H3C S3100 Series Instructions d'installation

H3C S3100 Series Ethernet Switches

Command Manual

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Document Version: 20100908-C-1.00

Product Version: Release 22XX Series

No part of this manual may be reproduced or transmitted in any form or by any means without prior

written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , Aolynk, , H3Care,

, TOP G, , IRF, NetPilot, Neocean, NeoVTL,

SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,

XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,

Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners.

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

H3C S3100 Series Ethernet Switches Command Manual-Release 22XX Series describes the

commands available for the H3C S3100 Series Ethernet Switches.

This preface includes:

zAudience

zOrganization

zSoftware Version

zConventions

zAbout the H3C S3100 Documentation Set

zObtaining Documentation

zDocumentation Feedback

Audience

This documentation is intended for:

zNetwork planners

zField technical support and servicing engineers

zNetwork administrators working with the S3100 series

Organization

H3C S3100 Series Ethernet Switches Command Reference-Release 22XX Series is organized as

follows: Part Description

01-CLI Commands CLI configuration commands

02-Login Commands Ethernet switch login commands

User control commands

03-Configuration File Management

Commands Configuration file management commands

04-VLAN Commands

VLAN configuration commands

Port-based VLAN configuration commands

MAC Address-Based VLAN Configuration Commands(applicable only to

the S3100-EI series)

Protocol-based VLAN configuration commands(applicable only to the

S3100-EI series)

05-Static Route Commands Static route configuration commands

06-IP Address-IP Performance

Commands IP address configuration commands

IP performance configuration commands

07-Voice VLAN Commands Voice VLAN commands(applicable only to the S3100-EI series)

08-GVRP Commands GARP commands

GVRP commands

Part Description

09-Port Basic Configuration

Commands Port basic configuration commands

10-Port Aggregation Commands Port aggregation configuration commands

11-Port Isolation Commands Port isolation configuration commands

12-Port Security-Port Binding

Commands Port security commands

Port binding commands (applicable only to the S3100-EI series)

13-DLDP Commands DLDP configuration commands (applicable only to the S3100-EI series)

14-MAC Address Table

Management Commands MAC address table configuration commands

15-MSTP Commands MSTP configuration commands

16-Multicast Commands

IGMP snooping configuration commands

MLD snooping configuration commands (applicable only to the S3100-EI

series)

IPv6 multicast VLAN configuration commands (applicable only to the

S3100-EI series)

Multicast user control policy configuration commands (applicable only to

the S3100-EI series)

Common multicast configuration commands

17-802.1x-System Guard

Commands

802.1x configuration commands

Quick EAD deployment configuration commands

HABP configuration commands

System-guard configuration commands

18-AAA Commands

AAA configuration commands

RADIUS configuration commands

HWTACACS configuration commands

EAD configuration commands

19-MAC Address Authentication

Commands MAC address authentication basic function configuration commands

MAC address authentication enhanced function configuration commands

20-Web Authentication Commands Web authentication configuration commands

21-ARP Commands ARP configuration commands

22-DHCP Commands

DHCP server configuration commands (applicable only to the S3100-EI

series)

DHCP snooping configuration commands

DHCP packet rate limit configuration commands (applicable only to the

S3100-EI series)

DHCP/BOOTP client configuration commands

23-ACL Commands ACL configuration commands

24-QoS-QoS Profile Commands QoS configuration commands

QoS profile configuration commands

25-Mirroring Commands Mirroring commands

Part Description

26-Stack-Cluster Commands

Stack function configuration commands

NDP configuration commands

NTDP configuration commands

Cluster configuration commands

Enhanced cluster feature configuration commands

27-PoE-PoE Profile Commands PoE configuration commands

PoE profile configuration commands

28-SNMP-RMON Commands SNMP configuration commands

RMON configuration commands

29-NTP Commands NTP configuration commands

30-SSH Commands SSH configuration commands

31-File System Management

Commands

File system configuration commands

File attribute configuration commands

Configuration file backup and recovery commands

32-FTP-SFTP-TFTP Commands FTP server/client configuration commands

SFTP server/client configuration commands

TFTP configuration commands

33-Information Center Commands Information center configuration commands

34-System Maintenance and

Debugging Commands

Basic system configuration and debugging commands

Network connectivity test commands

Device management commands

Scheduled task configuration commands

35-VLAN-VPN Commands

VLAN-VPN (or QinQ) configuration commands

Selective QinQ configuration commands (applicable only to the S3100-EI

series)

