H3C S9500 Operation Manual-Release2132[V2.03]-00 Product Overview

Download


Chapter 1 Obtaining the Documentation

H3C Technologies Co., Ltd. provides various ways for you to obtain documentation, through which you can obtain the product documentations and those concerning newly added new features. The documentations are available in one of the following ways:

l CD-ROMs shipped with the devices

l H3C website

l Software release notes

1.1 CD-ROMs Shipped with the Devices

H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete product document set, including the operation manual and command manual. After installing the reader program provided by the CD-ROM, you can search for the desired contents in a convenient way through the reader interface.

The contents in the manual are subject to update on an irregular basis due to product version upgrade or some other reasons. Therefore, the contents in the CD-ROM may not be the latest version. For the latest software documentation, go to the H3C website.

1.2 H3C Website

Perform the following steps to query and download the product documentation from the H3C website.

Table 1-1 Download documentation from the H3C website

How to apply for an account

Access the homepage of H3C at http://www.h3c.com and click Registration at the top right. In the displayed page, provide your information and click Submit to register.

How to get documentation

In the homepage, select Technical Support & Document > Technical Documents from the navigation bar at the top.

Select a product for its documents.

1.3 Software Release Notes

With software upgrade, new software features may be added. You can acquire the information about the newly added software features through software release notes.


Chapter 2 Product Features

2.1 Introduction to Product

The S9500 Series Routing Switches (hereinafter referred to as the S9500 series) are developed by Hangzhou H3C Technologies Co., Ltd. (H3C) for use on business-oriented enterprise networks, the distribution layer of large MANs, the core layer of small MANs, and the backbone of large enterprise networks and campus networks. They can serve as switching cores and convergence centers.

2.2 Feature Lists

The S9500 series support abundant features and the related documents are divided into the volumes as listed in Table 2-1.

Table 2-1 Feature list

Volume

Features

Access Volume

Ethernet Interface

POS Interface

GVRP

Link Aggregation

Port Mirroring

RPR

Ethernet OAM

MSTP

VLAN

QinQ

BPDU Tunneling

Port Isolation

IP Services Volume

ARP

DHCP

DNS

IP Address

IP Performance

UDP Helper

IPv6 Basics

Dual Stack

Tunneling

Adjacency Table

IP Routing Volume

IP Routing Overview

BGP

IS-IS

OSPF

RIP

Routing Policy

Static Routing

IPv6 BGP

IPv6 IS-IS

IPv6 OSPFv3

IPv6 RIPng

IPv6 Static Routing

IP Multicast Volume

Multicast Overview

Multicast Routing and Forwarding

IGMP Snooping

IGMP

PIM

MSDP

IPv6 Multicast Routing and Forwarding

MLD Snooping

MLD

IPv6 PIM

Multicast VLAN

MPLS VPN Volume

MPLS

MPLS TE

VPLS

MPLS L2VPN

MPLS L3VPN

MPLS Hybrid Insertion

GRE

QoS ACL Volume

QoS

ACL

Security Volume

802.1x

AAA RADIUS HWTACACS

MAC Authentication

L3+NAT

Password Control

SSH2.0

Portal

System Volume

GR

VRRP

HA

Device Management

NQA

NetStream

NTP

RMON

SNMP

File System Management

System Maintenance and Debugging

Basic System Configuration

Information Center

User Interface

MAC Address Table Management

PoE

Clock Monitoring

OAA Volume

OAP Module

ACSEI


Chapter 3 Features

The following sections provide an overview of the main features of each module supported by the S9500 series.

3.1 Access Volume

Table 3-1 Features in Access volume

Features (operation manual)

Description

Ethernet Interface

The volume describes:

l Ethernet port overview

l Ethernet port configuration

POS Interface

Packet over SONET/SDH (POS) is a technology used in MAN (metropolitan area network) and WAN (wide area network) for data packet transmission. The volume describes:

l POS port overview

l POS port configuration

GVRP

GVRP is a GARP application. The volume describes:

l GARP overview

l GVRP configuration

Link Aggregation

Link aggregation means aggregating several ports together into an aggregation group. The volume describes:

l Link aggregation overview

l Link aggregation configuration

Port Mirroring

Port mirroring is to copy the packets passing through a port to another port connected with a monitoring device for packet analysis. The volume describes:

