H3C S9500 Series Installation instructions

H3C S9500 Series Routing Switches
Command Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-08194H-20080520-C-2.03
Product Version: S9500-CMW520-R2132

Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
To obtain the latest information, please access:
http://www.h3c.com
Technical Support
[e-mail]
http://www.h3c.com

About This Manual
Related Documentation
In addition to this manual, each H3C S9500 Series Routing Switches documentation
set includes the following:
Manual Description
H3C S9500 Series Routing
Switches Installation Manual
It introduces the installation procedure,
commissioning, maintenance and monitoring of
the S9500 series routing switches.
H3C S9500 Series Routing
Switches Operation Manual
It includes Product Overview, Access Volume,
IP Service Volume, IP Routing Volume, IP
Multicast Volume, MPLS VPN Volume, QoS
ACL Volume, Security Volume, System
Volume , OAA Volume and Acronyms.
Organization
H3C Command Manual is organized as follows:
Part Contents
00 Feature List and
Command Index includes Feature List and Command Index.
01 Access Volume
includes Ethernet Interface Commands, POS Interface
Commands, GVRP Commands, Link Aggregation
Commands, Port Mirroring Commands, RPR Commands,
Ethernet OAM Commands, MSTP Commands, VLAN
Commands, QinQ Commands, BPDU Tunneling
Commands, and Port Isolation Commands.
02 IP Services
Volume
includes ARP Commands, DHCP Commands, DNS
Commands, IP Addressing Commands, IP Performance
Commands, UDP Helper Commands, IPv6 Basics
Commands, Dual Stack Commands, Tunneling
Commands, and Adjacency Table Command.
03 IP Routing Volume
includes IP Routing Table Display Commands, BGP
Commands, IS-IS Commands, OSPF Commands, RIP
Commands, Routing Policy Commands, Static Routing
Commands, IPv6 BGP Commands, IPv6 IS-IS
Commands, IPv6 OSPFv3 Commands, IPv6 RIPng
Commands, and IPv6 Static Routing Commands.

Part Contents
04 IP Multicast
Volume
includes Multicast Routing and Forwarding Commands,
IGMP Snooping Commands, IGMP Commands, PIM
Commands, MSDP Commands, IPv6 Multicast Routing,
and Forwarding Commands, MLD Snooping Commands,
MLD Commands, IPv6 PIM Commands, Multicast VLAN
Commands.
05 MPLS VPN
Volume
includes MPLS Basics Commands, MPLS TE Commands,
VPLS Commands, MPLS L2VPN Commands, MPLS
L3VPN Commands, MPLS Hybrid Insertion Commands,
and GRE Commands.
06 QoS ACL Volume includes QoS Commands and ACL Commands.
07 Security Volume
includes 802.1x Commands, AAA, RADIUS HWTACACS
Commands, MAC Authentication Commands, L3+NAT
Commands, Password Control Commands, SSH2.0
Commands, and Portal Commands.
08 System Volume
includes GR Commands, VRRP Commands, HA
Commands, Device Management Commands, NQA
Commands, NetStream Commands, NTP Commands,
RMON Commands, SNMP Commands, File System
Management Commands, System Maintaining and
Debugging Commands, Basic System Configuration
Commands, Information Center Commands, User
Interface Commands, MAC Address Table Management
Commands, PoE Commands, and Clock Monitoring
Commands.
09 OAA Volume includes OAP Module Commands and ACSEI Commands.
10 Unsupported
Commands List of Unsupported Commands.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.

Convention Description
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.
II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.

Command Manual
H3C S9500 Series Routing Switches OAA Volume Organization
Manual Version
T2-08194H-20080530-C-2.03
Product Version
S9500-CMW520-R2132
Organization
The OAA Volume is organized as follows:
Features (command
manual) Description
OAP Module Introduces the commands for OAP module configuration.
ACSEI Introduces the commands for ACSEI configuration.

