H3C s5820x series Installation manual

H3C S5820X&S5800 Switch Series
OAA Command Reference
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 1211
Document version: 6W100-20110415

Copyright © 2011, Hangzhou H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care,
, TOP G, , IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,
XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,
Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface
The H3C S5800&S5820X documentation set includes 12 command references, which describe the
commands and command syntax options for the S5800&S5820X Release1211.
The OAA Command Reference describes OAA configuration commands.
This preface includes:
•Audience
•Added and modified commands
•Conventions
•About the H3C S5800&S5820X documentation set
•Obtaining documentation
•Technical support
•Documentation feedback
Audience
This documentation is intended for:
•Network planners
•Field technical support and servicing engineers
•Network administrators working with the S5800 and S5820X switch series
Added and modified commands
None
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars, from
which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.

[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign can
be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create > Folder.
Convention Description
< > Button names are inside angle brackets. For example, click <OK>.
[ ] Window names, menu items, data table and field names are inside square brackets. For
example, pop up the [New User] window.
/ Multi-level menus are separated by forward slashes. For example, [File/Create/Folder].
Symbols
Convention Description
WARNING An alert that calls attention to important information that if not understood or followed can
result in personal injury.
CAUTION An alert that calls attention to important information that if not understood or followed can
result in data loss, data corruption, or damage to hardware or software.
IMPORTANT An alert that calls attention to essential information.
NOTE An alert that contains additional or supplementary information.
TIP An alert that provides helpful information.
About the H3C S5800&S5820X documentation set
The H3C S5800&S5820X documentation set includes:
Category Documents Purposes
Marketing brochures Describe product specifications and benefits.
Product description and
specifications Technology white papers
Provide an in-depth description of software
features and technologies.
PSR150-A [ PSR150-D ]
Power Modules User
Manual
Describes the appearances, features, specifications,
installation, and removal of the pluggable 150W
power modules available for the products.
Pluggable module
description
PSR300-12A
[ PSR300-12D1 ] Power
Modules User Manual
Describes the appearances, features, specifications,
installation, and removal of the pluggable 300W
power modules available for the products.

PSR750-A [ PSR750-D ]
Power Modules User
Manual
Describes the appearances, features, specifications,
installation, and removal of the pluggable 750W
power modules available for the products.
RPS User Manual
Describes the appearances, features, and
specifications of the RPS units available for the
products.
LSW1FAN and
LSW1BFAN Installation
Manual
Describes the appearances, specifications,
installation, and removal of the pluggable fan
modules available for the products.
LSW148POEM Module
User Manual
Describes the appearance, features, installation,
and removal of the pluggable PoE module available
for the products.
S5820X [ S5800 ] Series
Ethernet Switches
Interface Cards User
Manual
Describes the models, hardware specifications,
installation, and removal of the interface cards
available for the products.
H3C OAP Cards User
Manual
Describes the benefits, features, hardware
specifications, installation, and removal of the OAP
cards available for the products.
H3C Low End Series
Ethernet Switches
Pluggable Modules
Manual
Describes the models, appearances, and
specifications of the pluggable modules available
for the products.
S5800-60C-PWR
Ethernet Switch Hot
Swappable Power
Module Ordering Guide
Guides you through ordering the hot-swappable
power modules available for the S5800-60C-PWR
switches in different cases.
Power configuration
RPS Ordering Information
for H3C Low-End Ethernet
Switches
Provides the RPS and switch compatibility matrix and
RPS cable specifications.

