About This Manual Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches commissioning, maintenance Installation Manual monitoring of the S9500 series routing switches.
Page 4
Part Contents includes IP Routing Overview, BGP Configuration, IS-IS Configuration, OSPF Configuration, Configuration, Routing Policy Configuration, Static 03 IP Routing Volume Routing Configuration, IPv6 BGP Configuration, IPv6 IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6 RIPng Configuration, IPv6 Static Routing Configuration. includes Multicast Overview, Multicast Routing and Forwarding Configuration, IGMP...
Page 5
Conventions The manual uses the following conventions: I. Command conventions Convention Description Boldface The keywords of a command line are in Boldface. italic Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by { x | y | ...
Page 6
III. Symbols Convention Description Means reader be extremely careful. Improper operation Warning may cause bodily injury. Means reader be careful. Improper operation may cause Caution data loss or damage to equipment. Note Means a complementary description.
Operation Manual H3C S9500 Series Routing Switches Access Volume Organization Manual Version T2-081655-20080530-C-2.03 Product Version S9500-CMW520-R2132 Organization The Access Volume is organized as follows: Features (operation Description manual) The volume describes: Ethernet Interface Ethernet port overview Ethernet port configuration Packet over SONET/SDH (POS) is a technology used in MAN (metropolitan area network) and WAN (wide area network) for data packet transmission.
Page 8
Operation Manual H3C S9500 Series Routing Switches Access Volume Organization Features (operation Description manual) Ethernet OAM is a tool monitoring Layer-2 link status. It helps network administrators manage their networks effectively. The volume describes: Ethernet OAM Ethernet OAM overview Ethernet OAM configuration MSTP is compatible with STP and RSTP.
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Chapter 1 Ethernet Interface Configuration When configuring Ethernet interfaces, go to these sections for information you are interested in: Ethernet Interface Configuration Displaying and Maintaining Ethernet Interfaces 1.1 Ethernet Interface Configuration...
Page 11
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration WAN mode. 10GE interfaces operating in this mode are used to provide network access for SDH networks. They receive and forward synchronous digital hierarchy (SDH) packets across point-to-point connections only.
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do… Use the command… Remarks Configure a value for Optional J0/J1 bytes when the flag { j0 | j1 } sdh By default, the value of...
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Optional By default, an Ethernet Shut down the Ethernet interface is in up state. Shutdown interface Use the undo shutdown command to bring up the interface.
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration 1.1.5 Configuring Physical State Change Suppression on an Ethernet Interface An Ethernet interface operates in one of the two physical link states: up or down. During the suppression time, physical-link-state changes will not be propagated to the system.
Page 15
} Disabled by default. Note: Currently, the S9500 series routing switches do not support the external loopback testing. Internal loopback testing can only be enabled on interfaces in down state. That is, it is unavailable to interfaces that are shut down manually.
Page 16
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Note: For information about aggregation port groups, refer to the Link Aggregation Configuration in the Access Volume. 1.1.8 Configuring Traffic Suppression for an Ethernet Interface You can suppress the broadcast and multicast traffic passing through an Ethernet interface.
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Note: You cannot enable broadcast suppression and multicast suppression on a board at the same time. If you have enabled broadcast suppression on some ports of a board, you cannot enable multicast suppression on the other ports, and vice versa.
Page 18
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Enter system view system-view — Set the maximum size of the Optional jumboframe enable jumbo frames allowed to pass...
Page 19
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks Optional The default is auto, that is, the system decides the Configure the MDI mode mdi { across | auto |...
Page 20
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration Caution: After you configure the source MAC address for an interface, packets forwarded on Layer 3 through the interface use the MAC address of the corresponding VLAN interface as their source MAC addresses, with the least octet being replaced with value specified by the source-mac-tail command.
Page 21
Operation Manual – Ethernet Interface H3C S9500 Series Routing Switches Chapter 1 Ethernet Interface Configuration To do... Use the command... Remarks display transceiver Display the values of the diagnosis interface diagnostic parameters for Available in any view [ interface-type pluggable optical modules...
Page 22
Operation Manual – POS Interface H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 POS Interface Configuration..................1-1 1.1 Overview ..........................1-1 1.1.1 SONET/SDH ......................1-1 1.1.2 POS......................... 1-1 1.2 Configuring a POS Interface....................1-1 1.3 Displaying and Maintaining POS Interfaces ..............1-3 1.4 POS Interface Configuration Example................
Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration Chapter 1 POS Interface Configuration When configuring a POS interface, go to these sections for information you are interested in: Overview Configuring a POS Interface...
Page 24
Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration To do... Use the command... Remarks Enter system view system-view –– interface pos Enter POS interface view Required interface-number Optional Set the clock mode clock { master | slave } The default is slave.
Note: At present, POS interfaces on S9500 series routing switches only support PPP on data link layer. Currently, POS interfaces on S9500 series routing switches do not support IPv6 multicast. Therefore, the commands related to IPv6 multicast are not supported in POS interface view.
Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration 1.4.2 Network Diagram POS 1/1/1 POS4 /1/1 10 .110 .1 .10 /24 10.110.1.11/24 Switch A Switch B Figure 1-1 Network diagram for connecting two POS interfaces through fiber 1.4.3 Configuration procedure...
