About This Manual Related Documentation In addition to this manual, each H3C S3100 Series Ethernet Switches documentation set includes the following: Manual Description It is used for assisting the users in switch H3C S3100 Series Ethernet Switches installation, booting up, hardware and Installation Manual (For Soliton) software maintenance.
Page 4
Part Contents Introduces the commands used for basic port 9 Port Basic Configuration configuration. Introduces commands used link 10 Link Aggregation aggregation. 11 Port Isolation Introduces the commands used for port isolation. Introduces the commands used for port security 12 Port Security-Port Binding configuration and port binding.
Page 5
Part Contents Introduces the commands used for information 31 Information Center center configuration. 32 System Maintenance and Introduces the commands used for system Debugging maintenance and debugging. Introduces the commands used for VLAN VPN 33 VLAN-VPN configuration. Introduces the commands used for HWPing 34 HWPing configuration.
Page 6
Convention Description The argument(s) before the ampersand (&) sign can be &<1-n> entered 1 to n times. A line starting with the # sign is comments. II. GUI conventions Convention Description Button names are inside angle brackets. For example, click <...
Command level to be set, in the range of 0 to 3. view view: CLI view. It can be any CLI view that the Ethernet switch supports. The S3100 series (For Soliton) support only the CLI views listed in Table...
Page 9
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands CLI view Description mst-region MST region view mtlk-group Monitor link group view null NULL interface view peer-key-code Public key editing view peer-public-key Public key view...
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands Level Name Command Commands associated with the basic operation modules and support modules of the system, such as file system, Manage level FTP/TFTP/XMODEM downloading, user management, and level setting commands.
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands 1.1.3 super Syntax super [ level ] View User view Parameters level: User level, in the range of 0 to 3. Description Use the super command to switch from the current user level to a specified level.
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands User privilege level is 3, and only those commands can be used whose level is equal or less than this. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE 1.1.4 super authentication-mode...
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands When both the super password authentication and the HWTACACS authentication are specified, the device adopts the preferred authentication mode first. If the preferred authentication mode cannot be implemented (for example, the super password is not configured or the HWTACACS authentication server is unreachable), the backup authentication mode is adopted.
Page 14
Command Manual (For Soliton) – CLI H3C S3100 Series Ethernet Switches Chapter 1 CLI Configuration Commands Use the undo super password command to restore the default configuration. By default, no such password is set. Note that, no matter whether a plain-text or cipher-text password is set, users must enter the plain-text password during authentication.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Caution: For a VTY user interface, to specify the none keyword or password keyword for login users, make sure that SSH is not enabled in the user interface. Otherwise, the configuration fails.
Page 18
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode scheme [Sysname-ui-vty0] quit # Specify domain system as the default domain, and set the scheme authentication mode to local for the domain.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Caution: The auto-execute command command may cause you unable to perform common configuration in the user interface, so use it with caution. Before executing the auto-execute command command and save your configuration, make sure you can log in to the switch in other modes and cancel the configuration.
Telnet. Examples # Disable copyright information displaying. ************************************************************************** * Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Auth : The authentication mode of user-interface. : The physical location of UIs. Super: The Super authentication mode of UIs. : Authentication use AAA. : Current UI need not authentication.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands 8:UUUU X 5 character mode users. 8 UI never used. 5 total UI in use Table 1-2 Description on the fields of the display user-interface summary command...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Examples # Display the user information about the current user interface. <Sysname> display users Delay Type Ipaddress Username Userlevel VTY 0 00:00:00 192.168.0.208 : Current operation user.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Examples # Display the information about the current on-line Web users. <Sysname> display web users Name Language Level Login Time Last Req. Time 00800003 admin...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Examples # Release user interface VTY 1. <Sysname> free user-interface vty 1 Are you sure you want to free user-interface vty1 [Y/N]? y [OK] After you perform the above operation, the user connection on user interface VTY1 is torn down.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Description Use the header command to set the banners that are displayed when a user logs into a switch. The login banner is displayed on the terminal when the connection is established.
Page 28
# Test the configuration remotely using Telnet. (only when login authentication is configured can the login banner be displayed). ************************************************************************** * Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Use the undo history-command max-size command to revert to the default history command buffer size. By default, the history command buffer can contain up to ten commands.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands 1.1.12 ip http shutdown Syntax ip http shutdown undo ip http shutdown View System view Parameters None Description Use the ip http shutdown command to shut down the WEB Server.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands [Sysname] ip http shutdown # Launch the WEB Server. [Sysname] undo ip http shutdown 1.1.13 lock Syntax lock View User view Parameters None Description Use the lock command to lock the current user interface to prevent unauthorized operations in the user interface.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Description Use the protocol inbound command to specify the protocols supported by the user interface. Both Telnet protocol and SSH protocol are supported by default.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands 1.1.16 screen-length Syntax screen-length screen-length undo screen-length View User interface view Parameters screen-length: Number of lines the screen can contain. This argument ranges from 0 to 512.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands number: User interface index. A user interface index can be relative or absolute. In relative user interface index scheme, the type argument is required. In this case, AUX user interfaces are numbered from AUX0 through AUX7;...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands terminal: Makes terminal services available to users logging in through the console port. level level: Specifies the user level for Telnet users, Terminal users, or SSH users. The level argument ranges from 0 to 3 and defaults to 0.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands display Display current system information nslookup Query Internet name servers ping Ping function quit Exit from current command view super Set the current user priority level...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Note: By default, password authentication is performed when a user logs in through a modem or Telnet. If no password is set, the user cannot establish a connection with the switch.
By default, the stopbits is 1. Note: The S3100 series do not support communication with a terminal emulation program with stopbits set to 1.5. Changing the stop bits value of the switch to a value different from that of the terminal emulation utility does not affect the communication between them.
Trying 129.102.0.1 ... Press CTRL+K to abort Connected to 129.102.0.1 ... ************************************************************************** * Copyright(c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <SwitchB>...
Page 42
Trying 3001::1 ... Press CTRL+K to abort Connected to 3001::1 ... ************************************************************************** * Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <Sysname>...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 1 Login Commands Examples # Configure that commands at level 1 are available to the users logging in to VTY 0. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 2 Commands for User Control Chapter 2 Commands for User Control 2.1 Commands for Controlling Logging in Users 2.1.1 acl Syntax acl acl-number { inbound | outbound }...
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 2 Commands for User Control Examples # Apply ACL 2000 to filter Web users (assuming that ACL 2000 already exists.) <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 2 Commands for User Control Examples # Create an SNMP group named h123 and apply ACL 2001 for network management users (assuming that basic ACL 2001 already exists).
Page 50
Command Manual (For Soliton) – Login H3C S3100 Series Ethernet Switches Chapter 2 Commands for User Control privacy: Encrypts packets. des56: Specifies data encryption standard (DES) for encrypting. aes128: Specifies advanced encryption standard (AES) for encrypting. priv-password: Encryption password, a string of 1 to 64 characters in plain text, a 32-bit hexadecimal number in cipher text if MD5 algorithm is used, and a 40-bit hexadecimal number in cipher text if SHA algorithm is used.
Page 52
Chapter 1 Configuration File Management Commands Note: S3100 series Ethernet switches allow you to input a file path and file name in one of the following ways: In universal resource locator (URL) format and starting with “unit1>flash:/”. or “flash:/” This method is used to specify a file in the current Flash memory. For example, the URL of a file named text.txt in the root directory of the switch is...
Page 53
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands radius-template: Indicates the radius template configuration. system: Indicates the system configuration. user-interface: Indicates the user interface configuration. interface: Displays port/interface configuration.
Page 54
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands Character Meaning Remarks Square brackets. Specifies a For example, [1-36A] can match range of characters, and matches a string containing any character any character in the specified among 1, 2, 3, 6, and A.
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands View Any view Parameters unit unit-id: Specifies the unit ID of a switch. It only can be 1. Description Use the display startup command to display the startup configuration of a switch.
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands View Any view Parameters by-linenum: Displays configuration information with line numbers. Description Use the display this command to display the current configuration performed in the current view.
Page 63
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands Parameters backup: Erases the backup configuration file. main: Erases the main configuration file. Description Use the reset saved-configuration command to erase the configuration file saved in the Flash of a switch.
Page 64
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands 1.1.7 save Syntax save [ cfgfile | [ safely ] [ backup | main ] ] View Any view Parameters cfgfile: Path name or file name of a configuration file in the Flash, a string of 5 to 56 characters.
Management Commands Caution: S3100 series Ethernet switches do not support the safe mode. When you are saving a configuration file using the save safely command, if the device reboots or the power fails during the saving process, the configuration file will be lost.
Page 66
Command Manual (For Soliton) – Configuration File Management Chapter 1 Configuration File H3C S3100 Series Ethernet Switches Management Commands unit unit-id: Specifies a switch by its unit ID. It only can be 1. Description Use the startup saved-configuration command to specify a configuration file to be the main configuration file or the backup configuration file to be used for the next startup of the switch.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Table 1-1 Description on the fields of the display interface Vlan-interface command Field Description The state of the VLAN interface, which can be one of...
Page 71
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands View Any view Parameters vlan-id1: Specifies the ID of a VLAN of which information is to be displayed, in the range of 1 to 4094.
Page 72
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Table 1-2 Description on the fields of the display vlan command Field Description VLAN ID VLAN ID. VLAN Type VLAN type (dynamic or static).
Page 73
Related commands: display interface Vlan-interface. Note: An S3100 series switch can be configured with a single VLAN interface only, and the VLAN must be the management VLAN. For details about the management VLAN, refer to the “Management VLAN Configuration” part of this manual.
Page 74
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Examples # Specify the name of VLAN 2 as test vlan. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] vlan 2 [Sysname-vlan2] name test vlan 1.1.6 shutdown...
Page 75
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Examples # Disable the VLAN-interface1. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] interface Vlan-interface 1 [Sysname-Vlan-interface1] shutdown 1.1.7 vlan Syntax...
Page 76
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Caution: VLAN 1 is the default VLAN and cannot be removed. You cannot use the undo vlan command to directly remove the VLANs reserved by the protocol, voice VLAN, control VLANs for Smart Link, probe VLANs for remote mirroring, or VLANs used for performing any other features.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands interface-number2 taking a value no less than interface-number1. The total number of individual ports and port ranges defined in the list must not exceed 10.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Caution: By default, all access ports belong to VLAN 1. You cannot assign an access port to or remove an access port from VLAN 1 with the port access vlan command or its undo form.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands If the specified default VLAN has been removed or is not carried on the hybrid port, the port will be unable to receive VLAN untagged packets. You can configure a hybrid port to permit the packets of its default VLAN to pass through with the port hybrid vlan command.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands untagged: Removes VLAN tags when the packets of the specified VLANs are forwarded on the port. Description Use the port hybrid vlan command to assign the hybrid port to one or multiple VLANs and configure the port to send packets tagged or untagged for the VLAN(s).
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Description Use the port link-type command to set the link type of the Ethernet port. Use the undo port link-type command to restore the default link type.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Description Use the port trunk permit vlan command to assign the trunk port to the specified VLAN(s), that is, to allow packets from these VLANs to pass through the port.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands After configuring the default VLAN of a trunk port, you need to use the port trunk permit vlan command to configure the trunk port to allow the packets of the default VLAN to pass through.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Field Description The state of the MAC-to-VLAN mapping, which can be: S, indicating that the MAC-to-VLAN mapping is configured statically. STATE D, indicating that the MAC-to-VLAN mapping is created automatically during authentication.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands undo mac-vlan enable View Ethernet port view Parameters None Description Use the mac-vlan enable command to enable MAC-based VLAN on the port. Use the undo mac-vlan enable command to disable MAC-based VLAN on the port.
Page 88
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Parameters interface-type interface-number: Specify a port by its type and number to display the protocol VLAN(s) bound with the port. You can use the interface-type interface-number...
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands 1.4.2 display protocol-vlan vlan Syntax display protocol-vlan vlan { vlan-id1 [ to vlan-id2 ] | all } View Any view Parameters vlan-id1: Specifies a VLAN ID in the range of 1 to 4094, of which the protocol VLAN configuration information is to be displayed.
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Field Description VLAN Type VLAN type. Here, it refers to Protocol-based VLAN Protocol-Index Protocol template index Protocol type specified in the protocol template. Refer to the Protocol-Type protocol-vlan command for detailed description.
Page 91
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Note: The port hybrid protocol-vlan vlan command is available on hybrid ports only. Before you bind a port with a protocol VLAN, assign the port to the VLAN with the port hybrid vlan command.
Page 92
Deletes all the protocol templates. Note: At present, the S3100 series support only the standard templates of AppleTalk and IP, the standard template of IPX encapsulated in Ethernet II format, and the user-defined templates matching the Ethernet II encapsulation format. Protocol templates matching 802.2/802.3 encapsulation formats and their extended...
Page 93
Command Manual (For Soliton) – VLAN H3C S3100 Series Ethernet Switches Chapter 1 VLAN Configuration Commands Description Use the protocol-vlan command to configure the protocol template used for classifying protocol-based VLANs. Use the undo protocol-vlan command to disable the configuration.
Page 94
Command Manual ( For Soliton ) – Management VLAN H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Management VLAN Configuration Commands............1-1 1.1 Management VLAN Configuration Commands ..............1-1 1.1.1 delete static-routes all ..................... 1-1 1.1.2 display interface Vlan-interface ................
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Parameter vlan-id: ID of the management VLAN interface the information about which is to be displayed. Description Use the display interface Vlan-interface command to display the information about the management VLAN interface.
Page 97
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameter vlan-id: ID of the management VLAN interface. Description Use the display ip interface command to display the information about a specified VLAN interface.
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Table 1-2 Description on the fields of the display ip interface command Field Description Vlan-interface1 current state Current state of Vlan-interface1...
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameter vlan-id: ID of the management VLAN interface. Description Use the display ip interface brief command to display brief information about a specified VLAN interface.
Page 100
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameter regular-expression: Regular expression, which specifies a match character string. |: Uses the regular expression to match the output routing information.
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands 1.1.6 display ip routing-table acl Syntax display ip routing-table acl acl-number [ verbose ] View Any view Parameter acl-number: Number of a basic access control list (ACL), in the range of 2000 to 2999.
Page 103
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Field Description Descriptions on the route state are as follows: ActiveU Valid unicast route. “U” stands for unicast. Blackhole route is the same as reject route except that a...
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display ip routing-table ip-address1 ip-address2 command to display the information about the routes with their destinations within the specified destination IP address range.
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Radix tree for INET (2) inodes 2 routes 2: +--8+--{127.0.0.0 +-32+--{127.0.0.1 Table 1-6 Description on the fields of the display ip routing-table radix command...
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Table 1-7 Description on the fields of the display ip routing-table statistics command Field Description Proto Routing protocol route Total number of routes...
Page 111
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Note that: To create the VLAN interface for the management VLAN on a switch operating as the management device in a cluster, make sure the ID of the management VLAN is...
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Example # Assign the IP address 192.168.0.51 (with the mask 255.255.255.0) to the management VLAN interface. (Assume that VLAN 1 is the management VLAN.) <Sysname>...
Page 113
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands Description Use the ip route-static command to configure a static route. Use the undo ip route-static command to remove a static route.
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands VLAN 1 is the default management VLAN. Example # Configure VLAN 2 as the management VLAN. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 115
Command Manual ( For Soliton ) – Management VLAN Chapter 1 Management VLAN Configuration H3C S3100 Series Ethernet Switches Commands DIRECT STATIC Total The above information shows that the routing statistics in the IP routing table is cleared. 1-21...
Page 116
Command Manual (For Soliton) – IP Address-IP Performance H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 IP Address Configuration Commands............... 1-1 1.1 IP Address Configuration Commands ................1-1 1.1.1 display ip interface ....................1-1 1.1.2 display ip interface brief ..................1-3 1.1.3 ip address........................
Command Manual (For Soliton) – IP Address-IP Performance Chapter 1 IP Address Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 IP Address Configuration Commands 1.1 IP Address Configuration Commands 1.1.1 display ip interface Syntax display ip interface [ interface-type interface-number ]...
Page 118
Command Manual (For Soliton) – IP Address-IP Performance Chapter 1 IP Address Configuration H3C S3100 Series Ethernet Switches Commands Time exceed: IP header bad: Timestamp request: Timestamp reply: Information request: Information reply: Netmask request: Netmask reply: Unknown type: Table 1-1 Description on the fields of the display ip interface command...
Page 119
Command Manual (For Soliton) – IP Address-IP Performance Chapter 1 IP Address Configuration H3C S3100 Series Ethernet Switches Commands 1.1.2 display ip interface brief Syntax display ip interface brief [ interface-type [ interface-number ] ] View Any view Parameters interface-type: Interface type.
Page 120
Command Manual (For Soliton) – IP Address-IP Performance Chapter 1 IP Address Configuration H3C S3100 Series Ethernet Switches Commands Field Description Physical Physical state of the interface Protocol Link layer protocol state of the interface Interface description information. If the description has no more than 12 characters, the whole Description description can be displayed.
Page 121
Command Manual (For Soliton) – IP Address-IP Performance Chapter 1 IP Address Configuration H3C S3100 Series Ethernet Switches Commands Examples # Assign the IP address 129.12.0.1 to VLAN interface 1 with subnet mask 255.255.255.0. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Table 2-1 Description on the fields of the display fib command Field Description Flags: U: A route is up and available.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display fib ip-address command to view the FIB entries matching the specified destination IP address. If no mask or mask length is specified, the FIB entry that matches the destination IP address and has the longest mask will be displayed;...
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display fib acl command to display the FIB entries matching a specific ACL. For ACL, refer to the part discussing ACL in this manual.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands regular-expression: A case-sensitive character string. Description Use the display fib | command to display the FIB entries filtered by the specified regular expression.
Page 127
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the display icmp statistics command to display the statistics about ICMP packets. Related commands: display ip interface, reset ip statistics.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Table 2-2 Description on the fields of the display icmp statistics command Field Description bad formats Number of received wrong format packets...
Page 129
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameters socktype sock-type: Displays the socket information of this type. The sock type is in the range 1 to 3, corresponding to TCP, UDP and raw IP respectively.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Field Description socketid Socket ID Proto Protocol number used by the socket sndbuf Sending buffer size of the socket rcvbuf Receiving buffer size of the socket Current data size in the sending buffer.
Page 131
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Reassembling:sum timeouts Table 2-4 Description on the fields of the display ip statistics command Field Description Total number of packets received...
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Field Description Total Total number of packets sent urgent packets Number of urgent packets sent Number of control packets sent; in...
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameters None Description Use the display tcp status command to display the state of all the TCP connections so that you can monitor TCP connections in real time.
Page 136
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display udp statistics command to display the statistics about UDP packets. Related commands: reset udp statistics. Examples # Display the statistics about UDP packets.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands packet with an unreachable destination, discards the packet and then sends a destination unreachable packet to the source host. Use the undo icmp unreach send command to disable the device from sending ICMP destination unreachable packets.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the reset tcp statistics command to clear the statistics about TCP packets. You can use the display tcp statistics command to view the current TCP packet statistics.
Command Manual (For Soliton) – IP Address-IP Performance Chapter 2 IP Performance Configuration H3C S3100 Series Ethernet Switches Commands Description Use the tcp timer fin-timeout command to configure the TCP finwait timer. Use the undo tcp timer fin-timeout command to restore the default value of the TCP finwait timer.