•S5800 Series Ethernet
Switches Quick Start
•S5820X Series
Ethernet Switches
Quick Start
•S5800 Series Ethernet
Switches CE DOC
•S5820X Series
Ethernet Switches CE
DOC
Provides regulatory information and the safety
instructions that must be followed during installation.
•S5800 Series Ethernet
Switches Quick Start
•S5820X Series
Ethernet Switches
Quick Start
Guides you through initial installation and setup
procedures to help you quickly set up and use your
device with the minimum configuration.
•S5800 Series Ethernet
Switches Installation
Manual
•S5820X Series
Ethernet Switches
Installation Manual
Provides a complete guide to hardware installation
and hardware specifications.
Pluggable SFP[SFP+][XFP]
Transceiver Modules
Installation Guide
Guides you through installing SFP/SFP+/XFP
transceiver modules.
Hardware installation
•S5800-60C-PWR
Switch Video
Installation Guide
•S5820X-28C Switch
Video Installation
Guide
Shows how to install the H3C S5800-60C-PWR and
H3C S5820X-28C Ethernet switches.
Configuration guide Describe software features and configuration
procedures.
Software configuration
Command reference Provide a quick reference to all available
commands.
H3C Series Ethernet
Switches Login Password
Recovery Manual
Tells how to find the lost password or recover the
password when the login password is lost.
Operations and
maintenance
Release notes
Provide information about the product release,
including the version history, hardware and software
compatibility matrix, version upgrade information,
technical support information, and software
upgrading.

Obtaining documentation
You can access the most up-to-date H3C product documentation on the World Wide Web at
http://www.h3c.com.
Click the links on the top navigation bar to obtain different categories of product documentation:
[Technical Support & Documents > Technical Documents] – Provides hardware installation, software
upgrading, and software feature configuration and maintenance documentation.
[Products & Solutions] – Provides information about products and technologies, as well as solutions.
[Technical Support & Documents > Software Download] – Provides the documentation released with the
software version.
Technical support
[e-mail]
http://www.h3c.com
Documentation feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

i
Contents
OAP card configuration commands ··························································································································· 1
oap connect ······························································································································································1
oap reboot ································································································································································2
ACFP configuration commands··································································································································· 3
acfp server enable····················································································································································3
display acfp client-info·············································································································································3
display acfp policy-info············································································································································5
display acfp rule-info················································································································································7
display acfp server-info············································································································································9
ACSEI configuration commands ·······························································································································11
acsei client close···················································································································································· 11
acsei client reboot ················································································································································· 11
acsei server ···························································································································································· 12
acsei server enable ··············································································································································· 12
acsei timer clock-sync············································································································································ 13
acsei timer monitor················································································································································ 13
display acsei client info ········································································································································ 14
display acsei client summary ······························································································································· 16
Index ···········································································································································································18

1
OAP card configuration commands
oap connect
Syntax
oap connect slot slot-number system system-name
View
User view
Default level
2: System level
Parameters
slot slot-number: Specifies an OAP card on a member device of an Intelligent Resilient Framework (IRF)
virtual device. The slot-number argument takes the member ID of the member of the IRF virtual device,
and its value ranges depend on the number of member devices and there member IDs.
system system-name: Specifies the system name of the OAP card on the certain device. The system-name
argument specifies the OAP system name of the card in the form of SubSlotX with Xas the slot number
of the OAP card. For example, the system name of the OAP card in slot 3 is SubSlot3.
Description
Use the oap connect command to redirect from the switch to the software system of the specified OAP
card.
NOTE:
•When this command is executed, the terminal display interface is switched from the command line
interface (CLI) on the switch to the operating interface of the software system of the OAP card, and you
can manage the system and application software on the OAP card.
•To return from the software system on the OAP card to the CLI of the switch, press Ctrl+K.
•You can install multiple OAP cards on some models of the S5800 and S5820X switches. If you lo
g
in to
the software system of one OAP card first, you cannot lo
g
in to the software system of another by usin
g
the oap connect command. To log in to the software system of another
OAP card, return to the CLI on
the switch by pressing Ctrl+K.
•In an IRF virtual device, you can use the oap connect command repeatedly to log in to the software
systems of multiple OAP cards installed on different member switches, but cannot lo
g
in to the software
systems of multiple OAP cards installed on the same member switch simultaneously.
Examples
# Redirect from the device to the software system of the OAP card in slot 3 of the member device 1.
<Sysname> oap connect slot 1 system SubSlot3
Press CTRL+K to quit.
Connected to SubSlot3

2
oap reboot
Syntax
oap reboot slot slot-number system system-name
View
User view
Default level
2: System level
Parameters
slot slot-number: Restart the software system of an OAP card on a member of an IRF virtual device. The
slot-number argument takes the member ID of the member of the IRF virtual device, and its value ranges
depend on the number of member devices and there member IDs.
system system-name: Specifies the system name of the OAP card on the certain device. The system-name
argument specifies the system name of the OAP card in the form of SubSlotX with Xas the slot number
of the OAP card. For example, the system name of the OAP card in slot 3 is SubSlot3.
Description
Use the oap reboot command to restart the software system of the specified OAP card.
Examples
# Restart the software system of the OAP card in slot 3 of member device 1.
<Sysname> oap reboot slot 1 system SubSlot3
This command will recover the SubSlot3 from shutdown or other failed state.
Warning: This command may lose the data on the hard disk if the SubSlot1 is not
being shut down! Continue? [Y/N]:y
Reboot SubSlot1 by command.

3
ACFP configuration commands
acfp server enable
Syntax
acfp server enable
undo acfp server enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the acfp server enable command to enable the ACFP server.
Use the undo acfp server enable command to disable the ACFP server.
By default, the ACFP server is disabled.
NOTE:
In case that the ACSEI server is enabled on the device, when you first disable and then enable the ACFP
server, to ensure that the ACFP collaboration rules can be resent to the ACFP server, you must also disable
and then enable the ACSEI server.
Related commands: acsei server enable (ACSEI Configuration Commands in the OAA Command
Reference).
Examples
# Enable the ACFP server.
<Sysname> system-view
[Sysname] acfp server enable
display acfp client-info
Syntax
display acfp client-info [ client-id ] [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level

4
Parameters
client-id: Displays information of the specified ACFP client, where client-id is the ACFP client identifier, in
the range of 1 to 2147483647.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see CLI configuration in the Configuration Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.
Description
Use the display acfp client-info command to display the information about the specified ACFP client(s).
NOTE:
If no ACFP client ID is specified, the information about all the ACFP clients is displayed.
Examples
# Display the information about all the ACFP clients.
<Sysname> display acfp client-info
ACFP client total number: 1
ClientID: 4
Description: IPS
Hw-Info: 1.0
OS-Info: Linux Kernel 2.4.20-8
App-Info: 2.0
Client IP: 10.1.1.1
Client Mode: mirror
Table 1 Output description
Field Description
ACFP client total number Total number of ACFP clients
ClientID Client ID, index of client list
Description Description information of client
Hw-Info Hardware information of the client
OS-Info Operating system information of the client
App-Info Application software information of the client
Client IP Client IP address
Client Mode
Working mode supported on the client:
•redirect: redirect mode
•mirror: mirror mode

5
display acfp policy-info
Syntax
display acfp policy-info [ client client-id [ policy-index ] | dest-interface interface-type interface-number
| in-interface interface-type interface-number | out-interface interface-type interface-number ] [ active |
inactive ] [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
client client-id: Displays the policy sent by the specified ACFP client, where client-id is the ACFP client ID,
in the range of 1 to 2147483647.
policy-index: Policy index, in the range of 1 to 2147483647.
dest-interface interface-type interface-number: Displays all the policies that use the specified interface
(destination interface) for connecting to the ACFP client, where interface-type interface-number is the
interface type and interface number.
in-interface interface-type interface-number: Displays all the policies that use the specified interface as
the inbound interface, where interface-type interface-number is the interface type and interface number.
out-interface interface-type interface-number: Displays all the policies that use the specified interface as
the outbound interface, where interface-type interface-number is the interface type and interface
number.
active: Displays active policies only.
inactive: Displays inactive policies only.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see CLI configuration in the Configuration Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.
Description
Use the display acfp policy-info command to display the ACFP policy information.
NOTE:
•When you use this command to display the policy information sent
by the specified ACFP client, if you
specify the
policy-index argument, the command displays the information about the policy whose
number is
policy-index applied by the ACFP client with an ID of client-id . Otherwise, the command
displays the information about all the policies sent by the ACFP client with an ID of
client-id.
•If neither the active nor inactive keyword is specified, the command displays all the active or inactive
policies.
•If no argument is specified, the command displays the information about all the policies.

6
xamples
# Display the information about the effective policies for all the packets that use GigabitEthernet 1/0/1
as the inbound interface.
<Sysname> display acfp policy-info in-interface gigabitethernet 1/0/1 active
ACFP policy total number: 1
ClientID: 1 Policy-Index: 2
Rule-Num: 20 ContextID: 2007
Exist-Time: 100000(s) Life-Time: 864000(s)
Start-Time: 9:00 End-Time: 12:00
Admin-Status: enable Effect-Status: active
DestIfFailAction: reserve Priority: 4
In-Interface: GigabitEthernet1/0/1
Out-Interface: GigabitEthernet1/0/2
Dest-Interface: Ten-GigabitEthernet1/3/1
Table 2 Output description
Field Description
ACFP policy total number Total number of ACFP policies
ClientID Client ID, index of client list
Policy-Index Policy index
Rule-Num Number of rules under the policy
ContextID Context ID
Exist-Time For how long the policy existed, in seconds
Life-Time Policy expiration time, in seconds
Start-Time Policy start time
End-Time Policy end time
Admin-Status Policy administration status
Effect-Status Whether the policy is effective.
DestIfFailAction
If the policy dest-interface is down, the action to all rules under the policy
will be either of the following one:
•delete: Keep the redirected and mirrored packets being forwarded
(for forwarding first devices, select the delete action);
•reserve: Discard the redirected and mirrored packets (for security first
devices, select the reserve action).
Priority Priority of a policy, number notation, in the range of 1 to 8 (the bigger the
number, the higher the priority).
In-Interface Inbound interface of the packet
Out-Interface Outbound interface of the packet
Dest-Interface Interface connected to the ACFP client

7
display acfp rule-info
Syntax
display acfp rule-info { in-interface [ interface-type interface-number ] | out-interface [ interface-type
interface-number ] | policy [ client-id policy-index ] } [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
in-interface: Displays ACFP rule information in order of inbound interface. The ACFP rule information
which does not include the inbound interface is not displayed.
out-interface: Displays ACFP rule information in order of outbound interface. The ACFP rule information
which does not include the outbound interface is not displayed.
interface-type interface-number: Specifies an interface by its type and number.
policy: Displays the ACFP rule information in order of policy.
client-id: ACFP client ID, in the range of 1 to 2147483647.
policy-index: Policy index, in the range of 1 to 2147483647.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see CLI configuration in the Configuration Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.
Description
Use the display acfp rule-info command to display ACFP rule information.
NOTE:
•When you use this command to display ACFP rule information in order of policy, if you specify neither
client ID nor policy index, the rule information of all the policies is displayed.
•When you use this command to display ACFP rule information in order of outbound/inbound interface,
if you specify no interface, the rule information for all the inbound interfaces or outbound interfaces is
displayed.
Examples
# Display ACFP rule information in order of inbound interface.
<Sysname> display acfp rule-info in-interface gigabitethernet 1/0/1
In-Interface: GigabitEthernet1/0/1
ACFP rule total number: 1
ClientID:2 Policy-Index:2 Rule-Index:5
SMAC:00-01-02-03-04-05 DMAC:01-02-03-04-05-06
StartVLAN:2000 EndVLAN:2004

