H3C S9500 Series Operation Manual
H3C S9500 Series Operation Manual

H3C S9500 Series Operation Manual

Routing switches
Hide thumbs Also See for S9500 Series:
Table of Contents

Advertisement

H3C S9500 Series Routing Switches
Operation Manual
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Manual Version: T2-081655-20080530-C-2.03
Product Version: S9500-CMW520-R2132

Advertisement

Table of Contents
loading

Summary of Contents for H3C S9500 Series

  • Page 1 H3C S9500 Series Routing Switches Operation Manual Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: T2-081655-20080530-C-2.03 Product Version: S9500-CMW520-R2132...
  • Page 2 Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
  • Page 3: Chapter 1 Ethernet Interface Configuration

    About This Manual Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches commissioning, maintenance Installation Manual monitoring of the S9500 series routing switches.
  • Page 4 Part Contents includes IP Routing Overview, BGP Configuration, IS-IS Configuration, OSPF Configuration, Configuration, Routing Policy Configuration, Static 03 IP Routing Volume Routing Configuration, IPv6 BGP Configuration, IPv6 IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6 RIPng Configuration, IPv6 Static Routing Configuration. includes Multicast Overview, Multicast Routing and Forwarding Configuration, IGMP...
  • Page 5 Conventions The manual uses the following conventions: I. Command conventions Convention Description Boldface The keywords of a command line are in Boldface. italic Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by { x | y | ...
  • Page 6 III. Symbols Convention Description Means reader be extremely careful. Improper operation Warning may cause bodily injury. Means reader be careful. Improper operation may cause Caution data loss or damage to equipment. Note Means a complementary description.
  • Page 7: Manual Version

    Operation Manual H3C S9500 Series Routing Switches Access Volume Organization Manual Version T2-081655-20080530-C-2.03 Product Version S9500-CMW520-R2132 Organization The Access Volume is organized as follows: Features (operation Description manual) The volume describes: Ethernet Interface Ethernet port overview Ethernet port configuration Packet over SONET/SDH (POS) is a technology used in MAN (metropolitan area network) and WAN (wide area network) for data packet transmission.
  • Page 8 Operation Manual H3C S9500 Series Routing Switches Access Volume Organization Features (operation Description manual) Ethernet OAM is a tool monitoring Layer-2 link status. It helps network administrators manage their networks effectively. The volume describes: Ethernet OAM Ethernet OAM overview Ethernet OAM configuration MSTP is compatible with STP and RSTP.
  • Page 9: Table Of Contents

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Ethernet Interface Configuration ................1-1 1.1 Ethernet Interface Configuration..................1-1 1.1.1 Configuration Task List ................... 1-1 1.1.2 Configuring LAN/WAN Mode for a 10GE Interface..........1-1 1.1.3 Basic Ethernet Interface Configuration ..............
  • Page 10: Configuration Task List

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Chapter 1 Ethernet Interface Configuration When configuring Ethernet interfaces, go to these sections for information you are interested in: Ethernet Interface Configuration Displaying and Maintaining Ethernet Interfaces 1.1 Ethernet Interface Configuration...
  • Page 11 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration WAN mode. 10GE interfaces operating in this mode are used to provide network access for SDH networks. They receive and forward synchronous digital hierarchy (SDH) packets across point-to-point connections only.
  • Page 12: Basic Ethernet Interface Configuration

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do… Use the command… Remarks Configure a value for Optional J0/J1 bytes when the flag { j0 | j1 } sdh By default, the value of...
  • Page 13: Configuring Flow Control On An Ethernet Interface

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Optional By default, an Ethernet Shut down the Ethernet interface is in up state. Shutdown interface Use the undo shutdown command to bring up the interface.
  • Page 14: Configuring Physical State Change Suppression On An Ethernet Interface

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration 1.1.5 Configuring Physical State Change Suppression on an Ethernet Interface An Ethernet interface operates in one of the two physical link states: up or down. During the suppression time, physical-link-state changes will not be propagated to the system.
  • Page 15 } Disabled by default. Note: Currently, the S9500 series routing switches do not support the external loopback testing. Internal loopback testing can only be enabled on interfaces in down state. That is, it is unavailable to interfaces that are shut down manually.
  • Page 16 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Note: For information about aggregation port groups, refer to the Link Aggregation Configuration in the Access Volume. 1.1.8 Configuring Traffic Suppression for an Ethernet Interface You can suppress the broadcast and multicast traffic passing through an Ethernet interface.
  • Page 17: Setting The Interval For Collecting Ethernet Interface Statistics

    Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Note: You cannot enable broadcast suppression and multicast suppression on a board at the same time. If you have enabled broadcast suppression on some ports of a board, you cannot enable multicast suppression on the other ports, and vice versa.
  • Page 18 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Enter system view system-view — Set the maximum size of the Optional jumboframe enable jumbo frames allowed to pass...
  • Page 19 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Optional The default is auto, that is, the system decides the Configure the MDI mode mdi { across | auto |...
  • Page 20 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Caution: After you configure the source MAC address for an interface, packets forwarded on Layer 3 through the interface use the MAC address of the corresponding VLAN interface as their source MAC addresses, with the least octet being replaced with value specified by the source-mac-tail command.
  • Page 21 Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks display transceiver Display the values of the diagnosis interface diagnostic parameters for Available in any view [ interface-type pluggable optical modules...
  • Page 22 Operation Manual – POS Interface H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 POS Interface Configuration..................1-1 1.1 Overview ..........................1-1 1.1.1 SONET/SDH ......................1-1 1.1.2 POS......................... 1-1 1.2 Configuring a POS Interface....................1-1 1.3 Displaying and Maintaining POS Interfaces ..............1-3 1.4 POS Interface Configuration Example................
  • Page 23: Chapter 1 Pos Interface Configuration

    Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration Chapter 1 POS Interface Configuration When configuring a POS interface, go to these sections for information you are interested in: Overview Configuring a POS Interface...
  • Page 24 Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration To do... Use the command... Remarks Enter system view system-view –– interface pos Enter POS interface view Required interface-number Optional Set the clock mode clock { master | slave } The default is slave.
  • Page 25: Network Requirements

    Note: At present, POS interfaces on S9500 series routing switches only support PPP on data link layer. Currently, POS interfaces on S9500 series routing switches do not support IPv6 multicast. Therefore, the commands related to IPv6 multicast are not supported in POS interface view.
  • Page 26: Network Diagram

    Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration 1.4.2 Network Diagram POS 1/1/1 POS4 /1/1 10 .110 .1 .10 /24 10.110.1.11/24 Switch A Switch B Figure 1-1 Network diagram for connecting two POS interfaces through fiber 1.4.3 Configuration procedure...
  • Page 27 Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration Solution: Check that the transmitting and receiving fibers-optic are correctly connected to the POS interface. If you connect the two ends of a fiber-optic to the transmitting end and the receiving end of the same POS interface, you can see the message “loopback detected”...
  • Page 28 Operation Manual – GVRP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 GVRP Configuration ....................1-1 1.1 Introduction to GVRP......................1-1 1.1.1 GARP ........................1-1 1.1.2 GVRP ........................1-4 1.1.3 Protocols and Standards..................1-4 1.2 Configuring GVRP ......................1-5 1.2.1 Configuring GVRP Functions ..................
  • Page 29: Chapter 1 Gvrp Configuration

    Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration Chapter 1 GVRP Configuration The GARP VLAN registration protocol (GVRP) is a GARP application. Based on the operating mechanism of GARP, GVRP maintains and propagates dynamic VLAN registration information for the GVRP devices on a network.
  • Page 30 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration LeaveAll to deregister all attributes. A LeaveAll message is sent upon expiration of the LeaveAll timer, which starts upon the startup of a GARP application entity. Upon receiving a LeaveAll message, all other GARP entities on the LAN re-register the attributes of the message sending GARP entity.
  • Page 31 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration In GARP, a GARP participant registers or deregisters its attributes with other participants by making or withdrawing declarations of attributes and at the same time, based on received declarations or withdrawals, registers or deregisters the attributes of other participants.
  • Page 32 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration Field Description Value 0: LeaveAll Event 1: JoinEmpty Event 2: JoinIn Event Attribute Event Event described by the attribute 3: LeaveEmpty Event 4: LeaveIn Event 5: Empty Event...
  • Page 33: Configuring Gvrp Functions

    Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration 1.2 Configuring GVRP GVRP configuration includes configuring GVRP functions and configuring GARP timers. 1.2.1 Configuring GVRP Functions Follow these steps to configure GVRP functions on a trunk port: To do…...
  • Page 34 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration To do… Use the command… Remarks Enter system view system-view –– Optional Configure the GARP garp timer leaveall The default is 1000 LeaveAll timer timer-value centiseconds. Required...
  • Page 35: Displaying And Maintaining Gvrp

    Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration 1.3 Displaying and Maintaining GVRP To do… Use the command… Remarks Display statistics about display garp statistics Available in any view GARP [ interface interface-list ] Display GARP timers for...
  • Page 36: Gvrp Configuration Example Ii

    Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration [SysnameA-Ethernet1/1/1] gvrp [SysnameA-Ethernet1/1/1] quit # Create VLAN 2 (a static VLAN). [SysnameA] vlan 2 [SysnameA-vlan2] return Configure Switch B # Enable GVRP globally. <SysnameB> system-view [SysnameB] gvrp # Configure port Ethernet 1/1/2 as a trunk port, allowing all VLANs to pass.
  • Page 37 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration II. Network diagram Figure 1-3 Network diagram for GVRP configuration III. Configuration procedure Configure Switch A # Enable GVRP globally. <SysnameA> system-view [SysnameA] gvrp # Configure port Ethernet 1/1/1 as a trunk port, allowing all VLANs to pass.
  • Page 38: Gvrp Configuration Example Iii

    Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration [SysnameB-vlan3] return Verify the configuration # Display dynamic VLAN information on Switch A. <SysnameA> display vlan dynamic No dynamic VLAN exists! # Display dynamic VLAN information on Switch B.
  • Page 39 Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration # Create VLAN 2 (a static VLAN). [SysnameA] vlan 2 [SysnameA-vlan2] return Configure Switch B # Enable GVRP globally. <SysnameB> system-view [SysnameB] gvrp # Configure port Ethernet 1/1/2 as a trunk port, allowing all VLANs to pass.
  • Page 40 Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Link Aggregation Overview ..................1-1 1.1 Link Aggregation ........................ 1-1 1.1.1 LACP ........................1-2 1.1.2 Consistency Considerations for Ports in an Aggregation Group ......1-2 1.2 Approaches to Link Aggregation..................
  • Page 41: Link Aggregation

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Chapter 1 Link Aggregation Overview When configuring link aggregation, go to these sections for information you are interesting in: Link Aggregation Approaches to Link Aggregation...
  • Page 42: Consistency Considerations For Ports In An Aggregation Group

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview 1.1.1 LACP The link aggregation control protocol (LACP) is defined in IEEE 802.3ad. LACP interacts with its peer by sending link aggregation control protocol data units (LACPDUs).
  • Page 43: Approaches To Link Aggregation

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Category Considerations State of QinQ (enabled or disabled) QinQ Added outer VLAN tag BPDU tunnel state on ports (enabled or disabled) BPDU tunnel BPDU tunnel state for STP on ports (enabled or disabled)
  • Page 44 Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview place those ports in up state with the same speed/duplex pair, link state and basic configuration in selected state and all others in unselected state.
  • Page 45: Static Lacp Link Aggregation

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Note: Because changing an aggregation-related configuration setting on a port may cause the selected-state change of other ports and thus affects services, you are recommended to do that with caution.
  • Page 46: Load Sharing In A Link Aggregation Group

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview corresponding remote ports. (the lower the LACP priority, the smaller the port number, and the smaller the port ID) Note: Currently, the number of the selected ports in a static LACP aggregation group created on an S9500 routing switch can be up to eight.
  • Page 47: Service Loop Group

    QoS. Note: Currently, for the S9500 series, the boards with their models suffixed with DA, DB, or DC support IPv6 unicast/multicast and tunnel service loop groups; those with their models suffixed with C or CA support MPLS service loop groups.
  • Page 48 Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview For more information about port groups, refer to Ethernet Interface Configuration in the Access Volume.
  • Page 49: Chapter 2 Link Aggregation Configuration