l Port Mirroring overview

l Port Mirroring configuration

RPR

RPR is a new MAC layer protocol designed for transferring mass data services over MANs. The volume describes:

l RPR overview

l RPR configuration

Ethernet OAM

Ethernet OAM is a tool monitoring Layer-2 link status. It helps network administrators manage their networks effectively. The volume describes:

l Ethernet OAM overview

l Ethernet OAM configuration

MSTP

MSTP is compatible with STP and RSTP. The volume describes:

l Introduction to MSTP

l MSTP configuration

VLAN

A Virtual Local Area Network (VLAN) groups the devices in a LAN logically into segments to form virtual workgroups. The volume describes:

l VLAN overview and configuration

l VLAN types

l Super VLAN overview and configuration

l Isolate-user-VLAN overview and configuration

QinQ

QinQ is a technique that enables packets to be transmitted across the operators’ backbone networks with VLAN tags of private networks nested in those of public networks. The volume describes:

l QinQ overview

l Basic QinQ configuration

BPDU Tunneling

The BPDU tunneling feature enables geographically segmented customer network to transmit BPDU packets transparently over the specified VLAN on the service provider network. The volume describes:

l BPDU tunnel overview

l BPDU tunnel configuration

Port Isolation

Using the port isolation feature, you can place different user ports into the same VLAN. The volume describes:

l Port isolation overview

l Port isolation configuration

3.2 IP Services Volume

Table 3-2 Features in the IP Services volume

Features (operation manual)

Description

ARP

Address Resolution Protocol (ARP) is used to resolve an IP address into a data link layer address. The volume describes:

l ARP Overview

l ARP configuration

l Proxy ARP configuration

DHCP

DHCP is built on a client-server model, in which the client sends a configuration request and then the server returns a reply to send configuration parameters such as an IP address to the client. The volume describes:

l DHCP overview

l DHCP server configuration

l DHCP relay agent configuration

DNS

Used in the TCP/IP application, Domain Name System (DNS) is a distributed database which provides the translation between domain name and the IP address. The volume describes:

l Introduction to DNS

l DNS configuration

IP Address

An IP address is a 32-bit address allocated to a network interface on a device that is attached to the Internet. The volume describes:

l Introduction to IP addresses

l IP address configuration

l IP unnumbered configuration

IP Performance

In some network environments, you need to adjust the IP parameters to achieve best network performance. The volume describes:

l IP performance overview

l IP performance configuration

UDP Helper

UDP Helper functions as a relay agent that converts UDP broadcast packets into unicast packets and forwards them to a specified server. The volume describes:

l UDP Helper overview

l UDP Helper configuration

IPv6 Basics

Internet protocol version 6 (IPv6), also called IP next generation (IPng), was designed by the Internet Engineering Task Force (IETF) as the successor to Internet protocol version 4 (IPv4). The volume describes:

l IPv6 overview

l Basic IPv6 functions configuration

l IPv6 NDP configuration

l PMTU discovery configuration

l IPv6 TCP properties configuration

l IPv6 FIB-Based forwarding configuration

l Capacity and update period of token bucket configuration

l IPv6 DNS configuration

Dual Stack

A network node that supports both IPv4 and IPv6 is called a dual stack node. A dual stack node configured with an IPv4 address and an IPv6 address can have both IPv4 and IPv6 packets transmitted. The volume describes:

l Dual stack overview

l Dual stack configuration

Tunneling

Tunneling is an encapsulation technique, which utilizes one network transport protocol to encapsulate packets of another network transport protocol and transfer them over the network. The volume describes:

l Tunneling overview

l IPv6 manually tunnel configuration

l Automatic IPv4-compatible IPv6 tunnel configuration

l 6to4 tunnel configuration

l 6to4 relay configuration

l ISATAP tunnel configuration

l IPv4 over IPv4 tunnel configuration

l Tunnel hybrid insertion configuration

Adjacency Table

An adjacency table manages the information on the neighbors that are both connected and active. The volume describes:

l Adjacency table overview

l Displaying and maintaining the adjacency table

3.3 IP Routing Volume

Table 3-3 Features in the IP Routing volume

Features (operation manual)

