3Com Switch 7700 User manual

http://www.3com.com/
Switch 7700
Configuration Guide
Version 3.0
Published November 2004
Part No.10014298

3Com Corporation
350 Campus Drive
Marlborough, MA
01752-3064
Copyright © 2004, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced
in any form or by any means or used to make any derivative work (such as translation, transformation, or
adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time
to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either
implied or expressed, including, but not limited to, the implied warranties, terms or conditions of
merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or
changes in the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein
are provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995)
or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited
rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is
applicable. You agree not to remove or deface any portion of any legend provided on any licensed program
or documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com, the 3Com logo, are registered trademarks of 3Com Corporation.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and
Windows NT are registered trademarks of Microsoft Corporation. UNIX is a registered trademark in the United
States and other countries, licensed exclusively through X/Open Company, Ltd.
All other company and product names may be trademarks of the respective companies with which they are
associated.

CONTENTS
ABOUT THIS GUIDE
Conventions 1
SYSTEM ACCESS
Product Overview 3
Function Features 3
Configuring the Switch 7700 4
Setting Terminal Parameters 5
Configuring Through Telnet 8
Configuring Through a Dial-up Modem 11
Configuring the User Interface 12
Command Line Interface 20
Command Line View 20
Features and Functions of the Command Line 23
PORT CONFIGURATION
Ethernet Port Overview 27
Configuring Ethernet Ports 27
Setting the VLAN VPN Feature 33
Example: Configuring the Default VLAN ID of the Trunk Port 34
Troubleshooting VLAN Port Configuration 35
Configuring Link Aggregation 35
Types of Link Aggregation 36
Load Sharing 38
Configuring Link Aggregation 38
Example: Link Aggregation Configuration 42
VLAN CONFIGURATION
VLAN Overview 45
Configuring VLANs 45
Common VLAN Configuration Tasks 46
Configuring Port-Based VLANs 49
Configuring Protocol-Based VLANs 49
Configuring GARP/GVRP 53
Configuring GVRP 55

NETWORK PROTOCOL OPERATION
Configuring IP Address 59
Subnet and Mask 60
Configuring an IP Address 60
Troubleshooting an IP Address Configuration 62
Configuring Address Resolution Protocol (ARP) 62
Configuring ARP 63
DHCP Relay 64
Configuring DHCP Relay 65
Troubleshooting a DHCP Relay Configuration 68
IP Performance 68
Configuring TCP Attributes 68
Configuring Special IP Packet Transmission to the CPU 69
Configuring L3 Broadcast Forwarding 69
Displaying and Debugging IP Performance 70
Troubleshooting IP Performance 70
IPX Configuration 71
IPX Address Structure 71
Routing Information Protocol 71
Service Advertising Protocol 72
Configuring IPX 72
IPX Configuration Example 81
Troubleshooting IPX 83
IP ROUTING PROTOCOL OPERATION
IP Routing Protocol Overview 87
Selecting Routes Through the Routing Table 88
Routing Management Policy 89
Static Routes 90
Configuring Static Routes 91
Troubleshooting Static Routes 94
RIP 95
Configuring RIP 96
Troubleshooting RIP 104
OSPF 104
Calculating OSPF Routes 105
Configuring OSPF 107
Troubleshooting OSPF 127
IS-IS 128
Two-Level Structure of IS-IS 129
NSAP Structure of IS-IS 130
IS-IS Packets 131
Configuring Integrated IS-IS 132
Integrated IS-IS Configuration Example 146
BGP 148
BGP Messages 149

BGP Routing 149
BGP Peers and Peer Groups 150
Configuring BGP 150
Typical BGP Configuration Examples 168
Troubleshooting BGP 174
IP Routing Policy 174
Routing Information Filters 175
Configuring an IP Routing Policy 176
Troubleshooting Routing Policies 182
Route Capacity 183
Limiting Route Capacity 183
Configuring Route Capacity 183
MULTICAST PROTOCOL
IP Multicast Overview 191
Multicast Addresses 192
IP Multicast Protocols 194
Forwarding IP Multicast Packets 195
Applying Multicast 196
Configuring Common Multicast 196
Configuring Common Multicast 196
Configuring IGMP 198
Configuring IGMP 199
IGMP Snooping 205
Configuring IGMP Snooping 208
IGMP Snooping Configuration Example 210
Troubleshooting IGMP Snooping 210
Configuring PIM-DM 211
Configuring PIM-DM 212
PIM-DM Configuration Example 215
Configuring PIM-SM 216
PIM-SM Operating Principles 217
Preparing to Configure PIM-SM 218
Configuring PIM-SM 218
GMRP 227
Configuring GMRP 227
QOS/ OPERATION
ACL Overview 231
Filtering or Classifying Data Transmitted by the Hardware 231
Filtering or Classifying Data Transmitted by the Software 232
ACL Support on the Switch 7700 232
Configuring ACLs 233
Configuring the Time Range 233
Selecting the ACL Mode 233
Defining an ACL 234

Activating an ACL 236
ACL Configuration Examples 237
Access Control 237
Basic ACL 238
Link ACL 239
Configuring QoS 239
Qos Concepts 240
Configuring QoS 243
QoS Configuration Examples 250
Configuring ACL Control 257
Configuring ACL Control for TELNET Users 258
Configuring ACL Control for SNMP Users 259
STP OPERATION
STP Overview 263
Configuring STP 263
Designating Switches and Ports 264
Calculating the STP Algorithm 264
Generating the Configuration BPDU 265
Selecting the Optimum Configuration BPDU 265
Designating the Root Port 265
Configuring the BPDU Forwarding Mechanism 267
MSTP Overview 268
MSTP Concepts 268
MSTP Principles 271
Configuring MSTP 271
Configuring the MST Region for a Switch 272
Specifying the Switch as Primary or Secondary Root Switch 273
Configuring the MSTP Running Mode 274
Configuring the Bridge Priority for a Switch 275
Configuring the Max Hops in an MST Region 275
Configuring the Switching Network Diameter 276
Configuring the Time Parameters of a Switch 277
Configuring the Max Transmission Speed on a Port 278
Configuring a Port as an Edge Port 279
Configuring the Path Cost of a Port 279
Configuring the Priority of a Port 281
Configuring the Port Connection with the Point-to-Point Link 282
Configuring the mCheck Variable of a Port 283
Configuring the Switch Security Function 284
Enabling MSTP on the Device 285
Enabling or Disabling MSTP on a Port 285
Displaying and Debugging MSTP 286
AAA AND RADIUS OPERATION
IEEE 802.1x 287

802.1x System Architecture 287
Configuring 802.1x 289
Configuring the AAA and RADIUS Protocols 296
Configuring AAA 298
Configuring the RADIUS Protocol 301
Troubleshooting AAA and RADIUS 311
RELIABILITY
VRRP Overview 313
Configuring VRRP 314
Enable Pinging the Virtual IP Address 314
Setting Correspondence Between Virtual IP and MAC Addresses 315
Adding and Deleting a Virtual IP Address 315
Configuring the Priority of Switches 316
Configuring Preemption and Delay for a Switch 316
Configuring Authentication Type and Authentication Key 317
Configuring the VRRP Timer 317
Configuring a Switch to Track an Interface 318
Displaying and Debugging VRRP 318
Troubleshooting VRRP 321
SYSTEM MANAGEMENT
File System 323
Using a Directory 323
Managing Files 324
Formatting Storage Devices 324
Setting the Prompt Mode of the File System 324
Configuring File Management 325
FTP 326
TFTP 328
Managing the MAC Address Table 329
Configuring the MAC Address Table 330
Managing Devices 334
Rebooting the Switch 7700 334
Designating the APP for the Next Boot 334
Displaying Devices 336
Maintaining and Debugging the System 336
Configuring System Basics 336
Displaying System Information and State 337
Debugging the System 337
Testing Tools for Network Connection 339
Logging Function 340
SNMP 345
SNMP Versions and Supported MIB 346
Configuring SNMP 346
RMON 353

