H3C S5120-SI Series User manual

H3C S5120-SI Series Ethernet Switches
Configuration Guide
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 6W105-20110810
Product Version: Release 1101

Copyright © 2009-2011, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,
XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,
Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

2-1
Preface
The H3C S5120-SI Series Ethernet Switches Configuration Guide, Release 1101 describes the
fundamentals and configuration of software features available in the software release 1101 for the H3C
S5120-SI series, and guides you through the software configuration procedures.
This preface includes:
1) About This Document
zAudience
zOrganization
zConventions
2) Documentation Guide
zRelated Documentation
zObtaining Documentation
zTechnical Support
zDocumentation Feedback
3) Product Features
zIntroduction to Product
zNetwork Scenarios

2-1
1 About This Document
Audience
This documentation is intended for:
zNetwork planners
zField technical support and servicing engineers
zNetwork administrators working with the S5120-SI series
Organization
The H3C S5120-SI Series Ethernet Switches Configuration Guide, Release 1101 comprises these
chapters:
Chapter Content
01-CLI zIntroduction to CLI
zCLI configuration
02-Login
zIntroduction to User Interfaces
zLogging In Through the Console Port
zLogging In Through Telnet/SSH
zLogging in Through Web-based Network Management System
zLogging In Through NMS
zSpecifying Source for Telnet Packets
zControlling Login Users
03- Ethernet Port
zBasic Ethernet Port Configuration
zConfiguring an Auto-negotiation Transmission Rate
zConfiguring Flow Control on an Ethernet Port
zConfiguring Loopback Testing on an Ethernet Port
zEnabling Auto Power Down on an Ethernet Port
zConfiguring a Port Group
zConfiguring Traffic Storm Protection
zSetting the Interval for Collecting Ethernet Port Statistics
zEnabling Forwarding of Jumbo Frames
zEnabling Loopback Detection on an Ethernet Port
zConfiguring the MDI Mode for an Ethernet Port
zEnabling Bridging on an Ethernet Port
zTesting the Cable on an Ethernet Port
04-Loopback Interface
and Null Interface
zIntroduction to Loopback Interface
zConfiguring a Loopback Interface
zIntroduction to Null Interface
zConfiguring Null 0 Interface

2-2
Chapter Content
05-Ethernet Link
Aggregation
zOverview
zConfiguring an Aggregation Group
zConfiguring an Aggregate Interface
06-Port Isolation zIntroduction to Port Isolation
zConfiguring an Isolation Group
07-Port Mirroring zConfiguring Local Port Mirroring
08-LLDP
zIntroduction to LLDP
zPerforming Basic LLDP Configuration
zConfiguring CDP Compatibility
zConfiguring LLDP Trapping
09-VLAN zVLAN Configuration
zVoice VLAN Configuration
10-MSTP zIntroduction to STP/RSTP/MSTP
zConfiguring MSTP
11-IP Addressing zIP Addressing Overview
zConfiguring IP Addresses
12-IP Performance
Optimization
zEnabling Reception and Forwarding of Directed Broadcasts to a Directly
Connected Network
zConfiguring TCP Attributes
zConfiguring ICMP to Send Error Packets
13-ARP
zConfiguring ARP
zConfiguring Gratuitous ARP
zConfiguring ARP Active Acknowledgement
zConfiguring Source MAC Address Based ARP Attack Detection
zConfiguring ARP Packet Rate Limit
zConfiguring ARP Detection
zConfiguring Periodic Sending of Gratuitous ARP Packets
14-DHCP
zDHCP Relay Agent Configuration
zDHCP Client Configuration
zDHCP Snooping Configuration
zBOOTP Client Configuration
15-FTP and TFTP zFTP Configuration
zTFTP Configuration
16-IP Routing Basics
Configuration
zIntroduction to IP routing and routing table
zRouting protocol overview
17-Static Routing zStatic route overview
zStatic route configuration
18-Mulitcast
zMulticast overview
zIGMP Snooping overview
zConfiguring Basic Functions of IGMP Snooping
zConfiguring IGMP Snooping Port Functions
zConfiguring IGMP Snooping Querier
zConfiguring IGMP Snooping Proxying
zConfiguring an IGMP Snooping Policy
zMulticast VLAN Configuration