Description

IP Routing Overview

The volume describes:

l Introduction to IP routing and routing table

l Routing protocol overview

BGP

Border gateway protocol (BGP) is an inter-autonomous system (inter-AS) dynamic route discovery protocol. The volume describes:

l BGP overview

l BGP basic functions configuration

l BGP routing attributes configuration

l Large scale BGP network configuration

IS-IS

Intermediate System-to-Intermediate System (IS-IS) is a link state protocol, which uses the shortest path first (SPF) algorithm. The volume describes:

l IS-IS overview

l IS-IS basic functions configuration

l IS-IS routing information control configuration

l IS-IS network optimization configuration

OSPF

Open Shortest Path First (OSPF) is an Interior Gateway Protocol based on the link state developed by IETF. The volume describes:

l OSPF overview

l OSPF basic functions configuration

l OSPF area parameters configuration

l OSPF network types configuration

l OSPF route control configuration

l OSPF network optimization configuration

RIP

Routing Information Protocol (RIP) is a simple Interior Gateway Protocol (IGP), mainly used in small-sized networks. The volume describes:

l RIP overview

l RIP basic functions configuration

l RIP advanced functions configuration

l RIP network optimization configuration

Routing Policy

Routing policy is used on the router for route inspection, filtering, attributes modifying when routes are received, advertised, or redistributed. The volume describes:

l Route policy overview

l Route policy configuration

Static Routing

A static route is manually configured by the administrator. The proper configuration and usage of static routes can improve network performance and ensure bandwidth for important network applications. The volume describes:

l Static route overview

l Static route configuration

IPv6 BGP

To support multiple network layer protocols, IETF extended BGP-4 by introducing IPv6 BGP. The volume describes:

l IPv6 BGP overview

l IPv6 BGP basic functions configuration

l Controlling route distribution and reception

l IPv6 BGP route attributes configuration

l IPv6 BGP networks optimization configuration

l Large scale IPv6 BGP network configuration

IPv6 IS-IS

The IS-IS routing protocol supports multiple network protocols, including IPv6. IS-IS with IPv6 support is called IPv6 IS-IS dynamic routing protocol. The volume describes:

l IPv6 IS-IS overview

l IPv6 IS-IS routing configuration

IPv6 OSPFv3

OSPFv3 is OSPF version 3 for short, supporting IPv6 and compliant with RFC2740 (OSPF for IPv6). The volume describes:

l OSPFv3 overview

l OSPFv3 basic functions configuration

l OSPFv3 area parameters configuration

l OSPFv3 routing information management configuration

l OSPF v3 network optimization configuration

IPv6 RIPng

RIP next generation (RIPng) is an extension of RIP-2 for IPv4. RIPng for IPv6 is IPv6 RIPng. The volume describes:

l RIPng overview

l RIPng configuration

IPv6 Static Routing

Static routes are special routes that are manually configured by network administrators. Similar to IPv4 static routes, IPv6 static routes work well in simple IPv6 network environments. The volume describes:

l IPv6 static route overview

l IPv6 static route configuration

3.4 IP Multicast Volume

Table 3-4 Features in IP Multicast volume

Features (operation manual)

Description

Multicast Overview

The volume describes the main concepts in multicast:

l Multicast overview

l Multicast Models

l Multicast Architecture

l Multicast Packets Forwarding Mechanism

Multicast Routing and Forwarding

The volume describes:

l Multicast routing and forwarding overview

l Multicast routing and forwarding configuration

IGMP Snooping

Running at the data link layer, IGMP Snooping is a multicast control mechanism on the Layer 2 Ethernet switch and it is used for multicast group management and control. The volume describes:

l IGMP snooping overview

l IGMP snooping configuration

l Troubleshooting IGMP Snooping

IGMP

Internet Group Management Protocol (IGMP) is a protocol in the TCP/IP suite responsible for management of IP multicast members. The volume describes:

l IGMP overview

l Configuring basic functions of IGMP

l Configuring IGMP performance parameters

l Troubleshooting IGMP

PIM

PIM is widely used multicast routing protocols. It discovers multicast source and delivers information to the receivers. The volume describes:

l PIM overview

l Configuring PIM-DM

l Configuring PIM-SM

l Configuring PIM-SSM

l Configuring PIM Common Features

l Troubleshooting PIM

MSDP

Multicast source discovery protocol (MSDP) describes interconnection mechanism of multiple PIM-SM domains. It is used is to discover multicast source information in other PIM-SM domains. The volume describes:

