H3C H3C S7500E Series User manual

H3C S7500E Series Ethernet Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20071025-C-1.01
Product Version: Release 6000

Copyright © 2007, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www. h3c.com
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S7500E Series Ethernet Switches documentation
set includes the following:
Manual Description
H3C S7500E Series Ethernet Switches
Command Manual
It is used for assisting the users in using
various commands. (See the electronic
documentation for details)
H3C S7500E Series Ethernet Switches
Installation Manual
It provides information for the system
installation.
Organization
H3C S7500E Series Ethernet Switches Operation Manual is organized as follows:
Part Contents
0 Product Overview Introduces the system features, service features, and
network application of the switches.
1 Login Introduces the ways to log into an Ethernet switch.
2 VLAN Introduces VLAN, Voice VLAN, GVRP fundamental and
the related configuration.
3 IP Addressing and
Performance
Introduces IP address and IP performance fundamental
and the related configuration.
4 QinQ-BPDU
Tunneling
Introduces QinQ, BPDU Tunneling and the related
configuration.
5 Port Correlation
Configuration
Introduces basic port configuration and port isolation
configuration.
6 Link Aggregation Introduces link aggregation fundamental and the related
configuration.
7 MAC Address Table
Management
Introduces MAC address forwarding table and the
related configuration.
8 IP Source Guard Introduces MAC address, IP address and port binding
configuration.
9 MSTP Introduces STP, BRDU tunnel and the related
configurations.

Part Contents
10 IP Routing Overview Introduces the basic routing information and the
classification of routing protocols.
11 IPv4 Routing Introduces IPv4 routing related configurations, such as
static routing, RIP, OSPF, IS-IS, BGP, and route policy.
12 IPv6 Routing Introduces IPv6 routing related configurations, such as
static routing, RIPng, OSPFv3, IS-ISv6, and BGP4+.
13 IPv6 Configuration Introduces IPv6 basic configuration and application,
IPv6 tunneling, and so on.
14 Multicast Introduces the multicast protocol-related configurations.
15 802.1x-MAC
Authentication Introduces 802.1x and MAC related configurations.
16 AAA RADIUS
HWTACACS
Introduces AAA, RADIUS, HWTACACS, and the related
configurations.
17 Portal Introduces portal fundamental and the related
configuration.
18 ARP Introduces ARP and the related configuration.
19 DHCP Introduces DHCP and the related configuration.
20 ACL Introduces IPv4&IPv6-based ACL and the related
configuration.
21 QoS Introduces QoS and the related configuration.
22 Port Mirroring Introduces port mirroring and the related configuration.
23 SNMP-RMON Introduces the configuration to manage network devices
through SNMP and RMON.
24 NTP Introduces NTP and the related configuration.
25 DNS Introduces DNS and the related configuration.
26 File System
Management
Introduces basic configuration for file system
management.
27 Information Center Introduces the configuration to analyze and diagnose
networks using the information center.
28 System Maintaining
and Debugging Introduces daily system maintenance and debugging.
29 HA Introduces VRRP, HA and the related configurations.
30 SSH Introduces SSH and the related configurations.
31 PoE Introduces PoE and the related configuration.
32 RRPP Introduces RRPP and the related configuration.
33 Appendix Lists the acronyms used in this manual.

Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ]
Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].

III. Symbols
Convention Description
Warning
Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution
Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM ............................................................................................................................ 1-1
1.2 H3C Website...................................................................................................................... 1-1
1.3 Software Release Notes .................................................................................................... 1-2
Chapter 2 Documentation and Product Version........................................................................ 2-1
2.1 Documentation and Software Version ............................................................................... 2-1
2.2 H3C S7500E Series Ethernet Switch Documentation Set ................................................ 2-1
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface............................................................................................................................... 3-1
3.2 Switch Models.................................................................................................................... 3-1
3.3 Software Features ............................................................................................................. 3-2
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 Operating as the Core Layer Devices of a Small-sized Network ...................................... 4-1
4.2 Providing High-speed Links for Data Centers ................................................................... 4-2

