H3C S5120-SI Series User manual

H3C S5120-SI Series Ethernet Switches
Configuration Guide
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: 6W105-20110810
Product Version: Release 1101

Copyright © 2009-2011, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,
XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,
Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

2-1
Preface
The H3C S5120-SI Series Ethernet Switches Configuration Guide, Release 1101 describes the
fundamentals and configuration of software features available in the software release 1101 for the H3C
S5120-SI series, and guides you through the software configuration procedures.
This preface includes:
1) About This Document
zAudience
zOrganization
zConventions
2) Documentation Guide
zRelated Documentation
zObtaining Documentation
zTechnical Support
zDocumentation Feedback
3) Product Features
zIntroduction to Product
zNetwork Scenarios

2-1
1 About This Document
Audience
This documentation is intended for:
zNetwork planners
zField technical support and servicing engineers
zNetwork administrators working with the S5120-SI series
Organization
The H3C S5120-SI Series Ethernet Switches Configuration Guide, Release 1101 comprises these
chapters:
Chapter Content
01-CLI zIntroduction to CLI
zCLI configuration
02-Login
zIntroduction to User Interfaces
zLogging In Through the Console Port
zLogging In Through Telnet/SSH
zLogging in Through Web-based Network Management System
zLogging In Through NMS
zSpecifying Source for Telnet Packets
zControlling Login Users
03- Ethernet Port
zBasic Ethernet Port Configuration
zConfiguring an Auto-negotiation Transmission Rate
zConfiguring Flow Control on an Ethernet Port
zConfiguring Loopback Testing on an Ethernet Port
zEnabling Auto Power Down on an Ethernet Port
zConfiguring a Port Group
zConfiguring Traffic Storm Protection
zSetting the Interval for Collecting Ethernet Port Statistics
zEnabling Forwarding of Jumbo Frames
zEnabling Loopback Detection on an Ethernet Port
zConfiguring the MDI Mode for an Ethernet Port
zEnabling Bridging on an Ethernet Port
zTesting the Cable on an Ethernet Port
04-Loopback Interface
and Null Interface
zIntroduction to Loopback Interface
zConfiguring a Loopback Interface
zIntroduction to Null Interface
zConfiguring Null 0 Interface

2-2
Chapter Content
05-Ethernet Link
Aggregation
zOverview
zConfiguring an Aggregation Group
zConfiguring an Aggregate Interface
06-Port Isolation zIntroduction to Port Isolation
zConfiguring an Isolation Group
07-Port Mirroring zConfiguring Local Port Mirroring
08-LLDP
zIntroduction to LLDP
zPerforming Basic LLDP Configuration
zConfiguring CDP Compatibility
zConfiguring LLDP Trapping
09-VLAN zVLAN Configuration
zVoice VLAN Configuration
10-MSTP zIntroduction to STP/RSTP/MSTP
zConfiguring MSTP
11-IP Addressing zIP Addressing Overview
zConfiguring IP Addresses
12-IP Performance
Optimization
zEnabling Reception and Forwarding of Directed Broadcasts to a Directly
Connected Network
zConfiguring TCP Attributes
zConfiguring ICMP to Send Error Packets
13-ARP
zConfiguring ARP
zConfiguring Gratuitous ARP
zConfiguring ARP Active Acknowledgement
zConfiguring Source MAC Address Based ARP Attack Detection
zConfiguring ARP Packet Rate Limit
zConfiguring ARP Detection
zConfiguring Periodic Sending of Gratuitous ARP Packets
14-DHCP
zDHCP Relay Agent Configuration
zDHCP Client Configuration
zDHCP Snooping Configuration
zBOOTP Client Configuration
15-FTP and TFTP zFTP Configuration
zTFTP Configuration
16-IP Routing Basics
Configuration
zIntroduction to IP routing and routing table
zRouting protocol overview
17-Static Routing zStatic route overview
zStatic route configuration
18-Mulitcast
zMulticast overview
zIGMP Snooping overview
zConfiguring Basic Functions of IGMP Snooping
zConfiguring IGMP Snooping Port Functions
zConfiguring IGMP Snooping Querier
zConfiguring IGMP Snooping Proxying
zConfiguring an IGMP Snooping Policy
zMulticast VLAN Configuration

