Huawei Quidway S3900 Series Installation instructions

Huawei Technologies Proprietary
HUAWEI
Quidway S3900 Series Ethernet Switches
Command Manual
Release 1510

Huawei Technologies Proprietary
Quidway S3900 Series Ethernet Switches
Command Manual
Manual Version T2-081950-20060626C-1.00
Product Version Release 1510
BOM 3119A050
Huawei Technologies Co., Ltd. provides customers with comprehensive technical support
and service. If you purchase the products from the sales agent of Huawei Technologies Co.,
Ltd., please contact our sales agent. If you purchase the products from Huawei
Technologies Co., Ltd. directly, Please feel free to contact our local office, customer care
center or company headquarters.
Huawei Technologies Co., Ltd.
Address: Administration Building, Huawei Technologies Co., Ltd.,
Bantian, Longgang District, Shenzhen, P. R. China
Postal Code: 518129
Website: http://www.huawei.com

Huawei Technologies Proprietary
Copyright © 2006 Huawei Technologies Co., Ltd.
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks
, HUAWEI, C&C08, EAST8000, HONET, , ViewPoint, INtess, ETS, DMC,
TELLIN, InfoLink, Netkey, Quidway, SYNLOCK, Radium, M900/M1800,
TELESIGHT, Quidview, Musa, Airbridge, Tellwin, Inmedia, VRP, DOPRA,
iTELLIN, HUAWEI OptiX, C&C08iNET, NETENGINE, OptiX, iSite, U-SYS, iMUSE,
OpenEye, Lansway, SmartAX, infoX, and TopEng are trademarks of Huawei
Technologies Co., Ltd.
All other trademarks and trade names mentioned in this manual are the property of
their respective holders.
Notice
The information in this manual is subject to change without notice. Every effort has
been made in the preparation of this manual to ensure accuracy of the contents,
but all statements, information, and recommendations in this manual do not
constitute the warranty of any kind, express or implied.

Huawei Technologies Proprietary
About This Manual
Release Notes
The product version that corresponds to the manual is VRP 3.10.
Related Manuals
The related manuals are listed in the following table.
Manual Content
Quidway S3900 Series Ethernet
Switches Installation Manual It provides information for the system installation.
Quidway S3900 Series Ethernet
Switches Operation Manual It is used for assisting the users in data configurations and typical applications.
Organization
Quidway S3900 Series Ethernet Switches Command Manual consists of the
following parts:
z1 CLI
Introduces the commands used for switching between the command levels and
command level setting.
z2 Login
Introduces the commands used for logging into the Ethernet switch.
z3 Configuration File Management
Introduces the commands used for configuration file management.
z4 VLAN
Introduces the commands used for configuring VLAN.
z5 IP Address and Performance Configuration
Introduces the commands used for IP address configuration and IP performance
configuration.
z6 Management VLAN

Huawei Technologies Proprietary
Introduces the commands used for configuring the management VLAN and
DHCP/BOOTP client configuration.
z7 Voice VLAN
Introduces the commands used for voice VLAN configuration.
z8 GVRP
Introduces the commands used for GVRP configuration.
z9 Port Basic Configuration
Introduces the commands used for basic port configuration.
z10 Link Aggregation
Introduces the commands used for link aggregation.
z11 Port Isolation
Introduces the commands used for port isolation.
z12 Port Security&Port Binding
Introduces the commands used for port security configuration and port binding.
z13 DLDP
Introduces the commands used for DLDP configuration.
z14 MAC Address Table
Introduces the commands used for MAC address forwarding table management.
z15 Auto Detect
Introduces the commands used for auto detect configuration.
z16 MSTP
Introduces the STP-related commands.
z17 Routing Protocol
Introduces the commands used for routing protocol configuration.
z18 Multicast
Introduces the commands used for multicast configuration.
z19 802.1x
Introduces the commands used for 802.1x configuration.
z20 AAA&RADIUS&HWTACACS&EAD
Introduces the commands used for AAA, RADIUS, HWTACACS, and EAD
configuration.
z21 VRRP
Introduces the commands used for VRRP configuration.
z22 Centralized MAC Address Authentication

