Huawei Quidway S5600 User manual

Huawei Technologies Proprietary
HUAWEI
Quidway S5600 Series Ethernet Switches
Operation Manual
Release 1510

Huawei Technologies Proprietary
Quidway S5600 Series Ethernet Switches
Operation Manual
Manual Version T2-081651-20060628-C-1.00
Product Version Release 1510
BOM 3116A051
Huawei Technologies Co., Ltd. provides customers with comprehensive technical support
and service. If you purchase the products from the sales agent of Huawei Technologies Co.,
Ltd., please contact our sales agent. If you purchase the products from Huawei
Technologies Co., Ltd. directly, Please feel free to contact our local office, customer care
center or company headquarters.
Huawei Technologies Co., Ltd.
Address: Administration Building, Huawei Technologies Co., Ltd.,
Bantian, Longgang District, Shenzhen, P. R. China
Postal Code: 518129
Website: http://www.huawei.com

Huawei Technologies Proprietary
Copyright © 2006 Huawei Technologies Co., Ltd.
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any
means without prior written consent of Huawei Technologies Co., Ltd.
Trademarks
, HUAWEI, C&C08, EAST8000, HONET, , ViewPoint, INtess, ETS, DMC,
TELLIN, InfoLink, Netkey, Quidway, SYNLOCK, Radium, M900/M1800,
TELESIGHT, Quidview, Musa, Airbridge, Tellwin, Inmedia, VRP, DOPRA,
iTELLIN, HUAWEI OptiX, C&C08iNET, NETENGINE, OptiX, iSite, U-SYS, iMUSE,
OpenEye, Lansway, SmartAX, infoX, and TopEng are trademarks of Huawei
Technologies Co., Ltd.
All other trademarks and trade names mentioned in this manual are the property of
their respective holders.
Notice
The information in this manual is subject to change without notice. Every effort has
been made in the preparation of this manual to ensure accuracy of the contents,
but all statements, information, and recommendations in this manual do not
constitute the warranty of any kind, express or implied.

Huawei Technologies Proprietary
About This Manual
Release Notes
The product version that corresponds to the manual is Release 1510.
Related Manuals
The related manuals are listed in the following table.
Manual Content
Quidway S5600 Series Ethernet
Switches Installation Manual It provides information for the system installation.
Quidway S5600 Series Ethernet
Switches Command Manual It is used for assisting the users in using various commands.
Organization
Quidway S5600 Series Ethernet Switches Operation Manual consists of the following
parts:
z0 Product Overview
Introduces the characteristics and implementations of the Ethernet switch.
z1 CLI
Introduces the command hierarchy, command view and CLI features of the
Ethernet switch.
z2 Login
Introduces the ways to log into an Ethernet switch.
z3 Configuration File Management
Introduces the ways to manage configuration files.
z4 VLAN
Introduces VLAN fundamental and the related configuration.
z5 IP Address and Performance Configuration
Introduces IP address and IP performance fundamental and the related
configuration.

Huawei Technologies Proprietary
z6 Management VLAN
Introduces the management VLAN configuration and DHCP/BOOTP client
configuration.
z7 Voice VLAN
Introduces voice VLAN fundamental and the related configuration.
z8 GVRP
Introduces GVRP and the related configuration.
z9 Port Basic Configuration
Introduces basic port configuration.
z10 Link Aggregation
Introduces link aggregation and the related configuration.
z11 Port Isolation
Introduces port isolation and the related configuration.
z12 Port Security&Port Binding
Introduces port security, port binding, and the related configuration.
z13 DLDP
Introduces DLDP and the related configuration.
z14 MAC Address Table
Introduces MAC address forwarding table and the related configuration.
z15 Auto Detect
Introduces auto detect and the related configuration.
z16 MSTP
Introduces STP and the related configuration.
z17 Routing Protocol
Introduces the routing protocol-related configurations, including static route
configuration, RIP configuration, OSPF configuration, IS-IS configuration, BGP
configuration, and routing policy configuration.
z18 Multicast
Introduces the configuration of GMRP, IGMP Snooping, IGMP, PIM-DM, PIM-SM,
and MSDP.
z19 802.1x
Introduces 802.1x and the related configuration.
z20 AAA&RADIUS&HWTACACS&EAD
Introduces AAA, RADIUS, HWTACACS, EAD, and the related configurations.
z21 VRRP

