H3C S3610-28P User manual

H3C S3610&S5510 Series Ethernet Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 20081229-C-1.01
Product Version: Release 5303

Copyright © 2006-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www.h3c.com
Technical Support
[e-mail]
http://www. h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S3610&S5510 Series Ethernet Switches
documentation set includes the following:
Manual Description
H3C S3610&S5510 Series Ethernet
Switches Command Manual-Release
5303
It is used for assisting the users in using
various commands.
H3C S3610 Series Ethernet Switches
Installation Manual It provides information for the system installation.
H3C S5510 Series Ethernet Switches
Installation Manual It provides information for the system installation.
Organization
H3C S3610&S5510 Series Ethernet Switches Operation Manual Release 5303 is
organized as follows:
Part Contents
0 Product Overview Introduces the system features, service
features, and network application of the
switches.
1 Login Introduces the ways to log into an Ethernet
switch.
2 VLAN Introduces VLAN, Voice VLAN, GVRP
fundamental and the related configuration.
3 IP Addressing and Performance Introduces IP address and IP performance
fundamental and the related configuration.
4 QinQ-BPDU Tunneling Introduces QinQ, BPDU Tunnel and the
related configuration.
5 Port Correlation Configuration Introduces basic port configuration and port
isolation configuration.
6 Link Aggregation Introduces link aggregation configuration,
including manual link aggregation and static
LACP link aggregation.

Part Contents
7 MAC Address Table
Management Introduces MAC address forwarding table and the related configuration.
8 IP Source Guard Introduces IP Source Guard configuration.
9 MSTP Introduces STP, BRDU tunnel and the related
configurations.
10 IPv6 Introduces IPv6 basic configuration and
application, IPv6 tunneling, and so on.
11 Routing Overview Introduces the basic routing information and
the classification of routing protocols
12 IPv4 Routing Introduces IPv4 routing related configurations, such as static routing, RIP,
OSPF, IS-IS, BGP, and route policy.
13 BFD-GR Introduces BFD configuration and GR
configuration
14 IPv6 Routing Introduces IPv6 routing related
configurations, such as static routing, RIPng,
OSPFv3, IPv6 IS-IS, and IPv6 BGP.
15 Multicast Protocol Introduces the multicast protocol-related
configurations.
16 802.1x-HABP-MAC
Authentication Introduces 802.1x, HABP and MAC related configurations.
17 AAA-RADIUS-HWTACACS Introduces AAA, RADIUS, HWTACACS, and
the related configurations.
18 ARP Introduces ARP and the related configuration.
19 DHCP Introduces DHCP and the related
configuration.
20 ACL Introduces IPv4&IPv6-based ACL and the
related configuration.
21 QoS Introduces QoS and the related configuration.
22 Port Mirroring Introduces port mirroring and the related
configuration.
23 Cluster Management Introduces cluster and the related
configuration.
24 UDP Helper Introduces UDP Helper and the related
configuration.
25 SNMP-RMON Introduces the configuration to manage
network devices through SNMP and RMON.
26 NTP Introduces NTP and the related configuration.
27 DNS Introduces DNS and the related configuration.

Part Contents
28 File System Management Introduces basic configuration for file system
management.
29 Information Center Introduces the configuration to analyze and
diagnose networks using the information
center.
30 System Maintaining and
Debugging Introduces daily system maintenance and debugging.
31 NQA Introduces NQA and the related
configuration.
32 VRRP Introduces VRRP and the related
configuration.
33 SSH Introduces SSH and the related
configurations.
34 MCE Introduces MCE and the related
configuration.
35 OAM Introduces ethernet OAM configuration.
36 DLDP Introduces DLDP and the related
configuration.
37 RRPP Introduces RRPP and the related
configuration.
38 SSL-HTTPS Introduces SSL and HTTPS configuration.
39 PKI Introduces PKI and related configuration.
40 Appendix Lists the acronyms used in this manual.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.