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Parameters vlan-id: Specifies the ID of the current voice VLAN in the range of 1 to 4094. Description Use the display vlan command to display information about the specified VLAN.
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Use the undo voice vlan enable command to remove the voice VLAN configuration from the specified VLAN. By default, voice VLAN is disabled globally.
Page 148
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Parameters minutes: Sets the voice VLAN aging timer in minutes, in the range of 5 to 43200. Description Use the voice vlan aging command to set the voice VLAN aging timer.
Use the voice vlan legacy command to enable the voice VLAN legacy function. This function realizes the communication between H3C device and other vendors’ voice device by automatically adding the voice VLAN tag to the voice data coming from other vendors’...
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Description Use the voice vlan mac-address command to add an OUI entry to the OUI list for the specified MAC address. The OUI list contains the MAC addresses of recognizable voice devices.
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the voice vlan mode auto command to configure the voice VLAN assignment mode of the Ethernet port to automatic.
Page 153
Command Manual (For Soliton) – Voice VLAN Chapter 1 Voice VLAN Configuration H3C S3100 Series Ethernet Switches Commands Description Use the voice vlan security enable command to enable the voice VLAN security mode. Use the undo voice vlan security enable command to disable the voice VLAN security mode.
Command Manual (For Soliton) – GVRP H3C S3100 Series Ethernet Switches Chapter 1 GVRP Configuration Commands <Sysname> display garp statistics interface Ethernet 1/0/1 GARP statistics on port Ethernet1/0/1 Number Of GVRP Frames Received Number Of GVRP Frames Transmitted Number Of Frames Discarded...
Command Manual (For Soliton) – GVRP H3C S3100 Series Ethernet Switches Chapter 1 GVRP Configuration Commands Leave timer LeaveAll timer Hold timer Related commands: garp timer, garp timer leaveall. Examples # Display the settings of the GARP timers on port Ethernet1/0/1.
Page 158
Command Manual (For Soliton) – GVRP H3C S3100 Series Ethernet Switches Chapter 1 GVRP Configuration Commands The timeout ranges of the timers vary depending on the timeout values you set for other timers. If you want to set the timeout time of a timer to a value out of the current range, you can set the timeout time of the associated timer to another value to change the timeout range of this timer.
Command Manual (For Soliton) – GVRP H3C S3100 Series Ethernet Switches Chapter 1 GVRP Configuration Commands Parameters interface interface-list: Specifies an Ethernet port list. By providing a value for this argument, you can display the GVRP statistics on the specified ports. You need to provide the interface-list argument in the format of { interface-type interface-number [ to interface-type interface-number ] } &<1-10>, where the interface-type argument...
Page 162
Command Manual (For Soliton) – GVRP H3C S3100 Series Ethernet Switches Chapter 1 GVRP Configuration Commands Description Use the display gvrp status command to display the global GVRP status (enabled or disabled). Examples # Display the global GVRP status. <Sysname> display gvrp status GVRP is enabled The above information indicates that GVRP is enabled globally.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 Port Basic Configuration Commands Note: A new parameter kbps is added in the command storm-constrain in the software version Release 2301.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands When incoming broadcast traffic exceeds the broadcast traffic threshold you set, the system drops the packets exceeding the threshold to reduce the broadcast traffic ratio to the specified range, so as to keep normal network service.
Page 168
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter interface-type: Port type. interface-number: Port number. source-agg-id: Source aggregation group number, in the range of 1 to 28. The port with the smallest port number in the aggregation group is used as the source port.
Page 169
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands QoS configuration: includes Traffic Policing, Packets Priority Marking, Port Priority, Traffic Statistics, Traffic Redirecting, Port Rate Limiting, Priority Trust Mode, QoS Profile ( excludes qos-profile port-based ), and so on;...
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands 1.1.3 description Syntax description text undo description View Ethernet port view Parameter text: Port description, a string of 1 to 80 characters.
Page 171
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands begin: Each entry must begin with a specified character string. include: Each entry must include a specified character string. exclude: Each entry must not include a specified character string.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Table 1-1 Description on the fields of the display brief interface command Field Description Interface Port type Current link state of the Ethernet port: UP, DOWN or...
Page 173
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands For details about the arguments, refer to the parameter description of the interface command. Description Use the display interface command to display port configuration.
Page 176
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Field Description The number of incoming giant frames (A giant frame is of more than 1518 giants bytes if untagged or more than 1522 bytes if tagged.)
Page 177
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Field Description Count in packets and in bytes of outgoing normal packets on the port, including outgoing normal packets and normal Pause frames.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands 1.1.6 display link-delay Syntax display link-delay View Any view Parameters None Description Use the display link-delay command to display the information about the ports with the link-delay command configured, including the port name and the configured delay.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands <Sysname> display loopback-detection Port Ethernet1/0/1 loopback-detection is running system Loopback-detection is running Detection interval time is 30 seconds There is no port existing loopback link...
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands PortName StormType LowerLimit UpperLimit Ctr-mode Status Trap Log Swi-num -------------------------------------------------------------------------- Eth1/0/1 broadcast 9 shutdown normal Table 1-5 Description on the fields of the display storm-constrain command...
Page 182
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display unit command to display information about the ports on a specified unit. Example # Display information about the ports on unit 1.
Page 183
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands 0 lost carrier, - no carrier (The following displayed information is omitted) Table 1-6 Description on the fields of the display unit command...
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands 1.1.13 flow interval Syntax flow-interval interval undo flow-interval View Ethernet port view Parameter Interval: Interval (in seconds) to perform statistics on port information. This argument ranges from 5 to 300 (in step of 5) and is 300 by default.
Page 186
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands View Ethernet port view Parameter None Description Use the flow-control command to enable flow control on the current Ethernet port. Use the undo flow-control command to disable flow control on the port.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands The slot number is 0 if the port is an Ethernet port, the slot number is 1 if the port is a GigabitEthernet port.
Page 188
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Example # Set the maximum frame size allowed on Ethernet 1/0/1 to 2048 bytes. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter None Description Use the loopback-detection control enable command to enable the loopback port control function on the current trunk or hybrid port.
Page 191
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter None Description Use the loopback-detection enable command to enable the loopback detection function on the current port to detect whether an external loopback occurs on the port.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands By default, the loopback detection function is enabled globally and on ports if the device boots with the default configuration file (config.def); if the device boots with null configuration, this function is disabled.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Example # Enable the loopback detection function on ports Ethernet 1/0/1 through Ethernet 1/0/4. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands View Ethernet port view Parameter None Description Use the loopback-detection per-vlan enable command to configure the system to run loopback detection on all VLANs of the current trunk or hybrid port.
Page 195
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Use the undo loopback-detection shutdown enable command to disable the function. The loopback port auto-shutdown function works in conjunction with the loopback...
Page 196
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter across: Sets the MDI mode to medium dependent interface (MDI). normal: Sets the MDI mode to media dependent interface-X mode (MDI-X).
Page 197
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands For a GigabitEthernet port, the max-bps argument is in the range 64 to 1,000,000. Description Use the multicast-suppression command to limit unknown multicast and unknown unicast traffic allowed to be received on the current port.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter interface-list: Ethernet interface list, format interface-type interface-number [ to interface-type interface-number ] &<1-10>, where &<1-10> indicates that you can specify up to 10 port ranges.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands By default, no port group is configured. Example # Create port group 1. <Sysname> system-view [Sysname] port-group 1 [Sysname-port-group-1] 1.1.29 reset counters interface...
Page 200
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands undo shutdown View Ethernet port view Parameter None Description Use the shutdown command to shut down an Ethernet port. Use the undo shutdown command to bring up an Ethernet port.
Page 201
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Parameter 10: Specifies the port speed to 10 Mbps. 100: Specifies the port speed to 100 Mbps. 1000: Specifies the port speed to 1,000 Mbps (only available to GigabitEthernet ports).
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands all: Cancels all the storm control threshold configurations on the port. Description Use the storm-constrain command to set the upper and lower thresholds of the broadcast/multicast/unicast traffic received on the port.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Note: You are not recommended to set the upper and lower traffic thresholds to the same value. The system can take one of the actions when the broadcast/multicast/unicast traffic received on a port exceeds the upper threshold: block and shutdown.
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Use the undo storm-constrain enable command to disable log/trap information from being output when traffic received on the port exceeds the upper threshold or falls below the lower threshold.
Page 205
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands 1.1.36 virtual-cable-test Syntax virtual-cable-test View Ethernet port view Parameter None Description Use the virtual-cable-test command to enable the system to test the cable connected to a specific port and to display the results.
Page 206
Command Manual (For Soliton) – Port Basic Configuration Chapter 1 Port Basic Configuration H3C S3100 Series Ethernet Switches Commands Note: Currently, the device is only capable of testing the cable status and cable length. For the testing items that are currently not supported, “-” is displayed in the corresponding output fields.
Page 207
Command Manual (For Soliton) – Link Aggregation H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Link Aggregation Configuration Commands............1-1 1.1 Link Aggregation Configuration Commands..............1-1 1.1.1 display link-aggregation interface................1-1 1.1.2 display link-aggregation summary................1-2 1.1.3 display link-aggregation verbose................
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands Received LACP Packets: 0 packet(s), Illegal: 0 packet(s) Sent LACP Packets: 0 packet(s) Table 1-1 Description on the fields of the display link-aggregation interface...
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands <Sysname> display link-aggregation summary Aggregation Group Type:D -- Dynamic, S -- Static , M -- Manual Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing...
Page 211
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameter agg-id: Aggregation group ID to be displayed, which ranges from 1 to 28 and must be the ID of an existing aggregation group.
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands Table 1-3 Description on the fields of the display link-aggregation verbose command Field Description Loadsharing type, including Loadsharing and Loadsharing Type Non-Loadsharing...
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands undo lacp enable View Ethernet port view Parameter None Description Use the lacp enable command to enable LACP on the current port.
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands Example # Set the priority of Ethernet1/0/1 to 64. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] interface Ethernet1/0/1 [Sysname-Ethernet1/0/1] lacp port-priority 64 1.1.7 lacp system-priority...
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands Parameter agg-id: Aggregation group ID, in the range of 1 to 28. agg-name: Aggregation group name, a string of 1 to 32 characters.
Page 216
Command Manual (For Soliton) – Link Aggregation Chapter 1 Link Aggregation Configuration H3C S3100 Series Ethernet Switches Commands Description Use the link-aggregation group mode command to create a manual or static aggregation group. Use the undo link-aggregation group command to remove the specified aggregation group.
Command Manual (For Soliton) – Port Isolation Chapter 1 Port Isolation Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 Port Isolation Configuration Commands 1.1 Port Isolation Configuration Commands 1.1.1 display isolate port Syntax display isolate port View Any view...
Page 220
Command Manual (For Soliton) – Port Isolation Chapter 1 Port Isolation Configuration H3C S3100 Series Ethernet Switches Commands Description Use the port isolate command to add an Ethernet port to the isolation group. Use the undo port isolate command to remove an Ethernet port from the isolation group.
Page 221
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Port Security Commands.................... 1-1 1.1 Port Security Commands....................1-1 1.1.1 display mac-address security.................. 1-1 1.1.2 display port-security ....................1-3 1.1.3 mac-address security ....................
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Chapter 1 Port Security Commands 1.1 Port Security Commands 1.1.1 display mac-address security Syntax display mac-address security [ interface interface-type interface-number ] [ vlan...
Page 223
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands 0000-0000-0004 Security Ethernet1/0/20 NOAGED 0000-0000-0001 Security Ethernet1/0/22 NOAGED 0000-0000-0007 Security Ethernet1/0/22 NOAGED 6 mac address(es) found # Display the security MAC address entries for port Ethernet 1/0/20.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Field Description AGING TIME(s) Remaining lifetime of the MAC address entry mac address(es) found Number of matching security MAC addresses 1.1.2 display port-security...
Page 225
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Dot1x logfailure trap is Enabled RALM logon trap is Enabled RALM logoff trap is Enabled RALM logfailure trap is Enabled...
Page 226
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Table 1-2 Description on the fields of the display port-security command Field Description Equipment port security is enabled Port security is enabled on the switch.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Examples # Enable port security; configure the port security mode of Ethernet 1/0/1 as autolearn and create a security MAC address entry for 0001-0001-0001, setting the associated port to Ethernet 1/0/1 and assigning the MAC address to VLAN 1.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Caution: Enabling port security resets the following configurations on the ports to the defaults (as shown in parentheses below): 802.1x (disabled), port access control method (macbased), and port access control...
Page 230
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands disableport-temporarily: Disables a port for a specified period of time after an illegal frame or event is detected on it. You can set the period with the port-security timer disableport command.
Page 231
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Dot1x logon trap is Enabled Dot1x logoff trap is Enabled Dot1x logfailure trap is Enabled RALM logon trap is Enabled...
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Note: You can bring up a port that has been permanently disabled by running the undo shutdown command or disabling port security on the port.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands System View: return to User View with Ctrl+Z. [Sysname] interface Ethernet 1/0/2 [Sysname-Ethernet1/0/2] port-security authorization ignore 1.1.7 port-security max-mac-count Syntax...
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Examples # Set the maximum number of MAC addresses allowed on the port to 100. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Related commands: port-security port-mode. Examples # Configure an OUI value of 00ef-ec00-0000, setting the OUI index to 5. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 237
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Keyword Security mode Description This mode is similar to the macAddressAndUserLoginSecure mode, mac-and-us macAddressAn erlogin-sec dUserLoginSec except that in this mode, more than one user can...
Page 238
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Keyword Security mode Description MAC address authentication and 802.1x authentication can coexist on a port, with 802.1x authentication having higher priority.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Note: Before setting the security mode to autolearn, you need to use the port-security max-mac-count command to configure the maximum number of MAC addresses allowed on the port.
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands Description Use the port-security timer disableport command to set the time during which the system temporarily disables a port. Use undo port-security timer disableport command restore the default time.
Page 241
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands dot1xlogoff: Enables/disables sending traps for 802.1x-authenticated user logoff events. dot1xlogon: Enables/disables sending traps for 802.1x-authenticated user logon events. intrusion: Enables/disables sending traps for detections of intrusion packets.
Page 242
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 1 Port Security Commands # Use the display port-security command to display the related configuration information. <Sysname> display port-security Equipment port-security is enabled Intrusion trap is Enabled...
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 2 Port Binding Commands Chapter 2 Port Binding Commands 2.1 Port Binding Commands 2.1.1 am user-bind Syntax In system view: am user-bind mac-addr mac-address ip-addr ip-address interface interface-type...
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 2 Port Binding Commands Note: An IP address can be bound with only one port at a time. A MAC address can be bound with only one port at a time.
Page 245
Command Manual ( For Soliton ) – Port Security-Port Binding H3C S3100 Series Ethernet Switches Chapter 2 Port Binding Commands If no keyword is specified, this command displays all port bindings. Related commands: am user-bind. Examples # Display all port bindings.
Command Manual (For Soliton) – DLDP H3C S3100 Series Ethernet Switches Chapter 1 DLDP Configuration Commands In Ethernet port view, Use the dldp enable command to enable DLDP for the current port. Use the dldp disable command to disable DLDP for the current port.
Command Manual (For Soliton) – DLDP H3C S3100 Series Ethernet Switches Chapter 1 DLDP Configuration Commands Description Use the dldp authentication-mode command to set the DLDP authentication mode and password. Use the undo dldp authentication-mode to remove the DLDP authentication mode and password.
Command Manual (For Soliton) – DLDP H3C S3100 Series Ethernet Switches Chapter 1 DLDP Configuration Commands Parameter timer-value: Interval for sending DLDP advertisement packets, in the range 1 to 100 (in seconds). Description Use the dldp interval command to set the interval for sending DLDP advertisement packets for all DLDP-enabled ports in the advertisement state.
Command Manual (For Soliton) – DLDP H3C S3100 Series Ethernet Switches Chapter 1 DLDP Configuration Commands Use the dldp reset command to reset the DLDP status of the current port disabled by DLDP. After the dldp reset command is executed, the DLDP status of a port changes from disable to active and DLDP restarts to detect the link status of the fiber cable or copper twisted pair.
Command Manual (For Soliton) – DLDP H3C S3100 Series Ethernet Switches Chapter 1 DLDP Configuration Commands Example # Configure DLDP to shut down the corresponding port on detecting a unidirectional link. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Chapter 1 MAC Address Table Management Configuration Commands Note: This chapter describes the management of static, dynamic, and blackhole MAC address entries.
Page 257
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Mac address aging time: no-aging The output information indicates that dynamic MAC address entries do not age out.
Page 258
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands count: Displays only the total number of the MAC address entries. statistics: Displays statistics of the MAC address entries maintained by the switch.
Page 259
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Field Description The state of the MAC address entry, which can be one of the following: Config static: Indicates a manually configured static address entry.
Page 261
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Syntax Description mac-address [ interface interface-type Removes a specified MAC address interface-number ] vlan vlan-id entry. Description Use the mac-address command to add or modify a MAC address entry.
Page 262
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Description Use the mac-address max-mac-count command to set the maximum number of MAC addresses an Ethernet port can learn.
Page 263
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands By default, a switch learns MAC addresses in any VLAN. Example # Disable the switch from learning MAC address in VLAN 3.
Page 264
Command Manual (For Soliton) – MAC Address Table Management Chapter 1 MAC Address Table H3C S3100 Series Ethernet Switches Management Configuration Commands Examples # Set the aging time of MAC address entries to 500 seconds. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 265
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 MSTP Configuration Commands ................1-1 1.1 MSTP Configuration Commands ..................1-1 1.1.1 active region-configuration ..................1-1 1.1.2 bpdu-drop any ......................1-2 1.1.3 check region-configuration ..................
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Chapter 1 MSTP Configuration Commands 1.1 MSTP Configuration Commands 1.1.1 active region-configuration Syntax active region-configuration View MST region view Parameters None Description Use the active region-configuration command to activate the settings of a multiple spanning tree (MST) region.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands 1.1.2 bpdu-drop any Syntax bpdu-drop any undo bpdu-drop any View Ethernet port view Parameters None Description Use the bpdu-drop any command to enable BPDU dropping on the Ethernet port.
Page 269
MST region-related parameters mentioned above are not consistent with those of another switch in the region. The H3C series support only the MST region name, VLAN-to-MSTI mapping table, and revision level. Switches with the settings of these parameters being the same are assigned to the same MST region.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Table 1-1 Description on the fields of the check region-configuration command Field Description Format selector The selector specified by MSTP Region name The name of the MST region...
Page 271
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands If both an MSTI ID list and a port list are specified, the command displays spanning tree information about the specified MSTIs and the specified ports in the order of MSTI ID.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Field Description Role Port role STP state on the port, which can be forwarding, STP State discarding, and learning. Protection type of the port, which can be one of the...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Field Description Indicates whether the port is connected to a Point-to-point point-to-point link. Config indicates the configured value, and Active indicates the actual value.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands 1.1.7 display stp region-configuration Syntax display stp region-configuration View Any view Parameters None Description Use the display stp region-configuration command to display the activated MST region configuration, including the region name, region revision level, and VLAN-to-STI mappings configured for the switch.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands 1.1.8 display stp root Syntax display stp root View Any view Parameters None Description Use the display stp root command to display information about the root ports in the MSTP region where the switch resides.
