3COM DUA1750-2BAA01 User Manual

3Com Switch 8800

Configuration Guide

www.3com.com

Part No. DUA1750-2BAA01
Published: December 2005

Copyright © 2005, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by

any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission

from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without

obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed,

including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a

particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this

documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license agreement included

with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named

LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are provided to you

subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is

delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as

defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for

the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR

52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any

licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in

other countries.

3Com, the 3Com logo, are registered trademarks of 3Com Corporation.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are registered

trademarks of Microsoft Corporation.

X/Open Company, Ltd.

All other company and product names may be trademarks of the respective companies with which they are associated.

UNIX is a registered trademark in the United States and other countries, licensed exclusively through

3Com Corporation

350 Campus Drive

Marlborough, MA

01752-3064

About This Manual

Release Notes

This manual applies to 3Com Switch 8800.

Related Manuals

The related manuals are listed in the following table.

Manual Content

Organization

3Com Switch 8800 Configuration Guide consists of the following parts:

z MPLS

z STP

z Security

3Com Switch 8800 Installation
Guide

It provides information for the system installation,
booting, hardware/software maintenance &
monitoring.

3Com Switch 8800 Command
Reference Guide

It introduces all commands available in the
Switch 8800, as well as a command index.

This module introduces the configuration on MPLS and BGP/MPLS VPN features.

This module introduces the configuration on STP feature.

This module presents the configuration on 802.1x, AAA and RADIUS protocols, and
TACACS+ protocol.

z Reliability

This module focuses on VRRP and HA configurations.

z System Management

This module details the configuration involved in system management and
maintenance, including file management, system maintenance, SNMP, RMON,
NTP protocol, SSH terminal services, and network management.

3

Switch 8800 Configuration Guide About This Manual

z PoE

This module focuses on power over Ethernet (PoE) configuration.

z NAT & VPLS

This module presents the configurations on NAT and VPLS.

z Appendix

This appendix offers the acronyms in this manual.

Intended Audience

The manual is intended for the following readers:

z Network engineers
z Network administrators
z Customers who are familiar with network fundamentals

Conventions

The manual uses the following conventions:

I. General conventions

Convention Description

Arial Normal paragraphs are in Arial.

Boldface

Courier New

Headings are in Boldface.
Terminal Display is in Courier New.

II. Command conventions

Convention Description

Boldface

italic

[ ]

{ x | y | ... }

The keywords of a command line are in Boldface.
Command arguments are in italic.
Items (keywords or arguments) in square brackets [ ] are

optional.
Alternative items are grouped in braces and separated by

vertical bars. One is selected.

[ x | y | ... ]

{ x | y | ... } *

Optional alternative items are grouped in square brackets
and separated by vertical bars. One or none is selected.

Alternative items are grouped in braces and separated by
vertical bars. A minimum of one or a maximum of all can be

4

Switch 8800 Configuration Guide About This Manual

Convention Description

selected.
Optional alternative items are grouped in square brackets

[ x | y | ... ] *

and separated by vertical bars. Many or none can be
selected.

# A line starting with the # sign is comments.

III. GUI conventions

Convention Description

< >

[ ]

/

IV. Keyboard operation

Format Description

<Key>

<Key1+Key2>

<Key1, Key2>

Button names are inside angle brackets. For example, click
the <OK> button.

Window names, menu items, data table and field names
are inside square brackets. For example, pop up the [New
User] window.

Multi-level menus are separated by forward slashes. For
example, [File/Create/Folder].

Press the key with the key name inside angle brackets. For
example, <Enter>, <Tab>, <Backspace>, or <A >.

Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.

Press the keys in turn. For example, <Alt, A> means the
two keys should be pressed in turn.

5

Switch 8800 Configuration Guide About This Manual

V. Mouse operation

Action Description

Select

Click

Double-Click

Drag

Press and hold the primary mouse button (left mouse
button by default).

Select and release the primary mouse button without
moving the pointer.

Press the primary mouse button twice continuously and
quickly without moving the pointer.

Press and hold the primary mouse button and move the
pointer to a certain position.

VI. Symbols

Eye-catching symbols are also used in the manual to highlight the points worthy of
special attention during the operation. They are defined as follows:

Caution: Means reader be extremely careful during the operation.

 Note: Means a complementary description.

6

3Com Switch 8800 Configuration Guide Table of Contents

Table of Contents

Chapter 1 Product Overview........................................................................................................1-1

1.1 Product Overview...............................................................................................................1-1

1.2 Function Features.............................................................................................................. 1-1

Chapter 2 Logging into Switch .................................................................................................... 2-1

2.1 Setting Up Configuration Environment Through the Console Port.................................... 2-1

2.2 Setting Up Configuration Environment Through Telnet..................................................... 2-3

2.2.1 Connecting a PC to the Switch Through Telnet...................................................... 2-3

2.2.2 Telneting a Switch Through Another Switch........................................................... 2-4

2.3 Setting Up Configuration Environment Through a Dial-up the Modem.............................2-5

Chapter 3 Command Line Interface............................................................................................. 3-1

3.1 Command Line Interface ...................................................................................................3-1

3.2 Command Line View.......................................................................................................... 3-1

3.3 Features and Functions of Command Line ....................................................................... 3-7

3.3.1 Online Help of Command Line................................................................................ 3-7

3.3.2 Displaying Characteristics of Command Line.........................................................3-9

3.3.3 History Command of Command Line......................................................................3-9

3.3.4 Common Command Line Error Messages............................................................3-10

3.3.5 Editing Characteristics of Command Line............................................................. 3-10

Chapter 4 User Interface Configuration......................................................................................4-1

4.1 User Interface Overview....................................................................................................4-1

4.2 User Interface Configuration..............................................................................................4-2

4.2.1 Entering User Interface View .................................................................................. 4-2

4.2.2 Define the Login Header.........................................................................................4-2

4.2.3 Configuring Asynchronous Port Attributes..............................................................4-3

4.2.4 Configuring Terminal Attributes...............................................................................4-4

4.2.5 Managing Users......................................................................................................4-6

4.2.6 Configuring Modem Attributes...............................................................................4-10

4.2.7 Configuring Redirection......................................................................................... 4-10

4.3 Displaying and Debugging User Interface.......................................................................4-11

Chapter 5 Management Interface Configuration........................................................................ 5-1

5.1 Management Interface Overview....................................................................................... 5-1

5.2 Management Interface Configuration................................................................................ 5-1

Chapter 6 Ethernet Port Configuration ....................................................................................... 6-1

6.1 Ethernet Port Overview......................................................................................................6-1

6.2 Ethernet Port Configuration...............................................................................................6-1

6.2.1 Entering Ethernet Port View....................................................................................6-2

6.2.2 Enabling/Disabling an Ethernet Port.......................................................................6-2

6.2.3 Setting Ethernet Port Description............................................................................ 6-2

TOC-1

3Com Switch 8800 Configuration Guide Table of Contents

6.2.4 Setting the Duplex Attribute of the Ethernet Port.................................................... 6-2

6.2.5 Setting Speed on the Ethernet Port ........................................................................ 6-2

6.2.6 Setting the Cable Type for the Ethernet Port.......................................................... 6-3

6.2.7 Enabling/Disabling Flow Control for the Ethernet Port............................................6-3

6.2.8 Permitting/Forbidding Jumbo Frame to Pass the Ethernet Port............................. 6-3

6.2.9 Setting the Ethernet Port Broadcast Suppression Ratio......................................... 6-4

6.2.10 Setting the Ethernet Port Mode............................................................................. 6-4

6.2.11 Setting the Link Type for the Ethernet Port...........................................................6-4

6.2.12 Adding the Ethernet Port to Specified VLANs.......................................................6-5

6.2.13 Setting the Default VLAN ID for the Ethernet Port................................................ 6-5

6.2.14 Setting the VLAN VPN Feature............................................................................. 6-6

6.2.15 Copying Port Configuration to Other Ports ........................................................... 6-6

6.2.16 Setting Port Hold Time..........................................................................................6-7

6.2.17 Setting the Ethernet Port in Loopback Mode........................................................6-7

6.3 Displaying and Debugging Ethernet Port ..........................................................................6-8

6.4 Ethernet Port Configuration Example................................................................................6-8

6.5 Ethernet Port Troubleshooting........................................................................................... 6-9

Chapter 7 Link Aggregation Configuration ................................................................................ 7-1

7.1 Overview............................................................................................................................7-1

7.1.1 Introduction to Link Aggregation ............................................................................. 7-1

7.1.2 Introduction to LACP...............................................................................................7-1

7.1.3 Aggregation Types..................................................................................................7-1

7.1.4 Load Sharing........................................................................................................... 7-2

7.2 Link Aggregation Configuration ......................................................................................... 7-3

7.2.1 Enabling/Disabling LACP at Port ............................................................................ 7-4

7.2.2 Creating/Deleting an Aggregation Group................................................................ 7-4

7.2.3 Adding/Deleting an Ethernet Port into/from an Aggregation Group........................ 7-4

7.2.4 Setting/Deleting Aggregation Group Description....................................................7-5

7.2.5 Configuring System Priority..................................................................................... 7-5

7.2.6 Configuring Port Priority..........................................................................................7-6

7.3 Displaying and Debugging Link Aggregation..................................................................... 7-6

7.4 Link Aggregation Configuration Example..........................................................................7-7

Chapter 8 VLAN Configuration ....................................................................................................8-1

8.1 VLAN Overview..................................................................................................................8-1

8.2 Configuring VLAN..............................................................................................................8-2

8.2.1 Creating/Deleting a VLAN.......................................................................................8-2

8.2.2 Specifying a Description Character String for a VLAN or VLAN interface.............. 8-2

8.2.3 Creating/Removing a VLAN Interface..................................................................... 8-3

8.2.4 Shutting down/Bringing up a VLAN Interface.......................................................... 8-3

8.3 Configuring Port-Based VLAN........................................................................................... 8-4

8.3.1 Adding Ethernet Ports to a VLAN............................................................................8-4

8.4 Configuring Protocol-Based VLAN .................................................................................... 8-4

TOC-2

3Com Switch 8800 Configuration Guide Table of Contents

8.4.1 Creating/Deleting a VLAN Protocol Type................................................................ 8-4

8.4.2 Associating/Dissociating a Port with/from a Protocol-Based VLAN........................8-5

8.5 Displaying VLAN................................................................................................................ 8-5

8.6 VLAN Configuration Example............................................................................................ 8-6

Chapter 9 GARP/GVRP Configuration......................................................................................... 9-1

9.1 Configuring GARP.............................................................................................................9-1

9.1.1 GARP Overview......................................................................................................9-1

9.1.2 Setting the GARP Timer.......................................................................................... 9-2

9.1.3 Displaying and Debugging GARP........................................................................... 9-3

9.2 Configuring GVRP.............................................................................................................9-3

9.2.1 GVRP Overview......................................................................................................9-3

9.2.2 Enabling/Disabling Global GVRP............................................................................ 9-4

9.2.3 Enabling/Disabling Port GVRP................................................................................9-5

9.2.4 Setting the GVRP Registration Type ...................................................................... 9-5

9.2.5 Displaying and Debugging GVRP........................................................................... 9-6

9.2.6 GVRP Configuration Example.................................................................................9-6

Chapter 10 Super VLAN Configuration.....................................................................................10-1

10.1 Super VLAN Overview................................................................................................... 10-1

10.2 Configuring a Super VLAN ............................................................................................ 10-1

10.2.1 Configuring a Super VLAN..................................................................................10-1

10.2.2 Super VLAN Configuration Example................................................................... 10-3

Chapter 11 IP Address Configuration ....................................................................................... 11-2

11.1 Introduction to IP Address ............................................................................................. 11-2

11.1.1 IP Address Classification and Representation.................................................... 11-2

11.1.2 Subnet and Mask ................................................................................................ 11-5

11.2 Configuring IP Address.................................................................................................. 11-6

11.2.1 Configuring the Hostname and Host IP Address................................................11-6

11.2.2 Configuring the IP Address of the VLAN Interface..............................................11-7

11.3 Displaying and debugging IP Address........................................................................... 11-7

11.4 IP Address Configuration Example................................................................................ 11-7

11.5 Troubleshooting IP Address Configuration.................................................................... 11-8

Chapter 12 ARP Configuration................................................................................................... 12-1

12.1 Introduction to ARP........................................................................................................ 12-1

12.2 Configuring ARP............................................................................................................12-2

12.2.1 Manually Adding/Deleting Static ARP Mapping Entries...................................... 12-2

12.2.2 Configuring the Dynamic ARP Aging Timer........................................................ 12-3

12.2.3 Enabling/Disabling the Checking Function of ARP Entry ................................... 12-3

12.3 Displaying and Debugging ARP.................................................................................... 12-3

12.4 Enabling/Disabling the Scheme of Preventing Attack from Packets.............................12-4

12.4.1 Introduction to the Scheme of Preventing Attack from Packets.......................... 12-4

TOC-3

3Com Switch 8800 Configuration Guide Table of Contents

Chapter 13 DHCP Configuration................................................................................................ 13-1

13.1 Introduction to DHCP.....................................................................................................13-1

13.1.1 How DHCP Works............................................................................................... 13-1

13.2 Configuring General DHCP ........................................................................................... 13-3

13.2.1 Enabling/Disabling DHCP Service......................................................................13-4

13.2.2 Configuring Processing Method of DHCP Packets.............................................13-4

13.2.3 Enabling/Disabling Fake DHCP Server Detection..............................................13-5

13.3 Configuring DHCP Server.............................................................................................. 13-6

13.3.1 Creating a Global DHCP IP Address Pool..........................................................13-6

13.3.2 Configuring IP Address Assignment Mode.........................................................13-7

13.3.3 Forbidding Specified IP Addresses to Be Automatically Assigned..................... 13-9

13.3.4 Configuring Lease Time For DHCP Address Pool............................................13-10

13.3.5 Configuring DHCP Client Domain Names ........................................................13-11

13.3.6 Configuring DNS Server Address for DHCP Clients......................................... 13-12

13.3.7 Configuring NetBIOS Server Address for DHCP Clients..................................13-13

13.3.8 Configuring NetBIOS Node Type for DHCP Clients......................................... 13-15

13.3.9 Configuring Custom DHCP Options.................................................................. 13-16

13.3.10 Configuring Outbound Gateway Address for DHCP Clients........................... 13-17

13.3.11 Configuring Parameters for DHCP Server to Send Ping Packets .................. 13-17

13.3.12 Displaying and Debugging the DHCP Server.................................................13-18

13.3.13 Clearing the Configuration Information of the DHCP Server..........................13-19

13.3.14 DHCP Server Configuration Example............................................................. 13-19

13.4 Configuring DHCP Relay.............................................................................................13-21

13.4.1 Introduction to DHCP Relay.............................................................................. 13-21

13.4.2 Configuring DHCP Relay .................................................................................. 13-22

13.4.3 Displaying and Debugging DHCP Relay...........................................................13-23

13.4.4 DHCP Relay Configuration Example................................................................13-24

Chapter 14 DNS Configuration................................................................................................... 14-1

14.1 Introduction to DNS .......................................................................................................14-1

14.1.1 Static Domain Name Resolution.........................................................................14-1

14.1.2 Dynamic Domain Name Resolution....................................................................14-1

14.2 Configuring Static Domain Name Resolution................................................................ 14-2

14.3 Configuring Dynamic Domain Name Resolution........................................................... 14-2

14.3.1 Enable/Disable Static Domain Name Resolution................................................ 14-2

14.3.2 Configure the IP Address of Domain Name Server............................................14-3

14.3.3 Configure Domain Name Suffix...........................................................................14-3

14.4 Displaying and Debugging Domain Name Resolution...................................................14-4

14.5 DNS Configuration Example..........................................................................................14-4

14.6 Troubleshooting Domain Name Resolution Configuration............................................ 14-5

Chapter 15 IP Performance Configuration................................................................................ 15-1

15.1 Configuring IP Performance .......................................................................................... 15-1

15.1.1 Configuring TCP Attributes ................................................................................. 15-1

TOC-4

3Com Switch 8800 Configuration Guide Table of Contents

15.2 Displaying and Debugging IP Performance...................................................................15-2

15.3 Troubleshooting IP Performance................................................................................... 15-3

Chapter 16 IP Routing Protocol Overview................................................................................16-5

16.1 Introduction to IP Route and Routing Table .................................................................. 16-5

16.1.1 IP Route and Route Segment.............................................................................16-5

16.1.2 Route Selection through the Routing Table........................................................ 16-6

16.2 Routing Management Policy..........................................................................................16-8

16.2.1 Routing Protocols and the Preferences of the Corresponding Routes............... 16-8

16.2.2 Supporting Load Sharing and Route Backup......................................................16-9

16.2.3 Routes Shared Between Routing Protocols...................................................... 16-10

Chapter 17 Static Route Configuration.....................................................................................17-1

