H3C S9500 Series Routing Switches

Transcription

1 Operation Manual Hangzhou H3C Technologies Co., Ltd. Manual Version: T E C-1.24 Product Version: S9500-CMW310-R1648

2 Copyright , Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice Technical Support The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied. customer_service@h3c.com

3 About This Manual Organization Configuration Manual is organized as follows: Part 00 Product Over 01 Access Volume 02 IP Services Volume 03 IP Routing Volume 04 IP Multicast Volume 05 MPLS VPN Volume Contents includes Obtaining the Documentation, Product Features, and Features. includes Ethernet Port Configuration, POS Port Configuration, Link Aggregation Configuration, Port Isolation Configuration, VLAN Configuration, MAC Address Table Management Configuration, GVRP Configuration, QinQ Configuration, Ethernet Port Loopback Detection Configuration, DLDP Configuration, Ethernet OAM Configuration, Smart Link and Monitor Link Configuration, MSTP Configuration, BPDU Tunnel Configuration, HVRP Configuration, RRPP Configuration and RPR Configuration. includes ARP Configuration, IP Address Configuration, VRRP Configuration, DHCP Configuration, DNS Configuration, UDP Helper Configuration, NAT Configuration, IP Performance Configuration and URPF Configuration. includes IP Routing Protocol Over, Static Route Configuration, RIP Configuration, OSPF Configuration, ISIS Configuration, BGP Configuration, IP Route Policy Configuration, Route Capacity Configuration and Recursive Routing Configuration. includes Multicast Over, Common Multicast Configuration, IGMP Snooping Configuration, IGMP Configuration, PIM Configuration, Multicast VLAN Configuration, MSDP Configuration and MBGP Configuration. includes MPLS Configuration, MPLS VLL Configuration, MPLS VPLS Configuration, MPLS L3VPN Configuration, MPLS OAM Configuration and MPLS Hybrid Insertion Configuration. 06 QoS ACL Volume includes QoS Configuration and ACL Configuration. 07 Security Volume includes Protocol Port Security Configuration, 802.1X Configuration, AAA RADIUS HWTACACS Configuration,Password Control Configuration, SSH Configuration, IDS Linkage Configuration, Portal Configuration, VBAS Configuration and Traffic Accounting Configuration.

4 Part 08 System Volume Contents includes Command Line Interface Configuration, Login and User Interface Configuration, FTP and TFTP Configuration, HA Configuration, NQA Configuration, NetStream Configuration, NTP Configuration, RMON Configuration, SNMP Configuration, Packet Statistics Accounting Configuration, Device Management Configuration, Configuration File Management Configuration, File System Management Configuration, Cluster Management Configuration, System Maintenance and Debugging Configuration, Information Center Configuration, PoE Configuration, Clock Module Configuration, ACSEI Server Configuration and OAP Module Configuration. 09 Acronyms Offers the acronyms used in this manual. Conventions The manual uses the following conventions: I. Command conventions Convention Boldface italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Description The keywords of a command line are in Boldface. Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by vertical bars. One is selected. Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected. Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected. Optional alternative items are grouped in square brackets and separated by vertical bars. Many or none can be selected. The argument(s) before the ampersand (&) sign can be entered 1 to n times. # A line starting with the # sign is comments.

5 II. GUI conventions Convention Description < > [ ] / Button names are inside angle brackets. For example, click <OK>. Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New User] window. Multi-level menus are separated by forward slashes. For example, [File/Create/Folder]. III. Symbols Convention Warning Caution Note Description Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means a complementary description. Related Documentation In addition to this manual, each documentation set includes the following: Manual Installation Manual Command Manual Description It introduces the installation procedure, commissioning, maintenance and monitoring of the S9500 series routing switches. It includes Feature List and Command Index, Access Volume, IP Service Volume, IP Routing Volume, IP Multicast Volume, MPLS VPN Volume, QoS ACL Volume, Security Volume, and System Volume. Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at this URL: The following are the columns from which you can obtain different categories of product

6 documentation: [Products & Solutions]: Provides information about products and technologies. [Technical Support & Document > Technical Documents]: Provides several categories of product documentation, such as installation and operation. [Technical Support & Document > Product Support > Software]: Provides the documentation released with the software version. Documentation Feedback You can your comments about product documentation to We appreciate your comments.

7 Operation Manual System Volume Organization Manual Version T E C-1.24 Product Version S9500-CMW310-R1648 Organization The System Volume is organized as follows: Features (operation manual) Command Line Interface Login and User Interface FTP and TFTP HA Description The S9500 series provide a series of configuration commands and command line interfaces for configuring and managing the switch. The volume describes: Command line interface Command line Features and functions of command line The volume describes: Setting up configuration environment through the console port Setting up configuration environment through telnet Setting up configuration environment through modem dial-up User interface over User interface configuration Management port over Management port configuration FTP and TFTP are methods for transmitting files on the Internet and IP networks. The volume describes: FTP over FTP configuration TFTP over TFTP configuration High Availability (HA) is to achieve a high availability of the system. The volume describes: HA over HA configuration

8 Operation Manual System Volume Organization NQA Features (operation manual) NetStream NTP RMON SNMP Packet Statistics Accounting Device Management Description A network quality analyzer (NQA), which is an enhancement of the ping function, is used to test the performance of various protocols operating in a network. The volume describes: NQA over NQA configuration NetStream provides the packet statistics function. It can classify the stream information according to the destination IP address, destination port number, source IP address, source port number, protocol number and ToS of the packet, and performs independent statistics for different stream information. The volume describes: Netstream over Netstream configuration Network Time Protocol (NTP) is the TCP/IP that advertises the accurate time throughout the network. The volume describes: NTP over NTP configuration Remote Monitoring (RMON) is a type of Internet Engineering Task Force (IETF)-defined MIB. RMON helps the SNMP monitor the remote network device more actively and effectively, which provides a highly efficient means for the monitoring of the subnet operations. The volume describes: RMON over RMON configuration SNMP has been put into use and widely accepted as an industry standard in practice. It is used for ensuring the transmission of the management information between any two nodes. The volume describes: SNMP over SNMP configuration Trap configuration The volume describes: Outbound packet statistics accounting QoS queue statistics accounting With the device management function, the switch can display the current running state and event debugging information about the slots, thereby implementing the maintenance and management of the state and communication of the physical devices. The volume describes: Device management over How to manage devices (such as reboot the device, upgrade Boot ROM and specify Bootstrap programs for the device)

9 Operation Manual System Volume Organization Features (operation manual) Configuration File Management File System Management Cluster Management System Maintenance and Debugging Information Center PoE Clock Module Description The management module of configuration file provides a user-friendly operation interface. It saves the configuration of the switch in the text format of command line to record the whole configuration process. The volume describes: Introduction to configuration file management Configuration file management configuration The switch provides a file system module for user s efficient management on the storage devices such as Flash memory. The file system offers file access and directory management, mainly including creating the file system, creating, deleting, modifying and renaming a file or a directory and opening a file. The volume describes: Introduction to file system management File system management configuration Cluster management enables management devices to administrate switches in a centralized way and allows switch cascading. The volume describes: HGMP V1 over HGMP Server configuration HGMP V1 configuration For the majority of protocols and features supported, the system provides corresponding debugging information to help users diagnose errors. The volume describes: Introduction to system maintenance and debugging Maintenance and debugging configuration The information center is an indispensable part of the switch to classify and manage system information. The volume describes: Introduction to information center Information center configuration Equipped with external power supply and PoE-capable cards, the switches can provide power for remote powered devices (PDs). The volume describes: PoE over PoE configuration PoE PSU supervision configuration The clock module is responsible for providing high-precision and high-reliability synchronous MHz SDH clock signals for all LPUs. The clock module selects an input clock source automatically, performs software phase-lock function, and monitors the board status in real time. The volume describes: Introduction to clock module Clock module configuration

10 Operation Manual System Volume Organization Features (operation manual) ACSEI Server OAP Module Description As a private protocol, ACSEI provides a method for exchanging information between ACFP clients and ACFP server. The volume describes: ACSEI over ACSEI Server configuration Open Application Platform (OAP) is developed based on Open Application Architecture (OAA). It can be an independent network device, or a board used as an extended part of a device. We call this kind of board as an OAP module. The volume describes: OAP over Logging In to the operating system of an OAP module Configuring the management IP address of an OAP module Resetting the system of an OAP module

11 Operation Manual Command Line Interface Table of Contents Table of Contents Chapter 1 Command Line Interface Command Line Interface Command Line View Features and Functions of Command Line Online Help of Command Line Displaying Characteristics of Command Line History Command of Command Line Common Command Line Error Messages Editing Characteristics of Command Line i

12 Operation Manual Command Line Interface Chapter 1 Command Line Interface Chapter 1 Command Line Interface When configuring command line interface, go to these sections for information you are interested in: Command Line Interface Command Line View Features and Functions of Command Line 1.1 Command Line Interface H3C series switches provide a series of configuration commands and command line interfaces for configuring and managing the switch. The command line interface has the following characteristics: Local configuration via the Console port and AUX port. Local or remote configuration via Telnet. Remote configuration through dialing with modem via the AUX port. Hierarchy command protection to avoid the unauthorized users accessing switch. Enter a? to get immediate online help. Provide network testing commands, such as Tracert and Ping, to fast troubleshoot the network. Provide various detailed debugging information to help with network troubleshooting. Log in and manage other switch directly, using the Telnet command. Provide FTP service for the users to upload and download files. Provide the function similar to Doskey to execute a history command. The command line interpreter searches for target not fully matching the keywords. You can key in either the whole keyword or part of it, as long as it is unique and not ambiguous. 1.2 Command Line View H3C series switches provide hierarchy protection for the command lines to avoid unauthorized user accessing illegally. Commands are classified into four levels, namely visit level, monitor level, system level and manage level. They are introduced as follows: Visit level: Commands of this level involve command of network diagnosis tool (such as ping and tracert), command of switch between different language environments of user interface (language-mode) and the telnet command. The operation of saving configuration file is not allowed on this level of commands. 1-1

13 Operation Manual Command Line Interface Chapter 1 Command Line Interface Monitor level: Commands of this level, including the display command and the debugging command, are used for system maintenance, service fault diagnosis, etc. The operation of saving configuration file is not allowed on this level of commands. System level: Service configuration commands, including routing command and commands on each network layer, are used to provide direct network service to the user. Manage level: They are commands that influence basis operation of the system and system support module, which plays a support role on service. Commands of this level involve file system commands, FTP commands, TFTP commands, XModem downloading commands, user management commands, and level setting commands. At the same time, login users are classified into four levels that correspond to the four command levels respectively. After users of different levels log in, they can only use commands at the levels that are equal to or lower than their own level. In order to prevent unauthorized users from illegal intrusion, users will be authenticated when switching from a lower level to a higher level with super [ level ] command. User ID authentication is performed when users at lower level switch to users at higher level. If users pass the authentication, they will switch to a higher level; otherwise, they will remain at the original user level. Different command s are implemented according to different requirements. They are related to one another. For example, after logging into the switch, you will enter user, in which you can only use some basic functions such as displaying the running state and statistics information. In user, key in system- to enter system, in which you can key in different configuration commands and enter the corresponding s. The command line provides the following s: User System Port VLAN VLAN interface Local-user User interface FTP Client command SFTP Client MST region PIM MSDP IPv4 multicast sub-address family RIP 1-2

14 Operation Manual Command Line Interface Chapter 1 Command Line Interface OSPF OSPF area BGP IS-IS Route policy Basic ACL Advanced ACL Layer-2 ACL Conform-level WRED index RADIUS server group ISP domain MPLS VPNv4 sub-address family VPN-instance sub-address family BGP-VPNv4 sub-address family MPLS L2VPN L2VPN address family Route-Policy vpn-instance OSPF protocol Remote-peer VSI-LDP VSI HWTACACS Port group Lanswitch HGMP NQA test group The following table describes the function features of different s and the ways to enter or quit. Port numbers are only for examples. Table 1-1 Function feature of command Command Function Prompt Command to enter Command to exit User Show the basic information about operation and statistics <H3C> Enter right after connecting the switch Use quit to end the disconnection with the switch System Configure system parameters [H3C] Key in system- in user Use quit or return to return to user 1-3

15 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit [H3C-Ethernet 2/1/1] 100M Ethernet port Key in interface ethernet 2/1/1 in system Ethernet port : Configure Ethernet port parameters [H3C-GigabitE thernet2/1/1] GigabitEthern et port Key in interface gigabitethern et 2/1/1 in system Port [H3C-GigabitE thernet2/1/1] 10G Ethernet port Key in interface gigabitethern et 2/1/1 in system Use quit to return to system Use return to return to user POS port : Configure POS port parameters [H3C-Pos2/1/ 1] Key in interface pos 2/1/1 in system RPR logical port : Configure RPR port parameters [H3C- RprPos 3/1/1] Key in interface RprPos 3/1/1 in system RPR POS physical port : Configure physical parameters for RPR ports [H3C-RprPos 2/1/1.1] Key in interface RprPos2/1/1. 1 in system VLAN Configure VLAN parameters [H3C-Vlan1] Key in vlan 1 in system Use quit to return to system Use return to return to user VLAN interface Configure IP interface parameters for a VLAN or a VLAN aggregation [H3C-Vlan-int erface1] Key in interface vlan-interfac e 1 in system Use quit to return to system Use return to return to user 1-4

16 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit Local-user Configure local user parameters [H3C-luser-us er1] Key in local-user user1 in system Use quit to return to system Use return to return to user User interface Configure user interface parameters [H3C-ui0] Key in user-interfac e 0 in system Use quit to return to system Use return to return to user FTP client command Configure FTP Client parameters [ftp] Key in ftp in user Use quit to return to system SFTP Client Configure SFTP Client parameters <sftp-client> Key in sftp ip-address in system Use quit to return to system Use return to return to user MST region Configure MST region parameters [H3C-mst-regi on] Key in stp region-config uration in system Use quit to return to system Use return to return to user PIM Configure PIM parameters [H3C-PIM] Key in pim in system Use quit to return to system Use return to return to user MSDP Configure MSDP parameters [H3C-msdp] Key in msdp in system Use quit to return to system Use return to return to user IPv4 multicast sub-address family Enter the IPv4 multicast sub-address family to configure MBGP multicast extension parameters [H3C-bgp-afmul] Key in ipv4-family multicast in BGP Use quit to return to BGP Use return to return to user 1-5

17 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit RIP Configure RIP parameters [H3C-rip] Key in rip in system Use quit to return to system Use return to return to user OSPF Configure OSPF parameters [H3C-ospf-1] Key in ospf in system Use quit to return to system Use return to return to user OSPF area Configure OSPF area parameters [H3C-ospf- 1-area ] Key in area 1 in OSPF Use quit to return to OSPF Use return to return to user BGP Configure BGP parameters [H3C-bgp] Key in bgp 100 in system Use quit to return to system Use return to return to user IS-IS Configure IS-IS parameters [H3C-isis] Key in isis in system Use quit to return to system Use return to return to user Route policy Configure route policy parameters [H3C-route-po licy] Key in route-policy policy1 permit node 10 in system Use quit to return to system Use return to return to user Basic ACL Define the rule of basic ACL [H3C-aclbasic-2000] Key in acl number 2000 in system Use quit to return to system Use return to return to user 1-6

18 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit Advanced ACL Define the rule of advanced ACL [H3C-acl-adv- 3000] Key in acl number 3000 in system Use quit to return to system Use return to return to user Layer-2 ACL Define the rule of layer-2 ACL [H3C-acl-link- 4000] Key in acl number 4000 in system Use quit to return to system Use return to return to user Conform-lev el Configure the "DSCP + Conform-level Service group" mapping table and EXP + Conform-level- >service parameters mapping table and "Local-preceden ce + Conform-level 802.1p priority" mapping table [H3C-conform -level-0] Key in qos conform-leve l 0 in system Use quit to return to system Use return to return to user WRED index Configure WRED parameters [H3C-wred-0] Key in wred 0 in system Use quit to return to system Use return to return to user RADIUS server group Configure radius parameters [H3C-radius-1 ] Key in radius scheme 1 in system Use quit to return to system Use return to return to user ISP domain Configure ISP domain parameters [H3C-isp-h3c1 63.net] Key in domain h3c163.net in system Use to return to system Use return to return to user 1-7

19 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit MPLS Configure MPLS parameters [H3C-mpls] Key in mpls in system Use quit to return to system Use return to return to user VPNv4 sub-address family Configure VPNv4 address family parameters [H3C-bgp-af-v pn] Key in ipv4-family vpnv4 in BGP Use quit to return to system Use return to return to user VPN-instanc e sub-address family Configure VPN instance sub-address family parameters [H3C-bgp-af-v pn-instance] Key in ipv4-family vpn-instance vpna in BGP/RIP Use quit to return to system Use return to return to user BGP-VPNv4 sub-address family Configure BGP-VPNv4 sub-address family parameters [H3C-bgp-af-v pn] Key in ipv4-family vpn-instance in BGP/RIP Use quit to return to system Use return to return to user MPLS L2VPN Configure MPLS L2VPN service parameters [H3C-mpls-l2v pn-vpna] Key in mpls l2vpn vpna encapsulatio n Ethernet in system Use quit to return to system Use return to return to user L2VPN address family Configure L2VPN service parameters [H3C-bgp-af-l 2vpn] Key in l2vpn-family in BGP Use quit to return to system Use return to return to user Route-Policy Configure Route-Policy service parameters [H3C-route-po licy] Key in route-policy route-policy-n ame { permit deny } node node-number in system Use quit to return to system Use return to return to user 1-8

20 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit vpn-instance Configure vpn-instance parameters [H3C-vpn-vpn -instance_blu e] Key in ip vpn-instance vpn-instance _ vpna in system Use quit to return to system Use return to return to user OSPF protocol Configure OSPF protocol parameters [H3C-ospf-10 0] Key in ospf process-id [ router-id router-id-num ber ] [ vpn-instanc e vpn-instancename ] in system Use quit to return to system Use return to return to user Remote-pee r Configure MPLS peer group parameters [H3C-mpls-re mote1] Key in mpls remote1 Use quit to return to system Use return to return to user VSI-LDP Configure some VPLS features [9500-vsi-H3C -ldp] Key in vsi H3C in system Key in pwsignal ldp in vsi Use quit to return to vsi Use return to return to user VSI Specify VPLS mode [9500-vsi-H3C ] Key in vsi H3C in system Use quit to return to system Use return to return to user HWTACAC S Configure HWTACACS protocol parameters [9500-hwtaca cs-h3c] Key in hwtacacs scheme H3C in system Use quit to return to system Use return to return to user Port group Combine the ports with the same configuration, omitting repeated configuration procedure [9500-port-gro up X] Key in port-group X in system Use quit to return to system Use return to return to user 1-9

21 Operation Manual Command Line Interface Chapter 1 Command Line Interface Command Function Prompt Command to enter Command to exit HGMP Configure some HGMP features [H3C-hgmp] Key in hgmpserver enable in system Use quit to return to system Use return to return to user Lanswitch Enter lanswitch. After entering the specified lanswitch, you can use the specified S9500 series switch. [H3C-lanswitc hx/x/x-/] Key in lanswitch X/X/X-/ in HGMP Use quit to return to HGMP Use return to return to user NQA test group Create a NQA test group, and enter NQA test group [H3C-administ rator-icmp] Key in NQA administratorname test-tag in system Use quit to return to system Use return to return to user 1.3 Features and Functions of Command Line Online Help of Command Line The command line interface provides the following online help modes. Full help Partial help You can get the help information through these online help commands, which are described as follows. 1) Input? in any to get all the commands in it and corresponding descriptions. <H3C>? User commands: language-mode Specify the language environment ping Ping function quit Exit from current command super Privilege current user a specified priority level telnet Establish one TELNET connection tracert Trace route function 2) Input a command with a? separated by a space. If this position is for keywords, all the keywords and the corresponding brief descriptions will be listed. <H3C> language-mode? 1-10

22 Operation Manual Command Line Interface Chapter 1 Command Line Interface chinese Chinese environment english English environment 3) Input a command with a? separated by a space. If this position is for parameters, all the parameters and their brief descriptions will be listed. [H3C] garp timer leaveall? INTEGER< > Value of timer in centiseconds (LeaveAllTime > (LeaveTime [On all ports])) Time must be multiple of 5 centiseconds [H3C] garp timer leaveall 300? <cr> <cr> indicates no parameter in this position. The next command line repeats the command, you can press <Enter> to execute it directly. 4) Input a character string followed by a?, then all the commands beginning with this character string will be listed. <H3C> p? ping pwd 5) Enter a command followed by a character string and a?. All the keywords starting with this string are listed. <H3C> display ver? version 6) Press <Tab> after entering the first several letters of a keyword to display the complete keyword, provided these letters can uniquely identify the keyword in this command Displaying Characteristics of Command Line For the information to be displayed exceeding one screen, pausing function is provided. In this case, users can have three choices, as shown in the table below. Table 1-2 Functions of displaying Key or Command Press <Ctrl+C> when the display pauses Enter a space when the display pauses Press <Enter> when the display pauses Function Stop displaying and executing command. Continue to display the next screen of information. Continue to display the next line of information. 1-11

23 Operation Manual Command Line Interface Chapter 1 Command Line Interface History Command of Command Line Command line interface provides the function similar to that of DosKey. The commands entered by users can be automatically saved by the command line interface and you can invoke and execute them at any time later. History command buffer defaults to 10. The operations are shown in the table below. Table 1-3 Retrieve history command Operation Key Result Display history command Retrieve the previous history command Retrieve the next history command display history-command [ command-number ] [ { begin include exclude } Match-string ] Up cursor key < > or <Ctrl+P> Down cursor key < > or <Ctrl+N> Display history command by user inputting Retrieve the previous history command, if there is any. Retrieve the next history command, if there is any. Note: Cursor keys can be used to retrieve the history commands in Windows 3.X Terminal and Telnet. However, in Windows 9X HyperTerminal, the cursor keys and do not work, because Windows 9X HyperTerminal defines the two keys differently. In this case, use the combination keys <Ctrl+P> and <Ctrl+N> instead for the same purpose Common Command Line Error Messages All the commands input by users can be correctly executed, if they have passed the grammar check. Otherwise, error messages will appear. The common error messages are listed in the following table. Table 1-4 Common command line error messages Error messages Causes Cannot find the command. Unrecognized command Cannot find the keyword. Wrong parameter type. The value of the parameter exceeds the range. Incomplete command The input command is incomplete. 1-12

24 Operation Manual Command Line Interface Error messages Too many parameters Ambiguous command Chapter 1 Command Line Interface Causes Enter too many parameters. The parameters entered are not specific Editing Characteristics of Command Line Command line interface provides the basic command editing function and supports to edit multiple lines. A command cannot be longer than 256 characters. See the table below. Table 1-5 Editing functions Common keys Backspace Key Leftwards cursor key < > or <Ctrl+B> Rightwards cursor key < > or <Ctrl+F> Up cursor key < > or <Ctrl+P> Down cursor key < > or <Ctrl+N> <Tab> Function Insert from the cursor position and the cursor moves to the right, if the edition buffer still has free space. Delete the character preceding the cursor and the cursor moves backward. Move the cursor a character backward Move the cursor a character forward Retrieve the history command. Pressing <Tab> after entering part of a keyword enables the fuzzy help function. If finding a unique match, the system substitutes the complete keyword for the incomplete one and displays it in the next line. If there are several matches or no match at all, the system does not modify the incomplete keyword and displays it again in the next line. 1-13

25 Operation Manual Login and User Interface Table of Contents Table of Contents Chapter 1 Switch Login Setting Up Configuration Environment Through the Console Port Setting Up Configuration Environment Through Telnet Connecting a PC to the Switch Through Telnet Accessing a Switch Through Another Switch via Telnet Setting Up Configuration Environment Through Modem Dial-up Chapter 2 User Interface Configuration User Interface Over User Interface Configuration Entering User Interface View Defining the Login Header Configuring Asynchronous Port Attributes Configuring Terminal Attributes Managing Users Configuring Telnet Configuring Modem Attributes Configuring Redirection Displaying and Debugging User Interface Chapter 3 Management Port Configuration Management Port Over Management Port Configuration IP Isolation Over i

26 Operation Manual Login and User Interface Chapter 1 Switch Login Chapter 1 Switch Login When configuring switch login, go to these sections for information you are interested in: Setting Up Configuration Environment Through the Console Port Setting Up Configuration Environment Through Telnet Setting Up Configuration Environment Through Modem Dial-up 1.1 Setting Up Configuration Environment Through the Console Port Step 1: As shown in the figure below, to set up the local configuration environment, connect the serial port of a PC (or a terminal) to the console port of the switch with the console cable. Figure 1-1 Set up the local configuration environment through the console port Step 2: Run a terminal emulator (such as Terminal of Windows 2000 or HyperTerminal of Windows XP) on the computer. Set the terminal communication parameters as follows: Set Bits per second to 9600, Data bits to 8, Parity to none, Stop bits to 1, and Flow control to none, and select the VT100 as the terminal type.. Figure 1-2 Set up new connection 1-1

27 Operation Manual Login and User Interface Chapter 1 Switch Login Figure 1-3 Configure the port for connection Figure 1-4 Set communication parameters Step 3: The switch is powered on. Display self-test information of the switch and prompt you to press Enter to show the command line prompt such as <H3C>. Step 4: Input a command to configure the switch or the operation state. Input a? for help. For details of specific commands, refer to the following chapters. 1.2 Setting Up Configuration Environment Through Telnet Connecting a PC to the Switch Through Telnet To telnet to the Ethernet Switch, ensure that the following conditions are satisfied: Assign an IP address to the management VLAN interface correctly in the Ethernet Switch (use the ip address command in VLAN interface ). 1-2

28 Operation Manual Login and User Interface Chapter 1 Switch Login Specify the Ethernet port connected with the PC to belong to the management VLAN (use the port command in VLAN ) If the PC and the switch s port connected with the PC reside in the same LAN, their IP addresses must be configured to reside in the same network segment. Otherwise, the PC and the Switch must be reachable to each other. Then, you can telnet to the Ethernet Switch to configure it. Follow the given steps below: Step 1: Before logging into the switch through telnet, you need to configure the Telnet user name and password on the switch through the console port. Note: By default, the password is required for authenticating the Telnet user to log into the switch. If a user tries to log in through Telnet without a password, the system will prompt that the login fails because no password is set. <H3C> system- System View: return to User View with Ctrl+Z. [H3C] user-interface vty 0 [H3C-ui-vty0] set authentication password simple xxxx (xxxx is the login password of Telnet user) Step 2: To set up the configuration environment, connect the Ethernet port of the PC to that of the switch via the LAN, as shown in Figure 1-5. Workstation Switch Ethernet M- Ethernet Server Workstation PC (for the switch via configuring telnet ) Figure 1-5 Set up configuration environment through telnet Step 3: Run Telnet on the PC and input the IP address of the VLAN connected to the PC port, as shown in Figure

29 Operation Manual Login and User Interface Chapter 1 Switch Login Figure 1-6 Run Telnet Step 4: The terminal displays Login authentication! and prompts the user to input the logon password. After you input the correct password, it displays the command line prompt (such as <H3C>). If the prompt All user interfaces are used, please try later! The connection was closed by the remote host! appears, it indicates that the maximum number of Telnet users that can be accessed to the switch is reached at this moment. In this case, please reconnect later. At most 5 Telnet users are allowed to log on to the H3C series switches simultaneously. Step 5: Use the corresponding commands to configure the switch or to monitor the running state. Enter? to get the immediate help. For details of specific commands, refer to the following chapters. Note: When configuring the switch via Telnet, do not modify the IP address of it unless necessary, for the modification might cut the Telnet connection. By default, when a Telnet user passes the password authentication to log on to the switch, he can access the commands at Level Accessing a Switch Through Another Switch via Telnet After a user has logged into a switch, he or she can configure another switch through the switch via Telnet. The local switch serves as Telnet client and the peer switch serves as Telnet server. If the ports connecting the two switches are on the same local network, the IP addresses of the two switches must be in the same network segment. Otherwise, a route must be available between the two switches. As shown in the figure below, after you telnet to a switch, you can run telnet command to log in and configure another switch. 1-4

