H3C S3600 Series Ethernet Switches Command Manual-Release 1702(V1.01)

HomeSupportResource CenterSwitchesH3C S3600 Switch SeriesH3C S3600 Switch SeriesTechnical DocumentsCommandCommand ReferencesH3C S3600 Series Ethernet Switches Command Manual-Release 1702(V1.01)

About This Document

The H3C S3600 Series Ethernet Switches Command Manual, Release 1702 describes the commands available in the S3600 series software release 1702.

Audience

This document is for administrators who are configuring and maintaining the S3600 series switches.

Part Organization

Table 1-1 presents the part organization of this document:

Table 1-1 Part organization

Part

Features

1 CLI

CLI Configuration Commands

2 Login

l      Login Commands

l      Login User Controlling Commands

l      User Level Switching Commands

3 Configuration File Management

Configuration File Management Commands

4 VLAN

l      VLAN Configuration Commands

l      Port-Based VLAN Configuration Commands

l      Protocol-Based VLAN Configuration Commands

5 IP Address and Performance

l      IP Address Configuration Commands

l      IP Performance Configuration Commands

6 Voice VLAN

Voice VLAN Configuration Commands

7 GVRP

l      GARP Configuration Commands

l      GVRP Configuration Commands

8 Port Basic Configuration

Port Basic Configuration Commands

9 Link Aggregation

Link Aggregation Configuration Commands

10 Port Isolation

Port Isolation Configuration Commands

11 Port Security-Port Binding

l      Port Security Configuration Commands

l      Port Binding Configuration Commands

12 DLDP

DLDP Configuration Commands

13 MAC Address Table Management

MAC Address Table Management Configuration Commands

14 Auto Detect

Auto Detect Configuration Commands

15 MSTP

MSTP Configuration Commands

16 Routing Protocol

l      Static Route Configuration Commands

l      RIP v1/v2 Configuration Commands

l      OSPF Configuration Commands (available only on the S3600-EI series)

l      Routing Policy Configuration Commands

l      Route Capacity Limiting Configuration Commands (available only on the S3600-EI series)

17 Multicast

l      Common Multicast Configuration Commands

l      IGMP Configuration Commands (available only on the S3600-EI series)

l      PIM Configuration Commands (available only on the S3600-EI series)

l      MSDP Configuration Commands (available only on the S3600-EI series)

l      IGMP Snooping Configuration Commands

18 802.1X and System Guard

l      802.1X Configuration Commands

l      Quick EAD Deployment Configuration Commands

l      HABP Configuration Commands

l      System Guard Configuration Commands

19 AAA

l      AAA Configuration Commands

l      RADIUS Configuration Commands

l      HWTACACS Configuration Commands

l      EAD Configuration Commands

20 Web Authentication

Web Authentication Configuration Commands

21 MAC Address Authentication

l      MAC Address Authentication Basic Function Configuration Commands

l      MAC Address Authentication Enhanced Function Configuration Commands

22 VRRP

VRRP Configuration Commands

23 ARP

l      ARP Configuration Commands

l      ARP Attack Defense Configuration Commands

l      Proxy ARP Configuration Commands

l      Resilient ARP Configuration Commands

l      MFF Configuration Commands

24 DHCP

l      DHCP Server Configuration Commands (available only on the S3600-EI series)

l      DHCP Relay Agent Configuration Commands

l      DHCP Snooping Configuration Commands

l      DHCP Packet Rate Limit Configuration Commands

l      DHCP/BOOTP Client Configuration Commands

25 ACL

ACL Configuration Commands

26 QoS-QoS Profile

l      QoS Configuration Commands

l      QoS Profile Configuration Commands

27-Web Cache Redirection

Web Cache Redirection Configuration Commands (available only on the S3600-EI series)

