Page 1 H3C S9500 Series Routing Switches Operation Manual Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: T2-081655-20080530-C-2.03 Product Version: S9500-CMW520-R2132...
Page 2 Copyright © 2007-2008, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Page 3: About This Manual
About This Manual Related Documentation In addition to this manual, each H3C S9500 Series Routing Switches documentation set includes the following: Manual Description It introduces the installation procedure, H3C S9500 Series Routing Switches commissioning, maintenance Installation Manual monitoring of the S9500 series routing switches.
Page 4 Part Contents includes IP Routing Overview, BGP Configuration, IS-IS Configuration, OSPF Configuration, Configuration, Routing Policy Configuration, Static 03 IP Routing Volume Routing Configuration, IPv6 BGP Configuration, IPv6 IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6 RIPng Configuration, IPv6 Static Routing Configuration. includes Multicast Overview, Multicast Routing and Forwarding Configuration, IGMP...
Page 5 Conventions The manual uses the following conventions: I. Command conventions Convention Description Boldface The keywords of a command line are in Boldface. italic Command arguments are in italic. Items (keywords or arguments) in square brackets [ ] are optional. Alternative items are grouped in braces and separated by { x | y | ...
Page 6 III. Symbols Convention Description Means reader be extremely careful. Improper operation Warning may cause bodily injury. Means reader be careful. Improper operation may cause Caution data loss or damage to equipment. Note Means a complementary description.
Page 7: Manual Version
Operation Manual H3C S9500 Series Routing Switches IP Services Volume Organization Manual Version T2-081655-20080530-C-2.03 Product Version S9500-CMW520-R2132 Organization The IP Services Volume is organized as follows: Features (operation Description manual) Address Resolution Protocol (ARP) is used to resolve an IP address into a data link layer address.
Page 8 Operation Manual H3C S9500 Series Routing Switches IP Services Volume Organization Features (operation Description manual) UDP Helper functions as a relay agent that converts UDP broadcast packets into unicast packets and forwards them to a specified server. The volume describes:...
Page 9: Table Of Contents
Operation Manual – ARP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 ARP Configuration....................... 1-1 1.1 ARP Overview........................1-1 1.1.1 ARP Function ......................1-1 1.1.2 ARP Message Format..................... 1-1 1.1.3 ARP Address Resolution Process................1-2 1.1.4 ARP Mapping Table ....................
Page 10: Chapter 1 Arp Configuration
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration Chapter 1 ARP Configuration When configuring ARP, go to these sections for information you are interested in: ARP Overview Configuring ARP Configuring Gratuitous ARP Configuring ARP Source Suppression...
Page 11: Arp Address Resolution Process
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration Hardware type: This field specifies the type of a hardware address. The value “1” represents an Ethernet address. Protocol type: This field specifies the type of the protocol address to be mapped.
Page 12: Arp Mapping Table
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration all-zero MAC address. Because the ARP request is sent in broadcast mode, all hosts on this subnet can receive the request, but only the requested host (namely, Host B) will process the request.
Page 13: Configuring Arp
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration Note: Usually ARP dynamically implements and automatically seeks mappings from IP addresses to MAC addresses, without manual intervention. 1.2 Configuring ARP 1.2.1 Configuring a Static ARP Entry A static ARP entry is effective when the device works normally.
Page 14: Setting Aging Time For Dynamic Arp Entries
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration To do… Use the command… Remarks Enter system view system-view — interface vlan-interface Enter VLAN interface view — interface-number Set the maximum number of Optional arp max-learning-num...
Page 15: Enabling The Support For Arp Requests From A Natural Network
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration 1.2.5 Enabling the Support for ARP Requests from a Natural Network When learning MAC addresses, if the device finds that the source IP address of an ARP packet and the IP address of the inbound interface are not on the same subnet, the device will further judge whether these two IP addresses are on the same natural network.
Page 16: Configuring Gratuitous Arp
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration [Sysname] vlan 10 [Sysname-vlan10] quit [Sysname] interface ethernet 1/1/1 [Sysname-Ethernet1/1/1] port access vlan 10 [Sysname-Ethernet1/1/1] quit [Sysname] interface Vlan-interface 10 [Sysname-Vlan-interface10] arp max-learning-num 1000 [Sysname-Vlan-interface10] quit [Sysname] arp static 192.168.1.1 000f-e201-0070 10 ethernet1/1/1 1.3 Configuring Gratuitous ARP...
Page 17: Configuring Arp Source Suppression
The device continuously resolves destination IP addresses, which increase the load of the CPU. To protect against such attacks, S9500 series switches provide the ARP source suppression function. With the function enabled, whenever the number of packets with unresolvable destination IP addresses from a host within five seconds exceeds a specified threshold, the device suppress the sending host from triggering any ARP requests within the following five seconds.
Page 18: Enabling Arp Defense Against Ip Packet Attack
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration next hop unreachable (an IP packet that ARP cannot resolve the MAC address of the next hop), a device with this function creates a black hole route immediately and the forwarding chip simply drops all packets to the address.
Page 19: Configuring Arp Packet Source Mac Address Consistency Check
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration To do… Use the command… Remarks Enter system view system-view — Enable the ARP active Required arp anti-attack acknowledgement active-ack enable Disabled by default. function 1.7 Configuring ARP Packet Source MAC Address Consistency Check 1.7.1 Introduction...
Page 20 Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 1 ARP Configuration To do… Use the command… Remarks Display the configuration Available in any display arp information of ARP source source-suppression view suppression reset arp { all | dynamic | static...
Page 21: Chapter 2 Proxy Arp Configuration
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 2 Proxy ARP Configuration Chapter 2 Proxy ARP Configuration When configuring proxy ARP, go to these sections for information you are interested in: Proxy ARP Overview Enabling Proxy ARP Displaying and Maintaining Proxy ARP Proxy ARP Configuration Example 2.1 Proxy ARP Overview...
Page 22: Displaying And Maintaining Proxy Arp
Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 2 Proxy ARP Configuration 2.3 Displaying and Maintaining Proxy ARP To do… Use the command… Remarks Display whether proxy display proxy-arp [ interface Available in any ARP is enabled interface-type interface-number ]...
Page 23 Operation Manual – ARP H3C S9500 Series Routing Switches Chapter 2 Proxy ARP Configuration [Sysname-vlan1] vlan 2 [Sysname-vlan2] quit [Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] ip address 192.168.10.99 255.255.255.0 [Sysname-Vlan-interface1] proxy-arp enable [Sysname-Vlan-interface1] quit [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] ip address 192.168.20.99 255.255.255.0...
Page 24 Operation Manual – DHCP H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 DHCP Overview......................1-1 1.1 Introduction to DHCP......................1-1 1.2 DHCP Address Allocation....................1-1 1.2.1 Allocation Mechanisms ................... 1-1 1.2.2 Dynamic IP Address Allocation Procedure ............. 1-2 1.2.3 IP Address Lease Extension ...................
Page 25 Operation Manual – DHCP H3C S9500 Series Routing Switches Table of Contents Chapter 3 DHCP Relay Agent Configuration ................3-1 3.1 Introduction to DHCP Relay Agent ..................3-1 3.1.1 Application Environment ..................3-1 3.1.2 Fundamentals......................3-1 3.2 Configuring DHCP Relay Agent..................3-2 3.2.1 DHCP Relay Agent Configuration Task List ............
Page 26: Chapter 1 Dhcp Overview
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 1 DHCP Overview Chapter 1 DHCP Overview When configuring DHCP, go to these sections for information you are interested in: Introduction to DHCP DHCP Address Allocation DHCP Message Format Protocols and Standards 1.1 Introduction to DHCP...
Page 27: Dynamic Ip Address Allocation Procedure
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 1 DHCP Overview IP addresses for a long time, and some clients only need temporary IP addresses. DHCP supports three mechanisms for IP address allocation based on various needs. Manual allocation: The network administrator assigns an IP address to a client like a WWW server, and DHCP conveys the assigned address to the client.
Page 28: Ip Address Lease Extension
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 1 DHCP Overview Note: After the client receives the DHCP-ACK message, it will probe whether the IP address assigned by the server is in use by broadcasting gratuitous ARP. If the client receives no response within specified time, the client can use this IP address.
Page 29: Protocols And Standards
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 1 DHCP Overview Figure 1-3 DHCP message format op: Message type defined in option field. 1 = REQUEST, 2 = REPLY htype,hlen: Hardware address type and length of a DHCP client.
Page 30 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 1 DHCP Overview RFC 1542: Clarifications and Extensions for the Bootstrap Protocol RFC 3046: DHCP Relay Agent Information Option...
Page 31: Chapter 2 Dhcp Server Configuration
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration Chapter 2 DHCP Server Configuration When configuring the DHCP server, go to these sections for information you are interested in: Introduction to DHCP Server DHCP Server Configuration Task List...
Page 32 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration The address pool database is organized as a tree. The root of the tree is the address pool for natural networks, branches are address pools for subnets, and leaves are addresses statically bound to clients.
Page 33: Ip Address Allocation Sequence
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration Note: Keep the IP addresses for dynamic allocation within the subnet where the interface of the DHCP server or DHCP relay agent resides to avoid wrong IP address allocation.
Page 34: Enabling The Dhcp Server On An Interface
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration 2.4 Enabling the DHCP Server on an Interface With the DHCP server enabled on an interface, upon receiving a client’s request, the DHCP server will assign an IP address from its address pool to the DHCP client.
Page 35: Creating A Dhcp Address Pool
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration Task Remarks Configuring a Domain Name for the Client Configuring DNS Servers for the Client Configuring WINS Servers and NetBIOS Node Type for the Client Configuring the BIMS server Information for the Client...
Page 36 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration A DHCP address pool now supports only one static binding, which can be a MAC-to-IP or ID-to-IP binding. To configure the static binding in a DHCP address pool, use the following commands: To do…...
Page 37: Configuring A Domain Name For The Client
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration You can specify the lease duration for a DHCP address pool different from others, and a DHCP address pool can only have the same lease duration. A lease does not enjoy the inheritance attribute.
Page 38: Configuring Dns Servers For The Client
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration To do… Use the command… Remarks Required Specify the domain name domain-name for the client domain-name Not specified by default 2.5.5 Configuring DNS Servers for the Client...
Page 39: Configuring The Bims Server Information For The Client
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration To configure WINS servers and NetBIOS node type in the DHCP address pool, use the following commands: To do… Use the command… Remarks Enter system view —...
Page 40: Configuring The Tftp Server Address And Bootfile Name For The Client
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration To configure the gateways in the DHCP address pool, use the following commands: To do… Use the command… Remarks Enter system view system-view — Enter DHCP dhcp server ip-pool —...
Page 41: Configuring Self-Defined Dhcp Options
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration To do… Use the command… Remarks Enter system view system-view — Enter DHCP address dhcp server ip-pool — pool view pool-name Optional Specify the TFTP tftp-server ip-address...
Page 42: Configuring The Dhcp Server Security Functions
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration Corresponding Command Option Corresponding Name in RFC command parameter NetBIOS over TCP/IP Name nbns-list ip-address Server Option NetBIOS over TCP/IP Node netbios-type Type Option Renewal (T1) Time Value...
Page 43: Configuring Ip Address Conflict Detection
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration To enable unauthorized DHCP server detection, use the following commands: To do… Use the command… Remarks Enter system view system-view — Required Enable unauthorized dhcp server detect...
Page 44: Enabling The Dhcp Sever To Handle Option 82
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration 2.7 Enabling the DHCP Sever to Handle Option 82 Upon receiving a DHCP request with Option 82, a DHCP server, if enabled to handle Option 82, returns a DHCP response carrying Option 82 to assign an IP address to the client.