Page 27
Operation Manual – POS Interface H3C S9500 Series Routing Switches Chapter 1 POS Interface Configuration Solution: Check that the transmitting and receiving fibers-optic are correctly connected to the POS interface. If you connect the two ends of a fiber-optic to the transmitting end and the receiving end of the same POS interface, you can see the message “loopback detected”...
Page 28
Operation Manual – GVRP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 GVRP Configuration ....................1-1 1.1 Introduction to GVRP......................1-1 1.1.1 GARP ........................1-1 1.1.2 GVRP ........................1-4 1.1.3 Protocols and Standards..................1-4 1.2 Configuring GVRP ......................1-5 1.2.1 Configuring GVRP Functions ..................
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration Chapter 1 GVRP Configuration The GARP VLAN registration protocol (GVRP) is a GARP application. Based on the operating mechanism of GARP, GVRP maintains and propagates dynamic VLAN registration information for the GVRP devices on a network.
Page 30
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration LeaveAll to deregister all attributes. A LeaveAll message is sent upon expiration of the LeaveAll timer, which starts upon the startup of a GARP application entity. Upon receiving a LeaveAll message, all other GARP entities on the LAN re-register the attributes of the message sending GARP entity.
Page 31
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration In GARP, a GARP participant registers or deregisters its attributes with other participants by making or withdrawing declarations of attributes and at the same time, based on received declarations or withdrawals, registers or deregisters the attributes of other participants.
Page 32
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration Field Description Value 0: LeaveAll Event 1: JoinEmpty Event 2: JoinIn Event Attribute Event Event described by the attribute 3: LeaveEmpty Event 4: LeaveIn Event 5: Empty Event...
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration 1.2 Configuring GVRP GVRP configuration includes configuring GVRP functions and configuring GARP timers. 1.2.1 Configuring GVRP Functions Follow these steps to configure GVRP functions on a trunk port: To do…...
Page 34
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration To do… Use the command… Remarks Enter system view system-view –– Optional Configure the GARP garp timer leaveall The default is 1000 LeaveAll timer timer-value centiseconds. Required...
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration 1.3 Displaying and Maintaining GVRP To do… Use the command… Remarks Display statistics about display garp statistics Available in any view GARP [ interface interface-list ] Display GARP timers for...
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration [SysnameB-vlan3] return Verify the configuration # Display dynamic VLAN information on Switch A. <SysnameA> display vlan dynamic No dynamic VLAN exists! # Display dynamic VLAN information on Switch B.
Page 39
Operation Manual – GVRP H3C S9500 Series Routing Switches Chapter 1 GVRP Configuration # Create VLAN 2 (a static VLAN). [SysnameA] vlan 2 [SysnameA-vlan2] return Configure Switch B # Enable GVRP globally. <SysnameB> system-view [SysnameB] gvrp # Configure port Ethernet 1/1/2 as a trunk port, allowing all VLANs to pass.
Page 40
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Link Aggregation Overview ..................1-1 1.1 Link Aggregation ........................ 1-1 1.1.1 LACP ........................1-2 1.1.2 Consistency Considerations for Ports in an Aggregation Group ......1-2 1.2 Approaches to Link Aggregation..................
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Chapter 1 Link Aggregation Overview When configuring link aggregation, go to these sections for information you are interesting in: Link Aggregation Approaches to Link Aggregation...
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview 1.1.1 LACP The link aggregation control protocol (LACP) is defined in IEEE 802.3ad. LACP interacts with its peer by sending link aggregation control protocol data units (LACPDUs).
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Category Considerations State of QinQ (enabled or disabled) QinQ Added outer VLAN tag BPDU tunnel state on ports (enabled or disabled) BPDU tunnel BPDU tunnel state for STP on ports (enabled or disabled)
Page 44
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview place those ports in up state with the same speed/duplex pair, link state and basic configuration in selected state and all others in unselected state.
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview Note: Because changing an aggregation-related configuration setting on a port may cause the selected-state change of other ports and thus affects services, you are recommended to do that with caution.
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview corresponding remote ports. (the lower the LACP priority, the smaller the port number, and the smaller the port ID) Note: Currently, the number of the selected ports in a static LACP aggregation group created on an S9500 routing switch can be up to eight.
QoS. Note: Currently, for the S9500 series, the boards with their models suffixed with DA, DB, or DC support IPv6 unicast/multicast and tunnel service loop groups; those with their models suffixed with C or CA support MPLS service loop groups.
Page 48
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 1 Link Aggregation Overview For more information about port groups, refer to Ethernet Interface Configuration in the Access Volume.
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration Chapter 2 Link Aggregation Configuration When performing link aggregation configuration, go to these sections for information you are interesting in: Configuring Link Aggregation Displaying and Maintaining Link Aggregation Link Aggregation Configuration Example 2.1 Configuring Link Aggregation...
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration You can remove all ports in a manual aggregation group by removing the group. If this group contains only one port, you can remove the port only by removing the group.
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration Note: When making configuration, be aware that after a load-balancing aggregation group changes to a non-load balancing group due to resources exhaustion, either of the...
