H3C S3100-52P User manual

H3C S3100-52P Ethernet Switch
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20080724-C-1.01
Product Version: Release 1602

Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Organization
H3C S3100-52P Ethernet Switch Operation Manual is organized as follows:
Part Contents
0 Product Overview Introduces the characteristics, services, and network
implementations of S3100-52P Ethernet Switches.
1 CLI Introduces the command hierarchy, command view,
and CLI features of the Ethernet switch.
2 Login Introduces the ways to log into the Ethernet switch.
3 Configuration File
Management Introduces configuration file and the related configuration.
4 VLAN Introduces VLAN and the related configuration.
5 IP Address and
Performance Introduces IP address, IP performance, and the related configuration.
6 Voice VLAN Introduces voice VLAN fundamental and the related
configuration.
7 GVRP Introduces GVRP and the related configuration.
8 Port Basic Configuration Introduces basic port configuration.
9 Link Aggregation Introduces link aggregation and the related
configuration.
10 Port Isolation Introduces port isolation and the related configuration.
11 Port Security-Port
Binding Introduces port security, port binding, and the related configuration.
12 DLDP Introduces DLDP and the related configuration.
13 MAC Address Table
Management Introduces MAC address forwarding table management.
14 MSTP Introduces STP and the related configuration.
15 Static Route Introduces static route configuration.
16 Multicast Introduces IGMP Snooping, multicast MAC address,
unknown multicast packet dropping, and the related
configuration.
17 802.1x and System
Guard Introduces 802.1x, System-Guard, Quick EAD deployment, HABP and the related configuration.
18 AAA Introduces AAA, RADIUS, HWTACACS, EAD, and
the related configurations.

Part Contents
19 Web Authentication Introduces Web Authentication and the related
configuration.
20 MAC Address
Authentication Introduces MAC address authentication and the related configuration.
21 ARP Introduces ARP and the related configuration.
22 DHCP Introduces DHCP, DHCP-Snooping, and the related
configurations.
23 ACL Introduces ACL and the related configuration.
24 QoS-QoS Profile Introduces QoS, QoS profile and the related
configuration.
25 Mirroring Introduces port mirroring and the related
configuration.
26 Stack-Cluster Introduces the configuration to form clusters using
HGMP V2.
27 SNMP-RMON Introduces the configuration to manage network
devices through SNMP and RMON.
28 NTP Introduces NTP and the related configuration.
29 SSH Introduces SSH and the related configuration.
30 File System
Management Introduces basic configuration for file system management.
31 FTP-SFTP-TFTP Introduces basic configuration for FTP, SFTP, TFTP,
and the applications.
32 Information Center Introduces the configuration for analyzing/diagnosing
a network through information center.
33 System Maintenance
and Debugging Introduces daily system maintenance and debugging.
34 VLAN-VPN Introduces VLAN VPN and the related configuration.
35 HWPing Introduces HWPing and the related configuration.
36 IPv6 Management Introduces IPv6 Management and the related
configuration.
37 DNS Introduces domain name resolution and the related
configuration.
38 Smart Link-Monitor Link Introduces Smart Link, Monitor Link and the related
configuration.
39 Appendix Lists the acronyms used in this manual.

Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated
by vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square
brackets and separated by vertical bars. One or none is
selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated
by vertical bars. A minimum of one or a maximum of all
can be selected.
[ x | y | ... ] *
Optional alternative items are grouped in square
brackets and separated by vertical bars. Many or none
can be selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example,
click <OK>.
[ ] Window names, menu items, data table and field names
are inside square brackets. For example, pop up the
[New User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].

III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.
Related Documentation
In addition to this manual, each H3C S3100-52P Ethernet Switch documentation set
includes the following:
Manual Description
H3C S3100-52P Ethernet Switch
Installation Manual It provides information for the system installation and setup.
H3C S3100-52P Ethernet Switch
Command Manual-Release 1602 It is used for assisting the users in using various commands.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide
Web at this URL: http://www.h3c.com.
The following are the columns from which you can obtain different categories of product
documentation:
[Products & Solutions]: Provides information about products and technologies.
[Technical Support & Document > Technical Documents]: Provides several categories
of product documentation, such as installation, operation, and maintenance.
[Technical Support & Document > Product Support > Software]: Provides the
documentation released with the software version.
Documentation Feedback
You can e-mail your comments about product documentation to [email protected]m.
We appreciate your comments.