BPDU tunnel configuration commands (applicable only to the S3100-EI

series)

36-VLAN Mapping Commands

One-to-one VLAN mapping configuration commands (applicable only to

the S3100-EI series)

Many-to-one VLAN mapping configuration commands (applicable only to

the S3100-EI series)

37-HWPing Commands HWPing client commands

HWPing server commands

38-IPv6 Management Commands Basic IPv6 configuration commands

IPv6 application configuration commands

39-DNS Commands Domain name resolution commands

40-Smart Link-Monitor Link

Commands

Smart link configuration commands (applicable only to the S3100-EI

series)

Monitor link configuration commands (applicable only to the S3100-EI

series)

41-ARP and IP Attack Defense

Commands ARP and IP attack defense configuration commands

42-LLDP Commands LLDP configuration commands

43-PKI Commands PKI configuration commands

Part Description

44-SSL Commands SSL configuration commands

45-HTTPS Commands HTTPS configuration commands

46-Ethernet OAM Commands Ethernet OAM configuration commands (applicable only to the S3100-EI

series)

47-CFD Commands CFD configuration commands (applicable only to the S3100-EI series)

Software Version

H3C S3100 Series Ethernet Switches Operation Manual-Release 22XX Series and H3C S3100 Series

Ethernet Switches Command Manual-Release 22XX Series are for the software version Release 22XX

Series of the S3100-SI series and S3100-EI series switches.

Compared with Release 21XX Series, some new commands are added in Release 22XX Series. For

more information, see Table -1.

Table -1 Added commands

Software version Added commands compared with the earlier

version Release 2108P04 Part

mac-address-mapping(applicable only to the

S3100-EI series) 14-MAC Address Table

Management Commands

mac-authentication timer offline-detect

offline-detect-value（In the Ethernet port view）19-MAC Address

Authentication Commands

web-authentication free-user ip ip-address mac

mac-address (applicable only to the S3100-EI

series)

web-authentication move-mode { auto | secure }

(applicable only to the S3100-EI series)

Release 2211P06

web-authentication web-proxy port port-number

(applicable only to the S3100-EI series)

20-Web Authentication

Commands

Multicast user control policy commands (applicable

only to the S3100-EI series) 16-Multicast Commands

dot1x unicast-trigger (applicable only to the

S3100-EI series)

dot1x auth-fail vlan authfail-vlan-id (applicable

only to the S3100-EI series)

17-802.1x-System Guard

Commands

mac-authentication auth-fail vlan authfail-vlan-id

(applicable only to the S3100-EI series) 19-MAC Address

Authentication Commands

web-authentication auth-fail vlan authfail-vlan-id

(applicable only to the S3100-EI series)

web-authentication select method extended

(applicable only to the S3100-EI series)