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration To do… Use the command… Remarks Enter Ethernet interface interface interface-type –– view interface-number Assign the Ethernet port port link-aggregation group Required to the service loop group...
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration 2.2 Displaying and Maintaining Link Aggregation To do… Use the command… Remarks Display the local system display lacp system-id Available in any view display link-aggregation...
Page 54
Operation Manual – Link Aggregation H3C S9500 Series Routing Switches Chapter 2 Link Aggregation Configuration III. Configuration procedure Note: This example only describes how to configure link aggregation on Switch A. To achieve link aggregation, do the same on Switch B.
Page 55
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Port Mirroring Configuration ..................1-1 1.1 Introduction to Port Mirroring ..................... 1-1 1.1.1 Types of Port Mirroring.................... 1-1 1.1.2 Implementing Port Mirroring..................1-2 1.2 Configuring Local Port Mirroring ..................
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Chapter 1 Port Mirroring Configuration When configuring port mirroring, go to these sections for information you are interested Introduction to Port Mirroring Configuring Local Port Mirroring...
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration In remote port mirroring, the mirroring port or ports and the monitor port can be located on the same device or different devices. When they are located on different devices, there should be no Layer-3 network in between.
Page 58
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Figure 1-3 Remote port mirroring implementation Remote mirroring involves the following device roles: Source device The source device is the device where the mirroring ports are located. On it, you must create a remote source mirroring group to hold the mirroring ports.
Chapter 1 Port Mirroring Configuration Note: The S9500 series support inter-board mirroring, that is, the mirroring port(s) and the monitor port can be located on different boards on the same device. A source device can be connected to its destination device directly without any intermediate device.
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks In system mirroring-group groupid Assign a view monitor-port monitor-port-id port to the mirroring Required interface interface-type group as In Ethernet interface-number Use either approach.
Page 61
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks Create a remote source mirroring-group groupid Required mirroring group remote-source mirroring-group groupid Required In system mirroring-port Use either approach.
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Note: To ensure device performance, do not assign mirroring ports to a remote probe VLAN. To configure a port as a reflector port, you must ensure that its link type is access, it belongs to the default VLAN (that is, VLAN 1), and it is neither a destination port for traffic mirroring nor a member of any other port mirroring group.
Page 63
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration To do… Use the command… Remarks Return to system view quit — Create a remote mirroring-group groupid destination port mirroring Required remote-destination group Assign the VLAN you...
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration 1.4 Displaying and Maintaining Port Mirroring To do… Use the command… Remarks display mirroring-group Display the configuration Available in any { groupid | local | remote-source...
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration # Create a local port mirroring group. [Sysname] mirroring-group 1 local # Assign port Ethernet 1/1/1 and Ethernet 1/1/2 to the port mirroring group as mirroring ports.
Page 66
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration Create a remote destination mirroring group on Switch C. Configure VLAN 2 as the remote probe VLAN and port Ethernet 1/1/2, to which the server is connected, as the monitor port.
Page 67
Operation Manual – Port Mirroring H3C S9500 Series Routing Switches Chapter 1 Port Mirroring Configuration <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] mac-address max-mac-count 0 [Sysname-vlan2] quit # Configure port Ethernet 1/1/1 as a trunk port and configure the port to permit the packets of VLAN 2.
Page 68
Operation Manual – RPR H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 RPR Configuration....................... 1-1 1.1 Introduction to RPR ......................1-1 1.1.1 Overview ......................... 1-1 1.1.2 Ring Structure of RPR..................... 1-1 1.1.3 Data Operations on RPR ..................1-2 1.1.4 Topology Discovery....................
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Chapter 1 RPR Configuration When configuring RPR, go to these sections for information you are interested in: Introduction to RPR Configuring RPR Displaying and Maintaining RPR RPR Configuration Examples 1.1 Introduction to RPR...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Station Ringlet 0 West East Ringlet 1 East West West East Span East West West East Figure 1-1 Ring structure of RPR Ringlet 0, also called outer ring, is for clockwise or west data traffic. Ringlet 1, also called inner ring, is for counterclockwise or east data traffic.
Page 71
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration I. Unicast transmission Transit Insert to ringlet 0 Copy from Strip ringlet 0 Insert to ringlet 1 Strip Transit Copy from ringlet 1 Transit Strip Figure 1-2 Unicast transmission on an RPR ring...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Transit and destination stations copy and transit the frame if the TTL of the frame has not expired. The frame is stripped when it returns to the source station or when its TTL expires.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration II. Topology discovery process RPR uses three types of control frames for topology discovery: attribute discovery (ATD), topology protection (TP), and topology checksum (TC). TP frames convey configuration and status information of stations. The stations on...