17.1 Introduction to Static Route ........................................................................................... 17-1

17.1.1 Static Route......................................................................................................... 17-1

17.1.2 Default Route ...................................................................................................... 17-1

17.2 Configuring Static Route................................................................................................ 17-2

17.2.1 Configuring a Static Route..................................................................................17-2

17.2.2 Configuring a Default Route................................................................................17-3

17.2.3 Deleting All the Static Routes..............................................................................17-3

17.3 Displaying and Debugging Static Route........................................................................ 17-4

17.4 Typical Static Route Configuration Example.................................................................17-4

17.5 Troubleshooting Static Route Faults .............................................................................17-5

Chapter 18 RIP Configuration....................................................................................................18-1

18.1 Introduction to RIP.........................................................................................................18-1

18.1.1 RIP Operation Mechanism.................................................................................. 18-1

18.1.2 RIP Enabling and Running..................................................................................18-2

18.2 Configuring RIP..............................................................................................................18-2

18.2.1 Enabling RIP and Entering RIP View.................................................................. 18-3

18.2.2 Enabling RIP on the Specified Network Segment...............................................18-3

18.2.3 Configuring Unicast of the Packets..................................................................... 18-4

18.2.4 Configuring Split Horizon ....................................................................................18-4

18.2.5 Setting Additional Routing Metric........................................................................ 18-5

18.2.6 Configuring RIP to Import Routes of Other Protocols......................................... 18-5

18.2.7 Configuring Route Filtering ................................................................................. 18-6

18.2.8 Disabling RIP to Receive Host Route ................................................................. 18-7

18.2.9 Enabling RIP-2 Route Aggregation Function...................................................... 18-8

18.2.10 Setting the RIP Preference ............................................................................... 18-8

18.2.11 Specifying RIP Version of the Interface............................................................ 18-8

18.2.12 Configuring RIP Timers..................................................................................... 18-9

18.2.13 Configuring RIP-1 Zero Field Check of the Interface Packet.......................... 18-10

18.2.14 Specifying the Operating State of the Interface..............................................18-10

18.2.15 Setting RIP-2 Packet Authentication...............................................................18-11

18.3 Displaying and Debugging RIP.................................................................................... 18-12

TOC-5

3Com Switch 8800 Configuration Guide Table of Contents

18.4 Typical RIP Configuration Example............................................................................. 18-12

18.5 Troubleshooting RIP Faults.........................................................................................18-14

Chapter 19 OSPF Configuration ................................................................................................ 19-1

19.1 OSPF Overview.............................................................................................................19-1

19.1.1 Introduction to OSPF........................................................................................... 19-1

19.1.2 Process of OSPF Route Calculation................................................................... 19-1

19.1.3 OSPF Packets..................................................................................................... 19-2

19.1.4 LSA Type............................................................................................................. 19-3

19.1.5 Basic Concepts Related to OSPF....................................................................... 19-3

19.1.6 OSPF Features Supported by the Switch 8800.................................................. 19-5

19.2 Configuring OSPF.......................................................................................................... 19-6

19.2.1 Configuring Router ID .........................................................................................19-7

19.2.2 Enabling OSPF....................................................................................................19-7

19.2.3 Entering OSPF Area View................................................................................... 19-8

19.2.4 Specifying an Interface to Run OSPF.................................................................19-8

19.2.5 Configuring OSPF to Import Routes of Other Protocols.....................................19-9

19.2.6 Configuring OSPF to Import Default Routes.....................................................19-11

19.2.7 Configuring OSPF Route Filtering.....................................................................19-12

19.2.8 Configuring the Route Summary of OSPF........................................................ 19-13

19.2.9 Setting OSPF Route Preference....................................................................... 19-15

19.2.10 Configuring OSPF Timers............................................................................... 19-15

19.2.11 Configuring the Network Type on the OSPF Interface....................................19-17

19.2.12 Configuring NBMA Neighbors for OSPF......................................................... 19-18

19.2.13 Setting the Interface Priority for DR Election .................................................. 19-18

19.2.14 Configuring an Interval Required for Sending LSU Packets...........................19-20

19.2.15 Configuring the Cost for Sending Packets on an Interface.............................19-20

19.2.16 Configuring to Fill the MTU Field When an Interface Transmits DD Packets.19-20

19.2.17 Setting a Shortest Path First (SPF) Calculation Interval for OSPF.................19-21

19.2.18 Disabling the Interface to Send OSPF Packets..............................................19-21

19.2.19 Configuring OSPF Authentication...................................................................19-22

19.2.20 Configuring OSPF Virtual Link........................................................................19-23

19.2.21 Configuring Stub Area of OSPF...................................................................... 19-24

19.2.22 Configuring NSSA Area of OSPF ...................................................................19-24

19.2.23 Configuring OSPF and Network Management System (NMS)....................... 19-26

19.2.24 Resetting the OSPF Process..........................................................................19-27

19.3 Displaying and Debugging OSPF................................................................................ 19-27

19.4 Typical OSPF Configuration Example.........................................................................19-29

19.4.1 Configuring DR Election Based on OSPF Priority ............................................ 19-29

19.4.2 Configuring OSPF Virtual Link..........................................................................19-31

19.5 Troubleshooting OSPF Faults ..................................................................................... 19-32

Chapter 20 Integrated IS-IS Configuration................................................................................ 20-1

20.1 Introduction to Integrated IS-IS...................................................................................... 20-1

TOC-6

3Com Switch 8800 Configuration Guide Table of Contents

20.1.1 Terms of IS-IS Routing Protocol ......................................................................... 20-1

20.1.2 Two-level Structure of IS-IS Routing Protocol .................................................... 20-2

20.1.3 NSAP Structure of IS-IS Routing Protocol..........................................................20-4

20.1.4 IS-IS Routing Protocol Packets...........................................................................20-5

20.2 Configuring Integrated IS-IS..........................................................................................20-6

20.2.1 Enabling IS-IS and Entering the IS-IS View........................................................ 20-7

20.2.2 Setting Network Entity Title.................................................................................20-7

20.2.3 Enabling IS-IS on the Specified Interface...........................................................20-7

20.2.4 Setting Priority for DIS Election........................................................................... 20-8

20.2.5 Setting Router Type............................................................................................ 20-8

20.2.6 Setting Interface Circuit Level.............................................................................20-9

20.2.7 Configuring IS-IS to Import Routes of Other Protocols....................................... 20-9

20.2.8 Configuring IS-IS Route Filtering ...................................................................... 20-10

20.2.9 Configuring IS-IS Routing Leak.........................................................................20-11

20.2.10 Setting IS-IS Route Summary......................................................................... 20-11

20.2.11 Setting to Generate Default Route.................................................................. 20-12

20.2.12 Setting the Preference of IS-IS Protocol.........................................................20-12

20.2.13 Configuring IS-IS Route Metric Type .............................................................. 20-13

20.2.14 Setting IS-IS Link State Routing Cost.............................................................20-13

20.2.15 Configuring IS-IS Timers.................................................................................20-13

20.2.16 Setting IS-IS Authentication............................................................................20-16

20.2.17 Setting the Mesh Group of the Interface.........................................................20-17

20.2.18 Setting Overload Flag Bit................................................................................20-18

20.2.19 Setting to Discard the LSPs with Checksum Errors........................................20-18

20.2.20 Setting to Log the Peer Changes.................................................................... 20-19

20.2.21 Setting LSP Refreshment Interval................................................................... 20-19

20.2.22 Setting Lifetime of LSP.................................................................................... 20-19

20.2.23 Setting Parameters Related to SPF................................................................ 20-20

20.2.24 Enabling/Disabling the Interface to Send Packets.......................................... 20-21

20.2.25 Resetting All the IS-IS Data Structure............................................................. 20-22

20.2.26 Resetting the Specified IS-IS Peer .................................................................20-22

20.3 Displaying and Debugging Integrated IS-IS ................................................................ 20-22

20.4 Typical Integrated IS-IS Configuration Example..........................................................20-23

Chapter 21 BGP Configuration .................................................................................................. 21-1

21.1 BGP/MBGP Overview.................................................................................................... 21-1

21.1.1 Introduction to BGP............................................................................................. 21-1

21.1.2 BGP Message Types.......................................................................................... 21-2

21.1.3 BGP Routing Mechanism....................................................................................21-2

21.1.4 MBGP..................................................................................................................21-3

21.1.5 BGP Peer and Peer Group ................................................................................. 21-4

21.2 Configuring BGP............................................................................................................ 21-4

21.2.1 Enabling BGP...................................................................................................... 21-5