2-3
Chapter Content
19-QoS
zConfiguring QoS Policy
zConfiguring Priority Mapping
zConfiguring Line Rate
zConfiguring SP, WRR, and SP+WRR Queuing
zConfiguring Traffic Filtering
zConfiguring Traffic Redirecting
20-802.1X
z802.1X basic configuration
z802.1X extended configuration
z802.1X Guest-VLAN
z802.1X Auth-Fail VLAN
21-AAA zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
22-PKI zPKI configuration
23-SSL zSSL Server
zSSL Client
24-SSH2.0
zSSH Server
zSSH Client
zSFTP Server
zSFTP Client
25-Public Key zLocal Asymmetric Key Pair
zPublic Key of a Peer
26-HABP zHABP server
zHABP client
27-ACL
zConfiguring Basic ACL
zConfiguring Advanced ACL
zConfiguring Ethernet Frame Header ACL
zConfiguring ACL Application for Packet Filtering
28-Device Management
zDevice management overview
zConfiguring the Exception Handling Method
zRebooting a device
zConfiguring the scheduled automatic execution function
zUpgrading Device Software
zClearing the 16-bit interface indexes not used in the current system
zIdentifying and Diagnosing Pluggable Transceivers
29-NTP
zNTP overview
zConfiguring the Operation Modes of NTP
zConfiguring Optional Parameters of NTP
zConfiguring Access-Control Rights
zConfiguring NTP Authentication
30-SNMP
zSNMP overview
zBasic SNMP function configuration
zSNMP log configuration
zTrap configuration
zMIB style configuration
31-RMON
zRMON overview
zRMON configuration (event group, history group, alarm group, private alarm
group)

2-4
Chapter Content
32-File System
Management
zFile system management
zConfiguration File Management
33-System Maintaining
and Debugging
zMaintenance and debugging overview
zMaintenance and debugging configuration
34-Basic System
Configuration
zConfiguration Display
zConfiguring the Device Name
zConfiguring the System Clock
zEnabling/Disabling the Display of Copyright Information
zConfiguring a Banner
zConfiguring CLI Hotkeys
zConfiguring User Privilege Levels and Command Levels
zDisplaying and Maintaining Basic Configurations
35-Information Center
zInformation Center Overview
zSetting to Output System Information to the Console
zSetting to Output System Information to a Monitor Terminal
zSetting to Output System Information to a Log Host
zSetting to Output System Information to the Trap Buffer
zSetting to Output System Information to the Log Buffer
zSetting to Output System Information to the SNMP Module
zConfiguring Synchronous Information Output
zDisabling a Port from Generating Link Up/Down Logging Information
36-MAC Address Table
zMAC address table overview
zConfiguring MAC Address Entries
zConfiguring MAC Address Aging Timer
zConfiguring the MAC Learning Limit
37-Cluster Management
zEstablishing a Cluster
zCluster Member Management
zConfiguring Topology Management
zConfiguring SNMP Synchronization Function
zConfiguring Web User Accounts in Batches
38-HTTP zHTTP
zHTTPS
39-Stack Management zConfiguring a Stack
40-PoE
zPoE overview
zEnabling PoE
zDetecting PDs
zConfiguring the PoE Power
zConfiguring PoE Power Management
zConfiguring the PoE Monitoring Function
zConfiguring PoE Interface through PoE Profile
zUpgrading PSE Processing Software in Service
41-IP Source Guard
zIP Source Guard Overview
zConfiguring a Static Binding Entry
zConfiguring Dynamic Binding Function
42-Appendices zAcronyms

2-5
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are
optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars,
from which you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical
bars, from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by
vertical bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by
vertical bars, from which you may select multiple choices or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&)
sign can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface.
For example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create
> Folder.
Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause bodily
injury.
Means reader be careful. Improper operation may cause data loss or damage to
equipment.
Means an action or information that needs special attention to ensure
successful configuration or good performance.
Means a complementary description.
Means techniques helpful for you to make configuration with ease.