Page 74
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Station failure Pass-through Figure 1-5 Passthrough mode II. Protection If a station is unable to forward traffic as the result of power failure or fiber cut for example, it should enter protection mode.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration intervals to the other stations on the ring. After a new topology database is stabilized, the source station directs protected frames to the ringlet that retains connectivity to their destinations.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration TP fast timer: defines the fast interval at which TP frames are sent. A TP fast timer starts when a station starts initializing or detects a topology change. After sending nine TP frames at fast intervals, the station begins to send TP frames at slow intervals.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Table 1-1 RPR physical and logical port dependencies RPR physical port RPR logical port 2.5 Gbps POS 10 Gbps POS Note: Many commands available on an Ethernet port can be used on an RPR logical port.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... Remarks Optional rpr reversion-mode Configure the protection { revertive | Revertive mode applies reversion mode non-revertive } by default. 1.5 Configuring Ringlet Selection Table Each RPR station maintains a ringlet selection table, based on which the decision as to which ringlet should be selected to transmit frames is made.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 1.5.1 Adding a static ringlet selection entry Follow these steps to add an entry into the static ringlet selection table: To do... Use the command... Remarks Enter system view system-view —...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Class A is further divided into subclass A0 and subclass A1. RPR can reserve bandwidth for the subclass A0 service. When congestion occurs, the unused reserved bandwidth cannot be used by lower priority services. For the subclass A1 service, rate limiting is used.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration excessive bandwidth, RPR adopts a fairness algorithm to ensure bandwidth allocation fairness. The fairness algorithm of RPR mainly regulates class B-EIR and class C traffic on the RPR ring.
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... Remarks Optional Set the TC slow timer rpr timer tc-slow value 100 milliseconds by default Optional Set the TP fast timer rpr timer tp-fast value...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 1.10 Configuring Port Type Follow these steps to set physical RPR port type on an RPR logical port: To do... Use the command... Remarks Enter system view —...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Follow these steps to send an FS or MS protection request onto the ringlet: To do... Use the command... Remarks Enter system view system-view — Enter RPR logical interface interface-type —...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration between the two stations is normal on both the specific sending ringlet and the receiving ringlet. In this case, the destination station should be able to receive the Echo...
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration To do... Use the command... display rpr rs-table { default | dynamic Display RPR ringlet selection table | ipv6 | overall | static | dynamic| vrrp }...
Page 88
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration Configure a static ringlet selection entry to allow frames from Station A to Station B to travel Ringlet 1 when no edge occurs on the RPR ring (that is, the ring remains closed).
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration 000f-e257-0002 Total entries: 1 # Display the information of the overall ring selection table to verify the configuration. [Sysname-Ten-GigabitEthernet1/1/1] display rpr rs-table overall Overall ringlet selection table of...
Page 90
Operation Manual – RPR H3C S9500 Series Routing Switches Chapter 1 RPR Configuration [Sysname-Ten-GigabitEthernet1/1/1] port link-type trunk # Permit the specified VLAN to pass the current trunk port. [Sysname-Ten-GigabitEthernet1/1/1] port trunk permit vlan 10 # Configure a tunnel for VLAN 10 traffic to reach station D.
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration Chapter 1 OAM Configuration When configuring the OAM function, go to these sections for information you are interested in: OAM Overview OAM Configuration Task List Configuring Basic OAM Functions...
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration Table 1-1 Description of the fields in an OAMPDU Field Description Value Destination MAC address of the Multicast MAC address Dest addr Ethernet OAMPDU 0180c2000002 Source MAC address of the...
Page 94
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration I. OAM connection establishment OAM connection establishment is also known as the Discovery phase, where an OAM entity discovers other OAM entities and sessions between OAM entities are established.
Page 95
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration The interval to send Information OAMPDUs is determined by a timer. Up to ten Information OAMPDUs can be sent in a second. II. Link monitoring Link monitoring is used to detect and locate link faults in various environments. In OAM, link faults are categorized into link events.
Furthermore, performing remote loopback testing by network segments helps to locate network faults. Note: Currently, on an S9500 series switch, you can perform remote loopback only on Gigabit electrical interfaces. 1.1.3 OAM Standards OAM is defined in IEEE 802.3h.
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter Ethernet port view — interface-number Optional oam mode { active | Set OAM operating mode...
Ethernet OAM Commands in the accompanied command manual. Note: For the LSB1GV48DB0 board on an S9500 series switch, gap may exist between the number of detected error frame seconds and the actual number of error frame seconds over a detection interval due to the detection frequency restriction. The same is true of error frame detection.
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Enter system view system-view — interface interface-type Enter Ethernet port view — interface-number Required Enable OAM loopback oam loopback testing Disabled by default.
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration To do… Use the command… Remarks Clear statistics on OAM reset oam [ interface Available in user packets and OAM link error interface-type view only events interface-number ] 1.7 OAM Configuration Example...
Page 101
Operation Manual – Ethernet OAM H3C S9500 Series Routing Switches Chapter 1 OAM Configuration [Sysname] display oam configuration Configuration of the errored symbol/frame event window/threshold : -------------------------------------------------------- Errored-symbol Event period Errored-symbol Event threshold Errored-frame Event period Errored-frame Event threshold Errored-frame-period Event period...
Page 102
Operation Manual – MSTP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 MSTP Configuration ....................1-1 1.1 MSTP Overview ......................... 1-1 1.1.1 Introduction to STP ....................1-1 1.1.2 Introduction to MSTP .................... 1-11 1.1.3 Protocols and Standards..................1-18 1.2 Configuration Task List ....................
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Chapter 1 MSTP Configuration When configuring MSTP, go to these sections for information you are interested in: MSTP Overview Configuration Task List Configuring the Root Bridge Configuring Leaf Nodes...
Page 105
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Configuration BPDUs, used to calculate the spanning tree and maintain the spanning tree topology. Topology change notification (TCN) BPDUs, used to notify concerned devices of network topology changes, if any.
Page 106
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Switch A Switch B Switch C Figure 1-1 A schematic diagram of designated bridges and designated ports As shown in Figure 1-1, AP1 and AP2, BP1 and BP2, and CP1 and CP2 are ports on Switch A, Switch B, and Switch C.
Page 107
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Designated port ID: formed by designated port priority and port name Message age: age of the configuration BPDU while it is propagating in the network Max age: maximum time that a received configuration BPDU can be maintained...
Page 108
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Rules for configuration BPDU comparison: The configuration BPDU that has the lowest root bridge ID has the highest priority. For configuration BPDUs with the same root bridge ID, they will be compared by their root path costs.
Page 109
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Step Description The device compares the calculated configuration BPDU with the configuration BPDU on the port of which the port role is to be defined, and does the following according to the comparison result:...
Page 110
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Table 1-4 Initial state of each device Device Port ID BPDU of the port {0, 0, 0, AP1} Switch A {0, 0, 0, AP2} {1, 0, 1, BP1}...
Page 111
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration BPDU of the port Device Comparison process after comparison Port BP1 receives a configuration BPDU from Switch A (that is, {0, 0, 0, AP1}). As the received...
Page 112
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration BPDU of the port Device Comparison process after comparison Port CP1 receives a configuration BPDU from Switch A (that is, {0, 0, 0, AP2}). As the received...
Page 113
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration After the comparison processes described in the table above, a spanning tree with Switch A as the root bridge is stabilized, as shown in Figure 1-3. Figure 1-3 A spanning tree with Switch A as the root bridge...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration However, the newly computed configuration BPDU will not be propagated throughout the network immediately, so the old root ports and designated ports that have not detected the topology change continue forwarding data through the old path. If the new root port and designated port begin to forward data as soon as they are elected, a temporary loop may occur.
Page 115
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: In RSTP, a newly elected root port can enter the forwarding state rapidly if this condition is met: The old root port on the device has stopped forwarding data and the upstream designated port has started forwarding data.
Page 116
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-4 Basic concepts in MSTP MST region An MST region is composed of multiple devices in a switched network and network segments among them. These devices have the following characteristics: All are MSTP-enabled.
Page 117
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Multiple MST regions can exist in a switched network. You can use an MSTP command to group multiple devices to the same MST region. VLAN-to-MSTI mapping table As an attribute of an MST region, the VLAN-to-MSTI mapping table describes the mapping relationships between VLANs and MSTIs.
Page 118
Note: Currently, the S9500 series routing switches are not capable of recognizing boundary ports. When an S9500 series routing switch is connected to a third party’s device that supports boundary port recognition, the third party’s device may malfunction in recognizing a boundary port.
Page 119
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-5 Port roles Figure 1-5, Devices A, B, C, and D constitute an MST region. Port 1 and port 2 of device A connect to the common root bridge.
Page 120
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Root Role Designated Alternate port/Master Backup port port port State port Discarding √ √ √ √ III. How MSTP works MSTP divides an entire Layer 2 network into multiple MST regions, which are interconnected by a computed CST.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration TC-BPDU guard Support for hot swapping of interface cards and active/standby changeover. 1.1.3 Protocols and Standards MSTP is documented in: IEEE 802.1D: Spanning Tree Protocol IEEE 802.1w: Rapid Spanning Tree Protocol IEEE 802.1s: Multiple Spanning Tree Protocol...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Task Remarks Configuring an MST Region Required Configuring the Work Mode of MSTP Device Optional Configuring the Timeout Factor Optional Configuring the Maximum Transmission Rate of Ports...
Page 123
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter MST region view — stp region-configuration Optional Configure the MST region By default, the name of an...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Configuration example # Configure the MST region name to be info, the MSTP revision level to be 1, and VLAN 2 through VLAN 10 to be mapped to instance 1, and VLAN 20 through VLAN 30 to instance 2.
Page 125
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note that: Upon specifying the current device as the root bridge or a secondary root bridge, you cannot change the priority of the device. You can configure the current device as the root bridge or a secondary root bridge of an MSTI, which is specified by instance instance-id in the command.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.3 Configuring the Work Mode of MSTP Device MSTP and RSTP can recognize each other’s protocol packets, so they are mutually compatible. However, STP is unable to recognize MSTP packets. For hybrid...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Optional Configure the priority of stp [ instance instance-id ] the current device priority priority 32768 by default...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Optional Configure the maximum stp max-hops hops hops of the MST region 20 by default Note: A larger maximum hops setting means a larger size of the MST region.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: Network diameter is a parameter that indicates network size. A bigger network diameter represents a larger network size. Based on the network diameter you configured, MSTP automatically sets an optimal hello time, forward delay, and max age for the device.
Page 130
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Caution: The length of the forward delay time is related to the network diameter of the switched network. Typically, the larger the network diameter is, the longer the forward delay time should be.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.8 Configuring the Timeout Factor After the network topology becomes stabilized, each non-root-bridge device forwards configuration BPDUs to the adjacent devices at the interval of hello time to check for faulty links.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command Ethernet interface interface-type Configured in Ethernet Enter interface interface-number interface view, the setting...