Page 278
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands View MST region view Parameters instance-id: ID of an MSTI ranging from 0 to 16. The value of 0 refers to the CIST. vlan-list: List of VLANs. You need to provide this argument in the form of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where &<1-10>...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands View MST region view Parameters name: MST region name to be set for the switch, a string of 1 to 32 characters. Description Use the region-name command to set an MST region name for a switch.
Page 280
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands The spanning tree statistics includes the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs sent/received through one or more specified ports or all ports (note that BPDUs and TCN BPDUs are counted only for CISTs.)
Page 281
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] stp region-configuration [Sysname-mst-region] revision-level 5 1.1.13 stp Syntax stp { enable | disable } undo stp...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands 1.1.14 stp bpdu-protection Syntax stp bpdu-protection undo stp bpdu-protection View System view Parameters None Description Use the stp bpdu-protection command to enable the BPDU guard function on the switch.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands undo stp bridge-diameter View System view Parameters bridgenum: Network diameter to be set for a switched network. This argument ranges from 2 to 7.
Page 284
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands legacy: Specifies the port to recognize and send MSTP packets in the legacy mode. dot1s: Specifies the port to recognize and send MSTP packets in the 802.1s mode.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Note: When the digest snooping feature is enabled on a port, the port turns to the discarding state. That is, the port stops sending BPDU packets. The port is not involved in the STP calculation until it receives BPDU packets from the peer port.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Parameters instance-id: ID of an MSTI ranging from 0 to 16. The value of 0 refers to the CIST. cost: Path cost to be set for the port. The range of the cost argument varies with the standard used for calculating the default path cost of a port as follows: With the IEEE 802.1D-1998 standard selected, the path cost of an Ethernet port...
Page 288
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands View System view Parameters instance-id: MSTI ID ranging from 0 to 16. The value of 0 refers to CIST. With this argument specified, the trap messages sent are only of the MSTI identified by this argument.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Caution: With the loop guard function enabled, the root guard function and the edge port configuration are mutually exclusive. Examples # Configure Ethernet 1/0/1 as a non-edge port.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Caution: Disabling MSTP on ports may result in loops. Related commands: stp mode, stp. Examples # Enable MSTP on Ethernet 1/0/1 in system view.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Legacy mode. Ports in this mode recognize/send packets in legacy format. 802.1s mode. Ports in this mode recognize/send packets in dot1s format. A port acts as follows according to the format of MSTP packets forwarded by a peer switch or router.
Page 293
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Parameters interface-list: Ethernet port list. You can specify multiple Ethernet ports by providing this argument in the format of interface-list ={ interface-type interface-number [ to interface-type interface-number ] } &<1-10>, where &<1-10>...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Note: When the digest snooping feature is enabled on a port, the port turns to the discarding state. That is, the port stops sending BPDU packets. The port is not involved in the STP calculation until it receives BPDU packets from the peer port.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands interface-type interface-number ] } &<1-10>, where &<1-10> means that you can provide up to 10 port indexes/port index ranges for this argument. instance-id: MSTI ID ranging from 0 to 16. The value of 0 refers to the CIST.
Page 296
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands View System view Parameters interface-list: Ethernet port list. You can specify multiple Ethernet ports by providing this argument in the form of interface-list = { interface-type interface-number [ to interface-type interface-number ] } &<1-10>, where &<1-10>...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] stp interface Ethernet 1/0/1 loop-protection 1.1.27 stp interface mcheck Syntax stp [ interface interface-list ] mcheck...
Page 299
MSTP, the upstream designated port fails to change their states rapidly. The rapid transition feature is developed on the H3C series switches to avoid this case. When an H3C series switch running MSTP is connected in the upstream direction to a...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands If a port is configured to connect to a point-to-point link (or non-point-to-point link), the port adopts the same configuration in all spanning tree instances.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands forwarded along different physical paths, so as to implement VLAN-based load balancing. Changing port priorities results in port role recalculation and may cause state transition.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands non-designated port, it turns to the discarding state and stops forwarding packets (as if it is disconnected from the link). Related commands: stp root-protection.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands The larger the packetnum argument is, the more packets a port can transmit in each hello time, while the more switch resources are occupied. Configure the packetnum...
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands designated port and the port turns to the discarding state, that is, the port does not forward packets and thereby loops can be prevented.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands The switches that are not root bridges in an MST region adopt the maximum hop settings of the root bridge. Examples # Set the maximum hop count of the current MST region to 35.
RSTP in the way to implement rapid transition on designated ports. When a switch of this kind operates as the upstream switch of an H3C series switch running MSTP, the upstream designated port fails to change their states rapidly.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Related commands: stp interface point-to-point. Examples # Configure the link connected to Ethernet 1/0/3 as a point-to-point link. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Parameters None Description Use the stp portlog all command to enable log and trap message output for the ports of all instances. Use the undo stp portlog all command to disable this function.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands If you do not specify the instance-id argument, the two commands apply to only the CIST. Examples # Set the bridge priority of the switch in MSTI 1 to 4,096.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Caution: You can configure only one root bridge for an MSTI and can configure one or more secondary root bridges for an MSTI. Specifying multiple root bridges for an MSTI causes unpredictable spanning tree calculation results.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands If you do not specify the instance-id argument, the two commands apply to only the CIST. You can configure one or more secondary root bridges for an MSTI. If the switch operating as the root bridge fails or is turned off, the secondary root bridge with the least MAC address becomes the root bridge.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Because of configuration errors or malicious attacks, the valid root bridge in the network may receive configuration BPDUs with their priorities higher than that of the root bridge, which causes new root bridge to be elected and network topology jitter to occur.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands entries frequently, which may affect spanning tree calculation, occupy large amount of bandwidth and increase switch CPU utilization. With the TC-BPDU attack guard function enabled, a switch performs a removing operation upon receiving a TC-BPDU and triggers a timer (set to 10 seconds by default) at the same time.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands operation for limited times (up to six times by default) regardless of the number of the TC-BPDUs it receives. Such a mechanism prevents a switch from being busy in removing the MAC address table and ARP entries.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands period to synchronize with the state transition of the remote switches. This state transition period is determined by the forward delay configured on the root bridge.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands switch becomes a root bridge, it regularly sends BPDUs at the interval specified by the hello time you have configured on it. The other none-root-bridge switches adopt the interval specified by the hello time.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands The max age is meaningless to MSTIs. The max age configured for the root bridge of the CIST applies to all switches operating on the CIST, including the root bridge.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands a period three times of the hello time and then initiates the spanning tree recalculation process. Spanning trees may be recalculated even in a steady network if an upstream switch is always busy.
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Examples # Set the maximum number of configuration BPDUs that can be transmitted through Ethernet 1/0/1 in each hello time to 15. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 327
Command Manual (For Soliton) – MSTP H3C S3100 Series Ethernet Switches Chapter 1 MSTP Configuration Commands Related commands: check region-configuration, revision-level, region-name, active region-configuration. Examples # Map VLANs to MSTIs, with the modulo being 16. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 IGMP Snooping Configuration Commands Note: The feature Suppressing Flooding of Unknown Multicast Traffic in a VLAN is added in the software version Release 2301. The related command is igmp-snooping nonflooding-enable.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Ethernet1/0/11 Dynamic Router port(s): Ethernet1/0/22 IP group(s):the following ip group(s) match to one mac group. IP group address:228.0.0.1 Static host port(s): Ethernet1/0/23 Dynamic host port(s):...
Page 332
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the display igmp-snooping statistics command to display IGMP Snooping statistics. This command displays the following information: the numbers of the IGMP general...
Page 334
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands View System view, Ethernet port view Parameters vlan vlan-list: Specifies a VLAN list. With the vlan-list argument, you can provide one or more individual VLAN IDs (in the form of vlan-id) and/or one or more VLAN ID ranges (in the form of vlan-id1 to vlan-id2, where vlan-id2 must be greater than vlan-id1).
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands 1.1.7 igmp-snooping group-limit Syntax igmp-snooping group-limit limit [ vlan vlan-list ] [ overflow-replace ] undo igmp-snooping group-limit [ vlan vlan-list ] View Ethernet port view Parameters limit: Maximum number of multicast groups the port can join, in the range of 1 to 512.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Note: To prevent bursting traffic in the network or performance deterioration of the device caused by excessive multicast groups, you can set the maximum number of multicast groups that the switch should process.
Page 338
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands By default, no multicast group filter is configured. The ACL rule defines a multicast address or a multicast address range (for example 224.0.0.1 to 239.255.255.255) and is used to: Allow the port(s) to join only the multicast group(s) defined in the rule by a permit statement.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands [Sysname] interface Ethernet 1/0/1 [Sysname-Ethernet1/0/1] igmp-snooping group-policy 2000 vlan 2 [Sysname-Ethernet1/0/1] quit # Configure a multicast group filter to allow receivers attached to Ethernet 1/0/2 to access the multicast streams for any groups except groups 225.0.0.0 to 225.0.0.255.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Related commands: display igmp-snooping configuration. Examples # Set the aging time of multicast member ports to 300 seconds. <Sysname>system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Note: IGMP Snooping must be enabled before you enable the function of unknown multicast flooding suppression. If the function of dropping unknown multicast packets is enabled, you cannot enable the IGMP Snooping non-flooding function.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Parameters version-number: IGMP Snooping version, in the range of 2 to 3 and defaulting to 2. Description Use the igmp-snooping version command to configure the IGMP Snooping version in the current VLAN.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Examples # Configure IGMP general and group-specific query messages to be transmitted in VLAN 2. <Sysname>system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands Caution: Before configuring a port as a simulated host, enable IGMP Snooping in VLAN view first. The current port must belong to the specified VLAN; otherwise this configuration does not take effect.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands exceed 10. For port types and port numbers, refer to the parameter description in the “Port Basic Configuration” part in this manual. Description...
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands By default, no port is configured as a static multicast group member port. Examples # Configure port Ethernet1/0/1 in VLAN 2 as a static member port for multicast group 225.0.0.1.
Command Manual (For Soliton) – Multicast Chapter 1 IGMP Snooping Configuration H3C S3100 Series Ethernet Switches Commands View Ethernet port view Parameters vlan-id: VLAN ID the port belongs to, in the range of 1 to 4094. Description Use the multicast static-router-port vlan command to configure the current port in the specified VLAN as a static router port.
Command Manual (For Soliton) – Multicast Chapter 2 Common Multicast Configuration H3C S3100 Series Ethernet Switches Commands Table 2-1 display mac-address multicast static command output description Field Description MAC ADDR MAC address VLAN ID The VLAN in which the MAC address is manually added...
Command Manual (For Soliton) – Multicast Chapter 2 Common Multicast Configuration H3C S3100 Series Ethernet Switches Commands 2.1.4 mac-address multicast vlan Syntax mac-address multicast mac-address vlan vlan-id undo mac-address multicast [ [ mac-address ] vlan vlan-id ] View Ethernet port view Parameters mac-address: Multicast MAC address in the form of H-H-H.
Page 356
Command Manual (For Soliton) – Multicast Chapter 2 Common Multicast Configuration H3C S3100 Series Ethernet Switches Commands Parameters interface interface-list: Enables the multicast source port suppression feature on the specified port or ports. With the interface-list argument, you can define one or more...
Command Manual (For Soliton) – Multicast Chapter 2 Common Multicast Configuration H3C S3100 Series Ethernet Switches Commands 2.1.6 unknown-multicast drop enable Syntax unknown-multicast drop enable undo unknown-multicast drop enable View System view Parameters None Description Use the unknown-multicast drop enable command to enable the function of dropping unknown multicast packets.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Proxy logoff checker is disabled EAD Quick Deploy is enabled Configuration: Transmit Period 30 s, Handshake Period 15 s ReAuth Period 3600 s,...
Page 362
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Ethernet1/0/2 …… Table 1-1 Description on the fields of the display dot1x command Field Description Equipment 802.1X protocol is 802.1x protocol (802.1x for short) is enabled on the enabled switch.
Page 363
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Field Description The maximum number of times that a switch can The maximal retransmitting send authentication request packets to a supplicant times system...
Page 364
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Field Description … Information omitted here 1.1.2 dot1x Syntax dot1x [ interface interface-list ] undo dot1x [ interface interface-list ] View System view, Ethernet port view...
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Note: Configurations of 8021.x and the maximum number of MAX addresses that can be learnt are mutually exclusive. That is, when 802.1x is enabled for a port, it cannot also have the maximum number of MAX addresses to be learned configured at the same time.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Use the undo dot1x authentication-method command to revert to the default 802.1x authentication method. The default 802.1x authentication method is CHAP. PAP applies a two-way handshaking procedure. In this method, passwords are transmitted in plain text.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands Description Use the dot1x dhcp-launch command to specify an 802.1x-enabled switch to launch the process to authenticate a supplicant system when the supplicant system applies for a dynamic IP address through DHCP.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands switch receives response from port after sending EAP-Request/Identity packets to the port for the maximum number of times, the switch will add the port to the guest VLAN.
Handshaking packets need the support of the H3C-proprietary client. They are used to test whether or not a user is online. As clients that are not of H3C do not support the online user handshaking function, switches cannot receive handshaking acknowledgement packets from them in handshaking periods.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands interface-list: Ethernet port list, in the form of interface-list= { interface-type interface-number [ to interface-type interface-number ] } &<1-10>, in which interface-type specifies the type of an Ethernet port and interface-number is the number of the port.
Page 372
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands EAPoL packets can be exchanged between the switch and the hosts. And the hosts connected to the port are authorized to access the network resources after the hosts pass the authentication.
Use the undo dot1x quiet-period command to disable the quiet-period timer. When a user fails to pass the authentication, the authenticator system (such as a H3C series Ethernet switch) will stay quiet for a period (determined by the quiet-period timer) before it performs another authentication.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands 1.1.12 dot1x retry Syntax dot1x retry max-retry-value undo dot1x retry View System view Parameter max-retry-value: Maximum number of times that a switch sends authentication request packets to a user.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands View System view Parameter max-retry-version-value: Maximum number of times that a switch sends version request packets to a user. This argument ranges from 1 to 10.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands interface-type specifies the type of an Ethernet port and interface-number is the number of the port. The string “&<1-10>” means that up to 10 port lists can be provided.
Page 378
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ] View System view, Ethernet port view Parameter logoff: Disconnects a user upon detecting it logging in through a proxy or through multiple network adapters.
802.1x client to ask the latter to disable the use of multiple network adapters, proxies, and IE proxy after the user passes the authentication. Note: The 802.1x proxy checking function needs the cooperation of H3C's 802.1x client program. The proxy checking function takes effect only after the client version checking function is enabled on the switch (using the dot1x version-check command).
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands The switch sends a unicast request/identity packet to a supplicant system and then triggers the transmission timer. The switch sends another request/identity packet to the supplicant system if it does not receive the reply packet from the supplicant system when this timer times out.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands View System view Parameter reauth-period reauth-period-value: Specifies re-authentication interval, in seconds. After this timer expires, the switch initiates 802.1x re-authentication. The value of the reauth-period-value argument ranges from 60 to 7,200.
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands checking for specified Ethernet ports. By default, 802.1x client version checking is disabled on all the Ethernet ports. In system view: If you do not provide the interface-list argument, these two commands apply to all the ports of the switch.
Page 384
Command Manual (For Soliton) – 802.1x-System Guard H3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands If the interface-list argument is specified, this command clears the 802.1x statistics on the specified ports. Related command: display dot1x. Example # Clear 802.1x statistics on Ethernet 1/0/1 port.
Command Manual (For Soliton) – 802.1x-System Guard Chapter 2 Quick EAD Deployment H3C S3100 Series Ethernet Switches Configuration Commands [Sysname] dot1x free-ip 192.168.19.23 24 2.1.2 dot1x timer acl-timeout Syntax dot1x timer acl-timeout acl-timeout-value undo dot1x timer acl-timeout View System view Parameters acl-timeout-value: ACL timeout period (in minutes), in the range of 1 to 1440.
Page 387
Command Manual (For Soliton) – 802.1x-System Guard Chapter 2 Quick EAD Deployment H3C S3100 Series Ethernet Switches Configuration Commands Use the undo dot1x url command to remove the configuration. By default, no URL is configured for HTTP redirection. Related commands: dot1x configuration commands.
Command Manual (For Soliton) – 802.1x-System Guard Chapter 3 HABP Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display habp traffic command to display the statistics on HABP packets. Example # Display the statistics on HABP packets. <Sysname> display habp traffic...
Command Manual (For Soliton) – 802.1x-System Guard Chapter 3 HABP Configuration H3C S3100 Series Ethernet Switches Commands If an 802.1x-enabled switch does not have HABP enabled, it cannot manage the switches attached to it. So, you need to enable HABP on specific switches in a network with 802.1x enabled.
Command Manual (For Soliton) – 802.1x-System Guard Chapter 4 System-Guard Configuration H3C S3100 Series Ethernet Switches Commands Field Description Port Number of the port being attacked MAC address Source MAC address of the attack packet IP address Source IP address of the attack packet...
Command Manual (For Soliton) – 802.1x-System Guard Chapter 4 System-Guard Configuration H3C S3100 Series Ethernet Switches Commands Field Description The threshold for the number of packets when an Detect Threshold attack is detected Isolated Time The length of the isolation after an attack is detected...
Command Manual (For Soliton) – 802.1x-System Guard Chapter 4 System-Guard Configuration H3C S3100 Series Ethernet Switches Commands View System view Parameter None Description Use the system-guard enable command to enable the system-guard feature. Use the undo system-guard enable command to disable the system-guard feature.
Command Manual (For Soliton) – 802.1x-System Guard Chapter 4 System-Guard Configuration H3C S3100 Series Ethernet Switches Commands system-guard function is to be applied to. A switch checks the ports with the system-guard function applied regularly for attacked ports. Use the undo system-guard permit command to disable the system-guard function for specified ports.
Page 404
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.1.4 attribute Syntax attribute { ip ip-address | mac mac-address | idle-cut second | access-limit max-user-number | vlan vlan-id | location { nas-ip ip-address port port-number | port...
Page 405
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Create local user user1 and set the IP address attribute of user1 to 10.110.50.1, allowing only the user using the IP address of 10.110.50.1 to use the account user1 for authentication.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands If you execute the authentication radius-scheme radius-scheme-name local command, the local scheme is used as the secondary authentication scheme in case no RADIUS server is available. That is, if the communication between the switch and a RADIUS server is normal, no local authentication will be performed;...
Page 407
HWTACACS scheme must exist. Note: The S3100 series switches adopt hierarchical protection for command lines so as to inhibit users at lower levels from using higher level commands to configure the switches. For details about configuring a HWTACACS authentication scheme for low-to-high user level switching, refer to Switching User Level in the Command Line Interface Operation.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters string: Number or descriptor of the authorized VLAN for the current user, a string of 1 to 32 characters. If it is a numeral string and there is a VLAN with the number configured, it specifies the VLAN.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands access-type { dot1x | mac-authentication }: Cuts down user connections of a specified access type. dot1x is used to cut down all 802.1x user connections, and mac-authentication is used to cut down all MAC authentication user connections.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Display information about all user connections. <Sysname> display connection ------------------unit 1------------------------ Index=40 , Username=user1@domain1 MAC=000f-3d80-4ce5 , IP=0.0.0.0 On Unit 1: Total 1 connections matched, 1 listed.