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
H3C Technologies Co., Ltd. provides various ways for you to obtain documentation,
through which you can obtain the product documentations and those concerning newly
added new features. The documentations are available in one of the following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains the
operation manual and command manual. After installing the reader program provided
by the CD-ROM, you can search for the desired contents in a convenient way through
the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
Perform the following steps to query and download the product documentation from the
H3C website.
Table 1-1 Acquire product documentation from the H3C website
How to apply for an
account
Access the homepage of H3C at http://www.h3c.com and
click on Registration at the top right. In the displayed page,
provide your information and click on Submit to register.
How to get
documentation
Approach 1:
In the homepage of H3C at http://www.h3c.com, select
Technical Support & Document > Technical Documents
from the navigation menu at the top. Then select a product
for its documents.
Approach 2:
In the homepage of H3C at http://www.h3c.com, select
Support > Technical Documents. Then select a product for
its documents.

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 2 Documentation and Product Version
2-1
Chapter 2 Documentation and Product Version
2.1 Documentation and Software Version
H3C S7500E Series Ethernet Switches Operation Manual and H3C S7500E Series
Ethernet Switches Command Manual apply to S7500E series Ethernet switches with
their software version being Release 6000.
2.2 H3C S7500E Series Ethernet Switch Documentation Set
Table 2-1 H3C S7500E series Ethernet switch documentation set
Manual Manual version
H3C S7500E Series Ethernet Switches Installation Manual V1.01
H3C S7500E Series Ethernet Switches Operation Manual V1.01
H3C S7500E Series Ethernet Switches Command Manual V1.01

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 3 Product Overview
3-1
Chapter 3 Product Overview
3.1 Preface
H3C S7500E Series Ethernet Switches (hereinafter referred to as the S7500E series)
are cost-effective Layer 3 switch with high capacity. It is designed to operate at the core
layer of small and medium-sized networks, convergence layer of large enterprise
networks, and convergence layer and access layer of the metropolitan area networks
(MANs).The S7500E switch has been optimized to meet users’ diversified demands for
devices used on these networks.
3.2 Switch Models
The S7500E series Ethernet switches (also referred to as S7500E series switches)
include five models, as described in Table 3-1.
Table 3-1 S7500E series switch models
Model Type of plugboard and
slot Number of slots SRPU slot
S7502E Horizontal 4 2 half-sized slots
S7503E Horizontal 5 2
S7506E Horizontal 8 2
S7510E Horizontal 12 2
S7506E-V Vertical 8 2
For the S7500E series switches, SRPUs are the core in the control and management
plane and switching network. Four types of SRPUs are applicable to an S7500E switch.
Table 3-2 describes the SRPUs.
Table 3-2 SRPUs and matched chassis
SRPU
Chassis LSQ1MP
UA0
LSQ1SRP2XB0
(Salience
VI-10GE)
LSQ1SRPB0
(Salience VI)
LSQ1SRP1CB0
(Salience
VI-Turbo)
S7502E Yes No No No
S7503E No Yes Yes Yes
S7506E No Yes Yes Yes