Page 133
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration I. Configuration procedure Following these steps to specify a port or a group of ports as edge port(s): To do... Use the command... Remarks Enter system view —...
Page 134
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command interface interface-type Ethernet Configured in Ethernet Enter interface-number interface view interface view, the setting...
Page 135
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration packet format to be used by a port. After the configuration, when working in MSTP mode, the port sends and receives only MSTP packets in the configured format to communicate with devices that adopt the same format.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.3.13 Enabling the MSTP Feature I. Configuration procedure Follow these steps to enable the MSTP feature: To do... Use the command... Remarks Enter system view — system-view...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.4 Configuring Leaf Nodes Perform the following configurations for a device operating as a leaf node. 1.4.1 Configuring an MST Region Refer to section Configuring an MST Region.
Page 138
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Specify a standard for the Optional device to use when stp pathcost-standard The device uses the...
Page 139
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: In the calculation of the path cost value of an aggregated link, 802.1D-1998 does not take into account the number of ports in the aggregated link. Whereas, 802.1T takes the number of ports in the aggregated link into account.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration IV. Configuration example II # Configure MSTP to automatically calculate the path cost of Ethernet 1/1/1 based on the IEEE 802.1D-1998 standard. <Sysname> system-view [Sysname] interface ethernet 1/1/1...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: When the priority of a port is changed, MSTP will re-compute the role of the port and initiate a state transition. Generally, a lower configured value priority indicates a higher priority of the port. If you configure the same priority value for all the Ethernet ports on the a device, the specific priority of a port depends on the index number of that port.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration MSTP has been configured to operate in MSTP mode or RSTP-compatible mode. II. Perform global mCheck Follow these steps to perform global mCheck: To do... Use the command...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Figure 1-6 VLAN connectivity blocked by MSTP As shown in Figure 1-6, port A on Switch A allows VLAN 1 to pass, C allows VLAN 2 to pass;...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Network diagram Figure 1-7 Network diagram for VLAN Ignore configuration III. Configuration procedure Enable VLAN Ignore on Switch B. # Enable VLAN Ignore on VLAN 2.
Page 145
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter Ethernet interface interface-type Enter interface interface-number Ethernet view interface or Choose either port group port-group { manual...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.7.3 Configuration Examples I. Network requirements Switch A and Switch B connect to a third-party’s device and all the devices are in the same region. Enable Digest Snooping on Switch A and Switch B so that the three devices can communicate with one another.
Page 147
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Both RSTP and MSTP switches can perform rapid transition operation on a designated port only when the port receives an agreement packet from the downstream switch. The differences between RSTP and MSTP switches are: For MSTP, the downstream device’s root port sends an agreement packet only...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration In this case, you can enable the No Agreement Check feature on the downstream device’s port to perform rapid state transition. 1.8.1 Configuration Prerequisites A device is the upstream one that is connected to another vendor’s MSTP supported device via a point-to-point link.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration II. Network diagram Figure 1-11 No Agreement Check configuration III. Configuration procedure # Enable No Agreement Check on Ethernet 1/1/2 of Switch A. <Sysname> system-view [Sysname] interface ethernet 1/1/2 [Sysname-Ethernet1/1/2] stp no-agreement-check 1.9 Configuring Protection Functions...
Page 150
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration ports are not supposed to receive configuration BPDUs. However, if someone forges configuration BPDUs maliciously to attack the devices, network may become instable. MSTP provides the BPDU guard function to protect the system against such attacks.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration A device removes the corresponding forwarding entries upon receiving a TC-BPDU (a PDU notifying of a topology change). If a malicious user forges large amount of TC-BPDUs and sends them to a device in a short period, the device may be busy removing the forwarding entries, decreasing the performance of the switch and introducing potential stability risks.
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.9.3 Enabling the Root Guard Function Note: We recommend that you enable the root guard function. I. Configuration procedure Follow these steps to enable the root guard function: To do...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration To do... Use the command... Remarks Enter system view — system-view Enter User either command Ethernet interface interface-type Configured in Ethernet interface Enter interface-number interface view, the...
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration 1.10 Displaying and Maintaining MSTP To do... Use the command... Remarks View the MSTP status display stp [ instance Available in any information and statistics instance-id ] [ interface...
Page 155
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration Note: “Permit:” beside each link in the figure is followed by the VLANs the packets of which are permitted to pass this link. III. Configuration procedure Configuration on Switch A # Configure an MST region.
Page 157
Operation Manual – MSTP H3C S9500 Series Routing Switches Chapter 1 MSTP Configuration [SysnameC] stp enable # View the MST region configuration information that has taken effect. [SysnameC] display stp region-configuration Oper configuration Format selector Region name :example Revision level...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Chapter 1 VLAN Configuration When configuring VLAN, go to these sections for information you are interested in: Introduction to VLAN Configuring Basic VLAN Attributes Configuring VLAN Interface Basic Attributes...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration A VLAN is not restricted by physical factors, that is to say, hosts that reside in different network segments may belong to the same VLAN; a VLAN can be with the same switch, or span across multiple switches or routers.