Huawei Technologies Proprietary
Introduces the commands used for centralized MAC address authentication
configuration.
z23 ARP
Introduces the ARP-related commands.
z24 DHCP
Introduces the commands used for DHCP server, DHCP relay, and
DHCP-snooping configuration.
z25 ACL
Introduces the ACL-related commands.
z26 QoS&QoS Profile
Introduces the commands used for QoS and QoS profile configuration.
z27 Web Cache Redirection
Introduces the commands used for Web cache redirection configuration.
z28 Mirroring
Introduces the commands used for port mirroring.
z29 IRF Fabric
Introduces the commands used for IRF fabric configuration.
z30 Cluster
Introduces the commands used for cluster management.
z31 PoE&PoE Profile
Introduces the commands used for PoE and PoE profile configuration.
z32 UDP Helper
Introduces the commands used for UDP Helper configuration.
z33 SNMP&RMON
Introduces the commands used for SNMP and RMON configuration.
z34 NTP
Introduces the NTP-related commands.
z35 SSH Terminal Service
Introduces the commands used for SSH configuration.
z36 File System Management
Introduces the commands used for file system management.
z37 FTP and TFTP
Introduces the FTP-/TFTP-related commands.
z38 Information Center

Huawei Technologies Proprietary
Introduces the commands used for information center configuration.
z39 System Maintenance and Debugging
Introduces the commands used for system maintenance and debugging.
z40 VLAN VPN
Introduces the commands used for VLAN VPN configuration.
z41 HWPing
Introduces the commands used for HWPing configuration.
z42 DNS
Introduces the commands used for DNS configuration.
z43 Appendix A Command Index
Lists all the commands described in this command manual in an alphabetic order.
The parts and pages where the commands are described are also given.
Intended Audience
The manual is intended for the following readers:
zNetwork engineers
zNetwork administrators
zCustomers who are familiar with network fundamentals
Conventions
The manual uses the following conventions:
I. General conventions
Convention Description
Arial Normal paragraphs are in Arial.
Boldface Headings are in Boldface.
Courier New
Terminal Display is in Courier New.
II. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are

Huawei Technologies Proprietary
Convention Description
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
III. GUI conventions
Convention Description
Boldface Button names and menu items are in Boldface. For
example, click OK.
/ Multi-level menus are in bold and separated by forward
slashes. For example, select the File/Create/Folder menu.
IV. Keyboard operation
Format Description
<Key> Press the key with the key name inside angle brackets. For
example, <Enter>, <Tab>, <Backspace>, or <A>.
<Key1+Key2> Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.
<Key1, Key2> Press the keys in turn. For example, <Alt, A> means the
two keys should be pressed in turn.

Huawei Technologies Proprietary
V. Mouse operation
Action Description
Select Press and hold the primary mouse button (left mouse
button by default).
Click Select and release the primary mouse button without
moving the pointer.
Double-Click Press the primary mouse button twice continuously and
quickly without moving the pointer.
Drag Press and hold the primary mouse button and move the
pointer to a certain position.
VI. Symbols
Eye-catching symbols are also used in the manual to highlight the points worthy of
special attention during the operation. They are defined as follows:
Caution,Warning, Danger: Means reader be extremely careful during the
operation.
Note,Comment, Tip,Knowhow,Thought: Means a complementary
description.

Command Manual - CLI
Quidway S3900 Series Ethernet Switches-Release 1510 Table of Contents
Huawei Technologies Proprietary
i
Table of Contents
Chapter 1 CLI Configuration Commands....................................................................................1-1
1.1 CLI Configuration Commands ...........................................................................................1-1
1.1.1 command-privilege level .........................................................................................1-1
1.1.2 display history-command ........................................................................................1-2
1.1.3 super .......................................................................................................................1-2
1.1.4 super password.......................................................................................................1-3

Command Manual - CLI
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 CLI Configuration Commands
Huawei Technologies Proprietary
1-1
Chapter 1 CLI Configuration Commands
1.1 CLI Configuration Commands
1.1.1 command-privilege level
Syntax
command-privilege level level view view command
undo command-privilege view view command
View
System view
Parameter
level: Command Level. This argument ranges from 0 to 3.
view: Command view. This argument can be any command view the switch supports.
command: Command to be specified.
Description
Use the command-privilege level command to set the level of the specified
command in a specified view.
Use the undo command-privilege view command to restore the level of the specified
command in the specified view to the default.
Commands fall into four command levels: visit, monitor, system, and manage, which
are identified as 0, 1, 2, and 3 respectively. The administrator can change the level of a
command to enable users of specific level to utilize the command.
By default, the ping, tracert, and telnet commands are at the visit level (level 0); the
display and debugging commands are at the monitor level (level 1); all configuration
commands are at the system level (level 2); and FTP/TFTP/XModem and file system
related commands are at the manage level (level 3).
Example
# Specify the interface command in system view to be of level 0.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] command-privilege level 0 view system interface