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 3 Product Overview
3-2
SRPU
Chassis LSQ1MP
UA0
LSQ1SRP2XB0
(Salience
VI-10GE)
LSQ1SRPB0
(Salience VI)
LSQ1SRP1CB0
(Salience
VI-Turbo)
S7510E No Yes Yes Yes
S7506E-V No Yes Yes Yes
Note:
H3C S7500E series Ethernet switch is dual-SRPU system. The SRPUs in a chassis
must be of the same type.
3.3 Software Features
H3C S7500E series Ethernet switch provides abundant software features and can
meet the requirements of different applications. Table 3-3 lists the software features
and the modules where software features are described.
Table 3-3 Software features of H3C S7500E series Ethernet switch
Module Software feature
01-Login
zLogging into a switch through the Console port
zLogging into a switch by using Telnet through an Ethernet
port
zLogging into a switch by using Modem through the Console
port
zLogging into a switch through NMS
02-VLAN
zIEEE 802.1Q-compliant Virtual Local Area Network (VLAN)
zPort-based VLAN
zProtocol-based VLAN
zIPv4-subnet-based VLAN
zIsolate-user-VLAN
zVoice VLAN
zGARP VLAN Registration Protocol (GVRP)
03-IP Address
and Performance
zConfiguring an IP address for a switch
zConfiguring TCP attributes for a switch
04-QinQ-BPDU
Tunneling
zQinQ
zBPDU Tunnel
05-Port
Correlation
Configuration
zThree port types: Access, Trunk, and Hybrid.
zSetting broadcast suppression ratio globally.
zLoopback detection
zConfiguring port isolation group

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 3 Product Overview
3-3
Module Software feature
06-Link
Aggregation
zStatic Link Aggregation Control Protocol (LACP) link
aggregation
zManual link aggregation
07-MAC Address
Table
Management
zConfiguring dynamic, static, and blackhole MAC addresses
zConfiguring aging time for MAC address entries
zConfiguring the maximum number of MAC addresses that
can be learned on a port
zDisabling MAC address learning globally or on a port
08-IP Source
Guard Configuring MAC address-IP address-port binding
09-MSTP
zSTP/RSTP/MSTP
zBPDU guard
zRoot guard
zLoop guard
zTC-BPDU attack guard
10-IP Routing
Overview
Provide an overview of IPv4/IPv6 routing and routing table
display and maintenance.
11-IPv4 Routing
zStatic route
zRouting Information Protocol (RIP) v1/v2
zOpen Shortest Path First (OSPF)
zIntermediate System-to-Intermediate System intra-domain
routing information exchange protocol (IS-IS)
zBorder Gateway Protocol (BGP)
zRouting policy
12-IPv6 Routing
zIPv6 static route
zRIPng
zOSPFv3
zIS-ISv6
zBGP4+
zIPv6 routing policy
13-IPv6
Configuration
zBasic IPv6 configuration
zPing IPv6/Traceroute IPv6
zManually created IPv6 tunnel
z6-to-4 tunnel
zISATAP tunnel
zIPv4/IPv6 double protocol stacks
14-Multicast
zInternet Group Management Protocol (IGMP) Snooping
zIGMP
zProtocol-Independent Multicast-Dense Mode (PIM-DM)
zProtocol-Independent Multicast-Sparse Mode (PIM-SM)
zMulticast Source Discovery Protocol (MSDP)
15-802.1x-MAC
Authentication
z802.1x authentication
zGuest VLAN
zMAC address authentication

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 3 Product Overview
3-4
Module Software feature
16-AAA RADIUS
HWTACACS
zAuthentication, Authorization, and Accounting (AAA)
zRemote Authentication Dial-In User Service (RADIUS)
zHuawei Terminal Access Controller Access Control System
(HWTACACS)
17-Portal Portal authentication
18-ARP
zConfiguring ARP entries manually
zGratuitous ARP
zARP source suppression
zProxy ARP
19-DHCP
zDHCP client
zDHCP server
zDHCP relay
zDHCP Snooping
zApplying option82 in DHCP Snooping/DHCP relay function
20-ACL
zIPv4 basic ACLs
zIPv4 advanced ACLs
zLayer 2 ACLs
zIPv6 basic ACLs
zIPv6 advanced ACLs
21-QoS
zTraffic classification
zTraffic policing
zQoS policy applied to a VLAN, the system, and a port/port
group.
zCongestion management
zPriority mapping
zTraffic mirroring
z1:1 VLAN mapping
22-Port Mirroring
zLocal port mirroring
zRemote port mirroring
zInter-board mirroring
23-SNMP-RMON
zSimple Network Management Protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote Monitoring (RMON)
24-NTP zNetwork Time Protocol (NTP)
25-DNS zStatic DNS
zDynamic DNS
26-File System
Management
zFile system management
zConfiguration file management
zConfiguring a switch as an FTP server/FTP client
zConfiguring a switch as a TFTP client
27-Information
Center
zSystem logs
zAlarms in different severities
zDebugging information output