TOC-7

3Com Switch 8800 Configuration Guide Table of Contents

21.2.2 Configuring Basic Features for BGP Peer.......................................................... 21-5

21.2.3 Configuring application features of a BGP peer (group)..................................... 21-8

21.2.4 Configuring Route Filtering of a Peer (group)................................................... 21-12

21.2.5 Configuring Network Routes for BGP Distribution............................................21-14

21.2.6 Configuring the Interaction Between BGP and IGP.......................................... 21-14

21.2.7 Configuring BGP Route Summarization ...........................................................21-15

21.2.8 Configuring BGP Route Filtering....................................................................... 21-16

21.2.9 Configuring BGP Route Dampening.................................................................21-17

21.2.10 Configuring BGP Preference...........................................................................21-18

21.2.11 Configuring BGP Timer...................................................................................21-19

21.2.12 Configuring the Local Preference ................................................................... 21-19

21.2.13 Configuring MED for AS..................................................................................21-20

21.2.14 Comparing the MED Routing Metrics from the Peers in Different ASs...........21-20

21.2.15 Configuring BGP Route Reflector...................................................................21-21

21.2.16 Configuring BGP AS Confederation Attribute.................................................21-22

21.2.17 Clearing BGP Connection............................................................................... 21-24

21.2.18 Refreshing BGP Routes..................................................................................21-24

21.3 Displaying and Debugging BGP..................................................................................21-24

21.4 Typical BGP Configuration Example ........................................................................... 21-26

21.4.1 Configuring BGP AS Confederation Attribute...................................................21-26

21.4.2 Configuring BGP Route Reflector.....................................................................21-28

21.4.3 Configuring BGP Routing..................................................................................21-30

21.5 Troubleshooting BGP .................................................................................................. 21-33

Chapter 22 IP Routing Policy Configuration ............................................................................22-1

22.1 Introduction to IP Routing Policy....................................................................................22-1

22.1.1 Filter ....................................................................................................................22-1

22.1.2 Routing Policy Application................................................................................... 22-2

22.2 Configuring IP Routing Policy........................................................................................ 22-2

22.2.1 Configuring a Route-policy..................................................................................22-3

22.2.2 Configuring ip-prefix............................................................................................22-6

22.2.3 Configuring the AS Path List............................................................................... 22-7

22.2.4 Configuring a Community Attribute List ..............................................................22-8

22.2.5 Importing Routing Information Discovered by Other Routing Protocols.............22-8

22.2.6 Configuring Route Filtering ................................................................................. 22-9

22.3 Displaying and Debugging the Routing Policy.............................................................22-10

22.4 Typical IP Routing Policy Configuration Example ....................................................... 22-11

22.4.1 Configuring to Filter the Received Routing Information....................................22-11

22.5 Troubleshooting Routing Policy................................................................................... 22-12

Chapter 23 IP Multicast Overview.............................................................................................. 23-4

23.1 IP Multicast Overview.................................................................................................... 23-4

23.1.1 Problems with Unicast/Broadcast ....................................................................... 23-4

23.1.2 Advantages of Multicast......................................................................................23-6

TOC-8

3Com Switch 8800 Configuration Guide Table of Contents

23.1.3 Application of Multicast .......................................................................................23-7

23.2 Implementation of IP Multicast....................................................................................... 23-7

23.2.1 IP Multicast Addresses........................................................................................ 23-7

23.2.2 IP Multicast Protocols.......................................................................................... 23-9

23.3 RPF Mechanism for IP Multicast Packets ...................................................................23-10

Chapter 24 IGMP Snooping Configuration ............................................................................... 24-1

24.1 IGMP Snooping Overview ............................................................................................. 24-1

24.1.1 IGMP Snooping Principle.................................................................................... 24-1

24.1.2 Implement IGMP Snooping................................................................................. 24-2

24.2 IGMP Snooping Configuration....................................................................................... 24-4

24.2.1 Enabling/Disabling IGMP Snooping....................................................................24-4

24.2.2 Configuring Router Port Aging Time...................................................................24-5

24.2.3 Configuring Maximum Response Time............................................................... 24-5

24.2.4 Configuring Aging Time of Multicast Group Member Ports ................................24-6

24.2.5 Configuring Unknown Multicast Packets not Broadcasted within a VLAN ......... 24-6

24.3 Displaying and debugging IGMP Snooping................................................................... 24-7

24.4 IGMP Snooping Configuration Example........................................................................24-7

24.4.1 Enable IGMP Snooping....................................................................................... 24-7

24.5 Troubleshoot IGMP Snooping ....................................................................................... 24-8

Chapter 25 Multicast VLAN Configuration................................................................................ 25-1

25.1 Multicast VLAN Overview..............................................................................................25-1

25.2 Multicast VLAN Configuration........................................................................................25-1

25.3 Multicast VLAN Configuration Example......................................................................... 25-2

Chapter 26 Common Multicast Configuration..........................................................................26-1

26.1 Introduction to Common Multicast Configuration...........................................................26-1

26.2 Common Multicast Configuration...................................................................................26-1

26.2.1 Enabling Multicast...............................................................................................26-1

26.2.2 Configuring multicast route number limit............................................................. 26-2

26.2.3 Clearing MFC Forwarding Entries or Its Statistic Information............................. 26-2

26.2.4 Clearing Route Entries from the Kernel Multicast Routing Table ....................... 26-2

26.3 Controlled Multicast Configuration................................................................................. 26-3

26.3.1 Controlled Multicast Overview............................................................................. 26-3

26.3.2 Configuring Controlled Multicast.........................................................................26-3

26.3.3 Controlled Multicast Configuration Example.......................................................26-4

26.4 Displaying and Debugging Common Multicast Configuration.......................................26-5

Chapter 27 IGMP Configuration................................................................................................. 27-1

27.1 IGMP Overview.............................................................................................................. 27-1

27.1.1 Introduction to IGMP........................................................................................... 27-1

27.2 IGMP Configuration....................................................................................................... 27-2

27.2.1 Enabling Multicast...............................................................................................27-3

27.2.2 Enabling IGMP on an Interface........................................................................... 27-3

TOC-9

3Com Switch 8800 Configuration Guide Table of Contents

27.2.3 Configuring the IGMP Version ............................................................................ 27-3

27.2.4 Configuring the Interval to Send IGMP Query Message..................................... 27-4

27.2.5 Configuring the Interval and the Number of Querying IGMP Packets................27-4

27.2.6 Configuring the Present Time of IGMP Querier.................................................. 27-5

27.2.7 Configuring Maximum Response Time for IGMP Query Message..................... 27-5

27.2.8 Configuring the limit of IGMP groups on an interface.........................................27-6

27.2.9 Configuring a Router to Join Specified Multicast Group.....................................27-6

27.2.10 Limiting Multicast Groups that an Interface Can Access .................................. 27-7

27.2.11 Deleting IGMP Groups Joined on an Interface.................................................27-8

27.3 Displaying and Debugging IGMP...................................................................................27-9

Chapter 28 PIM-DM Configuration............................................................................................. 28-1

28.1 PIM-DM Overview.......................................................................................................... 28-1

28.1.1 Introduction to PIM-DM.......................................................................................28-1

28.1.2 PIM-DM Working Principle..................................................................................28-1

28.2 PIM-DM Configuration................................................................................................... 28-3

28.2.1 Enabling Multicast...............................................................................................28-3

28.2.2 Enabling PIM-DM................................................................................................28-3

28.2.3 Configuring the Time Intervals for Ports to Send Hello Packets......................... 28-4

28.2.4 Entering the PIM View......................................................................................... 28-4

28.2.5 Configuring the Filtering of Multicast Source/Group...........................................28-5

28.2.6 Configuring the Filtering of PIM Neighbor........................................................... 28-5

28.2.7 Configuring the Maximum Number of PIM Neighbor on an Interface................. 28-5

28.2.8 Clearing multicast route entries from PIM routing table...................................... 28-6

28.2.9 Clearing PIM Neighbors...................................................................................... 28-6

28.3 Displaying and Debugging PIM-DM...............................................................................28-6

28.4 PIM-DM Configuration Example....................................................................................28-7

Chapter 29 PIM-SM Configuration.............................................................................................29-1

29.1 PIM-SM Overview.......................................................................................................... 29-1

29.1.1 Introduction to PIM-SM ....................................................................................... 29-1

29.1.2 PIM-SM Working Principle.................................................................................. 29-1

29.1.3 Preparations before Configuring PIM-SM...........................................................29-2

29.2 PIM-SM Configuration ...................................................................................................29-3