2-3
Chapter Content
19-QoS
zConfiguring QoS Policy
zConfiguring Priority Mapping
zConfiguring Line Rate
zConfiguring SP, WRR, and SP+WRR Queuing
zConfiguring Traffic Filtering
zConfiguring Traffic Redirecting
20-802.1X
z802.1X basic configuration
z802.1X extended configuration
z802.1X Guest-VLAN
z802.1X Auth-Fail VLAN
21-AAA zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
22-PKI zPKI configuration
23-SSL zSSL Server
zSSL Client
24-SSH2.0
zSSH Server
zSSH Client
zSFTP Server
zSFTP Client
25-Public Key zLocal Asymmetric Key Pair
zPublic Key of a Peer
26-HABP zHABP server
zHABP client
27-ACL
zConfiguring Basic ACL
zConfiguring Advanced ACL
zConfiguring Ethernet Frame Header ACL
zConfiguring ACL Application for Packet Filtering
28-Device Management
zDevice management overview
zConfiguring the Exception Handling Method
zRebooting a device
zConfiguring the scheduled automatic execution function
zUpgrading Device Software
zClearing the 16-bit interface indexes not used in the current system
zIdentifying and Diagnosing Pluggable Transceivers
29-NTP
zNTP overview
zConfiguring the Operation Modes of NTP
zConfiguring Optional Parameters of NTP
zConfiguring Access-Control Rights
zConfiguring NTP Authentication
30-SNMP
zSNMP overview
zBasic SNMP function configuration
zSNMP log configuration
zTrap configuration
zMIB style configuration
31-RMON
zRMON overview
zRMON configuration (event group, history group, alarm group, private alarm
group)

2-4
Chapter Content
32-File System
Management
zFile system management
zConfiguration File Management
33-System Maintaining
and Debugging
zMaintenance and debugging overview
zMaintenance and debugging configuration
34-Basic System
Configuration
zConfiguration Display
zConfiguring the Device Name
zConfiguring the System Clock
zEnabling/Disabling the Display of Copyright Information
zConfiguring a Banner
zConfiguring CLI Hotkeys
zConfiguring User Privilege Levels and Command Levels
zDisplaying and Maintaining Basic Configurations
35-Information Center
zInformation Center Overview
zSetting to Output System Information to the Console
zSetting to Output System Information to a Monitor Terminal
zSetting to Output System Information to a Log Host
zSetting to Output System Information to the Trap Buffer
zSetting to Output System Information to the Log Buffer
zSetting to Output System Information to the SNMP Module
zConfiguring Synchronous Information Output
zDisabling a Port from Generating Link Up/Down Logging Information
36-MAC Address Table
zMAC address table overview
zConfiguring MAC Address Entries
zConfiguring MAC Address Aging Timer
zConfiguring the MAC Learning Limit
37-Cluster Management
zEstablishing a Cluster
zCluster Member Management
zConfiguring Topology Management
zConfiguring SNMP Synchronization Function
zConfiguring Web User Accounts in Batches
38-HTTP zHTTP
zHTTPS
39-Stack Management zConfiguring a Stack
40-PoE
zPoE overview
zEnabling PoE
zDetecting PDs
zConfiguring the PoE Power
zConfiguring PoE Power Management
zConfiguring the PoE Monitoring Function
zConfiguring PoE Interface through PoE Profile
zUpgrading PSE Processing Software in Service
41-IP Source Guard
zIP Source Guard Overview
zConfiguring a Static Binding Entry
zConfiguring Dynamic Binding Function
42-Appendices zAcronyms

2-5
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are
optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars,
from which you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical
bars, from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by
vertical bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by
vertical bars, from which you may select multiple choices or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&)
sign can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface.
For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create
> Folder.
Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause bodily
injury.
Means reader be careful. Improper operation may cause data loss or damage to
equipment.
Means an action or information that needs special attention to ensure
successful configuration or good performance.
Means a complementary description.
Means techniques helpful for you to make configuration with ease.

2-1
2 Documentation Guide
Related Documentation
The H3C S5120-SI documentation set also includes:
Category Documents Purposes
Product
description and
specifications Marketing brochures Describe product specifications and benefits.
Compliance and safety
manual Provides regulatory information and the safety instructions that must be followed during installation.
Installation guide
zProvides a complete guide to hardware installation and
hardware specifications.
zProvides a complete guide to software and hardware
troubleshooting.
Hardware
specifications
and installation
H3C Pluggable SFP
[SFP+][XFP]
Transceiver Modules
Installation Guide
Guides you through installing SFP/SFP+/XFP transceiver
modules.
Power
configuration RPS ordering guide Provides the RPS and switch compatibility matrix and RPS cable
specifications.
Configuration guide Describes software features and configuration procedures.
Software
configuration Command reference Provides a quick reference to all available commands.
Login password
recovery manual Tells how to find the lost password or recover the password when the login password is lost.
Operations and
maintenance Release notes
Provide information about the product release, including the
version history, hardware and software compatibility matrix,
version upgrade information, technical support information, and
software upgrading.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide Web at this URL:
http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
z[Technical Support & Documents > Technical Documents] – Provides hardware installation,
software upgrading, and software feature configuration and maintenance documentation.
z[Products & Solutions] – Provides information about products and technologies, as well as
solutions.

2-2
z[Technical Support & Documents > Software Download] – Provides the documentation released
with the software version.
Technical Support
[e-mail]
http://www.h3c.com
Documentation Feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.