Chapter 1 Obtaining the Documentation

H3C Technologies Co., Ltd. provides various ways for you to obtain documentation, through which you can obtain the product documentations and those concerning newly added new features. The documentations are available in one of the following ways:

l CD-ROMs shipped with the devices

l H3C website

l Software release notes

1.1 CD-ROMs Shipped with the Devices

H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete product document set, including the operation manual and command manual. After installing the reader program provided by the CD-ROM, you can search for the desired contents in a convenient way through the reader interface.

The contents in the manual are subject to update on an irregular basis due to product version upgrade or some other reasons. Therefore, the contents in the CD-ROM may not be the latest version. For the latest software documentation, go to the H3C website.

1.2 H3C Website

Perform the following steps to query and download the product documentation from the H3C website.

Table 1-1 Download documentation from the H3C website

How to apply for an account

Access the homepage of H3C at http://www.h3c.com and click Registration at the top right. In the displayed page, provide your information and click Submit to register.

How to get documentation

In the homepage, select Technical Support & Document > Technical Documents from the navigation bar at the top.

Select a product for its documents.

1.3 Software Release Notes

With software upgrade, new software features may be added. You can acquire the information about the newly added software features through software release notes.


Chapter 2 Product Features

2.1 Introduction to Product

H3C SR8800 Series 10G Core Routers (hereinafter referred to as the SR8800 series) are high end network devices developed by Hangzhou H3C Technologies Co., Ltd. It can be used on the core and distribution layers of large MANs, the core layer of industry IP networks, point of presence (POP), and the distribution layer of carrier networks.

2.2 Feature Lists

The SR8800 series support abundant features and the related documents are divided into the volumes as listed in Table 2-1.

Table 2-1 Feature list

Volume

Features

Access Volume

CPOS Interface

POS Interface

Ethernet Interface

WAN Interface

GVRP

HDLC

Link Aggregation

Port Mirroring

PPP

RPR

MSTP

VLAN

QinQ

BPDU Tunneling

Port Isolation

Logical Interface

Ethernet OAM

ATM

VLAN Termination

IP Services Volume

ARP

DHCP

DNS

IP Addressing

IP Performance

UDP Helper

URPF

IPv6 Basics

Dual Stack

Tunneling

GRE

Adjacency Table

IP Routing Volume

IP Routing Overview

BGP

IS-IS

OSPF

RIP

Route Policy

Static Routing

IPv6 BGP

IPv6 IS-IS

IPv6 OSPFv3

IPv6 RIPng

IPv6 Static Routing

BFD

IP Multicast Volume

Multicast Overview

Multicast Routing and Forwarding

IGMP Snooping

IGMP

MSDP

PIM

Multicast VLAN

IPv6 Multicast Routing and Forwarding

MLD Snooping

MLD

IPv6 PIM

IPv6 Multicast VLAN

Multicast VPN

MBGP

IPv6 MBGP

MPLS VPN Volume

MPLS Basics

MPLS TE

VPLS

MPLS L2VPN

MPLS L3VPN

QoS Volume

QoS

HQoS

Security Volume

802.1x

AAA

MAC Authentication

Portal

IP Source Guard

ACL

Password Control

SSH2.0

System Volume

GR Overview

VRRP

HA

Device Management

NQA

NTP

RMON

SNMP

File System Management

System Maintaining and Debugging

Basic System Configuration

Information Center

User Interface

MAC Address Table Management

Clock Monitoring

Track


Chapter 3 Features

The following sections provide an overview of the main features of each module supported by the SR8800 series.

3.1 Access Volume

Table 3-1 Features in Access volume

Features

Description

CPOS Interface

CPOS, the channelized POS interface, enhances aggregation of low-speed ports, and improves the capacity of leased-line access.

l CPOS interface overview

l CPOS interface configuration

l E1 channel configuration

l T1 channel configuration

POS Interface

Packet over SONET/SDH (POS) is a technology popular in WAN and MAN. It can support packet data such as IP packets.

l POS port overview

l POS port configuration

Ethernet Interface

The volume describes Layer 2 and Layer 3 Ethernet interfaces.

l General Ethernet interface configuration

l Layer 2 Ethernet interface configuration

l Layer 3 Ethernet interface/subinterface configuration

WAN Interface

The volume describes the CE1 and CT1 WAN interfaces.

GVRP

The GARP VLAN Registration Protocol (GVRP) is a GARP application.

l GVRP configuration

l GARP timer configuration

HDLC

High-level Data Link Control (HDLC) is a bit-oriented link layer protocol. Its most prominent feature is that it can transmit any types of bit stream transparently.

l HDLC overview

l HDLC configuration

Link Aggregation

Link aggregation aggregates multiple physical Ethernet ports into one logical link, also called a logical group

l Link aggregation overview and types

l Link aggregation configuration

Port Mirroring

Port mirroring allows you to duplicate packets passing through a specific port (source port) to another port (destination port) connected with a data monitoring device for network monitoring and diagnosis.

l Local port mirroring configuration

l Remote port mirroring configuration

PPP

Point-to-Point Protocol (PPP) is a link layer protocol that carries network layer packets over point-to-point links.

l PPP configuration

l MP configuration

RPR

Resilient Packet Ring (RPR) is a new MAC layer protocol designed for transferring mass data services over MANs. It provides flexible and efficient networking schemes for broadband IP MANs carriers.

l RPR overview

l Protection mode configuration

l Bandwidth reservation and rate limiting

l Port type configuration

MSTP

The multiple spanning tree protocol (MSTP) overcomes the shortcomings of STP and RSTP. It provides a better load sharing mechanism for redundant links.

l Root bridge configuration

l Leaf node configuration

l Performing mCheck

l Digest snooping configuration

l No Agreement Check configuration

l Protection function configuration

VLAN

The volume describes VLAN (Virtual Local Area Network) configuration.

l Basic VLAN configuration

l Basic VLAN interface configuration

l Port-based VLAN configuration

QinQ

QinQ enables a service provider to serve customer networks comprising multiple VLANs by using a single VLAN.

l QinQ overview

l Basic QinQ configuration

l TPID value for QinQ frame configuration

BPDU Tunneling

l BPDU tunneling overview

l BPDU transparent transmission configuration

l Configuration of destination multicast MAC address for BPDU tunnel frames

Port Isolation

To save VLAN resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and security.

l Port isolation overview

l Isolation group configuration

Logical Interface

Logical interfaces are virtual interfaces capable of data exchange but do not exist physically.

l Loopback interface configuration

l Null interface configuration

l RPR logical interface configuration

l Subinterface configuration

l MP-group interface configuration

Ethernet OAM

Ethernet OAM (operation, administration, and maintenance) is a network monitoring tool.

l Basic Ethernet OAM functions configuration

l Configuration of periods and thresholds for Ethernet OAM link error event detection

l OAM loopback testing configuration

ATM

Asynchronous Transfer Mode (ATM) is a technology based on packet transmission mode while incorporating the high speed of circuit transmission mode.

l ATM interface configuration

l ATM subinterface configuration

l PVC parameters configuration

l Configuration of applications carried by ATM

VLAN Termination

VLAN termination is mainly used for communication between different VLANs, and communication between LANs and WANs.

l VLAN termination overview

l TPID configuration for VLAN packets

l Configuration of QinQ termination

3.2 IP Services Volume

Table 3-2 Features in the IP Services volume

Features

Description

ARP

Address Resolution Protocol (ARP) is used to resolve an IP address into a data link layer address.

l ARP configuration

l Gratuitous ARP configuration

l ARP source suppression configuration

l Proxy ARP configuration

DHCP

DHCP is built on a client-server model, in which the client sends a configuration request and then the server returns a reply to send configuration parameters such as an IP address to the client.

l DHCP server configuration

l DHCP relay configuration

DNS

Domain Name System (DNS) is a distributed database used by TCP/IP applications to translate domain names into corresponding IP addresses.

l Configuration of static domain name resolution

l Configuration of dynamic domain name resolution

l DNS proxy configuration

IP Addressing

l IP address configuration

l Configuration of IP unnumbered

IP Performance

In some network environments, you need to adjust the IP parameters to achieve best network performance.

