3Com S7906E - Switch User manual

3Com S7900E Family
Configuration Guide
Release 6600 Series
S7910E
S7906E
S7906E-V
S7903E
S7903E-S
S7902E
Manual Version:
20091015-C-1.00
www.3com.com
3Com Corporation
350 Campus Drive, Marlborough,
MA, USA 01752 3064

Copyright © 2009, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in
any form or by any means or used to make any derivative work (such as translation, transformation, or
adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or
as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.
You agree not to remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
All other company and product names may be trademarks of the respective companies with which they are
associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we
are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental
standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.
Environmental Statement about the Documentation
The documentation for thisproduct is printed on paper that comes from sustainable, managed forests; it is fully
biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and the
inks are vegetable-based with a low heavy-metal content.

About This Manual
Organization
3Com S7900E Family Configuration Guide - Release 6600 Series is organized as follows:
Volume Features
00-Product
Overview Includes Obtaining the Documentation, Product Features and Acronyms.
Ethernet Port Link Aggregation Port Isolation Service Loopback
Group
Loopback
Interface and Null
Interface MSTP LLDP VLAN
GVRP QinQ BPDU Tunneling VLAN Mapping
01-Access
Volume
Mirroring EPON-OLT
IP Addressing IP Performance
Optimization ARP DHCP
DNS IPv6 Basics DHCPv6 Tunneling
02-IP Services
Volume
UDP Helper FTP and TFTP sFlow
IP Routing Basics Static Routing RIP OSPF
IS-IS BGP IPv6 Static
Routing RIPng
OSPFv3 IPv6 IS-IS IPv6 BGP Route Policy
03-IP Routing
Volume
Policy Routing
Mulitcast
Overview Multicast Routing and Forwarding IGMP PIM
MSDP MBGP Multicast VPN IGMP Snooping
Multicast VLAN IPv6 Multicast
Routing and
Forwarding MLD IPv6 PIM
04-Multicast
Volume
IPv6 MBGP MLD Snooping IPv6 Multicast
VLAN
MCE MPLS Basics MPLS L2VPN MPLS L3VPN
05-MPLS
Volume VPLS MPLS TE
06-QoS Volume QoS User Profile
AAA 802.1X
MAC
Authentication Portal
Port Security IP Source Guard SSH2.0 Public Key
07-Security
Volume
ACL ARP Attack
Protection URPF

Volume Features
Dual-SRPU
System VRRP Smart Link Monitor Link
RRPP DLDP Ethernet OAM
Connectivity Fault
Detection
08-High
Availability
Volume
BFD Track GR Overview
Login Basic System
Configuration Device Management File System Management
SNMP RMON MAC Address
Table
Management
System
Maintenance and
Debugging
Information
Center PoE NQA NTP
09-System
Volume
Hotfix IRF IPC
10-OAA OAP ACFP ACSEI
Conventions
The manual uses the following conventions:
Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by vertical bars.
One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets and
separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by vertical bars.
A minimum of one or a maximum of all can be selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets and
separated by vertical bars. Many or none can be selected.
&<1-n> The argument(s) before the ampersand (&) sign can be entered 1 to n
times.
# A line starting with the # sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in
Boldface. For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File >
Create > Folder.

Convention Description
< > Button names are inside angle brackets. For example, click <OK>.
[ ] Window names, menu items, data table and field names are inside
square brackets. For example, pop up the [New User] window.
/ Multi-level menus are separated by forward slashes. For example,
[File/Create/Folder].
Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause
bodily injury.
Means reader be careful. Improper operation may cause data loss or
damage to equipment.
Means an action or information that needs special attention to ensure
successful configuration or good performance.
Means a complementary description.
Means techniques helpful for you to make configuration with ease.
Related Documentation
In addition to this manual, each 3Com S7900E Family documentation set includes the following:
Manual Description
3Com S7900E Family Command Reference
Guide - Release 6600 Series
Provide detailed descriptions of command line
interface (CLI) commands, which you require to
manage your switch.
3Com S7900E Family Getting Started Guide This guide provides all the information you need
to install and use the 3Com S7900E Family.
Obtaining Documentation
You can access the most up-to-date 3Com product documentation on the World WideWeb at this URL:
http://www.3com.com.

