H3C S5500-EI series User manual

H3C S5500-EI Series Ethernet Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20071120-C-1.01
Product Version: Release 2102

Copyright © 2007, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www. h3c.com
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S5500-EI Series Ethernet Switches
documentation set includes the following:
Manual Description
H3C S5500-EI Series Ethernet Switches
Installation Manual It provides information for the system installation.
H3C S5500-EI Series Ethernet Switches
Command Manual It is used for assisting the users in using various commands.
Organization
H3C S5500-EI Series Ethernet Switches Operation Manual is organized as follows:
Part Contents
0 Overview Introduces the ways for you to obtain
documentation, product overview, and
network application of the switches.
1 Login Introduces the ways to log into an Ethernet
switch.
2 VLAN Introduces VLAN, Voice VLAN, GVRP
fundamental and the related configuration.
3 IP Addressing and IP Performance Introduces IP address and IP performance
fundamental and the related configuration.
4 QinQ-BPDU Tunneling Introduces QinQ, BPDU Tunneling and the
related configuration.
5 Port Correlation Configuration Introduces basic port configuration and port
isolation configuration.
6 Link Aggregation Introduces link aggregation fundamental
and the related configuration.
7 MAC Address Table Management Introduces MAC address forwarding table
and the related configuration.
8 IP Source Guard Introduces MAC address, IP address and
port binding configuration.

Part Contents
9 DLDP Introduces DLDP and the related
configurations.
10 MSTP Introduces STP, BRDU tunnel and the
related configurations.
11 IP Routing-GR Overview Introduces the basic routing information,
the classification of routing protocols, and
GR fundamental.
12 IPv4 Routing Introduces IPv4 routing related
configurations, such as static routing, RIP,
OSPF, IS-IS, BGP, and route policy.
13 IPv6 Routing Introduces IPv6 routing related configurations, such as static routing,
RIPng, OSPFv3, IS-ISv6, and BGP4+.
14 IPv6 Configuration Introduces IPv6 basic configuration and
application, IPv6 tunneling, and so on.
15 Multicast Configuration Introduces the multicast protocol-related
configurations.
16 802.1x-HABP-MAC Authentication Introduces 802.1x, HABP, MAC and
related configurations.
17 AAA RADIUS HWTACACS Introduces AAA, RADIUS, HWTACACS,
and the related configurations.
18 ARP Introduces ARP and the related
configuration.
19 DHCP Introduces DHCP and the related
configuration.
20 ACL Introduces IPv4&IPv6-based ACL and the
related configuration.
21 QoS Introduces QoS and the related
configuration.
22 Port Mirroring Introduces port mirroring and the related
configuration.
23 Cluster Management Introduces Cluster and the related
configurations.
24 UDP Helper Introduces UDP Helper and the related
configuration.
25 SNMP-RMON Introduces the configuration to manage
network devices through SNMP and
RMON.
26 NTP Introduces NTP and the related
configuration.
27 DNS Introduces DNS and the related
configuration.

Part Contents
28 File System Management Introduces basic configuration for file
system management.
29 Information Center Introduces the configuration to analyze and
diagnose networks using the information
center.
30 System Maintaining and
Debugging Introduces daily system maintenance and debugging.
31 NQA Introduces NQA and the related
configurations.
32 VRRP Introduces VRRP and the related
configurations.
33 SSH Introduces SSH and the related
configurations.
34 RRPP Introduces RRPR and the related
configurations.
35 Port Security Introduces Port Security and the related
configurations.
36 LLDP Introduces LLDP and the related
configurations.
37 PoE Introduces PoE and the related
configuration.
38 sFlow Introduces sFlow and the related
configurations.
39 SSL-HTTPS Introduces SSL, HTTPS and the related
configurations.
40 PKI Introduces PKI and the related
configurations.
41 Track Introduces Track and the related
configurations.
42 Appendix Lists the acronyms used in this manual.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.

