H3C S5820X&S5800 Series Ethernet Switches

Transcription

1 H3C S5820X&S5800 Series Ethernet Switches Layer 2 - LAN Switching Configuration Guide Hangzhou H3C Technologies Co., Ltd. Document Version: 6W Product Version: Release 1110

2 Copyright , Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C S5800&S5820X documentation set includes 11 configuration guides, which describe the software features for the S5800&S5820X Series Ethernet Switches and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply software features to different network scenarios. The Layer 2 LAN Switching Configuration Guide describes LAN switching fundamentals and configuration. It describes how to implement flow control and load sharing, isolate uses in the same VLAN, eliminate Layer 2 loops, divide VLANs, transmit customer network packets through the public network, and modify VLAN tags for packets. This preface includes: Audience Document Organization Conventions About the H3C S5800&S5820X Documentation Set Obtaining Documentation Documentation Feedback Audience This documentation set is intended for: Network planners Field technical support and servicing engineers Network administrators working with the S5800 and S5820X series Document Organization The Layer 2 LAN Switching Configuration Guide comprises these parts: Ethernet Port Configuration Loopback Interface and Null Interface Configuration MAC Address Table Configuration MAC Information Configuration Ethernet Link Aggregation Configuration Port Isolation Configuration MSTP Configuration BPDU Tunneling Configuration VLAN Configuration Isolate-User-VLAN Configuration Voice VLAN Configuration GVRP Configuration QinQ Configuration VLAN Mapping Configuration LLDP Configuration Service Loopback Group Configuration

4 Conventions This section describes the conventions used in this documentation set. Command conventions Convention Boldface italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Description Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. Symbols Convention Description Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means a complementary description. About the H3C S5800&S5820X Documentation Set The H3C S5800&S5820X documentation set also includes: Category Documents Purposes Product description and specifications Pluggable module description Marketing brochures Technology white papers PSR150-A [ PSR150-D ] Power Modules User Manual PSR300-12A [ PSR300-12D1 ] Power Modules User Manual Describe product specifications and benefits. Provide an in-depth description of software features and technologies. Describes the appearances, features, specifications, installation, and removal of the pluggable 150W power modules available for the products. Describes the appearances, features, specifications, installation, and removal of the pluggable 300W power modules available for the products.

5 Category Documents Purposes Power configuration Hardware installation PSR750-A [ PSR750-D ] Power Modules User Manual RPS User Manual LSW1FAN and LSW1BFAN Installation Manual LSW148POEM Module User Manual S5820X [ S5800 ] Series Ethernet Switches Interface Cards User Manual H3C OAP Cards User Manual H3C Low End Series Ethernet Switches Pluggable Modules Manual S C-PWR Ethernet Switch Hot Swappable Power Module Ordering Guide RPS Ordering Information for H3C Low-End Ethernet Switches S5800 Series Ethernet Switches Quick Start S5820X Series Ethernet Switches Quick Start S5800 Series Ethernet Switches CE DOC S5820X Series Ethernet Switches CE DOC S5800 Series Ethernet Switches Quick Start S5820X Series Ethernet Switches Quick Start Describes the appearances, features, specifications, installation, and removal of the pluggable 750W power modules available for the products. Describes the appearances, features, and specifications of the RPS units available for the products. Describes the appearances, specifications, installation, and removal of the pluggable fan modules available for the products. Describes the appearance, features, installation, and removal of the pluggable PoE module available for the products. Describes the models, hardware specifications, installation, and removal of the interface cards available for the products. Describes the benefits, features, hardware specifications, installation, and removal of the OAP cards available for the products. Describes the models, appearances, and specifications of the pluggable modules available for the products. Guides you through ordering the hot-swappable power modules available for the S C-PWR switches in different cases. Provides the RPS and switch compatibility matrix and RPS cable specifications. Provides regulatory information and the safety instructions that must be followed during installation. Guides you through initial installation and setup procedures to help you quickly set up and use your device with the minimum configuration.

6 Category Documents Purposes Software configuration Operations and maintenance S5800 Series Ethernet Switches Installation Manual S5820X Series Ethernet Switches Installation Manual Pluggable SFP[SFP+][XFP] Transceiver Modules Installation Guide S C-PWR Switch Video Installation Guide S5820X-28C Switch Video Installation Guide Configuration guide Command reference H3C Series Ethernet Switches Login Password Recovery Manual Release notes Provides a complete guide to hardware installation and hardware specifications. Guides you through installing SFP/SFP+/XFP transceiver modules. Shows how to install the H3C S C-PWR and H3C S5820X-28C Ethernet switches. Describe software features and configuration procedures. Provide a quick reference to all available commands. Tells how to find the lost password or recover the password when the login password is lost. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading. Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Documentation Feedback You can your comments about product documentation to info@h3c.com. We appreciate your comments.

