H3C H3C S3600 Series User manual

H3C S3600 Series Ethernet Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-08163G-20070724-C-1.04
Product Version: Release 1510

Copyright © 2006-2007, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www. h3c.com
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S3600 Series Ethernet Switches-Release 1510
documentation set includes the following:
Manual Description
H3C S3600 Series Ethernet Switches
Command Manual-Release 1510 It is used for assisting the users in using various commands.
H3C S3600 Series Ethernet Switches
Installation Manual It provides information for the system installation.
Organization
H3C S3600 Series Ethernet Switches Operation Manual-Release 1510 is organized as
follows:
Part Contents
0 Product Overview Introduces the characteristics and
implementations of the Ethernet switch.
1 CLI Introduces the command hierarchy, command view and CLI features of the
Ethernet switch.
2 Login Introduces the ways to log into an
Ethernet switch.
3 Configuration File Management Introduces the ways to manage
configuration files.
4 VLAN Introduces VLAN fundamental and the
related configuration.
5 IP Address and Performance
Configuration
Introduces IP address and IP
performance fundamental and the
related configuration.
6 Management VLAN Introduces the management VLAN
configuration.
7 Voice VLAN Introduces voice VLAN fundamental and
the related configuration.
8 GVRP Introduces GVRP and the related
configuration.

Part Contents
9 Port Basic Configuration Introduces basic port configuration.
10 Link Aggregation Introduces link aggregation and the
related configuration.
11 Port Isolation Introduces port isolation and the related
configuration.
12 Port Security-Port Binding Introduces port security, port binding,
and the related configuration.
13 DLDP Introduces DLDP and the related
configuration.
14 MAC Address Table Introduces MAC address forwarding
table and the related configuration.
15 Auto Detect Introduces auto detect and the related
configuration.
16 MSTP Introduces STP and the related
configuration.
17 Routing Protocol
Introduces the routing protocol-related
configurations, including static route
configuration, RIP configuration, OSPF
configuration, IS-IS configuration, BGP
configuration, and routing policy
configuration.
18 Multicast Introduces the configuration of GMRP,
IGMP Snooping, IGMP, PIM-DM,
PIM-SM, and MSDP.
19 802.1x Introduces 802.1x and the related
configuration.
20 AAA-RADIUS-HWTACACS-EAD Introduces AAA, RADIUS, HWTACACS,
EAD, and the related configurations.
21 VRRP Introduces VRRP and the related
configuration.
22 Centralized MAC Address
Authentication
Introduces centralized MAC address
authentication and the related
configuration.
23 ARP Introduces ARP and the related
configuration.
24 DHCP Introduces DHCP server, DHCP relay, DHCP-Snooping, and the related
configurations.
25 ACL Introduces ACL and the related
configuration.
26 QoS-QoS Profile Introduces QoS, QoS profile and the
related configuration.

Part Contents
27 Web Cache Redirection Introduces Web cache redirection and
the related configuration.
28 Mirroring Introduces port mirroring and the related
configuration.
29 IRF Fabric Introduces IRF fabric-related
configuration.
30 Cluster Introduces the configuration to form
clusters using HGMP V2.
31 PoE-PoE Profile Introduces PoE, PoE profile and the
related configuration.
32 UDP Helper Introduces UDP Helper and the related
configuration.
33 SNMP-RMON Introduces the configuration to manage
network devices through SNMP and
RMON.
34 NTP Introduces NTP and the related
configuration.
35 SSH Terminal Service Introduces SSH2.0 and the related
configuration.
36 File System Management Introduces basic configuration for file
system management.
37 FTP and TFTP Introduces basic configuration for FTP
and TFTP, and the applications.
38 Information Center Introduces the configuration to analyze
and diagnose networks using the
information center.
39 System Maintenance and Debugging Introduces daily system maintenance
and debugging.
40 VLAN-VPN Introduces VLAN VPN and the related
configuration.
41 HWPing Introduces HWPing and the related
configuration.
42 DNS Introduces DNS and the related
configuration.
43 Access Management Introduces Access Management and the
related configuration.
44 Appendix Lists the acronyms used in this manual.

Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].