Convention Description
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 H3C Website......................................................................................................................1-1
1.3 Software Version Release.................................................................................................1-2
Chapter 2 Documentation and Product Version........................................................................ 2-1
2.1 Documentation and Software Version...............................................................................2-1
2.2 H3C S5500-EI Series Ethernet Switch Documentation Set..............................................2-1
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface...............................................................................................................................3-1
3.2 Product Models..................................................................................................................3-1
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 Serving as a Convergence Layer Device ..........................................................................4-1
4.2 Serving as a Access Layer Device....................................................................................4-1

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
H3C Technology Co., Ltd. provides various ways for you to obtain documentation,
through which you can obtain the product documentations and those concerning newly
added features. The documentations are available in one of the following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete
product document set, including the operation manual, command manual, installation
manual, and compatibility manual. After installing the reader program provided by the
CD-ROM, you can search for the desired contents in a convenient way through the
reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
Perform the following steps to query and download the product documentation from the
H3C website.
Table 1-1 Acquire product documentation from the H3C website
How to apply for an account
Access the homepage of H3C at http://
www.h3c.com and click on Registration at the top
right. In the displayed page, provide your information
and click on Submit to register.
How to get documentation
Approach 1:
In the homepage of H3C at http:// www.h3c.com,
select Technical Support & Document > Technical
Documents from the navigation menu at the top.
Then select a product for its documents.
Approach 2:
In the homepage of H3C at http:// www.h3c.com,
select Support > Technical Documents. Then select
a product for its documents.

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-2
1.3 Software Version Release
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 2 Documentation and Product Version
2-1
Chapter 2 Documentation and Product Version
2.1 Documentation and Software Version
H3C S5500-EI Series Ethernet Switches Operation Manual-Release 2102 and H3C
S5500-EI Series Ethernet Switches Command Manual-Release 2102 apply to
S5500-EI series Ethernet switches with their software version being Release 2102.
2.2 H3C S5500-EI Series Ethernet Switch Documentation Set
Table 2-1 H3C S5500-EI series Ethernet switch documentation set
Manual Manual version
H3C S5500-EI Series Ethernet Switches
Installation Manual V1.01
H3C S5500-EI Series Ethernet Switches
Operation Manual-Release 2102 V1.01
H3C S5500-EI Series Ethernet Switches
Command Manual-Release 2102 V1.01

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 3 Product Overview
3-1
Chapter 3 Product Overview
3.1 Preface
H3C S5500-EI Series Ethernet Switches (hereinafter referred to as the S5500-EI series)
are Gigabit Ethernet switching products developed by H3C. The S5500-EI series have
abundant service features. They provide the IPv6 forwarding function and 10GE uplink
interfaces.
Through H3C-specific cluster management, you can streamline network management.
The S5500-EI series are designed as convergence and access devices for intranets
and metropolitan area networks (MANs). Supporting IPv4/IPv6 dual-stack, the
S5500-EI series provide abundant service features and routing functions and can also
be used for connecting server groups in data centers.
3.2 Product Models
Table 3-1 Models in the H3C S5500-EI series
Model Number of
service ports Ports Console port
H3C S5500-28C-EI 28
24 10/100/1,000 M
electrical ports
+ 4 Gigabit SFP Combo
ports + 2 10GE module
slots
1
H3C S5500-52C-EI 52
48 10/100/1,000 M
electrical ports
+ 4 Gigabit SFP Combo
ports + 2 10GE module
slots
1
H3C
S5500-28C-PWR-EI 28
24 10/100/1,000 M PoE
electrical ports + 4
Gigabit SFP Combo
ports + 2 10GE module
slots
1
H3C
S5500-52C-PWR-EI 52
48 10/100/1,000 M PoE
electrical ports + 4
Gigabit SFP Combo
ports + 2 10GE module
slots
1