Huawei Technologies Proprietary
Introduces VRRP and the related configuration.
z22 Centralized MAC Address Authentication
Introduces centralized MAC address authentication and the related configuration.
z23 ARP
Introduces ARP and the related configuration.
z24 DHCP
Introduces DHCP server, DHCP relay, DHCP-Snooping, and the related
configurations.
z25 ACL
Introduces ACL and the related configuration.
z26 QoS&QoS Profile
Introduces QoS, QoS profile and the related configuration.
z27 Mirroring
Introduces port mirroring and the related configuration.
z28 IRF Fabric
Introduces IRF fabric-related configuration.
z29 Cluster
Introduces the configuration to form clusters using HGMP V2.
z30 PoE&PoE Profile
Introduces PoE, PoE profile and the related configuration.
z31 UDP Helper
Introduces UDP Helper and the related configuration.
z32 SNMP&RMON
Introduces the configuration to manage network devices through SNMP and
RMON.
z33 NTP
Introduces NTP and the related configuration.
z34 SSH Terminal Service
Introduces SSH2.0 and the related configuration.
z35 File System Management
Introduces basic configuration for file system management.
z36 FTP and TFTP
Introduces basic configuration for FTP and TFTP, and the applications.
z37 Information Center

Huawei Technologies Proprietary
Introduces the configuration to analyze and diagnose networks using the
information center.
z38 System Maintenance and Debugging
Introduces daily system maintenance and debugging.
z39 VLAN VPN
Introduces VLAN VPN and the related configuration.
z40 HWPing
Introduces HWPing and the related configuration.
z41 DNS
Introduces DNS and the related configuration.
z42 Appendix A Acronyms
Lists the acronyms used in this manual.
Intended Audience
The manual is intended for the following readers:
zNetwork engineers
zNetwork administrators
zCustomers who are familiar with network fundamentals
Conventions
The manual uses the following conventions:
I. General conventions
Convention Description
Arial Normal paragraphs are in Arial.
Boldface Headings are in Boldface.
Courier New
Terminal Display is in Courier New.
II. Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.

Huawei Technologies Proprietary
Convention Description
[ ] Items (keywords or arguments) in square brackets [ ] are
optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by
vertical bars. One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be
selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets
and separated by vertical bars. Many or none can be
selected.
# A line starting with the # sign is comments.
III. GUI conventions
Convention Description
Boldface Button names and menu items are in Boldface. For
example, click OK.
/ Multi-level menus are in bold and separated by forward
slashes. For example, select the File/Create/Folder menu.
IV. Keyboard operation
Format Description
<Key> Press the key with the key name inside angle brackets. For
example, <Enter>, <Tab>, <Backspace>, or <A>.
<Key1+Key2> Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.
<Key1, Key2> Press the keys in turn. For example, <Alt, A> means the
two keys should be pressed in turn.
V. Mouse operation
Action Description
Select Press and hold the primary mouse button (left mouse
button by default).
Click Select and release the primary mouse button without
moving the pointer.

Huawei Technologies Proprietary
Action Description
Double-Click Press the primary mouse button twice continuously and
quickly without moving the pointer.
Drag Press and hold the primary mouse button and move the
pointer to a certain position.
VI. Symbols
Eye-catching symbols are also used in the manual to highlight the points worthy of
special attention during the operation. They are defined as follows:
Caution,Warning, Danger: Means reader be extremely careful during the
operation.
Note,Comment, Tip,Knowhow,Thought: Means a complementary
description.

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Table of Contents
Huawei Technologies Proprietary
i
Table of Contents
Chapter 1 Obtaining the Documentation ....................................................................................1-1
1.1 CD-ROM............................................................................................................................1-1
1.2 Huawei-3Com Website......................................................................................................1-1
1.3 Software Release Notes....................................................................................................1-2
Chapter 2 Documentation and Software Version.......................................................................2-1
2.1 Software Version for the Manual .......................................................................................2-1
2.2 Document List....................................................................................................................2-2
Chapter 3 Product Overview ........................................................................................................3-1
3.1 Preface...............................................................................................................................3-1
3.2 Switch Models....................................................................................................................3-1
3.3 Software Features .............................................................................................................3-2
Chapter 4 Networking Applications............................................................................................. 4-1
4.1 Application in Small/Middle-Scaled Enterprise Networks.................................................. 4-1
4.2 Application in Large-Scaled/Campus Networks ................................................................4-1