28 Mirroring

Mirroring Configuration Commands

29-IRF Fabric

IRF Fabric Configuration Commands

30 Cluster

l      Neighbor Discovery Protocol (NDP) Configuration Commands

l      Neighbor Topology Discovery Protocol (NTDP) Configuration Commands

l      Cluster Configuration Commands

l      Enhanced Cluster Feature Configuration Commands

31-PoE-PoE Profile

l      PoE Configuration Commands

l      PoE Profile Configuration Commands

32-UDP Helper

UDP Helper Configuration Commands

33 SNMP-RMON

l      SNMP Configuration Commands

l      RMON Configuration Commands

34 NTP

NTP Configuration Commands

35 SSH

SSH Configuration Commands

36 File System Management

l      File System Configuration Commands

l      File Attribute Configuration Commands

37 FTP-SFTP-TFTP

l      FTP Server Configuration Commands

l      FTP Client Configuration Commands

l      SFTP Server Configuration Commands

l      SFTP Client Configuration Commands

l      TFTP Configuration Commands

38 Information Center

Information Center Configuration Commands

39 System Maintenance and Debugging

l      Basic System Configuration Commands

l      Network Connectivity Test Commands

l      Device Management Commands

l      Scheduled Task Configuration Commands

40 VLAN-VPN

l      VLAN VPN Configuration Commands

l      Selective QinQ Configuration Commands

l      BPDU Tunnel Configuration Commands

41 HWPing

l      HWPing Client Configuration Commands

l      HWPing Server Configuration Commands

42 IPv6 Management

l      Basic IPv6 Configuration Commands

l      IPv6 Application Configuration Commands

43 DNS

DNS Configuration Commands

44 Smart Link-Monitor Link

l      Smart Link Configuration Commands

l      Monitor Link Configuration Commands

45 Access Management

Access Management Configuration Commands

46 LLDP

LLDP Configuration Commands

47 PKI

PKI Configuration Commands

48 SSL

SSL Configuration Commands

49 HTTPS

HTTPS Configuration Commands

 

New and Modified Commands

H3C S3600 Series Ethernet Switches Operation Manual, Release 1702 and H3C S3600 Series Ethernet Switches Command Manual, Release 1702 are for software release 1702.

See Table 1-2 for new commands introduced in software release 1702.

Table 1-2 New commands in software release 1702

New commands

Reference

command-alias enable

01-CLI

command-alias mapping

display command-alias

icmp acl-priority

05-IP Address and Performance

voice vlan qos trust

06-Voice VLAN

voice vlan qos

flow-control no-pauseframe-sending

08-Port Basic Configuration

loopback-detection shutdown enable

loopback-detection interface-list enable

port-security guest-vlan

11-Port Security-Port Binding

port-security timer guest-vlan-reauth

port-security timer autolearn

prune delay (available only on the S3600-EI series)

17-Multicast Protocol

igmp-snooping special-query source-ip

igmp-snooping query-pkt-deny

system-guard cpu-rcv-limit

18-802.1X and System-Guard

attribute-ignore

19-AAA

web-authentication timer max-online

20-Web Authentication

web-authentication protocol

VRRP configuration commands (available only on the S3600-SI series Ethernet switches)

22-VRRP

ARP attack defense configuration commands

23-ARP

local-proxy-arp enable

MFF configuration commands

ip check dot1x enable

24-DHCP

reset dhcp-snooping [ ip-address ]

dhcp relay inform replace enable

rule (IPv6 ACL)

25-ACL

mirroring stp-collaboration

28-Mirroring

cluster-local-user

30-Cluster

cluster-snmp-agent community

cluster-snmp-agent group v3

cluster-snmp-agent mib-view included

cluster-snmp-agent usm-user v3

display job

39-System Maintenance and Debugging

job

port auto-power-down

time at

time delay

view

igmp transparent enable

40-VLAN-VPN

New HWPing commands, including: adv-factor, datafill, description, display hwping statistics, filesize, history keep-time, history-record enable, hwping-agent clear, hwping-agent max-requests, sendpacket passroute, statistics, statistics keep-time, test-time begin, and ttl.

