Huawei Quidway S3500 Series User manual

Huawei Technologies Proprietary
HUAWEI
1. Getting Started
2. Port
3. VLAN
4. Network Protocol
5. Routing Protocol
6. Multicast
7. QoS/ACL
8. Integrated Management
9. STP
10. Security
11. Reliability
12. System Management
13. Auto Detecting
14. Appendix
Quidway S3500 Series Ethernet Switches
Operation Manual

Huawei Technologies Proprietary
Quidway S3500 Series Ethernet Switches
Operation Manual
Manual Version T2-081666-20050613-C-1.04
BOM 31160966
Huawei Technologies Co., Ltd. provides customers with comprehensive technical support
and service. If you purchase the products from the sales agent of Huawei Technologies Co.,
Ltd., please contact our sales agent. If you purchase the products from Huawei
Technologies Co., Ltd. directly, Please feel free to contact our local office, customer care
center or company headquarters.
Huawei Technologies Co., Ltd.
Address: Administration Building, Huawei Technologies Co., Ltd.,
Bantian, Longgang District, Shenzhen, P. R. China
Postal Code: 518129
Website: http://www.huawei.com

Huawei Technologies Proprietary
Copyright © 2005 Huawei Technologies Co., Ltd.
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks
, HUAWEI, C&C08, EAST8000, HONET, , ViewPoint, INtess, ETS, DMC,
TELLIN, InfoLink, Netkey, Quidway, SYNLOCK, Radium, M900/M1800,
TELESIGHT, Quidview, Musa, Airbridge, Tellwin, Inmedia, VRP, DOPRA,
iTELLIN, HUAWEI OptiX, C&C08iNET, NETENGINE, OptiX, iSite, U-SYS, iMUSE,
OpenEye, Lansway, SmartAX, infoX, and TopEng are trademarks of Huawei
Technologies Co., Ltd.
All other trademarks and trade names mentioned in this manual are the property of
their respective holders.
Notice
The information in this manual is subject to change without notice. Every effort has
been made in the preparation of this manual to ensure accuracy of the contents,
but all statements, information, and recommendations in this manual do not
constitute the warranty of any kind, express or implied.

Huawei Technologies Proprietary
About This Manual
Release Notes
This manual applies to S3526-0025/S3526EF-S3526C-0035/S3528-S3552-0017.
Related Manuals
The related manuals are listed in the following table.
Manual Content
Quidway S3528 Series Ethernet
Switches Installation Manual It provides information for the system installation.
Quidway S3552F Ethernet
Switch Installation Manual It provides information for the system installation.
Quidway S3526 Ethernet
Switch Installation Manual It provides information for the system installation.
Quidway S3526E Ethernet
Switch Installation Manual It provides information for the system installation.
Quidway S3526 FM/FS
Ethernet Switches Installation
Manual It provides information for the system installation.
Quidway S3552 Ethernet
Switch Installation Manual It provides information for the system installation.
Quidway S3526C/S3526E
FM/S3526E FS Ethernet
Switches Installation Manual It provides information for the system installation.
Quidway S3500 Series Ethernet
Switches Command Manual It is used for assisting the users in using various commands.
Organization
There are 14 modules in the manual.
zGetting Started
This module introduces how to access the Ethernet Switch.
zPort
This module introduces Ethernet port and link aggregation configuration.

Huawei Technologies Proprietary
zVLAN
This module introduces VLAN, isolate-user-vlan, GARP, and GVRP configuration.
zNetwork Protocol
This module introduces network protocol configuration, including IP address, ARP,
DHCP, access management and IP performance configuration.
zRouting Protocol
This module introduces routing protocol configuration, including static route, RIP,
OSPF, BGP and routing policy configuration.
zMulticast
This module introduces GMRP, IGMP Snooping, IGMP, PIM-DM and PIM-SM
configuration.
zQoS/ACL
This module introduces QoS/ACL configuration.
zIntegrated Management
This module introduces integrated configuration.
zSTP
This module introduces STP configuration.
zSecurity
This module introduces 802.1X, AAA & RADIUS, HABP and system-guard
configuration.
zReliability
This module introduces VRRP configuration.
zSystem Management
This module introduces system management and maintenance of Ethernet Switch,
including file system management, system maintenance and network
management configuration.
zAuto Detecting
This module introduces the principle and configuration of auto-detecting.
zAppendix
Intended Audience
The manual is intended for the following readers:
zNetwork engineers
zNetwork administrators
zCustomers who are familiar with network fundamentals

Huawei Technologies Proprietary
Conventions
The manual uses the following conventions:
I. General conventions
Convention Description
Arial Normal paragraphs are in Arial.
Boldface Headings are in Boldface.
Courier New
Terminal Display is in Courier New.
II. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
III. GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click
the <OK> button.
[ ] Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New
User] window.