Page 45: Displaying And Maintaining The Dhcp Server
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration 2.8 Displaying and Maintaining the DHCP Server To do… Use the command… Remarks Display information about IP display dhcp server conflict { all | address conflicts...
Page 46: Dhcp Server Configuration Examples
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration 2.9 DHCP Server Configuration Examples 2.9.1 Static IP Address Assignment Configuration Example I. Network requirements Switch B (DHCP client) obtains a static IP address, DNS server address, and gateway address from Switch A (DHCP server).
Page 47: Dynamic Ip Address Assignment Configuration Example
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration 2.9.2 Dynamic IP Address Assignment Configuration Example I. Network requirements The DHCP server (Switch A) assigns IP address to clients in subnet 10.1.1.0/24, which is subnetted into 10.1.1.0/25 and 10.1.1.128/25.
Page 48: Troubleshooting Dhcp Server Configuration
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration III. Configuration procedure Specify VLAN interfaces and IP addresses for VLAN interfaces (omitted). Configure the DHCP server # Enable DHCP <Sysname> system-view [Sysname] dhcp enable # Exclude IP addresses (addresses of the DNS server, WINS server and gateways).
Page 49 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 2 DHCP Server Configuration III. Solution Disconnect the client’s network cable and ping the client’s IP address on another host with a long timeout time to check whether there is a host using the same IP address.
Page 50: Chapter 3 Dhcp Relay Agent Configuration
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Chapter 3 DHCP Relay Agent Configuration When configuring the DHCP relay agent, go to these sections for information you are interested in: Introduction to DHCP Relay Agent...
Page 51: Configuring Dhcp Relay Agent
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Figure 3-1 DHCP relay agent application No matter whether a relay agent exists or not, the DHCP server and client interact with each other in a similar way (see section 1.2.2...
Page 52: Enabling Dhcp
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Task Remarks Enabling DHCP Required Enabling the DHCP Relay Agent on Interfaces Required Correlating a DHCP Server Group with Relay Agent Interfaces Required Configuring the DHCP Relay Agent to Send a DHCP-Release...
Page 53: Correlating A Dhcp Server Group With Relay Agent Interfaces
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Note: If the DHCP client obtains an IP address via the DHCP relay agent, the address pool of the subnet which the IP address of the DHCP relay agent belongs to must be configured on the DHCP server.
Page 54: Configuring The Dhcp Relay Agent To Send A Dhcp-Release Request
H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Note: You can specify at most twenty DHCP server groups on S9500 series routing switches. Up to eight DHCP server addresses can be configured for each DHCP server group.
Page 55 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration means you can manually configure IP-to-MAC bindings on the DHCP relay agent, so that users can access external network using fixed IP addresses. For avoidance of invalid IP address configuration, you can configure the DHCP relay agent to check whether a requesting client’s IP and MAC addresses match a binding on...
Page 56 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration If the server returns a DHCP-NAK message, which means the IP address is still in use, the relay agent will not age it out. To configure dynamic binding update interval, use the following commands: To do…...
Page 57: Configuring The Dhcp Relay Agent To Support Option 82
Option 82 involves at most 255 sub-options. At least one sub-option must be defined. Now S9500 series routing switches support two sub-options: sub-option 1 (Circuit ID) and sub-option 2 (Remote ID). Option 82 has no unified definition. Its padding formats vary with vendors. Currently the device supports two padding formats: normal and verbose.
Page 58 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration sub-option 1: Padded with the user-specified access node identifier, and the type, number, PVC identifier (used when the interface type is ATM), and VLAN ID of the interface that received the client’s request.
Page 59 Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration If a client’s Handling The DHCP relay agent request message Padding format strategy will… has… Forward the message after — Normal adding the Option 82 padded in normal format.
Page 60: Displaying And Maintaining Dhcp Relay Agent Configuration
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration Note: To support Option 82, it is required to perform related configuration on both the DHCP server and relay agent. Refer to 2.7 “Enabling the DHCP Sever to Handle Option 82”...
Page 61: Dhcp Relay Agent Configuration Example
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration 3.4 DHCP Relay Agent Configuration Example I. Prerequisites VLAN-interface 1 on the DHCP relay agent (Switch A) connects to the network where DHCP clients reside. The IP address of VLAN-interface 1 is 10.10.1.1/24 and IP address of VLAN-interface 2 is 10.1.1.2/24.
Page 62: Troubleshooting Dhcp Relay Agent Configuration
Operation Manual – DHCP H3C S9500 Series Routing Switches Chapter 3 DHCP Relay Agent Configuration [Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] dhcp relay server-select 1 Note: Performing the configuration on the DHCP server is also required to guarantee the client-server communication via the relay agent. Refer to “DHCP Server...
Page 63 Operation Manual – DNS H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 DNS Configuration....................... 1-1 1.1 DNS Overview ........................1-1 1.1.1 Static Domain Name Resolution ................1-1 1.1.2 Dynamic Domain Name Resolution ................ 1-1 1.2 Configuring Domain Name Resolution ................1-3 1.2.1 Configuring Static Domain Name Resolution............
Page 64: Chapter 1 Dns Configuration
Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration Chapter 1 DNS Configuration When configuring DNS, go to these sections for information you are interested in: DNS Overview Configuring Domain Name Resolution Displaying and Maintaining DNS...
Page 65 Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration The DNS client returns the resolution result to the application after receiving a response from the DNS server. Figure 1-1 Dynamic domain name resolution Figure 1-1 shows the relationship between user program, DNS client, and DNS server.
Page 66: Configuring Domain Name Resolution
Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration Currently, the device supports static and dynamic DNS services. Note: If an alias is configured for a domain name on the DNS server, the device can resolve the alias into the IP address of the host.