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
Huawei Technologies Proprietary
1-1
Chapter 1 Obtaining the Documentation
Huawei-3Com Technologies Co., Ltd. provides various ways for you to obtain
documentation, through which you can obtain the product documentations and those
concerning newly added new features. The documentations are available in one of the
following ways:
zCD-ROMs shipped with the devices
zHuawei-3Com website
zSoftware release notes
1.1 CD-ROM
Huawei-3Com delivers aCD-ROM together with each device. The CD-ROM contains a
complete product document set, including the operation manual, command manual,
installation manual, and compatibility manual. After installing the reader program
provided by the CD-ROM, you can search for the desired contents in a convenient way
through the reader interface.
The contents in the manual are subject to update on an irregular basis due to product
version upgrade or some other reasons. Therefore, the contents in the CD-ROM may
not be the latest version. This manual serves the purpose of user guide only. Unless
otherwise noted, all the information in the document set does not claim or imply any
warranty. For the latest software documentation, go to the Huawei-3Com website.
1.2 Huawei-3Com Website
Perform the following steps to query and download the product documentation from the
Huawei-3Com website.
Table 1-1 Acquire product documentation from the Huawei-3Com website
Registering Log into http:// www.huawei-3com.com. Click
[Login/Register] in the home page. Enter your username
and password and click Register.
Acquire product
documentation
Click Documentation Center on the home page to query
the documentation by product category.
Select a product to display a detailed description of the
product.
Specify a device type and select a manual for that product.

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1 Obtaining the Documentation
Huawei Technologies Proprietary
1-2
1.3 Software Release Notes
With software upgrade, new software features may be added. You can acquire the
information about the newly added software features through software release notes.

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 2 Documentation and Software Version
Huawei Technologies Proprietary
2-1
Chapter 2 Documentation and Software Version
2.1 Software Version for the Manual
Quidway S5600 Series Ethernet Switches Operation Manual Release1510 and
Quidway S5600 Series Ethernet Switches Command Manual Release1510
correspond to the following three software versions of the S5600 series switches:
Release0035, ESS1508, and Release1510. The three software versions have different
features:
zCompared with Release0035, Release1510 and ESS1508 have six new
features, as shown in Table 2-1.
zCompared with ESS1508 and Release0035, Release1510 has seven new
features additionally, as shown in Table 2-2.
Table 2-1 Newly added features in Release1510 and ESS1508
New features supported in both
Release1510 and ESS1508 Related part
Configuring the interval to generate port
statistics 09 Port Basic Configuration
Newly added port security mode: autolearn 12 Port Security&Port Binding
Standard MSTP (STP Compliance) 16 MSTP
Unknown Multicast Drop 18 Multicast
HUAWEI Terminal Access Controller Access
Control System (HWTACACS) 20 AAA&RADIUS&HWTACACS&EAD
Domain Name System (DNS) 41 Domain Name System
Table 2-2 Features unique to Release1510
New features unique to Release1510 Related part
Giant packet statistics (you can
enable/disable the feature) 09 Basic Configuration
Active/standby switchover supported by
DLDP 13 DLDP
BPDU drop 16 MSTP
RPT-to-SPT switch inhibition 18 Multicast
BPDU Tunnel 39-VLAN VPN

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 2 Documentation and Software Version
Huawei Technologies Proprietary
2-2
New features unique to Release1510 Related part
Opening/closing Telnet TCP port
23 and SSH TCP port 22 02 Login Operation
Opening/closing HTTP TCP port
80 02 Login Operation
Opening/closing RAW socket for
multicast routing 18 Multicast
Opening/closing UDP port 1812
for RADIUS authentication and
UDP port 1813 for RADIUS
accounting
20
AAA&RADIUS&HWTACACS&EAD
Opening/closing UDP port 1645
for LOCALSERVER
authentication and UDP port
1646 for LOCALSERVER
accounting
20
AAA&RADIUS&HWTACACS&EAD
Opening/closing DHCP TCP port
67 and 68 for DHCP server/
client/ relay 24 DHCP
Opening/closing cluster UDP port
40000 30 Cluster
Opening/closing UDPport 161 for
SNMP-agent and UDP port 1024
for SNMP-trap Client 32 SNMP&RMON
Opening/
closing a
TCP/UD
P port
Opening/closing UDPport 123 for
NTP 33 NTP
2.2 Document List
Table 2-3 Document list
Name Version
Quidway S5600 Series Ethernet Switches Installation
Manual (V1.04)
Quidway S5600 Series Ethernet Switches Operation
Manual – Release1510 (V1.00)
Quidway S5600 Series Ethernet Switches Command
Manual – Release1510 (V1.00)

