H3C H3C S7500E Series Installation manual

H3C S7500E Series Ethernet Switches
OAA
Command Reference
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: S7500E Series--Release 6626 and Later
S7508E-X------------Release 6826 and Later
Document version: 20111130-C-1.01

Copyright © 2011, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care,
, TOP G, , IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,
XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,
Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface
The H3C S7500E documentation set includes 12 command references, which describe the commands
and command syntax options available for the H3C S7500E Release 6620 & 6630 Series and the H3C
S7508E-X Release 6820 & 6830 Series.
The OAA Command Reference describes OAA configuration commands.
This preface includes:
•Audience
•Conventions
•About the H3C S7500E documentation set
•Obtaining documentation
•Technical support
•Documentation feedback
Audience
This documentation is intended for:
•Network planners
•Field technical support and servicing engineers
•Network administrators working with the S7500E series
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.

Convention Description
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Convention Description
< > Button names are inside angle brackets. For example, click <OK>.
[ ] Window names, menu items, data table and field names are inside square brackets. For
example, pop up the [New User] window.
/ Multi-level menus are separated by forward slashes. For example, [File/Create/Folder].
Symbols
Convention Description
WARNING An alert that calls attention to important information that if not understood or followed can
result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed can
result in data loss, data corruption, or damage to hardware or software.
IMPORTANT An alert that calls attention to essential information.
NOTE An alert that contains additional or supplementary information.
TIP An alert that provides helpful information.
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports
Layer 2 forwarding and other Layer 2 features.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.

About the H3C S7500E documentation set
The H3C S7500E documentation set includes:
Category Documents Purposes
Marketing brochures Describe product specifications and benefits.
Technology white papers Provide an in-depth description of software features
and technologies.
Product description
and specifications
Card datasheets Describe card specifications, features, and standards.
Installation guide Provides a complete guide to hardware installation
and hardware specifications.
H3C N68 Cabinet
Installation and Remodel
Introduction
Guides you through installing and remodeling H3C
N68 cabinets.
H3C Pluggable SFP
[SFP+][XFP] Transceiver
Modules Installation Guide
Guides you through installing SFP/SFP+/XFP
transceiver modules.
H3C Mid-Range Series
Ethernet Switches Pluggable
Modules Manual
Describes the hot-swappable modules available for
the Mid-Range Series Ethernet Switches, their external
views, and specifications.
H3C PoE DIMM Module
Installation Guide
Describes how to install the DIMM
(LSBM1POEDIMMH) for PoE master and slave power
management.
Hardware installation
Single PoE DIMM Module
Installation Guide
Describes how to install the 24-port DIMM
(LSQM1POEDIMMS0) for PoE power management.
Configuration guides Describe software features and configuration
procedures.
Command references Provide a quick reference to all available commands.
Software
configuration
Configuration examples Describe typical network scenarios and provide
configuration examples and instructions.
Operations and
maintenance Release notes
Provide information about the product release,
including the version history, hardware and software
compatibility matrix, version upgrade information,
technical support information, and software
upgrading.
H3C PSR320-A[PSR320-D]
Power Module User Manual
Describes the appearance, specifications, LEDs, and
installation and removal of the H3C
PSR320-A/PSR320-D power module.
H3C PSR650-A[PSR650-D]
Power Module User Manual
Describes the appearance, specifications, LEDs, and
installation and removal of the H3C
PSR650-A/PSR650-D power module.
H3C
PSR1400-A[PSR1400-D]
Power Module User Manual
Describes the appearance, specifications, LEDs, and
installation and removal of the H3C
PSR1400-A/PSR1400-D power module.
Power configuration
H3C PSR2800-ACV Power
Module User Manual
Describes the appearance, specifications, LEDs, and
installation and removal of the H3C PSR2800-ACV
power module.