Command Manual - CLI
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 CLI Configuration Commands
Huawei Technologies Proprietary
1-2
1.1.2 display history-command
Syntax
display history-command
View
Any view
Parameter
None
Description
Use the display history-command command to display history commands. All the
history commands are saved in the history command cache. When the history
command cache is full, the old information in it will be overlaid.
Related command: history-command max-size.
Example
# Display history commands.
<Quidway> display history-command
system-view
quit
display history-command
1.1.3 super
Syntax
super [ level ]
View
User view
Parameter
level: User level. This argument ranges from 0 to 3 and defaults to 3. If you execute
this command with the level argument not provided, this command switches the
current user level to level 3.
Description
Use the super command to switch the current user level to the one identified by the
level argument. If a password is previously set by using the super password [level
level ] { simple |cipher } password command, you need to provide the password as

Command Manual - CLI
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 CLI Configuration Commands
Huawei Technologies Proprietary
1-3
well to switch to the higher user level. You will remain in the original user level if you
fail to provide the correct password.
Note that:
zUsers logging into a switch also fall into four levels, each of which corresponding
to one of the command levels. Users at a specific level can only use the
commands at the same level and the commands at the lower levels.
zYou can specify an AUX user to provide a password when he switches from a
lower user level to a higher user level and specify the password by using the
super password [level level ] { simple |cipher } password command. With a
password configured, an AUX user remains in the original user level if the
password provided is incorrect when the AUX user attempts to switch to a higher
user level. If the password is not configured, an AUX user can switch to a higher
user level directly.
zA password is necessary for a VTY user to switch to a higher user level. You can
use the super password [level level ] { simple |cipher } password command to
set the password. With the password not configured, a VTY user is prompted the
message reading “Password is not set” and remains in the previous level.
zAn AUX user or a VTY user can switch to a lower user level directly regardless of
the password.
Related command: super password.
Example
# Switch to user level 3.
<Quidway> super 3
Password:
1.1.4 super password
Syntax
super password [level level ] { simple |cipher } password
undo super password [ level level ]
View
System view
Parameter
level: User level. This argument ranges from 1 to 3 and defaults to 3. If you execute
this command with the level argument not provided, this command sets the password
to switch to level 3.
simple: Specifies to provide the password in plain text.
cipher: Specifies to provide the password in encrypted text.

Command Manual - CLI
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 CLI Configuration Commands
Huawei Technologies Proprietary
1-4
password: Password to be set. If you specify the simple keyword, provide this
argument in plain text. If you specify the cipher keyword, you can provide this
argument in either encrypted text or plain text. In this case, a password containing no
more than 16 characters (such as 123) is regarded to be in plain text and is converted
to the corresponding 24-character encrypted form ( such
as !TP<\*EMUHL,408`W7TH!Q!!) automatically. You can also provide a 24-character
encrypted password directly if you are aware of the actual password.
Description
Use the super password command to set the password for users to switch to a higher
user level. To prevent unauthorized accesses, you can use this command to require
users to provide the password when they switch to a higher user level. For security
purpose, the password a user enters when switching to a higher user level is not
displayed. A user will remain at the original user level if the user has tried three times
to enter the correct password but fails to do this.
Use the undo super password command to cancel the configuration.
Note that no matter what form of the password (plain text or encrypted text) is in, the
password entered for verification must be in plain text.
Example
# Set the password to switch from the current user level to user level 3 to “zbr”.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] super password level 3 simple zbr

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Table of Contents
Huawei Technologies Proprietary
i
Table of Contents
Chapter 1 Login Commands ........................................................................................................1-1
1.1 Login Commands...............................................................................................................1-1
1.1.1 authentication-mode................................................................................................1-1
1.1.2 auto-execute command...........................................................................................1-2
1.1.3 databits....................................................................................................................1-3
1.1.4 display telnet-server source-ip................................................................................1-4
1.1.5 display telnet source-ip ...........................................................................................1-4
1.1.6 display user-interface..............................................................................................1-5
1.1.7 display users ...........................................................................................................1-6
1.1.8 free user-interface...................................................................................................1-8
1.1.9 header.....................................................................................................................1-8
1.1.10 history-command max-size.................................................................................1-11
1.1.11 idle-timeout..........................................................................................................1-11
1.1.12 ip http shutdown..................................................................................................1-12
1.1.13 lock......................................................................................................................1-13
1.1.14 parity....................................................................................................................1-14
1.1.15 protocol inbound..................................................................................................1-15
1.1.16 screen-length.......................................................................................................1-16
1.1.17 send.....................................................................................................................1-16
1.1.18 service-type.........................................................................................................1-17
1.1.19 set authentication password................................................................................1-19
1.1.20 shell.....................................................................................................................1-20
1.1.21 speed...................................................................................................................1-20
1.1.22 stopbits................................................................................................................1-21
1.1.23 sysname..............................................................................................................1-22
1.1.24 telnet....................................................................................................................1-23
1.1.25 telnet-server source-interface .............................................................................1-23
1.1.26 telnet-server source-ip ........................................................................................1-24
1.1.27 telnet source-interface.........................................................................................1-25
1.1.28 telnet source-ip....................................................................................................1-25
1.1.29 user-interface ......................................................................................................1-26
1.1.30 user privilege level ..............................................................................................1-27
Chapter 2 Commands for User Control.......................................................................................2-1
2.1 Commands for Controlling Logging in Users.....................................................................2-1
2.1.1 acl............................................................................................................................2-1
2.1.2 free web-users.........................................................................................................2-1
2.1.3 ip http acl.................................................................................................................2-2