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 3 Product Overview
3-5
Module Software feature
28-System
Maintenance and
Debugging
zConfiguring command levels
zConfiguring online help for command lines
zConfiguring system time
zDisplaying and configuring system device state
29-HA
zIPv4-based Virtual Router Redundancy Protocol (VRRP)
zIPv6-based VRRP
zPrimary-secondary SRPU switchover
30-SSH zSecure shell (SSH) v1.5/v2.0
zSecure FTP (SFTP)
31-PoE zPower over Ethernet (PoE)
zPower over Ethernet Profile (PoE profile)
32-RRPP Rapid Ring Protection Protocol (RRPP)

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 4 Networking Applications
4-1
Chapter 4 Networking Applications
S7500E series switches can:
zBe used as core layer devices of small-sized network.
zBe used for high-speed links for data centers.
zBe used as distribution layer devices of MAN Ethernet.
The following are typical networking examples.
4.1 Operating as the Core Layer Devices of a Small-sized
Network
Figure 4-1 S7500E series switches in a small-sized network

Operation Manual – Product Overview
H3C S7500E Series Ethernet Switches Chapter 4 Networking Applications
4-2
4.2 Providing High-speed Links for Data Centers
GEtrunk
10GE/GEtrunk
10GE/GEtrunk
S7500E
Core Network
S7500E S7500E
Figure 4-2 Application of S7500E series switches in data center

Operation Manual – Login
H3C S7500E Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Logging into an Ethernet Switch ...............................................................................1-1
1.1 Logging into an Ethernet Switch........................................................................................ 1-1
1.2 Introduction to User Interface ............................................................................................ 1-1
1.2.1 Supported User Interfaces ...................................................................................... 1-1
1.2.2 User Interface Number............................................................................................ 1-2
1.2.3 Common User Interface Configuration ................................................................... 1-2
Chapter 2 Logging in Through the Console Port.......................................................................2-1
2.1 Introduction ........................................................................................................................ 2-1
2.2 Setting Up the Connection to the Console Port................................................................. 2-2
2.3 Console Port Login Configuration...................................................................................... 2-4
2.3.1 Common Configuration ........................................................................................... 2-4
2.3.2 Console Port Login Configurations for Different Authentication Modes.................. 2-5
2.4 Console Port Login Configuration with Authentication Mode Being None ........................ 2-7
2.4.1 Configuration Procedure ......................................................................................... 2-7
2.4.2 Configuration Example............................................................................................ 2-9
2.5 Console Port Login Configuration with Authentication Mode Being Password............... 2-10
2.5.1 Configuration Procedure ....................................................................................... 2-10
2.5.2 Configuration Example.......................................................................................... 2-12
2.6 Console Port Login Configuration with Authentication Mode Being Scheme.................. 2-14
2.6.1 Configuration Procedure ....................................................................................... 2-14
2.6.2 Configuration Example.......................................................................................... 2-17
Chapter 3 Logging in Through Telnet.........................................................................................3-1
3.1 Introduction ........................................................................................................................ 3-1
3.1.1 Common Configuration ........................................................................................... 3-2
3.1.2 Telnet Configurations for Different Authentication Modes ...................................... 3-3
3.2 Telnet Configuration with Authentication Mode Being None ............................................. 3-4
3.2.1 Configuration Procedure ......................................................................................... 3-4
3.2.2 Configuration Example............................................................................................ 3-6
3.3 Telnet Configuration with Authentication Mode Being Password...................................... 3-7
3.3.1 Configuration Procedure ......................................................................................... 3-7
3.3.2 Configuration Example.......................................................................................... 3-10
3.4 Telnet Configuration with Authentication Mode Being Scheme ...................................... 3-11
3.4.1 Configuration Procedure ....................................................................................... 3-11
3.4.2 Configuration Example.......................................................................................... 3-15
3.5 Telnet Connection Establishment .................................................................................... 3-16
3.5.1 Telnetting to a Switch from a Terminal ................................................................. 3-16
3.5.2 Telnetting to Another Switch from the Current Switch .......................................... 3-18