Category Documents Purposes
H3C PSR6000-ACV Power
Module User Manual
Describes the appearance, specifications, LEDs, and
installation and removal of the H3C PSR6000-ACV
power module.
H3C PWR-SPA Power
Module Adapter User
Manual
Describes the functions and appearance of the H3C
PWR-SPA power module adapter, and how to use it
with the PSR650 power module.
H3C S7500E Power
Configuration Guide Guides you to select power modules in various cases.
Optional cards Card manuals
The S7500E series Ethernet switches support various
card models. Each model is provided with a card
manual that describes:
1. The type, number, and transmission rate of
interfaces
2. Applicable switches of the card
3. Required software version
4. Pluggable modules supported by the card
Obtaining documentation
You can access the most up-to-date H3C product documentation on the World Wide Web at
http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents] – Provides hardware installation, software
upgrading, and software feature configuration and maintenance documentation.
[Products & Solutions] – Provides information about products and technologies, as well as solutions.
[Technical Support & Documents > Software Download] – Provides the documentation released with the
software version.
Technical support
cu[email protected]
http://www.h3c.com
Documentation feedback
You can e-mail your comments about product documentation to [e-mail].
We appreciate your comments.

i
Contents
OAP card configuration commands ··························································································································· 1
oap connect ······························································································································································1
oap reboot ································································································································································1
ACFP configuration commands··································································································································· 3
acfp server enable····················································································································································3
display acfp client-info·············································································································································3
display acfp policy-info············································································································································4
display acfp rule-info················································································································································6
display acfp server-info············································································································································9
ACSEI configuration commands ·······························································································································11
acsei client close···················································································································································· 11
acsei client reboot ················································································································································· 11
acsei server ···························································································································································· 12
acsei server enable ··············································································································································· 12
acsei timer clock-sync············································································································································ 13
acsei timer monitor················································································································································ 13
display acsei client info ········································································································································ 14
display acsei client summary ······························································································································· 16
Index ···········································································································································································18

1
OAP card configuration commands
oap connect
Syntax
In standalone mode:
oap connect slot slot-number
In IRF mode:
oap connect chassis chassis-number slot slot-number
View
User view
Default level
1: Monitor level
Parameters
slot slot-number:Specifies the number of the slot where an OAP card resides. (In standalone mode)
chassis chassis-number slot slot-number: Specifies a card on an IRF member switch. The chassis-number
argument refers to the ID of the IRF member switch, and the slot-number argument refers to the number of
the slot where the card resides. (In IRF mode)
Description
Use the oap connect command to redirect from the device to the OAP card.
NOTE:
•To return from the system on the OAP card to the CLI on the device, press Ctrl+K.
•ACG cards and IPS cards do not support this command.
Examples
# In standalone mode, redirect from the device to the OAP card in slot 3.
<Sysname> oap connect slot 3
Press CTRL+K to quit.
Connected to OAP!
# In IRF mode, redirect from the device to the OAP card in slot 5 of the device with the member ID of 2.
<Sysname> oap connect chassis 2 slot 5
Press CTRL+K to quit.
Connected to OAP!
oap reboot
Syntax
In standalone mode:

2
oap reboot slot slot-number
In IRF mode:
oap reboot chassis chassis-number slot slot-number
View
User view
Default level
2: System level
Parameters
slot slot-number:Specifies the number of the slot where an OAP system resides. (In standalone mode)
chassis chassis-number slot slot-number: Specifies a card on an IRF member switch. The chassis-number
argument refers to the ID of the IRF member switch, and the slot-number argument refers to the number of
the slot where the card resides. (In IRF mode)
Description
Use the oap reboot command to reset the system on an OAP card.
Examples
# In standalone mode, reset the system on the OAP card in slot 3.
<Sysname> oap reboot slot 3
This command will recover the OAP from shutdown or other failed state.
Warning: This command may lose the data on the hard disk if the OAP is not being shut down!
Continue? [Y/N]:y
Reboot OAP by command.
# In IRF mode, reset the system on the OAP card in slot 5 of the device with the member ID of 2.
<Sysname> oap reboot chassis 2 slot 5
This command will recover the OAP from shutdown or other failed state.
Warning: This command may lose the data on the hard disk if the OAP is not being shut down!
Continue? [Y/N]:y
Reboot OAP by command.