7 Table of Contents 1 Ethernet Port Configuration 1-1 Ethernet Port Naming Conventions 1-1 Configuring the Management Ethernet Interface 1-2 Configuring Basic Settings of an Ethernet Port 1-2 Setting Speed Options for Auto Negotiation on a Port 1-3 Configuring Flow Control on an Ethernet Port 1-4 Configuring Generic Flow Control on an Ethernet Port 1-5 Configuring PFC on an Ethernet Port 1-6 Configuring Link Change Suppression on an Ethernet Port 1-7 Configuring Link Down Suppression 1-7 Configuring Link Up Suppression 1-8 Configuring Loopback Testing on an Ethernet Port 1-8 Enabling the Auto Power-Down Function on an Ethernet port 1-10 Configuring a Port Group 1-10 Configuring Traffic Storm Protection 1-10 Configuring Storm Suppression on an Ethernet Port 1-11 Configuring Storm Control on an Ethernet Port 1-12 Setting the Statistics Polling Interval on an Ethernet Port 1-13 Configuring Jumbo Frame Support 1-14 Enabling Loopback Detection on an Ethernet Port 1-14 Setting the MDI Mode of an Ethernet Port 1-16 Enabling Bridging on an Ethernet port 1-17 Testing the Cable Connection of an Ethernet Port 1-18 Configuring the Connection Mode of an Ethernet Port 1-18 Displaying and Maintaining Ethernet Ports Loopback Interface and Null Interface Configuration 2-1 Loopback Interface 2-1 Introduction to Loopback Interface 2-1 Configuring a Loopback Interface 2-2 Null Interface 2-2 Introduction to Null Interface 2-2 Configuring Null 0 Interface 2-2 Displaying and Maintaining Loopback and Null Interfaces MAC Address Table Configuration 3-1 Overview 3-1 How a MAC Address Table Entry Is Created 3-1 Types of MAC Address Table Entries 3-2 MAC Address Table-Based Frame Forwarding 3-2 Configuring a MAC Address Table 3-3 Configuring MAC Address Table Entries 3-3 i

8 Disabling MAC Address Learning 3-4 Configuring the Aging Timer for Dynamic MAC Address Entries 3-5 Configuring the MAC learning limit on ports 3-5 Displaying and Maintaining MAC Address Tables 3-6 MAC Address Table Configuration Example MAC Information Configuration 4-1 Overview 4-1 Introduction to MAC Information 4-1 How MAC Information Works 4-1 Configuring MAC Information 4-1 Enabling MAC Information Globally 4-1 Enabling MAC Information on an Interface 4-2 Configuring MAC Information Mode 4-2 Configuring the Interval for Sending Syslog or Trap Messages 4-2 Configuring the MAC Information Queue Length 4-3 MAC Information Configuration Example 4-3 MAC Information Configuration Example Ethernet Link Aggregation Configuration 5-1 Overview 5-1 Basic Concepts 5-1 Aggregating Links in Static Mode 5-5 Aggregating Links in Dynamic Mode 5-6 Load Sharing Criteria for Link Aggregation Groups 5-9 Ethernet Link Aggregation Configuration Task List 5-9 Configuring an Aggregation Group 5-10 Configuration Guidelines 5-10 Configuring a Static Aggregation Group 5-11 Configuring a Dynamic Aggregation Group 5-11 Configuring an Aggregate Interface 5-12 Configuring the Description of an Aggregate Interface 5-13 Enabling Link State Traps for an Aggregate Interface 5-13 Setting the Minimum Number of Selected Ports for an Aggregation Group 5-13 Shutting Down an Aggregate Interface 5-14 Configuring Load Sharing for Link Aggregation Groups 5-15 Configuring Load Sharing Criteria for Link Aggregation Groups 5-15 Enabling Local-First Load Sharing for Link Aggregation 5-16 Displaying and Maintaining Ethernet Link Aggregation 5-17 Ethernet Link Aggregation Configuration Examples 5-18 Static Aggregation Configuration Example 5-18 Dynamic Aggregation Configuration Example 5-20 Aggregation Load Sharing Configuration Example Port Isolation Configuration 6-1 Introduction to Port Isolation 6-1 Configuring the Isolation Group 6-1 Displaying and Maintaining Isolation Groups 6-2 ii

9 Port Isolation Configuration Example MSTP Configuration 7-1 Overview 7-1 Introduction to STP 7-1 Why STP 7-1 Protocol Packets of STP 7-1 Basic Concepts in STP 7-2 How STP works 7-3 Introduction to RSTP 7-10 Introduction to MSTP 7-10 Why MSTP 7-10 Basic Concepts in MSTP 7-11 How MSTP Works 7-15 Implementation of MSTP on Devices 7-15 Protocols and Standards 7-16 MSTP Configuration Task List 7-16 Configuring MSTP 7-18 Configuring an MST Region 7-18 Configuring the Root Bridge or a Secondary Root Bridge 7-19 Configuring the Work Mode of an MSTP Device 7-20 Configuring the Priority of a Device 7-21 Configuring the Maximum Hops of an MST Region 7-21 Configuring the Network Diameter of a Switched Network 7-22 Configuring Timers of MSTP 7-22 Configuring the Timeout Factor 7-24 Configuring the Maximum Port Rate 7-24 Configuring Ports as Edge Ports 7-25 Configuring Path Costs of Ports 7-26 Configuring Port Priority 7-28 Configuring the Link Type of Ports 7-29 Configuring the Mode a Port Uses to Recognize/Send MSTP Packets 7-30 Enabling the Output of Port State Transition Information 7-31 Enabling the MSTP Feature 7-31 Performing mcheck 7-32 Configuring Digest Snooping 7-33 Configuring No Agreement Check 7-35 Configuring Protection Functions 7-37 Displaying and Maintaining MSTP 7-40 MSTP Configuration Example BPDU Tunneling Configuration 8-1 Introduction to BPDU Tunneling 8-1 Background 8-1 BPDU Tunneling Implementation 8-2 Configuring BPDU Tunneling 8-4 Configuration Prerequisites 8-4 iii