29.2.1 Enabling Multicast...............................................................................................29-4

29.2.2 Enabling PIM-SM................................................................................................ 29-4

29.2.3 Entering the PIM View......................................................................................... 29-4

29.2.4 Configuring the Time Intervals for Ports to Send Hello Packets......................... 29-4

29.2.5 Configuring Candidate-BSRs.............................................................................. 29-4

29.2.6 Configuring Candidate-RPs ................................................................................ 29-5

29.2.7 Configuring Static RP.......................................................................................... 29-6

29.2.8 Configuring the PIM-SM Domain Border ............................................................29-6

29.2.9 Configuring the filtering of multicast source/group..............................................29-7

29.2.10 Configuring the filtering of PIM neighbor........................................................... 29-7

TOC-10

3Com Switch 8800 Configuration Guide Table of Contents

29.2.11 Configuring RP to Filter the Register Messages Sent by DR ........................... 29-7

29.2.12 Limiting the range of legal BSR.........................................................................29-7

29.2.13 Limiting the range of legal C-RP.......................................................................29-8

29.2.14 Clearing multicast route entries from PIM routing table.................................... 29-8

29.2.15 Clearing PIM Neighbors.................................................................................... 29-8

29.3 Displaying and Debugging PIM-SM............................................................................... 29-8

29.4 PIM-SM Configuration Example .................................................................................... 29-9

Chapter 30 MSDP Configuration................................................................................................ 30-1

30.1 MSDP Overview.............................................................................................................30-1

30.1.1 Introduction..........................................................................................................30-1

30.1.2 Working Principle ................................................................................................ 30-2

30.2 MSDP Configuration......................................................................................................30-4

30.2.1 Enabling MSDP................................................................................................... 30-4

30.2.2 Configuring MSDP Peers....................................................................................30-5

30.2.3 Configuring Static RPF Peers.............................................................................30-5

30.2.4 Configuring Originating RP ................................................................................. 30-6

30.2.5 Configuring SA Caching State ............................................................................ 30-6

30.2.6 Configuring the Maximum Number of SA caching.............................................. 30-7

30.2.7 Requesting Source Information of MSDP Peers.................................................30-7

30.2.8 Controlling the Source Information Created........................................................ 30-7

30.2.9 Controlling the Source Information Forwarded...................................................30-8

30.2.10 Controlling the Received Source Information ................................................... 30-9

30.2.11 Configuring MSDP Mesh Group......................................................................30-10

30.2.12 Configuring the MSDP Connection Retry Period............................................ 30-10

30.2.13 Shutting MSDP Peers Down........................................................................... 30-11

30.2.14 Clearing MSDP Connections, Statistics and SA Caching Configuration........30-11

30.3 Displaying and Debugging MSDP...............................................................................30-12

30.4 MSDP Configuration Examples...................................................................................30-13

30.4.1 Configuring Static RPF Peers...........................................................................30-13

30.4.2 Configuring Anycast RP....................................................................................30-14

30.4.3 MSDP Integrated Networking............................................................................30-18

Chapter 31 MBGP Multicast Extension Configuration ............................................................ 31-1

31.1 MBGP Multicast Extension Overview............................................................................31-1

31.1.1 Introduction..........................................................................................................31-1

31.1.2 MBGP Extension Attributes for Multicast............................................................31-1

31.1.3 MBGP Operating Mode and Message Type....................................................... 31-2

31.2 MBGP Multicast Extension Configuration...................................................................... 31-3

31.2.1 Enabling MBGP Multicast Extension Protocol....................................................31-3

31.2.2 Specifying Network Routes Notified by MBGP Multicast Extension...................31-4

31.2.3 Configuring the MED Value for an AS ................................................................31-4

31.2.4 Comparing MED Values from Different AS Neighbor Paths............................... 31-4

31.2.5 Configuring Local Preference.............................................................................. 31-5

TOC-11

3Com Switch 8800 Configuration Guide Table of Contents

31.2.6 Configuring MBGP Timer.................................................................................... 31-5

31.2.7 Configuring MBGP Peer (Group)........................................................................31-5

31.2.8 Configuring MBGP Route Aggregation...............................................................31-9

31.2.9 Configuring an MBGP Route Reflector...............................................................31-9

31.2.10 Configure MBGP Community Attributes .........................................................31-10

31.2.11 Importing IGP Routing Information into MBGP............................................... 31-10

31.2.12 Defining AS Path List and Routing Policy....................................................... 31-10

31.2.13 Configuring MBGP Route Filtering.................................................................. 31-11

31.2.14 Resetting BGP Connections ........................................................................... 31-11

31.3 Displaying and Debugging MBGP Configuration.........................................................31-11

31.4 MBGP Multicast Extension Configuration Example.....................................................31-12

Chapter 35 MPLS Architecture................................................................................................... 35-2

35.1 MPLS Overview.............................................................................................................35-2

35.2 MPLS Basic Concepts...................................................................................................35-3

35.2.1 FEC.....................................................................................................................35-3

35.2.2 Label....................................................................................................................35-3

35.2.3 LDP ..................................................................................................................... 35-6

35.3 MPLS Architecture......................................................................................................... 35-6

35.3.1 MPLS Network Structure..................................................................................... 35-6

35.3.2 Forwarding Labeled Packets...............................................................................35-7

35.3.3 Establishing LSP.................................................................................................35-7

35.3.4 LSP Tunnel and Hierarchy.................................................................................. 35-9

35.4 MPLS and other Protocols........................................................................................... 35-10

35.4.1 MPLS and Routing Protocols............................................................................ 35-10

35.5 MPLS Application ........................................................................................................35-10

35.5.1 MPLS VPN........................................................................................................35-10

Chapter 36 MPLS Basic Capability Configuration................................................................... 36-1

36.1 MPLS Basic Capability Overview .................................................................................. 36-1

36.2 MPLS Configuration....................................................................................................... 36-1

36.2.1 Defining MPLS LSR ID........................................................................................ 36-1

36.2.2 Enabling MPLS and Entering MPLS View..........................................................36-2

36.2.3 Configuring the Topology-Driven LSP Setup Policy ........................................... 36-2

36.2.4 Configuring Static LSP........................................................................................36-2

36.3 LDP Configuration .........................................................................................................36-3

36.3.1 Enabling LDP protocol ........................................................................................ 36-3

36.3.2 Enabling LDP on VLAN interface........................................................................ 36-4

36.3.3 Configuring Remote-Peer for Extended Discovery Mode...................................36-4

36.3.4 Configuring session parameters ......................................................................... 36-5

36.3.5 Configuring LDP Loop Detection Control............................................................36-7

36.3.6 Configuring LDP Authentication Mode Between Every Two Routers................. 36-8

36.4 Displaying and Debugging MPLS.................................................................................. 36-8

36.4.1 Displaying and Debugging MPLS....................................................................... 36-8

TOC-12

3Com Switch 8800 Configuration Guide Table of Contents

36.4.2 Displaying and Debugging LDP........................................................................36-10

36.5 Typical MPLS Configuration Example.........................................................................36-11

36.6 Troubleshooting MPLS Configuration.......................................................................... 36-15

Chapter 37 BGP/MPLS VPN Configuration............................................................................... 37-1

37.1 BGP/MPLS VPN Overview............................................................................................37-1

37.1.1 BGP/MPLS VPN Model....................................................................................... 37-2

37.1.2 BGP/MPLS VPN Implementation........................................................................ 37-5

37.1.3 Nested BGP/MPLS VPN Implementation...........................................................37-7

37.1.4 Hierarchical BGP/MPLS VPN Implementation.................................................... 37-7

37.1.5 Introduction to OSPF Multi-instance ................................................................... 37-8

37.1.6 Introduction to Multi-Role Host............................................................................ 37-9

37.2 BGP/MPLS VPN Configuration....................................................................................37-10

37.2.1 Configuring CE Router......................................................................................37-10

37.2.2 Configuring PE Router......................................................................................37-12

37.2.3 Configuring P Router......................................................................................... 37-25