3
ACFP configuration commands
acfp server enable
Syntax
acfp server enable
undo acfp server enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the acfp server enable command to enable the ACFP server.
Use the undo acfp server enable command to disable the ACFP server.
By default, the ACFP server is disabled.
In case that the ACSEI server is enabled on the device, when you first disable and then enable the ACFP
server, to ensure that the ACFP collaboration rules can be resent to the ACFP server, you must also disable
and then enable the ACSEI server.
Related commands: acsei server enable.
Examples
# Enable the ACFP server.
<Sysname> system-view
[Sysname] acfp server enable
display acfp client-info
Syntax
display acfp client-info [ client-id ] [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
client-id: Displays information of the specified ACFP client, where client-id is the ACFP client identifier, in
the range of 1 to 2147483647.

4
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display acfp client-info command to display the information about the specified ACFP client(s).
Note that if no ACFP client ID is specified, the information about all the ACFP clients is displayed.
Examples
# Display the information about all the ACFP clients.
<Sysname> display acfp client-info
ACFP client total number: 1
ClientID: 2
Description: Intrusion Prevention System
Hw-Info: 2.0
OS-Info: i-Ware software, Version 1.10
App-Info: Ess 2110P01
Client IP: 10.1.1.1
Client Mode: redirect mirror
Table 1 Output description
Field Description
ACFP client total number Total number of ACFP clients
ClientID Client ID, index of ACFP client list
Description Description information of ACFP client
Hw-Info Hardware information of the ACFP client
OS-Info Operating system information of the ACFP client
App-Info Application software information of the ACFP client
Client IP ACFP client IP address
Client Mode
Working mode supported on the ACFP client:
•redirect: redirect mode
•mirror: mirror mode
display acfp policy-info
Syntax
display acfp policy-info [ client client-id [ policy-index ] | dest-interface interface-type interface-number
| in-interface interface-type interface-number | out-interface interface-type interface-number ] [ active |
inactive ] [ |{ begin | exclude | include } regular-expression ]

5
View
Any view
Default level
1: Monitor level
Parameters
client client-id: Displays the policy sent by the specified ACFP client, where client-id is the ACFP client ID,
in the range of 1 to 2147483647.
policy-index: Policy index, in the range of 1 to 2147483647.
dest-interface interface-type interface-number: Displays all the policies that use the specified interface
(destination interface) for connecting to the ACFP client, where interface-type interface-number is the
interface type and interface number.
in-interface interface-type interface-number: Displays all the policies that use the specified interface as
the inbound interface, where interface-type interface-number is the interface type and interface number..
out-interface interface-type interface-number: Displays all the policies that use the specified interface as
the outbound interface, where interface-type interface-number is the interface type and interface
number.
active: Displays active policies only.
inactive: Displays inactive policies only.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display acfp policy-info command to display the ACFP policy information.
Note that:
•When you use this command to display the policy information sent by the specified ACFP client, if
you specify the policy-index argument, the command displays the information about the policy
whose number is policy-index applied by the ACFP client with an ID of client-id. Otherwise, the
command displays the information about all the policies sent by the ACFP client with an ID of
client-id.
•If neither the active nor inactive keyword is specified, the command displays all the active or
inactive policies.
•If no argument is specified, the command displays the information about all the policies.
Examples
# Display the information about the effective policies for all the packets that use GigabitEthernet1/0/1
as the inbound interface.
<Sysname> display acfp policy-info in-interface gigabitethernet 1/0/1 active
ACFP policy total number: 1
ClientID: 3 Policy-Index: 2

6
Rule-Num: 1 ContextID: 128
Exist-Time: 61500 (s) Life-Time: 2147483647(s)
Start-Time: 00:00:00 End-Time: 24:00:00
Admin-Status: enable Effect-Status: active
DstIfFailAction: delete Priority: 1
In-Interface: GigabitEthernet1/0/1
Out-Interface: GigabitEthernet1/0/2
Dest-Interface: Ten-GigabitEthernet3/0/1
Table 2 Output description
Field Description
ACFP policy total number Total number of ACFP policies
ClientID Client ID, index of client list
Policy-Index Policy index
Rule-Num Number of rules under the policy
ContextID Context ID
Exist-Time For how long the policy existed, in seconds
Life-Time Policy expiration time, in seconds
Start-Time Policy start time
End-Time Policy end time
Admin-Status Policy administration status
Effect-Status Whether the policy is effective.
DestIfFailAction
If the policy dest-interface is down, the actions to all rules under the
policy will be as follows:
•delete: Keep the redirected and mirrored packets being forwarded
(for forwarding first devices, select the delete action);
•reserve: Discard the redirected and mirrored packets (for security
first devices, select the reserve action).
Priority Priority of a policy, number notation, in the range of 1 to 8 (the bigger
the number, the higher the priority).
In-Interface Inbound interface of the packet
Out-Interface Outbound interface of the packet
Dest-Interface Interface connected to the ACFP client
display acfp rule-info
Syntax
display acfp rule-info { in-interface [ interface-type interface-number ] | out-interface [ interface-type
interface-number ] | policy [ client-id policy-index ] } [ |{ begin | exclude | include } regular-expression ]
View
Any view