Configuring RMON 354
NTP 357
Configuring NTP 358
NTP Configuration Examples 364
SSH Terminal Services 371
Configuring the SSH Server 373
Configuring the SSH Client 376
Specifying the Server IP Address 376
Displaying and Debugging SSH 379
SSH Configuration Example 380

ABOUT THIS GUIDE
This guide describes the 3Com® Switch 7700 and how to configure it in version
3.0 of the software.
Conventions Tabl e 1 lists icon conventions that are used throughout this book.
Tabl e 2 lists the text conventions used in this book.
Table 1 Notice Icons
Icon Notice Type Description
Information
note
Information that describes important features or
instructions.
Caution Information that alerts you to potential loss of data
or potential damage to an application, system, or
device.
Warning Information that alerts you to potential personal
injury.
Table 2 Text Conventions
Convention Description
Screen displays This typeface represents information as
it appears on the screen.
Keyboard key names If you must press two or more keys
simultaneously, the key names are
linked with a plus sign (+), for example:
Press Ctrl+Alt+Del The words “enter” and type”
When you see the word “enter” in this guide, you
must type something, and then press Return or Enter.
Do not press Return or Enter when an instruction
simply says “type.”
Words in italics
Italics are used to: Emphasize a point.
Denote a new term at the place where it is defined in
the text.
Identify command variables.
Identify menu names, menu commands, and software
button names. Examples:
From the Help menu, select
Contents.
Click OK.Words in bold
Boldface type is used to highlight command names.
For example, “Use the display user-interface
command to...”

2ABOUT THIS GUIDE

1SYSTEM ACCESS
This chapter covers the following topics:
■Product Overview
■Configuring the Switch 7700
■Setting Terminal Parameters
■Command Line Interface
Product Overview The 3Com Switch 7700 is a large capacity, modularized wire speed Layer 2/Layer 3
Switch 7700. It is designed for IP metropolitan area networks (MAN), large-sized
enterprise networks, and campus network users.
The Switch 7700 has an integrated chassis structure. The chassis contains a card
area, fan area, power supply area, and a power distribution area. In the card area,
there are seven slots. Slot 0 is prepared specially for the switch Fabric module, and
the other six slots are for interface modules. You can install different interface
modules for different networks; the slots support a mixed set of modules.
The Switch 7700 supports the following services:
■MAN, enterprise/campus networking
■Multicast service and multicast routing functions and support audio and video
multicast service.
Function Features Tabl e 1 lists and describes the function features that the Switch 7700 supports.
Table 1 Function Features
Features Support
VLAN VLANs compliant with IEEE 802.1Q standard
Port-based VLAN
Protocol-based VLAN
GARP VLAN Registration Protocol (GVRP)
STP protocol Spanning Tree Protocol (STP)
Multiple Spanning Tree Protocol (MSTP), compliant with IEEE
802.1D/IEEE 802.1s Standard
Flow control IEEE 802.3x flow control (full-duplex)
Back-pressure based flow control (half-duplex)
Broadcast suppression Broadcast suppression
Multicast GARP Multicast Registration Protocol (GMRP)
Internet Group Management Protocol (IGMP) Snooping
Internet Group Management Protocol (IGMP)
Protocol-Independent Multicast-Dense Mode (PIM-DM)
Protocol-Independent Multicast-Sparse Mode (PIM-SM)