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 3 Product Overview
3-2
Model Number of
service ports Ports Console port
H3C S5500-28F-EI 28
24 100/1,000 M SFP
ports + 8 10/100/1,000
M Combo electrical
ports + 2 10GE module
slots
1
H3C
S5500-28C-EI-DC 28
24 10/100/1,000 M
electrical ports
+ 4 Gigabit SFP Combo
ports + 2 10GE module
slots
1

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 4 Networking Applications
4-1
Chapter 4 Networking Applications
The S5500-EI series are designed as convergence layer switches or access layer
switches for enterprise networks and MANs. The S5500-EI series provide 24 or 48
autosensing Gigabit Ethernet ports and four SFP Combo Gigabit optical interfaces. In
addition, the S5500-EI series provide two extension slots. You can configure XFP/CX4
extension module and up to four 10GE ports are supported. Networking is very flexible.
The S5500-EI series can apply to Gigabit Ethernet to the desktop (GTTD) access of
enterprise networks, user access of campus networks, and connection of data center
server clusters. Several typical networking applications are described as follows.
4.1 Serving as a Convergence Layer Device
In medium- and large-sized enterprises or campus networks, the S5500-EI series
Ethernet switches can serve as convergence layer switches that provide
high-performance and large-capacity switching service and support 10GE uplink
interfaces, which provide larger bandwidth for the devices.
Figure 4-1 Application of the S5500-EI series at the convergence layer of enterprise
networks/campus networks
4.2 Serving as a Access Layer Device
The S5500-EI series can serve as access layer switches that provide large access
bandwidth and high port density. The S5500-EI series also provide PoE. Through

Operation Manual – Overview
H3C S5500-EI Series Ethernet Switches Chapter 4 Networking Applications
4-2
Ethernet cables, the S5500-EI series can provide power to IP phone, WLAN AP, and
other PD devices that support IEEE 802.3af to facilitate network maintenance and
management.
Figure 4-2 Application of S5500-EI series at access layer

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Logging In to an Ethernet Switch ..............................................................................1-1
1.1 Logging In to an Ethernet Switch.......................................................................................1-1
1.2 Introduction to the User Interface ......................................................................................1-1
1.2.1 Supported User Interfaces......................................................................................1-1
1.2.2 User Interface Number............................................................................................1-1
1.2.3 Common User Interface Configuration ...................................................................1-2
Chapter 2 Logging In Through the Console Port.......................................................................2-1
2.1 Introduction........................................................................................................................2-1
2.2 Setting Up the Connection to the Console Port.................................................................2-1
2.3 Console Port Login Configuration......................................................................................2-3
2.3.1 Common Configuration...........................................................................................2-3
2.3.2 Console Port Login Configurations for Different Authentication Modes..................2-5
2.4 Console Port Login Configuration with Authentication Mode Being None ........................ 2-6
2.4.1 Configuration Procedure.........................................................................................2-6
2.4.2 Configuration Example............................................................................................2-8
2.5 Console Port Login Configuration with Authentication Mode Being Password...............2-10
2.5.1 Configuration Procedure.......................................................................................2-10
2.5.2 Configuration Example..........................................................................................2-12
2.6 Console Port Login Configuration with Authentication Mode Being Scheme..................2-14
2.6.1 Configuration Procedure.......................................................................................2-14
2.6.2 Configuration Example..........................................................................................2-17
Chapter 3 Logging In Through Telnet.........................................................................................3-1
3.1 Introduction........................................................................................................................3-1
3.1.1 Common Configuration...........................................................................................3-1
3.1.2 Telnet Configurations for Different Authentication Modes ...................................... 3-2
3.2 Telnet Configuration with Authentication Mode Being None.............................................3-4
3.2.1 Configuration Procedure.........................................................................................3-4
3.2.2 Configuration Example............................................................................................3-5
3.3 Telnet Configuration with Authentication Mode Being Password......................................3-7
3.3.1 Configuration Procedure.........................................................................................3-7
3.3.2 Configuration Example............................................................................................3-9
3.4 Telnet Configuration with Authentication Mode Being Scheme ......................................3-10
3.4.1 Configuration Procedure.......................................................................................3-10
3.4.2 Configuration Example..........................................................................................3-14
3.5 Telnet Connection Establishment....................................................................................3-15
3.5.1 Telnetting to a Switch from a Terminal .................................................................3-15
3.5.2 Telnetting to Another Switch from the Current Switch..........................................3-17

