H3C S9500 Series User manual

H3C S9500 Series Routing Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-08165E-20081225-C-1.24
Product Version: S9500-CMW310-R1648

Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means
without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot,
Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,
Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and
HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their
respective owners.
Notice
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents, but
all statements, information, and recommendations in this document do not constitute
the warranty of any kind, express or implied.
Technical Support
[e-mail]
http://www.h3c.com

About This Manual
Organization
H3C S9500 Series Routing Switches Configuration Manual is organized as follows:
Part Contents
00 Product Overview includes Obtaining the Documentation, Product
Features, and Features.
01 Access Volume
includes Ethernet Port Configuration, POS Port
Configuration, Link Aggregation Configuration, Port
Isolation Configuration, VLAN Configuration, MAC
Address Table Management Configuration, GVRP
Configuration, QinQ Configuration, Ethernet Port
Loopback Detection Configuration, DLDP Configuration,
Ethernet OAM Configuration, Smart Link and Monitor
Link Configuration, MSTP Configuration, BPDU Tunnel
Configuration, HVRP Configuration, RRPP
Configuration and RPR Configuration.
02 IP Services Volume
includes ARP Configuration, IP Address Configuration,
VRRP Configuration, DHCP Configuration, DNS
Configuration, UDP Helper Configuration, NAT
Configuration, IP Performance Configuration and URPF
Configuration.
03 IP Routing Volume
includes IP Routing Protocol Overview, Static Route
Configuration, RIP Configuration, OSPF Configuration,
ISIS Configuration, BGP Configuration, IP Route Policy
Configuration, Route Capacity Configuration and
Recursive Routing Configuration.
04 IP Multicast Volume
includes Multicast Overview, Common Multicast
Configuration, IGMP Snooping Configuration, IGMP
Configuration, PIM Configuration, Multicast VLAN
Configuration, MSDP Configuration and MBGP
Configuration.
05 MPLS VPN Volume
includes MPLS Configuration, MPLS VLL Configuration,
MPLS VPLS Configuration, MPLS L3VPN Configuration,
MPLS OAM Configuration and MPLS Hybrid Insertion
Configuration.
06 QoS ACL Volume includes QoS Configuration and ACL Configuration.
07 Security Volume
includes Protocol Port Security Configuration, 802.1X
Configuration , AAA RADIUS HWTACACS
Configuration ,Password Control Configuration, SSH
Configuration, IDS Linkage Configuration, Portal
Configuration, VBAS Configuration and Traffic
Accounting Configuration.

Part Contents
08 System Volume
includes Command Line Interface Configuration, Login
and User Interface Configuration, FTP and TFTP
Configuration, HA Configuration, NQA Configuration,
NetStream Configuration, NTP Configuration, RMON
Configuration, SNMP Configuration, Packet Statistics
Accounting Configuration, Device Management
Configuration, Configuration File Management
Configuration, File System Management Configuration,
Cluster Management Configuration, System
Maintenance and Debugging Configuration, Information
Center Configuration, PoE Configuration, Clock Module
Configuration, ACSEI Server Configuration and OAP
Module Configuration.
09 Acronyms Offers the acronyms used in this manual.
Conventions
The manual uses the following conventions:
I. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
&<1-n> The argument(s) before the ampersand (&) sign can be
entered 1 to n times.
# A line starting with the # sign is comments.

II. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
<OK>.
[ ] Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New
User] window.
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
III. Symbols
Convention Description
Warning Means reader be extremely careful. Improper operation
may cause bodily injury.
Caution Means reader be careful. Improper operation may cause
data loss or damage to equipment.
Note Means a complementary description.
Related Documentation
In addition to this manual, each H3C S9500 Series Routing Switches documentation
set includes the following:
Manual Description
H3C S9500 Series Routing Switches
Installation Manual
It introduces the installation procedure,
commissioning, maintenance and
monitoring of the S9500 series routing
switches.
H3C S9500 Series Routing Switches
Command Manual
It includes Feature List and Command
Index, Access Volume, IP Service
Volume, IP Routing Volume, IP Multicast
Volume, MPLS VPN Volume, QoS ACL
Volume, Security Volume, and System
Volume.
Obtaining Documentation
You can access the most up-to-date H3C product documentation on the World Wide
Web at this URL: http://www.h3c.com.
The following are the columns from which you can obtain different categories of product

documentation:
[Products & Solutions]: Provides information about products and technologies.
[Technical Support & Document > Technical Documents]: Provides several categories
of product documentation, such as installation and operation.
[Technical Support & Document > Product Support > Software]: Provides the
documentation released with the software version.
Documentation Feedback
You can e-mail your comments about product documentation to [email protected].
We appreciate your comments.

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Table of Contents
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROMs Shipped with the Devices.................................................................................1-1
1.2 H3C Website......................................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-1
Chapter 2 Product Features .........................................................................................................2-1
2.1 Introduction to Product.......................................................................................................2-1
2.2 Feature Lists......................................................................................................................2-1
Chapter 3 Features........................................................................................................................3-1
3.1 Access Volume..................................................................................................................3-1
3.2 IP Services Volume ...........................................................................................................3-3
3.3 IP Routing Volume.............................................................................................................3-5
3.4 IP Multicast Volume...........................................................................................................3-6
3.5 MPLS VPN Volume ...........................................................................................................3-7
3.6 QoS ACL Volume...............................................................................................................3-8
3.7 Security Volume.................................................................................................................3-9
3.8 System Volume................................................................................................................3-11

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 1 Obtaining the Documentation
1-1
Chapter 1 Obtaining the Documentation
H3C Technologies Co., Ltd. provides various ways for you to obtain documentation,
through which you can obtain the product documentations and those concerning newly
added new features. The documentations are available in one of the following ways:
zCD-ROMs shipped with the devices
zH3C website
zSoftware release notes
1.1 CD-ROMs Shipped with the Devices
H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete
product document set, including the operation manual and command manual. After
installing the reader program provided by the CD-ROM, you can search for the desired
contents in a convenient way through the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. For the latest software documentation, go to the H3Cwebsite.
1.2 H3C Website
Perform the followingsteps to query and download the product documentation from the
H3C website.
Table 1-1 Download documentation from the H3C website
How to apply for an
account
Access the homepage of H3C at http://www.h3c.com and
click Registration at the top right. In the displayed page,
provide your information and click Submit to register.
How to get
documentation
In the homepage, select Technical Support & Document
> Technical Documents from the navigation bar at the top.
Select a product for its documents.
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 2 Product Features
2-1
Chapter 2 Product Features
2.1 Introduction to Product
The S9500 Series Routing Switches (hereinafter referred to as the S9500 series) are
developed by Hangzhou H3C Technologies Co., Ltd. (H3C) for use on
business-oriented enterprise networks, the distribution layer of large MANs, the core
layer of small MANs, and the backbone of large enterprise networks and campus
networks. They can serve as switching cores and convergence centers.
2.2 Feature Lists
The S9500 series support abundant features and the related documents are divided
into the volumes as listed in Table 2-1.
Table 2-1 Feature list
Volume Features
Ethernet Port POS Port Link
Aggregation Port Isolation
VLAN MAC Address
Table
Management GVRP QinQ
Ethernet Port
Loopback
Detection DLDP Ethernet OAM
Smart Link and
Monitor Link
MSTP BPDU Tunnel HVRP RRPP
Access
Volume
RPR
ARP IP Address VRRP DHCP
DNS UDP Helper NAT IP
Performance
IP Services
Volume
URPF
IP Routing
Protocol
Overview Static Route RIP OSPF
ISIS BGP
IP Route
Policy Route Capacity
IP Routing
Volume
Recursive
Routing