10 Enabling BPDU Tunneling 8-4 Configuring the Destination Multicast MAC Address for BPDUs 8-5 BPDU Tunneling Configuration Examples 8-5 BPDU Tunneling for STP Configuration Example 8-5 BPDU Tunneling for PVST Configuration Example VLAN Configuration 9-1 Introduction to VLAN 9-1 VLAN Overview 9-1 VLAN Fundamentals 9-2 Types of VLAN 9-3 Configuring Basic VLAN Settings 9-3 Configuring Basic Settings of a VLAN Interface 9-4 Port-Based VLAN Configuration 9-5 Introduction to Port-Based VLAN 9-5 Assigning an Access Port to a VLAN 9-7 Assigning a Trunk Port to a VLAN 9-8 Assigning a Hybrid Port to a VLAN 9-10 Port-Based VLAN Configuration Example 9-11 MAC-Based VLAN Configuration 9-13 Introduction to MAC-Based VLAN 9-13 Configuring MAC-Based VLAN 9-15 MAC-Based VLAN Configuration Example 9-18 Protocol-Based VLAN Configuration 9-20 Introduction to Protocol-Based VLAN 9-20 Configuring a Protocol-Based VLAN 9-20 Protocol-Based VLAN Configuration Example 9-22 IP Subnet-Based VLAN Configuration 9-25 Introduction 9-25 Configuring an IP Subnet-Based VLAN 9-25 Displaying and Maintaining VLAN Isolate-User-VLAN Configuration 10-1 Overview 10-1 Configuring Isolate-User-VLAN 10-1 Displaying and Maintaining Isolate-User-VLAN 10-3 Isolate-User-VLAN Configuration Example Voice VLAN Configuration 11-1 Overview 11-1 OUI Addresses 11-1 Voice VLAN Assignment Modes 11-2 Security Mode and Normal Mode of Voice VLANs 11-5 Configuring a Voice VLAN 11-6 Configuration Prerequisites 11-6 Configuring QoS Priority Settings for Voice Traffic on an Interface 11-6 Setting a Port to Operate in Automatic Voice VLAN Assignment Mode 11-7 Setting a Port to Operate in Manual Voice VLAN Assignment Mode 11-8 iv

11 Displaying and Maintaining Voice VLAN Voice VLAN Configuration Examples Automatic Voice VLAN Mode Configuration Example Manual Voice VLAN Assignment Mode Configuration Example GVRP Configuration 12-1 Introduction to GVRP 12-1 GARP 12-1 GVRP 12-5 Protocols and Standards 12-5 GVRP Configuration Task List 12-5 Configuring GVRP Functions 12-6 Configuring GARP Timers 12-7 Displaying and Maintaining GVRP 12-8 GVRP Configuration Examples 12-9 GVRP Normal Registration Mode Configuration Example 12-9 GVRP Fixed Registration Mode Configuration Example GVRP Forbidden Registration Mode Configuration Example QinQ Configuration 13-1 Introduction to QinQ 13-1 Background and Benefits 13-1 How QinQ Works 13-2 QinQ Frame Structure 13-2 Implementations of QinQ 13-3 Modifying the TPID in a VLAN Tag 13-3 Protocols and Standards 13-5 QinQ Configuration Task List 13-5 Configuring Basic QinQ 13-5 Enabling Basic QinQ 13-5 Configuring VLAN Transparent Transmission 13-6 Configuring Selective QinQ 13-7 Configuring an Outer VLAN Tagging Policy 13-7 Configuring an Inner-Outer VLAN 802.1p Priority Mapping 13-8 Encapsulating Outer VLAN Tags for Packets Based on Upper Layer Protocols Configuring the TPID Value in VLAN Tags Configuring the TPID value in the CVLAN tag Configuring the TPID value in the SVLAN tag Collecting QinQ Traffic Accounting QinQ Configuration Examples QinQ Configuration Example VLAN Mapping Configuration 14-1 VLAN Mapping Overview 14-1 Application Scenario of One-to-One and Many-to-One VLAN Mapping 14-1 Application Scenario of Two-to-Two VLAN Mapping 14-2 Concepts and Terms 14-3 VLAN Mapping Implementations 14-4 v

12 Configuring VLAN Mapping 14-6 Configuring One-to-One VLAN Mapping 14-6 Configuring Many-to-One VLAN Mapping 14-9 Configuring Two-to-Two VLAN Mapping VLAN Mapping Configuration Examples One-to-One and Many-to-One VLAN Mapping Configuration Example Two-to-Two VLAN Mapping Configuration Example LLDP Configuration 15-1 Overview 15-1 Background 15-1 Basic Concepts 15-1 How LLDP Works 15-6 Protocols and Standards 15-7 LLDP Configuration Task List 15-7 Performing Basic LLDP Configuration 15-8 Enabling LLDP 15-8 Setting the LLDP Operating Mode 15-8 Setting the LLDP Re-Initialization Delay 15-9 Enabling LLDP Polling 15-9 Configuring the Advertisable TLVs 15-9 Configuring the Management Address and Its Encoding Format Setting Other LLDP Parameters Setting an Encapsulation Format for LLDPDUs Configuring CDP Compatibility Configuration Prerequisites Configuring CDP Compatibility Configuring LLDP Trapping Displaying and Maintaining LLDP LLDP Configuration Examples Basic LLDP Configuration Example CDP-Compatible LLDP Configuration Example Service Loopback Group Configuration 16-1 Overview 16-1 Service Types of Service Loopback Groups 16-1 Port Configuration Prerequisites of Service Loopback Groups 16-2 States of the Ports in a Service Loopback Group 16-2 Configuring a Service Loopback Group 16-2 Displaying and Maintaining Service Loopback Groups 16-3 Configuration Example Index 17-1 vi

13 1 Ethernet Port Configuration This chapter includes these sections: Ethernet Port Naming Conventions Configuring the Management Ethernet Interface Configuring Basic Settings of an Ethernet Port Setting Speed Options for Auto Negotiation on a Port Configuring Flow Control on an Ethernet Port Configuring Link Change Suppression on an Ethernet Port Configuring Loopback Testing on an Ethernet Port Enabling the Auto Power-Down Function on an Ethernet port Configuring a Port Group Configuring Traffic Storm Protection Setting the Statistics Polling Interval on an Ethernet Port Configuring Jumbo Frame Support Enabling Loopback Detection on an Ethernet Port Setting the MDI Mode of an Ethernet Port Enabling Bridging on an Ethernet port Testing the Cable Connection of an Ethernet Port Configuring the Connection Mode of an Ethernet Port Displaying and Maintaining Ethernet Ports Ethernet Port Naming Conventions The GE and 10 GE ports on the S5800 and S5820X series Ethernet switches are named in the format of interface-type A/B/C, where: A represents the ID of the switch in an IRF virtual device. If the switch is not assigned to any IRF virtual device, A takes 1. B represents a slot number on the switch. It takes 0 for fixed ports, 1 for ports on interface expansion card 1, and 2 for ports on interface expansion card 2. C represents the number of a port on a slot. For example, GigabitEthernet 1/1/2 represents a GE port on expansion card 1 on a standalone switch. The S C-PWR and S5820X-28C switches provide an internal 10 GE port named Ten-GigabitEthernet A/3/1 for OAA applications. For more information about SFP and SFP+ ports, see H3C S5800 Series Ethernet Switches Installation Manual or H3C S5820X Series Ethernet Switches Installation Manual. 1-1

14 Configuring the Management Ethernet Interface The switch provides one management Ethernet interface. This interface uses an RJ-45 connector. You can connect it to a PC for software loading and system debugging. Follow these steps to configure the management Ethernet interface: To do Use the command Remarks Enter system view system-view Enter management Ethernet interface view interface M-GigabitEthernet interface-number Change the description of the interface Shut down the interface description text shutdown By default, the description of the management interface is M-GigabitEthernet0/0/0 Interface. By default, the management Ethernet interface is up. Configuring Basic Settings of an Ethernet Port You can set an Ethernet port to operate in one of the following duplex modes: In full duplex mode, the port sends and receives packets simultaneously. In half duplex mode, the port sends or receives packets at a given time. It cannot send and receive packets simultaneously. In auto-negotiation mode, the port negotiates a duplex mode with its peer. You can also set the speed of an Ethernet port or enable it to automatically negotiate a speed with its peer. If the port is a Gigabit Layer 2 Ethernet port, you can set speed options for auto negotiation (see Setting Speed Options for Auto Negotiation on a Port). The two ends can pick out a speed only from the options. Follow these steps to configure the basic settings of an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number 1-2

15 To do Use the command Remarks Change the description of the port description text By default, the description of a port is the port name followed by the Interface string, GigabitEthernet1/0/1 Interface for example. Set the duplex mode duplex { auto full half } By default, a 10 GE SFP+ port operates in full duplex mode, and all other types of Ethernet ports operate in auto-negotiation mode. Set the port speed Shut down the Ethernet port speed { auto } shutdown The half duplex mode is not available for SFP ports, 10 GE SFP+ ports, or Ethernet electrical ports operating at 1000 Mbps. By default, the auto-negotiation mode applies. You cannot set a 10 GE SFP+ port to operate at 10 Mbps or 100 Mbps, or set an SFP port to operate at 10 Mbps. By default, an Ethernet port is in up state. To bring up an Ethernet port, use the undo shutdown command. Setting Speed Options for Auto Negotiation on a Port Speed auto negotiation enables an Ethernet port to negotiate with its peer for the highest speed supported by both ends by default. If the highest speed is not desirable, you can narrow down the speed option list for negotiation. See Figure