20-Web Authentication

Commands

cluster-local-user

cluster-snmp-agent community

cluster-snmp-agent group v3

Release 2211P02

cluster-snmp-agent mib-view included

26-Stack-Cluster Commands

Software version Added commands compared with the earlier

version Release 2108P04 Part

cluster-snmp-agent usm-user v3

vlan-mapping n-to-1

dhcp-snooping information

ignore-vlanmapping

36-VLAN Mapping

Commands

dhcp-snooping ipv6 information enable

dhcp-snooping ipv6 information option { 18 |

37 }

dhcp-snooping ipv6 information remote-id

{ ipv4-address ipv4-address | ipv6-address

ipv6-address | string string | sysname }

38-IPv6 Management

Commands

Ethernet OAM commands (applicable only to the

S3100-EI series) 46-Ethernet OAM Commands

CFD commands (applicable only to the S3100-EI

series) 47-CFD Commands

display mac-vlan

display mac-vlan interface

mac-vlan enable

mac-vlan mac-address

04-VLAN Commands

voice vlan qos 07-Voice VLAN Commands

speed auto

storm-constrain

storm-constrain control

storm-constrain enable

storm-constrain interval

09-Port Basic Configuration

Commands

port-security guest-vlan vlan-id

port-security timer guest-vlan-reauth interval

port-security timer autolearn age

12-Port Security-Port Binding

Commands

igmp-snooping nonflooding-enable

MLD commands (applicable only to the S3100-EI

series)

IPv6 multicast VLAN commands (applicable only to

the S3100-EI series)

16-Multicast Commands

dot1x mandatory-domain 17-802.1x-System Guard

Commands

accounting start-mode {with-ip | without-ip }

Release 2209

User type-based server commands, including

accounting lan-access, accounting login,

authentication lan-access,authentication

scheme login, and state secondary

18-AAA Commands

Software version Added commands compared with the earlier

version Release 2108P04 Part

Add commands (applicable only to the S3100-EI

series) : web-authentication customize,

web-authentication cut connection,

web-authentication enable, web-authentication

free-ip, web-authentication free-user,

web-authentication max-connection,

web-authentication protocol,

web-authentication select method,

web-authentication timer idle-cut,

web-authentication timer max-online,

web-authentication web-server, display

web-authentication configuration, display

web-authentication connection

20-Web Authentication

Commands

DHCP Server commands

reset dhcp-snooping [ip-address ]22-DHCP Commands

rule (for IPv6 ACLs) (applicable only to the

S3100-EI series) 23-ACL Commands

traffic-remark-vlanid 24-QoS-QoS Profile

Commands

command-alias enable

command-alias mapping

display command-alias

display job

job

port auto-power-down

time at

time delay

view

34-System Maintenance and

Debugging Commands

Add commands: datafill, description, display

hwping statistics, sendpacket passroute, ttl,

filesize, history-record enable, history

keep-time, statistics, statistics keep-time,

test-time begin, hwping-agent max-requests,

hwping-agent clear, and adv-factor

37-HWPing Commands

ND snooping commands (applicable only to the

S3100-EI series)

ND detection commands (applicable only to the

S3100-EI series)

DHCPv6 snooping commands (applicable only to

the S3100-EI series)

IPv6 filtering commands (applicable only to the

S3100-EI series)

38-IPv6 Management

Commands

ARP packet filtering based on gateway’s address

commands (applicable only to the S3100-EI series)

Configuring the maximum number of dynamic ARP

entries a VLAN interface can learn commands

(applicable only to the S3100-EI series)

41-ARP and IP Attack

Defense Commands

Software version Added commands compared with the earlier

version Release 2108P04 Part

ARP/IP attack defense based on 802.1x

commands (applicable only to the S3100-EI

series)

LLDP commands 42-LLDP Commands

PKI commands 43-PKI Commands

SSL commands 44-SSL Commands

HTTPS commands 45-HTTPS Commands

Compared with Release 21XX Series, some commands are extended in Release 22XX Series. For

more information, see Table -2.

Table -2 Extended commands

Software version Extended commands Part

Release 2211P06 mac-authentication timer offline-detect

offline-detect-value 19-MAC Address

Authentication Commands

broadcast-suppression { ratio | bps max-bps |

pps max-pps }09-Port Basic Configuration

Commands

Release 2211P02

unknown-multicast drop enable [ pon-ignore ]16-Multicast Commands

am user-bind mac-addr mac-address {ip-addr

ip-address | ipv6 ipv6-address } [ interface

interface-type interface-number ] (applicable only

to the S3100-EI series)

am user-bind [ mac-addr mac-address ] [ ip-addr

ip-address | ipv6 ipv6-address ] (applicable only to

the S3100-EI series)

display am user-bind ipv6 [ interface

interface-type interface-number | ipv6-address |

mac-address mac-address | unit unit-id ]