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-1
Chapter 3 Product Overview
3.1 Preface
Quidway S5600 Series Ethernet Switches (hereinafter referred to as the S5600 series)
provide multi-layer switching capabilities, and support rich Layer 3 features and
enhanced growth capability. They are intelligent network-manageable switches
designed for network environments that require high performance, high port density
and easy-to-install characteristics.
3.2 Switch Models
Table 3-1 lists the available models in the S5600 series.
Table 3-1 Models in the S5600 series
Model Power
supply
Available
service
port
Service
port Combo port Console port
Quidway
S5624P
AC and DC
dual input
power supply
(PSL130-AD)
24
24 x
10/100/100
0Base-T
electrical
ports
4 x 1000
Mbps SFP
Combo
ports
1
Quidway
S5624P-PWR
AC/DC input
external PoE
power supply
(PSL480-AD2
4P)
24
24 x
10/100/100
0Base-T
electrical
ports
4 x 1000
Mbps SFP
Combo
ports
1
Quidway
S5624F
AC and DC
dual input
power supply
(PSL130-AD)
24
24 x 1000
Mbps SFP
optical
ports
4 x 1000
Mbps
RJ45
Combo
ports
1
Quidway
S5648P
AC and DC
dual input
power supply
(PSL180-AD)
48
48 x
10/100/100
0Base-T
electrical
ports
4 x 1000
Mbps SFP
Combo
ports
1
Quidway
S5648P-PWR
AC/DC input
external PoE
power supply
(PSL480-AD4
8P)
48
48 x
10/100/100
0Base-T
electrical
ports
4 x 1000
Mbps SFP
Combo
ports
1

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-2
An S5600 series switch provides one 2-port Fabric interface and one expansion
module slot on its rear panel. The available expansion modules you can select include:
8-port 1000 Mbps SFP module, 1-port 10G XENPAK module and 2-port 10G XFP
module.
3.3 Software Features
The S5600 series have abundant software features and can meet the requirements of
different applications. Table 3-2 summarizes the features provided by each module.
Table 3-2 Service features of the S5600 series
Part Features
1 CLI
zCLI
zHierarchically grouped commands
zCLI online help
2 Login
zLogging into a switch through the Console port
zLogging into a switch through an Ethernet port by using
Telnet or SSH
zLogging into a switch through the Console port by using
modem
zLogging into a switch through Web or NMS
3 Configuration
File Management zSaving, restoring, and deleting the configuration file
4 VLAN
zIEEE 802.1Q-compliant VLAN
zPort-based VLAN
zProtocol-based VLAN
5 IP Address and
Performance
Configuration
zConfiguring an IP address for a switch
zConfiguring the TCP attributes for a switch
6 Management
VLAN
zManagement VLAN configuration
zManagement VLAN interface configuration
7 Voice VLAN zVoice VLAN
8 GVRP zGARP VLAN registration protocol (GVRP)
9 Port Basic
Configuration
zThree port states supported: Access, Trunk, and Hybrid
zSetting broadcast storm suppression globally
zLoopback detection supported
zCable test
10 Link
Aggregation zLink aggregation control protocol (LACP)
11 Port Isolation zPort isolation group
12 Port
Security&Port
Binding
zMultiple security modes
zMAC address-to-port binding