Page 413
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the display domain command to display configuration information about one specific or all ISP domains. Related commands: access-limit, domain, scheme, state. Examples # Display configuration information about all ISP domains.
Page 416
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View System view Parameters isp-name: Name of an ISP domain, a string of up to 128 characters. This string cannot contain the following characters: /\:*?<>|. If the domain name includes one or more “~”...
Page 418
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.1.15 idle-cut Syntax idle-cut { disable | enable minute flow } View ISP domain view Parameters disable: Disables the idle-cut function for the domain.
Page 419
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View Local user view Parameters level: Privilege level to be set for the user. It is an integer ranging from 0 to 3. Description Use the level command to set the privilege level of the user.
Page 420
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View System view Parameters user-name: Local username, a string of up to 184 characters. This string cannot contain the following characters: /:*?<>. It can contain no more than one @ character. The pure username (user ID, that is, the part before @) cannot be longer than 55 characters, and the domain name (the part behind @) cannot be longer than 128 characters.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.1.18 local-user password-display-mode Syntax local-user password-display-mode { cipher-force | auto } undo local-user password-display-mode View System view Parameters cipher-force: Adopts the forcible cipher mode so that all local users' the passwords will be displayed in cipher text.
Page 422
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters limit: Time limit in minutes, ranging from 1 to 60. The switch will send prompt messages at regular intervals to users whose remaining online time is less than this limit.
Page 423
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands By default, a VLAN uses its VLAN ID (like VLAN 0001) as its assigned VLAN name. This command is used in conjunction with the dynamic VLAN assignment function. For details about dynamic VLAN assignment, refer to the vlan-assignment-mode command.
Page 424
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands With the local-user password-display-mode cipher-force command configured, the password is always displayed in cipher text, regardless of the configuration of the password command. With the cipher keyword specified, a password of up to 16 characters in plain text...
Page 425
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Configure the ISP domain "aabbcc.net" to use the RADIUS scheme "extended". <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] domain aabbcc.net New Domain added.
Page 426
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands If you execute the scheme hwtacacs-scheme hwtacacs-scheme-name local command, the local scheme is used as the secondary scheme in case no TACACS server is available. That is, if the communication between the switch and a TACACS server is normal, no local authentication is performed;...
Page 427
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Use the self-service-url disable command to disable the self-service server location function Use the undo self-service-url command to restore the default state of this function.
Page 428
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands telnet: Authorizes the user to access the Telnet service. ssh: Authorizes the user to access the SSH service. terminal: Authorizes the user to access the terminal service (that is, allows the user to log into the switch through the Console port).
Page 429
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the state command to set the status of current ISP domain (in ISP domain view) or current local user (in local user view).
Page 430
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the vlan-assignment-mode command to set the VLAN assignment mode (integer or string) on the switch. By default, the VLAN assignment mode is integer, that is, the switch supports its RADIUS authentication server to assign integer VLAN IDs.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Server Dynamic VLAN assignment mode You can determine the assignment FreeRADIUS mode by attribute value (for example, 100 is integer; “100” is string). Shiva Access Manager...
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the accounting optional command to open the accounting-optional switch. Use the undo accounting optional command to close the accounting-optional switch so that the system performs accounting for users unconditionally.
Page 433
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands interval: Interval to send Accounting-On messages (in seconds), ranging from 1 to 30 and defaulting to 3. Description Use the accounting-on enable command to enable the user re-authentication at restart function.
Note: After configuring the accounting-on enable command, you need to execute the save command so that the command can take effect when the switch restarts. This function requires the cooperation of the H3C CAMS system. Related commands: nas-ip. Examples # Enable the user re-authentication at restart function for the RADIUS scheme named radius1.
Page 435
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Set the MAC address format of the Calling-Station-Id field to XX-XX-XX-XX-XX-XX, in uppercase. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands [Sysname] radius scheme radius1 New Radius scheme [Sysname-radius-radius1] data-flow-format data kilo-byte packet kilo-packet 1.2.5 display local-server statistics Syntax display local-server statistics View Any view...
Page 437
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the display radius scheme command to display configuration information about one specific or all RADIUS schemes Related commands: radius scheme. Examples # Display configuration information about all RADIUS schemes.
Page 438
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Field Description IP address/port number of the primary Primary Auth IP/Port authentication server IP address/port number of the primary Primary Acct IP/Port accounting server...
Page 441
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands display all the buffered stop-accounting requests generated from start-time to stop-time. user-name user-name: Displays the buffered stop-accounting requests of a specified user. Here, user-name is a string of up to 184 characters.
Page 442
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters accounting: Sets a shared key for RADIUS accounting messages. authentication: Sets a shared key for RADIUS authentication/authorization messages. string: Shared key to be set, a string of up to 16 characters.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.2.10 local-server Syntax local-server enable undo local-server View System view Parameters None Description Use the local-server enable command to enable the UDP ports for local RADIUS services.
Page 444
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters nas-ip ip-address: Specifies the IP address of a network access server (NAS) that can use the local RADIUS services. Here, ip-address is in dotted decimal notation.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands undo nas-ip View RADIUS scheme view Parameters ip-address: Source IP address for RADIUS messages, an IP address of this device. This address can neither be the all 0's address nor be a Class-D address.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands undo primary accounting View RADIUS scheme view Parameters ip-address: IP address of the primary accounting server to be used, in dotted decimal notation. port-number: UDP port number of the primary accounting server, ranging from 1 to 65535.
Page 447
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters ip-address: IP address of the primary authentication/authorization server to be used, in dotted decimal notation. port-number: UDP port number of the primary authentication/authorization server, ranging from 1 to 65535.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands neither be the all 0's address nor be a Class-D address. Description Use the radius nas-ip command to set the source IP address of outgoing RADIUS messages.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters radius-scheme-name: Name of the RADIUS scheme to be created, a string of up to 32 characters. Description Use the radius scheme command to create a RADIUS scheme and enter its view.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View System view Parameters authentication-server-down: Enables/disables the switch to send trap messages when a RADIUS authentication server turns down. accounting-server-down: Enables/disables the switch to send trap messages when a RADIUS accounting server turns down.
Page 452
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters None Description Use the reset radius statistics command to clear RADIUS message statistics. Related commands: display radius scheme. Examples # Clear RADIUS message statistics.
Page 453
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Delete the stop-accounting requests buffered for user user0001@aabbcc.net. <Sysname> reset stop-accounting-buffer user-name user0001@aabbcc.net # Delete the stop-accounting requests buffered from 0:0:0 08/31/2002 to 23:59:59 08/31/2002.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Set the maximum number of RADIUS request transmission attempts for RADIUS scheme radius1 to five. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 455
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands A real-time account request may be transmitted multiple times in an accounting attempt (the maximum number of transmission attempts is set by the retry command in RADIUS scheme view).
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the retry stop-accounting command to set the maximum number of transmission attempts of a stop-accounting request buffered due to no response. Use the undo retry stop-accounting command to restore the default maximum number of transmission attempts of a buffered stop-accounting request.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the secondary accounting command to set the IP address and port number of the secondary RADIUS accounting server to be used by the current scheme.
Page 458
Related commands: radius scheme. Examples # Configure the switch to support H3C's RADIUS server in RADIUS scheme radius1. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] radius scheme radius1...
Page 459
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands New Radius scheme [Sysname-radius-radius1] server-type extended 1.2.27 state Syntax state { primary | secondary } { accounting | authentication } { block | active }...
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Related commands: radius scheme, primary authentication, secondary authentication, primary accounting, secondary accounting. Examples # Set the status of the secondary authentication server in RADIUS scheme radius1 to active.
Page 461
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # In RADIUS scheme radius1, enable the switch to buffer the stop-accounting requests that get no response from the servers. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Related commands: radius scheme, retry. Examples # Set the timeout time of the response timeout timer for RADIUS scheme radius1 to 5 seconds. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 463
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.2.31 timer realtime-accounting Syntax timer realtime-accounting minutes undo timer realtime-accounting View RADIUS scheme view Parameters minutes: Real-time accounting interval, in minutes. It ranges from 3 to 60 and must be a multiple of 3.
Page 464
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Set the real-time accounting interval of RADIUS scheme radius1 to 51 minutes. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 465
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Set the response timeout time in RADIUS scheme radius1 to five seconds. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands For an 802.1x user, if you have specified to use EAP authentication, the switch will encapsulate and send the contents from the client directly to the server. In this case, the configuration of the user-name-format command is not effective.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Related commands: display hwtacacs. Examples # Specify to measure data and packets in data flows to TACACS servers in kilo-bytes and kilo-packets respectively in HWTACACS scheme hwt1.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands undo hwtacacs nas-ip View System view Parameters ip-address: Source IP address to be set, an IP address of this device. This address can neither be the all 0's address nor be a Class D address.
Page 470
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Parameters hwtacacs-scheme-name: HWTACACS scheme name, a string of 1 to 32 characters. Description Use the hwtacacs scheme command to create an HWTACACS scheme and enter its view.
Page 471
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Examples # Use hello as the shared key for HWTACACS accounting messages in HWTACACS scheme hwt1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands undo primary authorization View HWTACACS scheme view Parameters ip-address: IP address of the primary authorization server to be used, a valid unicast address in dotted decimal notation.
Page 475
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands authentication: Clears HWTACACS authentication statistics. authorization: Clears HWTACACS authorization statistics. all: Clears all HWTACACS statistics. Description Use the reset hwtacacs statistics command to clear HWTACACS statistics.
Page 476
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View HWTACACS scheme view Parameters retry-times: Maximum number of transmission attempts of a stop-accounting request, ranging from 1 to 300. Description Use the retry stop-accounting command to enable the stop-accounting request retransmission function and set the maximum number of attempts to transmit a stop-accounting request.
Page 477
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands Description Use the secondary accounting command to set the IP address and port number of the secondary HWTACACS accounting server to be used by the current scheme.
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands and 49 respectively. Note that: You are not allowed to set the same IP address for both primary and secondary authentication servers. If you do this, your setting will fail.
Page 479
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands If you re-execute the command, the new setting will overwrite the old one. You can remove an authorization server setting only when there is no active TCP connection that is sending authorization messages to the server.
Page 480
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands 1.3.18 timer realtime-accounting Syntax timer realtime-accounting minutes undo timer realtime-accounting View HWTACACS scheme view Parameters minutes: Real-time accounting interval, in minutes. It ranges from 3 to 60 and must be a multiple of 3.
Page 481
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] hwtacacs scheme hwt1 [Sysname-hwtacacs-hwt1] timer realtime-accounting 51 1.3.19 timer response-timeout Syntax timer response-timeout seconds...
Page 482
Command Manual (For Soliton) – AAA H3C S3100 Series Ethernet Switches Chapter 1 AAA Configuration Commands View HWTACACS scheme view Parameters with-domain: Specifies to include ISP domain names in the usernames to be sent to TACACS server. without-domain: Specifies to exclude ISP domain names from the usernames to be sent to TACACS server.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Chapter 1 MAC Address Authentication Configuration Commands 1.1 MAC Address Authentication Basic Function Configuration Commands 1.1.1 display mac-authentication Syntax display mac-authentication [ interface interface-list ]...
Page 487
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Silent Mac User info: MAC ADDR From Port Port Index 0016-e0be-e201 Ethernet1/0/2 1(vlan:1) --- 1 silent mac address(es) found. ---...
Page 488
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Field Description Server timeout timer, which sets the timeout time for the Server response timeout connection between a switch and the RADIUS server.
Page 489
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands 1.1.2 mac-authentication Syntax mac-authentication undo mac-authentication View System view, Ethernet port view Parameters None Description Use the mac-authentication command to enable MAC address authentication globally or on the current port.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Description Use the mac-authentication authpassword command to set a password for MAC address authentication when the user name in fixed mode is used.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands 1.1.8 mac-authentication domain Syntax mac-authentication domain isp-name undo mac-authentication domain View System view Parameters isp-name: ISP domain name, a string of 1 to 128 characters. Note that this argument cannot be null and cannot contain these characters: “/”, “:”, “*”, “?”, “<”, and “>”.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Parameters offline-detect-value: Offline detect timer (in seconds) setting. This argument ranges from 1 to 65,535 and defaults to 300. The offline detect timer sets the time interval for a switch to test whether a user goes offline.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Description Use the reset mac-authentication command to clear the MAC address authentication statistics. With the interface keyword specified, the command clears the MAC address authentication statistics of the specified port.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Caution: If more than one client are connected to a port, you cannot configure a Guest VLAN for this port.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands Description Use the mac-authenticiaon intrusion-mode block-mac enable command to enable the quiet MAC function on a port. When this function is enabled, the MAC address connected to this port will be set as a quiet MAC address if its authentication fails.
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands By default, the maximum number of MAC address authentication users allowed to access a port is 256. Caution: If both the limit on the number of MAC address authentication users and the limit on...
Page 500
Command Manual (For Soliton) – MAC Address Authentication Chapter 1 MAC Address Authentication H3C S3100 Series Ethernet Switches Configuration Commands passes the authentication, the port will leave the guest VLAN and return to the initial VLAN configured for it. Use the undo mac-authentication timer guest-vlan-reauth command to restore the re-authentication interval to the default value.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Description Use the arp check enable command to enable the ARP entry checking function on a switch. Use the undo arp check enable command to disable the ARP entry checking function.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands By default, ARP attack detection is disabled on the switch. Examples # Enable ARP attack detection on all ports in VLAN 1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands View System view Parameters None Description Use the arp protective-down recover enable command to enable the port state auto-recovery function on the switch. Use the undo arp protective-down recover enable command to disable the port state auto-recovery function of a switch.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands By default, when the port state auto-recovery function is enabled, the recovery interval is 300 seconds. Note that: You need to enable the port state auto-recovery feature before you can configure the auto-recovery interval.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Examples # Set the maximum ARP packet receiving rate on Ethernet 1/0/11 to 100 pps. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Parameters ip-address: IP address contained in the ARP mapping entry to be created/removed. mac-address: MAC address contained in the ARP mapping entry to be created, in the format of H-H-H.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands View System view Parameters aging-time: Aging time (in minutes) of the dynamic ARP entries. This argument ranges from 1 to 1,440. Description Use the arp timer aging command to configure the aging time for dynamic ARP entries.
Page 511
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Examples # Display all the ARP entries. <Sysname> display arp Type: S-Static D-Dynamic IP Address MAC Address VLAN ID Port Name / AL ID Aging Type 10.2.72.162...
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Parameters dynamic: Displays dynamic ARP entries. static: Displays static ARP entries. |: Uses a regular expression to specify the ARP entries to be displayed. For detailed information about regular expressions, refer to Configuration File Management Command in this manual.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands View Any view Parameters dynamic: Counts the dynamic ARP entries. static: Counts the static ARP entries. |: Uses a regular expression as the match criterion. For detailed information about regular expressions, refer to Configuration File Management Command in this manual.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Description Use the display arp detection statistics interface command to display the statistics of ARP attack detection state, ARP trusted port state, and discarded invalid ARP packets ( those failed to pass ARP attack detection) on the specified port.
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Examples # Display the setting of the ARP aging time. <Sysname> display arp timer aging Current ARP aging time is 20 minute(s)(default) The displayed information shows that the ARP aging time is set to 20 minutes.
Page 516
Command Manual (For Soliton) – ARP H3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration Commands Parameters dynamic: Clears dynamic ARP entries. static: Clears static ARP entries. interface interface-type interface-number: Clears ARP entries of the specified port. Description Use the reset arp command to clear specific ARP entries.
Page 517
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 DHCP Snooping Configuration Commands.............. 1-1 1.1 DHCP Snooping Configuration Commands ..............1-1 1.1.1 dhcp-snooping......................1-1 1.1.2 dhcp-snooping information enable ................1-2 1.1.3 dhcp-snooping information format................
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 1 DHCP Snooping Configuration Commands Description Use the dhcp-snooping information format command to configure the storage format of non-user-defined Option 82 as HEX or ASCII. By default, the Option 82 is in HEX format.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 1 DHCP Snooping Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] dhcp-snooping information packet-format standard 1.1.5 dhcp-snooping information remote-id Syntax dhcp-snooping information remote-id { sysname | string string }...
Page 522
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 1 DHCP Snooping Configuration Commands Parameters drop: If a packet contains Option 82, DHCP snooping drops this packet. keep: If a packet contains Option 82, DHCP snooping keeps and forwards this packet.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 1 DHCP Snooping Configuration Commands 1.1.10 display dhcp-snooping Syntax display dhcp-snooping [ unit unit-id ] View Any view Parameters unit unit-id: Indicates the number of the device whose DHCP-snooping information needs to be viewed, the value is 1.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 1 DHCP Snooping Configuration Commands Parameters None Description Use the display dhcp-snooping trust command to display the (enabled/disabled) state of the DHCP snooping function and the trusted ports.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 2 Rate Limit Configuration Commands View System view Parameters interval: Interval (in seconds) for a port disabled due to the DHCP traffic exceeding the set threshold to be brought up again. This argument ranges from 10 to 86,400.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 2 Rate Limit Configuration Commands Description Use the dhcp rate-limit command to configure the maximum rate of DHCP traffic for the port. When the number of DHCP packets received on the port per second exceeds the specified threshold, the switch will discard the exceeding DHCP packets.
Page 533
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 2 Rate Limit Configuration Commands By default, the function to limit DHCP traffic is disabled on an Ethernet port. That is, DHCP traffic passing through an Ethernet port is not limited.
Description Use the display dhcp client command to display the information about the address allocation of DHCP clients. Note that S3100 series Ethernet switches that operate as DHCP clients support a maximum lease duration of 24 days currently. Examples # Display the information about the address allocation of DHCP clients.
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 3 DHCP/BOOTP Client Configuration Table 3-1 Description on the fields of the display dhcp client command Field Description VLAN interface operating as a DHCP Vlan-interface1 client to obtain an IP address...
Command Manual (For Soliton) – DHCP H3C S3100 Series Ethernet Switches Chapter 3 DHCP/BOOTP Client Configuration Note: To improve security and avoid malicious attacks to the unused sockets, S3100 Ethernet switches provide the following functions: UDP ports 67 and 68 used by DHCP are enabled/disabled only when DHCP is enabled/disabled.
Page 541
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Description Use the acl command to define an ACL and enter the corresponding ACL view. Use the undo acl command to remove all the rules of the specified ACL or all the ACLs.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Parameters text: Description string to be assigned to an ACL, a string of 1 to 127 characters. Blank spaces and special characters are acceptable.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Description Use the display acl command to display the configuration information of a specified or all ACLs. Note that if you specify the match order of an ACL when configuring the ACL, this command will display the rules of the ACL in the specified match order.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands <Sysname> display acl remaining entry Resource Total Reserved Configured Remaining Start Type Number Number Number Number Port Name Port Name -------------------------------------------------------------------------- Rule 1024 1010...
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands 1.1.7 display time-range Syntax display time-range { all | time-name } View Any view Parameters all: Displays all time ranges. time-name: Name of a time range, a string of 1 to 32 characters that starts with a to z or A to Z.
