H3C S5120-HI Series Manuals

Manuals and User Guides for H3C S5120-HI Series. We have 6 H3C S5120-HI Series manuals available for free PDF download: Security Configuration Manual, Installation Manual, Configuration Manual, Compliance And Safety Manual, Quick Start

H3C S5120-HI Series Security Configuration Manual (379 pages)

Brand: H3C | Category: Switch | Size: 3.31 MB

Table of Contents
8
Configuring AAA
18
802.1X Overview
84
- 802.1X Architecture
  84
- Controlled/Uncontrolled Port and Port Authorization Status
  84
- 802.1X-Related Protocols
  85
  - Packet Formats
    86
  - EAP over RADIUS
    87
- Initiating 802.1X Authentication
  87
  - 802.1X Client as the Initiator
    87
  - Access Device as the Initiator
    88
- 802.1X Authentication Procedures
  88
  - A Comparison of EAP Relay and EAP Termination
    89
  - EAP Relay
    89
  - EAP Termination
    92
Configuring 802.1X
93
Configuring EAD Fast Deployment
119
- Overview
  119
  - Free IP
    119
  - URL Redirection
    119
- Configuration Prerequisites
  119
- Configuring a Free IP
  119
- Configuring the Redirect URL
  120
- Setting the EAD Rule Timer
  120
- Displaying and Maintaining EAD Fast Deployment
  121
- EAD Fast Deployment Configuration Example
  121
  - Network Requirements
    121
  - Configuration Procedure
    122
  - Verifying the Configuration
    122
- Troubleshooting EAD Fast Deployment
  123
  - Web Browser Users Cannot be Correctly Redirected
    123
Configuring MAC Authentication
124
- Overview
  124
  - User Account Policies
    124
  - Authentication Approaches
    124
  - MAC Authentication Timers
    125
- Using MAC Authentication with Other Features
  125
  - VLAN Assignment
    125
  - ACL Assignment
    125
  - Guest VLAN
    125
  - Critical VLAN
    126
- Configuration Task List
  126
- Basic Configuration for MAC Authentication
  126
  - Configuring MAC Authentication Globally
    127
  - Configuring MAC Authentication on a Port
    127
- Specifying a MAC Authentication Domain
  128
- Configuring a MAC Authentication Guest VLAN
  128
- Configuring a MAC Authentication Critical VLAN
  129
- Configuring MAC Authentication Delay
  130
- Enabling MAC Authentication Multi-VLAN Mode
  130
- Displaying and Maintaining MAC Authentication
  131
- MAC Authentication Configuration Examples
  131
Configuring Portal Authentication
138
Configuring Triple Authentication
159
Configuring Port Security
169
- Overview
  169
  - Port Security Features
    169
  - Port Security Modes
    169
  - Working with Guest VLAN and Auth-Fail VLAN
    172
- Configuration Task List
  172
- Enabling Port Security
  173
- Setting Port Security's Limit on the Number of MAC Addresses on a Port
  173
- Setting the Port Security Mode
  174
  - Configuration Prerequisites
    174
  - Configuration Procedure
    174
- Configuring Port Security Features
  175
  - Configuring NTK
    175
  - Configuring Intrusion Protection
    175
  - Enabling Port Security Traps
    176
- Configuring Secure MAC Addresses
  176
  - Configuration Prerequisites
    177
  - Configuration Procedure
    177
- Ignoring Authorization Information
  178
- Displaying and Maintaining Port Security
  179
- Port Security Configuration Examples
  179
- Troubleshooting Port Security
  188
Configuring a User Profile
191
- Overview
  191
- User Profile Configuration Task List
  191
- Creating a User Profile
  191
- Applying a Qos Policy
  192
- Enabling a User Profile
  192
- Displaying and Maintaining User Profiles
  193
Configuring Password Control
194
Configuring HABP
205
- Overview
  205
- Configuring HABP
  206
  - Configuring the HABP Server
    206
  - Configuring an HABP Client
    206
- Displaying and Maintaining HABP
  207
- HABP Configuration Example
  207
Managing Public Keys
210
Configuring PKI
220
- Overview
  220
  - PKI Terms
    220
  - PKI Architecture
    221
  - PKI Operation
    221
  - PKI Applications
    222
- PKI Configuration Task List
  222
- Configuring an Entity DN
  223
- Configuring a PKI Domain
  224
  - Configuration Guidelines
    225
  - Configuration Procedure
    225
- Submitting a PKI Certificate Request
  225
  - Submitting a Certificate Request in Auto Mode
    226
  - Submitting a Certificate Request in Manual Mode
    226
- Retrieving a Certificate Manually
  227
  - Configuration Guidelines
    227
  - Configuration Procedure
    228
- Configuring PKI Certificate Verification
  228
- Destroying a Local RSA Key Pair
  229
- Deleting a Certificate
  230
- Configuring an Access Control Policy
  230
- Displaying and Maintaining PKI
  230
- PKI Configuration Examples
  231
- Troubleshooting PKI
  239
Configuring Ipsec
241
- Overview
  241
  - Basic Concepts