Command Manual – OAP Module
H3C S9500 Series Routing Switches Table of Contents
i
Table of Contents
Chapter 1 OAP Module Configuration Commands....................................................................1-1
1.1 OAP Module Configuration Commands ............................................................................1-1
1.1.1 oap connect slot......................................................................................................1-1
1.1.2 oap reboot slot.........................................................................................................1-2

Command Manual – OAP Module
H3C S9500 Series Routing Switches Chapter 1 OAP Module Configuration Commands
1-1
Chapter 1 OAP Module Configuration Commands
1.1 OAP Module Configuration Commands
1.1.1 oap connect slot
Syntax
oap connect slot slot-number
View
User view
Default Level
2: System level
Parameters
slot-number: Number of the slot where an OAP module resides.
Description
Use the oap connect slot command to switch from the command line interface on the
device to the operating system of the OAP module, and thus you can manage the
system of the OAP module.
You can press Ctrl+k to return from the operating system on the OAP module to the
command line interface on the device.
Examples
# Switch from the command line interface on the device to the operating system of the
OAP module in slot 3.
<Sysname> oap connect slot 3
Connected to OAP!
# After viewing the above information, press Enter to log in to the operating system of
the OAP module.
<H3C>
# Press Ctrl+k to return from the operating system on the OAPmodule to the command
line interface on the device.
<Sysname>

Command Manual – OAP Module
H3C S9500 Series Routing Switches Chapter 1 OAP Module Configuration Commands
1-2
1.1.2 oap reboot slot
Syntax
oap reboot slot slot-number
View
User view
Default Level
2: System level
Parameters
slot-number: Number of the slot where an OAP module resides.
Description
Use the oap reboot slot command to reset the system on an OAP module, which is
equal to resetting the OAP module by pressing the reset button on the OAP module.
It is recommended to save the data on the operating system on the OAP module and
shut down the operating system to avoid service interruption and hardware data loss.
After the reset, the operating system on the OAP module reboots automatically.
Examples
# Reset the system on the OAP module in slot 3.
<Sysname> oap reboot slot 3
This command will recover the OAP from shutdown or other failed state.
Warning: This command may lose the data on the hard disk if the OAP is not being
shut down!
Continue? [Y/N]:y
Reboot OAP by command.

Command Manual – ACSEI
H3C S9500 Series Routing Switches Table of Contents
i
Table of Contents
Chapter 1 ACSEI Configuration Commands ..............................................................................1-1
1.1 ACSEI Server Configuration Commands ..........................................................................1-1
1.1.1 acsei client close.....................................................................................................1-1
1.1.2 acsei client reboot ...................................................................................................1-1
1.1.3 acsei server.............................................................................................................1-2
1.1.4 acsei server enable.................................................................................................1-2
1.1.5 acsei timer clock-sync.............................................................................................1-3
1.1.6 acsei timer monitor..................................................................................................1-4
1.1.7 debugging acsei server...........................................................................................1-4
1.1.8 debugging acsei-client ............................................................................................1-6
1.1.9 display acsei client info .........................................................................................1-10
1.1.10 display acsei client summary ..............................................................................1-12

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-1
Chapter 1 ACSEI Configuration Commands
1.1 ACSEI Server Configuration Commands
1.1.1 acsei client close
Syntax
acsei client close client-id
View
ACSEI server view
Default Level
2: System level
Parameters
client-id: ID of the ACSEI client to be closed. An ACSEI client ID is assigned by the
ACSEI server.
Description
Use the acsei client close command to close the specified ACSEI client.
Examples
# Close ACSEI client 1.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client close 1
1.1.2 acsei client reboot
Syntax
acsei client reboot client-id
View
ACSEI server view
Default Level
2: System level

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-2
Parameters
client-id: ID of the ACSEI client to be restarted.
Description
Use the acsei client reboot command to restart the specified ACSEI client.
Examples
# RestartACSEI client 1.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei client reboot 1
1.1.3 acsei server
Syntax
acsei server
View
System view
Default Level
2: System level
Parameters
None
Description
Use the acsei server command to enterACSEI server view.
Examples
# Enter ACSEI server view.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server]
1.1.4 acsei server enable
Syntax
acsei server enable
undo acsei server enable

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-3
View
System view
Default Level
2: System level
Parameters
None
Description
Use the acsei server enable command to enableACSEI server.
Use the undo acsei server enable command to disable ACSEI server.
By default, ACSEI server is disabled.
Examples
# Enable ACSEI server.
<Sysname> system-view
[Sysname] acsei server enable
1.1.5 acsei timer clock-sync
Syntax
acsei timer clock-sync minutes
undo acsei timer clock-sync
View
ACSEI server view
Default Level
2: System level
Parameters
minutes: Value of the synchronization timer that is used for clock synchronization from
ACSEI server to ACSEI client. It ranges from 0 to 1440 (in minutes), where value 0
specifies to disable the clock synchronization fromACSEI server to ACSEI client.
Description
Use the acsei timer clock-sync command to set the synchronization timer that is used
for clock synchronization fromACSEI server to ACSEI client.
Use the undo acsei timer clock-sync command to restore the default.

