H3C S3100 Series Ethernet Switches Command Manual-Release 22XX Series(V1.00)

HomeSupportResource CenterSwitchesH3C S3100 Switch SeriesH3C S3100 Switch SeriesTechnical DocumentsCommandCommand ReferencesH3C S3100 Series Ethernet Switches Command Manual-Release 22XX Series(V1.00)

Preface

Download the entire book or click on the links to the left for one chapter at a time.

 

H3C S3100 Series Ethernet Switches Command Manual-Release 22XX Series describes the commands available for the H3C S3100 Series Ethernet Switches.

This preface includes:

l          Audience

l          Organization

l          Software Version

l          Conventions

l          About the H3C S3100 Documentation Set

l          Obtaining Documentation

l          Documentation Feedback

Audience

This documentation is intended for:

l          Network planners

l          Field technical support and servicing engineers

l          Network administrators working with the S3100 series

Organization

H3C S3100 Series Ethernet Switches Command Reference-Release 22XX Series is organized as follows:

Part

Description

01-CLI Commands

CLI configuration commands

02-Login Commands

Ethernet switch login commands

User control commands

03-Configuration File Management Commands

Configuration file management commands

04-VLAN Commands

VLAN configuration commands

Port-based VLAN configuration commands

MAC Address-Based VLAN Configuration Commands(applicable only to the S3100-EI series)

Protocol-based VLAN configuration commands(applicable only to the S3100-EI series)

05-Static Route Commands

Static route configuration commands

06-IP Address-IP Performance Commands

IP address configuration commands

IP performance configuration commands

07-Voice VLAN Commands

Voice VLAN commands(applicable only to the S3100-EI series)

08-GVRP Commands

GARP commands

GVRP commands

09-Port Basic Configuration Commands

Port basic configuration commands

10-Port Aggregation Commands

Port aggregation configuration commands

11-Port Isolation Commands

Port isolation configuration commands

12-Port Security-Port Binding Commands

Port security commands

Port binding commands (applicable only to the S3100-EI series)

13-DLDP Commands

DLDP configuration commands (applicable only to the S3100-EI series)

14-MAC Address Table Management Commands

MAC address table configuration commands

15-MSTP Commands

MSTP configuration commands

16-Multicast Commands

IGMP snooping configuration commands

MLD snooping configuration commands (applicable only to the S3100-EI series)

IPv6 multicast VLAN configuration commands (applicable only to the S3100-EI series)

Multicast user control policy configuration commands (applicable only to the S3100-EI series)

Common multicast configuration commands

17-802.1x-System Guard Commands

802.1x configuration commands

Quick EAD deployment configuration commands

HABP configuration commands

System-guard configuration commands

18-AAA Commands

AAA configuration commands

RADIUS configuration commands

HWTACACS configuration commands

EAD configuration commands

19-MAC Address Authentication Commands

MAC address authentication basic function configuration commands

MAC address authentication enhanced function configuration commands

20-Web Authentication Commands

Web authentication configuration commands

21-ARP Commands

ARP configuration commands

22-DHCP Commands

DHCP server configuration commands (applicable only to the S3100-EI series)

DHCP snooping configuration commands

DHCP packet rate limit configuration commands (applicable only to the S3100-EI series)

DHCP/BOOTP client configuration commands

23-ACL Commands

ACL configuration commands

24-QoS-QoS Profile Commands

QoS configuration commands

QoS profile configuration commands

25-Mirroring Commands

Mirroring commands

26-Stack-Cluster Commands

Stack function configuration commands

NDP configuration commands

NTDP configuration commands

Cluster configuration commands

Enhanced cluster feature configuration commands

27-PoE-PoE Profile Commands

PoE configuration commands

PoE profile configuration commands

28-SNMP-RMON Commands

SNMP configuration commands

RMON configuration commands

29-NTP Commands

NTP configuration commands

30-SSH Commands

SSH configuration commands

31-File System Management Commands

File system configuration commands

File attribute configuration commands

Configuration file backup and recovery commands

32-FTP-SFTP-TFTP Commands

FTP server/client configuration commands

SFTP server/client configuration commands

TFTP configuration commands

33-Information Center Commands

Information center configuration commands

34-System Maintenance and Debugging Commands

Basic system configuration and debugging commands

Network connectivity test commands

Device management commands

Scheduled task configuration commands

35-VLAN-VPN Commands

VLAN-VPN (or QinQ) configuration commands

Selective QinQ configuration commands (applicable only to the S3100-EI series)