Huawei Technologies Proprietary
Convention Description
/ Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].
IV. Keyboard operation
Format Description
<Key> Press the key with the key name inside angle brackets. For
example, <Enter>, <Tab>, <Backspace>, or <A>.
<Key1+Key2> Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.
<Key1, Key2> Press the keys in turn. For example, <Alt, A> means the
two keys should be pressed in turn.
V. Mouse operation
Action Description
Select Press and hold the primary mouse button (left mouse
button by default).
Click Select and release the primary mouse button without
moving the pointer.
Double-Click Press the primary mouse button twice continuously and
quickly without moving the pointer.
Drag Press and hold the primary mouse button and move the
pointer to a certain position.
VI. Symbols
Eye-catching symbols are also used in the manual to highlight the points worthy of
special attention during the operation. They are defined as follows:
Caution,Warning: Means reader be extremely careful during the operation.
Note: Means a complementary description.

Huawei Technologies Proprietary
HUAWEI
Quidway S3500 Series Ethernet Switches
Operation Manual
Getting Started

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Table of Contents
Huawei Technologies Proprietary
1-1
Table of Contents
Chapter 1 Product Overview ........................................................................................................1-1
1.1 Product Overview............................................................................................................... 1-1
1.2 Function Features.............................................................................................................. 1-2
Chapter 2 Logging in Switch........................................................................................................ 2-1
2.1 Setting up Configuration Environment via the Console Port ............................................. 2-1
2.2 Setting up Configuration Environment through Telnet....................................................... 2-3
2.2.1 Connecting a PC to the Switch through Telnet ....................................................... 2-3
2.2.2 Telneting a Switch through another Switch............................................................. 2-4
2.3 Setting up Configuration Environment through a Dial-up the Modem ............................... 2-5
Chapter 3 Command Line Interface............................................................................................. 3-1
3.1 Command Line Interface ................................................................................................... 3-1
3.2 Command Line View.......................................................................................................... 3-1
3.3 Features and Functions of Command Line ....................................................................... 3-6
3.3.1 Online Help of Command Line ................................................................................ 3-6
3.3.2 Displaying Characteristics of Command Line ......................................................... 3-8
3.3.3 History Command of Command Line...................................................................... 3-8
3.3.4 Common Command Line Error Messages.............................................................. 3-9
3.3.5 Editing Characteristics of Command Line............................................................... 3-9
Chapter 4 User Interface Configuration......................................................................................4-1
4.1 User Interface Overview .................................................................................................... 4-1
4.2 User Interface Configuration.............................................................................................. 4-2
4.2.1 Entering User Interface View .................................................................................. 4-2
4.2.2 Configuring the User Interface-Supported Protocol ................................................ 4-2
4.2.3 Configuring the Attributes of AUX (Console) Port................................................... 4-3
4.2.4 Configuring the Terminal Attributes......................................................................... 4-4
4.2.5 Managing Users ...................................................................................................... 4-6
4.2.6 Configuring Redirection......................................................................................... 4-10
4.3 Displaying and Debugging User Interface ....................................................................... 4-11