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-4
By default, the clock sychronization timer is set to five minutes.
Examples
# Set the clock synchronization timer from ACSEI server toACSEI client to 20 minutes.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei timer clock-sync 20
1.1.6 acsei timer monitor
Syntax
acsei timer monitor seconds
undo acsei timer monitor
View
ACSEI server view
Default Level
2: System level
Parameters
seconds: Value of the monitoring timer that is used forACSEI server to monitor ACSEI
clients. It ranges from 0 to 10 (in seconds), where 0 specifies to disable ACSEI server
from monitoringACSEI client.
Description
Use the acsei timer monitor command to set the monitoring timer for ACSEI server to
monitor ACSEI client.
Use the undo acsei timer monitor command to restore the default.
By default, the monitoring timer is set to 5 seconds.
Examples
# Set the monitor timer for ACSEI server to monitor ACSEI client to 6 seconds.
<Sysname> system-view
[Sysname] acsei server
[Sysname-acsei-server] acsei timer monitor 6
1.1.7 debugging acsei server
Syntax
debugging acsei server { all | error | event | packet }

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-5
undo debugging acsei server { all | error | event | packet }
View
User view
Default Level
2: System level
Parameters
all: All ACSEI debugging.
error: ACSEI error debugging.
event: ACSEI event debugging.
packet: ACSEI packet debugging.
Description
Use the debugging acsei server command to enableACSEI debugging.
Use the undo debugging acsei server command to disable ACSEI debugging.
By default, ACSEI debugging is disabled.
Table 1-1 debugging acsei server error command output description
Field Description
ACSEI Error ACSEI error debugging
description of error Error description
Table 1-2 debugging acsei server packet command output description
Field Description
Sending/ Receiving ACSEI packet ACSEI packets sent/received
Interface: Interface Interface carrying ACSEI client (that is,
interface enabled with ACSEI client)
DstMac: DstMac Destination MAC address of the packet
SrcMac: SrcMac Source MAC address of the packet
FrameType: FrameType Frame type of the packet
ProtocolType: ProtocolType Protocol type of the packet
Reserved: Reserved Reserved bits of the packet protocol
Ver: Version ACSEI version
clientOrserver: 0 or 1 Packet sender, with 0 indicating ACSEI client,
and 1 indicating ACSEI server.

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-6
Field Description
Type: MassagType
Packet type
0X01 represents registration packets.
0X02 represents information notifications.
0X03 represents operation notifications.
0X04 represents monitoring packets.
0X05 represents deregistration packets.
clientID: clientID Identifying with which client the server is communicating. client ID uniquely identifies a
client.
Length: Length Length of the ACSEI packet with the Ethernet
header in the packet excluded
Inner Code: Inner-Code
Inner code of the ACSEI packet:
Request, acknowledgement and deny for a
registration packet
Monitoring request and acknowledgement for
a monitoring packet
Identifier: Identifier Identifier of an ACSEI packet, indicating
packet sequence number.
Length: Length Length of the ACSEI packet with Ethernet
header and ACSEI header excluded
Table 1-3 debugging acsei server event command output description
Field Description
ACSEI Event Event debugging
description of event Event description
Examples
# Enable terminal monitor and all ACSEI debuggings.
<Sysname> terminal monitor
<Sysname> terminal debugging
<Sysname> debugging acsei server all
1.1.8 debugging acsei-client
Syntax
debugging acsei-client { all | error | event | packet }
undo debugging acsei-client { all | error | event | packet }

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-7
View
User view
Default Level
2: System level
Parameters
all: All ACSEI client debugging.
error: ACSEI client error debugging.
event: ACSEI client event debugging.
packet: ACSEI client packet debugging.
Description
Use the debugging acsei-client command to enable ACSEI client debugging.
Use the undo debugging acsei-client command to disableACSEI client debugging.
By default, ACSEI client debugging is disabled.
Table 1-4 debugging acsei-client error command output description
Field Description
ACSEI Client Error ACSEI error debugging
Failed to get client information Failed to get client information locally
Discarding information packet: status is
not Open The information notification packet is discarded because the client is disabled
Discarding information packet: invalid
client ID The information notification packet is discarded because the client ID is invalid
Discarding information packet: invalid
length The information notification packet is discarded because of its invalid length
Discarding information packet: invalid
type The information notification packet is discarded because of its invalid type
Discarding monitor packet: client is not
Open The monitoring packet is discarded because the client is disabled.
Discarding monitor packet: invalid client
ID The monitoring packet is discarded because the client ID is invalid.
Discarding monitor packet: invalid length The monitoring packet is discarded
because of its invalid length
Failed to send monitor ACK packet Failed to send the monitoring ACK
packet.
Discarding monitor packet: invalid
identifier or magic number
The monitoring packet is discarded
because of its invalid identifier or magic
number