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration Chapter 2 Link Aggregation Configuration When performing link aggregation configuration, go to these sections for information you are interesting in: Configuring Link Aggregation Displaying and Maintaining Link Aggregation Link Aggregation Configuration Example 2.1 Configuring Link Aggregation...
  • Page 50: Configuring A Static Lacp Link Aggregation Group

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration You can remove all ports in a manual aggregation group by removing the group. If this group contains only one port, you can remove the port only by removing the group.
  • Page 51: Configuring An Name For A Link Aggregation Group

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration Note: When making configuration, be aware that after a load-balancing aggregation group changes to a non-load balancing group due to resources exhaustion, either of the...
  • Page 52: Entering Aggregation Port Group View

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration To do… Use the command… Remarks Enter Ethernet interface interface interface-type –– view interface-number Assign the Ethernet port port link-aggregation group Required to the service loop group...
  • Page 53: Displaying And Maintaining Link Aggregation

    Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration 2.2 Displaying and Maintaining Link Aggregation To do… Use the command… Remarks Display the local system display lacp system-id Available in any view display link-aggregation...
  • Page 54 Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration III. Configuration procedure Note: This example only describes how to configure link aggregation on Switch A. To achieve link aggregation, do the same on Switch B.
  • Page 55 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Port Mirroring Configuration ..................1-1 1.1 Introduction to Port Mirroring ..................... 1-1 1.1.1 Types of Port Mirroring.................... 1-1 1.1.2 Implementing Port Mirroring..................1-2 1.2 Configuring Local Port Mirroring ..................
  • Page 56: Introduction To Port Mirroring

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Chapter 1 Port Mirroring Configuration When configuring port mirroring, go to these sections for information you are interested Introduction to Port Mirroring Configuring Local Port Mirroring...
  • Page 57: Implementing Port Mirroring

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration In remote port mirroring, the mirroring port or ports and the monitor port can be located on the same device or different devices. When they are located on different devices, there should be no Layer-3 network in between.
  • Page 58 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Figure 1-3 Remote port mirroring implementation Remote mirroring involves the following device roles: Source device The source device is the device where the mirroring ports are located. On it, you must create a remote source mirroring group to hold the mirroring ports.
  • Page 59: Configuring Local Port Mirroring

    Chapter 1 Port Mirroring Configuration Note: The S9500 series support inter-board mirroring, that is, the mirroring port(s) and the monitor port can be located on different boards on the same device. A source device can be connected to its destination device directly without any intermediate device.
  • Page 60: Configuring Remote Port Mirroring

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks In system mirroring-group groupid Assign a view monitor-port monitor-port-id port to the mirroring Required interface interface-type group as In Ethernet interface-number Use either approach.
  • Page 61 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks Create a remote source mirroring-group groupid Required mirroring group remote-source mirroring-group groupid Required In system mirroring-port Use either approach.
  • Page 62: Configuring A Remote Destination Mirroring Group (On The Destination Device)

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Note: To ensure device performance, do not assign mirroring ports to a remote probe VLAN. To configure a port as a reflector port, you must ensure that its link type is access, it belongs to the default VLAN (that is, VLAN 1), and it is neither a destination port for traffic mirroring nor a member of any other port mirroring group.
  • Page 63 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks Return to system view quit — Create a remote mirroring-group groupid destination port mirroring Required remote-destination group Assign the VLAN you...
  • Page 64: Displaying And Maintaining Port Mirroring

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration 1.4 Displaying and Maintaining Port Mirroring To do… Use the command… Remarks display mirroring-group Display the configuration Available in any { groupid | local | remote-source...
  • Page 65: Remote Port Mirroring Configuration Example

    Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration # Create a local port mirroring group. [Sysname] mirroring-group 1 local # Assign port Ethernet 1/1/1 and Ethernet 1/1/2 to the port mirroring group as mirroring ports.
  • Page 66 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Create a remote destination mirroring group on Switch C. Configure VLAN 2 as the remote probe VLAN and port Ethernet 1/1/2, to which the server is connected, as the monitor port.
  • Page 67 Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] mac-address max-mac-count 0 [Sysname-vlan2] quit # Configure port Ethernet 1/1/1 as a trunk port and configure the port to permit the packets of VLAN 2.
  • Page 68 Operation Manual – RPR H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 RPR Configuration....................... 1-1 1.1 Introduction to RPR ......................1-1 1.1.1 Overview ......................... 1-1 1.1.2 Ring Structure of RPR..................... 1-1 1.1.3 Data Operations on RPR ..................1-2 1.1.4 Topology Discovery....................
  • Page 69: Overview

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Chapter 1 RPR Configuration When configuring RPR, go to these sections for information you are interested in: Introduction to RPR Configuring RPR Displaying and Maintaining RPR RPR Configuration Examples 1.1 Introduction to RPR...
  • Page 70: Data Operations On Rpr

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Station Ringlet 0 West East Ringlet 1 East West West East Span East West West East Figure 1-1 Ring structure of RPR Ringlet 0, also called outer ring, is for clockwise or west data traffic. Ringlet 1, also called inner ring, is for counterclockwise or east data traffic.
  • Page 71 Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration I. Unicast transmission Transit Insert to ringlet 0 Copy from Strip ringlet 0 Insert to ringlet 1 Strip Transit Copy from ringlet 1 Transit Strip Figure 1-2 Unicast transmission on an RPR ring...
  • Page 72: Topology Discovery

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Transit and destination stations copy and transit the frame if the TTL of the frame has not expired. The frame is stripped when it returns to the source station or when its TTL expires.
  • Page 73: Fault Response Methods

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration II. Topology discovery process RPR uses three types of control frames for topology discovery: attribute discovery (ATD), topology protection (TP), and topology checksum (TC). TP frames convey configuration and status information of stations. The stations on...
  • Page 74 Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Station failure Pass-through Figure 1-5 Passthrough mode II. Protection If a station is unable to forward traffic as the result of power failure or fiber cut for example, it should enter protection mode.
  • Page 75: Rpr Timers

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration intervals to the other stations on the ring. After a new topology database is stabilized, the source station directs protected frames to the ringlet that retains connectivity to their destinations.
  • Page 76: Rpr Ports

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration TP fast timer: defines the fast interval at which TP frames are sent. A TP fast timer starts when a station starts initializing or detects a topology change. After sending nine TP frames at fast intervals, the station begins to send TP frames at slow intervals.
  • Page 77: Configuring Rpr