    241
  - Protocols and Standards
    244
- Configuring Ipsec
  244
- Implementing ACL-Based Ipsec
  244
- Displaying and Maintaining Ipsec
  253
- Ipsec Configuration Examples
  253
  - IKE-Based Ipsec Tunnel for Ipv4 Packets Configuration Example
    253
Configuring IKE
256
- Overview
  256
  - IKE Security Mechanism
    256
  - IKE Operation
    256
  - IKE Functions
    257
  - Relationship between IKE and Ipsec
    258
  - Protocols and Standards
    258
- IKE Configuration Task List
  258
- Configuring a Name for the Local Security Gateway
  259
- Configuring an IKE Proposal
  259
- Configuring an IKE Peer
  260
- Setting Keepalive Timers
  262
- Setting the NAT Keepalive Timer
  262
- Configuring a DPD Detector
  263
- Disabling Next Payload Field Checking
  263
- Displaying and Maintaining IKE
  264
- IKE Configuration Example
  264
- Troubleshooting IKE
  267
  - Invalid User ID
    267
  - Proposal Mismatch
    267
  - Failing to Establish an Ipsec Tunnel
    268
  - ACL Configuration Error
    268
Configuring SSH2.0
269
Configuring SFTP
294
Configuring SCP
305
- Overview
  305
- FIPS Compliance
  305
- Configuring the Switch as an SCP Server
  305
- Configuring the Switch as the SCP Client
  306
  - SCP Client Configuration Example
    307
  - SCP Server Configuration Example
    308
Configuring SSL
310
- Overview
  310
  - SSL Security Mechanism
    310
  - SSL Protocol Stack
    310
- FIPS Compliance
  311
- Configuration Task List
  311
- Configuring an SSL Server Policy
  311
  - SSL Server Policy Configuration Example
    313
- Configuring an SSL Client Policy
  315
- Displaying and Maintaining SSL
  316
- Troubleshooting SSL
  316
Configuring TCP Attack Protection
317
- Overview
  317
- Enabling the SYN Cookie Feature
  317
- Displaying and Maintaining TCP Attack Protection
  317
Configuring IP Source Guard
318
Configuring ARP Attack Protection
336
- Overview
  336
- ARP Attack Protection Configuration Task List
  336
- Configuring ARP Defense against IP Packet Attacks
  337
- Configuring ARP Packet Rate Limit
  339
  - Introduction
    339
  - Configuration Procedure
    339
- Configuring Source MAC Address Based ARP Attack Detection
  340
- Configuring ARP Packet Source MAC Address Consistency Check
  343
  - Introduction
    343
  - Configuration Procedure
    343
- Configuring ARP Active Acknowledgement
  343
- Configuring ARP Detection
  344
- Configuring ARP Automatic Scanning and Fixed ARP
  351
  - Configuration Guidelines
    352
  - Configuration Procedure
    352
- Configuring ARP Gateway Protection
  352
  - Configuration Procedure
    353
  - Configuration Example
    353
- Configuring ARP Filtering
  354
  - Configuration Guidelines
    354
  - Configuration Procedure
    354
  - Configuration Example
    354
Configuring ND Attack Defense
356
- Overview
  356
- Enabling Source MAC Consistency Check for ND Packets
  357
- Configuring the ND Detection Function
  357
  - Introduction to ND Detection
    357
  - Configuration Guidelines
    357
  - Configuration Procedure
    358
  - Displaying and Maintaining ND Detection
    358
- ND Detection Configuration Example
  358
  - Network Requirements
    358
  - Configuration Procedure
    359
Configuring SAVI
361
- Overview
  361
- Configuring Global SAVI
  361
- SAVI Configuration in Dhcpv6-Only Address Assignment Scenario
  362
  - Network Requirements
    362
  - Configuration Considerations
    362
  - Packet Check Principles
    363
  - Configuration Procedure
    363
- SAVI Configuration in SLAAC-Only Address Assignment Scenario
  364
  - Network Requirements
    364
  - Configuration Considerations
    364
  - Packet Check Principles
    365
  - Configuration Procedure
    365
- SAVI Configuration in Dhcpv6+Slaac Address Assignment Scenario
  366
  - Network Requirements
    366
  - Configuration Considerations
    366
  - Packet Check Principles
    367
  - Configuration Procedure
    367
Configuring Blacklist
369
- Overview
  369
- Configuring the Blacklist Feature
  369
- Displaying and Maintaining the Blacklist
  369
- Blacklist Configuration Example
  370
  - Network Requirements
    370
  - Configuration Procedure
    370
  - Verifying the Configuration
    370
Configuring FIPS
372
- Overview
  372
- FIPS Self-Tests
  372
  - Power-Up Self-Test
    372
  - Conditional Self-Tests
    372
  - Triggering a Self-Test
    372
- Configuration Procedure
  373
  - Enabling the FIPS Mode
    373
  - Triggering a Self-Test
    374
- Displaying and Maintaining FIPS
  374
- FIPS Configuration Example
  374
  - Network Requirements
    374
  - Configuration Procedure
    374
  - Verifying the Configuration
    375
Index
377