Operation Manual – Login
H3C S7500E Series Ethernet Switches Table of Contents
ii
Chapter 4 Logging In Using Modem............................................................................................4-1
4.1 Introduction ........................................................................................................................ 4-1
4.2 Configuration on the Administrator Side............................................................................ 4-1
4.3 Configuration on the Switch Side....................................................................................... 4-2
4.3.1 Modem Configuration.............................................................................................. 4-2
4.3.2 Switch Configuration ............................................................................................... 4-2
4.4 Modem Connection Establishment.................................................................................... 4-3
4.5 Modem Attribute Configuration .......................................................................................... 4-5
4.5.1 Configuration Prerequisites..................................................................................... 4-5
4.5.2 Configuration Procedure ......................................................................................... 4-5
4.5.3 Configuration Example............................................................................................ 4-6
Chapter 5 Logging in Through NMS............................................................................................5-1
5.1 Introduction ........................................................................................................................ 5-1
5.2 Connection Establishment Using NMS.............................................................................. 5-2
Chapter 6 Specifying Source for Telnet Packets....................................................................... 6-1
6.1 Introduction ........................................................................................................................ 6-1
6.2 Specifying Source IP address/Interface for Telnet Packets .............................................. 6-1
6.3 Displaying the source IP address/Interface Specified for Telnet Packets......................... 6-2
Chapter 7 Controlling Login Users..............................................................................................7-1
7.1 Introduction ........................................................................................................................ 7-1
7.2 Controlling Telnet Users ....................................................................................................7-1
7.2.1 Prerequisites ........................................................................................................... 7-1
7.2.2 Controlling Telnet Users by Source IP Addresses.................................................. 7-1
7.2.3 Controlling Telnet Users by Source and Destination IP Addresses........................ 7-2
7.2.4 Controlling Telnet Users by Source MAC Addresses ............................................. 7-3
7.2.5 Configuration Example............................................................................................ 7-3
7.3 Controlling Network Management Users by Source IP Addresses ................................... 7-4
7.3.1 Prerequisites ........................................................................................................... 7-4
7.3.2 Controlling Network Management Users by Source IP Addresses ........................ 7-5
7.3.3 Configuration Example............................................................................................ 7-6

Operation Manual – Login
H3C S7500E Series Ethernet Switches Chapter 1 Logging into an Ethernet Switch
1-1
Chapter 1 Logging into an Ethernet Switch
When logging into an Ethernet switch, go to these sections for information you are
interested in:
zLogging into an Ethernet Switch
zIntroduction to User Interface
1.1 Logging into an Ethernet Switch
You can log into an H3C S7500E series Ethernet switch in one of the following ways:
zLogging in locally through the Console port
zTelnetting locally or remotely to an Ethernet port
zTelnetting to the Console port using a modem
zLogging in through NMS (network management station)
1.2 Introduction to User Interface
1.2.1 Supported User Interfaces
H3C S7500E series Ethernet switch supports two types of user interfaces: AUX and
VTY.
Table 1-1 Description on user interface
User interface Applicable user Port used Description
AUX
Users logging in
through the Console
port
Console port
Each switch can
accommodate one
AUX user.
VTY Telnet users and
SSH users Ethernet port
Each switch can
accommodate up
to five VTY users.
Note:
As the AUX port and the Console port of a H3C series switch are the same one, you will
be in the AUX user interface if you log in through this port.