VLANs can be classified into different categories. The following four types are the most commonly used: Port-based MAC address-based IP-subnet-based Protocol-based Note: At present, S9500 series switches support port-based VLANs and protocol-based VLANs. The following contents introduce the configuration of port-based VLANs and protocol-based VLANs respectively.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Follow these steps to configure VLAN interface basic attributes: To do… Use the command… Remarks Enter system view system-view — Required Create a VLAN interface interface This command leads you to...
Page 164
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration I. Port link type Based on the tag handling mode, a port’s link type can be one of the following three: Access: an Access port only belongs to one VLAN, normally used to connect user device;...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Inbound packets handling Outbound packets For an Port type handling untagged For a tagged packet packet Remove the tag and forward the packet if its VLAN ID is the same as the default VLAN ID.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration To do… Use the command… Remarks Enter system view system-view — Enter Use either command. interface interface-type Ethernet Under Ethernet interface interface-number interface view Enter view, the subsequent...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration To do… Use the command… Remarks Required Allow a specified VLAN to port trunk permit vlan pass through the current By default, all trunk ports { vlan-id-list | all }...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Note: To change the link type of a port from trunk to hybrid or vice versa, you must set the link type to access first. Ensure that a VLAN already exists before configuring it to pass through a certain hybrid port.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration 1.5.2 Configuring the Protocol-Based VLAN Note: Protocol VLAN is only applicable to a hybrid port belonging to the VLAN to which a protocol is to be issued.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Caution: You cannot configure both dsap-id and ssap-id as 0xE0 or 0xFF; otherwise the matching packets will take the same encapsulation format as that of the ipx llc packets and the ipx raw packets respectively.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration 1.7 VLAN Configuration Examples 1.7.1 Port-Based VLAN Configuration Example I. Network requirements Switch A connects to Switch B through trunk port Ethernet 1/1/1; The default VLAN ID of the trunk port is 100;...
Page 172
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 1 VLAN Configuration Through protocol-based VLAN configuration, make Ethernet 1/1/1 to forward the received IPv4 packets to VLAN 2, and IPv6 packets to VLAN 6. II. Network diagram IP network...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration Chapter 2 Super VLAN Configuration When configuring super VLAN, go to these sections for information you are interested Introduction to Super VLAN Configuring Super VLAN Displaying Super VLAN Super VLAN Configuration Example 2.1 Introduction to Super VLAN...
Page 174
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration To do… Use the command… Remarks Required Correlate the super VLAN subvlan vlan-list The specified sub-VLANs with its sub-VLAN(s) must have existed. Return to system view quit —...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration 2.3 Displaying Super VLAN To do… Use the command… Remarks Display the mapping display supervlan between a super VLAN Available in any view [ supervlan-id ] and its sub-VLAN(s) 2.4 Super VLAN Configuration Example...
Page 176
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 2 Super VLAN Configuration [Sysname-Vlan-interface10] local-proxy-arp enable [Sysname-Vlan-interface10] quit # Create VLAN 2, add ports Ethernet 0/1/1 and Ethernet 0/1/2 to it. [Sysname] vlan 2 [Sysname-vlan2] port ethernet 0/1/1 ethernet 0/1/2 # Create VLAN 3, add ports Ethernet 0/1/3 and Ethernet 0/1/4 to it.
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Chapter 3 Isolate-User VLAN Configuration When configuring Isolate-user VLAN, go to these sections for information you are interested in: Introduction to Isolate-User-VLAN Configuring Isolate-User-VLAN Displaying and Maintaining Isolate-User-VLAN Isolate-User-VLAN Configuration Example 3.1 Introduction to Isolate-User-VLAN...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Figure 3-1 Network diagram for Isolate-user-VLAN configuration 3.2 Configuring Isolate-User-VLAN Configure the isolate-user-VLAN through the following steps: Create the isolate-user-VLAN; Create the secondary VLAN; Add ports to the isolate-user-VLAN ( note that the ports cannot be trunk ports) and ensure that at least one port has the isolate-user-VLAN as its default VLAN;...
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration To do... Use the command Remarks Add ports to the Refer to Assigning an Access Port secondary VLAN Access port to a VLAN and ensure that at...
Page 180
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration On Switch C, VLAN 6 is configured as an isolate-user-VLAN, which includes an upstream port Ethernet 1/1/5 and two secondary VLANs VLAN 3 and VLAN 4.
Page 181
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration Configure Switch C # Configure the isolate-user-VLAN. <SysnameC> system-view [SysnameC] vlan 6 [SysnameC-vlan6] isolate-user-vlan enable [SysnameC-vlan6] port ethernet1/1/5 [SysnameC-vlan6] quit # Configure the secondary VLANs. [SysnameC] vlan 3...
Page 182
Operation Manual – VLAN H3C S9500 Series Routing Switches Chapter 3 Isolate-User VLAN Configuration VLAN Type: static Isolate-user-VLAN type : secondary Route Interface: not configured Description: VLAN 0003 Tagged Ports: none Untagged Ports: Ethernet1/1/3 Ethernet1/1/5 The isolate-user-VLAN configuration on Switch C is similar to that on Switch B.