i
Table of Contents
1 Product Features·······································································································································1-1
Introduction to Product····························································································································1-1
Feature Lists ···········································································································································1-1
2 Features······················································································································································2-1
Access Volume ·······································································································································2-1
IP Services Volume·································································································································2-3
IP Routing Volume··································································································································2-4
Multicast Volume·····································································································································2-6
MPLS Volume·········································································································································2-8
QoS Volume··········································································································································2-10
Security Volume····································································································································2-10
High Availability Volume························································································································2-12
System Volume·····································································································································2-13
OAA Volume ·········································································································································2-16

1-1
1 Product Features
Introduction to Product
The S7900E switch is a cost-effective Layer 3 switch with high capacity. It is designed to operate at the
core layer of small and medium-sized networks, convergence layer of large enterprise networks, and
convergence layer and access layer of the metropolitan area networks (MANs).
Feature Lists
The S7900E series support abundant features and the related documents are divided into the volumes
as listed in Table 1-1.
Table 1-1 Feature list
Volume Features
Ethernet Port Link Aggregation Port Isolation Service Loopback
Group
Loopback
Interface and Null
Interface MSTP LLDP VLAN
GVRP QinQ BPDU Tunneling VLAN Mapping
01-Access
Volume
Mirroring EPON-OLT
IP Addressing IP Performance
Optimization ARP DHCP
DNS IPv6 Basics DHCPv6 Tunneling
02-IP Services
Volume
UDP Helper FTP and TFTP sFlow
IP Routing Basics Static Routing RIP OSPF
IS-IS BGP IPv6 Static
Routing RIPng
OSPFv3 IPv6 IS-IS IPv6 BGP Route Policy
03-IP Routing
Volume
Policy Routing
Mulitcast
Overview Multicast Routing and Forwarding IGMP PIM
MSDP MBGP Multicast VPN IGMP Snooping
Multicast VLAN IPv6 Multicast
Routing and
Forwarding MLD IPv6 PIM
04-Multicast
Volume
IPv6 MBGP MLD Snooping IPv6 Multicast
VLAN
MCE MPLS Basics MPLS L2VPN MPLS L3VPN
05-MPLS
Volume VPLS MPLS TE

1-2
Volume Features
06-QoS Volume QoS User Profile
AAA 802.1X
MAC
Authentication Portal
Port Security IP Source Guard SSH2.0 Public Key
07-Security
Volume
ACL ARP Attack
Protection URPF
Dual-SRPU
System VRRP Smart Link Monitor Link
RRPP DLDP Ethernet OAM
Connectivity Fault
Detection
08-High
Availability
Volume
BFD Track GR Overview
Login Basic System
Configuration Device Management File System Management
SNMP RMON MAC Address
Table
Management
System
Maintenance and
Debugging
Information
Center PoE NQA NTP
09-System
Volume
Hotfix IRF IPC
10-OAA OAP ACFP ACSEI

2-1
2 Features
The following sections provide an overview of the main features of each module supported by the
S7900E series.
Access Volume
Table 2-1 Features in Access volume
Features Description
Ethernet Port
This document describes:
zCombo Port Configuration
zManagement Ethernet Interface Configuration
zBasic Ethernet Port Configuration
zConfiguring Flow Control on an Ethernet Port
zConfiguring the Suppression Time of Physical-Link-State Change on
an Ethernet Port
zConfiguring Loopback Testing on an Ethernet Port
zConfiguring a Port Group
zConfiguring an Auto-negotiation Transmission Rate
zConfiguring Storm Suppression
zSetting the Interval for Collecting Ethernet Port Statistics
zEnabling Forwarding of Jumbo Frames
zEnabling Loopback Detection on an Ethernet Port
zConfiguring the MDI Mode for an Ethernet Port
zTesting the Cable on an Ethernet Port
zConfiguring the Storm Constrain Function on an Ethernet Port
zConfiguring the Connection Mode of an Ethernet Port
Link aggregation
Link aggregation aggregates multiple physical Ethernet ports into one
logical link. This document describes:
zIntroduction to Link Aggregation
zConfiguring an Aggregation Group
zConfiguring an Aggregate Interface
zConfiguring a Load Sharing Mode for Load-Sharing Link Aggregation
Groups
Port Isolation
The port isolation feature allows you to isolate different ports within the
same VLAN. This document describes:
zIntroduction to Port Isolation
zConfiguring the Isolation Group
Service Loopback
Group
To increase service redirecting throughput, you can bundle multiple
service loopback ports into a logical link, called a service loopback group.
This document describes:
zIntroduction to Service Loopback Groups
zConfiguring a Service Loopback Group