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Table 1-1 RPR physical and logical port dependencies RPR physical port RPR logical port 2.5 Gbps POS 10 Gbps POS Note: Many commands available on an Ethernet port can be used on an RPR logical port.
  • Page 78: Configuring Protection Mode

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Task Remarks Configuring RPR VLAN Tunnel Optional Testing Connectivity Between Stations Optional 1.3 Configuring Protection Mode Follow these steps to configure the protection mode on the RPR station: To do...
  • Page 79: Configuring Ringlet Selection Table

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... Remarks Optional rpr reversion-mode Configure the protection { revertive | Revertive mode applies reversion mode non-revertive } by default. 1.5 Configuring Ringlet Selection Table Each RPR station maintains a ringlet selection table, based on which the decision as to which ringlet should be selected to transmit frames is made.
  • Page 80: Configuring Rate Limiting

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 1.5.1 Adding a static ringlet selection entry Follow these steps to add an entry into the static ringlet selection table: To do... Use the command... Remarks Enter system view system-view —...
  • Page 81: Configuring Station Weight

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Class A is further divided into subclass A0 and subclass A1. RPR can reserve bandwidth for the subclass A0 service. When congestion occurs, the unused reserved bandwidth cannot be used by lower priority services. For the subclass A1 service, rate limiting is used.
  • Page 82: Configuring Timers

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration excessive bandwidth, RPR adopts a fairness algorithm to ensure bandwidth allocation fairness. The fairness algorithm of RPR mainly regulates class B-EIR and class C traffic on the RPR ring.
  • Page 83: Configuring Rpr Pos Interface

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... Remarks Optional Set the TC slow timer rpr timer tc-slow value 100 milliseconds by default Optional Set the TP fast timer rpr timer tp-fast value...
  • Page 84: Configuring Port Type

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 1.10 Configuring Port Type Follow these steps to set physical RPR port type on an RPR logical port: To do... Use the command... Remarks Enter system view —...
  • Page 85: Configuring Rpr Vlan Tunnel

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Follow these steps to send an FS or MS protection request onto the ringlet: To do... Use the command... Remarks Enter system view system-view — Enter RPR logical interface interface-type —...
  • Page 86: Displaying And Maintaining Rpr

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration between the two stations is normal on both the specific sending ringlet and the receiving ringlet. In this case, the destination station should be able to receive the Echo...
  • Page 87: Rpr Configuration Examples

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... display rpr rs-table { default | dynamic Display RPR ringlet selection table | ipv6 | overall | static | dynamic| vrrp }...
  • Page 88 Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Configure a static ringlet selection entry to allow frames from Station A to Station B to travel Ringlet 1 when no edge occurs on the RPR ring (that is, the ring remains closed).
  • Page 89: Rpr Vlan Tunnel Configuration Examples

    Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 000f-e257-0002 Total entries: 1 # Display the information of the overall ring selection table to verify the configuration. [Sysname-Ten-GigabitEthernet1/1/1] display rpr rs-table overall Overall ringlet selection table of...
  • Page 90 Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration [Sysname-Ten-GigabitEthernet1/1/1] port link-type trunk # Permit the specified VLAN to pass the current trunk port. [Sysname-Ten-GigabitEthernet1/1/1] port trunk permit vlan 10 # Configure a tunnel for VLAN 10 traffic to reach station D.
  • Page 91 Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Tabel of Contents Table of Contents Chapter 1 OAM Configuration...................... 1-1 1.1 OAM Overview........................1-1 1.1.1 Types of OAMPDUs....................1-1 1.1.2 OAM Connection Establishment ................1-2 1.1.3 OAM Standards....................... 1-5 1.2 OAM Configuration Task List.....................
  • Page 92: Oam Overview

    Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration Chapter 1 OAM Configuration When configuring the OAM function, go to these sections for information you are interested in: OAM Overview OAM Configuration Task List Configuring Basic OAM Functions...
  • Page 93: Oam Connection Establishment

    Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration Table 1-1 Description of the fields in an OAMPDU Field Description Value Destination MAC address of the Multicast MAC address Dest addr Ethernet OAMPDU 0180c2000002 Source MAC address of the...
  • Page 94 Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration I. OAM connection establishment OAM connection establishment is also known as the Discovery phase, where an OAM entity discovers other OAM entities and sessions between OAM entities are established.
  • Page 95 Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration The interval to send Information OAMPDUs is determined by a timer. Up to ten Information OAMPDUs can be sent in a second. II. Link monitoring Link monitoring is used to detect and locate link faults in various environments. In OAM, link faults are categorized into link events.
  • Page 96: Oam Standards

    Furthermore, performing remote loopback testing by network segments helps to locate network faults. Note: Currently, on an S9500 series switch, you can perform remote loopback only on Gigabit electrical interfaces. 1.1.3 OAM Standards OAM is defined in IEEE 802.3h.
  • Page 97: Configuring Link Monitoring

    Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter Ethernet port view — interface-number Optional oam mode { active | Set OAM operating mode...
  • Page 98: Enabling Oam Loopback Testing

    Ethernet OAM Commands in the accompanied command manual. Note: For the LSB1GV48DB0 board on an S9500 series switch, gap may exist between the number of detected error frame seconds and the actual number of error frame seconds over a detection interval due to the detection frequency restriction. The same is true of error frame detection.
  • Page 99: Displaying And Maintaining Oam Configuration

    Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter Ethernet port view — interface-number Required Enable OAM loopback oam loopback testing Disabled by default.
  • Page 100: Oam Configuration Example

    Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Clear statistics on OAM reset oam [ interface Available in user packets and OAM link error interface-type view only events interface-number ] 1.7 OAM Configuration Example...
  • Page 101 Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration [Sysname] display oam configuration Configuration of the errored symbol/frame event window/threshold : -------------------------------------------------------- Errored-symbol Event period Errored-symbol Event threshold Errored-frame Event period Errored-frame Event threshold Errored-frame-period Event period...
  • Page 102 Operation Manual – MSTP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MSTP Configuration ....................1-1 1.1 MSTP Overview ......................... 1-1 1.1.1 Introduction to STP ....................1-1 1.1.2 Introduction to MSTP .................... 1-11 1.1.3 Protocols and Standards..................1-18 1.2 Configuration Task List ....................
  • Page 103 Operation Manual – MSTP H3C S9500 Series Routing Switches Table of Contents 1.7.2 Configuration Procedure ..................1-41 1.7.3 Configuration Examples ..................1-43 1.8 Configuring No Agreement Check ................... 1-43 1.8.1 Configuration Prerequisites................... 1-45 1.8.2 Configuration Procedure ..................1-45 1.8.3 Configuration Examples ..................1-45 1.9 Configuring Protection Functions..................
  • Page 104: Mstp Overview