(applicable only to the S3100-EI series)

12-Port Security-Port Binding

Commands

cut connection { all | access-type { dot1x |

mac-authentication } | domain isp-name |

interface interface-type interface-number | ip

ip-address | ipv6 ipv6-address | mac mac-address

| radius-scheme radius-scheme-name | vlan

vlan-id | ucibindex ucib-index | user-name

user-name }

display connection [ access-type { dot1x |

mac-authentication } | domain isp-name |

interface interface-type interface-number | ip

ip-address | ipv6 ipv6-address | mac mac-address

| radius-scheme radius-scheme-name |

hwtacacs-scheme hwtacacs-scheme-name | vlan

vlan-id | ucibindex ucib-index | user-name

user-name ]

nas-ip ipv6 ipv6-address

Release 2209

primary accounting {ip-address |ipv6

ipv6-address }[ port-number ] [ key string ]

18-AAA Commands

Software version Extended commands Part

primary authentication { ip-address | ipv6

ipv6-address }[ port-number ] [ key string ]

radius nas-ip ipv6 ipv6-address

secondary accounting {ip-address | ipv6

ipv6-address } [ port-number ] [ key string ]

secondary authentication { ip-address | ipv6

ipv6-address }[ port-number ] [ key string ]

state secondary { accounting | authentication }

{ ip-address | ipv6 ipv6-address } { active | block }

snmp-agent target-host trap address

udp-domain { ip-address | ipv6 ipv6-address }

[ udp-port port-number ]params securityname

security-string [ v1 | v2c | v3 [authentication |

privacy ] ]

28-SNMP-RMON Commands

Conventions

This section describes the conventions used in this documentation set.

Command conventions

Convention Description

Boldface Bold text represents commands and keywords that you enter literally as shown.

italic Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are

optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars,

from which you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical

bars, from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by

vertical bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by

vertical bars, from which you may select multiple choices or none.

&<1-n> The argument or keyword and argument combination before the ampersand (&)

sign can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface Window names, button names, field names, and menu items are in Boldface.

For example, the New User window appears; click OK.

> Multi-level menus are separated by angle brackets. For example, File > Create

> Folder.

Autres manuels pour S3100 Series

Table des matières

Autres manuels H3C Routeur réseau

H3C

H3C MSR5620 Manuel utilisateur

H3C

H3C CR16000-F Manuel utilisateur

H3C

H3C S12500R Series Manuel d'utilisation et d'entretien

H3C

H3C SR6600 SPE-FWM Manuel utilisateur

H3C

H3C MSR 2600 Manuel d'utilisation et d'entretien

H3C

H3C MSR Series Manuel utilisateur

H3C

H3C SR6600-X Manuel utilisateur

H3C

H3C S3100-52P Manuel utilisateur

H3C

H3C MSR 30-16 Manuel utilisateur

H3C

H3C S5500-HI Switch Series Manuel utilisateur

H3C

H3C MSR 30-10 Manuel utilisateur

H3C

H3C S3100-52P Instructions d'installation

H3C

H3C H3C S7500E Series Manuel utilisateur

H3C

H3C S5150-EI Series Manuel utilisateur

H3C

H3C MSR 5600 Manuel d'utilisation et d'entretien

H3C

H3C CR16000-F Manuel utilisateur

H3C

H3C S12500CR Series Manuel utilisateur

H3C

H3C RA100 Manuel utilisateur

H3C

H3C SR6600 SPE-FWM Manuel utilisateur

H3C

H3C MSR 930 Manuel d'utilisation et d'entretien

H3C

H3C S12500R Series Manuel utilisateur

H3C

H3C SR6600 Series Guide d'installation

H3C

H3C MSR Series Manuel utilisateur

H3C

H3C SR8800-F Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité