H3C H3C S7500E Series Installation instructions

H3C S7500E Series Ethernet Switches
Command Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20071025-C-1.01
Product Version: Release 6000

Copyright © 2007, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www. h3c.com
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S7500E Series Ethernet Switches documentation
set includes the following:
Manual Description
H3C S7500E Series Ethernet
Switches Operation Manual
It is used for assisting the users in data
configurations and typical applications. (See
the electronic documentation for details)
H3C S7500E Series Ethernet
Switches Installation Manual It provides information for the system installation.
Organization
H3C S7500E Series Ethernet Switches Command Manual is organized as follows:
Part Contents
1 Login Introduces the commands used for logging into the
Ethernet switch.
2 VLAN Introduces the commands used for configuring VLAN,
Voice VLAN, and GVRP.
3 IP Addressing and
Performance Introduces the commands used for configuring IP address and IP performance.
4 QinQ-BPDU
Tunneling Introduces the commands used for configuring QinQ and BPDU Tunneling.
5 Port Correlation
Configuration Introduces the commands used for basic port configuration and port isolation configuration.
6 Link Aggregation Introduces the commands used for link aggregation.
7 MAC Address Table
Management Introduces the commands used for configuring MAC address forwarding table.
8 IP Source Guard Introduces the commands used for configuring MAC
address, IP address and port binding.
9 MSTP Introduces the commands used for configuring STP and
BRDU tunnel.
10 IP Routing Overview Introduces the commands used for displaying IP routing
tables.

Part Contents
11 IPv4 Routing Introduces the commands used for configuring IPv4
routing, static routing, RIP, OSPF, IS-IS, BGP, and route
policy.
12 IPv6 Routing Introduces the commands used for configuring IPv6
routing, static routing, RIPng, OSPFv3, IS-ISv6, and
BGP4+.
13 IPv6 Configuration Introduces the commands used for configuring IPv6
application, IPv6 tunneling, and so on.
14 Multicast Introduces the commands used for configuring IGMP Snooping, MLD Snooping, multicast VLAN, multicast
policy, IGMP, PIM-DM, PIM-SM, and MSDP.
15 802.1x-MAC
Authentication Introduces the commands used for 802.1x and MAC address authentication related configurations.
16 AAA RADIUS
HWTACACS Introduces the commands used for AAA, RADIUS, HWTACACS, and the related configurations.
17 Portal Introduces the commands used for portal.
18 ARP Introduces the commands used for ARP and the related
configuration.
19 DHCP Introduces the commands used for DHCP and the
related configuration.
20 ACL Introduces the commands used for IPv4&IPv6-based
ACL and the related configuration.
21 QoS Introduces the commands used for QoS and the related
configuration.
22 Port Mirroring Introduces the commands used for port mirroring and
the related configuration.
23 SNMP-RMON Introduces the commands used for the configuration to
manage network devices through SNMP and RMON.
24 NTP Introduces the commands used for NTP and the related
configuration.
25 DNS Introduces the commands used for DNS and the related
configuration.
26 File System
Management Introduces the commands used for file system management.
27 Information Center Introduces the commands used for the configuration to analyze and diagnose networks using the information
center.
28 System Maintaining
and Debugging Introduces the commands used for daily system maintenance and debugging.
29 HA Introduces the commands used for VRRP, HA and the
related configuration.

Part Contents
30 SSH Introduces the commands used for SSH and the related
configuration.
31 PoE Introduces the commands used for PoE.
32 RRPP Introduces the commands used for RRPP.
33 Appendix Lists all the commands described in this command
manual in an alphabetic order. The parts and pages
where the commands are described are also given.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.

II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Command Manual – Login
H3C S7500E Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Commands for Logging into an Ethernet Switch.....................................................1-1
1.1 Commands for Logging into an Ethernet Switch...............................................................1-1
1.1.1 activation-key ..........................................................................................................1-1
1.1.2 authentication-mode................................................................................................1-2
1.1.3 auto-execute command...........................................................................................1-3
1.1.4 databits....................................................................................................................1-4
1.1.5 display telnet client configuration............................................................................1-5
1.1.6 display user-interface..............................................................................................1-6
1.1.7 display users ...........................................................................................................1-7
1.1.8 escape-key..............................................................................................................1-9
1.1.9 flow-control............................................................................................................1-10
1.1.10 free user-interface...............................................................................................1-11
1.1.11 history-command max-size.................................................................................1-11
1.1.12 idle-timeout..........................................................................................................1-12
1.1.13 lock......................................................................................................................1-13
1.1.14 modem ................................................................................................................1-14
1.1.15 modem auto-answer ...........................................................................................1-14
1.1.16 modem timer answer...........................................................................................1-15
1.1.17 parity....................................................................................................................1-16
1.1.18 protocol inbound..................................................................................................1-16
1.1.19 screen-length.......................................................................................................1-17
1.1.20 send.....................................................................................................................1-18
1.1.21 service-type.........................................................................................................1-19
1.1.22 set authentication password................................................................................1-20
1.1.23 shell.....................................................................................................................1-22
1.1.24 speed...................................................................................................................1-22
1.1.25 stopbits................................................................................................................1-23
1.1.26 sysname..............................................................................................................1-24
1.1.27 telnet....................................................................................................................1-25
1.1.28 telnet ipv6............................................................................................................1-26
1.1.29 telnet client source ..............................................................................................1-26
1.1.30 telnet server enable.............................................................................................1-27
1.1.31 terminal type........................................................................................................1-28
1.1.32 user-interface ......................................................................................................1-29
1.1.33 user privilege level ..............................................................................................1-29
Chapter 2 Commands for Controlling Login Users................................................................... 2-1
2.1 Commands for Controlling Login Users.............................................................................2-1

Command Manual – Login
H3C S7500E Series Ethernet Switches Table of Contents
ii
2.1.1 acl............................................................................................................................2-1
2.1.2 snmp-agent community...........................................................................................2-2
2.1.3 snmp-agent group...................................................................................................2-2
2.1.4 snmp-agent usm-user.............................................................................................2-4

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-1
Chapter 1 Commands for Logging into an Ethernet
Switch
1.1 Commands for Logging into an Ethernet Switch
1.1.1 activation-key
Syntax
activation-key character
undo activation-key
View
AUX interface view
Parameters
character: Shortcut key for starting terminal sessions, a character or its ASCII decimal
equivalent in the range 0 to 127; or a string of 1 to 3 characters.
Description
Use the activation-key command to define a shortcut key for starting a terminal
session.
Use the undo activation-key command to restore the default shortcut key.
You can use a single character (or its correspondingASCII code value in the range 0 to
127) or a string of 1 to 3 characters to define a shortcut key. In the latter case, the
system takesonly the first character to define the shortcut key. For example, if you input
an ASCII code value 97, the system will set the shortcut key to <a>; if you input the
string b@c, the system will set the shortcut key to <b>.
You may use the display current-configuration command to verify the shortcut key
you have defined.
By default, pressing Enter key will start a terminal session.
Examples
# Set the shortcut key for starting terminal sessions to <s>.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] activation-key s

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-2
To verify the configuration, do the following:
# Exit the terminal session on the aux port, and enter <s> at the prompt of “Please
press ENTER”. You will see the terminal session being started.
[Sysname-ui-aux0] return
<Sysname> quit
**************************************************************************
* Copyright (c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
**************************************************************************
User interface aux0 is available.
Please press ENTER.
<Sysname>
%Apr 28 04:33:11:611 2005 Sysname SHELL/5/LOGIN: Console login from aux0
1.1.2 authentication-mode
Syntax
authentication-mode {none | password | scheme [command-authorization ] }
View
User interface view
Parameters
none: Does not authenticate users.
password: Authenticates users using the local password.
scheme: Authenticates users locally or remotely using usernames and passwords.
command-authorization: Performs command authorization on TACACS
authentication server.
Description
Use the authentication-mode command to specify the authentication mode.
zIf you specify the password keyword to authenticate users using the local
password, remember to set the local password using the set authentication
password { cipher | simple } password command.
zIf you specify the scheme keyword to authenticate users locally or remotely using
usernames and passwords, the actual authentication mode depends on other

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-3
related configuration. Refer to the AAA-RADIUS-HWTACACS module of this
manual for more.
zIf this command is executed with the command-authorization keywords
specified, authorization is performed on the TACACS server whenever you
attempt to execute a command, and the commandcan be executed only when you
pass the authorization. Normally, a TACACS server contains a list of the
commands available to different users.
After you specify to perform local password authentication, when a user logs in through
the Console port, a user can log into the switch even if the password is not configured
on the switch. But for a VTY user interface, a password is needed for a user to log into
the switch through it under the same condition.
By default, users logging in through the Console port are not authenticated, whereas
modem users and Telnet users are authenticated.
Caution:
For VTY user interface, if you want to set the login authentication mode to none or
password, you must first verify that the SSH protocol is not supported by the user
interface. Otherwise, your configuration will fail. Refer to protocol inbound.
Examples
# Configure to authenticate users using the local password.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] authentication-mode password
1.1.3 auto-execute command
Syntax
auto-execute command text
undo auto-execute command
View
User interface view
Parameters
text: Command to be executed automatically.

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-4
Description
Use the auto-execute command command to set the command that is executed
automatically after a user logs in.
Use the undo auto-execute command command to disable the specified command
from being automatically executed.
Use these two commands in the VTY user interface only.
Normally, the telnet command is specified to be executed automatically to enable the
user to Telnet to a specific network device automatically.
By default, no command is automatically executed.
Caution:
zThe auto-execute command command may cause you unable to perform common
configuration in the user interface, so use it with caution.
zBefore executing the auto-execute command command and save your
configuration, make sure you can log into the switch in other modes and cancel the
configuration.
Examples
# Configure the telnet 10.110.100.1 command to be executed automatically after users
log into VTY 0.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface vty 0
[Sysname-ui-vty0] auto-execute command telnet 10.110.100.1
% This action will lead to configuration failure through ui-vty0. Are you
sure?[Y/N]y
After the above configuration, when a user logs onto the device through VTY 0, the
device automatically executes the configured command and logs off the current user.
1.1.4 databits
Syntax
databits { 5 | 6| 7 |8 }
undo databits

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-5
View
AUX interface view
Parameters
5: Five data bits.
6: Six data bits.
7: Seven data bits.
8: Eight data bits.
Description
Use the databits command to set the databits for the user interface.
Use the undo databits command to revert to the default data bits.
The default data bits is 8.
Note:
H3C S7500E Series Ethernet Switches only support data bits 7 and 8. To establish the
connection again, you need to modify the configuration of the termination emulation
utility running on your PC accordingly.
Examples
# Set the data bits to 7.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] databits 7
1.1.5 display telnet client configuration
Syntax
display telnet client configuration
View
Any view
Parameter
None

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-6
Description
Use the display telnet client configuration command to display the source IP
address or source interface configured for the current device.
Example
# Display the source IP address or source interface configured for the current device.
<Sysname> display telnet client configuration
The source IP address is 1.1.1.1.
1.1.6 display user-interface
Syntax
display user-interface [ type number | number ] [ summary ]
View
Any view
Parameters
type: User interface type.
number: Absolute or relative index of the user interface. This argument can be an
absolute user interface index (if you do not provide the type argument) or a relative user
interface index (if you provide the type argument).
summary: Displays the summary information about a user interface.
Description
Use the display user-interface command to view information about the specified or all
user interfaces.
When the summary keyword is absent, the command will display the type of the user
interface, the absolute or relative number, the speed, the user privilege level, the
authentication mode and the physical location.
When the summary keyword is present, the command will display all the number and
type of user interfaces under use and without use.
Examples
# Display the information about user interface 0.
<Sysname> display user-interface 0
Idx Type Tx/Rx Modem Privi Auth Int
F 0 AUX 0 9600 - 3 N -
+ : Current user-interface is active.

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-7
F : Current user-interface is active and work in async mode.
Idx : Absolute index of user-interface.
Type : Type and relative index of user-interface.
Privi: The privilege of user-interface.
Auth : The authentication mode of user-interface.
Int : The physical location of UIs.
A : Authenticate use AAA.
L : Authentication use local database.
N : Current UI need not authentication.
P : Authenticate use current UI's password.
Table 1-1 Descriptions on the fields of the display user-interface command
Filed Description
+ The information displayed is about the current user interface.
F The information displayed is about the current user interface. And
the current user interface operates in asynchronous mode.
Idx The absolute index of the user interface
Type User interface type and the relative index
Tx/Rx Transmission speed of the user interface
Modem Indicates whether or not a modem is used.
Privi The available command level
Auth The authentication mode
Int The physical position of the user interface
1.1.7 display users
Syntax
display users [ all ]
View
Any view
Parameters
all: Displays the information about all user interfaces.
Description
Use the display users command to display the information about user interfaces. If
you do not specify the all keyword, only the information about the current user interface
is displayed.

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-8
Examples
# Display the information about the current user interface.
<Sysname> display users
The user application information of the user interface(s):
Idx UI Delay Type Userlevel
1 VTY 0 00:11:45 TEL 3
2 VTY 1 00:16:35 TEL 3
3 VTY 2 00:16:54 TEL 3
+ 4 VTY 3 00:00:00 TEL 3
Following are more details.
VTY 0 :
Location: 192.168.0.123
VTY 1 :
Location: 192.168.0.43
VTY 2 :
Location: 192.168.0.2
VTY 3 :
User name: user
Location: 192.168.0.33
+ : Current operation user.
F : Current operation user work in async mode.
Table 1-2 Descriptions on the fields of the display users command
Field Description
+ The information displayed is about the current user interface.
F The information is about the current user interface, and the current
user interface operates in asynchronous mode.
UI The numbers in the left sub-column are the absolute user interface
indexes, and those in the right sub-column are the relative user
interface indexes.
Delay The period in seconds the user interface idles for.
Type User type
Userlevel The level of the commands available to the users logging into the
user interface
Location The IP address form which the user logs in.
User name The login name of the user that logs into the user interface.