2-2
Features Description
Loopback Interface and
Null Interface
This document describes:
zIntroduction to Loopback Interface
zConfiguring a Loopback Interface
zIntroduction to Null Interface
zConfiguring a Null 0 Interface
MSTP
MSTP is used to eliminate loops in a LAN. It is compatible with STP and
RSTP. This document describes:
zIntroduction to STP/RSTP/MSTP
zConfiguring MSTP
zRemotely Configuring MSTP for an ONU
LLDP
LLDP enables a device tomaintain and manage its own and its immediate
neighbor’s device information, based on which the network management
system detects and determines the conditions of the communications
links. This document describes:
zIntroduction to LLDP
zPerforming Basic LLDP Configuration
zConfiguring CDP Compatibility
zConfiguring LLDP Trapping
VLAN
Using the VLAN technology, you can partition a LAN into multiple logical
LANs. This document describes:
zIntroduction and basic configuration of VLAN
zTypes of VLAN (Implement VLAN based on Port, MAC address,
Protocol, or IP subnet)
zIntroduction and configuration of Super VLAN
zIntroduction and configuration of Isolate-user-vlan
zIntroduction and configuration of Voice VLAN
GVRP GVRP is a GARP application. This document describes:
zGARP overview
zIntroduction and configuration of GVRP
QinQ
As defined in IEEE802.1Q, 12 bits are used to identify a VLAN ID, so a
device can support a maximum of 4094 VLANs. The QinQ feature
extends the VLAN space by allowing Ethernet frames to travel across the
service provider network with double VLAN tags. This document
describes:
zIntroduction to QinQ
zConfiguring basic QinQ
zConfiguring Selective QinQ
zConfiguring the TPID Value in VLAN Tags
BPDU Tunnel
BPDU tunneling enables transparently transmission of customer network
BPDU frames over the service provider network. This document
describes:
zIntroduction to BPDU Tunnel
zConfiguring BPDU Tunnel
VLAN Mapping
The VLAN mapping feature maps CVLAN tags to SVLAN tags. This
document describes:
zConfiguring One-to-One VLAN Mapping
zConfiguring Many-to-One VLAN Mapping
zConfiguring One-to-Two VLAN Mapping
zConfiguring Two-to-Two VLAN Mapping

2-3
Features Description
Port Mirroring
Port mirroring copies packets passing through a port to another port
connected with a monitoring device for packet analysis to help implement
network monitoring and troubleshooting. This document describes:
zIntroduction and configuration of Port Mirroring
zIntroduction and configuration of Traffic Mirroring
EPON OLT
An S7900E switch installed with an OLT card can work as an EPON OLT.
This document describes:
zIntroduction to EPON System
zOLT Configuration
zONU Remote Management Configuration
zUNI Port Configuration
zAlarm Configuration
zSupported Switch Features and Restrictions
IP Services Volume
Table 2-2 Features in the IP Services volume
Features Description
IP Address
An IP address is a 32-bit address allocated to a network interface on a
device that is attached to the Internet. This document describes:
zIntroduction to IP addresses
zIP address configuration
IP Performance
Optimization
In some network environments, you need to adjust the IP parameters to
achieve best network performance. This document describes:
zEnabling Reception and Forwarding of Directed Broadcasts to a
Directly Connected Network
zConfiguring TCP Attributes
zConfiguring ICMP to Send Error Packets
ARP
Address Resolution Protocol (ARP) is used to resolve an IP address into
a data link layer address. This document describes:
zARP Overview
zConfiguring ARP
zConfiguring Gratuitous ARP
zProxy ARP configuration
DHCP
DHCP is built on a client-server model, in which the client sends a
configuration request and then the server returns a reply to send
configuration parameters such as an IP address to the client. This
document describes:
zDHCP server configuration
zDHCP relay agent configuration
zDHCP Client configuration
zDHCP Snooping configuration
DNS
Used in the TCP/IP application, Domain Name System (DNS) is a
distributed database which provides the translation between domain
name and the IP address. This document describes:
zIPv4 DNS Configuration
zIPv6 DNS Configuration