4CHAPTER 1: SYSTEM ACCESS
Configuring the
Switch 7700
On the Switch 7700, you can set up the configuration environment through the
console port. To set up the local configuration environment:
1Plug the DB-9 or DB-25 female plug of the console cable into the serial port of the
PC or the terminal where the switch is to be configured.
2Connect the RJ-45 connector of the console cable to the console port of the
switch, as shown in Figure 1.
IP routing Static route
RIP V1/v2
OSPF
BGP (in extended software)
IS-IS (in extended software)
IP routing policy
DHCP Relay Dynamic Host Configuration Protocol (DHCP) Relay
Link aggregation Link aggregation
Mirror Port-based mirroring
Security features Multi-level user management and password protect
802.1X authentication
Packet filtering
Reliability Virtual Redundancy Routing Protocol (VRRP)
Quality of Service (QoS) Traffic classification
Bandwidth control
Priority
Queues of different priority on the port
Queue scheduling: supports Strict Priority Queueing (SP)
Management and
maintenance
Command line interface configuration
Configuration through the console port
Remote configuration by Telnet
Configuration through dialing the modem
SNMP
System log
Level alarms
Output of the debugging information
PING and Tracert
Remote maintenance with Telnet, modem, and SSH
Loading and updating Loading and upgrading software using the XModem protocol
Loading and upgrading software using the File Transfer Protocol
(FTP) and Trivial File Transfer Protocol (TFTP)
Table 1 Function Features (continued)
Features Support

Setting Terminal Parameters 5
Figure 1 Setting Up the Local Configuration Environment Through the Console Port
Setting Terminal
Parameters
To set terminal parameters:
1Start the PC and select Start > Programs > Accessories > Communications >
HyperTerminal.
2The HyperTerminal window displays the Connection Description dialog box, as
shown in Figure 2.
Figure 2 Set Up the New Connection
3Enter the name of the new connection in the Name field and click OK. The dialog
box, shown in Figure 3 displays.
4Select the serial port to be used from the Connect using dropdown menu.
RS-232 Serial port
Console cable
Console port

6CHAPTER 1: SYSTEM ACCESS
Figure 3 Properties Dialog Box
5Click OK. The Port Settings tab, shown in Figure 4, displays and you can set serial
port parameters. Set the following parameters:
■Baud rate = 9600
■Databit = 8
■Parity check = none
■Stopbit = 1
■Flow control = none

Setting Terminal Parameters 7
Figure 4 Set Communication Parameters
6Click OK. The HyperTerminal dialogue box displays, as shown in Figure 5.
7Select Properties.
Figure 5 HyperTerminal Window
8In the Properties dialog box, select the Settings tab, as shown in Figure 6.
9Select VT100 in the Emulation dropdown menu.
10 Click OK.

8CHAPTER 1: SYSTEM ACCESS
Figure 6 Settings Tab
Setting the Terminal Parameters is described in the following sections:
■Configuring Through Telnet
■Configuring Through a Dial-up Modem
■Configuring the User Interface
Configuring Through
Teln et
Before you can telnet to a Switch 7700 and configure it, you must:
1Configure the IP address of a VLAN interface for the Switch 7700 through the
console port (using the ip address command in VLAN interface view)
2Add the port (that connects to a terminal) to this VLAN (using the port command
in VLAN view)
3Log in to the Switch 7700
Tasks for Configuring through Telnet are described in the following sections:
■Connecting the PC to the Switch 7700
■Connecting Two Switch 7700 Systems

Setting Terminal Parameters 9
Connecting the PC to the Switch 7700
To connect the PC and Switch 7700 through Telnet:
1Authenticate the Telnet user through the console port before the user logs in by
Teln et .
By default, a password is required for authenticating the Telnet user to log in the
Switch 7700. If a user logs in by Telnet without a password, the user sees the
message: Login password has not been set!
2Enter system view, return to user view by pressing Ctrl+Z.
<SW7700> system-view
[SW7700] user-interface vty 0 4
[SW7700-ui-vty0] set authentication password simple/cipher xxxx
(xxxx is the preset login password of Telnet user)
3To set up the configuration environment, connect the Ethernet port of the PC to
that of the Switch 7700 through the LAN. See Figure 7.
Figure 7 Setting Up the Configuration Environment Through Telnet
4Run Telnet on the PC by selecting Start > Run from the Windows desktop and
entering Telnet in the Open field, as shown in Figure 8. Click OK.
Figure 8 Run Telnet
The terminal displays User Access Verification and prompts you for the logon
password.
5Enter the password. The terminal displays the command line prompt (<SW7700>).
If the message, Too many users! appears, try to reconnect later. At most, 5
Telnet users are allowed to log on to a Switch 7700 simultaneously.
Workstation
WorkstationServer
Ethernet port
PC (for configuring
the switch through Telnet)
Ethernet