BPDU tunnel configuration commands (applicable only to the S3100-EI series)

36-VLAN Mapping Commands

One-to-one VLAN mapping configuration commands (applicable only to the S3100-EI series)

Many-to-one VLAN mapping configuration commands (applicable only to the S3100-EI series)

37-HWPing Commands

HWPing client commands

HWPing server commands

38-IPv6 Management Commands

Basic IPv6 configuration commands

IPv6 application configuration commands

39-DNS Commands

Domain name resolution commands

40-Smart Link-Monitor Link Commands

Smart link configuration commands (applicable only to the S3100-EI series)

Monitor link configuration commands (applicable only to the S3100-EI series)

41-ARP and IP Attack Defense Commands

ARP and IP attack defense configuration commands

42-LLDP Commands

LLDP configuration commands

43-PKI Commands

PKI configuration commands

44-SSL Commands

SSL configuration commands

45-HTTPS Commands

HTTPS configuration commands

46-Ethernet OAM Commands

Ethernet OAM configuration commands (applicable only to the S3100-EI series)

47-CFD Commands

CFD configuration commands (applicable only to the S3100-EI series)

 

Software Version

H3C S3100 Series Ethernet Switches Operation Manual-Release 22XX Series and H3C S3100 Series Ethernet Switches Command Manual-Release 22XX Series are for the software version Release 22XX Series of the S3100-SI series and S3100-EI series switches.

Compared with Release 21XX Series, some new commands are added in Release 22XX Series. For more information, see Table -1.

Table -1 Added commands

Software version

Added commands compared with the earlier version Release 2108P04

Part

Release 2211P06

mac-address-mapping(applicable only to the S3100-EI series)

14-MAC Address Table Management Commands

mac-authentication timer offline-detect offline-detect-valueIn the Ethernet port view

19-MAC Address Authentication Commands

web-authentication free-user ip ip-address mac mac-address (applicable only to the S3100-EI series)

20-Web Authentication Commands

web-authentication move-mode { auto | secure (applicable only to the S3100-EI series)

web-authentication web-proxy port port-number (applicable only to the S3100-EI series)

Release 2211P02

Multicast user control policy commands (applicable only to the S3100-EI series)

16-Multicast Commands

dot1x unicast-trigger (applicable only to the S3100-EI series)

17-802.1x-System Guard Commands

dot1x auth-fail vlan authfail-vlan-id (applicable only to the S3100-EI series)

mac-authentication auth-fail vlan authfail-vlan-id (applicable only to the S3100-EI series)

19-MAC Address Authentication Commands

web-authentication auth-fail vlan authfail-vlan-id (applicable only to the S3100-EI series)

20-Web Authentication Commands

web-authentication select method extended (applicable only to the S3100-EI series)

cluster-local-user

26-Stack-Cluster Commands

cluster-snmp-agent community

cluster-snmp-agent group v3

cluster-snmp-agent mib-view included

cluster-snmp-agent usm-user v3

vlan-mapping n-to-1

36-VLAN Mapping Commands

dhcp-snooping information ignore-vlanmapping

dhcp-snooping ipv6 information enable

38-IPv6 Management Commands

dhcp-snooping ipv6 information option { 18 | 37 }

dhcp-snooping ipv6 information remote-id { ipv4-address ipv4-address | ipv6-address ipv6-address | string string | sysname }

Ethernet OAM commands (applicable only to the S3100-EI series)