2-4
Features Description
IPv6 Basics
Internet protocol version 6 (IPv6), also called IP next generation (IPng),
was designed by the Internet Engineering Task Force (IETF) as the
successor to Internet protocol version 4 (IPv4). This document describes:
zIPv6 overview
zBasic IPv6 functions configuration
zIPv6 NDP configuration
zPMTU discovery configuration
zIPv6 TCP properties configuration
zICMPv6 packet sending configuration
DHCPv6
The Dynamic Host Configuration Protocol for IPv6 (DHCPv6) was
designed based on IPv6 addressing scheme and is used for assigning
IPv6 addresses and other configuration parameters to hosts. This
document describes:
zConfiguring the DHCPv6 Client
zConfiguring the DHCPv6 Relay Agent
Tunneling
Tunneling is an encapsulation technique, which utilizes one network
transport protocol to encapsulate packets of another network transport
protocol and transfer them over the network. This document describes:
zConfiguring an IPv6 Manual Tunnel
zConfiguring a 6to4 Tunnel
zConfiguring an ISATAP Tunnel
zConfiguring an IPv4 over IPv4 Tunnel
zConfiguring an IPv4 over IPv6 Tunnel
zConfiguring an IPv6 over IPv6 Tunnel
zConfiguring a GRE over IPv4 Tunnel
zConfiguring a GRE over IPv6 Tunnel
UDP Helper
UDP Helper functions as a relay agent that converts UDP broadcast
packets into unicast packets and forwards them to a specified server.
This document describes:
zUDP Helper overview
zUDP Helper configuration
FTP and TFTP
The File Transfer Protocol (FTP) is an application layer protocol for
sharing files between server and client over a TCP/IP network. The
Trivial File Transfer Protocol (TFTP) provides functions similar to those
provided by FTP. This document describes:
zFTP Configuration
zTFTP Configuration
sFlow
Based on packet sampling, Sampled Flow (sFlow) is a traffic monitoring
technology mainly used to collect and analyze traffic statistics. This
document describes:
zsFlow Overview
zsFlow Configuration
IP Routing Volume
Table 2-3 Features in the IP Routing volume
Features Description
IP Routing Basics This document describes:
zIntroduction to IP routing and routing table
zRouting protocol overview