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 1 Product Overview
Huawei Technologies Proprietary
1-1
Chapter 1 Product Overview
1.1 Product Overview
Quidway S3500 Series Ethernet Switches, the L2/L3 Ethernet switches are
independently developed by Huawei to provide the wire speed L2/L3 switching and IP
routing functions. The series include the following main types of switches:
zS3526 Ethernet switch
zS3526 FS Ethernet switch
zS3526 FM Ethernet switch
zS3526E Ethernet switch
zS3526E FS Ethernet switch
zS3526E FM Ethernet switch
zS3526C Ethernet switch
zS3552G Ethernet switch
zS3552P Ethernet switch
zS3528G Ethernet switch
zS3528P Ethernet switch
zS3552F Ethernet switch
S3526/S3526E/S3526C Ethernet Switches provide 24 fixed 10/100Base-TX Ethernet
ports, one Console port and 2 extension module slots.
The only difference between S3526 FS/S3526E FS and S3526 FM/S3526E FM
Ethernet switches is the fixed optical port attribute. S3526 FS/S3526E FS Ethernet
switches provide 12 100M single-mode optical ports, while S3526 FM/S3526E FM
Ethernet switches provide 12 100M multi-mode optical ports. Each of them provides 4
extension module slots and 1 Console port.
S3552G Ethernet Switch provides 48 fixed 10/100Base-TX Ethernet ports, one
Console port and four GBIC interface modules.
S3552P Ethernet Switch provides 48 fixed 10/100Base-TX Ethernet ports, one
Console port and four SFP interface modules.
S3528G Ethernet Switch provides 24 fixed 10/100Base-TX Ethernet ports, one
Console port and four GBIC interface modules.
S3528P Ethernet Switch provides 24 fixed 10/100Base-TX Ethernet ports, one
Console port and four SFP interface modules.
S3552F Ethernet Switch provides 6 100M module slots, one Console port and four
GBIC interface modules.
Quidway S3500 Series Ethernet Switches support the following services:
zBroadband access to the Internet

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 1 Product Overview
Huawei Technologies Proprietary
1-2
zEnterprise and campus networking
zProviding multicast service and multicast routing and supporting multicast audio
and video services.
Hereinafter Quidway S3500 Series Ethernet switches are referred to as S3500 series
Ethernet switches.
1.2 Function Features
Table 1-1 Function features
Features Description
VLAN
Supports VLAN compliant with IEEE 802.1Q Standard
Supports port-based VLAN
Supports protocol-based VLAN (Only applies to S3552G,
S3552P, S3528G, S3528P and S3552F in S3500 series
switches.)
Supports GARP VLAN Registration Protocol (GVRP)
Supports Super VLAN (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Supports port isolation in VLAN (Only applies to S3552G,
S3552P, S3528G, S3528P, S3552F, S3526E, S3526E FM,
S3526E FS and S3526C in S3500 series switches.)
STP protocol
Supports Spanning Tree Protocol (STP) / Rapid Spanning
Tree Protocol (RSTP), compliant with IEEE
802.1D/IEEE802.1w Standard. (Only applies to S3526, S3526
FS, S3526 FM, S3526E, S3526E FS, S3526E FM and S3526C
in S3500 series switches.)
Supports Spanning Tree Protocol (STP) / Rapid Spanning
Tree Protocol (RSTP)/ Multiple Spanning Tree Protocol
(MSTP), compliant with IEEE 802.1D/IEEE802.1w/IEEE
802.1s Standard (Only applies to S3552G, S3552P, S3528G,
S3528P and S3552F in S3500 series switches.)
Supports BPDU Tunnel (Only applies to S3552G, S3552P,
S3528G, S3528P and S3552F in S3500 series switches.)
Flow control Supports IEEE 802.3 flow control (full-duplex)
Supports back-pressure based flow control (half-duplex)
Broadcast
Suppression Supports Broadcast Suppression

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 1 Product Overview
Huawei Technologies Proprietary
1-3
Features Description
Multicast
Supports GARP Multicast Registration Protocol (GMRP)
Supports Internet Group Management Protocol (IGMP)
Snooping (Only applies to S3552G, S3552P, S3528G,
S3528P and S3552F, in S3500 series switches.)
Supports Internet Group Management Protocol (IGMP)
Supports Protocol-Independent Multicast-Dense Mode
(PIM-DM)
Supports Protocol-Independent Multicast-Sparse Mode
(PIM-SM)
Support multicast VLAN (Only applies to S3552G, S3552P,
S3528G, S3528P and S3552F, in S3500 series switches.)
Supports to configure the multicast MAC addresses (Only
applies to S3552G, S3552P, S3528G, S3528P and S3552F, in
S3500 series switches.)
IP routing
Supports the static route
Supports Routing Information Protocol (RIP) V1/v2
Supports Open Shortest Path First (OSPF)
Supports Border Gateway Protocol (BGP)
Supports IP routing policy
ARP
Supports ARP
Support Gratuitous ARP (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
DHCP
Supports Dynamic Host Configuration Protocol (DHCP) Relay
Supports DHCP Server (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Supports DHCP Client (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Supports DHCP Snooping (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Link aggregation Supports link aggregation
Mirror
Supports the mirror based on the traffic classification
Supports the port-based mirror (Only applies to S3552G,
S3552P, S3528G, S3528P and S3552F in S3500 series
switches.)