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 2 Product Features
2-2
Volume Features
Multicast
Overview Common Multicast IGMP Snooping IGMP
IP Multicast
Volume PIM Multicast
VLAN MSDP MBGP
MPLS MPLS VLL MPLS VPLS MPLS L3VPN
MPLS VPN
Volume MPLS OAM MPLS Hybrid
Insertion
QoS ACL
Volume QoS ACL
Protocol Port
Security 802.1x AAA RADIUS HWTACACS Password Control
SSH IDS Linkage Portal VBAS
Security
Volume Traffic
Accounting
Command
Line Interface Login and User Interface FTP and TFTP HA
NQA NetStream NTP RMON
SNMP Packet Statistics
Accounting
Device
Management
Configuration
File
Management
File System
Management Cluster Management
System
Maintenance
and
Debugging
Information
Center
System
Volume
PoE
Configuration Clock Module ACSEI Server OAP Module

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-1
Chapter 3 Features
The following sections provide an overview of the main features of each module
supported by the S9500 series.
3.1 Access Volume
Table 3-1 Features in Access volume
Features
(operation
manual) Description
Ethernet Port The volume describes:
zEthernet port overview
zEthernet port configuration
POS Port
Packet over SONET/SDH (POS) is a technology used in MAN
(metropolitan area network) and WAN (wide area network) for
data packet transmission. The volume describes:
zPOS port overview
zPOS port configuration
Link Aggregation
Link aggregation means aggregating several ports together
into an aggregation group. The volume describes:
zLink aggregation overview and types
zIntroduction to LACP
zLink aggregation configuration
Port Isolation
Using the port isolation feature, you can place different user
ports into the same VLAN. The volume describes:
zPort isolation overview
zPort isolation configuration
VLAN
A Virtual Local Area Network (VLAN) groups the devices in a
LAN logically into segments to form virtual workgroups. The
volume describes:
zVLAN overview and configuration
zVLAN types
zSuper VLAN overview and configuration
zIsolate-user-VLAN overview and configuration
MAC Address
Table Management
A switch maintains a MAC address table for fast forwarding
packets. The volume describes:
zMAC address table overview
zMAC address table management
zStatic multicast MAC address group overview and
configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-2
Features
(operation
manual) Description
GVRP
GVRP is a GARP application. The volume describes:
zIntroduction to GARP and GVRP
zGVRP configuration
zGARP timer overview and configuration
QinQ
QinQ is a technique that enables packets to be transmitted
across the operators’ backbone networks with VLAN tags of
private networks nested in those of public networks. The
volume describes:
zQinQ fundamentals
zQinQ configuration
Ethernet Port
Loopback
Detection
You may configure the system to regularly inspect ports for
loop. Once detecting loopback on a port, the switch sends a
trap and shuts down the port dependingon your configuration.
The volume describes:
zLoopback detection overview
zLoopback detection configuration
DLDP
Sometimes, unidirectional links may appear in networks.
DLDP can be used to monitor the link state. The volume
describes:
zIntroduction to DLDP
zDLDP configuration
Ethernet OAM
Operations, administration and maintenance (OAM) is a
Layer 2 protocol, used to monitor and solve network
problems. The volume describes:
zEthernet OAM overview
zEthernet OAM configuration
Smart Link and
Monitor Link
Smart link is designed for networking implementations with
two uplinks. It allows for uplink redundancy and fast
switchover between the active and the standby links. Monitor
Link is a port collaboration solution introduced to complement
smart link. It is used to monitor uplinks. The volume describes:
zIntroduction to smart link and monitor link and their
application scenarios
zSmart link configuration
zMonitor link configuration
MSTP
MSTP is compatible with STP and RSTP. The volume
describes:
zIntroduction to MSTP
zMSTP configuration
BPDU Tunnel
The BPDU tunneling feature enables geographically
segmented customer network to transmit BPDU packets
transparently over the specified VLAN on the service provider
network. The volume describes:
zBPDU tunnel overview
zBPDU tunnel configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-3
Features
(operation
manual) Description
HVRP
With the continuous increase of network users, the current
number of MAC addresses that a switch can learn may no
longer meet the actual demands. HVRP was introduced to
address the problem. The volume describes:
zIntroduction to HVRP
zHVRP configuration
RRPP
RRPP is a link layer protocol designed for Ethernet rings.
RRPP can prevent broadcast storms caused by data loops
when the Ethernet rings are healthy, and can rapidly restore
the communication paths between nodes after a link is
disconnected on the Ethernet ring network. The volume
describes:
zRRPP overview and application scenarios
zRRPP configuration
RPR
RPR is a new MAC layer protocol designed for transferring
mass data services over MANs. The volume describes:
zRPR overview
zRPR port configuration
zRPR Layer 2 tunnel extended application
zVRRP over RPR configuration
zRPR intersecting rings configuration
zDistributed RPR configuration
3.2 IP Services Volume
Table 3-2 Features in the IP Services volume
Features
(operation
manual) Description
ARP
Address Resolution Protocol (ARP) is used to resolve an IP
address into a data link layer address. The volume describes:
zARP configuration
zARP table size configuration
zARP attack prevention configuration
zIP packet attack prevention configuration
IP Address
An IP address is a 32-bit address allocated to a network
interface on a device that is attached to the Internet. The
volume describes:
zIntroduction to IP addresses
zIP address configuration
zIP address protection configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-4
Features
(operation
manual) Description
VRRP
The Virtual Router Redundancy Protocol (VRRP) is a
fault-tolerant protocol. The volume describes:
zIntroduction to VRRP
zVRRP configuration
DHCP