7
Default level
1: Monitor level
Parameters
in-interface: Displays ACFP rule information in order of inbound interface. The ACFP rule information
which does not include the inbound interface is not displayed.
out-interface: Displays ACFP rule information in order of outbound interface. The ACFP rule information
which does not include the outbound interface is not displayed.
interface-type interface-number: Specifies an interface by its type and number.
policy: Displays the ACFP rule information in order of policy.
client-id: ACFP client ID, in the range of 1 to 2147483647.
policy-index: Policy index, in the range of 1 to 2147483647.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display acfp rule-info command to display ACFP rule information.
Note that:
•When you use this command to display ACFP rule information in order of policy, if you specify
neither client ID nor policy index, the rule information of all the policies is displayed.
•When you use this command to display ACFP rule information in order of outbound/inbound
interface, if you specify no interface, the rule information for all the inbound interfaces or outbound
interfaces is displayed.
Examples
# Display ACFP rule information in order of inbound interface.
<Sysname> display acfp rule-info in-interface gigabitethernet 1/0/1
In-Interface: GigabitEthernet1/0/1
ACFP rule total number: 1
ClientID:1 Policy-Index:1 Rule-Index:1
SIP:192.168.1.1 SMask:0.0.0.255
Action:redirect Status:active OperationStatus:succeeded
# Display ACFP rule information in order of policy.
<Sysname> display acfp rule-info policy 1 1
ACFP Rule total number: 1
ClientID:1 Policy-Index:1 Rule-Index:1
SIP:192.168.1.1 SMask:0.0.0.255 SPort:65500 to 65535
DIP:192.168.2.1 DMask:0.0.0.255 DPort:65500 to 65535
Protocol:ip Fragment:false DSCP:AF11
Action:redirect Status:active OperationStatus:succeeded

8
Table 3 Output description
Field Description
In-Interface Inbound interface of the packet
ACFP rule total number Total number of ACFP rules
ClientID Client ID, index of client list
Policy-Index Policy index
Rule-Index Rule index
SMAC Source MAC address
DMAC Destination MAC address
StartVLAN Start VLAN of the source VLAN
EndVLAN End VLAN of the source VLAN
PackRate Value of the restricted rate of packets, in kbps.
SIP Source IP address
SMask Inverse mask of source IP address
SPort Source port number
DIP Destination IP address
DMask Inverse mask of destination IP address
DPort Destination port number
Protocol Protocol of the packet: GRE, ICMP, IGMP, IPinIP, OSPF, TCP, UDP, IP,
and so on.
Fragment
Whether the packet is a fragment:
•true: Indicates the packet is a fragment
•false: Indicates all the packets, not concerned about whether the
packet is a fragment or not
ToS Type of Service, indicated by a number in the range of 0 to 15
Pre Packet precedence, indicated by a number in the range of 0 to 7
DSCP
Differentiated Services Code Point, indicated by characters for Be, Ef,
Af11, Af12, Af13, Af21, Af22, Af23, Af31, Af32, Af33, Af41,
Af42, Af43, Cs1, Cs2, Cs3, Cs4, Cs5, Cs6, and Cs7 and indicated
by a number in the range of 0 to 63 for other code points
TCPFlag The value is six bits, which represents URG, ACK, PSH, RST, SYN, and
FIN respectively from low to high.
TCPMask
The value is six bits, which represents URG mask, ACK mask, PSH
mask, RST mask, SYN mask, and FIN mask respectively from low to
high.
For each bit, the value 1 indicates that this bit is concerned, and the
value 0 indicates that this bit is not concerned.