16 Figure 1-1 Speed auto negotiation application scenario All ports on the switch are operating in speed auto negotiation mode, with the highest speed of 1000 Mbps. If the transmission rate of each server in the server cluster is 1000 Mbps, their total transmission rate will exceed the capability of port GigabitEthernet 1/0/4, the port providing access to the Internet for the servers. To avoid congestion on GigabitEthernet 1/0/4, set 100 Mbps as the only speed option available for negotiation on port GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3. As a result, the transmission rate on each port connected to a server is limited to 100 Mbps. Follow these steps to configure an auto-negotiation transmission rate: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Set speed options for auto negotiation speed auto [ ] * This function is only available for Gigabit Layer-2 copper (electrical) Ethernet ports that support speed auto negotiation. The speed and speed auto commands supersede each other, and whichever is configured last takes effect. Configuring Flow Control on an Ethernet Port You can avoid packet drops on a link by enabling flow control at both ends of the link. The flow control function enables the receiving end to require the sending end to suspend sending packets when congestion occurs. 1-4

17 There are two flow control mechanisms: Generic flow control, which controls transmission on a link for all packets as a whole. Both the S5800 series and the S5820X series switches support this mechanism. Priority-based flow control (PFC), which controls transmission on a link based on 802.1p priority. Only the S5820X series switches support this mechanism. The subsequent sections describe the two mechanisms and how to configure them. Configuring Generic Flow Control on an Ethernet Port A port implements generic flow control by sending and receiving common pause frames. There are two generic flow control modes: TxRx mode enables a port to both send and receive common pause frames. Rx mode enables a port to receive but not send common pause frames. In Figure 1-2, when both Port A and Port B forward packets at 1000 Mbps, Port C is congested. To avoid packet loss, enable flow control on Port A, and Port B. Figure 1-2 Flow control application scenario Configure Port B to operate in TxRx mode, and Port A in Rx mode: When congestion occurs on Port C, Switch B buffers frames. When the amount of buffered frames exceeds a certain value, Switch B sends a common pause frame out of Port B to ask Port A to suspend sending packets. This pause frame also tells Port A for how long it is expected to pause. Upon receiving the common pause frame from Port B, Port A suspends sending packets to Port B for a period. If congestion persists, Port B keeps sending common pause frames to Port A until the congestion condition is removed. Follow these steps to configure flow control on a port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view Enable TxRx mode flow control Enable Rx mode flow control interface interface-type interface-number flow-control flow-control receive enable Use either command. By default, flow control is disabled on an Ethernet port. 1-5

18 Configuring PFC on an Ethernet Port PFC performs flow control based on 802.1p priorities. With PFC enabled, a port requires its peer to suspend sending packets with certain 802.1p priorities when congestion occurs. By decreasing the transmission rate, PFC helps avoid packet loss. To use the PFC feature on a link, enable PFC at both ends and configure an 802.1p priority list on at least one end. When congestion occurs, the receiving end searches the 802.1p priority list based on the 802.1p priority of each incoming packet: If a match is found, the receiving end sends a PFC pause frame to ask the sending end to suspend sending packets with the priority. This pause frame also tells the sending end for how long it is expected to pause. If congestion persists, the receiving end keeps sending PFC pause frames until the congestion condition is removed. If the 802.1p priority is not on the 802.1p priority list, the receiving end receives the packet, but does not ask the sending end to suspend sending packets with the priority. Follow these steps to configure PFC on a port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number The PFC feature is available only on 10-Gigabit ports. Enable PFC on the port Configure an 802.1p priority list for PFC priority-flow-control { auto enable } priority-flow-control no-drop dot1p dot1p-list Disabled by default. To enable PFC on a port, use the enable keyword. The auto keyword is for future use. By default, all exceeding packets are discarded when congestion occurs. Configure the interface to use the 802.1p priorities carried in packets for priority mapping qos trust dot1p By default, Ethernet interfaces do not trust the priorities carried in incoming packets, and the switch uses the port priority of packet receiving ports as the 802.1p priorities of incoming packets. 1-6

19 For more information about 802.1p priority, trusted packet priority type, and port priority, see Priority Mapping Configuration in the ACL and QoS Configuration Guide. For more information about the qos trust dot1p command, see Priority Mapping Configuration Commands in the ACL and QoS Command Reference. To use the PFC feature on a link, ensure that it is enabled on both ends of the link. A port processes PFC pause frames only when PFC is enabled on it. You cannot enable flow control with the flow-control command on a port already configured with PFC and an 802.1p priority list for PFC. On a port configured with the flow-control command, you can enable PFC but not configure an 802.1p priority list for PFC. Enabling both common flow control and PFC disables a port from sending common or PFC pause frames to inform its peer of congestion conditions. However, the port can still handle common and PFC pause frames from its peer. Configuring Link Change Suppression on an Ethernet Port An Ethernet port has two physical link states: up and down. Each time the physical link of a port goes up or comes down, the physical layer reports the change to the upper layers, and the upper layers handle the change, resulting in increased overhead. To prevent physical link flapping from affecting system performance, configure link change suppression to delay the reporting of physical link state changes. When the delay expires, the port reports any detected change. Link change suppression does not suppress administrative up or down events. When you shut down or bring up a port with the shutdown or undo shutdown command, the port reports the event to the upper layers immediately. On an S5800 or S5820X switch, you can configure link down suppression or link up suppression, but not both. Link down suppression enables a port to suppress link down events and start a delay timer each time the physical link goes down. During this delay, the port does not report the link down event, and the display interface brief or display interface command displays the port state as UP. If the physical link is still down when the timer expires, the port reports the link down event to the upper layers. Link up suppression enables a port to suppress link up events and start a delay timer each time the physical link goes up. During this delay, the port does not report the link up event, and the display interface brief or display interface command displays the port state as DOWN. If the physical link is still up when the timer expires, the port reports the link up event to the upper layers. Configuring Link Down Suppression Follow these steps to enable an Ethernet port to suppress link down events: 1-7

20 To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Set a link down suppression interval link-delay delay-time Link down suppression is disabled by default. Configuring Link Up Suppression Follow these steps to configure link up suppression on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Set a link up suppression interval link-delay delay-time mode up Link up suppression is disabled by default. Use this command only on ports with RRPP, SMTP, or Smart Link enabled. The link-delay mode up command and the link-delay command supersedes each other, and whichever is configured last takes effect. Configuring Loopback Testing on an Ethernet Port You can perform loopback testing on an Ethernet port to check whether the port functions properly. Note that the Ethernet port cannot forward data packets during the testing. Loopback testing falls into the following two categories: Internal loopback testing, which tests all on-chip functions related to Ethernet ports. As shown in Figure 1-3, internal loopback testing is performed on Port 1. During the internal loopback testing, the port sends out a certain number of test packets, which are looped back to the port over the self-loop created on the switching chip 1-8

21 Figure 1-3 Internal loopback testing External loopback testing, which tests the hardware of Ethernet ports. As shown in Figure 1-4, external loopback testing is performed on Port 1. To perform external loopback testing on an Ethernet port, insert a loopback plug into the port. During the external loopback testing, the port sends out a certain number of test packets, which are looped over the plug and back to the port. If the port fails to receive any test packet, the hardware of the port is faulty. Figure 1-4 External loopback testing Follow these steps to perform loopback testing on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Perform loopback testing loopback { external internal } You can perform neither internal nor external loopback testing on an administratively down (ADM DOWN) port. On a physically down (DOWN) port, you can perform only internal loopback testing. During loopback testing, the speed, duplex, mdi, and shutdown commands are not available. In addition, the port is operating in full duplex mode, regardless of its duplex configuration. After loopback testing is disabled, the duplex configuration of the port restores. Loopback testing is a one-time operation, and is not recorded in the configuration file. 1-9

22 Enabling the Auto Power-Down Function on an Ethernet port To save power, enable the auto power-down function on Ethernet interfaces. With this function, an interface enters the power save mode if it has not received any packet for a certain period of time (this interval depends on the specifications of the chip, and is not configurable). When a packet arrives later, the interface enters its normal state. Follow these steps to enable auto power down on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface interface-type Use either command. Enter Ethernet interface view or port group view interface view Enter port group view interface-number port-group manual port-group-name To enable the mode on an Ethernet port, enter Ethernet interface view. To enable the mode on a group of Ethernet ports, enter port group view. Enable auto power-down on an Ethernet port port auto-power-down Disabled by default Configuring a Port Group You can use port groups to manage and bulk-configure ports that use the same set of settings. You create port groups manually. All settings you made for a port group apply to all its member ports. These settings are saved to the configuration of each member port. To view the settings, perform the display current-configuration command or the display this command in port view. Follow these steps to configure a manual port group: To do Use the command Remarks Enter system view system-view Create a manual port group and enter manual port group view port-group manual port-group-name Add Ethernet ports to the manual port group group-member interface-list Configuring Traffic Storm Protection A traffic storm occurs when a large amount of broadcast, multicast, or unknown unicast packets congest a network. The S5800 and the S5820X switches provide two storm protection approaches: 1-10

23 Storm suppression, which enables you to limit the size of monitored traffic passing through an Ethernet port by setting a traffic threshold. When the traffic threshold is exceeded, the port discards all exceeding traffic. Storm control, which enables you to shut down Ethernet ports or block traffic when monitored traffic exceeds the traffic threshold. It also enables a port to send trap or log messages when monitored traffic reaches a certain traffic threshold, depending on your configuration. For a particular type of traffic, configure either storm suppression or storm control, but not both. If both of them are configured, you may fail to achieve the expected storm control effect. Configuring Storm Suppression on an Ethernet Port You can set one suppression threshold for broadcast, multicast, and unknown unicast traffic separately on an Ethernet port: Set the threshold as a percentage of the port transmission capability. Set the threshold in kbps, limiting the number of kilobits of monitored traffic passing through the port per second. Set the threshold in pps, limiting the number of monitored packets passing through the port per second. If one suppression threshold has been set in pps on an Ethernet port, you must set other suppression thresholds in pps too. If one suppression threshold has been set in percentage or kbps, you cannot set other suppression thresholds in pps. Follow these steps to configure storm suppression on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface interface-type Use either command. Enter Ethernet interface view or port group view interface view Enter port group view interface-number port-group manual port-group-name To configure storm suppression on one Ethernet port, enter Ethernet interface view. To configure storm suppression on a group of Ethernet ports, enter port group view. Set a broadcast suppression threshold broadcast-suppression { ratio pps max-pps kbps max-bps } By default, all broadcast traffic can pass through. 1-11