46-Ethernet OAM Commands

CFD commands (applicable only to the S3100-EI series)

47-CFD Commands

Release 2209

display mac-vlan

04-VLAN Commands

display mac-vlan interface

mac-vlan enable

mac-vlan mac-address

voice vlan qos

07-Voice VLAN Commands

speed auto

09-Port Basic Configuration Commands

storm-constrain

storm-constrain control

storm-constrain enable

storm-constrain interval

port-security guest-vlan vlan-id

12-Port Security-Port Binding Commands

port-security timer guest-vlan-reauth interval

port-security timer autolearn age

igmp-snooping nonflooding-enable

16-Multicast Commands

MLD commands (applicable only to the S3100-EI series)

IPv6 multicast VLAN commands (applicable only to the S3100-EI series)

dot1x mandatory-domain

17-802.1x-System Guard Commands

accounting start-mode { with-ip | without-ip }

18-AAA Commands

User type-based server commands, including accounting lan-access, accounting login, authentication lan-access, authentication login, authorization login, scheme lan-access, scheme login, and state secondary

Add commands  (applicable only to the S3100-EI series) : web-authentication customize, web-authentication cut connection, web-authentication enable, web-authentication free-ip, web-authentication free-user, web-authentication max-connection, web-authentication protocol, web-authentication select method, web-authentication timer idle-cut, web-authentication timer max-online, web-authentication web-server, display web-authentication configuration, display web-authentication connection

20-Web Authentication Commands

DHCP Server commands

22-DHCP Commands

reset dhcp-snooping [ ip-address ]

rule (for IPv6 ACLs) (applicable only to the S3100-EI series)

23-ACL Commands

traffic-remark-vlanid

24-QoS-QoS Profile Commands

command-alias enable

34-System Maintenance and Debugging Commands

command-alias mapping

display command-alias

display job

job

port auto-power-down

time at

time delay

view

Add commands: datafill, description, display hwping statistics, sendpacket passroute, ttl, filesize, history-record enable, history keep-time, statistics, statistics keep-time, test-time begin, hwping-agent max-requests, hwping-agent clear, and adv-factor

37-HWPing Commands

ND snooping commands (applicable only to the S3100-EI series)

38-IPv6 Management Commands

ND detection commands (applicable only to the S3100-EI series)

DHCPv6 snooping commands (applicable only to the S3100-EI series)

IPv6 filtering commands (applicable only to the S3100-EI series)

ARP packet filtering based on gateway’s address commands (applicable only to the S3100-EI series)

41-ARP and IP Attack Defense Commands

Configuring the maximum number of dynamic ARP entries a VLAN interface can learn commands (applicable only to the S3100-EI series)

ARP/IP attack defense based on 802.1x commands (applicable only to the S3100-EI series)

LLDP commands

42-LLDP Commands

PKI commands

43-PKI Commands

SSL commands

44-SSL Commands

HTTPS commands

45-HTTPS Commands

 

Compared with Release 21XX Series, some commands are extended in Release 22XX Series. For more information, see Table -2.

Table -2 Extended commands

Software version

Extended commands

Part

Release 2211P06

mac-authentication timer offline-detect offline-detect-value

19-MAC Address Authentication Commands

Release 2211P02

broadcast-suppression { ratio | bps max-bps | pps max-pps }

09-Port Basic Configuration Commands

unknown-multicast drop enable [ pon-ignore ]

16-Multicast Commands

Release 2209

am user-bind mac-addr mac-address { ip-addr ip-address | ipv6 ipv6-address } [ interface interface-type interface-number ] (applicable only to the S3100-EI series)

12-Port Security-Port Binding Commands

am user-bind [ mac-addr mac-address ] [ ip-addr ip-address | ipv6 ipv6-address ] (applicable only to the S3100-EI series)

display am user-bind ipv6 [ interface interface-type interface-number | ipv6-address | mac-address mac-address | unit unit-id ] (applicable only to the S3100-EI series)

cut connection { all | access-type { dot1x | mac-authentication } | domain isp-name | interface interface-type interface-number | ip ip-address | ipv6 ipv6-address | mac mac-address | radius-scheme radius-scheme-name | vlan vlan-id | ucibindex ucib-index | user-name user-name }