Page 67: Displaying And Maintaining Dns
Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration To do… Use the command… Remarks Optional dns domain Configure DNS suffixes No DNS suffix is domain-name configured by default Note: You may configure up to six DNS servers and ten DNS suffixes.
Page 68: Dynamic Dns Configuration Example
Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration II. Network diagram Figure 1-2 Network diagram for static domain name resolution III. Configuration procedure # Configure a mapping between host name host.com and IP address 10.1.1.2.
Page 69 Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration II. Network diagram Figure 1-3 Network diagram for dynamic domain name resolution III. Configuration procedure Note: Before performing the following configuration, make sure that there is a route between the device and the host, and configurations are done on both the device and the host.
Page 70 Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration Figure 1-4 Create a zone # Create a mapping between host name and IP address. Figure 1-5 Add a host Figure 1-5, right click zone com, and then select New Host to bring up a dialog box...
Page 71: Troubleshooting Dns Configuration
Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration Figure 1-6 Add a mapping between domain name and IP address Configure DNS client Device # Enable dynamic domain name resolution. <Sysname> system-view [Sysname] dns resolve # Configure IP address 2.1.1.2 for the DNS server [Sysname] dns server 2.1.1.2...
Page 72 Operation Manual – DNS H3C S9500 Series Routing Switches Chapter 1 DNS Configuration III. Solution Use the display dns dynamic-host command to check that the specified domain name is in the cache. If there is no defined domain name, check that dynamic domain name resolution is enabled and the DNS client can communicate with the DNS server.
Page 73 Operation Manual – IP Addressing H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 IP Addressing Configuration ..................1-1 1.1 IP Addressing Overview ....................1-1 1.1.1 IP Address Classes....................1-1 1.1.2 Special Case IP Addresses..................1-2 1.1.3 Subnetting and Masking..................
Page 74: Chapter 1 Ip Addressing Configuration
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration Chapter 1 IP Addressing Configuration When assigning IP addresses to interfaces on your device, go to these sections for information you are interested in: IP Addressing Overview...
Page 75: Special Case Ip Addresses
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration Figure 1-1 IP address classes Table 1-1 describes the address ranges of these five classes. Currently, the first three classes of IP addresses are used in quantity.
Page 76: Subnetting And Masking
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration 1.1.3 Subnetting and Masking Subnetting was developed to address the risk of IP address exhaustion resulting from fast expansion of the Internet. The idea is to break a network down into smaller networks called subnets by using some bits of the host-id to create a subnet-id.
Page 77: Ip Unnumbered
1.2 Configuring IP Addresses Currently, the S9500 series switches support only manual IP address configuration. 1.2.1 Assigning an IP Address to an Interface You may assign an interface multiple IP addresses, one primary and multiple secondaries, to connect multiple logical subnets on the same physical subnet.
Page 78: Ip Addressing Configuration Example
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration 1.2.2 IP Addressing Configuration Example I. Network requirements As shown in Figure 1-3, the VLAN-interface 1 on Switch is connected to a LAN comprising two segments: 172.16.1.0/24 and 172.16.2.0/24.
Page 79: Configuring Ip Unnumbered
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration PING 172.16.1.2: 56 data bytes, press CTRL_C to break Reply from 172.16.1.2: bytes=56 Sequence=1 ttl=255 time=25 ms Reply from 172.16.1.2: bytes=56 Sequence=2 ttl=255 time=27 ms Reply from 172.16.1.2: bytes=56 Sequence=3 ttl=255 time=26 ms...
Page 80: Configuration Prerequisites
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration 1.3.1 Configuration Prerequisites Assign a primary IP address to the interface from which you want to borrow the IP address. 1.3.2 Configuration Procedure Follow these steps to configure IP unnumbered on an interface: To do…...
Page 81 Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration To save IP addresses, configure the POS interfaces to borrow IP addresses from the VLAN interfaces. The IP address of VLAN-interface 1 on Switch A is 172.16.10.1/24, and the IP address of VLAN-interface 1 on Switch B is 172.16.20.1/24.
Page 82: Displaying Ip Addressing Configuration
Operation Manual – IP Addressing H3C S9500 Series Routing Switches Chapter 1 IP Addressing Configuration [SysnameB] interface pos 2/1/1 [SysnameB-Pos2/1/1] ip address unnumbered interface vlan-interface 1 [SysnameB-Pos2/1/1] link-protocol ppp [SysnameB-Pos2/1/1] quit # Create a route to the segment attached to Switch A, specifying interface POS2/1/1 as the outgoing interface.
Page 83 Operation Manual – IP Performance H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 IP Performance Configuration..................1-1 1.1 IP Performance Overview....................1-1 1.2 Enabling Forwarding of Directed Broadcasts to a Directly Connected Network ....1-1 1.2.1 Enabling Forwarding of Directed Broadcasts to a Directly Connected Network (in...
Page 84: Chapter 1 Ip Performance Configuration
Operation Manual – IP Performance H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration Chapter 1 IP Performance Configuration When configuring IP performance, go to these sections for information you are interested in: IP Performance Overview Enabling Forwarding of Directed Broadcasts to a Directly Connected Network...
Page 85: Enabling Forwarding Of Directed Broadcasts To A Directly Connected Network (In System View)
H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration Note: S9500 series routing switches can still receive broadcasts from a designated UDP port even if they are disabled from receiving directed broadcasts. 1.2.1 Enabling Forwarding of Directed Broadcasts to a Directly Connected...
Page 86: Configuration Example
Operation Manual – IP Performance H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration 1.2.3 Configuration Example I. Network requirements As shown in Figure 1-1, the host’s interface and VLAN-interface 3 of Switch A are on the same network segment (1.1.1.0/24). VLAN-interface 2 of Switch A and VLAN-interface 2 of Switch B are on another network segment (2.2.2.0/24).
Page 87: Configuring Tcp Attributes
Operation Manual – IP Performance H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration After the above configurations, if you ping the subnet broadcast address (2.2.2.255) of VLAN-interface 2 of Switch A on the host, the ping packets can be received by VLAN-interface 2 of Switch B.
Page 88: Configuring Tcp Mss For The Interface