37.3 Displaying and Debugging BGP/MPLS VPN............................................................... 37-25

37.4 Typical BGP/MPLS VPN Configuration Example........................................................ 37-27

37.4.1 Integrated BGP/MPLS VPN Configuration Example.........................................37-27

37.4.2 Hybrid BGP/MPLS VPN Configuration Example .............................................. 37-33

37.4.3 Extranet Configuration Example ....................................................................... 37-40

37.4.4 Hub&Spoke Configuration Example..................................................................37-44

37.4.5 CE Dual-home Configuration Example.............................................................37-50

37.4.6 Cross-domain BGP/MPLS VPN Configuration Example .................................. 37-56

37.4.7 Cross-Domain BGP/MPLS VPN Configuration Example — Option C..............37-61

37.4.8 Hierarchical BGP/MPLS VPN Configuration Example......................................37-68

37.4.9 OSPF Multi-instance sham link Configuration Example ................................... 37-72

37.4.10 Nested BGP/MPLS VPN Configuration Example ........................................... 37-77

37.4.11 OSPF Multi-instance CE Configuration Example............................................37-83

37.4.12 Multi-Role Host Configuration Example.......................................................... 37-85

37.5 Troubleshooting...........................................................................................................37-90

Chapter 38 MSTP Region-configuration ................................................................................... 38-1

38.1 Introduction to MSTP.....................................................................................................38-1

38.1.1 MSTP Concepts..................................................................................................38-2

38.1.2 MSTP Principles.................................................................................................. 38-7

38.1.3 MSTP Implementation on the Switch................................................................ 38-12

38.2 Configuring MSTP .......................................................................................................38-12

38.2.1 Configuring the MST Region for a Switch......................................................... 38-13

38.2.2 Specifying the Switch as a Primary or a Secondary Root bridge .....................38-15

38.2.3 Configuring the MSTP Running Mode..............................................................38-16

38.2.4 Configuring the Bridge Priority for a Switch......................................................38-17

38.2.5 Configuring the Max Hops in an MST Region................................................... 38-18

38.2.6 Configuring the Switching Network Diameter ................................................... 38-18

TOC-13

3Com Switch 8800 Configuration Guide Table of Contents

38.2.7 Configuring the Time Parameters of a Switch ..................................................38-19

38.2.8 Setting the Timeout Factor of a Specific Bridge................................................38-21

38.2.9 Configuring the Max Transmission Speed on a Port ........................................ 38-21

38.2.10 Configuring a Port as an Edge Port or Non-edge Port ...................................38-22

38.2.11 Configuring the Path Cost of a Port ................................................................ 38-23

38.2.12 STP Path Cost Calculation Standards on STP port........................................ 38-24

38.2.13 Configuring the Priority of a Port..................................................................... 38-26

38.2.14 Configuring the Port (Not) to Connect with the Point-to-Point Link.................38-27

38.2.15 Configuring the mCheck Variable of a Port..................................................... 38-28

38.2.16 Configuring the Switch Protection Function....................................................38-30

38.2.17 Enabling/Disabling MSTP on the Device........................................................ 38-32

38.2.18 Enable/Disable Address Table Reset on Specified Port................................. 38-33

38.2.19 Enabling/Disabling ARP Address Update.......................................................38-33

38.2.20 Enabling/Disabling MSTP on a Port................................................................ 38-34

38.3 Displaying and Debugging MSTP................................................................................ 38-34

38.4 Typical MSTP Configuration Example......................................................................... 38-35

Chapter 39 802.1x Configuration...............................................................................................39-2

39.1 802.1x Overview............................................................................................................39-2

39.1.1 802.1x Standard Overview.................................................................................. 39-2

39.1.2 802.1x System Architecture................................................................................39-3

39.1.3 802.1x Authentication Process............................................................................39-4

39.1.4 Implementing 802.1x on Ethernet Switches........................................................ 39-4

39.2 802.1x Configuration......................................................................................................39-5

39.2.1 Enabling/Disabling 802.1x...................................................................................39-5

39.2.2 Setting the Port Access Control Mode................................................................39-6

39.2.3 Setting Port Access Control Method...................................................................39-7

39.2.4 Checking the Users that Log on the Switch via Proxy........................................39-7

39.2.5 Setting Supplicant Number on a Port.................................................................. 39-8

39.2.6 Setting the Authentication in DHCP Environment............................................... 39-8

39.2.7 Configuring Authentication Method for 802.1x User...........................................39-8

39.2.8 Enabling/Disabling Guest VLAN ......................................................................... 39-9

39.2.9 Setting the Maximum times of authentication request message retransmission39-10

39.2.10 Configuring 802.1x Timers.............................................................................. 39-10

39.2.11 Enabling/Disabling quiet-period Timer............................................................39-11

39.3 Displaying and Debugging 802.1x...............................................................................39-12

39.4 802.1x Configuration Example.....................................................................................39-12

Chapter 40 AAA and RADIUS/TACACS+ Protocol Configuration .......................................... 40-1

40.1 AAA and RADIUS/TACACS+ Protocol Overview..........................................................40-1

40.1.1 AAA Overview.....................................................................................................40-1

40.1.2 RADIUS Protocol Overview ................................................................................ 40-1

40.1.3 TACACS+ Protocol Overview.............................................................................40-2

40.1.4 Implementing AAA/RADIUS on a Switch............................................................40-5

TOC-14

3Com Switch 8800 Configuration Guide Table of Contents

40.2 AAA Configuration ......................................................................................................... 40-6

40.2.1 Creating/Deleting an ISP Domain.......................................................................40-6

40.2.2 Configuring Relevant Attributes of an ISP Domain............................................. 40-7

40.2.3 Configuring Self-Service Server URL ................................................................. 40-8

40.2.4 Creating/Deleting a Local User...........................................................................40-9

40.2.5 Setting the Attributes of a Local User ...............................................................40-10

40.2.6 Disconnecting a User by Force......................................................................... 40-11

40.2.7 Configuring Dynamic VLAN Delivering ............................................................. 40-11

40.3 Configuring RADIUS Protocol......................................................................................40-12

40.3.1 Creating/Deleting a RADIUS scheme...............................................................40-13

40.3.2 Setting IP Address and Port Number of a RADIUS Server .............................. 40-13

40.3.3 Setting the RADIUS Packet Encryption Key.....................................................40-15

40.3.4 Setting the Response Timeout Timer of a RADIUS Server..............................40-16

40.3.5 Setting the Retransmission Times of RADIUS Request Packets.....................40-16

40.3.6 Enabling the Selection Of Radius Accounting Option....................................... 40-17

40.3.7 Setting a Real-time Accounting Interval............................................................40-17

40.3.8 Setting the Maximum Times of Real-time Accounting Request Failing to be

Responded...................................................................................................................40-18

40.3.9 Enabling/Disabling Stopping Accounting Request Buffer................................. 40-19

40.3.10 Setting the Maximum Retransmitting Times of Stopping Accounting Request40-19

40.3.11 Setting the Supported Type of RADIUS Server.............................................. 40-20

40.3.12 Setting RADIUS Server State ......................................................................... 40-20

40.3.13 Setting the Username Format Transmitted to RADIUS Server ...................... 40-21

40.3.14 Setting the Unit of Data Flow that Transmitted to RADIUS Server.................40-21

40.3.15 Creating/Deleting a Local RADIUS authentication Server..............................40-22

40.4 Configuring TACACS+ Protocol ..................................................................................40-22

40.4.1 Creating a HWTACAS Scheme ........................................................................ 40-23

40.4.2 Configuring TACACS+ Authentication Servers................................................. 40-23

40.4.3 Configuring TACACS+ Authorization Servers .................................................. 40-24

40.4.4 Configuring TACACS+ Accounting Servers and the Related Attributes...........40-25

40.4.5 Configuring the Source Address for TACACS+ Packets Sent by NAS ............40-26

40.4.6 Setting a Key for Securing the Communication with TACACS Server ............. 40-26

40.4.7 Setting the Username Format Acceptable to the TACACS Server...................40-26

40.4.8 Setting the Unit of Data Flows Destined for the TACACS Server..................... 40-27

40.4.9 Setting Timers Regarding TACACS Server...................................................... 40-27

40.5 Displaying and Debugging AAA and RADIUS Protocol .............................................. 40-29

40.6 AAA and RADIUS/TACACS+ Protocol Configuration Examples.................................40-30

40.6.1 Configuring Authentication at Remote RADIUS Server.................................... 40-30

40.6.2 Configuring Authentication at Local RADIUS Authentication Server................ 40-32

40.6.3 Configuring Authentication at Remote TACACS Server................................... 40-32

40.7 Troubleshooting AAA and RADIUS/TACACS+...........................................................40-34

TOC-15

3Com Switch 8800 Configuration Guide Table of Contents

Chapter 41 VRRP Configuration................................................................................................41-1

41.1 Introduction to VRRP.....................................................................................................41-1

41.2 Configuring VRRP .........................................................................................................41-3

