H3C S9500 Series Manuel utilisateur

H3C S9500 Series Routing Switches

Operation Manual

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Manual Version: T2-081655-20080530-C-2.03

Product Version: S9500-CMW520-R2132

No part of this manual may be reproduced or transmitted in any form or by any means

without prior written consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , Aolynk, , H3Care,

, TOP G, , IRF, NetPilot,

Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware,

Storware, NQA, VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and

HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their

respective owners.

Notice

The information in this document is subject to change without notice. Every effort has

been made in the preparation of this document to ensure accuracy of the contents, but

all statements, information, and recommendations in this document do not constitute

the warranty of any kind, express or implied.

To obtain the latest information, please access:

http://www.h3c.com

Technical Support

customer_service@h3c.com

http://www.h3c.com

About This Manual

Related Documentation

In addition to this manual, each H3C S9500 Series Routing Switches documentation

set includes the following:

Manual Description

H3C S9500 Series Routing Switches

Installation Manual

It introduces the installation procedure,

commissioning, maintenance and

monitoring of the S9500 series routing

switches.

H3C S9500 Series Routing Switches

Command Manual

It includes Feature List and Command

Index, Access Volume, IP Service

Volume, IP Routing Volume, IP Multicast

Volume, MPLS VPN Volume, QoS ACL

Volume, Security Volume, System

Volume, and unsupported commands.

Organization

H3C Configuration Manual is organized as follows:

Part Contents

00 Product Overview includes Obtaining the Documentation, Product

Features, and Features.

01 Access Volume

includes Ethernet Interface Configuration, POS

Interface Configuration, GVRP Configuration, Link

Aggregation Configuration, Port Mirroring

Configuration, RPR Configuration, Ethernet OAM

Configuration MSTP Configuration, VLAN

Configuration, QinQ Configuration, BPDU Tunneling

Configuration, and Port Isolation Configuration.

02 IP Services Volume

includes ARP Configuration, DHCP Configuration,

DNS Configuration, IP Addressing Configuration, IP

Performance Configuration, UDP Helper Configuration

IPv6 Basics Configuration, Dual Stack Configuration,

Tunneling Configuration, and Adjacency Table

Configuration.

Part Contents

03 IP Routing Volume

includes IP Routing Overview, BGP Configuration,

IS-IS Configuration, OSPF Configuration, RIP

Configuration, Routing Policy Configuration, Static

Routing Configuration, IPv6 BGP Configuration, IPv6

IS-IS Configuration, IPv6 OSPFv3 Configuration, IPv6

RIPng Configuration, and IPv6 Static Routing

Configuration.

04 IP Multicast Volume

includes Multicast Overview, Multicast Routing and

Forwarding Configuration, IGMP Snooping

Configuration, IGMP Configuration, PIM Configuration,

MSDP Configuration, IPv6 Multicast Routing and

Forwarding Configuration, MLD Snooping

Configuration, MLD Configuration, IPv6 PIM

Configuration, and Multicast VLAN Configuration.

05 MPLS VPN Volume

includes MPLS Basics Configuration, MPLS TE

Configuration, VPLS Configuration, MPLS L2VPN

Configuration, MPLS L3VPN Configuration, MPLS

Hybrid Insertion Configuration, and GRE Configuration.

06 QoS ACL Volume includes QoS Configuration and ACL Configuration.

07 Security Volume

includes 802.1x Configuration, AAA RADIUS

HWTACACS Configuration, MAC Authentication

Configuration, L3+NAT Configuration, Password

Control Configuration, SSH2.0 Configuration, and

Portal Configuration.

08 System Volume

includes GR Configuration, VRRP Configuration, HA

Configuration, Device Management Configuration,

NQA Configuration, NetStream Configuration, NTP

Configuration, RMON Configuration, SNMP

Configuration, File System Management Configuration,

System Maintaining and Debugging Configuration,

Basic System Configuration, Information Center

Configuration, User Interface Configuration, MAC

Address Table Management Configuration, PoE

Configuration, and Clock Monitoring Configuration.

09 OAA Volume includes OAP Module Configuration and ACSEI

Configuration.

10 Acronyms Offers the acronyms used in this manual.

Conventions

The manual uses the following conventions:

I. Command conventions

Convention Description

Boldface The keywords of a command line are in Boldface.

italic Command arguments are in italic.

[ ] Items (keywords or arguments) in square brackets [ ] are

optional.

{ x | y | ... }

Alternative items are grouped in braces and separated by

vertical bars. One is selected.

[ x | y | ... ]

Optional alternative items are grouped in square brackets

and separated by vertical bars. One or none is selected.