Convention Description
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 H3C Website......................................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Documentation and Software Version.......................................................................2-1
2.1 Software Version for the Manual .......................................................................................2-1
2.2 Document List....................................................................................................................2-1
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface...............................................................................................................................3-1
3.2 Switch Models....................................................................................................................3-1
3.3 Software Features .............................................................................................................3-3
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 H3C S3610 Series Ethernet Switches Networking Applications.......................................4-1
4.1.1 Broadband Ethernet Access for Residential Communities..................................... 4-1
4.1.2 Application in Networks ofBranches or Small- to Medium-Sized Enterprises................ 4-1
4.1.3 Application in Large Enterprise and Campus Networks..........................................4-2
4.1.4 IPv4/IPv6 Hybrid Networking ..................................................................................4-3
4.2 H3C S5510 Series Ethernet Switches Networking Applications.......................................4-4
4.2.1 Broadband Ethernet Access for Residential Communities..................................... 4-4
4.2.2 Application in Networks of Branches or Small/Medium-Sized and Large
Enterprises......................................................................................................................4-5
4.2.3 Application in Large Enterprise and Campus Networks..........................................4-6
4.2.4 IPv4/IPv6 Hybrid Networking ..................................................................................4-7

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
H3C Technology Co., Ltd. provides various ways for you to obtain documentation,
through which you can obtain the product documentations and those concerning newly
added new features. The documentations are available in one of the following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROM
H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete
product document set, including the operation manual and command manual. After
installing the reader program provided by the CD-ROM, you can search for the desired
contents in a convenient way through the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the H3C website.
1.2 H3C Website
To query and download the documentation for this version, go to the website of H3C
with reference of the following Table.
Table 1-1 Acquire product documentation from the H3C website
How to apply for
an account
Access the homepage of H3C at http:// www.h3c.com and click
on Registration at the top right. In the displayed page, provide
your information and click on Submit to register.
How to get
documentation
Approach 1:
In the homepage of H3C at http:// www.h3c.com, select
Technical Support & Document > Technical Documents from
the navigation menu at the top. Then select a product for its
documents.
Approach 2:
In the homepage of H3C at http:// www.h3c.com, select
Support > Technical Documents. Then select a product for its
documents.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 1 Obtaining the Documentation
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 2 Documentation and Software Version
2-1
Chapter 2 Documentation and Software Version
2.1 Software Version for the Manual
H3C S3610&S5510 Series Ethernet Switches Operation Manual Release 5303 and
H3C S3610&S5510 Series Ethernet Switches Command Manual Release 5303
correspond to the following software version of the S3610&S5510 series switches:
Release 5303.
Compared with Release 5301, many new features are added in Release 5303. For
details, refer to Table 2-1
Table 2-1 Added features in Release 5303
Features Location
VLAN check 02-VLAN
MAC Address Synchronization 04-QinQ-BPDU Tunneling
VLAN ignore
Transparent BPDU Transmission
BPDU Tagging Function
09-MSTP
EAD Fast Deployment Configuration 16-802.1x-HABP-MAC Authentication
Configure burst-traffic in port group view
Traffic mirroring to CPU 21-QoS
2.2 Document List
Table 2-2 Document list
Name Version
H3C S3610 Series Ethernet Switches Installation Manual (V1.07)
H3C S5510 Series Ethernet Switches Installation Manual (V1.05)
H3C S3610&S5510 Series Ethernet Switches Operation Manual –
Release 5303(V1.01)
H3C S3610&S5510 Series Ethernet Switches Command Manual –
Release 5303(V1.01)