DHCP is built on a client-server model, in which the client
sends a configuration request and then the server returns a
reply to send configuration parameters such as an IP address
to the client. The volume describes:
zDHCP overview
zDHCP server configuration
zDHCP relay agent configuration
zDHCP snooping configuration
DNS
Used in the TCP/IP application, Domain Name System (DNS)
is a distributed database which provides the translation
between domain name and the IP address. The volume
describes:
zIntroduction to DNS
zDNS configuration
UDP Helper
UDP Helper (UDPH) functions as a relay agent that converts
UDP broadcast packets into unicast packets and forwards
them to a specified server. The volume describes:
zUDP Helper overview
zUDP Helper configuration
NAT
NAT is the procedure of translating the IP address in the
header of an IP data packet into another IP address. The
volume describes:
zNAT overview
zNAT configuration
IP Performance
In some network environments, you need to adjust the IP
parameters to achieve best network performance. The volume
describes:
zIP performance configuration
URPF
Unicast reverse path forwarding (URPF) serves as a
safeguard against source address spoofing attacks. The
volume describes:
zURPF overview
zURPF configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-5
3.3 IP Routing Volume
Table 3-3 Features in the IP Routing volume
Features
(operation
manual) Description
IP Routing Protocol
Overview
The volume describes:
zIntroduction to IP routing and routing table
zRouting management policy
Static Route
A static route is manually configured by the administrator.
The proper configuration and usage of static routes can
improve network performance and ensure bandwidth for
important network applications. The volume describes:
zIntroduction to static route
zStatic route configuration
RIP
Routing Information Protocol (RIP) is a simple Interior
Gateway Protocol (IGP), mainly used in small-sized
networks. The volume describes:
zIntroduction to RIP
zRIP configuration
OSPF
Open Shortest Path First (OSPF) is an Interior Gateway
Protocol based on the link state developed by IETF. The
volume describes:
zIntroduction to OSPF
zOSPF overview
zOSPF GR overview
zOSPF configuration
ISIS
Intermediate System-to-Intermediate System (IS-IS) is a link
state protocol, which uses the shortest path first (SPF)
algorithm. The volume describes:
zIntroduction to integrated IS-IS
zIS-IS configuration
BGP
Border gateway protocol (BGP) is an inter-autonomous
system (inter-AS) dynamic route discovery protocol. The
volume describes:
zIntroduction to BGP and MBGP
zBGP configuration
IP Route Policy
For implementing the route policy, you need to define a set of
matching rules by specifying the characteristics of the routing
information to be filtered. The volume describes:
zFilters overview
zRoute policy configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-6
Features
(operation
manual) Description
Route Capacity
When the size of the routing table increases to some degree,
you can set the specifications of routing tables and VRFs
(VPN routing and forwarding instances) in the current system
to maintain performance. The volume describes:
zRoute capacity overview
zRoute capacity configuration
Recursive Routing
Recursive routing can make route entries flexible,
independent of a specific interface. The volume describes:
zRecursive routing overview
zRecursive routing configuration
3.4 IP Multicast Volume
Table 3-4 Features in IP Multicast volume
Features
(operation
manual) Description
Multicast Overview
The volume describes the main concepts in multicast:
zMulticast basics
zIntroduction to IP multicast address
zIP multicast protocols
zRPF mechanism for IP multicast packets
Common Multicast
The volume describes:
zEnable multicast routing
zConfigure capacity threshold for a multicast routing table
zConfiguring broadcast/multicast suppression
IGMP Snooping
Running at the data link layer, IGMP Snooping is a multicast
control mechanism on the Layer 2 Ethernet switch and it is
used for multicast group management and control. The
volume describes:
zIGMP snooping overview
zIGMP snooping configuration
IGMP
Internet Group Management Protocol (IGMP) is a protocol in
the TCP/IP suite responsible for management of IP multicast
members. The volume describes:
zIGMP overview
zIGMP proxy overview and configuration
zIGMP configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-7
Features
(operation
manual) Description
PIM
PIM is widely used multicast routing protocols. It discovers
multicast source and delivers information to the receivers.
The volume describes:
zIntroduction to PIM-DM and PIM-SM
zPIM-DM configuration
zPIM-SM configuration
Multicast VLAN
When users in different VLANs request the service, multicast
flow is duplicated in each VLAN and thus a great deal of
bandwidth is wasted. To solve this problem, you can add
switch ports to a multicast VLAN and enable IGMP Snooping
to allow users in different VLANs to share the same multicast
VLAN. The volume describes:
zMulticast VLAN overview
zMulticast VLAN configuration
zMulticast VLAN plus configuration
MSDP
Multicast source discovery protocol (MSDP) describes
interconnection mechanism of multiple PIM-SM domains. It is
used is to discover multicast source information in other
PIM-SM domains. The volume describes:
zMSDP overview
zMSDP configuration
MBGP
MBGP enables unicast and multicast routing information to
be exchanged through the same process but stored in
different routing tables. The volume describes:
zMBGP extension overview
zMBGP extension configuration
3.5 MPLS VPN Volume
Table 3-5 Features in the MPLS VPN volume
Features
(operation
manual) Description
MPLS
MPLS (Multiprotocol Label Switching) brings together the
advantages of the connectionless control with IP and the
connection-oriented forwarding with ATM. In addition to the
support from IP routing and control protocols, its powerful
and flexible routing functions allows it to accommodate to
various emerging applications. The volume describes:
zMPLS overview
zBasic MPLS concepts
zMPLS architecture