41-HWping

LLDP configuration commands

46-LLDP

PKI configuration commands

47-PKI

SSL configuration commands

48-SSL

HTTPS configuration commands

49-HTTPS

 

See Table 1-3 for command modifications in software release 1702 relative to software release 1602.

Table 1-3 Modified command in release 1702

Modified command

Reference

storm-constrain { broadcast | multicast | unicast } max-packets min-packets { pps | kbps }

08-Port Basic Configuration

am user-bind mac-addr mac-address ip-addr ip-address [ interface interface-type interface-number ]

11-Port Security-Port Binding

vlan-assignment-mode vlan-list

19-AAA

web-authentication customize file web-file

20-Web Authentication

ip check source ip-address [ mac-address ] [ qos-profile string ]

24-DHCP

cluster switch-to { member-number | mac-address mac-address | administrator | sysname member-sysname }

30-Cluster

 

Conventions

Command conventions

Convention

Description

Boldface

The keywords of a command line are in Boldface.

italic

Command arguments are in italic.

[ ]

Items (keywords or arguments) in square brackets [ ] are optional.

{ x | y | ... }

Alternative items are grouped in braces and separated by vertical bars. One is selected.

[ x | y | ... ]

Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected.

{ x | y | ... } *

Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected.

[ x | y | ... ] *

Optional alternative items are grouped in square brackets and separated by vertical bars. Many or none can be selected.

&<1-n>

The argument(s) before the ampersand (&) sign can be entered 1 to n times.

#

A line starting with the # sign contains comments.

 

Command line interface (CLI) commands of H3C products are case insensitive.

 

GUI conventions

Convention

Description

Boldface

Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK.

Multi-level menus are separated by angle brackets. For example, File > Create > Folder.

 

Symbols

Convention

Description

Means reader be extremely careful. Improper operation may cause bodily injury.

Means reader be careful. Improper operation may cause data loss or damage to equipment.

Means a complementary description.

Means techniques helpful for you to make configuration with ease.


H3C S3600 Series Documentation Guide

Obtaining the Documentation

You can obtain the H3C S3600 series documentation in these ways:

l          CD-ROMs shipped with the devices

l          H3C website

l          Software release notes

CD-ROM

H3C delivers a CD-ROM together with each device. The CD-ROM contains a complete set of electronic documents of the product, including operation manuals and command manuals. After installing the reader program provided by the CD-ROM, you can search for the desired contents in a convenient way through the reader interface.

The contents in the manual are subject to update on an irregular basis due to product version upgrade or some other reasons. Therefore, the contents in the CD-ROM may not be the latest version. This manual serves the purpose of user guide only. Unless otherwise noted, all the information in the document set does not claim or imply any warranty. For the latest software documentation, go to the H3C website.

H3C Website

To obtain up-to-date documentation and technical support, go to http://www.h3c.com.

Go to the following columns for different categories of product documentation:

[Products & Solutions]: Provides information about products and technologies, as well as solutions.

[Technical Support & Document > Technical Documents]: Provides several categories of product documentation, such as installation, configuration, and maintenance.

[Technical Support & Document > Software Download]: Provides the documentation released with the software version.

Software Release Notes

With software upgrade, new software features may be added. You can acquire the information about the newly added software features through software release notes.

Related Documentation

Use the documents listed in Table 2-1 together with H3C S3600 Series Ethernet Switches Command Manual to make full use of the benefits delivered by the S3600 series.

Table 2-1 Related documentation

Document title

Description

H3C S3600 Series Ethernet Switches Operation Manual-Release 1702

Describes software features and guides you through the configuration procedures. An index is available for the ease of retrieval.

H3C S3600 Series Ethernet Switches  Installation Manual

Describes the physical views and hardware specifications of the H3C S3600 series switches, and guides you through the installation, power-on and startup, troubleshooting and maintenance procedures.