III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 H3C Website...................................................................................................................... 1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Product Overview........................................................................................................ 2-1
2.1 Preface...............................................................................................................................2-1
2.2 Switch Models.................................................................................................................... 2-1
2.3 Software Features ............................................................................................................. 2-2
Chapter 3 Networking Applications.............................................................................................3-1
3.1 Broadband Ethernet Access for Residential Communities................................................ 3-1
3.2 Application for Connecting Branches or Small- to Medium-Sized Enterprises..................3-1
3.3 Application in Large Enterprise and Campus Networks....................................................3-2

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
H3C Technologies Co., Ltd. provides various ways for you to obtain documentation,
through which you can obtain the product documentations and those concerning newly
added new features. The documentations are available in one of the following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete
product document set, including the operation manual, command manual, installation
manual, and compatibility manual. After installing the reader program provided by the
CD-ROM, you can search for the desired contents in a convenient way through the
reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
Perform the following steps to query and download the product documentation from the
H3C website.
Table 1-1 Acquire product documentation from the H3C website
How to apply for an
account
Access the homepage of H3C at http:// www.h3c.com and
click on Registration at the top right. In the displayed page,
provide your information and click on Submit to register.
How to get
documentation
Approach 1:
In the homepage of H3C at http:// www.h3c.com, select
Technical Support & Document > Technical Documents
from the navigation menu at the top. Then select a product
for its documents.
Approach 2:
In the homepage of H3C at http:// www.h3c.com, select
Support > Technical Documents. Then select a product for
its documents.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2 Product Overview
2-1
Chapter 2 Product Overview
2.1 Preface
H3C S3600 Series Ethernet switches are Ethernet equipment capable of multilayer
switching. They come in two series: S3600-SI and S3600-EI. In addition to the basic
service features, S3600 Series Ethernet switches support abundant Layer 3 features
and enhanced extended functions.
zS3600-SI series switches support basic routing functions, DHCP, basic IRF
functions and IGMP-Snooping.
zS3600-EI series switches support advanced routing functions, DHCP, enhanced
IRF functions, and enhanced multicast functions (including PIM-DM and PIM-SM).
2.2 Switch Models
Table 2-1 lists the S3600 series Ethernet Switches models.
Table 2-1 Models in the S3600 series
Model Power
supply
unit (PSU)
Number of
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Console
port
H3C
S3600-28P
-SI AC-input 28
24 10/100
Mbps
ports(electr
ical)
4 Gigabit
(SFP) ports 1
H3C
S3600-28P
-PWR-SI
AC-/DC-inp
ut 28
24 10/100
Mbps
ports(electr
ical)
4 Gigabit
(SFP) ports 1
H3C
S3600-28T
P-SI AC-input 28 24 10/100
Mbps
(electrical)
2 Gigabit
(SFP) ports
2
10/100/1,000
Mbps ports
(electrical)
1
H3C
S3600-52P
-SI AC-input 52 48 10/100
Mbps
(electrical)
4 Gigabit
(SFP) ports 1
H3C
S3600-28P
-EI
AC-/DC-inp
ut 28 24 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2 Product Overview
2-2
Model Power
supply
unit (PSU)
Number of
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Console
port
H3C
S3600-28F
-EI
AC-/DC-inp
ut 28 24 100
Mbps
(SFP) ports
2 Gigabit
(SFP) ports
2
10/100/1,000
Mbps ports
(electrical)
1
H3C
S3600-28P
-PWR-EI
AC-/DC-inp
ut 28 24 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
H3C
S3600-52P
-EI
AC-/DC-inp
ut 52 48 10/100
Mbps ports
(electrical)
4 Gigabit
ports (SFP) 1
H3C
S3600-52P
-PWR-EI
AC-/DC-inp
ut 52 48 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
H3C
S3600-52P
-PWR-SI
AC-/DC-inp
ut 52 48 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
2.3 Software Features
S3600 Series Ethernet Switches have abundant software features and can meet the
requirements of different applications. Table 2-2 summarizes the features provided by
each module.
Table 2-2 Service features of the S3600 series
Part Features
1 CLI
zCLI
zHierarchically grouped commands
zCLI online help
2 Login
zLogging into a switch through the Console port
zLogging into a switch through an Ethernet port by using
Telnet or SSH
zLogging into a switch through the Console port by using
modem
zLogging into a switch through Web or NMS
3 Configuration
File Management zSaving, restoring, and deleting the configuration file
4 VLAN
zIEEE 802.1Q-compliant VLAN
zPort-based VLAN
zProtocol-based VLAN