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 1 Product Overview
Huawei Technologies Proprietary
1-4
Features Description
Security features
Supports Multi-level user management and password protect
Supports 802.1X authentication
Supports Packet filtering
Support Portal (Only applies to S3552G, S3552P, S3528G,
S3528P and S3552F in S3500 series switches.)
Support dynamic VLAN (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Support Guest VLAN (Only applies to S3552G, S3552P,
S3528G, S3528P, S3552F, S3526E, S3526E FM, S3526E FS
and S3526C in S3500 series switches.)
Reliability Supports Virtual Redundancy Routing Protocol (VRRP)
Quality of Service
(QoS)
Supports traffic classification
Supports bandwidth control
Supports priority
Supports queues of different priority on the port
Queue scheduling: supports Strict Priority Queuing (SP),
Weighted Round Robin (WRR), Delay bounded WRR (only
S3526E, S3526E FM, S3526E FS, S3526C support the WRR
with the maximum delay)
Management and
Maintenance
Supports command line interface configuration
Supports configuration via Console port
Supports remote configuration via Telnet or SSH
Supports configuration through dialing the Modem
Supports SNMP management (Supports Quidview NMS and
RMON MIB Group 1, 2, 3 and 9)
Supports system log
Supports level alarms
Supports Huawei Group Management Protocol (HGMP) V2
Supports output of the debugging information
Supports PING and Tracert
Supports the remote maintenance via Telnet, Modem and SSH
Loading and
update
Supports to load and upgrade software via XModem protocol
Supports to load and upgrade software via File Transfer
Protocol (FTP) and Trivial File Transfer Protocol (TFTP)

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-1
Chapter 2 Logging in Switch
2.1 Setting up Configuration Environment via the Console
Port
Step 1: As shown in the figure below, to set up the local configuration environment,
connect the serial port of a PC (or a terminal) to the Console port of the switch with the
Console cable.
Console port
RS-232 Serial port
Console cable
Figure 2-1 Setting up the local configuration environment via the Console port
Step 2: Run terminal emulator (such as Terminal on Windows 3X or the Hyper Terminal
on Windows 9X) on the Computer. Set the terminal communication parameters as
follows: Set the baud rate to 9600, databit to 8, parity check to none, stopbit to 1, flow
control to none and select the terminal type as VT100.
Figure 2-2 Setting up new connection

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-2
Figure 2-3 Configuring the port for connection
Figure 2-4 Setting communication parameters
Step 3: The switch is powered on. Display self-test information of the switch and prompt
you to press Enter to show the command line prompt such as <Quidway>.
Step 4: Input a command to configure the switch or view the operation state. Input a “?”
for an immediate help. For details of specific commands, refer to the following chapters.

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-3
2.2 Setting up Configuration Environment through Telnet
2.2.1 Connecting a PC to the Switch through Telnet
After you have correctly configured IP address of a VLAN interface for a switch via
Console port (using ip address command in VLAN interface view), and added the port
(that connects to a terminal) to this VLAN (using port command in VLAN view), you can
telnet this switch and configure it.
Step 1: Authenticate the Telnet user via the Console port before the user logs in by
Telnet.
Note:
By default, the password is required for authenticating the Telnet user to log in the
switch. If a user logs in via the Telnet without password, he will see the prompt “Login
password has not been set !”.
<Quidway> system-view
[Quidway] user-interface vty 0
[Quidway-ui-vty0] set authentication password simple xxxx (xxxx is the preset login
password of Telnet user)
Step 2: To set up the configuration environment, connect the Ethernet port of the PC to
that of the switch via the LAN.
Workstation
Workstation
Server PC ( for configuring the switch
viaTelnet)
Ethernet port
Ethernet
Workstation
Workstation
Server PC ( for configuring the switch
viaTelnet)
Ethernet port
Ethernet
Figure 2-5 Setting up configuration environment through telnet
Step 3: Run Telnet on the PC and input the IP address of the VLAN connected to the PC
port.