Page 547
By default, no IPv6 ACL template is configured. Note that: Only one IPv6 ACL is supported on an H3C S3100 switch. To specify the src-port, dest-port, icmpv6-type or icmpv6-code keyword in the command, you need to specify the ip-protocol keyword at first.
Page 548
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Example # Configure an IPv6 ACL template to match the source address and destination address fields in IPv6 packets. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands The link-group acl-number keyword specifies a Layer 2 ACL. The acl-number argument ranges from 4000 to 4999. The user-group acl-number keyword specifies an IPv6 ACL. The acl-number argument ranges from 5000 to 5999.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands inbound: Specifies to filter packets received by the ports in the VLAN. acl-rule: ACL rules to be applied, which can be a combination of the rules of multiple...
Page 551
Removes the settings concerning source address in the ACL rule. time-range: Removes the settings concerning time range in the ACL rule. Note: When you assign basic ACLs to the hardware for packet filtering, the fragment keyword is not supported on a H3C S3100 Series Ethernet switch. 1-12...
Page 552
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Description Use the rule command to define an ACL rule. Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands After completing the above configuration, you can use the display acl command to view the configuration information of the ACLs. 1.1.12 rule (for Advanced ACLs)
Page 554
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Arguments/Keyw Type Function Description ords The dest-addr dest-wildcard arguments specify the destination address of the packets, expressed in dotted Specifies the destination decimal notation. You can...
Page 555
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Table 1-8 DSCP values and the corresponding keywords Keyword DSCP value in decimal DSCP value in binary af11 001010 af12 001100 af13 001110 af21...
Page 556
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands IP Precedence in Keyword IP Precedence in binary decimal flash-override critical internet network If you specify the tos keyword, you can directly input a value ranging from 0 to 15 or...
Page 557
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Table 1-11 TCP/UDP-specific ACL rule information Parameters Type Function Description The value of operator can be lt (less than), gt (greater than), eq (equal to), neq (not equal to) or range (within the range of).
Page 558
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Table 1-12 TCP or UDP port values Type Value CHARgen (19), bgp (179), cmd (514), daytime (13), discard (9), domain (53), echo (7), exec (512), finger (79), ftp (21), ftp-data (20),...
Page 560
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Note: Note the following when assigning an advanced ACL to the hardware: The fragment keywords are not supported. When you specify the ttl keyword, the ttl argument can only be set to 0, 1 or 255.
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands [Sysname-acl-adv-3000] rule 1 deny ip source 192.168.0.1 0 dscp 46 [Sysname-acl-adv-3000] quit # Create advanced ACL 3001 and define rule 1 to permit TCP packets that are sourced from network 129.9.0.0/16, destined for network 202.38.160.0/24, and using the...
Page 562
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Parameters Type Function Description source-mac-addr: Source MAC address, in the format of H-H-H. source-mac-mask: Mask of the source MAC address, in the format of H-H-H.
Page 563
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Note: Note the following when assigning an Layer 2 ACL to the hardware: The 802.3/802.2 and 802.3 keywords are not supported. When you defining the source VLAN information, the operator argument cannot be neq.
Page 565
ICMPv6, that is, 0x3a. Note: Note the following when assigning an IPv6 ACL to the hardware on H3C S3100 Series Ethernet switches: IPv6 ACLs do not match IPv6 packets with extension headers.
Page 567
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Acl's step is 1 rule 0 deny IP source 1.1.1.1 0 destination 2.2.2.2 0 rule 0 comment This rule is to be applied to Ethernet 1/0/1 1.1.16 time-range...
Page 568
Command Manual (For Soliton) – ACL H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration Commands Description Use the time-range command to define a time range. Use the undo time-range command to remove the specified or all time ranges. Note that: The switch supports up to 256 time ranges, each of which can have up to 32 periodic time ranges and 12 absolute time ranges.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Description Use the display priority-trust command to display the priority trust mode on the current switch. Related command: priority-trust. Examples # Display the priority trust mode on the current switch.
Page 573
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Parameter None Description Use the display qos dscp-local-precedence-map command to display the DSCP-precedence-to-local-precedence mapping table. Related command: qos dscp-local-precedence-map. Example # Display the DSCP-precedence-to-local-precedence mapping table.
Description Use the display qos-global command to display the QoS-related configuration performed for all the packets. Example # Display all the QoS configurations performed for all the packets on an S3100 series switch. <Sysname> display qos-global all global: traffic-limit inbound:...
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Field Description Action conducted to packets exceeding the traffic Exceed action specification The function of collecting traffic policing statistics meter-statistic running information is enabled (meter-statistic not running...
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands weight of queue 1: 8 weight of queue 2: 4 weight of queue 3: 1 Table 1-2 Description on the fields of the display qos-interface all command...
Use the display qos-interface mirrored-to command to display the traffic mirroring configuration of a port or all the ports on the device. Related command: mirrored-to. Example # Display the traffic mirroring configuration of Ethernet 1/0/1 on an S3100 series switch. <Sysname> display qos-interface Ethernet 1/0/1 mirrored-to Ethernet1/0/1: mirrored-to Inbound:...
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands 1.1.9 display qos-interface traffic-limit Syntax display qos-interface { interface-type interface-number | unit-id } traffic-limit View Any view Parameter interface-type interface-number: Specifies the type and number of a port, for which the traffic policing configuration information is to be displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands View Any view Parameter interface-type interface-number: Specifies the type and number of a port, for which the priority marking configuration information is to be displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands View Any view Parameter interface-type interface-number: Specifies the type and number of a port, for which the traffic redirecting configuration information is to be displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Parameter interface-type interface-number: Specifies the type and number of a port, for which the traffic shaping configuration information is to be displayed. unit-id: Unit ID, which is fixed to 1. With this argument specified, the traffic shaping configuration of all the ports is displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Parameter interface-type interface-number: Specifies the type and number of a port, for which the traffic accounting configuration information is to be displayed. unit-id: Unit ID, which is fixed to 1. With this argument specified, the traffic accounting configuration of all the ports on the device is displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Parameter group-id: Port group ID, in the range 1 to 100. If this argument is not specified, the QoS information of all the port groups is displayed.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands traffic-priority: Displays the priority marking configuration performed for packets of a VLAN. traffic-redirect: Displays the traffic redirecting configuration performed for packets of a VLAN.
Page 586
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Queue scheduling mode: weighted round robin weight of queue 0: 1 weight of queue 1: 2 weight of queue 2: 3 weight of queue 3: 4 1.1.17 line-rate...
Page 587
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Example # Limit the outbound traffic rate to 128 kbps on Ethernet 1/0/1. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] interface Ethernet 1/0/1 [Sysname-Ethernet1/0/1] line-rate outbound 128 # Display the line rate configuration on Ethernet 1/0/1.
Page 588
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Table 1-9 Description on the parameters used in Table 1-8 Parameter Description Specifies the number of a basic or advanced ACL, in the ip-group acl-number range 2000 to 3999.
Page 590
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Example # Mirror packets that match ACL 2000 on VLAN 1 to Ethernet 1/0/2 through traffic mirroring. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands [Sysname] interface Ethernet 1/0/1 [Sysname-Ethernet1/0/1] priority 6 1.1.21 priority trust Syntax priority trust undo priority View System view Parameter None Description Use the priority trust command to configure the switch to trust the 802.1p priority of a packet.
Page 592
By default, a switch trusts the 802.1p priority of the received packets. A port of an S3100 series switch can accommodate four output queues. The output queue to which a received packet is to be added to is determined by its local precedence: DSCP precedence: Ranges from 0 to 63.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Table 1-10 The default CoS-precedence-to-local-precedence mapping table CoS value Local precedence Related command: display qos cos-local-precedence-map. Example # Configure the CoS-precedence-to-local-precedence mapping relationship as follows: 0 to 0, 1 to 0, 2 to 1, 3 to 1, 4 to 2, 5 to 2, 6 to 3, and 7 to 3.
Page 595
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands local-precedence by the “:” after it to indicate the mapping relationship between them. The range of dscp-list is from 0 to 63. local-precedence: Local precedence. This argument is in the range of 0 to 3.
Page 598
By default, the WRR queue scheduling algorithm is adopted, and the weight assigned to queue 0, queue 1, queue 2, and queue 3 is 1, 2, 3, and 4. The port of an S3100 series switch can accommodate four output queues. You can configure the queue scheduling algorithm as needed:...
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands 1.1.26 reset traffic-limit Syntax reset traffic-limit inbound acl-rule View System view, Ethernet port view, Port group view Parameter inbound: Specifies to clear the statistics on the inbound packets.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Description Use the reset traffic-limit vlan command to clear the statistics on packets of a VLAN. Related command: traffic-limit vlan. Example # Clear the statistics on packets that match ACL 2000 and are of VLAN 1.
Page 601
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands View System view Parameter vlan-id: VLAN ID, in the range 1 to 4094. inbound: Specifies to clear the statistics on the inbound packets. acl-rule: ACL rules to be applied. This argument can be the combination of multiple ACLs.
Page 602
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands The granularity of port rate limit is 64 Kbps. Assume that the value you provide for the target-rate argument is in the range N*64 to (N+1)*64 (N is a natural number), it will be rounded off to (N+1)*64.
Page 603
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Keyword DSCP value (decimal) DSCP value (binary) 111000 101110 Table 1-14 802.1p precedence keywords and the corresponding decimal/binary values 802.1p precedence 802.1p precedence Keyword...
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands By default, traffic policing is disabled globally, on all port groups, and all ports. Note: With broadcast suppression, multicast suppression, or line rate for the inbound direction enabled on a device, you cannot configure traffic policing on the device.
Page 605
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands The granularity of port rate limit is 64 Kbps. Assume that the value you provide for the target-rate argument is in the range N*64 to (N+1)*64 (N is a natural number), it will be rounded off to (N+1)*64.
Page 606
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Note: Traffic policing configured on a VLAN is only applicable to packets tagged with 802.1Q header. With broadcast suppression, multicast suppression, or line rate for the inbound direction enabled on a device, you cannot configure traffic policing on the device.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Description Use the traffic-priority command to use ACL rules in traffic identifying and specify a new priority for all the packets matching the specific ACL rules, or packets that match specific ACL rules and are of a port group, or pass a port.
Page 608
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands cos cos-value: Sets the 802.1p precedence, in the range of 0 to 7. You can also enter a keyword listed in Table 1-14 for the cos-value argument.
Page 609
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands acl-rule: ACL rules to be applied. This argument can be the combination of multiple ACLs. For more information about this argument, refer to Table 1-8 Table 1-9.
Page 611
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Note: The traffic redirecting function configured on a VLAN is only applicable to packets tagged with 802.1Q header. Packets redirected to the CPU are not forwarded.
Page 612
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Description Use the traffic-shape command to enable traffic shaping and send the packets out at an even rate. Use the undo traffic-shape command to disable traffic shaping.
Page 613
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Example # Generate statistics on the packets that match ACL 2000 and pass Ethernet 1/0/1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 614
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 1 QoS Commands Example # Generate statistics on packets that match ACL 2000 and are of VLAN 1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands Chapter 2 QoS Profile Configuration Commands 2.1 QoS Profile Configuration Commands 2.1.1 apply qos-profile Syntax I. In system view apply qos-profile profile-name interface interface-list undo apply qos-profile profile-name interface interface-list II.
Page 616
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands # Apply the QoS profile named a123 to Ethernet 1/0/1 through Ethernet 1/0/4. <Sysname> system-view System View: return to User View with Ctrl+Z.
Page 617
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands traffic-priority inbound ip-group 4000 rule 0 cos controlled-load # Display the configuration of the QoS profile applied to Ethernet 1/0/1, assuming that the QoS profile has been applied to Ethernet 1/0/1 manually.
Page 618
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands Field Description “Default” indicates that the QoS profile Default applied qos-profile: test, 3 named test is applied to Ethernet 1/0/1 actions manually. The QoS profile contains three actions.
Page 619
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands 2.1.4 qos-profile Syntax qos-profile profile-name undo qos-profile profile-name View System view Parameter profile-name: QoS profile name, a case-insensitive string of 1 to 32 characters and starting with English letters [a-z, A-Z].
Page 620
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands View Ethernet port view Parameter None Description Use the qos-profile port-based command to configure the QoS profile application mode on a port to be port-based.
Page 621
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands target-rate: Target traffic rate of traffic policing. This argument is in the range 64 to 1000000. The granularity of port rate limit is 64 Kbps. Assume that the value you provide for the target-rate argument is in the range N*64 to (N+1)*64 (N is a natural number), it will be rounded off to (N+1)*64.
Page 622
Command Manual (For Soliton) – QoS-QoS Profile H3C S3100 Series Ethernet Switches Chapter 2 QoS Profile Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] qos-profile a123 [Sysname-qos-profile-a123] traffic-limit inbound ip-group 2000 128 exceed drop 2.1.7 traffic-priority Syntax...
Use the display mirroring-group command to display port mirroring configurations. Related commands: mirroring-group mirroring-port, mirroring-group monitor-port. Examples # Display the configurations of a local mirroring group on your S3100 series Ethernet switch. <Sysname> display mirroring-group 1 mirroring-group 1: type: local status: active mirroring port: Ethernet1/0/1...
Page 626
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands # Display the configurations of a remote source mirroring group on your S3100 series Ethernet switch. <Sysname> display mirroring-group 1 mirroring-group 1: type: remote-source status: active...
Page 627
The mirroring group you created can take effect only after you configure other parameters for it. Note that, an S3100 series Ethernet switch supports configuring only one destination port in local port mirroring or one reflector port in remote port mirroring. That is, on an S3100 switch, there can be only one effective local mirroring group or one effective remote source mirroring group.
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands 1.1.3 mirroring-group mirroring-port Syntax mirroring-group group-id mirroring-port mirroring-port-list { both | inbound | outbound } undo mirroring-group group-id mirroring-port mirroring-port-list View System view, Ethernet port view Parameters group-id: Number of a port mirroring group, the value of which can only be 1.
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands 1.1.5 mirroring-group reflector-port Syntax mirroring-group group-id reflector-port reflector-port undo mirroring-group group-id reflector-port reflector-port View System view, Ethernet port view Parameters group-id: Number of a port mirroring group, the value of which can only be 1.
Page 631
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands View System view Parameters group-id: Number of a port mirroring group, the value of which can only be 1. remote-probe vlan remote-probe-vlan-id: Specifies the remote-probe VLAN for the mirroring group.
Page 632
Related commands: display mirroring-group. Note: When you configure mirroring source port on an Ethernet port of an S3100 series Ethernet switch, if mirroring group 1 does not exist, the switch will automatically create local mirroring group 1 and add the source port to the group; if mirroring group 1 already exists, but is not a local mirroring group, your configuration of the source port will fail.
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands Note that: You cannot configure a member port of an aggregation group, or a port enabled with LACP and STP as the mirroring destination port.
Page 634
Command Manual (For Soliton) – Mirroring H3C S3100 Series Ethernet Switches Chapter 1 Mirroring Commands You cannot configure a default VLAN, a management VLAN, or a dynamic VLAN as the remote-probe VLAN. A remote-probe VLAN cannot be removed directly. To do that, you need to run the undo remote-probe vlan enable command in VLAN view first.
Page 635
Command Manual (For Soliton) – Stack-Cluster H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Stack Function Configuration Commands..............1-1 1.1 Stack Function Configuration Commands ................. 1-1 1.1.1 display stacking ....................... 1-1 1.1.2 stack-port enable..................... 1-3 1.1.3 stacking ........................
Command Manual (For Soliton) – Stack-Cluster Chapter 1 Stack Function Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 Stack Function Configuration Commands 1.1 Stack Function Configuration Commands 1.1.1 display stacking Syntax display stacking [ members ] View Any view Parameter members: Displays the information about the members of a stack.
Page 638
Command Manual (For Soliton) – Stack-Cluster Chapter 1 Stack Function Configuration H3C S3100 Series Ethernet Switches Commands Management-vlan:1(default vlan) # Display the information about the stack members on the main switch. <stack_0.Sysname> display stacking members Member number: 0 Name:stack_0.Sysname Device: S3100...
Command Manual (For Soliton) – Stack-Cluster Chapter 1 Stack Function Configuration H3C S3100 Series Ethernet Switches Commands You can use this command to switch from user view of the main switch to user view of a slave switch. To switch from a slave switch back to the main switch, execute the quit command in user view.
Command Manual (For Soliton) – Stack-Cluster Chapter 1 Stack Function Configuration H3C S3100 Series Ethernet Switches Commands <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] stacking enable [stack_0.Sysname] quit <stack_0.Sysname> 1.1.5 stacking ip-pool Syntax stacking ip-pool from-ip-address ip-address-number [ ip-mask ]...
Page 642
Command Manual (For Soliton) – Stack-Cluster Chapter 1 Stack Function Configuration H3C S3100 Series Ethernet Switches Commands After a stack is created, the main switch automatically adds the switches connected to its stack ports to the stack. A slave switch quits the stack automatically when it is disconnected from the stack.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Field Description Holdtime for this switch to keep the NDP Neighbor 1: Aging Time information of the neighbor connected to the port MAC Address...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands By default, NDP is enabled both globally and on ports. Note that NDP can take effect on a port only when NDP is enabled both globally and on the port.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Examples # Set the holdtime of the NDP information sent by the switch to 60 seconds. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands 2.1.5 reset ndp statistics Syntax reset ndp statistics [ interface interface-list ] View User view Parameters interface-list: Ethernet port list, in the format of { interface-type interface-number [ to interface-type interface-number ] } &<1-10>, where to is used to specify a port range,...
Page 649
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands View Any view Parameters None Description Use the display ntdp command to display the global NTDP information. The displayed information includes topology collection range (hop count), topology collection interval (NTDP timer), device/port forwarding delay of topology collection requests, and time used by the last topology collection.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Table 2-4 Description on the fields of display ntdp device-list verbose Field Description Hostname System name of a device collected by NTDP MAC address of the collected device...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Examples # Enable NTDP globally, and then enable NTDP on port Ethernet 1/0/1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Parameters hop-value: Maximum hops to collect topology information, namely, the topology collection range, in the range of 1 to 16. Description Use the ntdp hop command to set the topology collection range.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the ntdp timer command to configure the interval to collect topology information periodically. Use the undo ntdp timer command to restore the default interval.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Use the undo ntdp timer hop-delay command to restore the default device forwarding delay. By default, the device forwarding delay is 200 ms.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands forwards the request through the next port. You can use the ntdp timer port-delay command to set the delay. You can use the command on a collecting switch. The delay value you set by the ntdp...
Page 658
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands you want to specify the member manually, you need to specify a number that is never used by a member device of the cluster.
Page 659
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands A cluster has one and only one management device. Setting the management device MAC address on a device can add the device to the cluster and enable the device to identify the management device even if it restarts.
Page 660
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Note that, the collection of candidate/member devices are based on NTDP. Therefore, you must first enable NTDP. In addition, you can use the ntdp hop command in system view to change the collection range.
Page 661
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands 000f-e200-5600 H3C S5600-26F 000f-e200-5104 H3C S3100-26TP-EI-W 000f-e200-2420 H3C S3100-26TP-EI-W Processing...please wait %Apr 3 08:12:37:813 2000 aaa_0.Sysname CLST/5/LOG:- 1 - Member 000f-e200-2200 is joined in cluster aaa.