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-8
Features
(operation
manual) Description
MPLS VLL
MPLS VLL provides transparently transmission of Layer 2
data of users over an MPLS network. The volume describes:
zMPLS VLL overview
zCCC MPLS VLL configuration
zMartini MPLS VLL configuraiton
zKompella MPLS VLL configuration
MPLS VPLS
VPLS provides the operators using point-to-point L2VPN with
a better solution. The volume describes:
zVPLS overview
zVPLS basic configuration
zVPLS characteristics configuration
MPLS L3VPN
Using the MPLS technology, service providers can
implement the IP-based L3VPN services. The volume
describes:
zMPLS L3VPN overview
zMPLS L3VPN configuration
MPLS OAM
MPLS OAM is intended for the operation, administration and
maintenance on the MPLS layer. The volume describes:
zMPLS OAM overview
zMPLS OAM configuration
MPLS Hybrid
Insertion
The MPLS hybrid insertion feature is used to enable
deployment of MPLS VPN services on cards that do not
support MPLS. The volume describes:
zMPLS hybrid insertion overview
zRestrictions on MPLS hybrid insertion networking
zMPLS hybrid insertion configuration
3.6 QoS ACL Volume
Table 3-6 Features in the QoS ACL volume
Features
(operation
manual) Description
QoS
The volume describes:
zQoS overview
zQoS configurations (traffic policing, traffic shaping, traffic
scheduling, port mirroring and so on)
zPort token configuration
zWAN-QoS configuration
zACL configuration (VLAN-ACL, EACL, global ACL and so
on)