l Configuration of the maximum TCP segment size (MSS) of the interface

l Configuration of SYN cookie feature and protection against Naptha attack

l TCP optional parameters configuration

l Configuration of ICMP to send error packets

UDP Helper

UDP Helper is to relay specified UDP packets. In other words, UDP Helper functions as a relay agent that converts UDP broadcast packets into unicast packets and forwards them to a specified destination server.

l UDP Helper configuration

URPF

Unicast Reverse Path Forwarding (URPF) protects a network against attacks based on source address spoofing.

l Introduction to basic URPF concepts

l URPF processing flow

l URPF configuration

IPv6 Basics

Internet Protocol Version 6 (IPv6), also called IP next generation (IPng), was designed by the Internet Engineering Task Force (IETF) as the successor to Internet Protocol Version 4 (IPv4).

l Basic IPv6 functions configuration

l IPv6 Neighbor Discovery Protocol (NDP) configuration

l PMTU discovery configuration

l IPv6 TCP properties configuration

l Configuration of IPv6 FIB-based forwarding

l Configuration of ICMPv6 packets sending

l IPv6 DNS configuration

Dual Stack

A network node that supports both IPv4 and IPv6 is called a dual stack node. A dual stack node configured with an IPv4 address and an IPv6 address can have both IPv4 and IPv6 packets transmitted.

l Dual stack configuration

Tunneling

Tunneling is an encapsulation technology, which utilizes one network transport protocol to encapsulate packets of another network transport protocol and transfer them over the network.

l Configuration of IPv6 manual tunnel

l Configuration of automatic IPv4-compatible IPv6 tunnel

l 6to4 tunnel configuration

l ISAPTAP tunnel configuration

l IPv4 over IPv4 tunnel configuration

GRE

Generic Routing Encapsulation (GRE) is a protocol designed for performing encapsulation of one network layer protocol (for example, IP or IPX) over another network layer protocol (for example, IP).

l GRE tunnel configuration

Adjacency Table

An adjacency table manages the information on the neighbors that are both connected and active.

3.3 IP Routing Volume

Table 3-3 Features in the IP Routing volume

Features

Description

IP Routing Overview

This volume introduces basic IP routing concepts.

l Routing protocol overview

l IP routing and routing table

BGP

The Border Gateway Protocol (BGP) is a dynamic inter-AS route discovery protocol.

l BGP basic functions configuration

l Configuration of route distribution and reception

l BGP route attributes configuration

l Large scale BGP network configuration

l BGP GR configuration

IS-IS

IS-IS is an Interior Gateway Protocol (IGP) used within an Autonomous System. It adopts the Shortest Path First (SPF) algorithm for route calculation.

l IS-IS basic functions configuration

l IS-IS routing information control configuration

l Tuning and optimization of IS-IS

l IS-IS GR configuration

OSPF

Open Shortest Path First (OSPF) is a link state interior gateway protocol developed by the OSPF working group of the Internet Engineering Task Force (IETF).

l OSPF basic functions configuration

l OSPF area parameters configuration

l OSPF network types configuration

l OSPF route control configuration

l OSPF GR configuration

RIP

RIP is a simple Interior Gateway Protocol (IGP), mainly used in small-sized networks, such as academic networks and simple LANs.

l RIP basic functions configuration

l RIP route control configuration

Routing Policy

A routing policy is used on a router for route inspection, filtering, attributes modification when routes are received, advertised, or redistributed.

l Filtering list configuration

l Routing policy configuration

Static Routing

A static route is a special route that is manually configured by the network administrator. The proper configuration and usage of static routes can improve network performance and ensure bandwidth for important network applications.

l Static route configuration

l Detection reachability of the static route's next hop

IPv6 BGP

IPv6 BGP utilizes BGP multiprotocol extensions for application in IPv6 networks. The original messaging and routing mechanisms of BGP are not changed.

l IPv6 BGP configuration

l Configuration of route distribution and reception

l Configuration of IPv6 BGP route attributes

l Tuning and optimization of IPv6 BGP networks

IPv6 IS-IS

The IS-IS routing protocol supports multiple network protocols, including IPv6. Two type-length-values (TLVs) and a new network layer protocol identifier (NLPID) are defined to enable IPv6 support for IS-IS.

