............................................................................................2-2
Logging In Through the Console Port.....................................................................................................2-3
Introduction......................................................................................................................................2-3
Logging In Through the Console Port .............................................................................................2-3
Console Port Login Configuration ...................................................................................................2-5
Console Port Login Configuration with Authentication Mode Being None......................................2-7
Console Port Login Configuration with Authentication Mode Being Password...............................2-9
Console Port Login Configuration with Authentication Mode Being Scheme ...............................2-12
Logging In Through Telnet....................................................................................................................2-15
Introduction....................................................................................................................................2-15
Telnet Configuration with Authentication Mode Being None.........................................................2-18
Telnet Configuration with Authentication Mode Being Password .................................................2-19
Telnet Configuration with Authentication Mode Being Scheme....................................................2-22
Telnetting to a Switch....................................................................................................................2-25
Logging In Using a Modem...................................................................................................................2-28
Introduction....................................................................................................................................2-28
Configuration on the Switch Side..................................................................................................2-28
Modem Connection Establishment................................................................................................2-29
i

Logging In Through the Web-based Network Management System....................................................2-31
Introduction....................................................................................................................................2-32
Establishing an HTTP Connection ................................................................................................2-32
Configuring the Login Banner........................................................................................................2-33
Enabling/Disabling the WEB Server..............................................................................................2-34
Logging In Through NMS......................................................................................................................2-35
Introduction....................................................................................................................................2-35
Connection Establishment Using NMS .........................................................................................2-35
Configuring Source IP Address for Telnet Service Packets .................................................................2-35
Overview........................................................................................................................................2-36
Configuring Source IP Address for Telnet Service Packets..........................................................2-36
Displaying Source IP Address Configuration ................................................................................2-37
3User Control...............................................................................................................................................3-1
Introduction .............................................................................................................................................3-1
Controlling Telnet Users .........................................................................................................................3-2
Prerequisites....................................................................................................................................3-2
Controlling Telnet Users by Source IP Addresses..........................................................................3-2
Controlling Telnet Users by Source and Destination IP Addresses................................................3-2
Controlling Telnet Users by Source MAC Addresses .....................................................................3-3
Configuration Example....................................................................................................................3-3
Controlling Network Management Users by Source IP Addresses ........................................................3-4
Prerequisites....................................................................................................................................3-4
Controlling Network Management Users by Source IP Addresses.................................................3-4
Configuration Example....................................................................................................................3-5
Controlling Web Users by Source IP Address........................................................................................3-6
Prerequisites....................................................................................................................................3-6
Controlling Web Users by Source IP Addresses.............................................................................3-6
Disconnecting a Web User by Force...............................................................................................3-6
Configuration Example....................................................................................................................3-7
4Switching User Level.................................................................................................................................4-1
Overview.................................................................................................................................................4-1
Specifying the authentication mode for user level switching ..................................................................4-1
Adopting super password authentication for user level switching...................................................4-2
Adopting HWTACACS authentication for user level switching........................................................4-3
Switching to a specific user level............................................................................................................4-4
Configuration examples ..........................................................................................................................4-4
Super password authentication configuration example...................................................................4-4
HWTACACS authentication configuration example........................................................................4-5
5Configuration File Management...............................................................................................................5-1
Introduction to Configuration File............................................................................................................5-1
Configuration Task List ...........................................................................................................................5-2
Saving the Current Configuration....................................................................................................5-2
Erasing the Startup Configuration File ............................................................................................5-4
Specifying a Configuration File for Next Startup.............................................................................5-4
Displaying Switch Configuration......................................................................................................5-5
6VLAN Overview ..........................................................................................................................................6-1
VLAN Overview.......................................................................................................................................6-1
ii