2-5
Features Description
Static Routing
A static route is manually configured by the administrator. The proper
configuration and usage of static routes can improve network
performance and ensure bandwidth for important network applications.
This document describes:
zStatic route configuration
zDetecting Reachability of the Static Route’s Nexthop
RIP
Routing Information Protocol (RIP) is a simple Interior Gateway Protocol
(IGP), mainly used in small-sized networks. This document describes:
zRIP basic functions configuration
zRIP advanced functions configuration
zRIP network optimization configuration
OSPF
Open Shortest Path First (OSPF) is an Interior Gateway Protocol based
on the link state developed by IETF. This document describes:
zEnabling OSPF
zConfiguring OSPF Areas
zConfiguring OSPF Network Types
zConfiguring OSPF Route Control
zConfiguring OSPF Sham Link
zConfiguring OSPF Network Optimization
zConfiguring OSPF Graceful Restart
IS-IS
Intermediate System-to-Intermediate System (IS-IS) is a link state
protocol, which uses the shortest path first (SPF) algorithm. This
document describes:
zConfiguring IS-IS Basic Functions
zConfiguring IS-IS Routing Information Control
zTuning and Optimizing IS-IS Networks
zConfiguring IS-IS Authentication
zConfiguring System ID to Host Name Mappings
zConfiguring IS-IS GR
zEnabling the Logging of Neighbor State Changes
zEnabling IS-IS SNMP Trap
BGP
Border gateway protocol (BGP) is an inter-autonomous system (inter-AS)
dynamic route discovery protocol. This document describes:
zConfiguring BGP Basic Functions
zControlling Route Generation
zControlling Route Distribution and Reception
zConfiguring BGP Route Attributes
zTuning and Optimizing BGP Networks
zConfiguring a Large Scale BGP Network
zConfiguring BGP GR
zEnabling Trap
zEnabling Logging of Peer State Changes
IPv6 Static Routing
Static routes are special routes that are manually configured by network
administrators. Similar to IPv4 static routes, IPv6 static routes work well in
simple IPv6 network environments. This document describes:
zIPv6 static route configuration
IPv6 RIPng
RIP next generation (RIPng) is an extension of RIP-2 for IPv4. RIPng for
IPv6 is IPv6 RIPng. This document describes:
zConfiguring RIPng Basic Functions
zConfiguring RIPng Route Control
zTuning and Optimizing the RIPng Network

2-6
Features Description
IPv6 OSPFv3
OSPFv3 is OSPF version 3 for short, supporting IPv6 and compliant with
RFC2740 (OSPF for IPv6). This document describes:
zEnabling OSPFv3
zConfiguring OSPFv3 Area Parameters
zConfiguring OSPFv3 Network Types
zConfiguring OSPFv3 Routing Information Control
zTuning and Optimizing OSPFv3 Networks
IPv6 IS-IS
The IS-IS routing protocol supports multiple network protocols, including
IPv6. IS-IS with IPv6 support is called IPv6 IS-IS dynamic routing
protocol. This document describes:
zConfiguring IPv6 IS-IS Basic Functions
zConfiguring IPv6 IS-IS Routing Information Control
IPv6 BGP
To support multiple network layer protocols, IETF extended BGP-4 by
introducing IPv6 BGP. This document describes:
zConfiguring IPv6 BGP Basic Functions
zControlling Route Distribution and Reception
zConfiguring IPv6 BGP Route Attributes
zTuning and Optimizing IPv6 BGP Networks
zConfiguring a Large Scale IPv6 BGP Network
Routing Policy
Routing policy is used on the router for route inspection, filtering,
attributes modifying when routes are received, advertised, or
redistributed. This document describes:
zDefining Filters
zRoute policy configuration
Policy Routing
Policy routing is to make forwarding decisions based on user-defined
policies. Different from the normal destination-based routing, policy
routing can make routing decisions based on the source address and
other criteria in addition to the destination IP address.
The S7900E series switches implement policy routing through QoS
policies. For details about traffic classification, traffic behavior and QoS
policy configuration commands, refer to QoS Commands in the QoS
Volume.
Multicast Volume
Table 2-4 Features in Multicast volume
Features Description
Multicast Overview
This document describes the main concepts in multicast:
zIntroduction to Multicast
zMulticast Models
zMulticast Architecture
zMulticast Packets Forwarding Mechanism
zMulti-Instance Multicast
Multicast Routing and
Forwarding
Multicast routing and forwarding refer to some policies that filter RPF
routing information for IP multicast support. This document describes:
zMulticast routing and forwarding overview
zMulticast routing and forwarding configuration