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2 Product Overview
2-3
Part Features
5 IP Address and
Performance
Configuration
zConfiguring an IP address for a switch
zConfiguring the TCP attributes for a switch
6 Management
VLAN
zManagement VLAN configuration
zManagement VLAN interface configuration
7 Voice VLAN zVoice VLAN
8 GVRP zGARP VLAN registration protocol (GVRP)
9 Port Basic
Configuration
zThree port states supported: Access, Trunk, and Hybrid
zSetting broadcast storm suppression globally
zLoopback detection supported
zCable test
10 Link
Aggregation zLink aggregation control protocol (LACP)
11 Port Isolation zPort isolation group
12 Port
Security-Port
Binding
zMultiple security modes
zMAC address-to-port binding
13 DLDP zDevice link detection protocol (DLDP)
14 MAC Address
Table
zManually configuring dynamic, static, and black hole MAC
addresses
zConfiguring the aging time for MAC addresses
zMAC address learning limit
15 Auto Detect
zAuto detect
zAuto detect applications in static routing, VRRP, and VLAN
interface backup
16 MSTP
zSTP/RSTP/MSTP
zVLAN-VPN TUNNEL
zH3C-proprietary MSTP path cost standard
17 Routing
Protocols.
zStatic route
zRouting information protocol (RIP) v1/v2
zOpen shortest path first (OSPF) (S3600-EI series switches
only)
zRouting policy
18 Multicast
zInternet group management protocol snooping (IGMP
Snooping)
zInternet group management protocol (IGMP) (S3600-EI
series switches only)
zProtocol-independent multicast-dense mode (PIM-DM)
(S3600-EI series switches only)
zProtocol-independent multicast-sparse mode (PIM-SM)
(S3600-EI series switches only)
19 802.1x
z802.1X authentication
zGuest VLAN
zHuawei authentication bypass protocol (HABP)

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2 Product Overview
2-4
Part Features
20
AAA-RADIUS-H
WTACACS-EAD
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
zHuawei terminal access controller access control system
(HWTACACS)
zEndpoint admission defense (EAD)
21 VRRP zVirtual router redundancy protocol (VRRP) (S3600-EI
series switches only)
22 Centralized
MAC Address
Authentication
zCentralized MAC address authentication
23 ARP zGratuitous ARP
zManually configuring ARP entries
24 DHCP
zDHCP server (S3600-EI series switches only)
zDHCP relay
zDHCP Snooping
zDHCP accounting
zUsing Option184 in DHCPserver (S3600-EI series switches
only)
zUsing Option82 in DHCP relay
25 ACL
zBasic ACLs
zAdvanced ACLs
zLayer 2 ACLs
zUser-defined ACLs
26 QoS-QoS
Profile
zQuality of Service (QoS)
zQoS profile
27 Web Cache
Redirection z(Supported by S3600-EI series only)
28 Mirroring
zTraffic mirroring
zPort mirroring
zRemote port mirroring (S3600-EI series switches only)
29 IRF Fabric
zIRF Fabric
zStack port optional
zPeer end detection for stack ports
30 Cluster
zHuawei group management protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
31 PoE-PoE
Profile
zPower over Ethernet (PoE)
zPoE profile
32 UDP Helper zForwarding UDP broadcast packets by using UDP Helper
33 SNMP-RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote monitoring (RMON)
34 NTP zNetwork time protocol (NTP)

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2 Product Overview
2-5
Part Features
35 SSH Terminal
Service
zSecure shell (SSH)
zSecure FTP (SFTP)
36 File System
Management
zFile system management
zConfiguration file backup and restoration
zFTP/TFTP lighting
37 FTP and TFTP zOperating as an FTP server/FTP client
zOperating as a TFTP client
38 Information
Center
zSystem logs
zHierarchical alarms
zDebugging information output
39 System
Maintenance and
Debugging
zConfiguring system time
zLanguage (Chinese/English) selecting
zDisplaying and configuring system device state
40 VLAN-VPN
zVLAN VPN (QinQ)
zConfiguring VLAN VPN interior-layer priority replication
zConfiguring TPID value
41 HWPing zHWPing
42 DNS zDomain Name System (DNS)
43 Access
Management zConfiguring the access IP address pool based on the physical port