S9500 series routing switches will send ICMP redirect packets to the source host under the following conditions: The receiving and forwarding interfaces are the same...
Page 89 If the device received an IP packet with a timeout error, it drops the packet and sends an ICMP timeout packet to the source. S9500 series routing switches will send ICMP timeout packets under the following conditions: If the switch finds the destination of a packet is not itself and the TTL field of the packet is 1, it will send a “TTL timeout”...
Page 90 H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration Note: When performing hardware forwarding, S9500 series routing switches will not forward ICMP destination unreachable packets even if the above conditions are satisfied. II. Disadvantage of sending ICMP error packets...
Page 91: Displaying And Maintaining Ip Performance
Operation Manual – IP Performance H3C S9500 Series Routing Switches Chapter 1 IP Performance Configuration 1.6 Displaying and Maintaining IP Performance To do… Use the command… Remarks Display current TCP display tcp status connection state Display TCP connection display tcp statistics...
Page 92 Operation Manual – UDP Helper H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 UDP Helper Configuration ..................1-1 1.1 Introduction to UDP Helper....................1-1 1.2 Configuring UDP Helper ....................1-2 1.3 Displaying and Maintaining UDP Helper ................1-3 1.4 UDP Helper Configuration Examples ................
Page 93: Chapter 1 Udp Helper Configuration
Operation Manual – UDP Helper H3C S9500 Series Routing Switches Chapter 1 UDP Helper Configuration Chapter 1 UDP Helper Configuration When configuring UDP Helper, go to these sections for information you are interested Introduction to UDP Helper Configuring UDP Helper...
Page 94: Configuring Udp Helper
Operation Manual – UDP Helper H3C S9500 Series Routing Switches Chapter 1 UDP Helper Configuration Protocol UDP port number Time service NetBIOS name service (NetBIOS-NS) NetBIOS datagram service (NetBIOS-DS) Terminal access controller access control system (TACACS) 1.2 Configuring UDP Helper Follow these steps to configure UDP Helper: To do…...
Page 95: Displaying And Maintaining Udp Helper
Operation Manual – UDP Helper H3C S9500 Series Routing Switches Chapter 1 UDP Helper Configuration Caution: The UDP Helper enabled device cannot forward DHCP broadcast packets. That is to say, the UDP port number cannot be set to 67 or 68.
Page 96: Udp Helper Configuration Example Ii
Operation Manual – UDP Helper H3C S9500 Series Routing Switches Chapter 1 UDP Helper Configuration II. Network diagram Figure 1-1 Network diagram for UDP Helper configuration I III. Configuration procedure Note: The following configuration assumes that a route from Switch A to the network segment 10.2.0.0/16 is available.
Page 97 Operation Manual – UDP Helper H3C S9500 Series Routing Switches Chapter 1 UDP Helper Configuration II. Network diagram Figure 1-2 Network diagram for UDP Helper configuration II III. Configuration procedure Note: The following configuration assumes that a route from Switch A to the network segment 10.2.0.0/16 is available.
Page 98 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 IPv6 Basics Configuration ..................1-1 1.1 IPv6 Overview........................1-1 1.1.1 IPv6 Features ......................1-2 1.1.2 Introduction to IPv6 Address ................... 1-3 1.1.3 Introduction to IPv6 Neighbor Discovery Protocol ..........1-7 1.1.4 IPv6 PMTU Discovery ...................
Page 99: Ipv6 Overview
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Chapter 1 IPv6 Basics Configuration When configuring IPv6 basics, go to these sections for information you are interested IPv6 Overview IPv6 Basics Configuration Task List...
Page 100: Ipv6 Features
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration 1.1.1 IPv6 Features I. Header format simplification IPv6 cuts down some IPv4 header fields or move them to the IPv6 extension headers to reduce the length of the basic IPv6 header. IPv6 uses the basic header with a fixed length, thus making IPv6 packet handling simple and improving the forwarding efficiency.
Page 101: Introduction To Ipv6 Address
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Stateless address configuration means that a host automatically configures an IPv6 address and related information on basis of its own link-layer address and the prefix information advertised by the router.
Page 102 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration If an IPv6 address contains two or more consecutive groups of zeros, they can be replaced by the double-colon :: option. For example, the above-mentioned...
Page 103 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration The type of an IPv6 address is designated by the first several bits called format prefix. Table 1-1 lists the mappings between address types and format prefixes.
Page 104 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Table 1-2 Reserved IPv6 multicast addresses Address Application FF01::1 Node-local scope all-nodes multicast address FF02::1 Link-local scope all-nodes multicast address FF01::2 Node-local scope all-routers multicast address...
Page 105: Introduction To Ipv6 Neighbor Discovery Protocol
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration 1.1.3 Introduction to IPv6 Neighbor Discovery Protocol IPv6 neighbor discovery protocol (NDP) uses five types of ICMPv6 messages to implement the following functions: Address resolution...
Page 106 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration ICMPv6 message Number Function Used to respond to an NS message Neighbor When the link layer changes, the local node advertisement (NA) sends an NA message to notify neighbor message nodes of the node change.
Page 107 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration After receiving the NS message, node B judges whether the destination address of the packet is its solicited-node multicast address. If yes, node B learns the link-layer address of node A, and then unicasts an NA message containing its link-layer address.
Page 108: Ipv6 Pmtu Discovery
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration IV. Router/prefix discovery and address autoconfiguration Router/prefix discovery means that a node locates the neighboring routers, and learns the prefix of the network where the host is located, and other configuration parameters from the received RA message.
Page 109: Introduction To Ipv6 Dns
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Figure 1-5 Working procedure of the PMTU discovery The working procedure of the PMTU discovery is as follows: The source host uses its MTU to fragment packets and then sends them to the destination host.
Page 110: Ipv6 Basics Configuration Task List
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration RFC 2375: IPv6 Multicast Address Assignments RFC 2460: Internet Protocol, Version 6 (IPv6) Specification. RFC 2461: Neighbor Discovery for IP Version 6 (IPv6) RFC 2462: IPv6 Stateless Address Autoconfiguration...