2-7
Features Description
IGMP
Internet Group Management Protocol (IGMP) is a protocol in the TCP/IP
suite responsible for management of IP multicast members. This
document describes:
zIGMP overview
zConfiguring basic functions of IGMP
zConfiguring IGMP performance parameters
zConfiguring IGMP SSM Mapping
zConfiguring IGMP Proxying
PIM
PIM leverages the unicast routing table created by any unicast routing
protocol to provide routing information for IP multicast. This document
describes:
zConfiguring PIM-DM
zConfiguring PIM-SM
zConfiguring PIM-SSM
zConfiguring PIM Common Features
MSDP
Multicast source discovery protocol (MSDP) describes interconnection
mechanism of multiple PIM-SM domains. It is used is to discover
multicast source information in other PIM-SM domains. This document
describes:
zMSDP configuration
zConfiguring an MSDP Peer Connection
zConfiguring SA Messages Related Parameters
MBGP
As a multicast extension of MP-BGP, MBGP enables BGP to provide
routing information for multicast applications. This document describes:
zConfiguring MBGP Basic Functions
zConfiguring MBGP Route Attributes
zConfiguring a Large Scale MBGP Network
Multicast VPN
Multicast VPN is a technique that implements multicast delivery in MPLS
L3VPN networks. This document describes:
zMulticast VPN overview
zHow MD-VPN works
zConfiguring MD VPN
IGMP Snooping
Running at the data link layer, IGMP Snooping is a multicast control
mechanism on the Layer 2 Ethernet switch and it is used for multicast
group management and control. This document describes:
zConfiguring Basic Functions of IGMP Snooping
zConfiguring IGMP Snooping Port Functions
zConfiguring IGMP Snooping Querier
zConfiguring IGMP Snooping Proxying
zConfiguring IGMP Snooping Policy
Multicast VLAN
The multicast VLAN feature configured on the Layer 2 device can saves
the network bandwidth and lessens the burden of the Layer 3 device.
This document describes:
zConfiguring Sub-VLAN-Based Multicast VLAN
zConfiguring Port-Based Multicast VLAN
IPv6 Multicast Routing
and Forwarding
IPv6 multicast routing and forwarding refer to some policies that filter
RPF routing information for IPv6 multicast support. This document
describes:
zIPv6 Multicast routing and forwarding overview
zIPv6 Multicast routing and forwarding configuration

2-8
Features Description
MLD
MLD is used by an IPv6 router or a Ethernet Switch to discover the
presence of multicast listeners on directly-attached subnets. This
document describes:
zConfiguring Basic Functions of MLD
zAdjusting MLD Performance
zConfiguring MLD SSM Mapping
zConfiguring MLD Proxying
IPv6 PIM
IPv6 PIM discovers multicast source and delivers information to the
receivers. This document describes:
zConfiguring IPv6 PIM-DM
zConfiguring IPv6 PIM-SM
zConfiguring IPv6 PIM-SSM
zConfiguring IPv6 PIM Common Features
IPv6 MBGP
As an IPv6 multicast extension of MP-BGP, IPv6 MBGP enables BGP to
provide routing information for IPv6 multicast applications. This
document describes:
zConfiguring IPv6 MBGP Basic Functions
zConfiguring IPv6 MBGP Route Attributes
zConfiguring a Large Scale IPv6 MBGP Network
MLD Snooping
Multicast Listener Discovery Snooping (MLD Snooping) is an IPv6
multicast constraining mechanism that runs on Layer 2 devices to
manage and control IPv6 multicast groups. This document describes:
zConfiguring Basic Functions of MLD Snooping
zConfiguring MLD Snooping Port Functions
zConfiguring MLD Snooping Querier
zConfiguring MLD Snooping Proxying
zConfiguring MLD Snooping Policy
IPv6 Multicast VLAN
The IPv6 multicast VLAN feature configured on the Layer 2 device can
saves the network bandwidth and lessens the burden of the Layer 3
device. This document describes:
zConfiguring Sub-VLAN-Based IPv6 Multicast VLAN
zConfiguring Port-Based IPv6 Multicast VLAN
MPLS Volume
Table 2-5 Features in the MPLS volume
Features Description
MCE
Multi-CE (MCE) enables a switch to function as the CEs of multiple VPN
instances in a BGP/MPLS VPN network, thus reducing the investment on
network equipment. This document describes:
zConfiguring a VPN Instance
zConfiguring Route Exchange between a MCE and a Site
zConfiguring Route Exchange between a MCE and a PE