Page 662
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Parameters name: Name to be set for the cluster, a string of up to 8 characters, which can only be alphanumeric characters, minus signs (-), and underscores (_).
Page 663
Note: To reduce the risk of being attacked by malicious users against opened socket and enhance switch security, the S3100 series Ethernet switches provide the following functions, so that a cluster socket is opened only when it is needed: Opening UDP port 40000 (used for cluster) only when the cluster function is implemented, Closing UDP port 40000 at the same time when the cluster function is closed.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Use the undo cluster enable command to disable the cluster function. By default, the cluster function is enabled. Note that: To create a cluster on a management device through the build command or the auto-build command, you must first enable the cluster function by executing the cluster enable command.
Page 666
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Both switching directions (from the management device to a member device, and from a member device to the management device) will use Telnet connection. Switching is performed based on the following rules: Both switching directions will perform authentication.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Parameters H-H-H: Multicast MAC address to be set for the cluster, in hexadecimal format. This argument can be one of the following addresses: 0180-C200-0000, 0180-C200-000A, 0180-C200-0020 to 0180-C200-002F.
Page 668
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Parameters time-interval: Interval to send multicast MAC synchronization packets, ranging from 0 to 30 minutes. Description Use the cluster-mac syn-interval command to set the interval for the management device to send HGMP V2 multicast MAC synchronization packets periodically.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the delete-member command to remove a member device from the cluster. Note that a cluster will collect the topology information at the topology collection interval.
Page 670
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the display cluster command to display the status and statistics information of the cluster to which the current switch belongs. Executing this command on a member device will display the following information: cluster name, member number of the current switch, MAC address and status of the management device, holdtime, and interval to send handshake packets.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Administrator device mac address:000f-e20f-3901 Administrator status:Up Table 2-5 Description on the fields of the display cluster command Field Description Name of the cluster, which can be configured...
Page 672
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands automatically add the candidate devices it discovers into the cluster. As a result, if the topology collection interval is too short (the default interval is 1 minute), the switches acting as candidate devices will not keep in candidate state for a long time –...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Platform : S3100 : 16.1.1.1/24 Table 2-7 Description on the fields of display cluster candidates verbose Field Description Hostname Name of the candidate device...
Page 674
MAC Address:000f-e20f-3901 Member status:Admin Hops to administrator device:0 IP: 100.100.1.1/24 Version: H3C Comware Platform Software. Comware Software, Version 3.10 Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved. S3100 3100-0002 Member number:1 Name:aaa_1.Sysname Device:S3100 MAC Address:3900-0000-3334 Member status:Up Hops to administrator device:2 IP: 16.1.1.11/24...
Hops to administrator device:1 IP: 16.1.1.1/24 Version: H3C Comware Platform Software. Comware Software, Version 3.10 Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved. S3100 3100-0002 Table 2-9 Description on the fields of display cluster members verbose Field Description...
Page 676
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Related commands: ftp-server. Note: For how to access other FTP servers using the ftp command, refer to the FTP-SFTP-TFTP part of the manual.
Page 677
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands of the shared FTP server configured on the management device takes effect on the management device only and will not be applied to the member devices through the cluster management packets.
Page 678
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands If the management device receives NDP information form a member device within the holdtime, the member device stays in the normal state and does not need to be added to the cluster again.
Page 679
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Examples # Configure a private IP address pool for a cluster. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] cluster [Sysname-cluster] ip-pool 10.200.0.1 20...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands 2.3.19 management-vlan Syntax management-vlan vlan-id undo management-vlan View System view Parameters vlan-id: ID of the VLAN to be specified as the management VLAN.
Page 681
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands View Cluster view Parameters member-number: Member number of a member device, ranging from 1 to 255. mac-address H-H-H: Specifies the MAC address of the member device to be rebooted.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the snmp-host command to configure a shared SNMP NMS for the cluster on the management device. Use the undo snmp-host command to remove the shared SNMP NMS setting.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands configuration file backup of the cluster members. For TFTP server rights and directory configuration, refer to the user guide of the TFTP server software.
Page 684
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Related commands: tftp get,tftp-server. Note: You need to specify the cluster keyword completely in the command. For description of other parameters of the tftp command, refer to the FTP-SFTP-TFTP part of the manual.
Page 685
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Examples # Configure shared TFTP server 1.0.0.9 on the management device for the cluster. <aaa_0.Sysname> system-view System View: return to User View with Ctrl+Z.
Page 686
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands 2.3.26 tracemac Syntax tracemac { by-mac mac-address vlan vlan-id | by-ip ip-address } [ nondp ] View Any view Parameters by-mac: Specifies to trace a device through the specified destination MAC address.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Note: You can only use this command on the cluster administrative device. If the device to be added to the blacklist is a member of the cluster, the execution of the black-list add-mac command will remove the device from the cluster and then add it to the cluster blacklist.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Table 2-10 Description on the fields of display cluster base-members Field Description Device number in the cluster Device Device name MAC Address Device MAC address...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands ├-(P_0/40)<-->(P_0/6)[Sysname:000f-e200-2200] ├-(P_0/28)<-->(P_3/0/1)[Sysname:000f-e200-1774] ├-(P_0/22)<-->(P_1/0/2)[aaa_5.Sysname:000f-e200-5111] ├-(P_0/18)<-->(P_3/0/2)[Sysname S3100:000f-e218-d0d0] ├-(P_0/14)<-->(P_1/0/2)[Sysname:000f-e200-5601] └-(P_0/4)<-->(P_0/2)[S3100:000f-e200-00cc] The output information of the display cluster base-topology command is in the following format: (peer port number)<-->(local port number)[peer device name:peer device MAC address] For example, (P_0/40)<-->(P_0/6)[Sysname:000f-e200-2200] means that the peer...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands 00e0-fd34-bc66 000f-e202-2180 Ethernet1/0/1 Table 2-11 Description on the fields of the display cluster black-list command Field Description ID of the device in the blacklist, expressed by the MAC address...
Page 692
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands If to-mac-address or to-member-id is specified, the system displays the topology structure of the route between the two specified MAC addresses or two member IDs.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Table 2-12 Description on the fields of the display ntdp single-device command Field Description Hostname System name of a device MAC address of the device...
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the topology accept command to accept the topology of the current cluster as the standard topology, and save the standard topology to the Flash memory of the administrative device so that the standard topology can be restored when errors occur to the topology.
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Description Use the topology restore-from command to restore the standard topology of the cluster from the Flash memory of the administrative device when errors occur to the topology, and advertise the topology to the member devices of the cluster to ensure normal operation of the cluster.
Page 697
Command Manual (For Soliton) – Stack-Cluster Chapter 2 HGMP V2 Configuration H3C S3100 Series Ethernet Switches Commands Note: This command is applicable to only the management device of a cluster. Related commands: topology restore-from. Examples # Enter Cluster view. <aaa_0.Sysname>system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Chapter 1 SNMP Configuration Commands Note: The configuration of creating a MIB view with the mask of a MIB subtree is added. See section snmp-agent mib-view for details.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands You can use the snmp-agent local-engineid command to configure an engine ID for the device. Examples # Display the local SNMP entity engine ID.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands <Sysname> display snmp-agent community Community name:public Group name:public Storage-type: nonVolatile Community name:private Group name:private Storage-type: nonVolatile Table 1-1 display snmp-agent community command output description...
Page 703
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Description Use the display snmp-agent group command to display the information about an SNMP group, including group name, security mode, related views, and storage mode.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands View status:active View name:ViewDefault MIB Subtree:snmpModules.18 Subtree mask: Storage-type: nonVolatile View Type:excluded View status:active The above output information indicates that MIB view ViewDefault includes all MIB objects under the ISO MIB subtree except snmpUsmMIB, snmpVacmMIB and snmpModules.18.
Page 706
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands 0 SNMP PDUs which had genErr error-status 7 SNMP PDUs which had noSuchName error-status 0 SNMP PDUs which had tooBig error-status (Maximum packet size 1500)
Page 707
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Field Description SNMP PDUs which had The total number of SNMP PDUs which were delivered tooBig error-status to the SNMP protocol entity and for which the value of (Maximum packet size the error-status field is `tooBig'.
For the detailed configuration, refer to the snmp-agent sys-info command. By default, the contact information of an S3100 Ethernet switch is "Hangzhou H3C Technologies Co., Ltd.", the geographical location is "Hangzhou China", and the SNMP version employed is SNMPv3.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands 1.1.7 display snmp-agent trap-list Syntax display snmp-agent trap-list View Any view Parameters None Description Use the display snmp-agent trap-list command to display the modules that can generate traps and whether the sending of traps is enabled on the modules.
Page 710
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands View Any view Parameters engineid: Engine ID, a string of 10 to 64 hexadecimal digits. user-name: SNMPv3 username, a string of 1 to 32 characters.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Field Description Storage type, which can be: volatile: Information will be lost if the system is rebooted nonVolatile: Information will not be lost if the system is...
Page 712
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] snmp-agent trap enable [Sysname] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public [Sysname] interface Ethernet1/0/1 [Sysname-Ethernet1/0/1] enable snmp trap updown 1.1.10 snmp-agent...
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Note: An S3100 Ethernet switch provides the following functions to prevent attacks through unused UDP ports. Starting the SNMP agent opens UDP port used by SNMP agents and the UDP port used by SNMP trap respectively.
Page 714
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Related commands: snmp-agent usm-user v3. Note: SNMP agent must be enabled for you to encrypt a plain-text password. Examples # Use the local engine ID and the md5 algorithm to encrypt plain-text password aaaa.
Page 715
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands command to configure a community name and configure read or write access right and ACL. Use the undo snmp-agent community command to remove an SNMP community.
Page 716
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands group-name: Name of the SNMP group to be created, a string of 1 to 32 characters. authentication: Configures to authenticate but do not encrypt the packets.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands # Create an SNMPv3 group v3group, set the security mode to authentication and privacy, and permit only access from the NMS whose IP address is 192.168.0.108 to the agent using ACL.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands By default, the engine ID of an SNMP entity is formed by appending the device information to the enterprise number. The device information can be determined according to the device, which can be an IP address, a MAC address, or a user-defined string comprising of hexadecimal digits.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Note: When SNMP logging is enabled on a device, SNMP logs are output to the information center of the device. With the output destinations of the information center set, the output destinations of SNMP logs will be decided.
Page 720
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Use the undo snmp-agent mib-view command to cancel the current setting. Management Information Base (MIB) is a collection of all the managed objects. MIB view is a sub-set of MIB.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands System View: return to User View with Ctrl+Z. [Sysname]snmp-agent community read rip2read mib-view rip2 [Sysname]snmp-agent community write rip2write mib-view rip2 # Create an SNMP MIB view with the name of view-a, MIB subtree of 1.3.6.1.5.4.3.4 and subtree mask of FE.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands By default, the contact information of an S3100 Ethernet switch is "Hangzhou H3C Technologies Co., Ltd.", the geographical location is "Hangzhou China", and the SNMP version employed is SNMPv3.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands privacy: Configures to authenticate and encrypt the packets. Description Use snmp-agent target-host command to set a destination host to receive the SNMP traps generated by the local device.
Specifies to send SNMP linkUp traps when a port becomes up. warmstart: Specifies to send SNMP warm start traps when SNMP is newly launched. system: Specifies to send H3C-SYS-MAN-MIB (proprietary MIB) traps. Description Use the snmp-agent trap enable command to enable a device to send SNMP traps that are of specified types.
Page 726
# Before the configuration of the extended trap function, the trap information is as follows when a link is down: #Apr 2 05:53:15:883 2000 H3C L2INF/2/PORT LINK STATUS CHANGE:- 1 - Trap 1.3.6.1.6.3.1.1.5.3(linkDown): portIndex is 4227634, ifAdminStatus is 2, ifOperStatus is 2 #Apr 2 05:53:16:094 2000 H3C IFNET/5/TRAP:- 1 -1.3.6.1.6.3.1.1.5.3(linkDown)
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands 1.1.22 snmp-agent trap life Syntax snmp-agent trap life seconds undo snmp-agent trap life View System view Parameters seconds: SNMP trap aging time (in seconds) to be set, ranging from 1 to 2,592,000.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands Description Use the snmp-agent trap queue-size command to set the length of the queue of the SNMP traps to be sent to the destination.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands After the command is executed, the system uses the primary IP address of the specified interface as the source IP address of the traps sent. Thus on the NMS you can use the IP address to uniquely identify the agent.
Page 730
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands messages with specific source addresses, thus restricting access between the NMS and the agent. Description Use the snmp-agent usm-user { v1 | v2c } command to add a user to an SNMP group.
Page 732
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands engineid-string: Engine ID associated with the user, an even number of hexadecimal characters, in the range 10 to 64. Description Use the snmp-agent usm-user command to add a user to an SNMP group.
Page 733
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 1 SNMP Configuration Commands On the NMS, set the version to SNMPv3, the username to testUser, the authentication algorithm to MD5, and the authentication password to authkey, and establish a connection with the device.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Field Description Valid The alarm entry identified by the index is valid. Samples type Sampling type, which can be absolute or delta Variable formula The sampled node Sampling interval, in seconds.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands The action triggered by the event (log or alarm messages) The time (in seconds) when the latest event is triggered (in terms of the time elapsed since the system is started/initialized).
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Current RMON event entry status The time (in seconds) when an event log is generated (in terms of the time elapsed since the system is started or initialized) RMON event description.
Page 738
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Parameters interface-type: Interface type. interface-number: Interface number. unit unit-number: Specifies a unit number. Description Use the display rmon history command to display the RMON history information about a specified port.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Field Description Latest sampled values Latest sampled values dropevents Number of the packet-dropping events Number of the received/transmitted bytes during octets sampling duration Number of the received/transmitted packets during...
Page 740
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Examples # Display the configuration of all the extended RMON alarm entries. <Sysname> display rmon prialarm Prialarm table 1 owned by user1 is VALID.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Table 2-6 display rmon statistics command output description Field Description Statistics entry Index of the statistics information entry VALID The statistics table is valid.
Page 743
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands ASN.1 INTEGER data type (that is, INTEGER, Counter, Gauge, or TimeTicks) can be used as alarm variables. sampling-time: Sampling interval (in seconds), in the range 5 to 65,535.
Page 744
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Table 2-7 Sample value and the corresponding operation Comparison Operation The sample value is larger than or equal Triggering the event identified by the...
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands 2.1.9 rmon history Syntax rmon history entry-number buckets number interval sampling-interval [ owner text ] undo rmon history entry-number View Ethernet port view Parameters entry-number: History entry index, in the range of 1 to 65535.
Page 748
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Use the undo rmon prialarm command to remove an extended alarm entry. Note: Before adding an extended alarm entry, you need to use the rmon event command to define the events to be referenced by the entry.
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands System View: return to User View with Ctrl+Z. [Sysname] interface Ethernet 1/0/1 [Sysname-Ethernet1/0/1] rmon statistics 1 [Sysname-Ethernet1/0/1] quit [Sysname] rmon prialarm ((.1.3.6.1.2.1.16.1.1.1.4.1)*100) test changeratio rising_threshold 50 1 falling_threshold 5 2 entrytype forever owner user1 # Remove the extended alarm entry numbered 2 from the extended alarm table.
Page 750
Command Manual (For Soliton) – SNMP-RMON H3C S3100 Series Ethernet Switches Chapter 2 RMON Configuration Commands Note: For each port, only one RMON statistics entry can be created. That is, if an RMON statistics entry was already created for a given port, you will fail to create a statistics entry with a different index for the port.
Note: To protect unused sockets against attacks by malicious users and improve security, H3C S3100 series Ethernet switches provide the following functions: UDP port 123 is opened only when the NTP feature is enabled. UDP port 123 is closed as the NTP feature is disabled.
Page 753
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Example # View the brief information of all sessions maintained by NTP services. <Sysname> display ntp-service sessions source reference stra reach poll now offset...
Total number of associations associations Caution: An S3100 series switch does not establish a session with its client when it works in the NTP server mode, but does so when it works in other NTP implementation modes. 1.1.2 display ntp-service status...
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Table 1-2 Description on the fields of the display ntp-service status command Field Description Status of the local clock: Clock status Synchronized Unsynchronized Clock stratum...
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Example # View the brief information of each NTP time server along the time synchronization chain from the local switch to the reference clock source.
Page 757
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands synchronization: Synchronization right. This level of right permits the peer device to synchronize its clock to the local switch but does not permit the peer device to perform control query.
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Description Use the ntp-service authentication-keyid command to configure an NTP authentication key. Use the undo ntp-service authentication-keyid command to remove an NTP authentication key.
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Example # Configure the switch to operate in the broadcast client mode and receive NTP broadcast messages through Vlan-interface1. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands Use the undo ntp-service max-dynamic-sessions command to restore the default. By default, up to 100 dynamic NTP sessions can be established locally. Example # Set the maximum number of dynamic NTP sessions that can be established locally to <Sysname>...
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands View System view Parameter vlan-interface vlan-id: Specifies an interface. The IP address of the interface serves as the source IP address of sent NTP messages. The vlan-id argument indicates the ID of the specified VLAN interface, ranging from 1 to 4094.
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands authentication-keyid key-id: Specifies the key ID used for sending messages to the peer. The key-id argument ranges from 1 to 4294967295. By default, authentication is not enabled.
Page 767
Command Manual (For Soliton) – NTP H3C S3100 Series Ethernet Switches Chapter 1 NTP Configuration Commands undo ntp-service unicast-server { remote-ip | server-name } View System view Parameter remote-ip: IP address of an NTP server. This argument can be a unicast address only, and cannot be a broadcast address, multicast group address, or IP address of the local clock.
Page 768
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 SSH Commands......................1-1 1.1 SSH Commands ........................ 1-1 1.1.1 display public-key local ................... 1-1 1.1.2 display public-key peer.................... 1-2 1.1.3 display rsa local-key-pair public ................
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Chapter 1 SSH Commands 1.1 SSH Commands 1.1.1 display public-key local Syntax display public-key local { dsa | rsa } public View Any view Parameters dsa: Displays the public key of the current switch’s DSA key pair.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Key name: Sysname_Server Key type: RSA encryption Key ===================================================== Key code: 307C300D06092A864886F70D0101010500036B003068026100BC86D8F08E101461C1231B12 2777DBE777645C81C569C004EC2FEC03C205CC7E3B5DAA38DD865C6D1FB61C91B85ED63C6F 35BAFBF9A6D2D2989C20051FF8FA31A14FCF73EC1485422E5B800B55920FC121329020E82F 2945FFAD81BE72663BF70203010001 # Display the public key of the current switch’s DSA key pair.
Page 771
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Description Use the display public-key peer command to display information about locally saved public keys of SSH peers. If no key name is specified, the command displays detailed information about the locally saved public keys of all SSH peers.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands B58BE6F035FAA2C596B27D1231D159846B7CB9A7757C5800FADA9FD72F65672F4A549EE99F 63095E11BD37789955020123 1.1.3 display rsa local-key-pair public Syntax display rsa local-key-pair public View Any view Parameters None Description Use the display rsa local-key-pair public command to display the public key part of the current switch’s RSA key pair(s).
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Caution: Sometimes the public key modulo displayed with the display rsa peer-public-key command is one bit smaller than the actual modulo. This is because the actually generated key pair is one bit smaller than specified.