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-9
Features
(operation
manual) Description
ACL
Access Control Lists (ACLs) are used to filter packets
passing through network devices. The volume describes:
zACL overview and ACL types
zACL configuration
3.7 Security Volume
Table 3-7 Features in the Security volume
Features
(operation
manual) Description
Protocol Port
Security
The protocol port security function is short for TCP, UDP
protocol port shutdown check function. It reduces the
unnecessary communications between the boards and the
CPU operation of the SRPU, and enhances the
anti-interference ability of the switch to the packet. The
volume describes:
zIntroduction to protocol port security
zProtocol port security configuration
802.1x
IEEE 802.1x (hereinafter simplified as 802.1x) is a
port-based network access control protocol that is used as
the standard for LAN user access authentication. The volume
describes:
z802.1x overview
z802.1x configuration
AAA RADIUS
HWTACACS
Authentication, Authorization and Accounting (AAA) provide
a uniform framework used for configuring these three security
functions to implement the network security management.
The volume describes:
zIntroduction to AAA, RADIUS and HWTACACS
zAAA configuration
zRADIUS configuration
zHWTACACS configuration
Password Control
S9500 series switches provide the password control function.
Before a user can log in to the switch, a system login
password must be configured. After a password is
configured, the user must enter the password each time he or
she wants to log in to the switch. The user and can
successfully log in to the switch and proceed with operations
only if he or she passes the authentication. If the password
authentication fails, the user will not be able to log in to the
switch. The volume describes:
zIntroduction to password configuration
zPassword control configuration

Operation Manual – Product Overview
H3C S9500 Series Routing Switches Chapter 3 Features
3-10
Features
(operation
manual) Description
SSH
When a user telnets to the switch from an insecure network,
the SSH feature can provide secure information and powerful
authentication functionality, thereby protecting the switch
from attacks. The volume describes:
zSSH terminal service overview
zSFTP service configuration
IDS Linage
The switch supports IDS linkage, namely cooperation
between the switch and IDS, to ensure effectively the security
of the entire network. The volume describes:
zIDS linkage overview
zIDS linkage configuration
Portal
Portal is also known as portal website, and Portal
authentication is also known as the Web authentication. The
volume describes:
zPortal overview
zBasic Portal configuration
zPortal Authentication-free User and Free IP Address
Configuration
zPortal Rate Limit Function Configuration
VBAS
Virtual Band Access Server (VBAS) protocol provides a
method for the band access server to acquire band access to
the user port number, and solves the problem that a server
can not confirm a user’s information according to the IP after
the band access user (including ADSL, VDSL and LAN) uses
IP to access to the server. The volume describes:
zVBAS overview
zVBAS configuration
Traffic Accounting
Traffic accounting is to account the traffic generated by the
authenticated online users in their switches, and send the
traffic accounting statistics to the accounting servers to
charge the internet users. The volume describes:
zTraffic accounting overview
zTraffic accounting configuration