l IPv6-ISIS basic functions configuration

l IPv6-ISIS routing information control configuration

IPv6 OSPFv3

OSPFv3 is OSPF (Open Shortest Path First) version 3 for short, supporting IPv6.

l OSPFv3 basic functions configuration

l OSPFv3 area parameters configuration

l OSPFv3 routing information control configuration

IPv6 RIPng

l RIP next generation (RIPng) is an extension of RIP-2 for IPv4. RIPng basic functions configuration

l RIPng route control configuration

IPv6 Static Routing

Similar to IPv4 static routes, IPv6 static routes work well in simple IPv6 network environments.

l IPv6 static route configuration

BFD

Bidirectional forwarding detection (BFD) provides a single mechanism to quickly detect and monitor the connectivity of links or IP forwarding paths in networks.

l BFD basic functions configuration

l Protocol-based BFD configuration

l BFD trap configuration

3.4 IP Multicast Volume

Table 3-4 Features in IP Multicast volume

Features

Description

Multicast Overview

The volume gives multicast technology overview.

l Multicast models

l Multicast architecture

l Multicast packet forwarding mechanism

Multicast Routing and Forwarding

The multicast routing protocol uses the reverse path forwarding (RPF) check mechanism to ensure multicast data delivery along the correct path.

l Introduction to multicast routing and forwarding

l Multicast routing and forwarding configuration

IGMP Snooping

Internet Group Management Protocol Snooping (IGMP Snooping) is a multicast constraining mechanism that runs on Layer 2 devices to manage and control multicast groups.

l Basic functions configuration of IGMP Snooping

l IGMP Snooping port functions configuration

l IGMP Snooping querier configuration

l IGMP Snooping policy configuration

IGMP

As a TCP/IP protocol responsible for IP multicast group member management, the Internet Group Management Protocol (IGMP) is used by IP hosts to establish and maintain their multicast group memberships to immediately neighboring multicast routers.

l IGMP basic functions configuration

l IGMP performance adjustment

MSDP

Multicast source discovery protocol (MSDP) is an inter-domain multicast solution developed to address the interconnection of protocol independent multicast sparse mode (PIM-SM) domains.

l MSDP basic functions configuration

l MSDP peer connection configuration

l SA message configuration

PIM

Protocol Independent Multicast (PIM) provides IP multicast forwarding by leveraging static routes or unicast routing tables generated by any unicast routing protocol.

l PIM-DM configuration

l PIM-SM configuration

l PIM-SSM configuration

l PIM common features configuration

Multicast VLAN

This manual describes multicast VLAN configuration.

IPv6 Multicast Routing and Forwarding

The IPv6 multicast routing protocol uses the reverse path forwarding (RPF) to ensure IPv6 multicast data delivery along the correct path.

l Introduction to IPv6 multicast routing and forwarding

l IPV6 multicast routing and forwarding configuration

MLD Snooping

Multicast Listener Discovery Snooping (MLD Snooping) is an IPv6 multicast constraining mechanism that runs on Layer 2 devices to manage and control IPv6 multicast groups.

l MLD Snooping basic functions configuration

l MLD Snooping port functions configuration

l MLD Snooping querier configuration

l MLD Snooping policy configuration

MLD

The Multicast Listener Discovery protocol (MLD) is used by an IPv6 router to discover the presence of multicast listeners on the directly attached subnets.

l MLD basic functions configuration

l MLD performance adjustment

IPv6 PIM

IPv6 PIM is short for Protocol Independent Multicast for IPv6.

l IPv6 PIM-DM configuration

l IPv6 PIM-SM configuration

l IPv6 PIM-SSM configuration

l IPv6 PIM common features configuration

IPv6 Multicast VLAN

Configuration of IPv6 multicast VLANs.