{ x | y | ... } *

Alternative items are grouped in braces and separated by

vertical bars. A minimum of one or a maximum of all can be

selected.

[ x | y | ... ] *

Optional alternative items are grouped in square brackets

and separated by vertical bars. Many or none can be

selected.

&<1-n> The argument(s) before the ampersand (&) sign can be

entered 1 to n times.

# A line starting with the # sign is comments.

II. GUI conventions

Convention Description

< > Button names are inside angle brackets. For example, click

<OK>.

[ ] Window names, menu items, data table and field names

are inside square brackets. For example, pop up the [New

User] window.

/ Multi-level menus are separated by forward slashes. For

example, [File/Create/Folder].

III. Symbols

Convention Description

Warning Means reader be extremely careful. Improper operation

may cause bodily injury.

Caution Means reader be careful. Improper operation may cause

data loss or damage to equipment.

Note Means a complementary description.

Operation Manual

H3C S9500 Series Routing Switches IP Services Volume Organization

Manual Version

T2-081655-20080530-C-2.03

Product Version

S9500-CMW520-R2132

Organization

The IP Services Volume is organized as follows:

Features

(operation

manual) Description

ARP

Address Resolution Protocol (ARP) is used to resolve an IP

address into a data link layer address. The volume describes:

zARP Overview

zARP configuration

zProxy ARP configuration

DHCP

DHCP is built on a client-server model, in which the client

sends a configuration request and then the server returns a

reply to send configuration parameters such as an IP address

to the client. The volume describes:

zDHCP overview

zDHCP server configuration

zDHCP relay agent configuration

DNS

Used in the TCP/IP application, Domain Name System (DNS)

is a distributed database which provides the translation

between domain name and the IP address. The volume

describes:

zIntroduction to DNS

zDNS configuration

IP Address

An IP address is a 32-bit address allocated to a network

interface on a device that is attached to the Internet. The

volume describes:

zIntroduction to IP addresses

zIP address configuration

zIP unnumbered configuration

IP Performance

In some network environments, you need to adjust the IP

parameters to achieve best network performance. The volume

describes:

zIP performance overview

zIP performance configuration

Operation Manual

H3C S9500 Series Routing Switches IP Services Volume Organization

Features

(operation

manual) Description

UDP Helper

UDP Helper functions as a relay agent that converts UDP

broadcast packets into unicast packets and forwards them to a

specified server. The volume describes:

zUDP Helper overview

zUDP Helper configuration

IPv6 Basics

Internet protocol version 6 (IPv6), also called IP next

generation (IPng), was designed by the Internet Engineering

Task Force (IETF) as the successor to Internet protocol

version 4 (IPv4). The volume describes:

zIPv6 overview

zBasic IPv6 functions configuration

zIPv6 NDP configuration

zPMTU discovery configuration

zIPv6 TCP properties configuration

zIPv6 FIB-Based forwarding configuration

zCapacity and update period of token bucket configuration

zIPv6 DNS configuration

Dual Stack

A network node that supports both IPv4 and IPv6 is called a

dual stack node. A dual stack node configured with an IPv4

address and an IPv6 address can have both IPv4 and IPv6

packets transmitted. The volume describes:

zDual stack overview

zDual stack configuration

Tunneling

Tunneling is an encapsulation technique, which utilizes one

network transport protocol to encapsulate packets of another

network transport protocol and transfer them over the network.

The volume describes:

zTunneling overview

zIPv6 manually tunnel configuration

zAutomatic IPv4-compatible IPv6 tunnel configuration

z6to4 tunnel configuration

z6to4 relay configuration

zISATAP tunnel configuration

zIPv4 over IPv4 tunnel configuration

zTunnel hybrid insertion configuration

Adjacency Table

An adjacency table manages the information on the neighbors

that are both connected and active. The volume describes:

zAdjacency table overview

zDisplaying and maintaining the adjacency table

Operation Manual – ARP

H3C S9500 Series Routing Switches Table of Contents

Table of Contents

Chapter 1 ARP Configuration....................................................................................................... 1-1

1.1 ARP Overview....................................................................................................................1-1

1.1.1 ARP Function..........................................................................................................1-1

1.1.2 ARP Message Format.............................................................................................1-1

1.1.3 ARP Address Resolution Process...........................................................................1-2

1.1.4 ARP Mapping Table................................................................................................1-3

1.2 Configuring ARP................................................................................................................1-4