8
PackRate:128 Kbps
Action:rate Status:active OperationStatus:succeeded
# Display ACFP rule information in order of policy.
<Sysname> display acfp rule-info policy 1 1
ACFP Rule total number: 1
ClientID:1 Policy-Index:1 Rule-Index:1
SIP:192.168.132.122 SMask:0.0.0.255 SPort:65500 to 65535
DIP:192.168.112.115 DMask:0.0.0.255 DPort:65500 to 65535
Protocol:ipinip Fragment:false DSCP:AF11
Action:redirect Status:inactive OperationStatus:succeeded
Table 3 Output description
Field Description
In-Interface Inbound interface of the packet
ACFP rule total number Total number of ACFP rules
ClientID Client ID, index of client list
Policy-Index Policy index
Rule-Index Rule index
SMAC Source MAC address
DMAC Destination MAC address
StartVLAN Start VLAN of the source VLAN
EndVLAN End VLAN of the source VLAN
PackRate Value of the restricted rate of packets, in kbps.
SIP Source IP address
SMask Inverse mask of source IP address
SPort Source port number
DIP Destination IP address
DMask Inverse mask of destination IP address
DPort Destination port number
Protocol Protocol of the packet: GRE, ICMP, IGMP, IPinIP, OSPF, TCP, UDP, IP,
and so on.
Fragment
Whether the packet is a fragment:
•true: Indicates the packet is a fragment
•false: Indicates all the packets, not concerned about whether the
packet is a fragment or not
ToS Type of Service, indicated by a number in the range of 0 to 15
Pre Packet precedence, indicated by a number in the range of 0 to 7
DSCP
Differentiated Services Code Point, indicated by characters for Be, Ef,
Af11, Af12, Af13, Af21, Af22, Af23, Af31, Af32, Af33, Af41, Af42,
Af43, Cs1, Cs2, Cs3, Cs4, Cs5, Cs6, and Cs7 and indicated by a
number in the range 0 to 63 for other code points

9
Field Description
TCPFlag The value is six bits, which represents URG, ACK, PSH, RST, SYN, and
FIN respectively from low to high.
TCPMask
The value is six bits, which represents URG mask, ACK mask, PSH mask,
RST mask, SYN mask, and FIN mask respectively from low to high.
For each bit, the value 1 indicates that this bit is concerned, and the value
0 indicates that this bit is not concerned.
Action
Action, including:
•permit
•deny
•mirror
•redirect
•rate: rate limit
Status Rule status: active or inactive
OperationStatus Rule application status: succeeded or failed
display acfp server-info
Syntax
display acfp server-info [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see CLI configuration in the Configuration Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.
Description
Use the display acfp server-info command to display ACFP server information.
Examples
# Display ACFP server information.
<Sysname> display acfp server-info
Server-Info: ipserver redirect mirror
Max Life-Time: 2147483647(s)
PersistentRules: false
ContextType: HGPlus-context

10
Table 4 Output description
Field Description
Server-Info
ACFP client working mode supported by the ACFP server:
•redirect: redirect mode
•mirror: mirror mode
Max Life-Time Maximum expiration time (in seconds) of the collaboration policy
supported by the server
PersistentRules Whether the server supports permanent collaboration rules.
ContextType
Context ID types supported by the server:
•no-context: No context ID is carried.
•HG-context: Carrying the preamble HG as the context ID.
•HGPlus-context: Carrying the preamble HGPlus as the context ID.
•FlowID-context: Carrying the preamble Flow ID as the context ID.
•VLANID-context: Carrying VLAN ID as the context ID.
The S5800&S5820X switches support carrying the preamble HGPlus as
the context ID (the HGPlus-context) only.

11
ACSEI configuration commands
acsei client close
Syntax
acsei client close client-id
View
ACSEI server view
Default level
2: System level
Parameters
client-id: ID of the ACSEI client to be closed. An ACSEI client ID is assigned by the ACSEI server, which
ranges from 1 to 10.
Description
Use the acsei client close command to close the specified ACSEI client.
Examples
# Close ACSEI client 1.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client close 1
acsei client reboot
Syntax
acsei client reboot client-id
View
ACSEI server view
Default level
2: System level
Parameters
client-id: ID of the ACSEI client to be restarted, which ranges from 1 to 10.
Description
Use the acsei client reboot command to restart the specified ACSEI client.
Examples
# Restart ACSEI client 1.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client reboot 1

12
acsei server
Syntax
acsei server
View
System view
Default level
2: System level
Parameters
None
Description
Use the acsei server command to enter ACSEI server view.
Examples
# Enter ACSEI server view.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server]
acsei server enable
Syntax
acsei server enable
undo acsei server enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the acsei server enable command to enable ACSEI server.
Use the undo acsei server enable command to disable ACSEI server.
By default, ACSEI server is disabled.
Examples
# Enable ACSEI server.
<Sysname> system-view
[Sysname] acsei server enable