Page 111: Configuring An Ipv6 Unicast Address
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration 1.3.2 Configuring an IPv6 Unicast Address IPv6 site-local addresses and global unicast addresses can be configured in either of the following ways: EUI-64 format: When the EUI-64 format is adopted to form IPv6 addresses, the IPv6 address prefix of an interface is the configured prefix and the interface identifier is derived from the link-layer address of the interface.
Page 112: Configuring Ipv6 Ndp
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Note: After an IPv6 site-local address or global unicast address is configured for an interface, a link-local address will be generated automatically. The automatically generated link-local address is the same as the one generated by using the ipv6 address auto link-local command.
Page 113: Configuring The Maximum Number Of Neighbors Dynamically Learned
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Caution: You can adopt either of the following two methods to configure a static neighbor entry for a VLAN interface. After a static neighbor entry is configured by using the first method, the device needs to resolve the corresponding layer 2 port information of the VLAN interface.
Page 114 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Table 1-4 Parameters in an RA message and their descriptions Parameters Description When sending an IPv6 packet, a host uses the value of this parameter to fill the Cur Hop Limit field in IPv6 headers.
Page 115 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Follow these steps to configure parameters related to an RA message: To do… Use the command… Remarks Enter system view system-view — Optional Configure the...
Page 116: Configuring The Number Of Attempts To Send An Ns Message For Dad
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration To do… Use the command… Remarks Optional By default, the local interface sends NS messages at intervals ipv6 nd ns Set the retrans timer of 1,000 milliseconds and the...
Page 117: Configuring Pmtu Discovery
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration 1.5 Configuring PMTU Discovery 1.5.1 Configuring the Interface MTU IPv6 routing devices do not support packet fragmentation. After an IPv6 routing device receives an IPv6 packet, if the packet size is greater than the MTU of the forwarding interface, the device will discard the packet.
Page 118: Configuring Ipv6 Tcp Properties
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration The aging time is invalid for static PMTU. Follow these steps to configure the aging time for PMTU: To do… Use the command… Remarks Enter system view system-view —...
Page 119: Configuring Capacity And Update Period Of Token Bucket
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration In the load sharing mode of IPv6 FIB, the device can decide how to select an equal cost multi-path (ECMP) route to forward packets. Currently, two load sharing modes are...
Page 120: Configuring Ipv6 Dns
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration Follow these steps to configure the capacity and update period of the token bucket: To do… Use the command… Remarks Enter system view system-view —...
Page 121 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration To do… Use the command… Remarks Enter system view system-view — Enable the dynamic Required domain name dns resolve Disabled by default. resolution function Required...
Page 122: Displaying And Maintaining Ipv6 Basics Configuration
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration 1.10 Displaying and Maintaining IPv6 Basics Configuration To do… Use the command… Remarks Display DNS suffix information display dns domain [ dynamic ] Display IPv6 dynamic domain...
Page 123: Ipv6 Configuration Examples
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration To do… Use the command… Remarks Clear IPv6 dynamic domain reset dns ipv6 dynamic-host name cache information reset ipv6 fibcache Clear FIB entries from the cache...
Page 124 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration III. Configuration procedure Configure Switch A # Enable the IPv6 packet forwarding function. <SwitchA> system-view [SwitchA] ipv6 # Configure the interface VLAN-interface 2 to automatically generate a link-local address.
Page 125 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration FF02::2 FF02::1 MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for addresses # Display the IPv6 information of the interface on Switch B.
Page 126 Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration bytes=56 Sequence=2 hop limit=255 time = 60 ms Reply from FE80::20F:E2FF:FE00:1 bytes=56 Sequence=3 hop limit=255 time = 60 ms Reply from FE80::20F:E2FF:FE00:1 bytes=56 Sequence=4 hop limit=255...
Page 127: Troubleshooting Ipv6 Basics Configuration
Operation Manual – IPv6 Basics H3C S9500 Series Routing Switches Chapter 1 IPv6 Basics Configuration bytes=56 Sequence=5 hop limit=255 time = 60 ms --- 3001::2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 50/60/70 ms 1.12 Troubleshooting IPv6 Basics Configuration...
Page 128 Operation Manual – Dual Stack H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Dual Stack Configuration.................... 1-1 1.1 Dual Stack Overview ......................1-1 1.2 Configuring Dual Stack ...................... 1-2...
Page 129: Dual Stack Overview
Operation Manual – Dual Stack H3C S9500 Series Routing Switches Chapter 1 Dual Stack Configuration Chapter 1 Dual Stack Configuration When configuring dual stack, go to these sections for information you are interested in: Dual Stack Overview Configuring Dual Stack Note: The term “router”...
Page 130: Configuring Dual Stack
Operation Manual – Dual Stack H3C S9500 Series Routing Switches Chapter 1 Dual Stack Configuration 1.2 Configuring Dual Stack You must enable the IPv6 packet forwarding function before dual stack. Otherwise, the device cannot forward IPv6 packets even if IPv6 addresses are configured for interfaces.
Page 131 Operation Manual – Tunneling H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Tunneling Configuration ..................... 1-1 1.1 Introduction to Tunneling ....................1-1 1.1.1 IPv6 over IPv4 Tunnel..................... 1-2 1.1.2 IPv4 over IPv4 Tunnel..................... 1-7 1.2 Tunneling Configuration Task List ..................1-8 1.3 Configuring IPv6 Manually Configured Tunnel ..............
Page 132: Chapter 1 Tunneling Configuration
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration Chapter 1 Tunneling Configuration Note: The term “router” in this document refers to a router in a generic sense or an Ethernet switch running a routing protocol.
Page 133: Ipv6 Over Ipv4 Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration the network. A tunnel is a virtual point-to-point connection. In practice, the virtual interface that supports only point-to-point connections is called tunnel interface. One tunnel provides one channel to transfer encapsulated packets. Packets can be encapsulated and decapsulated at both ends of a tunnel.