1.2.1 Configuring a Static ARP Entry...............................................................................1-4

1.2.2 Configuring the Maximum Number of ARP Entries a VLAN Interface Can Learn...........1-4

1.2.3 Setting Aging Time for Dynamic ARP Entries.........................................................1-5

1.2.4 Enabling the ARP Entry Check............................................................................... 1-5

1.2.5 Enabling the Support for ARP Requests from a Natural Network .......................... 1-6

1.2.6 ARP Configuration Examples..................................................................................1-6

1.3 Configuring Gratuitous ARP .............................................................................................. 1-7

1.3.1 Introduction to Gratuitous ARP ...............................................................................1-7

1.3.2 Configuring Gratuitous ARP....................................................................................1-7

1.4 Configuring ARP Source Suppression ..............................................................................1-8

1.4.1 Introduction to ARP Source Suppression ...............................................................1-8

1.4.2 Configuring ARP Source Suppression....................................................................1-8

1.5 Configuring ARP Defense Against IP Packet Attack......................................................... 1-8

1.5.1 Introduction to ARP Defense Against IP Packet Attack..........................................1-8

1.5.2 Enabling ARP Defense Against IP Packet Attack...................................................1-9

1.6 Configuring ARP Active Acknowledgement.......................................................................1-9

1.6.1 Introduction..............................................................................................................1-9

1.6.2 Configuring the ARP Active Acknowledgement Function....................................... 1-9

1.7 Configuring ARP Packet Source MAC Address Consistency Check..............................1-10

1.7.1 Introduction............................................................................................................1-10

1.7.2 Configuring ARP Packet Source MAC Address Consistency Check.................... 1-10

1.8 Displaying and Maintaining ARP .....................................................................................1-10

Chapter 2 Proxy ARP Configuration............................................................................................2-1

2.1 Proxy ARP Overview .........................................................................................................2-1

2.2 Enabling Proxy ARP..........................................................................................................2-1

2.3 Displaying and Maintaining Proxy ARP.............................................................................2-2

2.4 Proxy ARP Configuration Example....................................................................................2-2

Operation Manual – ARP

H3C S9500 Series Routing Switches Chapter 1 ARP Configuration

1-1

Chapter 1 ARP Configuration

When configuringARP, go to these sections for information you are interested in:

zARP Overview

zConfiguring ARP

zConfiguring Gratuitous ARP

zConfiguring ARP Source Suppression

zConfiguring ARP Defense Against IP Packet Attack

zConfiguring ARP Active Acknowledgement

zConfiguring ARP Packet Source MAC Address Consistency Check

zDisplaying and Maintaining ARP

1.1 ARP Overview

1.1.1 ARP Function

Address resolution protocol(ARP) is used to resolve an IP address into a data link layer

address.

An IP address is the address of a host at the network layer. To send a network layer

packet to a destination host, the device must know the MAC address of the destination

host or the next hop. To this end, the IP address must be resolved into the

corresponding MAC address. Each host maintains an IP-to-MAC mapping table that

contains IP and MAC addresses of devices that communicated with the host recently.

1.1.2 ARP Message Format

2211

24664

Hardware address length

Protocol address length

28-byte ARP request/response

Protocol

type

Hardware

type OP Sender hardware

address Sender protocol

address Target hardware

address

Target

protocol

address

Figure 1-1 ARP message format

The following explains the fields in Figure 1-1.

Autres manuels pour S9500 Series

Table des matières

Autres manuels H3C Changer

H3C

H3C S5830V2 series Manuel d'installation

H3C

H3C s5820x series Manuel d'installation

H3C

H3C S5560X-EI Series Manuel utilisateur

H3C

H3C S9500 Series Manuel utilisateur

H3C

H3C S5120-EI Series Manuel utilisateur

H3C

H3C S1850 Series Manuel utilisateur

H3C

H3C S5120-SI Series Manuel utilisateur

H3C

H3C S5820X-28C Manuel utilisateur

H3C

H3C S9500 Series Manuel utilisateur

H3C

H3C S3610 Series Manuel utilisateur

H3C

H3C S5120-SI Series Manuel utilisateur

H3C

H3C S9825 Series Manuel utilisateur

H3C

H3C S3100-52P Instructions d'installation

H3C

H3C S3100-SI Series Manuel utilisateur

H3C

H3C S5830 Series Manuel utilisateur

H3C

H3C S5830V2 series Manuel utilisateur

H3C

H3C S10500X Series Manuel utilisateur

H3C

H3C S10500X Series Manuel d'utilisation et d'entretien

H3C

H3C S6850 Series Manuel utilisateur

H3C

H3C S12500 Series Manuel utilisateur

H3C

H3C s5820x series Manuel d'installation

H3C

H3C S12500X-AF Series Guide d'application

H3C

H3C S6825-54HF Manuel utilisateur

H3C

H3C s5800 series Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur