Huawei Quidway S3900 Series User manual

Huawei Technologies Proprietary
HUAWEI
Quidway S3900 Series Ethernet Switches
Operation Manual
Release 1510

Huawei Technologies Proprietary
Quidway S3900 Series Ethernet Switches
Operation Manual
Manual Version T2-08164W-20060626-C-1.00
Product Version Release 1510
BOM 3116A04W
Huawei Technologies Co., Ltd. provides customers with comprehensive technical support
and service. If you purchase the products from the sales agent of Huawei Technologies Co.,
Ltd., please contact our sales agent. If you purchase the products from Huawei
Technologies Co., Ltd. directly, Please feel free to contact our local office, customer care
center or company headquarters.
Huawei Technologies Co., Ltd.
Address: Administration Building, Huawei Technologies Co., Ltd.,
Bantian, Longgang District, Shenzhen, P. R. China
Postal Code: 518129
Website: http://www.huawei.com

Huawei Technologies Proprietary
Copyright © 2006 Huawei Technologies Co., Ltd.
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks
, HUAWEI, C&C08, EAST8000, HONET, , ViewPoint, INtess, ETS, DMC,
TELLIN, InfoLink, Netkey, Quidway, SYNLOCK, Radium, M900/M1800,
TELESIGHT, Quidview, Musa, Airbridge, Tellwin, Inmedia, VRP, DOPRA,
iTELLIN, HUAWEI OptiX, C&C08iNET, NETENGINE, OptiX, iSite, U-SYS, iMUSE,
OpenEye, Lansway, SmartAX, infoX, and TopEng are trademarks of Huawei
Technologies Co., Ltd.
All other trademarks and trade names mentioned in thismanual are the property of
their respective holders.
Notice
The information in this manual is subject to change without notice. Every effort has
been made in the preparation of this manual to ensure accuracy of the contents,
but all statements, information, and recommendations in this manual do not
constitute the warranty of any kind, express or implied.

Huawei Technologies Proprietary
About This Manual
Release Notes
The product version that corresponds to the manual is VRP 3.10.
Related Manuals
The related manuals are listed in the following table.
Manual Content
Quidway S3900 Series Ethernet
Switches Installation Manual It provides information for the system installation.
Quidway S3900 Series Ethernet
Switches Command Manual It is used for assisting the users in using various commands.
Organization
Quidway S3900 Series Ethernet Switches Operation Manual consists of the following
parts:
z0 Product Overview
Introduces the characteristics and implementations of the Ethernet switch.
z1 CLI
Introduces the command hierarchy, command view and CLI features of the
Ethernet switch.
z2 Login
Introduces the ways to log into an Ethernet switch.
z3 Configuration File Management
Introduces the ways to manage configuration files.
z4 VLAN
Introduces VLAN fundamental and the related configuration.
z5 IP Address and Performance Configuration
Introduces IP address and IP performance fundamental and the related
configuration.

Huawei Technologies Proprietary
z6 Management VLAN
Introduces the management VLAN configuration and DHCP/BOOTP client
configuration.
z7 Voice VLAN
Introduces voice VLAN fundamental and the related configuration.
z8 GVRP
Introduces GVRP and the related configuration.
z9 Port Basic Configuration
Introduces basic port configuration.
z10 Link Aggregation
Introduces link aggregation and the related configuration.
z11 Port Isolation
Introduces port isolation and the related configuration.
z12 Port Security&Port Binding
Introduces port security, port binding, and the related configuration.
z13 DLDP
Introduces DLDP and the related configuration.
z14 MAC Address Table
Introduces MAC address forwarding table and the related configuration.
z15 Auto Detect
Introduces auto detect and the related configuration.
z16 MSTP
Introduces STP and the related configuration.
z17 Routing Protocol
Introduces the routing protocol-related configurations, including static route
configuration, RIP configuration, OSPF configuration, IS-IS configuration, BGP
configuration, and routing policy configuration.
z18 Multicast
Introduces the configuration of GMRP, IGMP Snooping, IGMP, PIM-DM, PIM-SM,
and MSDP.
z19 802.1x
Introduces 802.1x and the related configuration.
z20 AAA&RADIUS&HWTACACS&EAD
Introduces AAA, RADIUS, HWTACACS, EAD, and the related configurations.
z21 VRRP

Huawei Technologies Proprietary
Introduces VRRP and the related configuration.
z22 Centralized MAC Address Authentication
Introduces centralized MAC address authentication and the related configuration.
z23 ARP
Introduces ARP and the related configuration.
z24 DHCP
Introduces DHCP server, DHCP relay, DHCP-Snooping, and the related
configurations.
z25 ACL
Introduces ACL and the related configuration.
z26 QoS&QoS Profile
Introduces QoS, QoS profile and the related configuration.
z27 Web Cache Redirection
Introduces Web cache redirection and the related configuration.
z28 Mirroring
Introduces port mirroring and the related configuration.
z29 IRF Fabric
Introduces IRF fabric-related configuration.
z30 Cluster
Introduces the configuration to form clusters using HGMP V2.
z31 PoE&PoE Profile
Introduces PoE, PoE profile and the related configuration.
z32 UDP Helper
Introduces UDP Helper and the related configuration.
z33 SNMP&RMON
Introduces the configuration to manage network devices through SNMP and
RMON.
z34 NTP
Introduces NTP and the related configuration.
z35 SSH Terminal Service
Introduces SSH2.0 and the related configuration.
z36 File System Management
Introduces basic configuration for file system management.
z37 FTP and TFTP

Huawei Technologies Proprietary
Introduces basic configuration for FTP and TFTP, and the applications.
z38 Information Center
Introduces the configuration to analyze and diagnose networks using the
information center.
z39 System Maintenance and Debugging
Introduces daily system maintenance and debugging.
z40 VLAN VPN
Introduces VLAN VPN and the related configuration.
z41 HWPing
Introduces HWPing and the related configuration.
z42 DNS
Introduces DNS and the related configuration.
z43 Appendix A Acronyms
Lists the acronyms used in this manual.
Intended Audience
The manual is intended for the following readers:
zNetwork engineers
zNetwork administrators
zCustomers who are familiar with network fundamentals
Conventions
The manual uses the following conventions:
I. General conventions
Convention Description
Arial Normal paragraphs are in Arial.
Boldface Headings are in Boldface.
Courier New
Terminal Display is in Courier New.

Huawei Technologies Proprietary
II. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
III. GUI conventions
Convention Description
Boldface Button names and menu items are in Boldface. For
example, click OK.
/ Multi-level menus are in bold and separated by forward
slashes. For example, select the File/Create/Folder menu.
IV. Keyboard operation
Format Description
<Key> Press the key with the key name inside angle brackets. For
example, <Enter>, <Tab>, <Backspace>, or <A>.
<Key1+Key2> Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.
<Key1, Key2> Press the keys in turn. For example, <Alt, A> means the
two keys should be pressed in turn.

Huawei Technologies Proprietary
V. Mouse operation
Action Description
Select Press and hold the primary mouse button (left mouse
button by default).
Click Select and release the primary mouse button without
moving the pointer.
Double-Click Press the primary mouse button twice continuously and
quickly without moving the pointer.
Drag Press and hold the primary mouse button and move the
pointer to a certain position.
VI. Symbols
Eye-catching symbols are also used in the manual to highlight the points worthy of
special attention during the operation. They are defined as follows:
Caution,Warning, Danger: Means reader be extremely careful during the
operation.
Note,Comment, Tip,Knowhow,Thought: Means a complementary
description.

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Table of Contents
Huawei Technologies Proprietary
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 Huawei-3Com Website......................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Documentation and Software Version.......................................................................2-1
2.1 Software Version for the Manual .......................................................................................2-1
2.2 Document List....................................................................................................................2-2
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface...............................................................................................................................3-1
3.2 Switch Models....................................................................................................................3-1
3.3 Software Features .............................................................................................................3-2
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 Broadband Ethernet Access for Residential Communities................................................ 4-1
4.2 Application for Connecting Branches or Small- to Medium-Sized Enterprises..................4-1
4.3 Application in Large Enterprise and Campus Networks....................................................4-2