Page 775
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands status: Displays SSH status information. Description Use the display ssh server command on an SSH server to display SSH status or session information.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Field Description State Session status Retry Number of connection retries SerType Service type Username User name 1.1.6 display ssh server-info Syntax display ssh server-info...
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands 1.1.7 display ssh user-information Syntax display ssh user-information [ username ] View Any view Parameters username: SSH user name, a string of 1 to 184 characters. It cannot contain any of these characters: slash (/), backslash (\), colon (:), asterisk (*), question mark (?), less than sign (<), greater than sign (>), and the vertical bar sign (|).
Page 778
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Description Use the peer-public-key end command to return from public key view to system view. Related commands: rsa peer-public-key, public-key-code begin, public-key peer.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Caution: If you have configured a user interface to support SSH protocol, to ensure a successful login to the user interface, you must configure AAA authentication for the user interface by using the authentication-mode scheme command.
Page 780
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands After entering this command, you will be prompted to provide the length of the key pair. The length of a server/host key must be in the range 512 to 2048 bits and defaults to 1024.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands 8722585CDF4F3BFB31DD739865D1EA0312EDF2BAF4841C0A963E400640E467206817292CDF E5D91D86FDB9C3A16141E675E6FFC6C2577E660FF1 1.1.11 public-key local destroy Syntax public-key local destroy { dsa | rsa } View System view Parameters dsa: Specifies the DSA key pair.
Page 783
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Parameters rsa: Specifies the host public key of the current switch’s RSA key pair. openssh: Specifies the format of the exported file as OpenSSH.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands # Display the host public key in the OpenSSH format. [Sysname]public-key local export rsa openssh ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgMSPi+xIkHkAo6E9LwLKWN+eN9EqW/6FIYEIlVKcpIa0 6IT4eSyq4OldeiZ9WorOiDqX3ROo4FmaTR/QCSK3C9whE1qz/4soVL1eHDdgzQCumKKsJCVaM5 OdZ2sdNbEnhLucs8ZrfTgEkDB1hmbgzuDpWPokPfkQDD+8dC+hkFVV rsa-key # Export the host public key of the RSA key pair in the format of OpenSSH and save the public key file as pub_ssh_file2.
Page 785
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Caution: SSH1, SSH2, and OpenSSH are three public key file formats. You can choose one as required. The host public key displayed on the screen is in a format that is not transformed and cannot be used as the public key data for public key configuration.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands 1.1.16 public-key-code begin Syntax public-key-code begin View Public key view Parameters None Description Use the public-key-code begin command to enter public key edit view.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Parameters None Description Use the public-key-code end command to return from public key edit view to public key view and save the public key you input.
Page 790
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Description Use the rsa local-key-pair create command to generate an RSA key pair for the current switch. Note that: After entering this command, you will be prompted to provide the length of the key pair.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Description Use the rsa local-key-pair destroy command to destroy the current switch’s RSA key pair. Related commands: rsa local-key-pair create. Examples # Destroy the current switch’s RSA key pair.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Examples # Enter Switch002 public key view. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] rsa peer-public-key Switch002 RSA public key view: return to System View with "peer-public-key end".
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Caution: The rsa peer-public-key import sshkey command can transform only RSA public keys. If you want DSA public keys to be transformed and configured automatically, use the public-key peer import sshkey command.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Description Use the ssh authentication-type default command to specify a default authentication mode for SSH users. After this command is configured, when an SSH user is added by...
Page 796
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Note: Both publickey and rsa-key indicate specifying the publickey key. They are implemented with the same method. Description Use the ssh client assign command to specify the name of the public key of the server on the client so that the client can authenticate whether the server to be accessed is reliable.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands 1.1.24 ssh client first-time enable Syntax ssh client first-time enable undo ssh client first-time View System view Parameters None Description Use the ssh client first-time enable command to enable the client to run first-time authentication for the SSH server it accesses for the first time.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands 1.1.25 ssh server authentication-retries Syntax ssh server authentication-retries times undo ssh server authentication-retries View System view Parameters times: Authentication retry times, in the range of 1 to 5.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands undo ssh server compatible-ssh1x View System view Parameters None Description Use the ssh server compatible-ssh1x enable command to make the server compatible with SSH1.x clients.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands By default, the update interval is zero, which indicates the system does not update the server keys. Caution: This command only takes effect on users whose client version is SSH1.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands System View: return to User View with Ctrl+Z. [Sysname] ssh server timeout 80 1.1.29 ssh user Syntax ssh user username undo ssh user username...
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Related commands: authentication-type default, user authentication-type. Examples # Specify the default authentication type as password authentication. Create an SSH user with the name “abc”.
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Note: On an SSH server, you need to assign a public key to each SSH user using publickey authentication. Both publickey and rsa-key indicate specifying the publickey key. They are implemented with the same method.
Page 804
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands password-publickey: Specifies the authentication mode for the SSH user as password and publickey. publickey: Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key ) authentication.
Page 807
Command Manual ( For Soliton ) – SSH H3C S3100 Series Ethernet Switches Chapter 1 SSH Commands Note: DES (data encryption standard) is a standard data encryption algorithm. AES (advanced encryption standard) is an advanced encryption standard algorithm. Description Use the ssh2 command to start the SSH client to establish a connection with an SSH server, and at the same time specify the preferred key exchange algorithm, encryption algorithms and HMAC algorithms between the server and client.
Page 808
Command Manual (For Soliton) – File System Management H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 File System Management Configuration Commands ..........1-1 1.1 File System Configuration Commands ................1-1 1.1.1 cd..........................1-1 1.1.2 copy......................... 1-2 1.1.3 delete........................
Chapter 1 File System Management Configuration Commands Note: S3100 series Ethernet switches allow you to input a file path and file name in one of the following ways: In universal resource locator (URL) format and starting with “unit1>flash:/”. or “flash:/” This method is used to specify a file in the current Flash memory. For example, the URL of a file named text.txt in the root directory of the switch is...
Page 810
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Parameter directory: Target directory. Description Use the cd command to enter a specified directory on the Ethernet switch. The default directory when a user logs onto the switch is the root directory of Flash memory.
Page 811
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Copy unit1>flash:/config.cfg to unit1>flash:/test/1.cfg?[Y/N]:y %Copy file unit1>flash:/config.cfg to unit1>flash:/test/1.cfg...Done. # Copy file config.cfg from the root directory to directory test, and save the file using the original file name.
Page 812
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands The delete running-files command only deletes its main attribute instead of the file itself. The delete standby-files command only deletes its backup attribute instead of the file itself.
Page 813
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Delete the backup web file? [Y/N]:n Start deleting ... Deleting ... done 1.1.4 dir Syntax dir [ /all ] [ file-url ]...
Page 814
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Note: In the output information of the dir /all command, deleted files (that is, those in the recycle bin) are embraced in brackets. The displayed directory of a deleted file is the directory to which the file belongs before it is deleted.
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands View System view Parameter filename: Batch file, with the extension .bat. Description Use the execute command to execute the specified batch file. Executing a batch file is to execute a set of commands in the batch file one by one.
Page 816
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Parameter alert: Specifies to prompt for confirmation before performing file-related operations that have potential risks. quiet: Specifies to disable prompts for file-related operations.
Page 817
Configuration Commands View User view Parameter device: Name of a device which must be “unit1>flash:” or “flash:” for S3100 series Ethernet switches. Description Use the fixdisk command to restore space on the Flash memory. In case that space on the Flash memory may become unavailable for reasons such as abnormal operations, you can run this command to restore the space.
Page 818
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Example # Format the Flash memory. <Sysname>format unit1>flash: All data on unit1>flash: will be lost , proceed with format ? [Y/N]:y ......
Page 819
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands 1.1.10 more Syntax more file-url View User view Parameter file-url: Path name or file name of a file in the Flash memory.
Page 820
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands 1.1.11 move Syntax move fileurl-source fileurl-dest View User view Parameter fileurl-source: Name of the source file. fileurl-dest: Name of the target file.
Page 821
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands View User view Parameter None Description Use the pwd command to display the current working path of the login user.
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands 1.1.14 reset recycle-bin Syntax reset recycle-bin [ file-url ] [ /force ] View User view Parameter file-url: Path name or file name of a file in the Flash memory. This argument supports the wildcard “*”.
Page 823
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands -rw- 3608 Dec 03 2007 17:29:30 [b.cfg] 7239 KB total (1930 KB free) //The above information indicates that in directory flash:, there are two files a.cfg and b.cfg in the recycle bin.
Page 824
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands 1.1.15 rmdir Syntax rmdir directory View User view Parameter directory: Name of a directory. Description Use the rmdir command to delete a directory.
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands Parameter file-url: Path or the name of the app file in the Flash memory, a string comprising 1 to 64 characters.
Page 827
<Sysname> boot web-package boot.web main 1.2.5 display boot-loader Syntax display boot-loader [ unit unit-id ] View Any view Parameter unit unit-id: Specifies the unit ID of a switch. You cannot choose any other number except 1 for S3100 series Ethernet switches. 1-19...
Web files with the main and backup attributes used for next startup. Example # Display information about the Web file used by the device. <Sysname>display web package The current using web package is: flash:/h3c-http3.1.5-0040.web The main web package is: unit1>flash:/h3c-http3.1.5-0040.web The backup web package is: unit1>flash:/ 1.2.7 startup bootrom-access enable...
Page 829
Command Manual (For Soliton) – File System Management Chapter 1 File System Management H3C S3100 Series Ethernet Switches Configuration Commands undo startup bootrom-access enable View User view Parameter None Description Use the startup bootrom-access enable command to specify a switch to prompt users to use customized password to enter the BOOT menu.
Page 830
Command Manual (For Soliton) – FTP-SFTP-TFTP H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 FTP and SFTP Configuration Commands ..............1-1 1.1 FTP Server Configuration Commands................1-1 1.1.1 display ftp-server ..................... 1-1 1.1.2 display ftp-user ......................1-2 1.1.3 ftp disconnect ......................
Page 831
Command Manual (For Soliton) – FTP-SFTP-TFTP H3C S3100 Series Ethernet Switches Table of Contents 1.4.3 cdup........................1-25 1.4.4 delete........................1-26 1.4.5 dir .......................... 1-27 1.4.6 exit......................... 1-27 1.4.7 get ......................... 1-28 1.4.8 help........................1-29 1.4.9 ls..........................1-29 1.4.10 mkdir........................1-30 1.4.11 put ........................
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 FTP and SFTP Configuration Commands 1.1 FTP Server Configuration Commands 1.1.1 display ftp-server Syntax display ftp-server View Any view Parameters...
Page 833
The current login user number is 0. Timeout value (in minute) The connection idle time is 30 minutes. Note: The H3C S3100 series Ethernet switch supports one user access at one time when it serves as the FTP server. 1.1.2 display ftp-user Syntax...
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Display the information of the FTP users that have logged in to the switch. <Sysname> display ftp-user UserName HostIP Port...
Commands Note: With an H3C S3100 series Ethernet switch acting as the FTP server, if you attempt to disconnect a user that is uploading/downloading data to/from the FTP server, the S3100 Ethernet switch will disconnect the user after the data transmission is completed.
Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands By default, the FTP server function is disabled on the H3C S3100 series switch to avoid potential security risks. Note: To protect unused sockets from being attacked by malicious users, the H3C S3100 series Ethernet switch provides the following functions: TCP 21 is enabled only when you start the FTP server.
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands can set an idle timeout time so that the FTP server considers an FTP connection invalid and terminates it if no data exchange occurs on it in idle timeout time.
Page 838
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Specify to transfer text files in ASCII mode. [ftp] ascii 200 Type set to A. 1.2.2 binary Syntax binary View...
Page 839
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands This command has the same effect as that of the quit command. Examples # Terminate the connections with the remote FTP server and return to user view.
Page 840
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Description Use the cdup command to exit the current working directory and enter the parent directory. The parent directory must be a directory that a user is authorized to access;...
Page 841
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands 1.2.7 delete Syntax delete remotefile View FTP client view Parameters remotefile: Name of the file to be deleted. Description Use the delete command to delete a specified remote file.
Page 842
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Caution: You can use the dir command to display the file-related information such as file size, creation date, and so on. To display only the names of all the files under the current directory, use the ls command.
Page 843
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands 1.2.9 disconnect Syntax disconnect View FTP client view Parameters None Description Use the disconnect command to terminate an FTP connection without quitting FTP client view.
Page 844
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Connect to the FTP server whose IP address is 2.2.2.2. <Sysname> ftp 2.2.2.2 Trying ... Press CTRL+K to abort Connected.
Page 845
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Download file temp.c. [ftp] get temp.c 227 Entering Passive Mode (2,2,2,2,4,12). 125 ASCII mode data connection already open, transfer starting for temp.c.
Page 846
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands localfile: Name of the local file where the querying result is to be saved. Description Use the ls command to display the information about a specified file on an FTP server.
Page 847
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands View FTP client view Parameters pathname: Name of the directory to be created. Description Use the mkdir command to create a directory on an FTP server.
Page 848
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Establish a control connection with the FTP server whose IP address is 1.1.1.1 in FTP client view. [ftp]open 1.1.1.1 Trying ...
Page 849
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Therefore, you are recommended to set the data transmission mode of the FTP client to passive when accessing the FTP server through a firewall.
Page 850
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the pwd command to display the working directory on an FTP server. Related commands: cd, cdup, dir, ls.
Page 851
This command works only when the FTP server provides the help information about FTP protocol commands. Caution: This command is always valid when an H3C series Ethernet switch operates as the FTP server. If you use other FTP server software, refer to related instructions to know whether the FTP server provides help information about FTP protocol commands.
Page 852
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands If the destination file name conflicts with the name of an existing file or directory, you will fail to rename the file.
Page 853
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Description Use the user command to log in to an FTP server with the specified username and password. Examples # Log in to the FTP server using the user account with the username tom and the password 111.
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands [ftp] get test.cfg ..FTP: 1740 byte(s) received in 9.367 second(s) 185.00 byte(s)/sec. The above output indicates that if the verbose function is disabled, only execution information of users’...
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands View System view Parameters time-out-value: Timeout time, in the range 1 to 35,791, in minutes. The default value is Description Use the sftp timeout command to set the idle timeout time on an SFTP server.
Page 856
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands [Sysname] 1.4.2 cd Syntax cd [ remote-path ] View SFTP client view Parameters remote-path: Path of the target directory on the remote server.
Page 857
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Parameters None Description Use the cdup command to change the working path on the remote SFTP server and return to the parent directory.
Page 858
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands 1.4.5 dir Syntax dir [ -a | -l ] [ remote-path ] View SFTP client view Parameters -a: Displays the file and folder names in a specified directory.
Page 859
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands View SFTP client view Parameters None Description Use the exit command to terminate a connection with the remote SFTP server and return to system view.
Page 860
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Received status: Success Downloading file successfully ended 1.4.8 help Syntax help [ all |command ] View SFTP client view Parameters all: Displays all the command names.
Page 861
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands If -a or -l is not specified, the command displays details about the files and folders in the specified directory in a list.
Page 862
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands 1.4.11 put Syntax put local-file [ remote-file ] View SFTP client view Parameters local-file: Name of a local file. remote-file: Name of a file on the remote SFTP server.
Page 863
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands sftp-client> pwd 1.4.13 quit Syntax quit View SFTP client view Parameters None Description Use the quit command to terminate a connection with the remote SFTP server and return to system view.
Page 864
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Examples # Delete the file named temp.c from the server. sftp-client> remove temp.c The followed File will be deleted: /temp.c Are you sure to delete it?(Y/N):y This operation may take a long time.Please wait...
Page 865
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Parameters remote-path&<1-10>: Name of a directory on the remote SFTP server. &<1-10> indicates that up to ten file names can be input. These file names should be separated by spaces.
Page 866
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands dh_group1: Key exchange algorithm diffie-hellman-group1-sha1. It is the default key exchange algorithm. dh_exchange_group: exchange algorithm diffie-hellman-group-exchange-sha1. prefer_ctos_cipher: Preferred client-to-server encryption algorithm. The default algorithm is aes128.
Page 867
Command Manual (For Soliton) – FTP-SFTP-TFTP Chapter 1 FTP and SFTP Configuration H3C S3100 Series Ethernet Switches Commands Do you want to save the server's public key?(Y/N):y Enter password: sftp-client> 1-36...
Command Manual (For Soliton) – FTP-SFTP-TFTP H3C S3100 Series Ethernet Switches Chapter 2 TFTP Configuration Commands Chapter 2 TFTP Configuration Commands 2.1 TFTP Configuration Commands Note: When accessing a TFTP server configured with an IPv6 address, use the tftp ipv6 command.
Page 869
TFTP server and relog in. The H3C S3100 series switch supports the TFTP file size negotiation function, namely, before downloading a file, the switch requests the size of the file to be downloaded to the TFTP server, thus to ensure whether there is enough space on the Flash for file downloading.
Page 870
Command Manual (For Soliton) – FTP-SFTP-TFTP H3C S3100 Series Ethernet Switches Chapter 2 TFTP Configuration Commands Downloading file from remote tftp server, please wait..Not enough space; Writing to device failed; Downloaded data will be deleted..... Deleting file successful. # Download file temp.txt from the TFTP server (1.1.1.1) and save it as test2.txt (suppose that free space of the Flash is insufficient and the TFTP server supports file size negotiation).
Page 871
Command Manual (For Soliton) – FTP-SFTP-TFTP H3C S3100 Series Ethernet Switches Chapter 2 TFTP Configuration Commands Examples # Upload file config.cfg to the TFTP server whose IP address is 1.1.1.1 and save it as temp.cfg. <Sysname> tftp 1.1.1.1 put config.cfg temp.cfg File will be transferred in binary mode.
Page 872
Command Manual (For Soliton) – Information Center H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Information Center Configuration Commands ............1-1 1.1 Information Center Configuration Commands ..............1-1 1.1.1 display channel......................1-1 1.1.2 display info-center ....................1-1 1.1.3 display logbuffer ......................
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Chapter 1 Information Center Configuration Commands 1.1 Information Center Configuration Commands 1.1.1 display channel Syntax display channel [ channel-number | channel-name ]...
Page 874
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Parameter unit-id: Unit ID of the device, the value can only be 1. Description Use the display info-center command to display the operation status of information center, the configuration of information channels, the format of time stamp.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Table 1-1 Description on the fields of the display info-center command Field Description Information Center Status of the information center: enabled/disabled Information about the log host, including its IP address,...
Page 876
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Table 1-2 Severity level defined in the information center Severity Severity value Description emergencies The system is unavailable. alerts Information that demands prompt reaction...
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands The rest is omitted here. Table 1-3 display logbuffer command output description Field Description Logging buffer configuration Indicates the current state of the log buffer and its and contents contents, which could be enabled or disabled.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands The above information indicates that there are 94 warnings and one informational information in the log buffer. 1.1.5 display trapbuffer Syntax display trapbuffer [ unit unit-id ] [ size buffersize ]...