Introduction to VLAN .......................................................................................................................6-1
Advantages of VLANs .....................................................................................................................6-2
VLAN Fundamentals .......................................................................................................................6-2
VLAN Interface................................................................................................................................6-4
VLAN Classification.........................................................................................................................6-4
Port-Based VLAN....................................................................................................................................6-4
Link Types of Ethernet Ports...........................................................................................................6-4
Assigning an Ethernet Port to Specified VLANs .............................................................................6-5
Configuring the Default VLAN ID for a Port.....................................................................................6-5
7VLAN Configuration...................................................................................................................................7-1
VLAN Configuration ................................................................................................................................7-1
VLAN Configuration Task List.........................................................................................................7-1
Basic VLAN Configuration...............................................................................................................7-1
Basic VLAN Interface Configuration................................................................................................7-2
Displaying VLAN Configuration.......................................................................................................7-3
Configuring a Port-Based VLAN.............................................................................................................7-3
Port-Based VLAN Configuration Task List......................................................................................7-3
Configuring the Link Type of an Ethernet Port................................................................................7-3
Assigning an Ethernet Port to a VLAN............................................................................................7-4
Configuring the Default VLAN for a Port .........................................................................................7-5
Displaying and Maintaining Port-Based VLAN................................................................................7-5
Port-Based VLAN Configuration Example.......................................................................................7-5
8IP Addressing Configuration....................................................................................................................8-1
IP Addressing Overview..........................................................................................................................8-1
IP Address Classes.........................................................................................................................8-1
Special Case IP Addresses.............................................................................................................8-2
Subnetting and Masking..................................................................................................................8-2
Configuring IP Addresses.......................................................................................................................8-3
Configuring IP Addresses................................................................................................................8-3
Configuring Static Domain Name Resolution..................................................................................8-4
Displaying IP Addressing Configuration..................................................................................................8-4
IP Address Configuration Examples.......................................................................................................8-4
IP Address Configuration Example I ...............................................................................................8-4
IP Address Configuration Example II ..............................................................................................8-5
Static Domain Name Resolution Configuration Example................................................................8-6
9IP Performance Optimization Configuration...........................................................................................9-1
IP Performance Overview.......................................................................................................................9-1
Introduction to IP Performance Configuration.................................................................................9-1
Introduction to FIB...........................................................................................................................9-1
Configuring IP Performance....................................................................................................................9-1
IP Performance Configuration Task List..........................................................................................9-1
Configuring TCP Attributes..............................................................................................................9-1
Disabling ICMP to Send Error Packets ...........................................................................................9-2
Canceling the System-Defined ACLs for ICMP Attack Guard.........................................................9-2
Displaying and Maintaining IP Performance Configuration ....................................................................9-3
10 Voice VLAN Configuration....................................................................................................................10-1
Voice VLAN Overview...........................................................................................................................10-1
iii

How an IP Phone Works ...............................................................................................................10-1
How Switch 4500 Series Switches Identify Voice Traffic..............................................................10-3
Setting the Voice Traffic Transmission Priority .............................................................................10-4
Configuring Voice VLAN Assignment Mode of a Port...................................................................10-4
Support for Voice VLAN on Various Ports.....................................................................................10-4
Security Mode of Voice VLAN.......................................................................................................10-6
Voice VLAN Configuration ....................................................................................................................10-7
Configuration Prerequisites...........................................................................................................10-7
Configuring the Voice VLAN to Operate in Automatic Voice VLAN Assignment Mode................10-7
Configuring the Voice VLAN to Operate in Manual Voice VLAN Assignment Mode....................10-8
Displaying and Maintaining Voice VLAN.............................................................................................10-10
Voice VLAN Configuration Example...................................................................................................10-11
Voice VLAN Configuration Example (Automatic Voice VLAN Assignment Mode)......................10-11
Voice VLAN Configuration Example (Manual Voice VLAN Assignment Mode)..........................10-12
11 GVRP Configuration ..............................................................................................................................11-1
Introduction to GVRP............................................................................................................................11-1
GARP.............................................................................................................................................11-1
GVRP.............................................................................................................................................11-4
Protocol Specifications..................................................................................................................11-4
GVRP Configuration..............................................................................................................................11-4
GVRP Configuration Tasks ...........................................................................................................11-4
Enabling GVRP .............................................................................................................................11-4
Configuring GVRP Timers.............................................................................................................11-5
Configuring GVRP Port Registration Mode...................................................................................11-6
Displaying and Maintaining GVRP........................................................................................................11-7
GVRP Configuration Example ..............................................................................................................11-7
GVRP Configuration Example.......................................................................................................11-7
12 Port Basic Configuration.......................................................................................................................12-1
Ethernet Port Configuration ..................................................................................................................12-1
Combo Port Configuration.............................................................................................................12-1
Initially Configuring a Port .............................................................................................................12-1
Configuring Port Auto-Negotiation Speed.....................................................................................12-2
Limiting Traffic on individual Ports.................................................................................................12-3
Configuring Flow Control on a Port...............................................................................................12-4
Duplicating the Configuration of a Port to Other Ports..................................................................12-5
Configuring Loopback Detection for an Ethernet Port...................................................................12-5
Enabling Loopback Test................................................................................................................12-7
Enabling the System to Test Connected Cable ............................................................................12-8
Configuring the Interval to Perform Statistical Analysis on Port Traffic.........................................12-8
Enabling Giant-Frame Statistics Function.....................................................................................12-9
Disabling Up/Down Log Output on a Port .....................................................................................12-9
Setting the Port State Change Delay ..........................................................................................12-10
Displaying and Maintaining Basic Port Configuration .................................................................12-11
Ethernet Port Configuration Example .................................................................................................12-11
Troubleshooting Ethernet Port Configuration .....................................................................................12-12
13 Link Aggregation Configuration...........................................................................................................13-1
Overview...............................................................................................................................................13-1
iv