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-8
Field Description
Discarding operation packet: status is
not Open The operation notification packet is discarded because the client is disabled
Discarding operation packet: client ID is
wrong The operation notification packet is discarded because the client ID is invalid
Discarding operation packet: length is
wrong The operation notification packet is discarded because of its invalid length
Discarding operation packet: TLV length
is wrong
The operation notification packet is
discarded because of its invalid type
length value (TLV) length
Failed to send unregistered packet Failed to send the deregistration packet
Discarding operation packet: unknown
operation type
The operation notification packet is
discarded because of unknown
operation type
Discarding register response packet:
status is not Reg_Sent
Registration response packet is
discarded because no registration
request was sent from the client
Discarding register response packet:
length is wrong
Registration response packet is
discarded because of invalid packet
length
Discarding register response packet:
identifier is wrong Registration response packet is discarded because of invalid identifier
Discarding register ACK packet: client ID
is wrong Registration ACK packet is discarded because of invalid client ID
Discarding register reject packet: client
ID is wrong Registration reject packet is discarded because of invalid client ID
Discarding register reject packet: invalid
type Registration reject packet is discarded because of invalid packet type
Discarding register reject packet: invalid
length Registration reject packet is discarded because of invalid packet length
Discarding packet: invalid destination
MAC
The received packet is discarded
because of its invalid destination MAC
address
Discarding packet: invalid packet length The received packet is discarded
because of its invalid packet length
Discarding packet: invalid version The received packet is discarded
because of its invalid packet version
Discarding packet: unknown type of
ACSEI protocol The received packet is discarded because of its unknown packet type

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-9
Table 1-5 debugging acsei-client packet command output description
Field Description
Sending ACSEI packet ACSEI packets sent
Receiving ACSEI packet ACSEI packets received
Interface: Interface Interface carrying ACSEI client (that is, interface
enabled with ACSEI client)
DstMac: DstMac Destination MAC address of the packet
SrcMac: SrcMac Source MAC address of the packet
FrameType: FrameType Frame type of the packet
ProtocolType: ProtocolType Protocol type of the packet
Reserved: Reserved Reserved bits of the packet protocol
Ver: acsei-version ACSEI version
clientOrserver: value Packet sender, with 0 indicating ACSEI client,
and 1 indicating ACSEI server.
Type: massage-type
Packet type
0X01 represents registration packets.
0X02 represents information notifications.
0X03 represents operation notifications.
0X04 represents monitoring packets.
0X05 represents deregistration packets.
clientID: client-id
Identifying with which client the server is
communicating. client ID uniquely identifies a
client.
The ID number is valid when it is greater than 0,
except in the registration request packet,
registration reject packet, or deregistration
packet.
Length: length Length of the ACSEI packet with the Ethernet
header in the packet excluded
Inner Code: inner-code
Inner code of the ACSEI packet:
Request, acknowledgement and deny for a
registration packet
Monitoring request and acknowledgement for a
monitoring packet
Identifier: identifier Identifier of an ACSEI packet, indicating packet
sequence number.
Length: length Length of the ACSEI packet with Ethernet
header and ACSEI header excluded

Command Manual – ACSEI
H3C S9500 Series Routing Switches Chapter 1 ACSEI Configuration Commands
1-10
Table 1-6 debugging acsei-client event command output description
Field Description
ACSEI Event Event debugging
Status of client is RegSent The client is sending request
Status of client is Closed The client is disabled
Status of client is Open The client is enabled
ACSEI client is not supported in sub
interface The sub interface does not support the enabling of the ACSEI client.
Examples
# Enable terminal monitor and all ACSEI client debuggings.
<Sysname> terminal monitor
<Sysname> terminal debugging
<Sysname> debugging acsei-client debug showall
1.1.9 display acsei client info
Syntax
display acsei client info [client-id ]
View
Any view
Default Level
1: Monitor level
Parameters
client-id: ID of an ACSEI client whose information is to be displayed.
Description
Use the display acsei client info command to display the ACSEI client information.
The client information is retrieved from the advertisement packet sent by the client, so
that when there is no ACSEI client information, the command displays the information
keywords only.
If executed without the client-id argument, the command displays information about all
the ACSEI clients in order of registration time.
Examples
# Display information aboutACSEI client 1.