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-9
1.1.8 escape-key
Syntax
escape-key { default | character }
undo escape-key
View
User interface view
Parameters
default: Restores the default escape key combination <Ctrl + C>.
character: Specifies the shortcut key for aborting a task, a single character (or its
corresponding ASCII code value in the range 0 to 127) or a string of 1 to 3 characters.
Description
Use the escape-key command to define a shortcut key for aborting tasks.
Use the undo escape-key command to restore the default shortcut key.
You can use a single character (or its correspondingASCII code value in the range 0 to
127) or a string of 1 to 3 characters to define a shortcut key. But in fact, only the first
character functions as the shortcut key. For example, if you enter an ASCII value 113,
the system will use its corresponding character <q> as the shortcut key; if you input the
string q@c, the system will use the first letter <q> as the shortcut key.
By default, you can use <Ctrl + C> to terminate a task. You can use the display
current-configuration command to verify the shortcut key you have defined.
Examples
# Define <Q> as the escape key.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] escape-key Q
To verify the configuration, do the following:
# Run the ping command to test the connection.
<Sysname> ping –c 20 125.241.23.46
PING 125.241.23.46: 56 data bytes, press Q to break
Request time out
--- 125.241.23.46 ping statistics ---
2 packet(s) transmitted
0 packet(s) received

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-10
100.00% packet loss
Enter <Q>, if the ping task is terminated and return to the current view, the configuration
is correct.
<Sysname>
1.1.9 flow-control
Syntax
flow-control { hardware | none | software }
undo flow-control
View
AUX interface view
Parameters
hardware: Configures to perform hardware flow control.
none: Configures no flow control.
software: Configures to perform software flow control.
Description
Using flow-control command, you can configure the flow control mode on AUX port.
Using undo flow-control command, you can restore the default flow control mode.
By default, the value is none. That is, no flow control will be performed.
Note:
H3C S7500E Series Ethernet Switches only support none keyword.
Examples
# Configure software flow control on AUX port.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] flow-control none

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-11
1.1.10 free user-interface
Syntax
free user-interface [ type ]number
View
User view
Parameters
type: User interface type.
number: Absolute user interface index or relative user interface index.
zRelative user interface index: If you provide the type argument, number indicates
the user interface index of the type. When the type is AUX, the number is 0; when
the type is VTY, the number ranges from 0 to 4.
zAbsolute user interface index: If you do not provide the type argument, number
indicates absolute user interface index, which ranges from 0 to 5.
Description
Use the free user-interface command to clear a specified user interface. If you
execute this command, the corresponding user interface will be disconnected.
Note that the current user interface can not be cleared.
Examples
# Log into user interface 0 and clear user interface 1.
<Sysname> free user-interface 1
Are you sure to free user-interface vty0
[Y/N]y
[OK]
After you execute this command, user interface 1 will be disconnected. The user in it
must log in again to connect to the switch.
1.1.11 history-command max-size
Syntax
history-command max-size value
undo history-command max-size
View
User interface view

Command Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Commands for Logging into an Ethernet Switch
1-12
Parameters
value: Size of the history command buffer. This argument ranges from 0 to 256 and
defaults to 10. That is, the history command buffer can store 10 commands by default.
Description
Use the history-command max-size command to set the size of the history command
buffer.
Use the undo history-command max-size command to revert to the default history
command buffer size.
Examples
# Set the size of the history command buffer to 20 to enable it to store up to 20
commands.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] history-command max-size 20
1.1.12 idle-timeout
Syntax
idle-timeout minutes [ seconds ]
undo idle-timeout
View
User interface view
Parameters
minutes: Number of minutes. This argument ranges from 0 to 35,791.
seconds: Number of seconds. This argument ranges from 0 to 59.
Description
Use the idle-timeout command to set the timeout time. The connection to a user
interface is terminated if no operation is performed in the user interface within the
specified period.
Use the undo idle-timeout command to revert to the default timeout time.
You can use the idle-timeout 0 command to disable the timeout function.
The default timeout time is 10 minutes.