2-1
2 Documentation Guide
Related Documentation
The H3C S5120-SI documentation set also includes:
Category Documents Purposes
Product
description and
specifications Marketing brochures Describe product specifications and benefits.
Compliance and safety
manual Provides regulatory information and the safety instructions that must be followed during installation.
Installation guide
zProvides a complete guide to hardware installation and
hardware specifications.
zProvides a complete guide to software and hardware
troubleshooting.
Hardware
specifications
and installation
H3C Pluggable SFP
[SFP+][XFP]
Transceiver Modules
Installation Guide
Guides you through installing SFP/SFP+/XFP transceiver
modules.
Power
configuration RPS ordering guide Provides the RPS and switch compatibility matrix and RPS cable
specifications.
Configuration guide Describes software features and configuration procedures.
Software
configuration Command reference Provides a quick reference to all available commands.
Login password
recovery manual Tells how to find the lost password or recover the password when the login password is lost.
Operations and
maintenance Release notes
Provide information about the product release, including the
version history, hardware and software compatibility matrix,
version upgrade information, technical support information, and
software upgrading.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide Web at this URL:
http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
z[Technical Support & Documents > Technical Documents] – Provides hardware installation,
software upgrading, and software feature configuration and maintenance documentation.
z[Products & Solutions] – Provides information about products and technologies, as well as
solutions.

2-2
z[Technical Support & Documents > Software Download] – Provides the documentation released
with the software version.
Technical Support
[e-mail]
http://www.h3c.com
Documentation Feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

3-1
3 Product Features
Introduction to Product
The H3C S5120-SI Series Ethernet Switches are intelligent, manageable, Layer 2 Gigabit Ethernet
switches designed for the access and distribution layers of enterprise networks. The series delivers
high performance, high port density, and ease of installation.
The S5120-SI series provides 10/100/1000Base-T auto-sensing Ethernet ports. You can deploy the
switches at the access layer of an enterprise network to implement the Gigabit to the Desktop (GTTD)
solution.
The S5120-SI is also suitable for the distribution layer of a metropolitan-area network (MAN). You can
connect the S5120-SI series to end users or wiring-closet switches through gigabit Ethernet copper
ports, and to Layer 3 switches through gigabit Ethernet fiber-optic ports or link aggregation.
See Table 3-1 for all S5120-SI switch models and their basic hardware specifications.
Table 3-1 H3C S5120-SI switch hardware summary
Model Power
supply
unit
Service
ports Types of port Console port
H3C S5120-20P-SI AC-input 20 16 × 10/100/1000Base-T autosensing
Ethernet ports + 4 GE SFP interfaces 1
H3C S5120-28P-SI AC-input 28 24 × 10/100/1000Base-T autosensing
Ethernet ports + 4 GE SFP interfaces 1
H3C S5120-52P-SI AC-input 52 48 × 10/100/1000Base-T autosensing
Ethernet ports + 4 GE SFP interfaces 1
H3C S5120-28P-PWR-SI AC-input 28 24 × 10/100/1000Base-T autosensing
Ethernet ports + 4 GE SFP interfaces 1
H3C S5120-28P-HPWR-SI AC-input
DC-input 28 24 × 10/100/1000Base-T autosensing
Ethernet ports + 4 GE SFP interfaces 1
Network Scenarios
An S5120-SI switch provides 16, 24, or 48 downlink gigabit Ethernet interfaces. You can deploy the
S5120-SI series at the access or distribution layer of a small- and medium-sized enterprise network.
For example, you can use the series to provide gigabit to desktop connections or connecting data
center server farms. This section describes several typical application scenarios for the S5120-SI
series.

3-2
Distribution Layer Switches
Deploy the S5120-SI series at the distribution layer of a medium- and large-sized enterprise or campus
network to provide high-performance and large-capacity switching service.
Figure 3-1 An enterprise network
Access Switches
The S5120-SI series can serve as access switches to provide large access bandwidth and high port
density.

3-3
Figure 3-2 An enterprise network
S9500/S7500E
S5120-SI
Access
Core/Aggregation
S5120-SI

1
Table of Contents
1 CLI Configuration ······································································································································1-1
What Is CLI? ···········································································································································1-1
Entering the CLI······································································································································1-1
Entering CLI Through the Console Port··························································································1-2
Entering CLI Through Telnet···········································································································1-6
H3C Products CLI Descriptions··············································································································1-7
Command Conventions···················································································································1-7
CLI View Description·······················································································································1-8
Command View Reference ·············································································································1-9
Tips on Using the CLI····························································································································1-14
Using the CLI Online Help·············································································································1-14
Command Line Error Information··································································································1-15
Typing and Editing Commands·····································································································1-15
Displaying and Executing History Commands ··············································································1-16
Undo Form of a Command············································································································1-17
Controlling CLI Display··················································································································1-17
Anti-interruption for Command Input·····························································································1-20
Saving Configurations ···················································································································1-20