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 H3C Website......................................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Correspondence Between Documentation and Software .......................................2-1
2.1 Software Version................................................................................................................2-1
2.2 Manual List.........................................................................................................................2-4
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface...............................................................................................................................3-1
3.2 Switch Models.................................................................................................................... 3-1
3.3 Software Features .............................................................................................................3-1
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 Broadband Ethernet Access for Residential Communities................................................ 4-1
4.2 Application for Connecting Branches or Small- to Medium-Sized Enterprises..................4-2
4.3 Application in Large Enterprise and Campus Networks.................................................... 4-2

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
Hangzhou H3C Technologies Co., Ltd. (hereafter referred to as H3C) provides various
ways for you to obtain product documents and new feature releases in a convenient
and timely manner. The documentations are available with:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete
set of electronic documents of the product, including operation manuals and command
manuals. After installing the reader program provided by the CD-ROM, you can search
for the desired contents in a convenient way through the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
Perform the following steps to query and download the product documentation from the
H3C website.
Table 1-1 Acquire product documentation from the H3C website
How to apply for an
account
Access the homepage of H3C at http:// www.h3c.com and
click the Registration link at the top right. In the displayed
page, provide your information and click Submit.
How to get
documentation
Approach 1:
In the homepage of H3C at http:// www.h3c.com, select
Technical Support & Document > Technical Documents
from the navigation menu at the top. Then select a product
for its documents.
Approach 2:
In the homepage of H3C at http:// www.h3c.com, select
Support > Technical Documents. Then select a product
for its documents.

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 1 Obtaining the Documentation
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 2 Correspondence Between Documentation and Software
2-1
Chapter 2 Correspondence Between
Documentation and Software
2.1 Software Version
H3C S3100-52P Ethernet Switch Operation Manual-Release 1602 and H3C
S3100-52P Ethernet Switch Command Manual-Release 1602 are for the software
version of Release1602 of the S3100-52P product.
zCompared with Release 1500, many new features are added in Release 1602. For
details, refer to Table 2-1.
zCompared with Release 1500, a feature is removed from Release 1602. For
details, refer to Table 2-2.
zCompared with Release 1500, two features are modified in Release 1602. For
details, refer to Table 2-3.
Table 2-1 Added features in Release 1602
Added feature in Release 1602 Manual
Specifying the authentication mode for user level
switching
Adopting HWTACACS authentication for user level
switching
01-CLI
Copyright information is displayed when a Telnet user
logs in
Banner information is displayed when a user logs in
through Web
02-Login
Auto-negotiation rate configuration for the current port
Packet traffic threshold configuration for ports
Display of the statistics of discarded packets on ports
Configuration of the delay time of sending state-change
traps for the current port
08-Port Basic
Configuration
Inter-device port isolation 10-Port Isolation
New port security modes:
macAddressAndUserLoginSecure and
macAddressAndUserLoginSecureExt
11-Port Security-Port
Binding
Destination MAC address update 13-MAC Address Table
Management

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 2 Correspondence Between Documentation and Software
2-2
Added feature in Release 1602 Manual
STP maintainability
802.1d-compliant traps 14-MSTP
Support of IGMPv3 Snooping
Support of IGMPv3 Snooping simulated joining
Support of suppressing flooding of unknown multicast
traffic in the VLAN
Support of static member port configuration
Support of static router port configuration
Support of VLAN tag configuration for query messages
16-Multicast Protocol
Online user handshake
Support of 802.1x re-authentication configuration
Support of 802.1x re-authentication timeout
configuration
Quick deployment of EAD
17-802.1x and
System-Guard
Support of domain delimiter configuration
Support of HWTACACS scheme configuration for ISP
domain user level switching
Setting of MAC address format of the Calling-Station-Id
(Type 31) field in RADIUS packets
18-AAA
Web authentication 19-Web Authentication
Support of fixed password configuration when a MAC
address is used as a user name
Enhanced MAC authentication functions
20-MAC Address
Authentication
ARP attack detection
ARP packet rate limiting 21-ARP
Support of Option 82 in DHCP Snooping
IP filtering
DHCP packet rate limiting
22-DHCP
Applying ACLs to VLANs
Configuration of inner VLAN information for Layer 2
ACLs 23-ACL