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-3
Part Features
13 DLDP zDevice link detection protocol (DLDP)
14 MAC Address
Table
zManually configuring dynamic, static, and black hole
MAC addresses
zConfiguring the aging time for MAC addresses
zMAC address learning limit
15 Auto Detect
zAuto detect
zAuto detect applications in static routing, VRRP, and
VLAN interface backup
16 MSTP
zSTP/RSTP/MSTP
zQinQ BPDU tunnel
zHuawei-3Com-proprietary MSTP path cost standard
17 Routing
Protocols.
zStatic route
zRouting information protocol (RIP) v1/v2
zOpen shortest path first (OSPF)
zBorder Gateway Protocol (BGP)
zRouting policy
18 Multicast
zInternet group management protocol snooping (IGMP
Snooping)
zInternet group management protocol (IGMP)
zProtocol-independent multicast-dense mode (PIM-DM)
zProtocol-independent multicast-sparse mode (PIM-SM)
19 802.1x
z802.1X authentication
zGuest VLAN
zHuawei authentication bypass protocol (HABP)
20
AAA&RADIUS&H
WTACACS&EAD
zAuthentication, authorization, and accounting (AAA)
zRemote authentication dial-In user service (RADIUS)
zHuawei terminal access controller access control system
(HWTACACS)
zEndpoint admission defense (EAD)
21 VRRP zVirtual router redundancy protocol (VRRP)
22 Centralized
MAC Address
Authentication zCentralized MAC address authentication
23 ARP zGratuitous ARP
zManually configuring ARP entries
24 DHCP
zDHCP server
zDHCP relay
zDHCP Snooping
zDHCP accounting
zUsing Option184 in DHCP server
zUsing Option82 in DHCP relay

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-4
Part Features
25 ACL
zBasic ACLs
zAdvanced ACLs
zLayer 2 ACLs
zUser-defined ACLs
26 QoS&QoS
Profile
zQuality of Service (QoS)
zQoS profile
27 Mirroring
zTraffic mirroring
zPort mirroring
zRemote port mirroring
28 IRF Fabric
zIRF Fabric
zStack port optional
zPeer end detection for stack ports
29 Cluster
zHuawei group management protocol (HGMP) v2
zNeighbor discovery protocol (NDP)
zNeighbor topology discovery protocol (NTDP)
30 PoE&PoE
Profile
zPower over Ethernet (PoE)
zPoE profile
31 UDP Helper zForwarding UDP broadcast packets by using UDP Helper
32 SNMP&RMON
zSimple network management protocol (SNMP) v3,
compatible with SNMP v1/v2
zRemote monitoring (RMON)
33 NTP zNetwork time protocol (NTP)
34 SSH Terminal
Service
zSecure shell (SSH)
zSecure FTP (SFTP)
35 File System
Management
zFile system management
zConfiguration file backup and restoration
zFTP/TFTP lighting
36 FTP and TFTP zOperating as an FTP server/FTP client
zOperating as a TFTP client
37 Information
Center
zSystem logs
zHierarchical alarms
zDebugging information output
38 System
Maintenance and
Debugging
zConfiguring system time
zLanguage (Chinese/English) selecting
zDisplaying and configuring system device state
39 VLAN VPN
zVLAN VPN (QinQ)
zConfiguring VLAN VPN interior-layer priority replication
zConfiguring TPID value
zConfiguring BPDU Tunnel

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 3 Product Overview
Huawei Technologies Proprietary
3-5
Part Features
40 HWPing zHWPing
41 DNS zDomain Name System (DNS)

Operation Manual – Overview
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 4 Networking Applications
4-1
Chapter 4 Networking Applications
The S5600 series support flexible networking. They can be used as broadband access
devices, as well as networking devices in enterprise networks. The following describes
several typical networking methods for the S5600 series.
4.1 Application in Small/Middle-Scaled Enterprise Networks
The S5600 series can be used as backbone switches in the branches of
small/middle-scaled enterprises, where they can be connected (by routers) to the
networks of other branches or the headquarters. When the branches or enterprises
grow in scale, the S5600 series also provide seamless growth through IRF.
Core/Aggregation Access
5600
3900
Figure 4-1 Application in small/middle-scaled enterprise branches
4.2 Application in Large-Scaled/Campus Networks
The S5600 series can also be used as aggregation devices in large-scaled enterprise
networks and campus networks, where each of them can be connect with multiple
Layer 2/3 downstream Ethernet switches (for example, S3900 series switches), and
connected to Layer 3 core upstream switches through the GE expansion module slot,
to provide a full solution for building enterprise networks in various size (from Gigabit
backbone network, 100 Mbps network to desktop network).