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
Huawei Technologies Proprietary
1-1
Chapter 1 Obtaining the Documentation
Huawei-3Com Technologies Co., Ltd. provides various ways for you to obtain
documentation, through which you can obtain the product documentations and those
concerning newly added new features. The documentations are available in one of the
following ways:
zCD-ROMs shipped with the devices
zHuawei-3Com website
zSoftware release notes
1.1 CD-ROM
Huawei-3Com delivers aCD-ROM together with each device. The CD-ROM contains a
complete product document set, including the operation manual, command manual,
installation manual, and compatibility manual. After installing the reader program
provided by the CD-ROM, you can search for the desired contents in a convenient way
through the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the Huawei-3Com website.
1.2 Huawei-3Com Website
Perform the following steps to query and download the product documentation from the
Huawei-3Com website.
Table 1-1 Acquire product documentation from the Huawei-3Com website
Registering Log into http:// www.huawei-3com.com. Click
[Login/Register] in the home page. Enter your username
and password and click Register.
Acquire product
documentation
Click Documentation Center on the home page to query
the documentation by product category.
Select a product to display a detailed description of the
product.
Specify a device type and select a manual for that product.

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
Huawei Technologies Proprietary
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 2 Documentation and Software Version
Huawei Technologies Proprietary
2-1
Chapter 2 Documentation and Software Version
2.1 Software Version for the Manual
Quidway S3900 Series Ethernet Switches Operation Manual Release1510 and
Quidway S3900 Series Ethernet Switches Command Manual Release1510
correspond to the following three software versions of the S3900 series switches:
Release0019, ESS1508, and Release1510. The three software versions have different
features:
zCompared with Release0019, Release1510 and ESS1508 have six new features,
as shown in Table 2-1.
zCompared with ESS1508 and Release0019, Release1510 has seven new
features additionally, as shown in Table 2-3.
Table 2-1 Newly added features in Release1510 and ESS1508
New features supported in both
Release1510 and ESS1508 Related part
Configuring the interval to generate port
statistics 09 Port Basic Configuration
Newly added port security mode: autolearn 12 Port Security&Port Binding
Standard MSTP (STP Compliance) 16 MSTP
Unknown Multicast Drop 18 Multicast
HUAWEI Terminal Access Controller Access
Control System (HWTACACS) 20 AAA&RADIUS&HWTACACS&EAD
Domain Name System (DNS) 42 Domain Name System
Table 2-2 Features unique to Release1510
New features unique to Release1510 Related part
Giant packet statistics (you can
enable/disable the feature) 09 Basic Configuration
Supporting more than eight aggregation
groups on a single switch 10 Link Aggregation
Active/standby switchover supported by
DLDP 13 DLDP
BPDU drop 16 MSTP
RPT-to-SPT switch inhibition 18 Multicast

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 2 Documentation and Software Version
Huawei Technologies Proprietary
2-2
New features unique to Release1510 Related part
BPDU Tunnel 40-VLAN VPN
Opening/closing Telnet TCP port
23 and SSH TCP port 22 02 Login Operation
Opening/closing HTTP TCP port
80 02 Login Operation
Opening/closing RAW socket for
multicast routing 18 Multicast
Opening/closing UDP port 1812
for RADIUS authentication and
UDP port 1813 for RADIUS
accounting
20
AAA&RADIUS&HWTACACS&EAD
Opening/closing UDP port 1645
for LOCALSERVER
authentication and UDP port
1646 for LOCALSERVER
accounting
20
AAA&RADIUS&HWTACACS&EAD
Opening/closing DHCP TCP port
67 and 68 for DHCP server/
client/ relay 24 DHCP
Opening/closing cluster UDP port
40000 30 Cluster
Opening/closing UDPport 161 for
SNMP-agent and UDP port 1024
for SNMP-trap Client 33 SNMP&RMON
Opening/
closing a
TCP/UD
P port
Opening/closing UDPport 123 for
NTP 34 NTP
2.2 Document List
Table 2-3 Document list
Name Version
Quidway S3900 Series Ethernet Switches Installation
Manual (V1.03)
Quidway S3900 Series Ethernet Switches Operation
Manual – Release1510 (V1.00)
Quidway S3900 Series Ethernet Switches Command
Manual – Release1510 (V1.00)