Multicast VPN

l Multicast VPN overview

l MD VPN mechanism

l MD VPN configuration tasks

l MD VPN configuration

MBGP

Multi-protocol BGP for IP multicast is referred to as Multicast BGP (MBGP) for short. It carries routing information for multiple network layer protocols.

l MBGP basic functions configuration

l MBGP route attributes configuration

l Large scale MBGP network configuration

IPv6 MBGP

Multi-protocol BGP for IPv6 multicast is referred to as IPv6 multicast BGP (IPv6 MBGP). It carries routing information for multiple network layer protocols.

l IPv6 MBGP basic functions configuration

l IPv6 MBGP route attributes configuration

l Large scale IPv6 MBGP network configuration

3.5 MPLS Volume

Table 3-5 Features in MPLS volume

Features

Description

MPLS Basics

l MPLS configuration basics

l LDP overview

l MPLS basic capability

l PHP configuration

l Static LSP configuration

l MPLS LDP configuration

l LDP instance configuration

l Configuration of MPLS IP TTL processing

MPLS TE

l MPLS traffic engineering

l MPLS TE basic capabilities configuration

l Configuration of creating MPLS TE tunnel over static CR-LSP

l Configuration of MPLS TE tunnel with dynamic signaling protocol

l RSVP-TE advanced features configuration

l CR-LSP setup tuning

l MPLS TE tunnel setup tuning

l Traffic forwarding configuration

l Traffic forwarding tuning parameters configuration

l CR-LSP backup configuration

l Fast reroute configuration

VPLS

Virtual Private LAN Service (VPLS), also called Transparent LAN Service (TLS) or virtual private switched network service, can deliver a point-to-multipoint L2VPN service over public networks.

l VPLS overview

l Remote LDP session configuration

l BGP extensions configuration

l VPLS instance configuration

MPLS L2VPN

MPLS L2VPN provides Layer 2 VPN services on the MPLS network. It allows carriers to establish L2VPNs on different data link layer protocols.

l MPLS L2VPN configuration

l CCC MPLS L2VPN configuration

l SVC MPLS L2VPN configuration

l Martini MPLS L2VPN configuration

l Kompella MPLS L2VPN configuration

MPLS L3VPN

MPLS L3VPN is a kind of PE-based L3VPN technology for service provider VPN solutions.

l VPN instance configuration

l Basic MPLS L3VPN configuration

l Inter-provider VPN configuration

l HoVPN configuration

l OSPF sham link configuration

l Multi-VPN-instance CE configuration

l BGP AS number substitution

3.6 QoS Volume

Table 3-6 Features in QoS volume

Features

Description

QoS

In an internet, QoS refers to the ability of the network to forward packets.

l Traffic classification and traffic shaping configuration

l QoS policy configuration

l Hardware congestion management configuration

l Priority mapping configuration

l Congestion avoidance

l Aggregation CAR configuration

l Traffic mirroring configuration

HQoS

Hierarchical Quality of Service (HQoS) uniformly manages and hierarchically schedules traffic of multiple users and services.

l HQoS basic configuration

l Copy of forwarding groups and scheduler policies

l Configuration of traffic accounting for HQoS

3.7 Security Volume

Table 3-7 Features in Security volume

Features

Description

802.1x

As a port-based access control protocol, 802.1x authenticates and controls accessing devices at the port level.

l 802.1x configuration

l Guest VLAN configuration

AAA

Authentication, Authorization, and Accounting (AAA) provides a uniform framework for configuring these three security functions to implement the network security management.

l AAA configuration

l RADIUS configuration

l HWTACACS configuration

MAC Authentication

MAC authentication provides a way for authenticating users based on ports and MAC addresses.

l MAC authentication overview

l MAC authentication configuration

Portal

The manual introduces the portal authentication.

l Basic portal configuration

l Portal-free rule configuration

l Authentication subnet configuration

l Configuration of logging out users

IP Source Guard

By filtering packets on a per-port basis, IP source guard prevents illegal packets from traveling through, thus improving the network security.

l Introduction to IP source guard

l Dynamic binding configuration

ACL

An ACL is a set of rules (or a set of permit or deny statements) for determining which packets can pass and which should be rejected based on matching criteria such as source address, destination address, and port number. Flow templates are not supported.