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands 1.1.6 info-center channel name Syntax info-center channel channel-number name channel-name undo info-center channel channel-number View System view Parameter channel-number: Channel number, ranging from 0 to 9, corresponding to the 10 channels of the system.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Parameter channel-number: Channel number, ranging from 0 to 9, corresponding to the 10 channels of the system. channel-name: Channel name, by default, the name of channel 0 to channel 9 is (in turn) console, monitor, loghost, trapbuffer, logbuffer, snmpagent, channel6, channel7, channel8, channel9.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands The switch can output system information to the log host, the console, and other destinations only when the information center is enabled.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands This command works only when the information center is enabled. Related command: info-center enable, display info-center. Example # Configure the system to output information to the log buffer with the size of 50.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands This command works only when the information center is enabled. Note: Be sure to set the correct IP address in the info-center loghost command. A loopback IP address will cause an error message, prompting that the address is invalid.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands undo info-center snmp channel View System view Parameter channel-number: Channel number, ranging from 0 to 9, corresponding to the 10 channels of the system.
Page 886
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands channel-name: Channel name, by default, the name of channel 0 to channel 9 is (in turn) console, monitor, loghost, trapbuffer, logbuffer, snmpagent, channel6, channel7, channel8, channel9.
Page 887
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands You can configure to output the log, trap and debugging information to the log buffer, but the log buffer only receives the log and debugging information and discards the trap information.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Examples # Set the output channel for the log information of VLAN module to snmpagent and to output information with severity being emergencies. Log information of other modules cannot be output to this channel.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Note: The synchronous information output function is used in the case that your input is interrupted by a large amount of system output. With this function enabled, the system echoes your previous input and you can continue your operations from where you were stopped.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands hh:mm:ss:sss: The local time, with hh ranging from 00 to 23, mm and ss ranging from 00 to 59, and sss ranging from 0 to 999.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands By default, the date time stamp is adopted. Example # Set the no-year-date time stamp for the output information sent to the log host.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands with utc log - date, trap - date, debug - boot # If you configure to add the UTC time zone in the time stamp, the system information is...
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Example # Enable the system to output trap information to the trap buffer, whose size is set to 30. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands Description Use the terminal logging command to enable log terminal display. Use the undo terminal logging command to disable log terminal display.
Command Manual (For Soliton) – Information Center Chapter 1 Information Center Configuration H3C S3100 Series Ethernet Switches Commands 1.1.25 terminal trapping Syntax terminal trapping undo terminal trapping View User view Parameter None Description Use the terminal trapping command to enable trap terminal display.
Page 897
Command Manual (For Soliton) – System Maintenance and Debugging H3C S3100 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Basic System Configuration and Debugging Commands........1-1 1.1 Basic System Configuration Commands ................1-1 1.1.1 clock datetime ......................1-1 1.1.2 clock summer-time ....................
Page 898
Command Manual (For Soliton) – System Maintenance and Debugging H3C S3100 Series Ethernet Switches Table of Contents 3.1.15 schedule reboot delay ..................3-16 3.1.16 schedule reboot regularity................... 3-17 3.1.17 system-monitor enable..................3-18 3.1.18 xmodem get......................3-19...
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands <Sysname> clock summer-time abc2 repeating 06:00:00 08/01/2005 06:00:00 09/01/2005 01:00:00 <Sysname> display clock 00:01:25 UTC Mon 01/01/2001 Time Zone : add 00:00:00 Summer-Time : abc2 repeating 06:00:00 08/01/2005 06:00:00 09/01/2005 01:00:00 1.1.3 clock timezone...
Page 902
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands Summer-Time : abc1 one-off 06:00:00 08/01/2005 06:00:00 09/01/2005 01:00:00 1.1.4 quit Syntax quit View Any view Parameter None Description Use the quit command to return from current view to a lower level view.
Page 903
Ethernet switch. Changing the system name will affect the CLI prompt. For example, if the system name of the switch is H3C, the prompt for user view is <H3C>. Example...
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] sysname LANSwitch [LANSwitch] 1.1.7 system-view Syntax system-view...
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands Description Use the display clock command to display the current date, time, timezone and summertime of the system, so that you can adjust them if they are wrong.
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands bytes Flash Memory Config Register points to FLASH Hardware Version is REV.A Bootrom Version is 506 CPLD Version is 001 [Subslot 0] 24FE Hardware Version is REV.A...
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands For information about the terminal monitor command, refer to Information Center Command. Example # Enable IP packet debugging of the IP module.
Page 909
Chapter 1 Basic System Command Manual (For Soliton) – System Maintenance and Debugging Configuration and Debugging H3C S3100 Series Ethernet Switches Commands Diagnostic-information saved Flash displayed(Y=save N=display)?[Y/N]n -------------------- display version -------------------- …… <Omitted> 1.3.3 terminal debugging Syntax terminal debugging undo terminal debugging...
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 2 Network Connectivity Test H3C S3100 Series Ethernet Switches Commands Chapter 2 Network Connectivity Test Commands 2.1 Network Connectivity Test Commands 2.1.1 ping Syntax ping [ -a ip-address ] [ -c count ] [ -d ] [ -f ] [ -h ttl ] [ -i interface-type interface-number ]...
Page 911
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 2 Network Connectivity Test H3C S3100 Series Ethernet Switches Commands -q: Specifies to display only the statistics without the details. By default, all the information including the details and statistics will be displayed.
Page 912
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 2 Network Connectivity Test H3C S3100 Series Ethernet Switches Commands Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms Reply from 202.38.160.244 : bytes=56 sequence=4 ttl=255 time = 3ms...
Page 913
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 2 Network Connectivity Test H3C S3100 Series Ethernet Switches Commands -w timeout: Specifies the timeout time to wait for ICMP error packets. The timeout argument ranges from 0 to 65,535 and defaults to 5,000 (in milliseconds).
Page 914
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 2 Network Connectivity Test H3C S3100 Series Ethernet Switches Commands 14 * * * 15 * * * 16 * * * 17 * * * 18 18.26.0.115 (18.26.0.115) 339 ms 279 ms 279 ms...
Page 916
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Parameter file-ulr: Path plus name of a Boot ROM file (that is, a .btm file) in the Flash, a string of 1 to 64 characters.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Table 3-1 Description for the fields of the display boot-loader command Field Description The current boot app is Current boot file of the system...
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands 3.1.5 display device Syntax display device [ manuinfo | unit unit-id ] View Any view Parameter manuinfo: Specifies to display the manufacture information of the specified switch.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Field Description AddrLM MAC address learning mode Type Card type State Running state 3.1.6 display memory Syntax display memory [ unit unit-id ]...
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands 3.1.7 display power Syntax display power [ unit unit-id [ power-id ] ] View Any view Parameter unit-id: Unit ID of a switch, the value can only be 1.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands <Sysname> display schedule reboot System will reboot at 16:00:00 2002/11/1 (in 2 hours and 5 minutes). 3.1.9 display transceiver alarm interface...
Page 922
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Field Remarks Transceiver type and port Transceiver type does not match port configuration mismatch configuration. Transceiver type not supported by Transceiver type is not supported on the port.
Page 923
Transceiver type does not match port configuration mismatch configuration. Transceiver type not supported by Transceiver type is not supported on the port. port hardware Note: For pluggable transceivers supported by S3100 series Ethernet switches, refer to H3C S3100 Series Ethernet Switches Installation Manual(For Soliton).
H3C. Examples # Display the currently measured value of digital diagnosis parameters of the anti-spoofing pluggable optical transceiver customized by H3C on interface GigabitEthernet 1/2/2. <Sysname> display transceiver diagnosis interface gigabitethernet 1/2/2 GigabitEthernet1/2/2 transceiver diagnostic information: Current diagnostic parameters: Temp(°C)
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Table 3-7 Description on the fields of display transceiver diagnosis interface Field Description Digital diagnosis information of the transceiver diagnostic information...
Page 926
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Digital Diagnostic Monitoring : YES Vendor Name : H3C Ordering Name : SFP-GE-LX10-SM1310 Table 3-8 Description on the fields of the display transceiver interface command...
H3C. Examples # Display part of the electrical label information of the anti-spoofing pluggable transceiver customized by H3C on interface GigabitEthernet 1/2/2. <Sysname> display transceiver manuinfo interface gigabitethernet 1/2/2 GigabitEthernet1/2/2 transceiver manufacture information: Manu. Serial Number...
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Parameter unit-id: Unit ID of a switch, the value can only be 1. Description Use the reboot command to restart a specified Ethernet switch.
Page 929
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands mm/dd/yyyy or yyyy/mm/dd: Reboot date, where yyyy (year) ranges from 2,000 to 2,099, mm (month) ranges from 1 to 12, and the range of dd (day) depends on the specific month.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands 3.1.15 schedule reboot delay Syntax schedule reboot delay { hh:mm | mm } undo schedule reboot View User view Parameter hh:mm: Reboot waiting delay, where hh ranges from 0 to 720, and mm ranges from 0 to 59.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Related command: reboot, schedule reboot at, undo schedule reboot, display schedule reboot. Example # Schedule a reboot so that the switch reboots at 10:00 every Thursday.
Command Manual (For Soliton) – System Maintenance and Debugging Chapter 3 Device Management H3C S3100 Series Ethernet Switches Commands Example # Disable real-time monitoring of the running status of the system. <Sysname> system-view System View: return to User View with Ctrl+Z.
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Commands Chapter 1 VLAN-VPN Configuration Commands 1.1 VLAN-VPN Configuration Commands 1.1.1 display port vlan-vpn Syntax display port vlan-vpn View Any view Parameters None Description Use the display port vlan-vpn command to display the information about VLAN-VPN configuration of the current system.
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Commands Field Description The VLAN corresponding to the tag that the port tags VLAN-VPN VLAN packets with, that is, the default VLAN of the port 1.1.2 vlan-vpn enable...
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Commands 1.1.3 vlan-vpn tpid Syntax vlan-vpn tpid value undo vlan-vpn tpid View System view Parameters value: User-defined TPID value (in hexadecimal format), in the range 0x0001 to 0xFFFF.
Page 938
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 1 VLAN-VPN Configuration Commands Examples # Set the global TPID value to 0x9100. <Sysname> system-view System View: return to User View with Ctrl+Z. [Sysname] vlan-vpn tpid 9100...
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration Commands Before configuring this command in QinQ view, you need to use the vlan-vpn vid command to configure the outer VLAN tag to be used in the selective QinQ policy.
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 2 Selective QinQ Configuration Commands Examples # Specify to add VLAN 20 tag as the outer tags to the packets with their inner VLAN IDs being 2 through 14.
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration Commands By default, no global VLAN mapping rule or port-level VLAN mapping rule is defined. Note: A port that is in a link aggregation port group cannot have the VLAN Mapping feature enabled.
Page 944
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 3 VLAN Mapping Configuration Commands By default, the VLAN mapping function is disabled. Note: A port that is in a link aggregation port group cannot have the VLAN Mapping feature enabled.
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Commands Use the undo bpdu-tunnel command to disable BPDU tunnel on a port. By default, BPDU tunnel is disabled on a port. After you enable a port to transmit packets of a specified protocol type through the...
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Commands Parameters mac-address: Destination MAC address to be assigned to the protocol packets transmitted along a BPDU tunnel. This argument must be a multicast MAC address.
Page 948
Command Manual (For Soliton) – VLAN-VPN H3C S3100 Series Ethernet Switches Chapter 4 BPDU Tunnel Configuration Commands Parameters None Description Use the display bpdu-tunnel command to display the private multicast MAC address configured for protocol packets transmitted along the BPDU tunnel(s).
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Chapter 1 HWPing Commands 1.1 HWPing Client Commands 1.1.1 count Syntax count times undo count View HWPing test group view Parameters times: Number of probes in each test. The times argument ranges from 1 to 15.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands View HWPing test group view Parameters size: Size of a test packet in bytes. The value range varies with the test types. Table 1-1 Value range of the HWPing test packets...
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Description Use the destination-ip command to configure a destination IP address of a HWPing test. Use the undo destination-ip command to remove the configured destination IP address.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands By default, no destination port number is configured for a test. Related commands: destination-ip. Note: The destination-port command has effect on jitter, TCP-Private, and UDP-Private tests only.
Page 954
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Without administrator-name test-operation-tag specified, the command displays the results of all test groups; without administrator-name test-operation-tag specified, the command displays the results of the specified test group.
Page 955
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Field Description Number of times the test failed because the System busy operation number system was busy Operation sequence errors Number of out-of-sequence packets received...
Page 956
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Table 1-3 Description on the fields of the display hwping history command Field Description Roundtrip time in the case of a successful test, Response timeout time in the case of test timeout, or 0 in the...
Page 957
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Other operation errors: 0 Http result: DNS Resolve Time: 0 HTTP Operation Time: 675 DNS Resolve Min Time: 0 HTTP Test Total Time: 748 DNS Resolve Max Time: 0...
Page 958
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands # Display the result of the test group with the administrator name being administrator, and the operation tag being Jitter. [Sysname-hwping-administrator-Jitter] display hwping results administrator...
Page 959
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Field Description Maximum positive jitter delay from the source to the Max Positive SD destination Maximum positive jitter delay from the destination to the Max Positive DS...
Page 960
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Field Description Negative SD Square Sum of the square of negative jitter delays from the source to the destination Negative DS Square Sum of the square of negative jitter delays from the...
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Field Description DNS Resolve Timeout Times DNS resolution timeout times DNS Resolve Failed Times Number of failed DNS resolutions Note: The description on a specific field is available for the test results of all types of tests, so that not the description on the output information of all types of tests is provided here.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands System View: return to User View with Ctrl+Z [Sysname] hwping administrator dns [Sysname-hwping-administrator-dns] test-type dns [Sysname-hwping-administrator-dns] dns-server 192.168.1.1 1.1.7 dns resolve-target Syntax dns resolve-target domain-name...
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands View HWPing test group view Parameters file-name: Name of the file to be downloaded/uploaded in FTP tests, a string of 1 to 255 characters. Description Use the filename command to specify a file to be downloaded/uploaded in FTP tests.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Description Use the frequency command to configure the time interval of performing automatic tests. Use the undo frequency command to restore the default. If interval is configured greater than 0, the system performs automatic tests at this interval.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Related commands: username, password. Note: The ftp-operation command applies to FTP tests only. Examples # Set the FTP operation mode to put in an FTP test.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands [Sysname-hwping-administrator-icmp] history-records 10 1.1.12 http-operation Syntax http-operation { get | post } View HWPing test group view Parameters get: Specifies the test operation to be download from the HTTP server.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Parameters string: HTTP operation string used to specify the webpage to be accessed, in the range 1 to 255 characters. version: HTTP version, in the range 1 to 255 characters. At present, this argument can only be HTTP/1.0, where HTTP must be capitalized.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands HWPing test group view directly. Use the undo hwping command to delete the test group. Examples # Create a HWPing test group of which the administrator name is “administrator” and operation tag is “ICMP”.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands undo jitter-interval View HWPing test group view Parameters interval: Interval in milliseconds between jitter test packets. The value is in the range of 10 to 1000.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Parameters number: Number of packets to be transmitted in one probe for a jitter test, in the range of 10 to 100. Description Use the jitter-packetnum command to configure the number of packets to be sent in one probe for a jitter test.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands By default, the password for logging in to the FTP server is not configured. Related commands: username and ftp-operation. Note: To perform an FTP test successfully, the configured password must be consistent with the FTP user password configured on the server.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands System View: return to User View with Ctrl+Z [Sysname] hwping administrator icmp [Sysname-hwping-administrator-icmp] test-type icmp [Sysname-hwping-administrator-icmp] probe-failtimes 3 1.1.20 send-trap Syntax send-trap { all | { probefailure | testcomplete | testfailure }* }...
Page 973
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands View HWPing test group view Parameters interface-type interface-number: Interface type and interface number. Description For ICMP tests, use the source-interface command to specify a source interface for sending ICMP requests.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands 1.1.22 source-ip Syntax source-ip ip-address undo source-ip View HWPing test group view Parameters ip-address: Source IP address for a test. Description Use the source-ip command to configure the source IP address for the test.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands View HWPing test group view Parameters port-number: Source port number, in the range of 1 to 65,535. Description Use the source-port command to configure the source port number for this test.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands tcpprivate: Indicates a TCP test on a specified (unknown) port. tcppublic: Indicates a TCP test on port 7. udpprivate: Indicates a UDP test on a specified (unknown) port.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Examples # Perform a HWPing test on an ICMP test group with the administrator name and operation tag being administrator and icmp respectively. <Sysname> system-view...
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands 1.1.27 timeout Syntax timeout time undo timeout View HWPing test group view Parameters time: Timeout time for one probe, in the range of 1 to 60, in seconds.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Use the undo tos command to remove the ToS value in a HWPing test packet header. By default, no ToS value is configured. Note: This command does not apply to DHCP tests.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Note: To perform an FTP test successfully, the configured username must be consistent with the username configured on the FTP server. This command applies to FTP tests only.
When performing a TCP connection test on a specified port of a HWPing client, you must create a TCP listening on the HWPing server if the server is an H3C S3100 series Ethernet switch; otherwise, the TCP test may fail.
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Caution: The port number used by HWPing server for TCP listening cannot be set to a number greater than 50000 or to some special port numbers that are for fixed functions, such as 1701.
Page 983
Command Manual (For Soliton) – HWPing H3C S3100 Series Ethernet Switches Chapter 1 HWPing Commands Examples # Enable UDP listening, using 169.254.10.2 as the IP address and 9000 as the port number. <Sysname> system-view System View: return to User View with Ctrl+Z [Sysname] hwping-server udpecho 169.254.10.2 9000...
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Note: When you use the display dns ipv6 dynamic-host command to check the IPv6 dynamic domain names in the cache, the system will display the first 21 characters of the domain names if they contain more than 21 characters.
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Description Use the display ipv6 host command to display the mapping between host name and IPv6 address. Related commands: ipv6 host. Examples # Display the mapping between host name and IPv6 address.
Page 990
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands configured is displayed; if interface-type interface-number is specified, the IPv6 information of the specified interface is displayed. If the brief keyword is specified, the brief IPv6 information of the interface is displayed.
Page 991
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Field Description link-local address Link-local address configured on an interface Global unicast Aggregatable global unicast address configured on an address(es) interface Joined group...
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Field Description Interface link state: *down: Indicates the VLAN interface is administratively down; that is, the interface is shut down using the shutdown command.
Page 993
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands begin: Displays the first matching neighbor entry and all the neighbor entries following it. exclude: Displays the neighbor entries not matching the specified regular expression.
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Field Description State of a neighbor, which can be: INCMP: Address resolution is in progress, so the link layer address of the neighbor is unknown yet.
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Description Use the display ipv6 neighbors count command to display the total number of neighbor entries satisfying the specified condition. Examples # Display the total number of neighbor entries acquired dynamically.
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands socket state = SS_PRIV SS_ASYNC SOCK_DGRAM: SOCK_RAW: Table 1-9 Description on the fields of the display ipv6 socket command Field Description Socket type, which can be: SOCK_STREAM: Refers to TCP.
Page 999
Command Manual (For Soliton) – IPv6 Management H3C S3100 Series Ethernet Switches Chapter 1 IPv6 Configuration Commands Description Use the display ipv6 statistics command to display statistics of IPv6 packets and ICMPv6 packets. You can use the reset ipv6 statistics command to clear all IPv6 and ICMPv6 packet statistics.
Need help?
Do you have a question about the S3100 Series and is the answer not in the manual?
Questions and answers