2-9
Features Description
MPLS Basics
MPLS integrates both Layer 2 fast switching and Layer 3 routing and
forwarding, satisfying the networking requirements of various new
applications. This document describes:
zMPLS Overview
zMPLS Configuration Basics
zLDP Overview
zConfiguring MPLS Basic Capability
zConfiguring Static LSP
zConfiguring MPLS LDP
MPLS L2VPN
MPLS L2VPN provides Layer 2 VPN services on the MPLS network. This
document describes:
zMPLS L2VPN Overview
zMPLS L2VPN Configuration Basics
zConfiguring CCC MPLS L2VPN
zConfiguring SVC MPLS L2VPN
zConfiguring Martini MPLS L2VPN
zConfiguring Kompella MPLS L2VPN
zConfiguring Martini MPLS L2VPN Connections Based on Ethernet
Interface and VLAN
MPLS L3VPN
MPLS L3VPN is a kind of PE-based L3VPN technology for service
provider VPN solutions. This document describes:
zMPLS L3VPN Overview
zConfiguring VPN Instances
zConfiguring Basic MPLS L3VPN
zConfiguring Inter-Provider MPLS L3VPN
zConfiguring Nested VPN
zConfiguring HoVPN
zConfiguring OSPF Sham Link
zConfiguring BGP AS Number Substitution
VPLS
VPLS is a technology for delivering point-to-multipoint L2VPN services
over public networks.This document describes:
zVPLS Overview
zConfiguring VPLS Instances
zBinding VPLS Instances
zConfiguring VPLS Attributes
MPLS TE
Combining the MPLS technology and traffic engineering, MPLS TE
provides a simple, more scalable traffic engineering solution. This
document describes:
zMPLS TE Overview
zConfiguring MPLS TE Basic Capability
zConfiguring MPLS TE Tunnels with Static Signaling Protocol
zConfiguring MPLS TE Tunnels with Dynamic Signaling Protocol
zConfiguring RSVP-TE Advanced Features
zTuning CR-LSP Setup
zTuning MPLS TE Tunnel Setup
zConfiguring Traffic Forwarding
zConfiguring CR-LSP Backup
zConfiguring FRR

2-10
QoS Volume
Table 2-6 Features in the QoS volume
Features Description
QoS
For network traffic, the Quality of Service (QoS) involves bandwidth,
delay, and packet loss rate during traffic forwarding process. In a network,
you can improve the QoS by guaranteeing the bandwidth, and reducing
the delay, jitter, and packet loss rate. This document describes:
zQoS overview
zQoS policy configuration
zPriority mapping configuration
zTraffic policing Configuration
zTraffic shaping Configuration
zLine rate configuration
zCongestion management
zCongestion avoidance configuration
zTraffic filtering configuration
zPriority remarking configuration
zTraffic redirecting configuration
zAggregation CAR configuration
zClass-based accounting configuration
zQoS in a EPON system
User Profile
User profile provides a configuration template to save predefined
configurations. This document describes:
zCreating a User Profile
zConfiguring a User Profile
zEnabling a User Profile
Security Volume
Table 2-7 Features in the Security volume
Features Description
AAA
Authentication, Authorization and Accounting (AAA) provide a uniform
framework used for configuring these three security functions to
implement the network security management. This document describes:
zIntroduction to AAA, RADIUS and HWTACACS
zAAA configuration
zRADIUS configuration
zHWTACACS configuration
802.1X
IEEE 802.1X (hereinafter simplified as 802.1X) is a port-based network
access control protocol that is used as the standard for LAN user access
authentication. This document describes:
z802.1X overview
z802.1X configuration
z802.1X Guest-VLAN configuration
MAC Authentication
MAC authentication provides a way for authenticating users based on
ports and MAC addresses; it requires noclient software to be installed on
the hosts. This document describes:
zRADIUS-Based MAC Authentication
zLocal MAC Authentication