Page 134 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration A host in the IPv6 network sends an IPv6 packet to the device at the source end of the tunnel. After determining according to the routing table that the packet needs to be...
Page 135 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration A manually configured tunnel is a point-to-point link. One link is a separate tunnel. The IPv6 manually configured tunnel is mainly used for stable connections requiring regular secure communication between two border routers or between a border router and a host, or for connections to remote IPv6 networks.
Page 136 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration between the 6to4 network (with the address prefix starting with 2002) and the IPv6 network is realized. Figure 1-2 Principle of 6to4 tunnel and 6to4 relay ISATAP tunnel With the application of the IPv6 technique, there will be more and more IPv6 hosts in the existing IPv4 network.
Page 137 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration IV. Expedite termination If expedite termination is disabled, a tunneled packet arriving at the destination node is first forwarded to the tunnel service loopback interface for processing, then the outer IPv4 header is removed, and finally the decapsulated original packet is forwarded.
Page 138: Ipv4 Over Ipv4 Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration V. Tunnel hybrid insertion In practice, many cards only support IPv4. However, a tunnel can only be established over IPv6 cards. After tunnel packets arrive on the destination node, it is very likely that an IPv4 card received the packets.
Page 139: Tunneling Configuration Task List
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.2 Tunneling Configuration Task List Complete these tasks to configure the tunneling feature: Task Remarks Configuring IPv6 Manually Configured Tunnel Optional Configuring Automatic IPv4-Compatible IPv6 Optional Tunnel...
Page 140 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks Required Create a tunnel interface By default, there is no and enter tunnel interface tunnel number tunnel interface on the interface view device.
Page 141: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration Note: For the configuration of tunnel interface MTU, refer to the ipv6 mtu command in IPv6 Basics Commands of IP Services Volume. Caution: After a tunnel interface is deleted, all the above features configured on the tunnel interface will be deleted.
Page 142 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration II. Network diagram Figure 1-5 Network diagram for an IPv6 manually configured tunnel (on switches) III. Configuration procedure The following example shows how to configure an IPv6 manually configured tunnel between Switch A and Switch B.
Page 143 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration # Reference link aggregation group 1 and enable expedite termination in tunnel interface view. [SwitchA-Tunnel0/0/1] aggregation-group 1 [SwitchA-Tunnel0/0/1] expediting enable [SwitchA-Tunnel0/0/1] quit # Configure a static route from the interface Tunnel 0/0/1 of Switch A to Switch B.
Page 144: Configuring Automatic Ipv4-Compatible Ipv6 Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration IV. Configuration verification After the above configurations, you can successfully ping the IPv6 address of the peer tunnel interface from one switch. 1.4 Configuring Automatic IPv4-Compatible IPv6 Tunnel 1.4.1 Configuration Prerequisites...
Page 145 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks Required By default, the tunnel is a Configure an automatic GRE tunnel. The same tunnel-protocol ipv6-ipv4 IPv4-compatible IPv6 tunnel type should be...
Page 146: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration Caution: For automatic IPv4-compatible IPv6 tunnels, 6to4 tunnels, or ISATAP tunnels, their tunnel interfaces must have different source addresses. No destination address needs to be configured for an automatic IPv4-compatible IPv6 tunnel.
Page 147 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration # Enable the IPv6 forwarding function. <SwitchA> system-view [SwitchA] ipv6 # Configure an IPv4 address for the interface VLAN-interface 12. [SwitchA] vlan 12 [SwitchA-vlan12] port GigabitEthernet3/1/1 [SwitchA-vlan12] quit [SwitchA] interface Vlan-interface 12 [SwitchA-Vlan-interface 12] ip address 2.1.1.1 255.0.0.0...
Page 148: Configuring 6To4 Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration # Configure an automatic IPv4-compatible IPv6 tunnel. [SwitchB] interface tunnel 0/0/1 [SwitchB-Tunnel0/0/1] ipv6 address ::2.1.1.2/96 [SwitchB-Tunnel0/0/1] source Vlan-interface 12 [SwitchB-Tunnel0/0/1] tunnel-protocol ipv6-ipv4 auto-tunnel # Configure a link aggregation group and set the service type to tunnel.
Page 149 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks Required Enable the IPv6 packet By default, the IPv6 ipv6 forwarding function packet forwarding function is disabled. Required Create a tunnel interface and...
Page 150 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks Optional Configure an address and expediting subnet By default, no expedite mask for the expedite ip-address mask termination subnet is termination subnet configured for a tunnel.
Page 151: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.5.3 Configuration Example I. Network requirements Isolated IPv6 domains are interconnected through a 6to4 tunnel established in the IPv4 network. II. Network diagram Figure 1-7 Network diagram for a 6to4 tunnel III.
Page 152 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchA] ip route-static 5.1.1.1 24 [nexthop] # Configure an IPv6 address for the interface VLAN-interface 101. [SwitchA] vlan 101 [SwitchA-vlan101] port GigabitEthernet 1/1/2 [SwitchA-vlan101] quit [SwitchA] interface vlan-interface 101...
Page 153 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchB] interface vlan-interface 100 [SwitchB-Vlan-interface100] ip address 5.1.1.1 24 [SwitchB-Vlan-interface100] quit # Configure a route from the interface VLAN-interface 100 to the interface VLAN-interface 100 of Switch A. (Here the next-hop address of the static route is represented by [nexthop].
Page 154: Configuring 6To4 Relay
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration IV. Configuration verification After the above configuration, you can successfully ping Host B from Host A or ping Host A from Host B. 1.6 Configuring 6to4 Relay 1.6.1 Configuration Prerequisites...
Page 155: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.6.3 Configuration Example I. Network requirements IPv6 networks (Site 1 and Site 2) are isolated by an IPv4 network. To make the two sites communicate through Switch A and Switch B, establish a 6to4 tunnel between the two switches, and configure default 6to4 relay routes to each other.
Page 156 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchA-vlan101] port GigabitEthernet 4/1/5 [SwitchA-vlan101] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 address 2001:1::101 32 [SwitchA-Vlan-interface101] quit # Configure a 6to4 tunnel. [SwitchA] interface tunnel 4/0/0 [SwitchA-Tunnel4/0/0] ipv6 address 2002:b00:2:2::2 64...