24 To do Use the command Remarks Set a multicast suppression threshold multicast-suppression { ratio pps max-pps kbps max-bps } By default, all multicast traffic can pass through. Set a unicast suppression threshold unicast-suppression { ratio pps max-pps kbps max-bps } By default, all unknown unicast traffic can pass through. If you set a storm suppression threshold in both Ethernet interface view and port group view, the one configured last takes effect. Configuring Storm Control on an Ethernet Port Storm control compares broadcast, multicast, and unicast traffic regularly with their respective traffic thresholds on an Ethernet port. For each type of traffic, storm control provides a lower threshold and a higher threshold. For management purposes, you can configure the port to send threshold event traps and log messages when monitored traffic exceeds the upper threshold or falls below the lower threshold from the upper threshold. When the traffic exceeds its higher threshold, the port does either of the following, depending on your configuration: Blocks the particular type of traffic, while forwarding other types of traffic. Even though the port does not forward the blocked traffic, it still counts the traffic. When the blocked traffic is detected dropping below the threshold, the port begins to forward the traffic. Shuts down automatically. The port shuts down automatically and stops forwarding any traffic. To bring up the port, perform the undo shutdown command or disable the storm constrain function. Follow these steps to configure the storm constrain function on an Ethernet port: To do Use the command Remarks Enter system view system-view Set the traffic polling interval of the storm control module Enter Ethernet interface view storm-constrain interval seconds interface interface-type interface-number 10 seconds by default. 1-12

25 To do Use the command Remarks Enable storm control, and set the lower and upper thresholds for broadcast, multicast, or unicast traffic storm-constrain { broadcast multicast unicast } { pps kbps ratio } max-pps-values min-pps-values Disabled by default. Set the control action to take when monitored traffic exceeds the upper threshold storm-constrain control { block shutdown } Disabled by default. Enable the port to send storm control threshold event traps. storm-constrain enable trap By default, the port sends traps when monitored traffic exceeds the upper threshold or drops below the lower threshold from the upper threshold. Enable the port to log storm control threshold events. storm-constrain enable log By default, the port outputs log messages when monitored traffic exceeds the upper threshold or falls below the lower threshold from the upper threshold. For network stability, use the default or set a higher traffic polling interval. Storm control uses a complete polling cycle to collect traffic data, and analyzes the data in the next cycle. Thus, it takes a port at least one polling interval and at most two polling interval to take a storm control action. Setting the Statistics Polling Interval on an Ethernet Port Follow these steps to set the statistics polling interval on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number 1-13

26 To do Use the command Remarks Set the statistics polling interval on the Ethernet port flow-interval interval The default port statistics polling interval is 300 seconds. To display the port statistics collected in the last polling interval, use the display interface command. To clear port statistics, use the reset counters interface command. Configuring Jumbo Frame Support Ethernet frames longer than the standard Ethernet frame size (1536 bytes) are called jumbo frames, which are typical of file transfer. If you set an Ethernet port to accept jumbo frames, it allows frames up to 9216 bytes to pass through. If you disable an Ethernet port to accept jumbo frames, it allows frames up to 1536 bytes to pass through. Follow these steps to enable an Ethernet port to accept jumbo frames: To do Use the command Remarks Enter system view system-view Enter Ethernet interface interface-type Use either command. Enter interface view interface-number To enable one port to accept Ethernet jumbo frames, enter Ethernet interface view or port group view Enter port group view port-group manual port-group-name interface view. To enable a group of ports to accept jumbo frames, enter port group view. Enable the port to accept jumbo frames jumboframe enable By default, an Ethernet port accepts jumbo frames (up to 9216 bytes). Enabling Loopback Detection on an Ethernet Port If a port receives a packet that it sent out, a loop occurs. Loops may cause broadcast storms, degrading network performance. You can use loopback detection to detect loops on a port and configure the protective action to take on the port when a loop is detected, for example, to shut down the port. In addition to the configured protective action, the switch also performs other actions to alleviate the impact of the loop condition, as described in Table

27 Table 1-1 Actions taken upon detection of a loop condition Port type No protective action configured Actions A protective action configured Access port Hybrid or trunk port Put the port in controlled mode. The port discards all incoming packets, but still forwards outgoing traffic. Create traps. Delete all MAC address entries of the port. Create traps. If loopback detection control is enabled, set the port in controlled mode. The port discards all incoming packets, but still forwards outgoing packets. Delete all MAC address entries of the port. Perform the configured protective action. Create traps and log messages. Delete all MAC address entries of the port. Create traps and log messages. If loopback detection control is enabled, take the configured protective action on the port. Delete all MAC address entries of the port. Follow these steps to configure loopback detection: To do Use the command Remarks Enter system view system-view Enable global loopback detection Set the loopback detection interval loopback-detection enable loopback-detection interval-time time Disabled by default. 30 seconds by default. Enter Ethernet interface interface-type Use either command. Enter Ethernet interface view or port group view interface view Enter port group view interface-number port-group manual port-group-name To configure loopback detection on one port, enter Ethernet interface view. To configure loopback detection on a group of Ethernet ports, enter port group view. Enable loopback detection on the port loopback-detection enable Disabled by default. 1-15

28 To do Use the command Remarks Enable loopback detection control Enable loopback detection in all VLANs on the trunk or hybrid port Set the protective action to take on the port when a loop is detected loopback-detection control enable loopback-detection per-vlan enable loopback-detection action { shutdown semi-block no-learning } Disabled by default. This command is available only on hybrid and trunk ports. By default, a trunk or hybrid port performs loopback detection only in its default VLAN. By default, no protective action is taken on Ethernet ports. To use loopback detection on an Ethernet port, you must enable the function both globally and on the port. To disable loopback detection on all ports, perform the undo loopback-detection enable command in system view. To enable a hybrid or trunk port to take the administratively specified protective action, you must perform the loopback-detection control enable command on the port. After you change the link type of an Ethernet port with the port link-type command, the switch removes the protective action configured on the port. For details about the port link-type command, see VLAN Configuration Commands in the Layer 2 - LAN Switching Command Reference. Setting the MDI Mode of an Ethernet Port SFP and SFP+ ports do not support the MDI mode setting. You can use both crossover and straight-through Ethernet cables to connect copper Ethernet ports. To accommodate these two types of cables, a copper Ethernet port can operate in one of the following three Medium Dependent Interface (MDI) modes: 1-16

29 Across mode Normal mode Auto mode A copper Ethernet port uses an RJ-45 connector, which comprises eight pins, each playing a dedicated role. For example, pins 1 and 2 transmit signals, and pins 3 and 6 receive signals. You can change their role by setting the MDI mode of the port: In normal mode, pins 1 and 2 are transmit pins, and pins 3 and 6 are receive pins. In across mode, pins 1 and 2 are receive pins, and pins 3 and 6 are transmit pins. In auto mode, the port negotiates pin roles with its peer. To enable the port to communicate with its peer, ensure that its transmit pins are connected to the remote receive pins. If the port can detect the connection cable type, set the port in auto MDI mode. If not, set its MDI mode as follows: When a straight-through cable is used, set the port to work in the MDI mode different than its peer. When a crossover cable is used, set the port to work in the same MDI mode as its peer, or set either end to work in auto mode. Follow these steps to configure the MDI mode of an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Set the MDI mode of the Ethernet port mdi { across auto normal } By default, a copper Ethernet port operates in auto mode to negotiate pin roles with its peer. Enabling Bridging on an Ethernet port When an incoming packet arrives, the switch looks up the destination MAC address of the packet in the MAC address table. If an entry is found, but the outgoing interface is the same as the receiving interface, the switch discards the packet. To enable the switch to forward such packets rather than drop them, enable the bridging function on the Ethernet port. Follow these steps to enable bridging on an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number 1-17

30 To do Use the command Remarks Enable bridging on the Ethernet port port bridge enable Disabled by default. Testing the Cable Connection of an Ethernet Port This function is not available on SFP and SFP+ ports. If the link of an Ethernet port is up, testing its cable connection will cause the link to come down and then go up. You can test the cable connection of an Ethernet port for a short or open circuit. The switch displays cable test results within five seconds. If any fault is detected, the test results include the length of the faulty cable segment. Follow these steps to test the cable connection of an Ethernet port: To do Use the command Remarks Enter system view system-view Enter Ethernet interface view interface interface-type interface-number Test the cable connected to the Ethernet port once virtual-cable-test Configuring the Connection Mode of an Ethernet Port This feature is available only on the internal 10 GE ports of the S C-PWR and the S5820X-28C switches. When configuring an OAA application, you must set the 10 GE port connecting the switch and the OAA card to operate in extended connection mode for normal communication. Follow these steps to configure the connection mode of an Ethernet port: 1-18

31 To do Use the command Remarks Enter system view system-view Enter 10 GE port view Set the connection mode of the 10 GE port interface interface-type interface-number port connection-mode { extend normal } The default is normal node. Displaying and Maintaining Ethernet Ports To do Use the command Remarks Display detailed information about ports, including their operating status Display brief information about ports Display the packet statistics for ports Display packet rate statistics for ports in up state during the last sampling interval Clear statistics for ports Display information about port groups display interface [ interface-type [ interface-number ] ] display interface [ interface-type [ interface-number ] ] brief [ { begin exclude include } regular-expression ] display counters { inbound outbound } interface [ interface-type ] display counters rate { inbound outbound } interface [ interface-type ] reset counters interface [ interface-type [ interface-number ] ] display port-group manual [ all name port-group-name ] Available in any view Available in any view Available in any view Available in any view Available in user view Available in any view Display the loopback detection settings and related statistics Display the storm control settings on ports display loopback-detection display storm-constrain [ broadcast multicast unicast ] [ interface interface-type interface-number ] Available in any view Available in any view 1-19