2-11
Features Description
Portal
Portal authentication, as its name implies, helps control access to the
Internet. This document describes:
zPortal overview
zPortal configuration
Port Security
Port security is a MAC address-based security mechanism for network
access controlling. It is an extension to the existing 802.1X authentication
and MAC authentication. This document describes:
zEnabling Port Security
zSetting the Maximum Number of Secure MAC Addresses
zSetting the Port Security Mode
zConfiguring Port Security Features
zConfiguring Secure MAC Addresses
zIgnoring Authorization Information from the Server
IP Source Guard
By filtering packets on a per-port basis, IP source guard prevents illegal
packets from traveling through, thus improving the network security. This
document describes:
zConfiguring a Static Binding Entry
zConfiguring Dynamic Binding Function
SSH2.0
SSH ensures secure login to a remote device in a non-secure network
environment. By encryption and strong authentication, it protects the
device against attacks. This document describes:
zConfiguring Asymmetric Keys
zConfiguring the Device as an SSH Server
zConfiguring the Device as an SSH Client
zConfiguring an SFTP Server
zConfiguring an SFTP Client
Public Key This document describes Public Key Configuration.
ACL
An ACL is used for identifying traffic based on a series of preset matching
criteria. This document describes:
zACL overview and ACL types
zACL configuration
ARP Attack Protection
Currently, ARP attacks and viruses are threatening LAN security. The
device can provide multiple features to detect and prevent such attacks.
This document describes:
zARP Attack Protection Overview
zConfiguring ARP Defense Against IP Packet Attacks
zConfiguring ARP Active Acknowledgement
zConfiguring Source MAC Address Based ARP Attack Detection
zConfiguring ARP Packet Rate Limit
zConfiguring ARP Detection
URPF
Unicast Reverse Path Forwarding (URPF) protects a network against
source address spoofing attacks. This document describes:
zURPF Overview
zURPF configuration

2-12
High Availability Volume
Table 2-8 Features in the High Availability volume
Features Description
Dual-SRPU System
The S7900E series switches are typically equipped with two SRPUs to
provide active-standby backup. This document describes:
zDual-SRPU system overview
zIgnoring Version Check of the SMB
zRestarting the SMB
zManually Configuring Switchover Between the AMB and SMB
VRRP
Virtual Router Redundancy Protocol (VRRP) combines a group of
switches (including a master and multiple backups) on a LAN into a virtual
router called VRRP group. VRRP streamlines host configuration while
providing high reliability. This document describes:
zVRRP overview
zIPv4-Based VRRP configuration
zIPv6-Based VRRP configuration
Smart Link
Smart Link is a solution for active-standby link redundancy backup and
rapid transition in dual-uplink networking. This document describes:
zSmart Link Overview
zConfiguring a Smart Link Device
zConfiguring an Associated Device
Monitor Link
Monitor link is a port collaboration function used to enable a device to be
aware of the up/down state change of the ports on an indirectly connected
link. This document describes:
zMonitor Link Overview
zConfiguring Monitor Link
RRPP
RRPP is a link layer protocol designed for Ethernet rings. RRPP can
prevent broadcast storms caused by data loops when an Ethernet ring is
healthy, and rapidly restore the communication paths between the nodes
after a link is disconnected on the ring. This document describes:
zRRPP overview
zCreating an RRPP Domain
zConfiguring Control VLANs
zConfiguring Protected VLANs
zConfiguring RRPP Rings
zActivating an RRPP Domain
zConfiguring RRPP Timers
zConfiguring RRPP Fast Detection
zConfiguring an RRPP Ring Group
DLDP
In the use of fibers, link errors, namely unidirectional links, are likely to
occur. DLDP is designed to detect such errors. This document describes:
zIntroduction to DLDP
zEnabling DLDP
zSetting DLDP Mode
zSetting the Interval for Sending Advertisement Packets
zSetting the DelayDown Timer
zSetting the Port Shutdown Mode
zConfiguring DLDP Authentication
zResetting DLDP State