30 Operation Manual Login and User Interface Chapter 1 Switch Login PC Telnet Client Telnet Server Figure 1-7 Provide Telnet Client service Step 1: Configure the Telnet user name and password on the Telnet Server through the console port. Note: By default, the password is required for authenticating the Telnet user to log into the switch. If a user logs in via the Telnet without password, he will see the prompt Login password has not been set!. <H3C> system- System View: return to User View with Ctrl+Z. [H3C] user-interface vty 0 [H3C-ui-vty0] set authentication password simple xxxx Step 2: The user logs in the Telnet Client (switch). For the login process, refer to the section describing Connecting a PC to the Switch through Telnet. Step 3: Perform the following operations on the Telnet Client: <H3C> telnet xxxx xxxx is the hostname or IP address of the Telnet Server. If hostname is used, it must be the one configured with the ip host command or the DNS domain name of the Telnet Server. Step 4: Enter the preset login password and you will see the prompt such <H3C>. If the prompt All user interfaces are used, please try later! The connection was closed by the remote host! appears, it indicates that the maximum number of Telnet users that can be accessed to the switch is reached at this moment. In this case, please connect later. Step 5: Use the corresponding commands to configure the switch or it running state. Enter? to get the immediate help. For details of specific commands, refer to the following chapters. 1-5

31 Operation Manual Login and User Interface Chapter 1 Switch Login 1.3 Setting Up Configuration Environment Through Modem Dial-up Step 1: Perform authentication configuration for the modem user via the console port of the switch before the user logs into the switch through a dial-up modem. Note: By default, the modem user is authenticated against password when logging into the switch. If no password is set, the prompt Login password has not been set!. will be displayed when the modem user logs in. <H3C> system- System View: return to User View with Ctrl+Z.. [H3C] user-interface aux 0 [H3C-ui-aux0] set authentication password simple xxxx Step 2: As shown in the figure below, to set up the remote configuration environment, connect the Modems to a PC (or a terminal) serial port and the switch AUX port respectively. Figure 1-8 Set up remote configuration environment Step 3: Dial for connection to the switch, using the terminal emulator and Modem on the remote end. The number dialed shall be the telephone number of the Modem connected to the switch. See the two figures below. 1-6

32 Operation Manual Login and User Interface Chapter 1 Switch Login Figure 1-9 Set the dialed number Figure 1-10 Dial on the remote PC Step 4: Enter the preset login password on the remote terminal emulator and wait for the prompt such as <H3C>. Then you can configure and manage the switch. Enter? to get the immediate help. For details of specific commands, refer to the following chapters. Note: By default, when a Modem user logs in, he can access the commands at Level

33 Operation Manual Login and User Interface Chapter 2 User Interface Configuration Chapter 2 User Interface Configuration When configuring user interface, go to these sections for information you are interested in: User Interface Over User Interface Configuration Displaying and Debugging User Interface 2.1 User Interface Over To facilitate system management, the switches support user interface based configuration for the configuration and management of port attributes. Presently, the S9500 series switches support the following user interface based configuration methods: Local configuration via the console port and AUX port Local and remote configuration through Telnet on Ethernet port Remote configuration through dialing with modem via the AUX port. According to the above-mentioned configuration methods, there are three types of user interfaces: Console user interface Console user interface is used to log into the switch via the console port. A switch can only have one console user interface. AUX user interface AUX user interface is used to log into the switch locally or remotely with a modem via the AUX port. A switch can only have one AUX user interface. The local configuration for it is similar to that for the console user interface. VTY user interface VTY user interface is used to telnet the switch. A switch can have up to five VTY user interface. User interface is numbered in the following two ways: absolute number and relative number. I. Absolute number The user interfaces of the S9500 routing switch include three types, which are sequenced as follows: console interface (CON), auxiliary interface (AUX) and virtual interface (VTY). A switch has one CON, one AUX and multiple VTYs. The first absolute number is designated as 0; the second one is designated as 1; and so on. This method can specify a unique user interface or a group of interfaces. 2-1

34 Operation Manual Login and User Interface Chapter 2 User Interface Configuration It follows the rules below. Console user interface is numbered as the first interface designated as user interface 0. AUX user interface is numbered as the second interface designated as user interface 1. VTY is numbered after AUX user interface. The absolute number of the first VTY is incremented by 1 than the AUX user interface number. II. Relative number The relative number is in the format of user interface type + number. The number refers to the internal number for each user interface type. With this numbering method, when performing a configuration operation for user interfaces, you can only specify a same type of user interfaces instead of specifying different types of user interfaces. It follows the rules below: Number of console user interface: console 0. Number of AUX user interface: AUX 0. Number of VTY: The first VTY interface is designated as VTY 0; the second one is designated as VTY 1, and so on. 2.2 User Interface Configuration The following sections describe the user interface configuration tasks. Entering User Interface View Defining the Login Header Configuring Asynchronous Port Attributes Configuring Terminal Attributes Managing Users Configuring Telnet Configuring Modem Attributes Configuring Redirection Entering User Interface View The following command is used for entering a user interface. You can enter a single user interface or multi user interface to configure one or more user interfaces respectively. Perform the following configuration in system. 2-2