H3C S5120-HI Series Installation Manual (76 pages)

Brand: H3C | Category: Switch | Size: 4.23 MB

Installation Guide
1
Obtaining Documentation
5
Technical Support
6
Documentation Feedback
6
Table of Contents
7
Product Overview
10
- Panel Views for the S5120-28SC-HI and S5120-52SC-HI
  10
  - Front Panel Views
    10
  - Rear Panel View
    11
  - Left Side Panel View
    12
- Panel Views for the S5120-34C-HI and S5120-58C-HI
  12
  - Front Panel Views
    12
  - Rear Panel View
    13
Preparing for Installation
15
- Safety Recommendations
  15
- Examining the Installation Site
  15
  - Temperature/Humidity
    15
  - Cleanness
    16
  - Emi
    16
  - Laser Safety
    16
- Installation Tools
  17
Installing the Switch
18
Accessing the Switch for the First Time
44
- Setting up the Configuration Environment
  44
- Connecting the Console Cable
  44
  - Console Cable
    44
  - Connection Procedure
    44
- Setting Terminal Parameters
  45
- Powering on the Switch
  48
Setting up an IRF Fabric
49
Maintenance and Troubleshooting
58
- Power Module Failure
  58
- Fan Failure
  58
- Configuration Terminal Problems
  59
Appendix A Technical Specifications
60
Appendix B Frus and Compatibility Matrixes
62
Appendix C Ports and Leds
68
- Ports
  68
  - Console Port
    68
  - Management Ethernet Port
    68
  - 10/100/1000Base-T Ethernet Port
    68
  - SFP Port
    69
  - Combo Interface
    69
- Leds
  69
  - System Status LED
    69
  - Power Module Status LED
    70
  - Port Mode LED
    70
  - Seven-Segment LED
    70
  - 10/100/1000Base-T Ethernet Port LED
    71
  - SFP Port LED
    72
  - Management Ethernet Port Leds
    73
  - Interface Card Status LED
    74
  - Port LED on the Interface Card
    74
Appendix D Cooling System
75
Index
76

H3C S5120-HI Series Configuration Manual (20 pages)

Layer 3, IP Routing Configuration

Brand: H3C | Category: Switch | Size: 0.27 MB

Table of Contents
7
IP Routing Basics
8
- IP Routing Overview
  8
  - Routing Table
    8
  - Routing Preference
    9
  - Route Backup
    9
- Displaying and Maintaining a Routing Table
  10
Static Routing Configuration
11
- Introduction
  11
  - Static Route
    11
  - Default Route
    11
  - Static Route Configuration Items
    11
- Configuring a Static Route
  12
  - Configuration Prerequisites
    12
  - Configuration Procedure
    12
- Displaying and Maintaining Static Routes
  13
- Static Route Configuration Examples
  13
  - Basic Static Route Configuration Example
    13
Ipv6 Static Routing Configuration
16
Index
20

H3C S5120-HI Series Configuration Manual (20 pages)

Brand: H3C | Category: Switch | Size: 0.27 MB

Table of Contents
7
IP Routing Basics
8
Overview
8
Routing Table
8
Routing Preference
9
Route Backup
9
Displaying and Maintaining a Routing Table
9
Configuring Static Routing
11
Introduction
11
Static Route
11
Default Route
11
Static Route Configuration Items
11
Configuring a Static Route
12
Displaying and Maintaining Static Routes
12
Static Route Configuration Examples
13
Basic Static Route Configuration Example
13
Configuring Ipv6 Static Routing
16
Overview
16
Ipv6 Static Routes Features
16
Default Ipv6 Route
16
Configuring an Ipv6 Static Route
16
Displaying and Maintaining Ipv6 Static Routes
17
Ipv6 Static Routing Configuration Example
17
Network Requirements
17
Configuration Procedure
18
Index
20

H3C S5120-HI Series Compliance And Safety Manual (20 pages)

Brand: H3C | Category: Network Router | Size: 0.29 MB

H3C S5120-HI Series Quick Start (4 pages)

Brand: H3C | Category: Switch | Size: 2.02 MB

H3C Categories

Switch

Network Router Wireless Access Point Control Unit Gateway

More H3C Manuals

H3C S5120-HI Series Manuals

H3C S5120-HI Series Security Configuration Manual (379 pages)

Table of Contents

H3C S5120-HI Series Installation Manual (76 pages)

Table of Contents

H3C S5120-HI Series Configuration Manual (20 pages)

Table of Contents

H3C S5120-HI Series Configuration Manual (20 pages)

Table of Contents

H3C S5120-HI Series Compliance And Safety Manual (20 pages)

Table of Contents

H3C S5120-HI Series Quick Start (4 pages)

Related Products

H3C Categories