H3C S3600 Series Ethernet Switches Command Manual-Release 1702(V1.01)

HomeSupportResource CenterSwitchesH3C S3600 Switch SeriesH3C S3600 Switch SeriesTechnical DocumentsCommandCommand ReferencesH3C S3600 Series Ethernet Switches Command Manual-Release 1702(V1.01)

About This Document

The H3C S3600 Series Ethernet Switches Command Manual, Release 1702 describes the commands available in the S3600 series software release 1702.


This document is for administrators who are configuring and maintaining the S3600 series switches.

Part Organization

Table 1-1 presents the part organization of this document:

Table 1-1 Part organization




CLI Configuration Commands

2 Login

l      Login Commands

l      Login User Controlling Commands

l      User Level Switching Commands

3 Configuration File Management

Configuration File Management Commands


l      VLAN Configuration Commands

l      Port-Based VLAN Configuration Commands

l      Protocol-Based VLAN Configuration Commands

5 IP Address and Performance

l      IP Address Configuration Commands

l      IP Performance Configuration Commands

6 Voice VLAN

Voice VLAN Configuration Commands


l      GARP Configuration Commands

l      GVRP Configuration Commands

8 Port Basic Configuration

Port Basic Configuration Commands

9 Link Aggregation

Link Aggregation Configuration Commands

10 Port Isolation

Port Isolation Configuration Commands

11 Port Security-Port Binding

l      Port Security Configuration Commands

l      Port Binding Configuration Commands


DLDP Configuration Commands

13 MAC Address Table Management

MAC Address Table Management Configuration Commands

14 Auto Detect

Auto Detect Configuration Commands


MSTP Configuration Commands

16 Routing Protocol

l      Static Route Configuration Commands

l      RIP v1/v2 Configuration Commands

l      OSPF Configuration Commands (available only on the S3600-EI series)

l      Routing Policy Configuration Commands

l      Route Capacity Limiting Configuration Commands (available only on the S3600-EI series)

17 Multicast

l      Common Multicast Configuration Commands

l      IGMP Configuration Commands (available only on the S3600-EI series)

l      PIM Configuration Commands (available only on the S3600-EI series)

l      MSDP Configuration Commands (available only on the S3600-EI series)

l      IGMP Snooping Configuration Commands

18 802.1X and System Guard

l      802.1X Configuration Commands

l      Quick EAD Deployment Configuration Commands

l      HABP Configuration Commands

l      System Guard Configuration Commands

19 AAA

l      AAA Configuration Commands

l      RADIUS Configuration Commands

l      HWTACACS Configuration Commands

l      EAD Configuration Commands

20 Web Authentication

Web Authentication Configuration Commands

21 MAC Address Authentication

l      MAC Address Authentication Basic Function Configuration Commands

l      MAC Address Authentication Enhanced Function Configuration Commands


VRRP Configuration Commands

23 ARP

l      ARP Configuration Commands

l      ARP Attack Defense Configuration Commands

l      Proxy ARP Configuration Commands

l      Resilient ARP Configuration Commands

l      MFF Configuration Commands


l      DHCP Server Configuration Commands (available only on the S3600-EI series)

l      DHCP Relay Agent Configuration Commands

l      DHCP Snooping Configuration Commands

l      DHCP Packet Rate Limit Configuration Commands

l      DHCP/BOOTP Client Configuration Commands

25 ACL

ACL Configuration Commands

26 QoS-QoS Profile

l      QoS Configuration Commands

l      QoS Profile Configuration Commands

27-Web Cache Redirection

Web Cache Redirection Configuration Commands (available only on the S3600-EI series)

