H3C H3C S3100 8C SI User manual

H3C S3100 Series Ethernet Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20080710-C-1.05

Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
Technical Support
[e-mail]
http://www.h3c.com

About This Manual
Organization
H3C S3100 Series Ethernet Switches Operation Manual is organized as follows:
Part Contents
0 Product Overview Introduces the characteristics and
implementations of the Ethernet switch.
1 CLI Introduces the command hierarchy, command
view and CLI features of the Ethernet switch.
2 Login Introduces the ways to log into an Ethernet
switch.
3 Configuration File
Management Introduces the ways to manage configuration files.
4 VLAN Introduces VLAN fundamental and the related
configuration.
5 Management VLAN Introduces the management VLAN configuration.
6 IP Address-IP Performance Introduces IP address and IP performance
fundamental and the related configuration.
7 Voice VLAN Introduces voice VLAN fundamental and the
related configuration.
8 GVRP Introduces GVRP and the related configuration.
9 Port Basic Configuration Introduces basic port configuration.
10 Link Aggregation Introduces link aggregation and the related
configuration.
11 Port Isolation Introduces port isolation and the related
configuration.
12 Port Security-Port Binding Introduces port security, port binding, and the
related configuration.
13 DLDP Introduces DLDP and the related configuration.
14 MAC Address Table
Management Introduces MAC address forwarding table and the related configuration.
15 MSTP Introduces STP and the related configuration.
16 Multicast Introduces the configuration of IGMP Snooping.
17 802.1x-System Guard Introduces 802.1x, System-Guard and the
related configuration.

Part Contents
18 AAA Introduces AAA, RADIUS, HWTACACS, EAD,
and the related configurations.
19 MAC Address
Authentication Introduces MAC address authentication and the related configuration.
20 ARP Introduces ARP and the related configuration.
21 DHCP Introduces DHCP, DHCP-Snooping, and the
related configurations.
22 ACL Introduces ACL and the related configuration.
23 QoS-QoS Profile Introduces QoS, QoS profile and the related
configuration.
24 Mirroring Introduces port mirroring and the related
configuration.
25 Stack-Cluster Introduces the configuration to form clusters
using HGMP V2.
26 PoE-PoE Profile Introduces PoE, PoE profile and the related
configuration.
27 SNMP-RMON Introduces the configuration to manage network
devices through SNMP and RMON.
28 NTP Introduces NTP and the related configuration.
29 SSH Introduces SSH and the related configuration.
30 File System Management Introduces basic configuration for file system
management.
31 FTP-SFTP-TFTP Introduces basic configuration for FTP, SFTP,
TFTP, and the applications.
32 Information Center Introduces the configuration to analyze and
diagnose networks using the information center.
33 System Maintenance and
Debugging Introduces daily system maintenance and debugging.
34 VLAN-VPN Introduces VLAN VPN and the related
configuration.
35 HWPing Introduces HWPing and the related configuration.
36 IPv6 Management Introduces IPv6 Management and the related
configuration.
37 DNS Introduces DNS and the related configuration.
38 Smart Link-Monitor Link Introduces Smart Link, Monitor Link and the
related configuration.
39 Appendix Lists the acronyms used in this manual.

Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu
items are in Boldface. For example, the New User window
appears; click OK.
> Multi-level menus are separated by angle brackets. For
example, File > Create > Folder.
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.

Convention Description
Note Means a complementary description.
Related Documentation
In addition to this manual, each H3C S3100 Series Ethernet Switches documentation
set includes the following:
Manual Description
H3C S3100 Series Ethernet Switches
Installation Manual It provides information for the system installation.
H3C S3100 Series Ethernet Switches
Command Manual It is used for assisting the users in using various commands.
H3C S3100 Series Ethernet Switches
Compliance and Safety Manual
It lists the regulatory compliance
statements and provides the safety
information of H3C S3100 series
Ethernet switches.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide
Web at this URL: http://www.h3c.com.
The following are the columns from which you can obtain different categories of product
documentation:
[Products & Solutions]: Provides information about products and technologies.
[Technical Support & Document > Technical Documents]: Provides several categories
of product documentation, such as installation, operation, and maintenance.
[Technical Support & Document > Product Support > Software]: Provides the
documentation released with the software version.
Documentation Feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 H3C Website......................................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Correspondence Between Documentation and Software .......................................2-1
2.1 Manual List.........................................................................................................................2-1
2.2 Software Version................................................................................................................2-1
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Overview............................................................................................................................3-1
3.2 Software Features .............................................................................................................3-1
Chapter 4 Network Design............................................................................................................4-1
4.1 MAN Access Solution........................................................................................................4-1
4.2 Education Network Solution...............................................................................................4-1
4.3 Multi-Service Carrier VLAN Solution..................................................................................4-2