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-1
Chapter 3 Product Overview
3.1 Preface
H3C S3610&S5510 Series Ethernet Switches are wire speed L2/L3 Ethernet switches
developed by H3C Technology. They are intelligent network management switches
intended for a network environment where high performance, dense port distribution,
and ease of installation are required.
The H3C S3610&S5510 series are designed to accommodate the convergence on
Intranets and metropolitan area networks (MANs) and to meet the requirements at the
access layer. Supporting IPv4/IPv6 double stack, they offer abundant service features
and routing functionalities.
3.2 Switch Models
Table 3-1 lists the models in the H3C S3610 series:
Table 3-1 Models in the H3C S3610 series
Model Power
supply unit
(PSU)
Number
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Console
port
S3610-28P AC-input,
DC-input 28 24 10/100
Mbps
(electrical) 4 (SFP) 1
S3610-28T
P AC-input, DC-input 28 24 10/100
Mbps
(electrical)
2 (SFP)
2 ×
10/100/1,000
Mbps
(electrical)
1
S3610-28F AC-input,
DC-input 28 24 × 100M SFP ports
2 (SFP)
2 ×
10/100/1,000
Mbps
(electrical)
1
S3610-52P AC-input,
DC-input 52 48 10/100
Mbps
(electrical) 4 (SFP) 1

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-2
Model Power
supply unit
(PSU)
Number
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Console
port
S3610-52M
-AC AC-input 1
S3610-52M
-DC DC-input
Up to 48×10/100 Mbps electrical ports or
48×100 Mbps SFP ports (depending on
the modules installed)
4×1000 Mbps SFP ports and
4×10/100/1000 Mbps electrical ports on
the rear panel 1
Table 3-2 Combo ports and the corresponding ports on S3610 series
Model Combo port Corresponding port
49 53
50 54
51 55
S3610-52M-AC/S3610-52M-DC
52 56
Table 3-3 lists the models in the S5510 series:
Table 3-3 Models in the S5510 series
Model Power supply
unit (PSU)
Number of
service
ports Port Console
port
H3C
S5510-24P-AC AC-input 28
24 × 10/100/1000
Mbps (electrical)
4 Gigabit SFP
Combo port
1
H3C
S5510-24P-DC DC-input 28
24 × 10/100/1000
Mbps (electrical)
4 Gigabit SFP
Combo ports
1
H3C
S5510-24F-AC AC-input 28
24 Gigabit SFP
ports
4 × 10/100/100
Mbps Combo
(electrical)
1
H3C
S5510-24F-DC DC-input 28
24 Gigabit SFP
ports
4 × 10/100/1000
Mbps Combo ports
1
There are two power slots on the rear panel of an S5510 Ethernet switch. An S5510

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-3
Ethernet switch is shipped with a power supply module installed in the power supply
slot PWR1 only. The power supply slot PWR2 is covered by a blank panel. You can
optionally install an AC/DC power supply module in PWR2 slot as a backup of PWR1.
Table 3-4 Combo ports and the corresponding ports on S5510 series
Specification Combo ports Matching ports
25 22
26 24
27 21
S5510-24P/S5510-24F
28 23
3.3 Software Features
H3C S3610&S5510 series Ethernet switches provide abundant software features to
meet different requirements of users. The following table lists the features of each part.
Table 3-5 Features of S3610&S5510 series Ethernet switches
Part Feature
01-Login
zLogging into a switch through the Console port
zLogging into a switch by using Telnet through an Ethernet
port
zLogging into a switch by using Modem through the Console
port
zLogging into a switch through Web or NMS
02-VLAN
zIEEE 802.1Q-compliant virtual local area network (VLAN).
zPort-based VLAN
zVLAN check
zProtocol-based VLAN
zVoice VLAN
zGARP VLAN Registration Protocol (GVRP)
03- IP Addressing
and Performance
zConfiguring an IP address for a switch
zConfiguring TCP attributes for a switch
04-QinQ-BPDU
Tunnelling
zQinQ
zFlexible QinQ
zMAC Address Synchronization
zBPDU Tunnel
05-Port
Correlation
Configuration
zThree port states: Access, Trunk, and Hybrid.
zSetting broadcast suppression ratio globally.
zLoopback detection
zCable test
zLink aggregation control protocol (LACP)
zConfiguring port isolation group