35 Operation Manual Login and User Interface Chapter 2 User Interface Configuration Follow these steps to enter user interface : To do Enter a single user interface or multi user interface s Use the command user-interface [ type ] first-number [ last-number ] Defining the Login Header The following command is used for configuring the displayed header when user login. When the users log into the switch, if a connection is activated, the login header will be displayed. After the user successfully logs in the switch, the shell header will be displayed. Perform the following configuration in system. Follow these steps to configure the login header: To do Configure the login header Remove the login header configured Use the command header [ shell incoming login ] text undo header [ shell incoming login ] Note that if you press <Enter> after typing any of the three keywords shell, login and incoming in the command, then what you type after the word header is the contents of the login information, instead of identifying header type Configuring Asynchronous Port Attributes The following commands can be used for configuring the attributes of the asynchronous port in asynchronous interactive mode, including speed, flow control, parity, stop bit and data bit. Perform the following configurations in user interface (Console and AUX user interface only). I. Configuring the transmission speed Follow these steps to configure the transmission speed: To do Configure the transmission speed Restore the default transmission speed Use the command speed speed-value undo speed By default, the transmission speed on an asynchronous port is 9600 bps. 2-3

36 Operation Manual Login and User Interface Chapter 2 User Interface Configuration II. Configuring flow control Follow these steps to configure flow control: To do Configure the flow control Restore the default flow control mode Use the command flow-control { hardware none software } undo flow-control By default, the flow control on an asynchronous port is none, that is, no flow control will be performed. III. Configuring parity Follow these steps to configure parity: To do Configure parity mode Restore the default parity mode Use the command parity { even mark none odd space } undo parity By default, the parity on an asynchronous port is none, that is, no parity bit. IV. Configuring the stop bit Follow these steps to configure the stop bit: To do Use the command Configure the stop bit stopbits { } Restore the default stop bit undo stopbits By default, an asynchronous port supports 1 stop bit. Note that setting 1.5 stop bits is not available on S9500 series at present. V. Configuring the data bit Follow these steps to configure the data bit: To do Use the command Configure the data bit databits { 7 8 } Restore the default data bit undo databits By default, an asynchronous port supports 8 data bits. 2-4

37 Operation Manual Login and User Interface Chapter 2 User Interface Configuration Configuring Terminal Attributes The following commands can be used for configuring the terminal attributes, including enabling/disabling terminal service, disconnection upon timeout, lockable user interface, configuring terminal screen length and history command buffer size. Perform the following configuration in user interface. Perform lock command in user. I. Enabling/disabling terminal service After the terminal service is disabled on a user interface, you cannot log into the switch through the user interface. However, the user logged in through the user interface before disabling the terminal service can continue his operation. After such user logs out, he cannot log in again. In this case, a user can log into the switch through the user interface only when the terminal service is enabled again. Follow these steps to enable/disable terminal service: To do Use the command Enable terminal service Disable terminal service shell undo shell By default, terminal service is enabled on all the user interfaces. Note the following points: For the sake of security, the undo shell command can only be used on the user interfaces other than console user interface. You cannot use this command on the user interface via which you log in. You will be asked to confirm before using undo shell on any legal user interface. II. Configuring idle-timeout Follow these steps to configure idle-timeout: To do Use the command Configure idle-timeout idle-timeout minutes [ seconds ] Restore the default idle-timeout undo idle-timeout By default, idle-timeout is enabled and set to 10 minutes on all the user interfaces. That is, the user interface will be disconnected automatically after 10 minutes without any operation. idle-timeout 0 means disabling idle-timeout. 2-5

38 Operation Manual Login and User Interface Chapter 2 User Interface Configuration III. Locking user interface This configuration is to lock the current user interface and prompt the user to enter the password. This makes it impossible for others to operate in the interface after the user leaves. Follow these steps to lock user interface: To do Use the command Lock user interface lock IV. Setting the screen length If a command displays more than one screen of information, you can use the following command to set how many lines to be displayed in a screen, so that the information can be separated in different screens and you can it more conveniently. Follow these steps to set the screen length: To do Configure the maximum number of lines of information on one screen of the terminal Restore the default Use the command screen-length screen-length undo screen-length Note that the number of lines that can be displayed in each screen remains the same when screen-length is set to 1 or 2. By default, 24 lines (including the multi-screen identifier lines) are displayed in one screen when the multi-screen display function is enabled. Use screen-length 0 to disable the multi-screen display function. V. Setting the history command buffer size Follow these steps to set the history command buffer size: To do Set the history command buffer size Restore the default history command buffer size Use the command history-command max-size value undo history-command max-size By default, the size of the history command buffer is 10, that is, 10 history commands can be saved. 2-6