1-1
1 CLI Configuration
This chapter includes these sections:
zWhat Is CLI?
zEntering the CLI
zH3C Products CLI Descriptions
zTips on Using the CLI
What Is CLI?
The command line interface (CLI) is an interface where you can interact with your device by typing text
commands. At the CLI, you can instruct your device to perform a given task by typing a text command
and then pressing Enter to submit it to your device. Compared with the graphical user interface (GUI),
where you can use a mouse pointer to click on options for configuration, the CLI allows you to input a
command containing more information at one time. On the H3C switch series, which deliver powerful
functions, it is faster to perform configurations by using the CLI. The CLI of H3C switches is as shown in
Figure 1-1.
Figure 1-1 Schematic diagram for the CLI
At the CLI, you can enter commands to configure your switch, and verify the configuration based on the
output. Thus, the CLI facilitates your switch configuration and management.
Entering the CLI
The H3C switch series provides multiple methods of entering the CLI, as follows:
zThrough the console port. For more information, see Entering CLI Through the Console Port.

1-2
zThrough Telnet. For more information, see Entering CLI Through Telnet.
zThrough SSH with encryption. For more information, see SSH2.0 Configuration.
Entering CLI Through the Console Port
When you use the CLI of an H3C switch for the first time, you can log in to the switch and enter the CLI
through the console port only. Follow these steps to log in to your H3C switch and enter the CLI through
the console port:
1) Use the console cable shipped with your switch to connect your PC to your switch. Plug the DB-9
(female) connector of the console cable into the 9-pin serial port of your PC. Then plug the RJ-45
connector of the console cable into the console port of your switch.
Figure 1-2 Use the console cable to connect your PC to your switch
Identify the interface to avoid connection errors.
Because the serial port of a PC is not hot swappable, do not plug or unplug the console cable when your
switch is powered on. When connecting the PC to your switch, first plug the DB-9 connector of the
console cable into the PC, and then plug the RJ-45 connector of the console cable into your switch.
When disconnecting the PC from the your switch, first unplug the RJ-45 connector and then the DB-9
connector.
2) Launch a terminal emulation utility on your PC. In this chapter, the HyperTerminal in Windows XP
is used as an example. Click Start > All Programs > Accessories > Communications >
HyperTerminal to enter the HyperTerminal window. The Connection Description window as
shown in Figure 1-3 appears. Type a connection name (Switch, for example) in the Name input
box, and click OK.

1-3
Figure 1-3 Connection description
3) Then, the Connect To window as shown in Figure 1-4 appears. Select the serial port you want to
use from the Connect using drop-down list, and then click OK.
Figure 1-4 Specify the serial port used to establish the connection
4) The COM1 Properties window as shown in Figure 1-5 appears. On the window, set Bits per
second to 9600, Data bits to 8, Parity to None, Stop bits to 1, and Flow control to None. Click
OK.

1-4
Figure 1-5 Set the properties of the serial port
5) The HyperTerminal window as shown in Figure 1-6 appears.
Figure 1-6 The HyperTerminal window

1-5
Select File > Properties on the HyperTerminal window, and the Switch Properties window appears.
Select the Settings tab as shown in Figure 1-7, select VT100 from the Emulation drop-down list, and
then click OK.
Figure 1-7 Select the emulation terminal on the Switch Properties window
6) Press Enter on the HyperTerminal window. Then the CLI of your switch appears on the window,
as shown in Figure 1-8, indicating that you have logged in to your switch successfully.

1-6
Figure 1-8 Schematic diagram for successful login through the console port
Entering CLI Through Telnet
After you log in to your switch through the console port for the first time, it is recommended that you
configure Telnet login as soon as possible, so that you can use a remote terminal to configure and
manage your switch.
Telnet login authentication methods
In order to restrict the login to your switch, H3C provides three Telnet login authentication methods.
Select a proper method according to your network conditions.
Table 1-1 Telnet login authentication methods
Authentication
method Description Application scenarios Configuration
None
zEasy to configure
zAllows any user to telnet to your switch
zLeast secure
Lab environments and
extremely secure
network environments
Password
zEasy to configure
zAllows any user knowing the password
to telnet to your switch
zSecure, but incapable of assigning
different privilege levels to different
users
Environments that do
not need fine-grained
privilege management
Username and
password
zComplex to configure
zAllows users inputting the correct
username and password to telnet to your
switch
zMost secure, and capable of assigning
different privilege levels to different
users
Environments where
multiple operators
cooperate to manage
the device
For more
information,
see Login
Configuration.