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-4
Part Feature
06-Link
Aggregation
zStatic link aggregation using LACP (Link Aggregation
Control Protocol)
zManually created link aggregation group
07-MAC Address
Table
Management
zConfiguring dynamic, static, and blackhole MAC addresses
zConfiguring aging time for MAC addresses
zConfiguring MAC address learning limit on each port
08- IP Source
Guard zConfiguring MAC address-IP address-port binding
09-MSTP
zSTP/RSTP/MSTP
zBPDU guard
zRoot guard
zLoop guard
zTC-BPDU attack guard
zVLAN Ignore
zTransparent BPDU transmission
zBPDU Tagging Function
10-IPv6
zIPv6 basic configuration
zPing IPv6/Traceroute IPv6
zManual IPv6 tunnel
zConfiguring IPv4 compatible with the IPv6 tunnel
z6to4 tunnel
zISATAP tunnel
zIPv4/IPv6 double protocol stacks
11-Routing
Overview Provide an overview of IPv4/IPv6 routing and routing table display and maintenance.
12-IPv4 Routing
zStatic route
zRouting information protocol (RIP) v1/v2
zOpen shortest path first (OSPF)
zIntermediate System-to-Intermediate System intra-domain
routing information exchange protocol (IS-IS)
zBorder gateway protocol (BGP)
zRouting policy
13-BFD-GR
zConfiguring static route-based BFD (Bidirectional
Forwarding Detection)
zConfiguring OSPF-/BGP-/IS-IS-based GR
14-IPv6 Routing
zIPv6 static route
zRIPng
zOSPFv3
zIPv6 IS-IS
zIPv6 BGP
zIPv6 routing policy

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-5
Part Feature
15-Multicast
Protocol
zInternet group management protocol (IGMP) Snooping
zMulticast listener discovery (MLD)-Snooping
zInternet group management protocol (IGMP)
zProtocol-independent multicast-dense mode (PIM-DM)
zProtocol-independent multicast-sparse mode (PIM-SM)
zMulticast source discovery protocol (MSDP)
16-802.1x-HABP-
MAC
Authentication
z802.1x authentication
zGuest VLAN
zEAD fast deployment
zHuawei authentication bypass protocol (HABP)
zMAC address authentication
17-AAA-RADIUS-
HWTACACS
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-in user service (RADIUS)
zHuawei terminal access controller access control system
(HWTACACS)
18-ARP
zConfiguring ARP entries manually
zGratuitous ARP
zARP source suppression
zProxy ARP
19-DHCP
zDHCP server
zDHCP relay
zDHCP Snooping
zApplying option184 in DHCP server function
zApplying option82 in DHCP server/DHCP relay function
20-ACL
zIPv4 basic ACLs
zIPv4 advanced ACLs
zLayer 2 ACLs
zIPv4 user-defined ACLs
zIPv6 basic ACLs
zIPv6 advanced ACLs
zFlow template
21-QoS
zTraffic classification, traffic policing, and traffic shaping
zQoS policy
zCongestion management
zPriority mapping
zCongestion avoidance
zAggregated CAR
zVLAN policy
zTraffic mirroring
22-Port Mirroring zLocal port mirroring
zRemote port mirroring
23- Cluster
Management
zHuawei group management protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
24-UDP Helper zForwarding UDP broadcast packets by using UDP Helper