Page 157: Configuring Isatap Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchB] ip route-static 11.0.0.0 24 [nexthop] # Configure an IPv6 address for the interface VLAN-interface 102. [SwitchB] vlan 102 [SwitchB-vlan102] port GigabitEthernet 4/1/5 [SwitchB] interface vlan-interface 102...
Page 158: Configuration Procedure
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.7.2 Configuration Procedure Follow these steps to configure an ISATAP tunnel: To do… Use the command… Remarks Enter system view system-view — Required Enable the IPv6 packet...
Page 159 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks Configure a link aggregation aggregation-group group ID to be referenced by Required aggregation-group-id the tunnel interface Optional Enable the expedite By default, the...
Page 160: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.7.3 Configuration Example I. Network requirements The destination address of a tunnel is an ISATAP address. It is required that IPv6 hosts in the IPv4 network can access the IPv6 network via an ISATAP tunnel.
Page 161 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [Switch-GigabitEthernet1/1/3] stp disable [Switch-GigabitEthernet1/1/3] port link-aggregation group 1 [Switch-GigabitEthernet1/1/3] quit # Reference link aggregation group 1 and enable expedite termination in tunnel interface view. [Switch] interface tunnel 2/0/1...
Page 162: Configuring Ipv4 Over Ipv4 Tunnel
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration # A link-local address (fe80::5efe:2.1.1.2) in the ISATAP format is automatically generated for the ISATAP interface. Configure an IPv4 address for the ISATAP switch on the ISATAP interface.
Page 163: Configuration Procedure
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.8.2 Configuration Procedure Follow these steps to configure an IPv4 over IPv4 tunnel: To do… Use the command… Remarks Enter system view system-view — Required Create a tunnel interface...
Page 164: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration Caution: If the tunnel interface addresses at the two ends of a tunnel are not in the same network segment, a forwarding route through the tunnel to the peer must be configured so that the encapsulated packet can be forwarded.
Page 165 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchA-Vlan-interface100] ip address 10.1.1.1 255.255.255.0 [SwitchA-Vlan-interface100] quit # Configure an IPv4 address for the interface VLAN-interface 101 (the physical interface of the tunnel). [SwitchA] vlan 101 [SwitchA-vlan101] port GigabitEthernet 1/1/2...
Page 166 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchB] vlan 100 [SwitchB-vlan100] port ethernet 1/1/1 [SwitchB-vlan100] quit [SwitchB] interface vlan-interface 100 [SwitchB-Vlan-interface100] ip address 10.1.3.1 255.255.255.0 [SwitchB-Vlan-interface100] quit # Configure an IPv4 address for the interface VLAN-interface 101 (the physical interface of the tunnel).
Page 167: Configuring Tunnel Hybrid Insertion
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration IV. Configuration verification After the above configuration, you can successfully ping the address of the access interface of the peer IPv4 group from one switch. 1.9 Configuring Tunnel Hybrid Insertion 1.9.1 Configuration Prerequisites...
Page 168 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration To do… Use the command… Remarks rule [ rule-id ] { permit | deny } Define a ACL rule Required protocol [ rule-string ] Define a class and...
Page 169: Configuration Example
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration 1.9.3 Configuration Example I. Network requirement Switch A and Switch B are configured with IPv6 cards and IPv4 cards. In this example, the tunnel type used for networking is an IPv6 manually configured tunnel, on which the RIPng routing protocol is enabled.
Page 170 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration # Configure an IPv4 address for the interface VLAN-interface 12. [SwitchA] interface Vlan-interface 12 [SwitchA-Vlan-interface12] ipv6 address 1000::1 64 [SwitchA-Vlan-interface12] quit # Configure a link aggregation group and set the service type to tunnel.
Page 171 Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchA-classifier-1] if-match acl 3000 [SwitchA-classifier-1] quit [SwitchA] traffic behavior 1 [SwitchA-behavior-1] redirect link-aggregation group 1 [SwitchA] qos policy 1 [SwitchA-qospolicy-1] classifier 1 behavior 1 [SwitchA-qospolicy-1] quit [SwitchA] qos vlan-policy 1 vlan 10 inbound Configure Switch B.
Page 172: Displaying And Maintaining Tunneling Configuration
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration [SwitchB-ripng-1] quit [SwitchB] interface Tunnel 3/0/0 [SwitchB-Tunnel3/0/0] ripng 1 enable # Configure an ACL and redirect the tunnel packets that come from the IPv4 cards and should be terminated to IPv6 cards. The protocol number of IPv6 over IPv4 tunnel packets is 41.
Page 173: Troubleshooting Tunneling Configuration
Operation Manual – Tunneling H3C S9500 Series Routing Switches Chapter 1 Tunneling Configuration Note: For details about BGP, refer to BGP Commands and BGP4+ Commands in IP Routing Volume. 1.11 Troubleshooting Tunneling Configuration Symptom: After the configuration of related parameters such as tunnel source address, tunnel destination address, and tunnel type, the tunnel interface is still not up.
Page 174 Operation Manual – Adjacency Table H3C S9500 Series Routing Switches Table of Contents Table of Contents Chapter 1 Adjacency Table Configuration.................. 1-1 1.1 Adjacency Table Overview ....................1-1 1.1.1 Introduction to Adjacency Table................1-1 1.1.2 Terms ........................1-1 1.2 Displaying and Maintaining the Adjacency Table .............. 1-2...
Page 175: Chapter 1 Adjacency Table Configuration
Operation Manual – Adjacency Table H3C S9500 Series Routing Switches Chapter 1 Adjacency Table Configuration Chapter 1 Adjacency Table Configuration When configuring adjacency table, go to these sections for information you are interested in: Adjacency Table Overview Displaying and Maintaining the Adjacency Table...
Page 176: Displaying And Maintaining The Adjacency Table
Operation Manual – Adjacency Table H3C S9500 Series Routing Switches Chapter 1 Adjacency Table Configuration Service type: Type of service corresponding to the adjacency table, such as PPP and IP over ATM. Currently, only PPP is supported. 1.2 Displaying and Maintaining the Adjacency Table To do…...

H3C S9500 Series Operation Manual

Table of Contents

Chapter 1 ARP Configuration

Chapter 2 Proxy ARP Configuration

Dhcp Overview/Dhcp Server Configuration

Chapter 3 DHCP Relay Agent Configuration

DNS Configuration

IP Addressing Configuration

IP Performance Configuration

UDP Helper Configuration

Ipv6 Basics Configuration

Tunneling Configuration

Quick Links

Chapters

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for H3C S9500 Series

Summary of Contents for H3C S9500 Series

Table of Contents