28 Mirroring

Mirroring Configuration Commands

29-IRF Fabric

IRF Fabric Configuration Commands

30 Cluster

l      Neighbor Discovery Protocol (NDP) Configuration Commands

l      Neighbor Topology Discovery Protocol (NTDP) Configuration Commands

l      Cluster Configuration Commands

l      Enhanced Cluster Feature Configuration Commands

31-PoE-PoE Profile

l      PoE Configuration Commands

l      PoE Profile Configuration Commands

32-UDP Helper

UDP Helper Configuration Commands


l      SNMP Configuration Commands

l      RMON Configuration Commands

34 NTP

NTP Configuration Commands

35 SSH

SSH Configuration Commands

36 File System Management

l      File System Configuration Commands

l      File Attribute Configuration Commands


l      FTP Server Configuration Commands

l      FTP Client Configuration Commands

l      SFTP Server Configuration Commands

l      SFTP Client Configuration Commands

l      TFTP Configuration Commands

38 Information Center

Information Center Configuration Commands

39 System Maintenance and Debugging

l      Basic System Configuration Commands

l      Network Connectivity Test Commands

l      Device Management Commands

l      Scheduled Task Configuration Commands


l      VLAN VPN Configuration Commands

l      Selective QinQ Configuration Commands

l      BPDU Tunnel Configuration Commands

41 HWPing

l      HWPing Client Configuration Commands

l      HWPing Server Configuration Commands

42 IPv6 Management

l      Basic IPv6 Configuration Commands

l      IPv6 Application Configuration Commands

43 DNS

DNS Configuration Commands

44 Smart Link-Monitor Link

l      Smart Link Configuration Commands

l      Monitor Link Configuration Commands

45 Access Management

Access Management Configuration Commands


LLDP Configuration Commands

47 PKI

PKI Configuration Commands

48 SSL

SSL Configuration Commands


HTTPS Configuration Commands


New and Modified Commands

H3C S3600 Series Ethernet Switches Operation Manual, Release 1702 and H3C S3600 Series Ethernet Switches Command Manual, Release 1702 are for software release 1702.

See Table 1-2 for new commands introduced in software release 1702.

Table 1-2 New commands in software release 1702

New commands


command-alias enable


command-alias mapping

display command-alias

icmp acl-priority

05-IP Address and Performance

voice vlan qos trust

06-Voice VLAN

voice vlan qos

flow-control no-pauseframe-sending

08-Port Basic Configuration

loopback-detection shutdown enable

loopback-detection interface-list enable

port-security guest-vlan

11-Port Security-Port Binding

port-security timer guest-vlan-reauth

port-security timer autolearn

prune delay (available only on the S3600-EI series)

17-Multicast Protocol

igmp-snooping special-query source-ip

igmp-snooping query-pkt-deny

system-guard cpu-rcv-limit

18-802.1X and System-Guard



web-authentication timer max-online

20-Web Authentication

web-authentication protocol

VRRP configuration commands (available only on the S3600-SI series Ethernet switches)


ARP attack defense configuration commands


local-proxy-arp enable

MFF configuration commands

ip check dot1x enable


reset dhcp-snooping [ ip-address ]

dhcp relay inform replace enable

rule (IPv6 ACL)


mirroring stp-collaboration




cluster-snmp-agent community

cluster-snmp-agent group v3

cluster-snmp-agent mib-view included

cluster-snmp-agent usm-user v3

display job

39-System Maintenance and Debugging


port auto-power-down

time at

time delay


igmp transparent enable


New HWPing commands, including: adv-factor, datafill, description, display hwping statistics, filesize, history keep-time, history-record enable, hwping-agent clear, hwping-agent max-requests, sendpacket passroute, statistics, statistics keep-time, test-time begin, and ttl.


LLDP configuration commands


PKI configuration commands


SSL configuration commands


HTTPS configuration commands



See Table 1-3 for command modifications in software release 1702 relative to software release 1602.

Table 1-3 Modified command in release 1702

Modified command


storm-constrain { broadcast | multicast | unicast } max-packets min-packets { pps | kbps }

08-Port Basic Configuration

am user-bind mac-addr mac-address ip-addr ip-address [ interface interface-type interface-number ]

11-Port Security-Port Binding

vlan-assignment-mode vlan-list


web-authentication customize file web-file

20-Web Authentication

ip check source ip-address [ mac-address ] [ qos-profile string ]


cluster switch-to { member-number | mac-address mac-address | administrator | sysname member-sysname }




Command conventions




The keywords of a command line are in Boldface.


Command arguments are in italic.

[ ]

Items (keywords or arguments) in square brackets [ ] are optional.

{ x | y | ... }

Alternative items are grouped in braces and separated by vertical bars. One is selected.

[ x | y | ... ]

Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected.

{ x | y | ... } *

Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected.

[ x | y | ... ] *

Optional alternative items are grouped in square brackets and separated by vertical bars. Many or none can be selected.


The argument(s) before the ampersand (&) sign can be entered 1 to n times.


A line starting with the # sign contains comments.


Command line interface (CLI) commands of H3C products are case insensitive.


GUI conventions




Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.

Multi-level menus are separated by angle brackets. For example, File > Create > Folder.





Means reader be extremely careful. Improper operation may cause bodily injury.

Means reader be careful. Improper operation may cause data loss or damage to equipment.

Means a complementary description.

Means techniques helpful for you to make configuration with ease.

H3C S3600 Series Documentation Guide

Obtaining the Documentation

You can obtain the H3C S3600 series documentation in these ways:

l          CD-ROMs shipped with the devices

l          H3C website

l          Software release notes


H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete set of electronic documents of the product, including operation manuals and command manuals. After installing the reader program provided by the CD-ROM, you can search for the desired contents in a convenient way through the reader interface.

The contents in the manual are subject to update on an irregular basis due to product version upgrade or some other reasons. Therefore, the contents in the CD-ROM may not be the latest version. This manual serves the purpose of user guide only. Unless otherwise noted, all the information in the document set does not claim or imply any warranty. For the latest software documentation, go to the H3C website.

H3C Website

To obtain up-to-date documentation and technical support, go to http://www.h3c.com.

Go to the following columns for different categories of product documentation:

[Products & Solutions]: Provides information about products and technologies, as well as solutions.

[Technical Support & Document > Technical Documents]: Provides several categories of product documentation, such as installation, configuration, and maintenance.

[Technical Support & Document > Software Download]: Provides the documentation released with the software version.

Software Release Notes

With software upgrade, new software features may be added. You can acquire the information about the newly added software features through software release notes.

Related Documentation

Use the documents listed in Table 2-1 together with H3C S3600 Series Ethernet Switches Command Manual to make full use of the benefits delivered by the S3600 series.

Table 2-1 Related documentation

Document title


H3C S3600 Series Ethernet Switches Operation Manual-Release 1702

Describes software features and guides you through the configuration procedures. An index is available for the ease of retrieval.

H3C S3600 Series Ethernet Switches  Installation Manual

Describes the physical views and hardware specifications of the H3C S3600 series switches, and guides you through the installation, power-on and startup, troubleshooting and maintenance procedures.

H3C S3600 Series Ethernet Switches Compliance and Safety Manual

Provides the safety and regulatory compliance statements, and describes the protection actions that you must take when installing and maintaining the H3C S3600 series switches.

H3C Low-End Ethernet Switches Configuration Guide

Describes the typical application scenarios, and provides configuration examples and configuration guidelines.


Finding Documents at the H3C Website

All these documents are available at the H3C website:

l              For software feature descriptions and configuration procedures, see H3C S3600 Series Ethernet Switches Operation Manual.

l              For command reference, see H3C S3600 Series Ethernet Switches Command Manual.

l              For hardware specifications, installation, and troubleshooting, see H3C S3600 Series Ethernet Switches Installation Manual.

l              For typical application scenarios, configuration examples, and configuration guidelines, see H3C Low-End Ethernet Switches Configuration Guides.

Documentation Feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.

Product Overview

The H3C S3600 Series Ethernet Switches are multilayer switching products. They support abundant Layer 3 features and enhanced extended functions, in addition to Layer 2 features. The switches come in two series:

l          The S3600-SI series supports basic routing functions, DHCP, basic IRF functions, and IGMP-Snooping.

l          The S3600-EI series supports advanced routing functions, DHCP, enhanced IRF functions, and enhanced multicast functions (including PIM-DM and PIM-SM).

See Table 3-1 for all S3600 switch models and their basic hardware specifications.

Table 3-1 S3600 switch hardware summary


Power supply unit (PSU)

Number of service ports

Number of 100 Mbps ports

Number of 1,000 Mbps uplink ports

Console port

H3C S3600-28P-SI



24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports


H3C S3600-28P-PWR-SI



24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports


H3C S3600-28TP-SI



24 10/100 Mbps (electrical)

2 Gigabit (SFP) ports

2 x 10/100/1,000 Mbps ports (electrical)


H3C S3600-52P-SI



48 10/100 Mbps (electrical)

4 Gigabit (SFP) ports


H3C S3600-28P-EI



24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports


H3C S3600-28F-EI



24 100 Mbps (SFP) ports

2 Gigabit (SFP) ports

2 10/100/1,000 Mbps ports (electrical)


H3C S3600-28P-PWR-EI



24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports


H3C S3600-52P-EI



48 10/100 Mbps ports (electrical)

4 Gigabit ports (SFP)


H3C S3600-52P-PWR-EI



48 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports


H3C S3600-52P-PWR-SI



48 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports



Network Scenarios

You can deploy the S3600 series on many types of networks, such as enterprise and broadband access networks. This section describes several typical application scenarios for the S3600 series.

Broadband Ethernet Access for Residential Communities

Deploy an S3600 series switch at the center of the broadband access network for a residential community. Connect the switch to the access S3100 series switches to reach end users, and to an upstream core Layer 3 switch through a GE port to access the MAN backbone.

Figure 3-1 Community access network


Branch or Small- to Medium-Sized Enterprise Networks

Deploy the S3600 series switches as backbone switches on a branch or small-to medium-sized enterprise network. Connect the switches to the headquarters or other branches through routers. As the business grows, you can cascade the S3600 series to extend the network.

Figure 3-2 Branch or small-to medium-sized enterprise network


Large Enterprise and Campus Networks

Deploy the S3600 series switches at the distribution layer of a large enterprise or campus network to implement Gigabit-to-backbone and 100 Mbps-to-desktop together with other H3C switches. Connect the S3600 switches to the access Layer 2 switches (for example, the S3100 series), and to the core Layer 3 switches through GE ports.

Figure 3-3 S3600 series application in a large enterprise or campus network