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Table of Contents
ii
Chapter 4 Logging in Using Modem............................................................................................4-1
4.1 Introduction........................................................................................................................4-1
4.2 Configuration on the Administrator Side............................................................................4-1
4.3 Configuration on the Switch Side.......................................................................................4-1
4.3.1 Modem Configuration..............................................................................................4-1
4.3.2 Switch Configuration ...............................................................................................4-2
4.4 Modem Connection Establishment....................................................................................4-3
Chapter 5 Logging in Through Web-based Network Management System............................5-1
5.1 Introduction........................................................................................................................5-1
5.2 HTTP Connection Establishment.......................................................................................5-1
5.3 Web Server Shutdown/Startup..........................................................................................5-2
5.4 Displaying Web Users .......................................................................................................5-3
Chapter 6 Logging in Through NMS............................................................................................6-1
6.1 Introduction........................................................................................................................6-1
6.2 Connection Establishment Using NMS..............................................................................6-1
Chapter 7 Configuring Source IP Address for Telnet Service Packets...................................7-1
7.1 Overview............................................................................................................................7-1
7.2 Configuring Source IP Address for Telnet Service Packets..............................................7-1
7.3 Displaying the source IP address/Interface Specified for Telnet Packets.........................7-2
Chapter 8 Controlling Login Users..............................................................................................8-1
8.1 Introduction........................................................................................................................8-1
8.2 Controlling Telnet Users....................................................................................................8-1
8.2.1 Prerequisites ...........................................................................................................8-1
8.2.2 Controlling Telnet Users by Source IP Addresses..................................................8-1
8.2.3 Controlling Telnet Users by Source and Destination IP Addresses........................8-2
8.2.4 Controlling Telnet Users by Source MAC Addresses.............................................8-3
8.2.5 Configuration Example............................................................................................8-4
8.3 Controlling Network Management Users by Source IP Addresses...................................8-4
8.3.1 Prerequisites ...........................................................................................................8-5
8.3.2 Controlling Network Management Users by Source IP Addresses ........................8-5
8.3.3 Configuration Example............................................................................................8-6
8.4 Controlling Web Users by Source IP Address...................................................................8-7
8.4.1 Prerequisites ...........................................................................................................8-7
8.4.2 Controlling Web Users by Source IP Addresses ....................................................8-7
8.4.3 Disconnecting a Web User by Force ......................................................................8-8
8.4.4 Configuration Example............................................................................................8-8

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Chapter 1 Logging In to an Ethernet Switch
1-1
Chapter 1 Logging In to an Ethernet Switch
1.1 Logging In to an Ethernet Switch
You can log in to an S5500-EI series Ethernet switch in one of the following ways:
zLogging in locally through the console port
zTelnetting locally or remotely to an Ethernet port
zTelnetting to the console port using a modem
zLogging in to the Web-based network management system
zLogging in through NMS (network management station)
1.2 Introduction to the User Interface
1.2.1 Supported User Interfaces
S5500-EI series Ethernet switch supports two types of user interfaces:AUX and VTY.
Table 1-1 Description on user interface
User interface Applicable user Port used Description
AUX Users logging in through the
console port Console port Each switch can
accommodate one
AUX user.
VTY Telnet users and
SSH users Ethernet port Each switch can
accommodate up
to five VTY users.
Note:
As the AUX port and the console port of an H3C series switch are the same one, you
will be in the AUX user interface if you log in through this port.
1.2.2 User Interface Number
Two kinds of user interface index exist: absolute user interface index and relative user
interface index.
1) The absolute user interface indexes are as follows:
zAUX user interface: 0
zVTY user interfaces: Numbered after AUX user interfaces and increases in the
step of 1