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Table of Contents
Huawei Technologies Proprietary
ii
2.1.4 snmp-agent community...........................................................................................2-3
2.1.5 snmp-agent group...................................................................................................2-3

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Login Commands
Huawei Technologies Proprietary
1-1
Chapter 1 Login Commands
1.1 Login Commands
1.1.1 authentication-mode
Syntax
authentication-mode {password |scheme [ command-authorization ] | none }
View
User interface view
Parameter
password: Authenticates users using the local password.
scheme: Authenticates users locally or remotely using usernames and passwords.
command-authorization: Performs command authorization on TACACS
authentication server.
none: Does not authenticate users.
Description
Use the authentication-mode command to specify the authentication mode.
zIf you specify the password keyword to authenticate users using the local
password, remember to set the local password using the set authentication
password { cipher | simple } password command.
zIf you specify the scheme keyword to authenticate users locally or remotely using
usernames and passwords, the actual authentication mode, that is, local or
remote, depends on other related configuration.
zIf this command is executed with the command-authorization keywords
specified, authorization is performed on the TACACS server whenever you
attempt to execute a command, and the command can be executed only when you
pass the authorization. Normally, a TACACS server contains a list of the
commands available to different users.
If you specify to perform local authentication when a user logs in through the Console
port, a user can log into the switch with the password not configured. But for a VTYuser
interface, a password is needed for a user to log into the switch through it under the
same circumstance.
By default, users logging in through the Console port are not authenticated, whereas
modem users and Telnet users are authenticated.

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Login Commands
Huawei Technologies Proprietary
1-2
Note:
To improve security and avoid malicious attack to the unused SOCKETs, TCP 23 and
TCP 22 ports for Telnet andSSH services respectively will be enabled or disabled after
corresponding configurations.
zIf the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
zIf the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
zIf the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as ssh, TCP 22 will be enabled; when the supported
protocol is specified as all, both the TCP 23 and TCP 22 port will be enabled.
Example
# Configure to authenticate users using the local password on the AUX interface.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] user-interface aux 0
[Quidway-ui-aux0] authentication-mode password
1.1.2 auto-execute command
Syntax
auto-execute command text
undo auto-execute command
View
User interface view
Parameter
text: Command to be executed automatically.
Description
Use the auto-execute command command to set the command that is executed
automatically after a user logs in.
Use the undo auto-execute command command to disable the specified command
from being automatically executed.
Normally, the telnet command is specified to be executed automatically to enable the
user to Telnet to a specific network device automatically.

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Login Commands
Huawei Technologies Proprietary
1-3
By default, no command is automatically executed.
Caution:
zThe auto-execute command command may cause you unable to perform common
configuration in the user interface, so use it with caution.
zBefore executing the auto-execute command command and save your
configuration, make sure you can log into the switch in other modes and cancel the
configuration.
Example
# Configure the telnet 10.110.100.1 command to be executed automatically after users
log into VTY 0.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] user-interface vty 0
[Quidway-ui-vty0] auto-execute command telnet 10.110.100.1
% This action will lead to configuration failure through ui-vty0. Are you sure?[
Y/N]y
1.1.3 databits
Syntax
databits { 7 |8 }
undo databits
View
User interface view
Parameter
7: Sets the data bits to 7.
8: Sets the data bits to 8.
Description
Use the databits command to set the databits for the user interface.
Use the undo databits command to revert to the default data bits.
Execute these two commands inAUX user interface view only.
The default data bits is 8.

Command Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Login Commands
Huawei Technologies Proprietary
1-4
Example
# Set the data bits to 7.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] user-interface aux 0
[Quidway-ui-aux0] databits 7
1.1.4 display telnet-server source-ip
Syntax
display telnet-server source-ip
View
Any view
Parameter
None
Description
Use the display telnet-server source-ip command to display the source IP address
configured for the switch operating as the Telnet server. If the source interface is also
configured for the switch, this command displays the IP address of the source interface.
If no source IP address is specified, 0.0.0.0 is displayed.
Example
# Display the source IP address configured for the switch operating as the Telnet
server.
<Quidway> display telnet-server source-ip
The source IP you specified is 192.168.1.1
1.1.5 display telnet source-ip
Syntax
display telnet source-ip
View
Any view
Parameter
None