10 CHAPTER 1: SYSTEM ACCESS
6Use the appropriate commands to configure the Switch 7700 or to monitor the
operational state. Enter ?to get immediate help. For details on specific
commands, refer to the chapters in this guide.
When configuring the Switch 7700 by Telnet, do not modify the IP address unless
necessary, because the modification might terminate the Telnet connection. By
default, after passing the password authentication and logging on, a Telnet user
can access the commands at login level 0.
Connecting Two Switch 7700 Systems
Before you can telnet the Switch 7700 to another Switch 7700, as shown in
Figure 9, you must:
1Configure the IP address of a VLAN interface for the Switch 7700 through the
console port (using the ip address command in VLAN interface view)
2Add the port (that connects to a terminal) to this VLAN (using the port command
in VLAN view)
3Log in to the Switch 7700
After you telnet to a Switch 7700, you can run the telnet command to log in and
configure another Switch 7700.
Figure 9 Provide Telnet Client Service
1Authenticate the Telnet user through the console port on the Telnet Server (Switch
7700) before login.
By default, a password is required for authenticating the Telnet user to log in the
Switch 7700. If a user logs into Telnet without password, the system displays the
following message: Login password has not been set!
2Enter system view, return to user view by pressing Ctrl+Z.
<SW7700> system-view
[SW7700] user-interface vty 0
[SW7700-ui-vty0] set authentication password simple/cipher xxxx
(xxxx is the preset login password of Telnet user)
3Log in to the Telnet client (Switch 7700). For the login process, see “Connecting
the PC to the Switch 7700”.
4Perform the following operations on the Telnet client:
<SW7700> telnet xxxx
(XXXX can be the hostname or IP address of the Telnet Server. If it is the hostname,
the switch will have the static resolution function enabled).
5Enter the preset login password. The Switch 7700 prompt (<SW7700>) displays. If
the message, Too many users! displays, try to connect later.
6Use the appropriate commands to configure the Switch 7700 or view its
operational state. Enter ?to get immediate help. For details on a specific
command, refer to the appropriate chapter in this guide.
PC Telnet client Telnet server

Setting Terminal Parameters 11
Configuring Through a
Dial-up Modem
To configure your router through a dial-up modem:
1Authenticate the modem user through the console port of the Switch 7700 before
the user logs in to the switch through a dial-up modem.
By default, a password is required for authenticating the modem user to log in to
the Switch 7700. If a user logs in through the modem without a password, the
user sees the message, Password required, but none set.
aEnter system view, return user view with Ctrl+Z.
<SW7700> system-view
[SW7700] user-interface aux 0
[SW7700-ui-aux0] set authentication password simple/cipher xxxx
(xxxx is the preset login password of the Modem user.)
bUsing the modem command, you can configure the console port to modem
mode.
[SW7700-ui-aux0] modem
2To set up the remote configuration environment, connect the modems to a PC (or
a terminal) serial port and to the Switch 7700 console port, as shown in Set Up
Remote Configuration Environment.
Figure 10 Set Up Remote Configuration Environment
3Dial for a connection to the switch, using the terminal emulator and modem on
the remote end. Dial the telephone number of the modem connected to the
Switch 7700. See Figure 11 and Figure 12.
Console port Remote telephone:
555-5555
Modem
Modem
PST
Telephone line
Modem serial port line

12 CHAPTER 1: SYSTEM ACCESS
Figure 11 Set the Dialed Number
Figure 12 Dial the Remote PC
4Enter the preset login password on the remote terminal emulator and wait for the
<SW7700> prompt.
5Use the appropriate commands to configure the Switch 7700 or view its
operational state. Enter ?to get immediate help. For details on a specific
command, refer to the appropriate chapter in this guide.
By default, after login, a modem user can access the commands at Level 0.
Configuring the User
Interface
User interface configuration is another way to configure and manage port data.
The Switch 7700 supports the following configuration methods:
■Local configuration through the console port
■Remote configuration through Telnet on the Ethernet port