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Chapter 1 MSTP Configuration When configuring MSTP, go to these sections for information you are interested in: MSTP Overview Configuration Task List Configuring the Root Bridge Configuring Leaf Nodes...
  • Page 105 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Configuration BPDUs, used to calculate the spanning tree and maintain the spanning tree topology. Topology change notification (TCN) BPDUs, used to notify concerned devices of network topology changes, if any.
  • Page 106 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Switch A Switch B Switch C Figure 1-1 A schematic diagram of designated bridges and designated ports As shown in Figure 1-1, AP1 and AP2, BP1 and BP2, and CP1 and CP2 are ports on Switch A, Switch B, and Switch C.
  • Page 107 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Designated port ID: formed by designated port priority and port name Message age: age of the configuration BPDU while it is propagating in the network Max age: maximum time that a received configuration BPDU can be maintained...
  • Page 108 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Rules for configuration BPDU comparison: The configuration BPDU that has the lowest root bridge ID has the highest priority. For configuration BPDUs with the same root bridge ID, they will be compared by their root path costs.
  • Page 109 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Step Description The device compares the calculated configuration BPDU with the configuration BPDU on the port of which the port role is to be defined, and does the following according to the comparison result:...
  • Page 110 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Table 1-4 Initial state of each device Device Port ID BPDU of the port {0, 0, 0, AP1} Switch A {0, 0, 0, AP2} {1, 0, 1, BP1}...
  • Page 111 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration BPDU of the port Device Comparison process after comparison Port BP1 receives a configuration BPDU from Switch A (that is, {0, 0, 0, AP1}). As the received...
  • Page 112 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration BPDU of the port Device Comparison process after comparison Port CP1 receives a configuration BPDU from Switch A (that is, {0, 0, 0, AP2}). As the received...
  • Page 113 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration After the comparison processes described in the table above, a spanning tree with Switch A as the root bridge is stabilized, as shown in Figure 1-3. Figure 1-3 A spanning tree with Switch A as the root bridge...
  • Page 114: Introduction To Mstp

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration However, the newly computed configuration BPDU will not be propagated throughout the network immediately, so the old root ports and designated ports that have not detected the topology change continue forwarding data through the old path. If the new root port and designated port begin to forward data as soon as they are elected, a temporary loop may occur.
  • Page 115 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: In RSTP, a newly elected root port can enter the forwarding state rapidly if this condition is met: The old root port on the device has stopped forwarding data and the upstream designated port has started forwarding data.
  • Page 116 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-4 Basic concepts in MSTP MST region An MST region is composed of multiple devices in a switched network and network segments among them. These devices have the following characteristics: All are MSTP-enabled.
  • Page 117 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Multiple MST regions can exist in a switched network. You can use an MSTP command to group multiple devices to the same MST region. VLAN-to-MSTI mapping table As an attribute of an MST region, the VLAN-to-MSTI mapping table describes the mapping relationships between VLANs and MSTIs.
  • Page 118 Note: Currently, the S9500 series routing switches are not capable of recognizing boundary ports. When an S9500 series routing switch is connected to a third party’s device that supports boundary port recognition, the third party’s device may malfunction in recognizing a boundary port.
  • Page 119 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-5 Port roles Figure 1-5, Devices A, B, C, and D constitute an MST region. Port 1 and port 2 of device A connect to the common root bridge.
  • Page 120 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Root Role Designated Alternate port/Master Backup port port port State port Discarding √ √ √ √ III. How MSTP works MSTP divides an entire Layer 2 network into multiple MST regions, which are interconnected by a computed CST.
  • Page 121: Configuration Task List

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration TC-BPDU guard Support for hot swapping of interface cards and active/standby changeover. 1.1.3 Protocols and Standards MSTP is documented in: IEEE 802.1D: Spanning Tree Protocol IEEE 802.1w: Rapid Spanning Tree Protocol IEEE 802.1s: Multiple Spanning Tree Protocol...
  • Page 122: Configuration Procedure

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Task Remarks Configuring an MST Region Required Configuring the Work Mode of MSTP Device Optional Configuring the Timeout Factor Optional Configuring the Maximum Transmission Rate of Ports...
  • Page 123 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter MST region view — stp region-configuration Optional Configure the MST region By default, the name of an...
  • Page 124: Specifying The Root Bridge Or A Secondary Root Bridge

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Configuration example # Configure the MST region name to be info, the MSTP revision level to be 1, and VLAN 2 through VLAN 10 to be mapped to instance 1, and VLAN 20 through VLAN 30 to instance 2.
  • Page 125 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note that: Upon specifying the current device as the root bridge or a secondary root bridge, you cannot change the priority of the device. You can configure the current device as the root bridge or a secondary root bridge of an MSTI, which is specified by instance instance-id in the command.
  • Page 126: Configuring The Work Mode Of Mstp Device

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.3 Configuring the Work Mode of MSTP Device MSTP and RSTP can recognize each other’s protocol packets, so they are mutually compatible. However, STP is unable to recognize MSTP packets. For hybrid...
  • Page 127: Configuring The Maximum Hops Of An Mst Region

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Optional Configure the priority of stp [ instance instance-id ] the current device priority priority 32768 by default...
  • Page 128: Configuring The Network Diameter Of A Switched Network

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Optional Configure the maximum stp max-hops hops hops of the MST region 20 by default Note: A larger maximum hops setting means a larger size of the MST region.
  • Page 129: Configuring Timers Of Mstp

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Network diameter is a parameter that indicates network size. A bigger network diameter represents a larger network size. Based on the network diameter you configured, MSTP automatically sets an optimal hello time, forward delay, and max age for the device.
  • Page 130 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Caution: The length of the forward delay time is related to the network diameter of the switched network. Typically, the larger the network diameter is, the longer the forward delay time should be.
  • Page 131: Configuring The Timeout Factor

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.8 Configuring the Timeout Factor After the network topology becomes stabilized, each non-root-bridge device forwards configuration BPDUs to the adjacent devices at the interval of hello time to check for faulty links.
  • Page 132: Configuring Ports As Edge Ports

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command Ethernet interface interface-type Configured in Ethernet Enter interface interface-number interface view, the setting...
  • Page 133 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration I. Configuration procedure Following these steps to specify a port or a group of ports as edge port(s): To do... Use the command... Remarks Enter system view —...
  • Page 134 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command interface interface-type Ethernet Configured in Ethernet Enter interface-number interface view interface view, the setting...
  • Page 135 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration packet format to be used by a port. After the configuration, when working in MSTP mode, the port sends and receives only MSTP packets in the configured format to communicate with devices that adopt the same format.
  • Page 136: Enabling The Mstp Feature

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.13 Enabling the MSTP Feature I. Configuration procedure Follow these steps to enable the MSTP feature: To do... Use the command... Remarks Enter system view — system-view...
  • Page 137: Configuring Leaf Nodes

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.4 Configuring Leaf Nodes Perform the following configurations for a device operating as a leaf node. 1.4.1 Configuring an MST Region Refer to section Configuring an MST Region.
  • Page 138 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Specify a standard for the Optional device to use when stp pathcost-standard The device uses the...
  • Page 139 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: In the calculation of the path cost value of an aggregated link, 802.1D-1998 does not take into account the number of ports in the aggregated link. Whereas, 802.1T takes the number of ports in the aggregated link into account.
  • Page 140: Configuring Port Priority

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration IV. Configuration example II # Configure MSTP to automatically calculate the path cost of Ethernet 1/1/1 based on the IEEE 802.1D-1998 standard. <Sysname> system-view [Sysname] interface ethernet 1/1/1...
  • Page 141: Performing Mcheck

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: When the priority of a port is changed, MSTP will re-compute the role of the port and initiate a state transition. Generally, a lower configured value priority indicates a higher priority of the port. If you configure the same priority value for all the Ethernet ports on the a device, the specific priority of a port depends on the index number of that port.
  • Page 142: Configuring The Vlan Ignore Feature

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration MSTP has been configured to operate in MSTP mode or RSTP-compatible mode. II. Perform global mCheck Follow these steps to perform global mCheck: To do... Use the command...
  • Page 143: Configuration Procedure

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-6 VLAN connectivity blocked by MSTP As shown in Figure 1-6, port A on Switch A allows VLAN 1 to pass, C allows VLAN 2 to pass;...
  • Page 144: Configuring Digest Snooping

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Network diagram Figure 1-7 Network diagram for VLAN Ignore configuration III. Configuration procedure Enable VLAN Ignore on Switch B. # Enable VLAN Ignore on VLAN 2.
  • Page 145 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter Ethernet interface interface-type Enter interface interface-number Ethernet view interface or Choose either port group port-group { manual...
  • Page 146: Configuring No Agreement Check

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.7.3 Configuration Examples I. Network requirements Switch A and Switch B connect to a third-party’s device and all the devices are in the same region. Enable Digest Snooping on Switch A and Switch B so that the three devices can communicate with one another.
  • Page 147 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Both RSTP and MSTP switches can perform rapid transition operation on a designated port only when the port receives an agreement packet from the downstream switch. The differences between RSTP and MSTP switches are: For MSTP, the downstream device’s root port sends an agreement packet only...
  • Page 148: Configuration Prerequisites

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration In this case, you can enable the No Agreement Check feature on the downstream device’s port to perform rapid state transition. 1.8.1 Configuration Prerequisites A device is the upstream one that is connected to another vendor’s MSTP supported device via a point-to-point link.
  • Page 149: Configuring Protection Functions

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Network diagram Figure 1-11 No Agreement Check configuration III. Configuration procedure # Enable No Agreement Check on Ethernet 1/1/2 of Switch A. <Sysname> system-view [Sysname] interface ethernet 1/1/2 [Sysname-Ethernet1/1/2] stp no-agreement-check 1.9 Configuring Protection Functions...
  • Page 150 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration ports are not supposed to receive configuration BPDUs. However, if someone forges configuration BPDUs maliciously to attack the devices, network may become instable. MSTP provides the BPDU guard function to protect the system against such attacks.
  • Page 151: Configuration Prerequisites

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration A device removes the corresponding forwarding entries upon receiving a TC-BPDU (a PDU notifying of a topology change). If a malicious user forges large amount of TC-BPDUs and sends them to a device in a short period, the device may be busy removing the forwarding entries, decreasing the performance of the switch and introducing potential stability risks.
  • Page 152: Enabling The Root Guard Function

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.9.3 Enabling the Root Guard Function Note: We recommend that you enable the root guard function. I. Configuration procedure Follow these steps to enable the root guard function: To do...
  • Page 153: Enabling The Tc-Bpdu Attack Guard Function

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command Ethernet interface interface-type Configured in Ethernet interface Enter interface-number interface view, the...
  • Page 154: Displaying And Maintaining Mstp

    Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.10 Displaying and Maintaining MSTP To do... Use the command... Remarks View the MSTP status display stp [ instance Available in any information and statistics instance-id ] [ interface...
  • Page 155 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: “Permit:” beside each link in the figure is followed by the VLANs the packets of which are permitted to pass this link. III. Configuration procedure Configuration on Switch A # Configure an MST region.
  • Page 156 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration [SysnameB-mst-region] region-name example [SysnameB-mst-region] instance 1 vlan 10 [SysnameB-mst-region] instance 3 vlan 30 [SysnameB-mst-region] instance 4 vlan 40 [SysnameB-mst-region] revision-level 0 # Activate MST region configuration manually.
  • Page 157 Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration [SysnameC] stp enable # View the MST region configuration information that has taken effect. [SysnameC] display stp region-configuration Oper configuration Format selector Region name :example Revision level...
  • Page 158 Operation Manual – VLAN H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 VLAN Configuration ....................1-1 1.1 Introduction to VLAN......................1-1 1.1.1 VLAN Overview ....................... 1-1 1.1.2 VLAN Fundamental....................1-2 1.1.3 VLAN Classification....................1-3 1.2 Configuring Basic VLAN Attributes ..................1-4 1.3 Configuring VLAN Interface Basic Attributes..............
  • Page 159: Chapter 1 Vlan Configuration