l MSDP overview

l MSDP configuration

IPv6 Multicast Routing and Forwarding

The volume describes:

l IPv6 Multicast routing and forwarding overview

l IPv6 Multicast routing and forwarding configuration

MLD Snooping

Multicast Listener Discovery Snooping (MLD Snooping) is an IPv6 multicast constraining mechanism that runs on Layer 2 devices to manage and control IPv6 multicast groups. The volume describes:

l MLD Snooping overview

l MLD Snooping configuration

l Troubleshooting MLD Snooping

MLD

MLD is used by an IPv6 router or a routing switch to discover the presence of multicast listeners on directly-attached subnets. The volume describes:

l MLD overview

l MLD configuration

l Troubleshooting MLD

IPv6 PIM

IPv6 PIM discovers multicast source and delivers information to the receivers. The volume describes:

l IPv6 PIM Overview

l Configuring IPv6 PIM-DM

l Configuring IPv6 PIM-SM

l Configuring IPv6 PIM-SSM

l Troubleshooting IPv6 PIM

l Board Intermixing for IPv6 Multicast

Multicast VLAN

When users in different VLANs request the service, multicast flow is duplicated in each VLAN and thus a great deal of bandwidth is wasted. To solve this problem, you can add switch ports to a multicast VLAN and enable IGMP Snooping to allow users in different VLANs to share the same multicast VLAN. The volume describes:

l Multicast VLAN overview

l Multicast VLAN configuration

3.5 MPLS VPN Volume

Table 3-5 Features in the MPLS VPN volume

Features (operation manual)

Description

MPLS Basics Configuration

MPLS (Multiprotocol Label Switching) brings together the advantages of the connectionless control with IP and the connection-oriented forwarding with ATM. In addition to the support from IP routing and control protocols, its powerful and flexible routing functions allows it to accommodate to various emerging applications. The volume describes:

l MPLS overview

l MPLS basic attributes configuration

MPLS TE

Network congestionoccur either when network resources are inadequate or when load distribution is unbalanced. Traffic engineering (TE) is intended to avoid the latter situation where partial congestion may occur as the result of inefficient resource allocation. The volume describes:

l MPLS TE overview

l MPLS TE configuration

VPLS

VPLS can deliver a point-to-multipoint L2VPN service over public networks. The volume describes:

l VPLS overview

l VPLS configuration

MPLS L2VPN

MPLS L2VPN provides Layer 2 VPN services on the MPLS network. The volume describes:

l MPLS L2VPN overview

l MPLS L2VPN configuration

MPLS L3VPN

MPLS L3VPN is a kind of PE-based L3VPN technology for service provider VPN solutions. The volume describes:

l MPLS L3VPN overview

l MPLS L3VPN configuration

MPLS Hybrid Insertion

The MPLS hybrid insertion feature is used to enable deployment of MPLS VPN services on cards that do not support MPLS. The volume describes:

l MPLS hybrid insertion overview

l MPLS hybrid insertion configuration

GRE

GRE is a protocol designed for performing encapsulation of one network layer protocol over another network layer protocol. The volume describes:

l GRE overview

l GRE configuration

3.6 QoS ACL Volume

Table 3-6 Features in the QoS ACL volume

Features (operation manual)

Description

QoS

The volume describes:

l QoS overview

l Traffic classification and traffic shaping configuration

l QoS policy configuration

l Hardware-based congestion management configuration

l Priority mapping configuration

l Congestion avoidance configuration

l Aggregation CAR configuration

l VLAN policy configuration

l Traffic mirroring configuration

l EACL configuration

l Outbound traffic accounting configuration

ACL

Access Control Lists (ACLs) are used to filter packets passing through network devices. The volume describes:

l ACL overview and ACL types

l ACL configuration

3.7 Security Volume

Table 3-7 Features in the Security volume

Features (operation manual)