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-1
Chapter 3 Product Overview
3.1 Preface
Quidway S3900 Series Ethernet switches are Ethernet equipment capable of multilayer
switching. They come in two series: S3900-SI and S3900-EI. In addition to the basic
service features, S3900 Series Ethernet switches support abundant Layer 3 features
and enhanced extended functions.
zS3900-SI series switches support basic routing functions, DHCP, basic IRF
functions (not supported by S3924-SI), and IGMP-Snooping.
zS3900-EI series switches support advanced routing functions, DHCP, enhanced
IRF functions, and enhanced multicast functions (including PIM-DM and PIM-SM).
3.2 Switch Models
Table 3-1 lists the S3900 series Ethernet Switches models.
Table 3-1 Models in the S3900 series
Model Power supply
unit (PSU)
Number
of
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Consol
e port
Quidway
S3924-SI AC-input 24
24 10/100
Mbps
ports(electric
al)
0 1
Quidway
S3928P-S
I AC-input 28
24 10/100
Mbps
ports(electric
al)
4 Gigabit
(SFP) ports 1
Quidway
S3928P-P
WR-SI AC-/DC-input 28
24 10/100
Mbps
ports(electric
al)
4 Gigabit
(SFP) ports 1
Quidway
S3928TP-
SI AC-input 28 24 10/100
Mbps
(electrical)
2 Gigabit
(SFP) ports
2
10/100/1,000
Mbps ports
(electrical)
1
Quidway
S3952P-S
I AC-input 52 48 10/100
Mbps
(electrical)
4 Gigabit
(SFP) ports 1

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-2
Model Power supply
unit (PSU)
Number
of
service
ports
Number of
100 Mbps
ports
Number of
1,000 Mbps
uplink ports
Consol
e port
Quidway
S3928P-E
I AC-/DC-input 28 24 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
Quidway
S3928F-E
I AC-/DC-input 28 24 100 Mbps
(SFP) ports
2 Gigabit
(SFP) ports
2
10/100/1,000
Mbps ports
(electrical)
1
Quidway
S3928P-P
WR-EI AC-/DC-input 28 24 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
Quidway
S3952P-E
I AC-/DC-input 52 48 10/100
Mbps ports
(electrical)
4 Gigabit
ports (SFP) 1
Quidway
S3952P-P
WR-EI AC-/DC-input 52 48 10/100
Mbps ports
(electrical)
4 Gigabit
(SFP) ports 1
3.3 Software Features
S3900 Series Ethernet Switches have abundant software features and can meet the
requirements of different applications. Table 3-2 summarizes the features provided by
each module.
Table 3-2 Service features of the S3900 series
Part Features
1 CLI
zCLI
zHierarchically grouped commands
zCLI online help
2 Login
zLogging into a switch through the Console port
zLogging into a switch through an Ethernet port by using
Telnet or SSH
zLogging into a switch through the Console port by using
modem
zLogging into a switch through Web or NMS
3 Configuration
File Management zSaving, restoring, and deleting the configuration file

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-3
Part Features
4 VLAN
zIEEE 802.1Q-compliant VLAN
zPort-based VLAN
zProtocol-based VLAN
5 IP Address and
Performance
Configuration
zConfiguring an IP address for a switch
zConfiguring the TCP attributes for a switch
6 Management
VLAN
zManagement VLAN configuration
zManagement VLAN interface configuration
7 Voice VLAN zVoice VLAN
8 GVRP zGARP VLAN registration protocol (GVRP)
9 Port Basic
Configuration
zThree port states supported: Access, Trunk, and Hybrid
zSetting broadcast storm suppression globally
zLoopback detection supported
zCable test
10 Link
Aggregation zLink aggregation control protocol (LACP)
11 Port Isolation zPort isolation group
12 Port
Security&Port
Binding
zMultiple security modes
zMAC address-to-port binding
13 DLDP zDevice link detection protocol (DLDP)
14 MAC Address
Table
zManually configuring dynamic, static, and black hole MAC
addresses
zConfiguring the aging time for MAC addresses
zMAC address learning limit
15 Auto Detect
zAuto detect
zAuto detect applications in static routing, VRRP, and VLAN
interface backup
16 MSTP
zSTP/RSTP/MSTP
zQinQ BPDU tunnel
zHuawei-3Com-proprietary MSTP path cost standard
17 Routing
Protocols.
zStatic route
zRouting information protocol (RIP) v1/v2
zOpen shortest path first (OSPF) (S3900-EI series switches
only)
zRouting policy
18 Multicast
zInternet group management protocol snooping (IGMP
Snooping)
zInternet group management protocol (IGMP) (S3900-EI
series switches only)
zProtocol-independent multicast-dense mode (PIM-DM)
(S3900-EI series switches only)
zProtocol-independent multicast-sparse mode (PIM-SM)
(S3900-EI series switches only)