41.2.1 Enabling/Disabling the Function to Ping the Virtual IP Address.........................41-3

41.2.2 Enabling/Disabling the Check of TTL Value of VRRP Packet............................41-4

41.2.3 Setting Correspondence Between Virtual IP Address and MAC Address.......... 41-4

41.2.4 Adding/Deleting a Virtual IP Address.................................................................. 41-5

41.2.5 Configuring the Priority of Switches in the Virtual Router...................................41-5

41.2.6 Configuring Preemption and Delay for a Switch Within a Virtual Router............ 41-6

41.2.7 Configuring Authentication Type and Authentication Key................................... 41-7

41.2.8 Configuring Virtual Router Timer.........................................................................41-8

41.2.9 Configuring Switch to Track a Specified Interface.............................................. 41-8

41.3 Displaying and debugging VRRP.................................................................................. 41-9

41.4 VRRP Configuration Example ..................................................................................... 41-10

41.4.1 VRRP Single Virtual Router Example...............................................................41-10

41.4.2 VRRP Tracking Interface Example ................................................................... 41-11

41.4.3 Multiple Virtual Routers Example...................................................................... 41-13

41.5 Troubleshooting VRRP................................................................................................41-14

Chapter 42 HA Configuration..................................................................................................... 42-1

42.1 Introduction to HA..........................................................................................................42-1

42.2 Configuring HA...............................................................................................................42-1

42.2.1 Restarting the Slave System Manually............................................................... 42-2

42.2.2 Starting the Master-Slave Switchover Manually ................................................. 42-2

42.2.3 Enabling/Disabling Automatic Synchronization...................................................42-2

42.2.4 Synchronizing the Configuration File Manually................................................... 42-3

42.2.5 Configuring the Load Mode of the Fabric and Slave Board................................42-3

42.3 Displaying and Debugging HA Configuration................................................................42-4

Chapter 43 File System Management........................................................................................ 43-4

43.1 File System Configuration.............................................................................................. 43-4

43.1.1 File System Overview .........................................................................................43-4

43.1.2 Directory Operation.............................................................................................43-5

43.1.3 File Operation...................................................................................................... 43-5

43.1.4 Storage Device Operation...................................................................................43-6

43.1.5 Setting the Prompt Mode of the File System ...................................................... 43-7

43.2 Configuration File Management.....................................................................................43-7

43.2.1 Configuration File Management Overview.......................................................... 43-7

43.2.2 Displaying the Current-Configuration and Saved-Configuration of Ethernet Switch43-8

43.2.3 Modifying and Saving the Current-Configuration................................................ 43-9

43.2.4 Erasing Configuration Files from Flash Memory.................................................43-9

43.2.5 Configuring the Name of the Configuration File Used for the Next Startup........ 43-9

43.3 FTP Configuration........................................................................................................ 43-10

43.3.1 FTP Overview....................................................................................................43-10

TOC-16

3Com Switch 8800 Configuration Guide Table of Contents

43.3.2 Enabling/Disabling FTP Server......................................................................... 43-12

43.3.3 Configuring the FTP Server Authentication and Authorization.........................43-12

43.3.4 Configuring the Running Parameters of FTP Server........................................43-13

43.3.5 Displaying and Debugging FTP Server............................................................. 43-13

43.3.6 Disconnecting an FTP User..............................................................................43-13

43.3.7 Introduction to FTP Client ................................................................................. 43-14

43.3.8 FTP Client Configuration Example.................................................................... 43-14

43.3.9 FTP Server Configuration Example .................................................................. 43-15

43.4 TFTP Configuration .....................................................................................................43-17

43.4.1 TFTP Overview ................................................................................................. 43-17

43.4.2 Downloading Files by Means of TFTP..............................................................43-18

43.4.3 Uploading Files by Means of TFTP................................................................... 43-18

43.4.4 TFTP Client Configuration Example .................................................................43-19

Chapter 44 MAC Address Table Management.......................................................................... 44-1

44.1 MAC Address Table Management Overview ................................................................ 44-1

44.2 MAC Address Table Management Configuration.......................................................... 44-2

44.2.1 Setting MAC Address Table Entries ................................................................... 44-2

44.2.2 Setting MAC Address Aging Time.......................................................................44-2

44.3 Maximum MAC Address Number Learned by Ethernet Port and Forwarding Option

Configuration..........................................................................................................................44-3

44.3.1 Maximum MAC Address Number Learned by a Port and Forwarding Option

Configuration Tasks ....................................................................................................... 44-4

44.3.2 Configuring Maximum MAC Address Number Learned by Ethernet Port and

Forwarding Option Example........................................................................................... 44-5

44.4 Displaying and Debugging MAC Address Tables..........................................................44-5

44.5 Resetting MAC Addresses............................................................................................. 44-6

44.6 MAC Address Table Management Configuration Example........................................... 44-6

Chapter 45 Device management................................................................................................ 45-1

45.1 Device Management Overview......................................................................................45-1

45.2 Device Management Configuration ............................................................................... 45-1

45.2.1 Rebooting the Ethernet Switch............................................................................45-1

45.2.2 Enabling the Timing Reboot Function................................................................. 45-1

45.2.3 Designating the APP Adopted on Next Booting.................................................. 45-2

45.2.4 Upgrading BootROM........................................................................................... 45-3

45.2.5 Setting Slot Temperature Limit............................................................................45-3

45.2.6 Updating Service Processing Boards..................................................................45-3

45.3 Displaying and Debugging Device Management...........................................................45-4

45.4 Device Management Configuration Example................................................................45-5

45.4.1 Using the Switch as an FTP Client to Implement the Remote Upgrade............. 45-5

45.4.2 Use the Switch as an FTP Server to Implement the Remote Upgrade .............. 45-7

Chapter 46 System Maintenance and Debugging.................................................................... 46-1

46.1 Basic System Configuration........................................................................................... 46-1

TOC-17

3Com Switch 8800 Configuration Guide Table of Contents

46.1.1 Setting a Name for a Switch................................................................................46-1

46.1.2 Setting the System Clock....................................................................................46-1

46.1.3 Setting the Time Zone......................................................................................... 46-1

46.1.4 Setting the Summer Time ................................................................................... 46-2

46.2 Displaying the State and Information of the System......................................................46-2

46.3 System Debugging ........................................................................................................46-3

46.3.1 Enabling/Disabling the Terminal Debugging....................................................... 46-3

46.3.2 Displaying Diagnostic Information....................................................................... 46-4

46.4 Testing Tools for Network Connection ..........................................................................46-5

46.4.1 ping......................................................................................................................46-5

46.4.2 ping-distribute enable.......................................................................................... 46-5

46.4.3 tracert..................................................................................................................46-6

46.5 Logging Function...........................................................................................................46-6

46.5.1 Introduction to Info-center...................................................................................46-6

46.5.2 Info-center Configuration................................................................................... 46-10

46.5.3 Sending the Configuration Information to the Loghost ..................................... 46-14

46.5.4 Sending the Configuration Information to Console terminal.............................46-16

46.5.5 Sending the Configuration Information to Telnet Terminal or Dumb Terminal.46-19

46.5.6 Sending the Configuration Information to the Log Buffer.................................. 46-21

46.5.7 Sending the Configuration Information to the Trap Buffer................................46-23

46.5.8 Sending the Configuration Information to SNMP Network Management..........46-25

46.5.9 Displaying and Debugging Info-center..............................................................46-27

46.5.10 Configuration Examples of Sending Log to the Unix Loghost ........................ 46-28

46.5.11 Configuration examples of sending log to Linux loghost ................................ 46-30

46.5.12 Configuration Examples of Sending Log to the Console Terminal.................46-32

Chapter 47 SNMP Configuration................................................................................................ 47-1

47.1 SNMP Overview.............................................................................................................47-1

47.2 SNMP Versions and Supported MIB............................................................................. 47-1

47.3 Configuring SNMP.........................................................................................................47-3

47.3.1 Setting Community Names ................................................................................. 47-3

47.3.2 Setting the System Information........................................................................... 47-4

47.3.3 Enabling/Disabling SNMP Agent to Send Trap...................................................47-4

47.3.4 Setting the Destination Address of Trap.............................................................47-5

47.3.5 Setting Lifetime of Trap Message ....................................................................... 47-5

47.3.6 Setting the Engine ID of a Local or Remote Device............................................47-6

47.3.7 Setting/Deleting an SNMP Group ....................................................................... 47-6

47.3.8 Setting the Source Address of Trap.................................................................... 47-7

47.3.9 Adding/Deleting a User to/from an SNMP Group ............................................... 47-7

47.3.10 Creating/Updating View Information or Deleting a View...................................47-8

47.3.11 Setting the Size of the SNMP Packet Sent/Received by an Agent...................47-8

47.3.12 Disabling SNMP Agent...................................................................................... 47-8

47.4 Displaying and Debugging SNMP................................................................................. 47-9

TOC-18

3Com Switch 8800 Configuration Guide Table of Contents

47.5 SNMP Configuration Example....................................................................................... 47-9