Description

802.1x

IEEE 802.1x (hereinafter simplified as 802.1x) is a port-based network access control protocol that is used as the standard for LAN user access authentication. The volume describes:

l 802.1x overview

l 802.1x configuration

AAA RADIUS HWTACACS

Authentication, Authorization and Accounting (AAA) provide a uniform framework used for configuring these three security functions to implement the network security management. The volume describes:

l Introduction to AAA, RADIUS and HWTACACS

l AAA configuration

l RADIUS configuration

l HWTACACS configuration

MAC Authentication

MAC authentication provides a way for authenticating users based on ports and MAC addresses. The volume describes:

l MAC Authentication overview

l MAC Authentication configuration

L3+NAT

NAT is the procedure of translating the IP address in the header of an IP data packet into another IP address. The volume describes:

l NAT overview

l NAT configuration

Password Control

Password control refers to a set of functions provided by the local authentication server to achieve password security based on predefined policies. The volume describes:

l Password control configuration overview

l Password control configuration

SSH2.0

Secure shell (SSH) offers an approach to securely logging into a remote device. The volume describes:

l SSH2 overview

l SSH configuration

l SFTP service configuration

Portal

Portal authentication, as its name implies, helps control access to the Internet. The volume describes:

l Portal overview

l Portal configuration

3.8 System Volume

Table 3-8 Features in the System volume

Features (operation manual)

Description

GR

Graceful Restart ensures the continuity of packet forwarding when a routing protocol restarts. The volume describes:

l GR overview

l GR configuration

VRRP

The Virtual Router Redundancy Protocol (VRRP) is a fault-tolerant protocol. The volume describes:

l VRRP overview

l IPv4 VRRP configuration

l IPv6 VRRP configuration

HA

High Availability (HA) is to achieve a high availability of the system. The volume describes:

l HA overview

l HA configuration

Device Management

Through the device management function, you can view the current working state of a device, configure running parameters, and perform daily device maintenance and management. The volume describes:

l Device management overview

l How to manage devices (such as reboot the device, upgrade Boot ROM and so on)

NQA

NQA (network quality analyzer) is an enhanced Ping tool used for testing the performance of protocols running on networks. The volume describes:

l NQA overview

l NQA configuration

NetStream

NetStream provides the packet statistics function. The volume describes:

l Netstream overview

l Netstream configuration

NTP

Network Time Protocol (NTP) is the TCP/IP that advertises the accurate time throughout the network. The volume describes:

l NTP overview

l NTP configuration

RMON

RMON provides an efficient means of monitoring subnets and allows SNMP to monitor remote network devices in a more proactive and effective way. The volume describes:

l RMON overview

l RMON configuration

SNMP

Simple network management protocol (SNMP) offers a framework to monitor network devices through TCP/IP protocol suite. The volume describes:

l SNMP overview

l SNMP configuration

l Trap configuration

File System Management

A major function of the file system is to manage storage devices, mainly including creating the file system, creating, deleting, modifying and renaming a file or a directory and opening a file. The volume describes:

l File system management overview

l File system management configuration

l FTP configuration

l TFTP configuration

System Maintenance and Debugging

For the majority of protocols and features supported, the system provides corresponding debugging information to help users diagnose errors. The volume describes:

l Maintenance and debugging overview

l Maintenance and debugging configuration

Basic System Configuration

The volume describes:

l Basic configuration(such as configuring the device name, configuring user levels and command levels and so on)

l CLI Features

Information Center

The volume describes:

l Information center overview

l Information center configuration

User Interface

User interface view is a feature that allows you to manage asynchronous serial interfaces that work in flow mode.The volume describes:

l User interface iverview

l User interface configuration

MAC Address Table Management

A switch maintains a MAC address table for fast forwarding packets. The volume describes:

l MAC address table overview

l MAC address table management

PoE

Power over Ethernet (PoE) means that power sourcing equipment (PSE) supplies power to powered devices (PDs) such as IP telephone, wireless LAN access point, and web camera from Ethernet ports through twisted pair cables. The volume describes:

l PoE overview

l PoE configuration

Clock Monitoring

The clock module is responsible for providing high-precision and high-reliability synchronous 38.88 MHz SDH clock signals for all LPUs. The clock module selects an input clock source automatically, performs software phase-lock function, and monitors the board status in real time. The volume describes:

l Clock monitoring module overview

l Clock monitoring module configuration

3.9 OAA Volume

Table 3-9 Features in the OAA volume

Features (operation manual)

Description

OAP Module

Open Application Platform (OAP) is developed based on Open Application Architecture (OAA). The volume describes:

l OAP overview

l Redirecting to OAP module

l Resetting OAP

ACSEI

As a private protocol, ACSEI provides a method for exchanging information between ACFP clients and ACFP server. The volume describes:

l ACSEI overview

l ACSEI Server configuration