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-4
Part Features
19 802.1x
z802.1X authentication
zGuest VLAN
zHuawei authentication bypass protocol (HABP)
20
AAA&RADIUS&H
WTACACS&EAD
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
zHuawei terminal access controller access control system
(HWTACACS)
zEndpoint admission defense (EAD)
21 VRRP zVirtual router redundancy protocol (VRRP) (S3900-EI series
switches only)
22 Centralized
MAC Address
Authentication
zCentralized MAC address authentication
23 ARP zGratuitous ARP
zManually configuring ARP entries
24 DHCP
zDHCP server (S3900-EI series switches only)
zDHCP relay
zDHCP Snooping
zDHCP accounting
zUsing Option184 in DHCP server (S3900-EI series switches
only)
zUsing Option82 in DHCP relay
25 ACL
zBasic ACLs
zAdvanced ACLs
zLayer 2 ACLs
zUser-defined ACLs
26 QoS&QoS
Profile zQuality of Service (QoS)
zQoS profile
27 Web Cache
Redirection z(Supported by S3900-EI series only)
28 Mirroring
zTraffic mirroring
zPort mirroring
zRemote port mirroring (S3900-EI series switches only)
29 IRF Fabric
zIRF Fabric
zStack port optional
zPeer end detection for stack ports
30 Cluster
zHuawei group management protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
31 PoE&PoE
Profile zPower over Ethernet (PoE)
zPoE profile
32 UDP Helper zForwarding UDP broadcast packets by using UDP Helper

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-5
Part Features
33 SNMP&RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote monitoring (RMON)
34 NTP zNetwork time protocol (NTP)
35 SSH Terminal
Service
zSecure shell (SSH)
zSecure FTP (SFTP)
36 File System
Management
zFile system management
zConfiguration file backup and restoration
zFTP/TFTP lighting
37 FTP and TFTP zOperating as an FTP server/FTP client
zOperating as a TFTP client
38 Information
Center
zSystem logs
zHierarchical alarms
zDebugging information output
39 System
Maintenance and
Debugging
zConfiguring system time
zLanguage (Chinese/English) selecting
zDisplaying and configuring system device state
40 VLAN VPN
zVLAN VPN (QinQ)
zConfiguring VLAN VPN interior-layer priority replication
zConfiguring TPID value
zConfiguring BPDU Tunnel
41 HWPing zHWPing
42 DNS zDomain Name System (DNS)

Operation Manual – Overview
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 4 Networking Applications
Huawei Technologies Proprietary
4-1
Chapter 4 Networking Applications
You can deploy S3900 series on many types of networks, such as enterprise networks
and broadband access networks. Following are several typical networking applications.
4.1 Broadband Ethernet Access for Residential Communities
On the broadband access network of a residential community, an S3900 series switch
is located in the center. It is downlinked to S2000 or S3026 series switches to reach the
Ethernet users and uplinked to a core Layer 3 switch through a GE extension module to
connect to the MAN backbone.
ICP
ICP
GSR
L3
S3900 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
ICP
ICP
GSR
L3
S3900 series
Data center MAN backbone
Core layer
Convergence layer
Community /building
access layer
Corridor access layer
S3026
S3026
S2000 series
Local service center
Figure 4-1 Network diagram for connecting community Ethernet to MAN using S3900
series Ethernet switches
4.2 Application for Connecting Branches or Small- to
Medium-Sized Enterprises
For small-to medium-sized enterprises or branches of a large enterprise, S3900 series
switches can server as the backbone switches on their networks and can be connected
to the headquarters or other branches through routers. As the enterprise size increases,
the network also can expand by subtending the S3900 series.