9
Field Description
Action
Action, including:
•permit
•deny
•mirror
•redirect
•rate: rate limit
Status Rule status: active or inactive
OperationStatus Rule application status: succeeded or failed
display acfp server-info
Syntax
display acfp server-info [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display acfp server-info command to display ACFP server information.
Examples
# Display ACFP server information.
<Sysname> display acfp server-info
Server-Info: ipserver redirect mirror
Max Life-Time: 2147483647(s)
PersistentRules: false
ContextType: HGPlus-context
Table 4 Output description
Field Description
Server-Info
ACFP client working mode supported by the ACFP server:
•redirect: redirect mode
•mirror: mirror mode

10
Field Description
Max Life-Time Maximum expiration time (in seconds) of the collaboration policy supported
by the ACFP server
PersistentRules Whether the ACFP server supports permanent collaboration rules.
ContextType
Context ID types currently supported by the ACFP server:
•no-context: No context ID is carried.
•HG-context: Carrying the preamble HG as the context ID.
•HGPlus-context: Carrying the preamble HGPlus as the context ID.
•FlowID-context: Carrying the preamble Flow ID as the context ID.
•VLANID-context: Carrying VLAN ID as the context ID.
The S7500E & S7508E-X swtiches support carrying the preamble HGPlus as
the context ID (the HGPlus-context) only.

11
ACSEI configuration commands
acsei client close
Syntax
acsei client close client-id
View
ACSEI server view
Default level
2: System level
Parameters
client-id: ID of the ACSEI client to be closed. An ACSEI client ID is assigned by the ACSEI server, which
ranges from 1 to 10.
Description
Use the acsei client close command to close the specified ACSEI client.
After the command is executed, the ACSEI server sends an inform packet for the close operation to the
specified ACSEI client, who will execute the close operation after receiving this packet.
This command is available only for an ACSEI client supporting Linux operating system.
Examples
# Close ACSEI client 1.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client close 1
acsei client reboot
Syntax
acsei client reboot client-id
View
ACSEI server view
Default level
2: System level
Parameters
client-id: ID of the ACSEI client to be restarted, , which ranges from 1 to 10.
Description
Use the acsei client reboot command to restart the specified ACSEI client.
Examples
# Restart ACSEI client 1.

12
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client reboot 1
acsei server
Syntax
acsei server
View
System view
Default level
2: System level
Parameters
None
Description
Use the acsei server command to enter ACSEI server view.
Examples
# Enter ACSEI server view.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server]
acsei server enable
Syntax
acsei server enable
undo acsei server enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the acsei server enable command to enable ACSEI server.
Use the undo acsei server enable command to disable ACSEI server.
By default, ACSEI server is disabled.
Examples
# Enable ACSEI server.
<Sysname> system-view

13
[Sysname] acsei server enable
acsei timer clock-sync
Syntax
acsei timer clock-sync minutes
undo acsei timer clock-sync
View
ACSEI server view
Default level
2: System level
Parameters
minutes: Value of the synchronization timer that is used for clock synchronization from ACSEI server to
ACSEI client. It ranges from 0 to 1440 (in minutes), where value 0 specifies to disable the clock
synchronization from ACSEI server to ACSEI client.
Description
Use the acsei timer clock-sync command to set the synchronization timer that is used for clock
synchronization from ACSEI server to ACSEI client.
Use the undo acsei timer clock-sync command to restore the default.
By default, the clock sychronization timer is set to five minutes.
Examples
# Set the clock synchronization timer from ACSEI server to ACSEI client to 20 minutes.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei timer clock-sync 20
acsei timer monitor
Syntax
acsei timer monitor seconds
undo acsei timer monitor
View
ACSEI server view
Default level
2: System level
Parameters
seconds: Value of the monitoring timer that is used for ACSEI server to monitor ACSEI clients. It ranges
from 0 to 10 (in seconds), where 0 specifies to disable ACSEI server from monitoring ACSEI client.
Description
Use the acsei timer monitor command to set the monitoring timer for ACSEI server to monitor ACSEI
client.