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 2 Correspondence Between Documentation and Software
2-3
Added feature in Release 1602 Manual
VLAN mapping
Configuration of burst traffic for port rate limiting and
traffic policing
Configuration of priority remarking in VLANs
Redirecting traffic to an aggregation port group and
removing the outer VLAN tag after the traffic is
redirected to the uplink port or the aggregation port
group
Burst function
24-QoS-QoS Profile
Creating a MIB view with the mask of a MIB subtree
Encrypting a plain-text password
Adding interface description and interface type in
linkUp/linkDown Trap message
27-SNMP-RMON
Support of the DSA asymmetric key algorithm 29-SSH
Banner information of the FTP server 31-FTP-SFTP-TFTP
Displaying timestamp with the UTC time zone 32-Information Center
Configuration of real-time monitoring of system running
status
Hot patching
Viewing and diagnosing hot-pluggable transceivers
33-System Maintenance
and Debugging
Selective QinQ
Support of multiple types of protocol packets for BPDU
Tunneling
Customizing tunnel packet MAC addresses
34-VLAN-VPN
Eight test types are added in HWPing, including DHCP
test, FTP test, HTTP test, DNS test, SNMP test, Jitter
test, TCP test, and UDP test
Maximum number of history records that can be saved
35-HWping
IPv6 management 36-IPv6 Management
Smart Link
Monitor Link 38-Smart Link-Monitor
Link

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 2 Correspondence Between Documentation and Software
2-4
Table 2-2 Deleted feature from Release 1602
Deleted feature Manual
CLI language mode setting 33-System Maintenance and Debugging
Table 2-3 Modified features in Release 1602
Modified feature Manual
Support of up to 128 characters in a domain
name, compared with the original 24 characters 18-AAA
Sequence of selecting Web files 30-File System Management
2.2 Manual List
Manual name
H3C S3100-52P Ethernet Switch Installation Manual
H3C S3100-52P Ethernet Switch Operation Manual-Release 1602
H3C S3100-52P Ethernet Switch Command Manual-Release 1602

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 3 Product Overview
3-1
Chapter 3 Product Overview
3.1 Preface
H3C S3100-52P Ethernet switch is a Layer 2 wire speed Ethernet switch developed by
H3C independently. It is the intelligent and manageable switch designed for network
environments where high performance, high port density, and ease of installation are
required.
3.2 Switch Models
Table 3-1 lists the H3C S3100-52P Ethernet Switch model.
Table 3-1 Models in the S3100-52P
Model Power supply
unit (PSU)
Number
of
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Consol
e port
H3C
S3100-52
P AC-input 52
48 10/100
Mbps
ports(electric
al)
4 Gigabit
(SFP) ports 1
3.3 Software Features
S3100-52P Ethernet Switch has abundant software features and can meet the
requirements of different applications. Table 3-2 summarizes the features provided by
each module.
Table 3-2 Service features of the S3100-52P
Part Features
1 CLI
zCLI
zHierarchically grouped commands
zCLI online help
2 Login
zLogging into a switch through the Console port
zLogging into a switch through an Ethernet port by using
Telnet or SSH
zLogging into a switch through the Console port by using
modem
zLogging into a switch through Web or NMS
zControlling user login using ACL

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 3 Product Overview
3-2
Part Features
3 Configuration
File Management Saving, restoring, and deleting the configuration file
4 VLAN
zIEEE 802.1Q-compliant VLAN
zPort-based VLAN
zProtocol-based VLAN
5 IP Address and
Performance
zConfiguring an IP address for a switch
zConfiguring the TCP attributes for a switch
zEnabling/disabling the switch to send ICMP error messages
6 Voice VLAN Voice VLAN
7 GVRP GARP VLAN registration protocol (GVRP)
8 Port Basic
Configuration
zConfiguring port auto-negotiation rate
zLimiting traffic on a port
zSetting broadcast storm suppression globally
zLoopback detection supported
zCable test
9 Link
Aggregation Link aggregation control protocol (LACP)
10 Port Isolation Port isolation group
11 Port
Security-Port
Binding
zMultiple security modes
zMAC address-to-IP address-to-port binding
12 DLDP Device link detection protocol (DLDP)
13 MAC Address
Table
Managemen
zManually configuring dynamic, static, and black hole MAC
addresses
zConfiguring the aging time for MAC addresses
zMAC address learning limit
14 MSTP
zSTP/RSTP/MSTP
zThe following guard functions are available on an
MSTP-enabled switch: BPDU guard, root guard, loop guard,
TC-BPDU attack guard, and BPDU drop
zDigest snooping
zRapid transition
zVLAN-VPN TUNNEL
zH3C-proprietary MSTP path cost standard
15 Static Route Static route
16 Multicast Internet group management protocol snooping (IGMP
Snooping)
17802.1x and
System Guard
z802.1X authentication
zGuest VLAN
zQuick deployment of EAD
zHuawei authentication bypass protocol (HABP)
zSystem guard