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
Hangzhou H3C Technologies Co., Ltd. provides various ways for you to obtain
documentation, through which you can obtain the product documentations and those
concerning newly added new features. The documentations are available in one of the
following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains the
operation manual and command manual. After installing the reader program provided
by the CD-ROM, you can search for the desired contents in a convenient way through
the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
Perform the following steps to query and download the product documentation from the
H3C website.
Table 1-1 Acquire product documentation from the H3C website
Registering Access the homepage of H3C at http:// www.h3c.com and click
on Registration at the top right. In the displayed page, provide
your information and click on Submit to register.
Acquire product
documentation
Approach 1:
In the homepage of H3C athttp:// www.h3c.com, select Technical
Support & Document > Technical Documents from the navigation
menu at the top. Then select a product for its documents.
Approach 2:
In the homepage of H3C at http:// www.h3c.com, select Support >
Technical Documents. Then select a product for its documents.

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches Chapter 2 Correspondence Between Documentation and Software
2-1
Chapter 2 Correspondence Between
Documentation and Software
2.1 Manual List
Manual name Corresponding
Product
H3C S3100 Series Ethernet Switches Installation Manual
H3C S3100 Series Ethernet Switches Quick Start
H3C S3100 Series Ethernet Switches Compliance and
Safety Manual
H3C S3100 Series Ethernet Switches Operation Manual
H3C S3100 Series Ethernet Switches Command Manual
S3100-SI series
S3100-EI series
2.2 Software Version
H3C S3100 Series Ethernet Switches Operation Manual and H3C S3100 Series
Ethernet Switches Command Manual are for the software versions list in Table 2-1 of
the S3100-SI series and S3100-EI series switches.
Table 2-1 Corresponding software versions of this manual
Switch Software Version
S3100-SI series Release2102, Release2107
S3100-EI series Release2104, Release2107, Release2107P01
The supported features are different between these software versions.
zCompared with Release 2102, some new features are added in Release 2107 of
the S3100-SI series switches. For details, refer to Table 2-2.
zCompared with Release 2104, some new features are added in Release 2107 and
Release 2107P01 of the S3100-EI series switches. For details, refer to Table 2-3.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches Chapter 2 Correspondence Between Documentation and Software
2-2
Table 2-2 Added features compared with the earlier software version of S3100-SI
Software
Version Added Features Compared With The Earlier Version Manual
Assigning MAC Addresses for Ethernet
Ports 14-MAC Address Table Management
ARP Source MAC Address Consistency
Check 20-ARP
Local authentication after failed of
remote authentication 18-AAA
Unauthorized DHCP Server Detection 21-DHCP
SNMP AES 128 27-SNMP-RMON
rsa peer-public-key import 29-SSH
FTP disconnect 31-FTP-SFTP-TFTP
Identifying and Diagnosing Pluggable
Transceivers 33-System Maintenance and Debugging
Release2107
IPv6 Management 36-IPv6 Management
Table 2-3 Added features compared with the earlier software version of S3100-EI
Software
Version Added Features Compared With The Earlier Version Manual
Configuring loopback detection for a list of
ports in bulk
Enabling auto-shutdown of loopback ports
09-Port Basic
Configuration
Release2107
P01 ARP Source MAC Address Consistency
Check 20-ARP
Assigning MAC Addresses for Ethernet
Ports 14-MAC Address Table Management
Traffic Shaping 23-QoS-QoS Profile
SNMP AES 128 27-SNMP-RMON
rsa peer-public-key import 29-SSH
Release2107
FTP disconnect 31-FTP-SFTP-TFTP

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 3 Product Overview
3-1
Chapter 3 Product Overview
Note:
For the convenience of users, units of Mega bps/1000 Mega bps in the following
chapters are simplified as M/G.
3.1 Overview
The H3C S3100 Series Ethernet Switches are high-performance, high-density,
easy-to-install, NMS-manageable intelligent Ethernet switches which support
wire-speed Layer 2 switching.
3.2 Software Features
S3100 Series Ethernet Switches have abundant software features and can meet the
requirements of different applications. Table 3-1 summarizes the features provided by
each module.
Table 3-1 Software features of the S3100 series
Part Features
1 CLI
zCLI
zHierarchically grouped commands
zCLI online help
2 Login
zLogging into a switch through the Console port
zLogging into a switch through an Ethernet port by
using Telnet or SSH
zLogging into a switch through the Console port by
using modem
zLogging into a switch through Web or NMS
3 Configuration File
Management
zSaving and deleting the configuration file
zSpecifying the configuration file to be used the next
time the device boots and the file attribute
4 VLAN
zIEEE 802.1Q-compliant VLAN
zPort-based VLAN
zProtocol-based VLAN (Supported by only S3100-EI
series switches)
5 Management VLAN zManagement VLAN configuration
zManagement VLAN interface configuration