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Chapter 1 Logging In to an Ethernet Switch
1-2
2) A relative user interface index can be obtained by appending a number to the
identifier of a user interface type. It is generated by user interface type. The
relative user interface indexes are as follows:
zAUX user interface: AUX 0
zVTY user interfaces: VTY 0, VTY 1, VTY 2, and so on.
1.2.3 Common User Interface Configuration
To do… Use the command… Remarks
Lock the current user
interface lock
Optional
Execute this command in
user view.
A user interface is not locked
by default.
Specify to send messages
to all user interfaces/a
specified user interface
send { all | number |
type number }
Optional
Execute this command in
user view.
Disconnect a specified
user interface free user-interface [ type ]number
Optional
Execute this command in
user view.
Enter system view system-view —
Set the banner header { incoming |
legal |login | shell |
motd }text Optional
Set a system name for the
switch sysname string Optional
Enter user interface view user-interface [ type ]
first-number
[ last-number ] —
Define a shortcut key for
aborting tasks escape-key { default | character }
Optional
The default shortcut key
combination for aborting
tasks is < Ctrl+C >.
Set the history command
buffer size history-command
max-size value
Optional
The default history
command buffer size is 10.
That is, a history command
buffer can store up to 10
commands by default.

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Chapter 1 Logging In to an Ethernet Switch
1-3
To do… Use the command… Remarks
Set the timeout time for
the user interface idle-timeout minutes [ seconds ]
Optional
The default timeout time of a
user interface is 10 minutes.
With the timeout time being
10 minutes, the connection
to a user interface is
terminated if no operation is
performed in the user
interface within 10 minutes.
You can use the
idle-timeout 0 command to
disable the timeout function.
Set the maximum number
of lines the screen can
contain
screen-length
screen-length
Optional
By default, the screen can
contain up to 24 lines.
You can use the
screen-length 0 command
to disable the function to
display information in pages.
Make terminal services
available shell
Optional
By default, terminal services
are available in all user
interfaces.
Set the display type of a
terminal terminal type {ansi | vt100 }
Optional
By default, the terminal
display type is ANSI. The
device must use the same
type of display as the
terminal. If the terminal uses
VT 100, the device should
also use VT 100.
Display the information
about the current user
interface/all user
interfaces
display users [ all ] You can execute this
command in any view.
Display the physical
attributes and
configuration of the
current/a specified user
interface
display user-interface
[type number |
number ] [ summary ]
You can execute this
command in any view.
Display the information
about the current web
users display web users You can execute this
command in any view.

Operation Manual – Login
H3C S5500-EI Series Ethernet Switches Chapter 2 Logging In Through the Console Port
2-1
Chapter 2 Logging In Through the Console Port
Note:
The default system name of S5500-EI series Ethernet switches is H3C, that is, the
command line prompt is H3C. All the following examples take H3C as the command
line prompt.
2.1 Introduction
To log in through the console port is the most commonway to log in to a switch. It is also
the prerequisite to configure other login methods. By default, you can log in to an
S5500-EI series Ethernet switch through its console port only.
To log in to an Ethernet switch through its console port, the related configuration of the
user terminal must be in accordance with that of the console port.
Table 2-1 lists the default settings of a console port.
Table 2-1 The default settings of a console port
Setting Default
Baud rate 9,600 bps
Flow control Off
Check mode No check bit
Stop bits 1
Data bits 8
After logging in to a switch, you can perform configuration for AUX users. Refer to
section 2.3 “Console Port Login Configuration” for more.
2.2 Setting Up the Connection to the Console Port
zConnect the serial port of your PC/terminal to the console port of the switch, as
shown in Figure 2-1.