Page 183
Operation Manual – QinQ H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 QinQ Configuration ..................... 1-1 1.1 Introduction to QinQ......................1-1 1.1.1 Understanding QinQ ....................1-1 1.1.2 Implementations of QinQ ..................1-2 1.1.3 Adjustable TPID Value of QinQ Frames ..............1-2 1.2 Configuring Basic QinQ .....................
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Chapter 1 QinQ Configuration When configuring QinQ, go to these sections for information you are interested in: QinQ Configuration Configuring Basic QinQ Setting TPID Value for QinQ Frames QinQ Configuration Examples 1.1 Introduction to QinQ...
1.1.2 Implementations of QinQ For S9500 series switches, the QinQ feature is implemented through enabling the basic QinQ feature on ports. With the basic QinQ feature enabled on a port, when a frame arrives at the port, the port will tag it with the port’s default VLAN tag, regardless of whether the frame is tagged or...
Page 186
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Figure 1-2 Structure of a VLAN-tagged Ethernet frame Note: Refer to VLAN Configuration in the Access Volume for the description on the TPID, Priority, CFI, and VLAN ID fields.
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration Protocol type Value Cluster 0x88A7 Reserved 0xFFFD/0xFFFE/0xFFFF 1.2 Configuring Basic QinQ Follow these steps to configure basic QinQ: To do... Use the command... Remarks Enter system view system-view —...
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration 1.3 Setting TPID Value for QinQ Frames Follow these steps to set the TPID value for QinQ frames: To do... Use the command... Remarks Enter system view system-view —...
Page 189
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration II. Network diagram Figure 1-3 Network diagram for QinQ configuration III. Configuration procedure Configuration on Provider A # Enter system view. <Sysname> system-view [Sysname] vlan 10 [Sysname-vlan10] quit # Enter Ethernet 1/1/2 port view.
Page 190
Operation Manual – QinQ H3C S9500 Series Routing Switches Chapter 1 QinQ Configuration # Enter Ethernet 1/1/2 port view. [Sysname] interface ethernet 1/1/2 [Sysname-Ethernet1/1/2] port access vlan 10 # Enable the basic QinQ function on Ethernet 1/1/2. [Sysname-Ethernet1/1/2] qinq enable...
Page 191
Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 BPDU Tunneling Configuration.................. 1-1 1.1 Introduction to BPDU Tunneling ..................1-1 1.1.1 Why BPDU Tunneling ..................... 1-1 1.1.2 How BPDU Tunneling Works .................. 1-1 1.2 Configuring BPDU Isolation ....................
Note: At present, the S9500 series switches only support BPDU tunneling for STP packets (in a broad sense). For description about STP packets in a broad sense, refer to the MSTP Configuration in the Access Volume.
Page 193
Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration II. BPDU transparent transmission As shown in Figure 1-1, the upper part is the service provider network, and the lower part represents the customer networks. The customer networks include network A and network B.
Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration 1.2 Configuring BPDU Isolation Perform the following tasks to configure BPDU isolation: To do... Use the command... Remarks Enter system view — system-view Optional Enabled by default...
Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration To do... Use the command... Remarks Use either command Enter Ethernet interface interface-type Enter Configured in Ethernet interface view interface-number Ethernet interface view, the interface...
Page 196
Operation Manual – BPDU Tunneling H3C S9500 Series Routing Switches Chapter 1 BPDU Tunneling Configuration II. Network diagram Customer B Customer A VLAN 2 VLAN 4 Eth1/1/1 Eth1/1/2 Trunk Provider A Provider B Trunk Trunk VLAN 2 VLAN 2 Eth1/1/4...
Page 198
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Port Isolation Configuration ..................1-1 1.1 Introduction to Port Isolation ....................1-1 1.2 Configuring an Isolation Group ..................1-3 1.2.1 Assigning Ports to an Isolation Group..............1-3 1.2.2 Configuring the Uplink Port of an Isolation Group...........
VLAN to which the isolated port belongs. At present, the S9500 series switches support a maximum of 64 isolation groups and the number of ports you can assign to an isolation group is not limited.
Page 200
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration Figure 1-1 Layer-2 communication between ports in different VLANs when port isolation is used For ports belonging to the same VLAN, Layer 2 communication is carried out as shown...
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration Figure 1-2 Layer-2 communication in the same VLAN when port isolation is used Note: The arrows in the above figure indicate the transmission direction of layer 2 traffic.
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration To do… Use the command… Remarks Enter Enter To assign a port to the Ethernet interface interface-type Ethernet isolation group, enter interface interface-number interface Ethernet interface view; to...
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration 1.4 Port Isolation Configuration Example 1.4.1 Networking Requirements Users Host A, Host B, and Host C are connected to Ethernet 1/1/2, Ethernet 1/1/3, and Ethernet 1/1/4 of the switch.
Page 204
Operation Manual – Port Isolation H3C S9500 Series Routing Switches Chapter 1 Port Isolation Configuration [Sysname-Ethernet1/1/3] port-isolate enable group 2 [Sysname-Ethernet1/1/3] interface ethernet 1/1/4 [Sysname-Ethernet1/1/4] port-isolate enable group 2 # Configure port Ethernet1/1/1 as the uplink port of isolation group 2.