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 3 Product Overview
3-2
Part Features
6 IP Address-IP
Performance
Configuration
zConfiguring an IP address for a switch
zConfiguring the TCP attributes for a switch
7 Voice VLAN Voice VLAN (Supported by only S3100-EI series
switches)
8 GVRP GARP VLAN registration protocol (GVRP)
9 Port Basic
Configuration
zThree port states supported: Access, Trunk, and
Hybrid
zSetting broadcast storm suppression globally
zLoopback detection supported
zCable test
10 Link Aggregation
zLink aggregation control protocol (LACP)
zManual aggregation
zStatic aggregation
11 Port Isolation Port isolation group
12 Port Security-Port
Binding
zMultiple security modes
zIP address-MAC address-port binding (Supported
by only S3100-EI series switches)
13 DLDP Device link detection protocol (DLDP) (Supported by
only S3100-EI series switches)
14 MAC Address Table
Management
zManually configuring dynamic, static, and black hole
MAC addresses
zConfiguring the aging time for MAC addresses
zMAC address learning limit
zDisabling ports in a VLAN from learning MAC
addresses (Supported by only S3100-EI series
switches)
15 MSTP zSTP/RSTP/MSTP
zPrivate MSTP path cost standard
16 Multicast Internet group management protocol snooping (IGMP
Snooping) v2&v3
17 802.1x-System Guard
z802.1X authentication
zSystem guard
zHuawei authentication bypass protocol (HABP)
zQuick EAD Deployment (Supported by only
S3100-EI series switches)
18 AAA
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service
(RADIUS)
zHuawei terminal access controller access control
system (HWTACACS)
zEndpoint Admission Defense(EAD) (Supported by
only S3100-EI series switches)
19 MAC Address
Authentication MAC address authentication

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 3 Product Overview
3-3
Part Features
20 ARP zGratuitous ARP
zManually configuring ARP entries
21 DHCP
zDHCP Client
zDHCP Snooping
zUsing Option82 in DHCP Snooping (Supported by
only S3100-EI series switches)
22 ACL
zBasic/Advanced ACLs (Only ACLs defined on
S3100-EI Series switches can be applied to
hardware directly)
zLayer 2 ACLs (Supported by only S3100-EI series
switches)
23 QoS-QoS Profile
zQuality of Service (QoS)
zQoS Profile (Supported by only S3100-EI series
switches)
24 Mirroring zLocal port mirroring
zRemote port mirroring
25 Stack-Cluster
zHuawei Group Management Protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
zStack
26 PoE-PoE Profile zPower over Ethernet (PoE)
zPoE profile
27 SNMP-RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote monitoring (RMON)
28 NTP zNetwork time protocol (NTP)
29 SSH
zSSH1 (Supported by only S3100-EI series switches)
zSSH2
zOperating as an SSH (Secure Shell) server/SSH
client
30 File System
Management
zFile system management
zFile attribute configurable
31 FTP-SFTP-TFTP
zOperating as an FTP server/FTP client
zOperating as an SFTP server/SFTP client
zOperating as a TFTP client
32 Information Center
zSystem logs
zHierarchical alarms
zDebugging information output
33 System Maintenance
and Debugging
zConfiguring system time
zDisplaying and configuring system device state

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 3 Product Overview
3-4
Part Features
34 VLAN-VPN
zVLAN-VPN (QinQ)
zVLAN Mapping (Supported by only S3100-EI series
switches)
zConfiguring TPID value (Supported by only
S3100-EI series switches)
zConfiguring BPDU Tunnel (Supported by only
S3100-EI series switches)
zSelective QinQ (Supported by only S3100-EI series
switches)
35 HWPing HWPing
36 IPv6 Management zSupporting IPv6 address
zIPv6-based Ping, Traceroute, TFTP, and Telnet
37 DNS
zStatic Domain Name System (DNS)
zDynamic DNS (Supported by only S3100-EI series
switches)
38 Smart Link-Monitor
Link
zSmart Link (Supported by only S3100-EI series
switches)
zMonitor Link (Supported by only S3100-EI series
switches)