l Creating of a time range

l Basic IPv4 ACL configuration

l Advanced IPv4 ACL configuration

l Configuration of Ethernet frame header ACL

l Basic IPv6 ACL configuration

l Advanced IPv6 ACL configuration

Password Control

Password control refers to a set of functions provided by the local authentication server to achieve password security based on predefined policies.

l Global password control management

l Local user password control management

l Super password control management

SSH2.0

Secure Shell (SSH) offers an approach to securely logging in to a remote device. By encryption and strong authentication, it protects devices against attacks such as IP spoofing and plain text password interception.

l Configuration of a device as an SSH server

l Configuration of a device as an SSH client

l SFTP configuration

l SFTP client configuration

3.8 System Volume

Table 3-8 Features in System volume

Features

Description

GR Overview

Graceful Restart ensures the continuity of packet forwarding when a routing protocol restarts.

l Basic concepts in GR

l GR communication procedure

l GR mechanism for several commonly used protocols

VRRP

Deploying VRRP on multicast and broadcast LANs such as Ethernet, you can ensure that the system can still provide highly reliable default links without changing configurations when a device fails and prevent network interruption due to a single link failure.

l VRRP configuration for IPv4

l VRRP configuration for IPv6

HA

High Availability (HA) feature can be used to achieve a higher degree of system availability.

l Introduction to HA

l HA configuration

Device Management

Through the device management function, you can view the current working state of a device, configure running parameters, and perform daily device maintenance and management.

l Device management configuration

NQA

Network Quality Analyzer (NQA) analyzes network performance, services and service quality through sending test packets, and provides you with network performance and service quality parameters.

l NQA server configuration

l Enabling the NQA client

l NQA test group configuration

l Collaboration function configuration

l Scheduling of NQA test group

NTP

Network Time Protocol (NTP) synchronizes timekeeping among distributed time servers and clients.

l NTP operation mode configuration

l Configuration of local clock as a reference source

l NTP optional parameters configuration

l Access-control rights configuration

l NTP authentication configuration

RMON

Remote Monitoring (RMON) provides an efficient means of monitoring subnets and allows SNMP to monitor remote network devices in a more proactive and effective way. It reduces traffic between network management station (NMS) and agent, facilitating large network management.

l RMON configuration

SNMP

Simple Network Management Protocol (SNMP) offers a framework to monitor network devices through TCP/IP protocol suite. It provides a set of basic operations in monitoring and maintaining the Internet.

l SNMP basic functions configuration

l Trap configuration

File System Management

A major function of the file system is to manage storage devices.

l File system management configuration

l FTP configuration

l TFTP configuration

System Maintaining and Debugging

For the majority of protocols and features supported, the system provides corresponding debugging information to help users diagnose errors.

l Introduction to system maintaining and debugging

l System maintaining and debugging operations

l System maintaining examples

Basic System Configuration

l Basic system configuration

Information Center

Acting as the system information hub, information center classifies and manages system information.

l Information center configuration

User Interface

User interface view is a feature that allows you to manage asynchronous serial interfaces that work in flow mode. By operating under user interface view, you can centralize the management of various configurations.

l Asynchronous serial interface attributes configuration

l Terminal attributes configuration

l Modem attributes configuration

l Auto-execute command configuration

l User privilege level configuration

l Configuration of access restriction on VTY user interfaces

l Configuration of authentication mode at login

MAC Address Table Management

Each entry in the MAC address table indicates the MAC address of a connected device, to which interface this device is connected and to which VLAN the interface belongs.

l MAC address table management configuration

Clock Monitoring

Clock monitoring module is responsible for providing highly-precise, highly-reliable SDH (synchronous digital hierarchy) line interface 38.88 MHz clock signals for different LPUs (line processing unit). It implements such functions as input clock source automatic selection, software phase-lock, and real-time monitoring of the clock status of the interface card. The module supports hardware reset of the clock card.

l Configuration of clock monitoring module of the SRPU

l SSM reference source configuration

l Input port of the line clock configuration

Track

The Track module is used to implement collaboration between different modules. The collaboration here involves three parts: the application modules, the Track module, and the detection modules.

l Track overview

l Configuration of collaboration between the track module and the detection modules

l Configuration of collaboration between the track module and the application modules

download
>

Related Documentation