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 3 Product Overview
3-6
Part Feature
25- SNMP-RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote monitoring (RMON)
26-NTP zNetwork time protocol (NTP)
27-DNS zStatic DNS
zDynamic DNS
28-File System
Management
zFile system management
zConfiguration file management
zConfiguring a switch as an FTP server/FTP client
zConfiguring a switch as a TFTP client
29-Information
Center
zSystem logs
zAlarms in different severities
zDebugging information output
30- System
Maintaining and
Debugging
zConfiguring command levels
zConfiguring online help for command lines
zConfiguring system time
zDisplaying and configuring system device state
31-NQA zNetwork Quality Analyzer (NQA)
32-VRRP zIPv4-based Virtual Router Redundancy Protocol (VRRP)
zIPv6-based VRRP
33-SSH zSecure shell (SSH)
34-MCE zMulti-CE (MCE)
35-OAM zEthernet OAM (operation, administration, and maintenance)
36-DLDP zDevice Link Detection Protocol (DLDP)
37-RRPP zRapid Ring Protection Protocol (RRPP)
38-SSL-HTTPS zSecure Socket Layer (SSL)
zHTTP Security (HTTPS)
39-PKI zPublic Key Infrastructure (PKI)

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 4 Networking Applications
4-1
Chapter 4 Networking Applications
4.1 H3C S3610 Series Ethernet Switches Networking
Applications
4.1.1 Broadband Ethernet Access for Residential Communities
On the broadband access network of a residential community, an H3C S3610 switch is
located in the center. It is downlinked to Layer 2 switches (such as S3100 series) to
reach the Ethernet users and uplinked to a core Layer 3 switch through a GE extension
module to connect to the MAN backbone.
MAN Backbone Core layer
Distribution layer
Community/building
access layer
Corridor access layer
S9500/S7500
Series
S3610 Series
S3610 Series
L2 Switch L2 Switch
FE FE FE FE
GE GE
Figure 4-1 Community Ethernet access networking with H3C S3610 series
4.1.2 Application in Networks of Branches or Small- to Medium-Sized
Enterprises
For small-to medium-sized enterprises or branches of a large enterprise, the H3C
S3610 series can serve as the backbone switches on their networks and can be
connected to the headquarters or other branches through routers.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 4 Networking Applications
4-2
Figure 4-2 H3C S3610 series application in branch network of midsize/large enterprise
4.1.3 Application in Large Enterprise and Campus Networks
In a large enterprise or campus network, the H3C S3610 series are located at the
convergence layer. They are downlinked to Layer 2 switches, S3100 Series for
example; and uplinked to a layer 3 switch through GE interfaces. These switches
together provide a network-wide intranet solution that covers gigabit-to-backbone and
100 Mbps-to-desktop.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 4 Networking Applications
4-3
PC
Intranet Backbone
S3100 Series S3100 Series
FE 100M
S3610 Series
Department
Server
S9500/7500
Series
GE 1000M
S3610 Series
Server cluster
PC PC
Figure 4-3 H3C S3610 series application in large enterprise and campus network
4.1.4 IPv4/IPv6 Hybrid Networking
Full IPv4 networking and full IPv6 networking are similar. At the early stage of IPv6
implementation, however, IPv4/IPv6 hybrid networks are common. This gives full play
to the IPv4/IPv6 dual-stack and IPv6 over IPv4 tunneling features provided by the H3C
S3610 series and enables flexible networking.

Operation Manual – Product Overview
H3C S3610&S5510 Series Ethernet Switches Chapter 4 Networking Applications
4-4
IPv4 Backbone
Layer 3
switch
6to4 tunnel 6to4 tunnel
IPv4 Server
IPv6 Server
S3610 Series S3610 Series
S3100 Series S3100 Series
IPv4 Host IPv4 Host IPv6 Host IPv4 Host IPv6 Host
Figure 4-4 Application in a large enterprise and campus IPv4/IPv6 hybrid network
4.2 H3C S5510 Series Ethernet Switches Networking
Applications
4.2.1 Broadband Ethernet Access for Residential Communities
An H3C S5510 series Ethernet switch can operate on the distribution layer of a
broadband MAN. You can connect it to a backbone router or Layer 3 switch in theuplink
direction through its GigabitEthernet optical ports, and connect it to Layer 2/Layer 3
devices operating as the portal devices of community networks through its
GigabitEthernet optical ports. Additionally, you can use multiple GigabitEthernet ports
to form GigabitEthernet trunk ports so as to broaden the uplink and downlink
bandwidth.