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 4 Network Design
4-1
Chapter 4 Network Design
The S3100 series can be flexibly deployed in networks. They can be used in enterprise
networks, or serve as broadband access points. The following examples are three
typical networks using the S3100 series.
4.1 MAN Access Solution
In a metropolitan area network (MAN), the S3100 series can serve as access devices.
In the downlink direction, they directly connect to users through 100 Mbps interfaces;
and in the uplink direction, they connect to an aggregation layer (Layer 3) switches or
MA5200 intelligent service gateways, which further connect to the core of the MAN
through routers. This provides you a comprehensive gigabit-to-backbone
100-Mbps-to-desktop MAN solution.
Figure 4-1 Network diagram for a MAN using S3100 series
4.2 Education Network Solution
In a campus network, the S3100 series can serve as desktop switching devices at the
access layer. They directly connect to users in education buildings through 100 Mbps
downlink interfaces; and connect to the core switch in the campus through a 1000 Mbps
uplink interface; the core switch further connects to the education network through a

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 4 Network Design
4-2
router. This enables the users in the campus to exchange information and share
resources in the scope of the education network.
School building
Sever CoursewareNMS
Network center
Video classroom/conference room
S3100
100M
1000/100M
S5600
School building
S3100
100M
S3100
100M
S3100
100M
Classroom/laboratory
AR28
1000M 1000M
1000M 1000M
Education
network
Figure 4-2 Network diagram for an education network using S3100 series
4.3 Multi-Service Carrier VLAN Solution
Note:
Only S3100-EI series Ethernet switches support this multi-service carrier VLAN
solution.
With development of various application technologies, enterprise users are
increasingly relying on network services. They hope the networks can offer secure,
reliable leased lines, VOIP and video conference services, thus reducing their
operating costs.Additionally, apart from simple Internet surfing, individual users expect
more abundant services from the networks, e.g., IPTV, video chatting, real-time gaming,
etc. Meanwhile, construction of the NGN/3G carrier network will draw huge attention of
carriers. If NGN/3G services can be carried on the broadband access network, the
costs of the entire network solution can be lowered dramatically.
To carry such services with different QOS requirements, the broadband access network
needs to have effective service identification and isolation capacity. VLAN is the best
service identification and isolation technology at present, and is the basis for

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 4 Network Design
4-3
multi-service deployment. As broadband users increase explosively and services
appear continuously, however, the traditional VLAN technology cannot meet the
requirements of service deployments. In this situation, QinQ, VLAN mapping, etc
become new choices.
The figure below shows a typical application: The IPTV service requires that the
DSLAM be moved downwards into the campus to enhance users’ access bandwidth.
S3100-EI acts as the DSLAM convergence switch. Selective QinQ is configured on the
device, with the service VLAN identifying the DSLAM or the campus position and the
customer VLAN identifying the customer. In this way, carriers can implement uniform
planning and precise management: VLAN layout is simple, and is not affected by the
customer side.
End office Switch
Campus Switch
(S3100-EI)
DSLAM
…… ……
IP MAN
Figure 4-3 DSLAM convergence application
Another more complicated configuration example is when the LAN is connected to
dense Home Gateways (HG). Generally, the ex-factory setting of an HG is simple as it
uses a fixed VLAN tag to identify the attached service type (data service, IPTV, etc).
Thus, precise division and management for users and services can be implemented.
And VLAN mapping is then implemented on the access device S3100-EI. In this way,
respective service VLANs are “translated” into the VLANs that comply with the carrier’s
deployment. In addition, QinQ is used on the upstream device to identify the campus
position. Such uniform configuration implements carriers’ precise PUPSPV (respective
users and respective services use their own VLANs) management.

Operation Manual – Product Overview
H3C S3100 Series Ethernet Switches Chapter 4 Network Design
4-4
Figure 4-4 New vlan management scheme

Operation Manual – CLI
H3C S3100 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 CLI Configuration ........................................................................................................1-1
1.1 Introduction to the CLI .......................................................................................................1-1
1.2 Command Hierarchy..........................................................................................................1-1
1.2.1 Command Level and User Privilege Level..............................................................1-1
1.2.2 Modifying the Command Level................................................................................1-2
1.2.3 Switching User Level...............................................................................................1-3
1.3 CLI Views...........................................................................................................................1-7
1.4 CLI Features....................................................................................................................1-12
1.4.1 Online Help............................................................................................................1-12
1.4.2 Terminal Display....................................................................................................1-13
1.4.3 Command History..................................................................................................1-13
1.4.4 Error Prompts........................................................................................................1-14
1.4.5 Command Edit.......................................................................................................1-15