18-AAA Commands

display connection [ access-type { dot1x | mac-authentication } | domain isp-name | interface interface-type interface-number | ip ip-address | ipv6 ipv6-address | mac mac-address | radius-scheme radius-scheme-name | hwtacacs-scheme hwtacacs-scheme-name | vlan vlan-id | ucibindex ucib-index | user-name user-name ]

nas-ip ipv6 ipv6-address

primary accounting { ip-address | ipv6 ipv6-address } [ port-number ] [ key string ]

primary authentication { ip-address | ipv6 ipv6-address } [ port-number ] [ key string ]

radius nas-ip ipv6 ipv6-address

secondary accounting { ip-address | ipv6 ipv6-address } [ port-number ] [ key string ]

secondary authentication { ip-address | ipv6 ipv6-address } [ port-number ] [ key string ]

state secondary { accounting | authentication } { ip-address | ipv6 ipv6-address } { active | block }

snmp-agent target-host trap address udp-domain { ip-address | ipv6 ipv6-address } [ udp-port port-number ] params securityname security-string [ v1 | v2c | v3 [authentication | privacy ] ]

28-SNMP-RMON Commands

 

Conventions

This section describes the conventions used in this documentation set.

Command conventions

Convention

Description

Boldface

Bold text represents commands and keywords that you enter literally as shown.

italic

Italic text represents arguments that you replace with actual values.

[ ]

Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none.

&<1-n>

The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times.

#

A line that starts with a pound (#) sign is comments.

 

GUI conventions

Convention

Description

Boldface

Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.

Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

 

Symbols

Convention

Description

Means reader be extremely careful. Improper operation may cause bodily injury.

Means reader be careful. Improper operation may cause data loss or damage to equipment.

Means an action or information that needs special attention to ensure successful configuration or good performance.

Means a complementary description.

Means techniques helpful for you to make configuration with ease.

 

About the H3C S3100 Documentation Set

The H3C S3100 documentation set includes:

Category

Documents

Purposes

Product description and specifications

l      S3100-EI series switches marketing brochure

l      S3100-SI series switches marketing brochure

Describe product specifications and benefits.

H3C Low End Series Ethernet Switches Pluggable Modules Manual

Describes the types, appearance, and specifications of pluggable modules.

RPS user manuals

Describe the RPS power supply appearance, functions, and specifications.

RPS Ordering Information for H3C Low-End Ethernet Switches

Describe the switch models that can use RPS power supply modules and the RPS power cable specifications.

Hardware specifications and installation

Compliance and Safety Manual

Provides regulatory information and the safety instructions that must be followed during installation.

Installation guide

Provides a complete guide to hardware installation and hardware specifications.

H3C Pluggable SFP[SFP+][XFP] Transceiver Modules Installation Guide

Guides you through installing SFP/SFP+/XFP transceiver modules.

Software configuration

Operation manuals

Describe software features and configuration procedures.

Command references

Provide a quick reference to all available commands.

H3C Low-End Ethernet Switches Configuration Example

H3C Low-End Ethernet Switches Configuration Guide

Describe typical network scenarios and provide configuration examples and instructions.

Operations and maintenance

H3C Series Ethernet Switches Login Password Recovery Manual

Describes the method of recovering or changing the login password if the password is lost.

Release notes

Describe product version information (including hardware and software compatibility matrix, software compatibility, feature updates, and technical information) and software upgrade methods.

 

Obtaining Documentation

You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com.

Click the links on the top navigation bar to obtain different categories of product documentation:

[Technical Support & Documents > Technical Documents] – Provides hardware installation, software feature configuration and maintenance documentation.

[Products & Solutions] – Provides information about products and technologies.

[Technical Support & Documents > Software Download] – Provides the documentation released with the software version.

Documentation Feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.