H3C S3600 Series Ethernet Switches Compliance and Safety Manual

Provides the safety and regulatory compliance statements, and describes the protection actions that you must take when installing and maintaining the H3C S3600 series switches.

H3C Low-End Ethernet Switches Configuration Guide

Describes the typical application scenarios, and provides configuration examples and configuration guidelines.

 

Finding Documents at the H3C Website

All these documents are available at the H3C website:

l              For software feature descriptions and configuration procedures, see H3C S3600 Series Ethernet Switches Operation Manual.

l              For command reference, see H3C S3600 Series Ethernet Switches Command Manual.

l              For hardware specifications, installation, and troubleshooting, see H3C S3600 Series Ethernet Switches Installation Manual.

l              For typical application scenarios, configuration examples, and configuration guidelines, see H3C Low-End Ethernet Switches Configuration Guides.

Documentation Feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.


Product Overview

The H3C S3600 Series Ethernet Switches are multilayer switching products. They support abundant Layer 3 features and enhanced extended functions, in addition to Layer 2 features. The switches come in two series:

l          The S3600-SI series supports basic routing functions, DHCP, basic IRF functions, and IGMP-Snooping.

l          The S3600-EI series supports advanced routing functions, DHCP, enhanced IRF functions, and enhanced multicast functions (including PIM-DM and PIM-SM).

See Table 3-1 for all S3600 switch models and their basic hardware specifications.

Table 3-1 S3600 switch hardware summary

Model

Power supply unit (PSU)

Number of service ports

Number of 100 Mbps ports

Number of 1,000 Mbps uplink ports

Console port

H3C S3600-28P-SI

AC-input

28

24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-28P-PWR-SI

AC-/DC-input

28

24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-28TP-SI

AC-input

28

24 10/100 Mbps (electrical)

2 Gigabit (SFP) ports

2 x 10/100/1,000 Mbps ports (electrical)

1

H3C S3600-52P-SI

AC-input

52

48 10/100 Mbps (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-28P-EI

AC-/DC-input

28

24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-28F-EI

AC-/DC-input

28

24 100 Mbps (SFP) ports

2 Gigabit (SFP) ports

2 10/100/1,000 Mbps ports (electrical)

1

H3C S3600-28P-PWR-EI

AC-/DC-input

28

24 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-52P-EI

AC-/DC-input

52

48 10/100 Mbps ports (electrical)

4 Gigabit ports (SFP)

1

H3C S3600-52P-PWR-EI

AC-/DC-input

52

48 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

H3C S3600-52P-PWR-SI

AC-/DC-input

52

48 10/100 Mbps ports (electrical)

4 Gigabit (SFP) ports

1

 

Network Scenarios

You can deploy the S3600 series on many types of networks, such as enterprise and broadband access networks. This section describes several typical application scenarios for the S3600 series.

Broadband Ethernet Access for Residential Communities

Deploy an S3600 series switch at the center of the broadband access network for a residential community. Connect the switch to the access S3100 series switches to reach end users, and to an upstream core Layer 3 switch through a GE port to access the MAN backbone.

Figure 3-1 Community access network

 

Branch or Small- to Medium-Sized Enterprise Networks

Deploy the S3600 series switches as backbone switches on a branch or small-to medium-sized enterprise network. Connect the switches to the headquarters or other branches through routers. As the business grows, you can cascade the S3600 series to extend the network.

Figure 3-2 Branch or small-to medium-sized enterprise network

 

Large Enterprise and Campus Networks

Deploy the S3600 series switches at the distribution layer of a large enterprise or campus network to implement Gigabit-to-backbone and 100 Mbps-to-desktop together with other H3C switches. Connect the S3600 switches to the access Layer 2 switches (for example, the S3100 series), and to the core Layer 3 switches through GE ports.

Figure 3-3 S3600 series application in a large enterprise or campus network