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 3 Networking Applications
3-1
Chapter 3 Networking Applications
You can deploy S3600 series on many types of networks, such as enterprise networks
and broadband access networks. Following are several typical networking applications.
3.1 Broadband Ethernet Access for Residential Communities
On the broadband access network of a residential community, an S3600 series switch
is located in the center. It is downlinked to S2000 or S3026 series switches to reach the
Ethernet users and uplinked to a core Layer 3 switch through a GE extension module to
connect to the MAN backbone.
ICP
ICP
GSR
L3
S3900 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
ICP
ICP
GSR
L3
S3600 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
ICP
ICP
GSR
L3
S3900 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
ICP
ICP
GSR
L3
S3600 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
Figure 3-1 Network diagram for connecting community Ethernet to MAN using S360
series Ethernet switches 0
3.2 Application for Connecting Branches or Small- to
Medium-Sized Enterprises
For small-to medium-sized enterprises or branches of a large enterprise, S3600 series
switches can server as the backbone switches on their networks and can be connected
to the headquarters or other branches through routers. As the enterprise size increases,
the network also can expand by subtending the S3600 series.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 3 Networking Applications
3-2
server
server
PCPCPC
PC
路由器
PC
GE(1000M)
FE (100 M) S3900系列
FE(100 M)
S2000/
server
Internet/ enterprise network
server
PCPCPC
PC
Router
PC
GE (1,000 M)
S3900series
S3026 series
server
server
PCPCPC
PC
路由器
PC
GE(1000M)
FE (100 M) S3900系列
FE(100 M)
S2000/
server
Internet/ enterprise network
server
PCPCPC
PC
Router
PC
GE (1,000 M)
S3600series
S3026 series
server
server
PCPCPC
PC
路由器
PC
GE(1000M)
FE (100 M) S3900系列
FE(100 M)
S2000/
server
Internet/ enterprise network
server
PCPCPC
PC
Router
PC
GE (1,000 M)
S3900series
S3026 series
server
server
PCPCPC
PC
路由器
PC
GE(1000M)
FE (100 M) S3900系列
FE(100 M)
S2000/
server
Internet/ enterprise network
server
PCPCPC
PC
Router
PC
GE (1,000 M)
S3600series
S3026 series
Figure 3-2 S3600 series switches application in branch network of midsize/larg
enterprise e
3.3 Application in Large Enterprise and Campus Networks
In a large enterprise or campus network, the S3600 series switches can operate on the
convergence layer. They are downlinked to layer 2 switches, S3000 Series for example;
and uplinked to a layer 3 switch through GE expansion modules. These switches
together provide a network-wide intranet solution that covers Gigabit-to-backbone and
100 Mbps-to-desktop.

Operation Manual – Product Overview
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 3 Networking Applications
3-3
Figure 3-3 S3600 series application in large enterprise and campus network

Operation Manual – CLI
H3C S3600 Series Ethernet Switches-Release 1510 Table of Contents
i
Table of Contents
Chapter 1 CLI Configuration ........................................................................................................1-1
1.1 Introduction to the CLI .......................................................................................................1-1
1.2 Command Level/Command View......................................................................................1-1
1.2.1 Switching between User Levels..............................................................................1-2
1.2.2 Configuring a Level for a Specific Command in a Specific View............................1-3
1.2.3 CLI Views................................................................................................................1-3
1.3 CLI Features......................................................................................................................1-9
1.3.1 Online Help..............................................................................................................1-9
1.3.2 Terminal Display....................................................................................................1-10
1.3.3 History Commands................................................................................................1-10
1.3.4 Error Messages.....................................................................................................1-11
1.3.5 Command Edit.......................................................................................................1-12

Operation Manual – CLI
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1 CLI Configuration
1-1
Chapter 1 CLI Configuration
1.1 Introduction to the CLI
S3600 series Ethernet switches provide a command line interface (CLI) and
commands for you to configure and manage your switches. The CLI is featured by the
following:
zCommands are grouped by level. This prevents unauthorized users from
configuring switches with relevant commands.
zYou can gain online help at any time by entering a question mark "?".
zCommon diagnostic utilities (such as Tracert and Ping) are available.
zA variety of debugging information is available.
zA function similar to Doskey is provided for you to execute a history command.
zYou can execute a command by entering part of the command in the CLI as long
as the keywords you enter do not conflict those of other commands.
1.2 Command Level/Command View
To prevent unauthorized accesses, commands are grouped by level.
Commands fall into four levels: visit, monitor, system, and manage.
zVisit level: Commands at this level are mainly used to diagnose network and
switch the language mode on the user interface, and they cannot be saved in
configuration files. Such commands include ping, tracert, and language-mode.
zMonitor level: Commands at this level are mainly used to maintain the system and
diagnose service faults, and they cannot be saved in configuration files. Such
commands include display and debugging.
zSystem level: Commands at this level are mainly used to configure services.
Commands concerning routing and network layers are at this level. These
commands can be used to provide network services directly.
zManage level: Commands at this level are associated with the basic operation
modules and support modules of the system. These commands provide supports
for services. Commands concerning file system, FTP/TFTP/XModem
downloading, user management, and level setting are at this level.
Users logging in to a switch also fall into four levels, which respectively correspond to
the command levels. Users at a specific level can only use the commands at the same
level or lower levels.