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-4
Figure 2-6 Running Telnet
Step 4: The terminal displays “Login authentication” and prompts the user to input the
logon password. After you input the correct password, it displays the command line
prompt (such as <Quidway>). If the prompt “All user interfaces are used, please try
later!” appears, it indicates that too many users are connected to the switch through the
Telnet at this moment. In this case, please reconnect later. At most 5 Telnet users are
allowed to log on to the Quidway series switches simultaneously.
Step 5: Use the corresponding commands to configure the switch or to monitor the
running state. Enter “?” to get the immediate help. For details of specific commands,
refer to the following chapters.
Note:
zWhen configuring the switch via Telnet, do not modify the IP address of it unless
necessary, for the modification might cut the Telnet connection.
zBy default, when a Telnet user passes the password authentication to log on to the
switch, he can access the commands at Level 0.
2.2.2 Telneting a Switch through another Switch
After a user has logged into a switch, he or she can configure another switch through
the switch via Telnet. The local switch serves as Telnet client and the peer switch
serves as Telnet server. If the ports connecting these two switches are in a same local
network, their IP addresses must be configured in the same network segment.
Otherwise, the two switches must establish a route that can reach each other.
As shown in the figure below, after you telnet to a switch, you can run telnet command
to log in and configure another switch.
Telnet Client
PC Telnet Server
Figure 2-7 Providing Telnet Client service

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-5
Step 1: Authenticate the Telnet user via the Console port on the Telnet Server (switch)
before login.
Note:
By default, the password is required for authenticating the Telnet user to log in the
switch. If a user logs in via the Telnet without password, he will see the prompt “Login
password has not been set !”.
<Quidway> system-view
[Quidway] user-interface vty 0
[Quidway-ui-vty0] set authentication password simple xxxx (xxxx is the preset login
password of Telnet user)
Step 2: The user logs in the Telnet Client (switch). For the login process, refer to the
section describing “Connecting a PC to the Switch through Telnet”.
Step 3: Perform the following operations on the Telnet Client:
<Quidway> telnet xxxx (xxxx can be the hostname or IP address of the Telnet Server. If
it is the hostname, you need to use the ip host command to specify.)
Step 4: Enter the preset login password and you will see the prompt such <Quidway>. If
the prompt “All user interfaces are used, please try later!” appears, it indicates that too
many users are connected to the switch through the Telnet at this moment. In this case,
please connect later.
Step 5: Use the corresponding commands to configure the switch or view it running
state. Enter “?” to get the immediate help. For details of specific commands, refer to the
following chapters.
2.3 Setting up Configuration Environment through a Dial-up
the Modem
Step 1: Authenticate the Modem user via the Console port of the switch before he logs
in the switch through a dial-up Modem.
Note:
By default, the password is required for authenticating the Modem user to log in the
switch. If a user logs in via the Modem without password, he will see an error prompt.
<Quidway> system-view

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-6
[Quidway] user-interface aux 0
[Quidway-ui-aux0] set authentication password simple xxxx (xxxx is the preset login
password of the Modem user.)
Step 2: Perform the following configurations on the Modem that is directly connected to
the switch. (You are not required to configure the Modem connected to the terminal.)
AT&F ----------------------- Reset Modem factory settings
ATS0=1 -----------------Set auto response (ring once)
AT&D ----------------------- Ignore DTR signal
AT&K0 ----------------- ------ Disable flow control
AT&R1 ----------------------- Ignore RTS signal
AT&S0 ---------------- ------- Force DSR to be high-level
ATEQ1&W --------------- -------- Bar the modem to send command response
or execution result and save the configurations
After the configuration, key in the AT&V command to verify the Modem settings.
Note:
zThe Modem configuration commands and outputs may be different according to
different Modems. For details, refer to the User Manual of the Modem.
zIt is recommended that the transmission rate on the Console port must lower than
that of Modem, otherwise packets may be lost.
Step 3: As shown in the figure below, to set up the remote configuration environment,
connect the Modems to a PC (or a terminal) serial port and the switch Console port
respectively.
Modem
Telephone line Modem
Modem serial port line
Remote tel:
82882285
Console port
PSTN
Figure 2-8 Setting up remote configuration environment

Operation Manual - Getting Started
Quidway S3500 Series Ethernet Switches Chapter 2 Logging in Switch
Huawei Technologies Proprietary
2-7
Step 4: Dial for connection to the switch, using the terminal emulator and Modem on the
remote end. The number dialed shall be the telephone number of the Modem
connected to the switch. See the two figures below.
Figure 2-9 Setting the dialed number
Figure 2-10 Dialing on the remote PC
Step 5: Enter the preset login password on the remote terminal emulator and wait for
the prompt such as <Quidway>. Then you can configure and manage the switch. Enter
“?” to get the immediate help. For details of specific commands, refer to the following
chapters.
Note:
By default, when a Modem user logs in, he can access the commands at Level 0.