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Chapter 1 VLAN Configuration When configuring VLAN, go to these sections for information you are interested in: Introduction to VLAN Configuring Basic VLAN Attributes Configuring VLAN Interface Basic Attributes...
  • Page 160: Vlan Fundamental

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration A VLAN is not restricted by physical factors, that is to say, hosts that reside in different network segments may belong to the same VLAN; a VLAN can be with the same switch, or span across multiple switches or routers.
  • Page 161: Vlan Classification

    VLANs can be classified into different categories. The following four types are the most commonly used: Port-based MAC address-based IP-subnet-based Protocol-based Note: At present, S9500 series switches support port-based VLANs and protocol-based VLANs. The following contents introduce the configuration of port-based VLANs and protocol-based VLANs respectively.
  • Page 162: Configuring Basic Vlan Attributes

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration 1.2 Configuring Basic VLAN Attributes Follow these steps to configure basic VLAN attributes: Use the To do… Remarks command… Enter system view system-view — Optional vlan { vlan-id1 [ to...
  • Page 163: Configuring The Port-Based Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Follow these steps to configure VLAN interface basic attributes: To do… Use the command… Remarks Enter system view system-view — Required Create a VLAN interface interface This command leads you to...
  • Page 164 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration I. Port link type Based on the tag handling mode, a port’s link type can be one of the following three: Access: an Access port only belongs to one VLAN, normally used to connect user device;...
  • Page 165: Assigning An Access Port To A Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Inbound packets handling Outbound packets For an Port type handling untagged For a tagged packet packet Remove the tag and forward the packet if its VLAN ID is the same as the default VLAN ID.
  • Page 166: Assigning A Trunk Port To A Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration To do… Use the command… Remarks Enter system view system-view — Enter Use either command. interface interface-type Ethernet Under Ethernet interface interface-number interface view Enter view, the subsequent...
  • Page 167: Assigning A Hybrid Port To A Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration To do… Use the command… Remarks Required Allow a specified VLAN to port trunk permit vlan pass through the current By default, all trunk ports { vlan-id-list | all }...
  • Page 168: Configuring The Protocol-Based Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Note: To change the link type of a port from trunk to hybrid or vice versa, you must set the link type to access first. Ensure that a VLAN already exists before configuring it to pass through a certain hybrid port.
  • Page 169: Configuring The Protocol-Based Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration 1.5.2 Configuring the Protocol-Based VLAN Note: Protocol VLAN is only applicable to a hybrid port belonging to the VLAN to which a protocol is to be issued.
  • Page 170: Displaying And Maintaining Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Caution: You cannot configure both dsap-id and ssap-id as 0xE0 or 0xFF; otherwise the matching packets will take the same encapsulation format as that of the ipx llc packets and the ipx raw packets respectively.
  • Page 171: Vlan Configuration Examples

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration 1.7 VLAN Configuration Examples 1.7.1 Port-Based VLAN Configuration Example I. Network requirements Switch A connects to Switch B through trunk port Ethernet 1/1/1; The default VLAN ID of the trunk port is 100;...
  • Page 172 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Through protocol-based VLAN configuration, make Ethernet 1/1/1 to forward the received IPv4 packets to VLAN 2, and IPv6 packets to VLAN 6. II. Network diagram IP network...
  • Page 173: Chapter 2 Super Vlan Configuration

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration Chapter 2 Super VLAN Configuration When configuring super VLAN, go to these sections for information you are interested Introduction to Super VLAN Configuring Super VLAN Displaying Super VLAN Super VLAN Configuration Example 2.1 Introduction to Super VLAN...
  • Page 174 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration To do… Use the command… Remarks Required Correlate the super VLAN subvlan vlan-list The specified sub-VLANs with its sub-VLAN(s) must have existed. Return to system view quit —...
  • Page 175: Displaying Super Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration 2.3 Displaying Super VLAN To do… Use the command… Remarks Display the mapping display supervlan between a super VLAN Available in any view [ supervlan-id ] and its sub-VLAN(s) 2.4 Super VLAN Configuration Example...
  • Page 176 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration [Sysname-Vlan-interface10] local-proxy-arp enable [Sysname-Vlan-interface10] quit # Create VLAN 2, add ports Ethernet 0/1/1 and Ethernet 0/1/2 to it. [Sysname] vlan 2 [Sysname-vlan2] port ethernet 0/1/1 ethernet 0/1/2 # Create VLAN 3, add ports Ethernet 0/1/3 and Ethernet 0/1/4 to it.
  • Page 177: Chapter 3 Isolate-User Vlan Configuration

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Chapter 3 Isolate-User VLAN Configuration When configuring Isolate-user VLAN, go to these sections for information you are interested in: Introduction to Isolate-User-VLAN Configuring Isolate-User-VLAN Displaying and Maintaining Isolate-User-VLAN Isolate-User-VLAN Configuration Example 3.1 Introduction to Isolate-User-VLAN...
  • Page 178: Configuring Isolate-User-Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Figure 3-1 Network diagram for Isolate-user-VLAN configuration 3.2 Configuring Isolate-User-VLAN Configure the isolate-user-VLAN through the following steps: Create the isolate-user-VLAN; Create the secondary VLAN; Add ports to the isolate-user-VLAN ( note that the ports cannot be trunk ports) and ensure that at least one port has the isolate-user-VLAN as its default VLAN;...
  • Page 179: Displaying And Maintaining Isolate-User-Vlan

    Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration To do... Use the command Remarks Add ports to the Refer to Assigning an Access Port secondary VLAN Access port to a VLAN and ensure that at...
  • Page 180 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration On Switch C, VLAN 6 is configured as an isolate-user-VLAN, which includes an upstream port Ethernet 1/1/5 and two secondary VLANs VLAN 3 and VLAN 4.
  • Page 181 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Configure Switch C # Configure the isolate-user-VLAN. <SysnameC> system-view [SysnameC] vlan 6 [SysnameC-vlan6] isolate-user-vlan enable [SysnameC-vlan6] port ethernet1/1/5 [SysnameC-vlan6] quit # Configure the secondary VLANs. [SysnameC] vlan 3...
  • Page 182 Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration VLAN Type: static Isolate-user-VLAN type : secondary Route Interface: not configured Description: VLAN 0003 Tagged Ports: none Untagged Ports: Ethernet1/1/3 Ethernet1/1/5 The isolate-user-VLAN configuration on Switch C is similar to that on Switch B.
  • Page 183 Operation Manual – QinQ H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 QinQ Configuration ..................... 1-1 1.1 Introduction to QinQ......................1-1 1.1.1 Understanding QinQ ....................1-1 1.1.2 Implementations of QinQ ..................1-2 1.1.3 Adjustable TPID Value of QinQ Frames ..............1-2 1.2 Configuring Basic QinQ .....................
  • Page 184: Chapter 1 Qinq Configuration

    Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Chapter 1 QinQ Configuration When configuring QinQ, go to these sections for information you are interested in: QinQ Configuration Configuring Basic QinQ Setting TPID Value for QinQ Frames QinQ Configuration Examples 1.1 Introduction to QinQ...
  • Page 185: Implementations Of Qinq

    1.1.2 Implementations of QinQ For S9500 series switches, the QinQ feature is implemented through enabling the basic QinQ feature on ports. With the basic QinQ feature enabled on a port, when a frame arrives at the port, the port will tag it with the port’s default VLAN tag, regardless of whether the frame is tagged or...
  • Page 186 Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Figure 1-2 Structure of a VLAN-tagged Ethernet frame Note: Refer to VLAN Configuration in the Access Volume for the description on the TPID, Priority, CFI, and VLAN ID fields.
  • Page 187: Configuring Basic Qinq

    Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Protocol type Value Cluster 0x88A7 Reserved 0xFFFD/0xFFFE/0xFFFF 1.2 Configuring Basic QinQ Follow these steps to configure basic QinQ: To do... Use the command... Remarks Enter system view system-view —...
  • Page 188: Setting Tpid Value For Qinq Frames

    Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration 1.3 Setting TPID Value for QinQ Frames Follow these steps to set the TPID value for QinQ frames: To do... Use the command... Remarks Enter system view system-view —...
  • Page 189 Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration II. Network diagram Figure 1-3 Network diagram for QinQ configuration III. Configuration procedure Configuration on Provider A # Enter system view. <Sysname> system-view [Sysname] vlan 10 [Sysname-vlan10] quit # Enter Ethernet 1/1/2 port view.
  • Page 190 Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration # Enter Ethernet 1/1/2 port view. [Sysname] interface ethernet 1/1/2 [Sysname-Ethernet1/1/2] port access vlan 10 # Enable the basic QinQ function on Ethernet 1/1/2. [Sysname-Ethernet1/1/2] qinq enable...
  • Page 191 Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 BPDU Tunneling Configuration.................. 1-1 1.1 Introduction to BPDU Tunneling ..................1-1 1.1.1 Why BPDU Tunneling ..................... 1-1 1.1.2 How BPDU Tunneling Works .................. 1-1 1.2 Configuring BPDU Isolation ....................
  • Page 192: Chapter 1 Bpdu Tunneling Configuration

    Note: At present, the S9500 series switches only support BPDU tunneling for STP packets (in a broad sense). For description about STP packets in a broad sense, refer to the MSTP Configuration in the Access Volume.
  • Page 193 Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration II. BPDU transparent transmission As shown in Figure 1-1, the upper part is the service provider network, and the lower part represents the customer networks. The customer networks include network A and network B.
  • Page 194: Configuring Bpdu Isolation

    Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration 1.2 Configuring BPDU Isolation Perform the following tasks to configure BPDU isolation: To do... Use the command... Remarks Enter system view — system-view Optional Enabled by default...
  • Page 195: Bpdu Tunneling Configuration Example

    Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration To do... Use the command... Remarks Use either command Enter Ethernet interface interface-type Enter Configured in Ethernet interface view interface-number Ethernet interface view, the interface...
  • Page 196 Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration II. Network diagram Customer B Customer A VLAN 2 VLAN 4 Eth1/1/1 Eth1/1/2 Trunk Provider A Provider B Trunk Trunk VLAN 2 VLAN 2 Eth1/1/4...
  • Page 197 Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] quit [Sysname] interface ethernet 1/1/3 [Sysname-Ethernet1/1/3] port access vlan 2 [Sysname-Ethernet1/1/3] stp disable [Sysname-Ethernet1/1/3] bpdu-tunnel dot1q enable [Sysname-Ethernet1/1/3] bpdu-tunnel dot1q stp # Configure BPDU transparent transmission on Ethernet 1/4.
  • Page 198 Operation Manual – Port Isolation H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Port Isolation Configuration ..................1-1 1.1 Introduction to Port Isolation ....................1-1 1.2 Configuring an Isolation Group ..................1-3 1.2.1 Assigning Ports to an Isolation Group..............1-3 1.2.2 Configuring the Uplink Port of an Isolation Group...........
  • Page 199: Chapter 1 Port Isolation Configuration

    VLAN to which the isolated port belongs. At present, the S9500 series switches support a maximum of 64 isolation groups and the number of ports you can assign to an isolation group is not limited.
  • Page 200 Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration Figure 1-1 Layer-2 communication between ports in different VLANs when port isolation is used For ports belonging to the same VLAN, Layer 2 communication is carried out as shown...
  • Page 201: Configuring An Isolation Group

    Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration Figure 1-2 Layer-2 communication in the same VLAN when port isolation is used Note: The arrows in the above figure indicate the transmission direction of layer 2 traffic.
  • Page 202: Configuring The Uplink Port Of An Isolation Group

    Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration To do… Use the command… Remarks Enter Enter To assign a port to the Ethernet interface interface-type Ethernet isolation group, enter interface interface-number interface Ethernet interface view; to...
  • Page 203: Port Isolation Configuration Example

    Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration 1.4 Port Isolation Configuration Example 1.4.1 Networking Requirements Users Host A, Host B, and Host C are connected to Ethernet 1/1/2, Ethernet 1/1/3, and Ethernet 1/1/4 of the switch.
  • Page 204 Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration [Sysname-Ethernet1/1/3] port-isolate enable group 2 [Sysname-Ethernet1/1/3] interface ethernet 1/1/4 [Sysname-Ethernet1/1/4] port-isolate enable group 2 # Configure port Ethernet1/1/1 as the uplink port of isolation group 2.

Table of Contents