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 3 Product Overview
3-3
Part Features
18 AAA
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
zHuawei terminal access controller access control system
(HWTACACS)
zEndpoint admission defense (EAD)
19 Web
Authentication Web authentication
20 MAC Address
Authentication zMAC address authentication
zEnhanced MAC address authentication
21 ARP
zGratuitous ARP
zManually configuring ARP entries
zARP attack detection
zARP packet rate limiting
22 DHCP
zDHCP client/BOOTP client
zDHCP Snooping
zUsing Option82 in DHCP Snooping
zDHCP packet rate limitation
23 ACL
zBasic ACLs
zAdvanced ACLs
zLayer 2 ACLs
zUser-defined ACLs
zApplying ACLs on ports
zApplying ACLs to VLANs
24 QoS-QoS
Profile zQuality of Service (QoS)
zQoS profile
25 Mirroring
zTraffic mirroring
zLocal port mirroring
zRemote port mirroring
26 Stack-Cluster
zStack
zHuawei group management protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
27 SNMP-RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zSupport of Trap parameters configuration
zRemote monitoring (RMON)
28 NTP Network time protocol (NTP)
29 SSH Terminal
Service Secure shell (SSH) v2.0, compatible with SSHv1.5
30 File System
Management
zFile system configuration
zFile attribute configuration
31
FTP-SFTP-TFTP
zOperating as an FTP server/FTP client
zOperating as an SFTP server/SFTP client
zOperating as a TFTP client

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 3 Product Overview
3-4
Part Features
32 Information
Center
zSystem logs
zHierarchical alarms
zDebugging information output
33 System
Maintenance and
Debugging
zLoading Boot ROM and software in multiple ways
zBasic system configuration and debugging
zNetwork connectivity test
zDevice management
34 VLAN-VPN
zVLAN VPN (QinQ)
zSelective QinQ
zBPDU Tunnel
zConfiguring VLAN VPN interior-layer priority replication
zConfiguring TPID value
35 HWPing
zOperating as a HWPing server/HWPing client
zNine test types, including ICMP test, DHCP test, FTP test,
HTTP test, DNS test, SNMP test, jitter test, TCP test, and
UDP test
36 IPv6
Management
zIPv6 management
zIPv6 static route
zIPv6 DNS
37 DNS IPv4 Domain Name System (DNS)
38 Smart
Link-Monitor Link
zSmart Link
zMonitor Link

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 4 Networking Applications
4-1
Chapter 4 Networking Applications
You can deploy S3100-52P Ethernet switch on many types of networks, such as
enterprise networks and broadband access networks. Following are several typical
networking applications.
4.1 Broadband Ethernet Access for Residential Communities
On the broadband access network of a residential community, an S3100-52P Ethernet
switch is located in the center. It is downlinked to S3100 series switches to reach the
Ethernet users and uplinked to a core Layer 3 switch through a GE extension module to
connect to the MAN backbone.
Data
center
Local service
center
Core layer
devices
Convergence
layer devices
Community/building
Access devices
Corridor access
devices
S3100 series
S3100-52P
L3
GSR
MAN
backbone
ICP
ICP
S3100 series
S3100 series
Figure 4-1 Connecting community Ethernet to MAN using S3100-52P Ethernet switch

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 4 Networking Applications
4-2
4.2 Application for Connecting Branches or Small- to
Medium-Sized Enterprises
For small-to medium-sized enterprises or branches of a large enterprise, S3100-52P
Ethernet switch can serve as a downstream device connected to the backbone switch,
and can be connected to the headquarters or other branches through Layer 3 switches
or routers. As the enterprise size increases, the network also can expand by
subtending the S3100-52P Ethernet switch.
Router
S3100-52P
S5600 Series
Host
Internet
Server
FE(100M)
GE(1000M)
Server
FE(100M)
Host
HostHostHost
FE(100M) FE(100M)
Figure 4-2 S3100-52P Ethernet switch application in branch network of midsize/large
enterprise
4.3 Application in Large Enterprise and Campus Networks
In a large enterprise or campus network, the S3100-52P Ethernet switch can operate
on the access layer. They are uplinked to layer 3 switches, S3600 Series or S5600
Series for example; and uplinked to a layer 3 switch. These switches together provide a
network-wide intranet solution that covers Gigabit-to-backbone and 100
Mbps-to-desktop.

Operation Manual – Product Overview
H3C S3100-52P Ethernet Switch Chapter 4 Networking Applications
4-3
Figure 4-3 S3100-52P Ethernet switch application in large enterprise and campus
network