Chapter 48 RMON Configuration...............................................................................................48-1

48.1 RMON Overview............................................................................................................ 48-1

48.2 Configuring RMON ........................................................................................................48-1

48.2.1 Adding/Deleting an Entry to/from the Event Table.............................................. 48-2

48.2.2 Adding/Deleting an Entry to/from the Alarm Table..............................................48-2

48.2.3 Adding/Deleting an Entry to/from the Extended RMON Alarm Table.................48-3

48.2.4 Adding/Deleting an Entry to/from the History Control Table...............................48-4

48.2.5 Adding/Deleting an Entry to/from the Statistics Table......................................... 48-5

48.3 Displaying and Debugging RMON................................................................................. 48-5

48.4 RMON Configuration Example ...................................................................................... 48-6

Chapter 49 NTP Configuration...................................................................................................49-1

49.1 Brief Introduction to NTP ...............................................................................................49-1

49.1.1 NTP Functions.....................................................................................................49-1

49.1.2 Basic Operating Principle of NTP........................................................................49-1

49.2 NTP Configuration......................................................................................................... 49-2

49.2.1 Configuring NTP Operating Mode....................................................................... 49-2

49.2.2 Configuring NTP ID Authentication.....................................................................49-6

49.2.3 Setting NTP Authentication Key.......................................................................... 49-6

49.2.4 Setting Specified Key as Reliable.......................................................................49-7

49.2.5 Designating an Interface to Transmit NTP Messages ........................................ 49-7

49.2.6 Setting NTP Master Clock................................................................................... 49-8

49.2.7 Setting Authority to Access a Local Ethernet Switch..........................................49-8

49.2.8 Setting Maximum Local Sessions.......................................................................49-9

49.3 Displaying and Debugging NTP.....................................................................................49-9

49.4 NTP Configuration Example........................................................................................49-10

49.4.1 Configuring a NTP Server................................................................................. 49-10

49.4.2 NTP Peer Configuration Example..................................................................... 49-11

49.4.3 Configure NTP Broadcast Mode.......................................................................49-13

49.4.4 Configure NTP Multicast Mode.........................................................................49-14

49.4.5 Configure Authentication-Enabled NTP Server Mode ...................................... 49-16

Chapter 50 SSH Terminal Service.............................................................................................. 50-1

50.1 SSH Terminal Service ...................................................................................................50-1

50.1.1 SSH Overview..................................................................................................... 50-1

50.1.2 SSH Server Configuration...................................................................................50-3

50.1.3 SSH Client Configuration..................................................................................50-12

50.1.4 Displaying and Debugging SSH........................................................................ 50-13

50.1.5 SSH Server Configuration Example.................................................................. 50-13

50.1.6 SSH Client Configuration Example...................................................................50-16

50.2 SFTP Service............................................................................................................... 50-17

50.2.1 SFTP Overview.................................................................................................50-17

50.2.2 SFTP Server Configuration............................................................................... 50-17

TOC-19

3Com Switch 8800 Configuration Guide Table of Contents

50.2.3 SFTP Client Configuration ................................................................................ 50-18

50.2.4 SFTP Configuration Example............................................................................50-22

Chapter 51 PoE Configuration...................................................................................................51-1

51.1 PoE Overview................................................................................................................51-1

51.1.1 PoE on the Switch............................................................................................... 51-1

51.1.2 External PSE4500-A Power System...................................................................51-2

51.2 PoE Configuration.......................................................................................................... 51-2

51.2.1 PoE Configuration Tasks ....................................................................................51-3

51.3 Comprehensive Configuration Example........................................................................51-5

Chapter 52 PoE PSU Supervision Configuration..................................................................... 52-1

52.1 Introduction to PoE PSU Supervision............................................................................ 52-1

52.2 AC Input Alarm Thresholds Configuration.....................................................................52-1

52.2.1 AC Input Alarm Thresholds Configuration Tasks................................................52-1

52.2.2 AC Input Alarm Thresholds Configuration Example ........................................... 52-2

52.3 DC Output Alarm Thresholds Configuration..................................................................52-2

52.3.1 DC Output Alarm Thresholds Configuration Tasks............................................. 52-3

52.3.2 DC Output Alarm Thresholds Configuration Example ........................................ 52-3

52.4 Displaying PoE Supervision Information .......................................................................52-4

52.5 PoE PSU Supervision Configuration Example..............................................................52-4

TOC-20

3Com Switch 8800 Configuration Guide Chapter 1 Product Overview

Chapter 1 Product Overview

1.1 Product Overview

The Switch 8800 is a large-capacity , modularized L2/L3 switch. It is mainly designed for
broadband MAN, backbone, switching core and convergence center of large-sized
enterprise network and campus network. It provides diverse services and can be used
in constructing a stable and high-performance IP network.

The Switch 8800 supports the following services:

z Internet broadband access
z MAN, enterprise/campus networking
z Providing multicast service and multicast routing and supporting multicast audio

and video services.

1.2 Function Features

Table 1-1 Function features

Features Implementation

Supports VLAN compliant with IEEE 802.1Q Standard

VLAN

STP protocol

Flow control

Broadcast
Suppression

Multicast

Supports port-based and MAC-based VLAN
Supports GARP VLAN Registration Protocol (GVRP)

Supports Spanning Tree Protocol (STP) / Multiple Spanning Tree
Protocol (MSTP), compliant with IEEE 802.1D/IEEE 802.1s
Standard

Supports IEEE 802.3x flow control (full-duplex)
Supports back-pressure based flow control (half-duplex)

Supports Broadcast Suppression

Supports Internet Group Management Protocol Snooping (IGMP
Snooping)

Supports Internet Group Management Protocol (IGMP)
Supports Protocol-Independent Multicast-Dense Mode (PIM-DM )
Supports Protocol-Independent Multicast-Sparse Mode

(PIM-SM)
Supports Multicast Source Discovery Protocol (MSDP)
Supports Multiprotocol BGP (MBGP)

1-1

3Com Switch 8800 Configuration Guide Chapter 1 Product Overview

Features Implementation

Supports static routing
Supports Routing Information Protocol (RIP) v1/v2
Supports Open Shortest Path First (OSPF)

IP routing

Supports Border Gateway Protocol (BGP)
Supports Intermediate System-to-Intermediate System

intra-domain routing information exchange protocol (IS-IS)
Supports IP routing policy

DHCP Relay Supports Dynamic Host Configuration Protocol (DHCP) Relay

Link
aggregation

Mirror

Supports link aggregation, including two kinds of link a ggregation
LACPs (link aggregation control protocols): static aggregation
and dynamic aggregation.

Supports the port-based mirror
Supports flow mirroring of copying messages to CPU

Supports traffic classification
Supports bandwidth control

Quality of
Service (QoS)

Supports congestion control
Supports traffic shaping and traffic supervision
Supports queues of different priority on the port
Queue scheduling: supports Strict Priority Queuing (SP),

Weighted Round Robin (WRR), and SP+WRR
Supports Multi-level user management and password protect

Security
features

Supports 802.1X authentication
Supports Packet filtering

MPLS

Supports Multiprotocol Label Switching (MPLS) basic function
Supports MPLS L3 VPN

Supports Command Line Interface configuration
Supports local configuration via Console port and AUX port
Supports Local and remote configuration through Telnet on

Ethernet port
Supports Remote configuration through dialing with modem via

Management
and
Maintenance

the AUX port.
Supports SNMP management (Supports Quidview NMS and

RMON MIB Group 1, 2, 3 and 9)
Supports system log
Supports level alarms
Supports output of the debugging information
Supports PING and Tracert
Supports the remote maintenance via Telnet and Modem

Loading and
updating

Supports to load and upgrade software via XModem protocol
Supports to load and upgrade software via File Transfer Protocol

(FTP) and Trivial File Transfer Protocol (TFTP)

1-2

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

Chapter 2 Logging into Switch

2.1 Setting Up Configuration Environment Through the Console Port

Step 1: As shown in the figure below, to set up the local configuration environment,
connect the serial port of a PC (or a terminal) to the Console port of the switch with the
Console cable.

RS-232 Serial port

Console port

Console cable

Figure 2-1 Set up the local configuration environment through the Console port

Step 2: Run termin al emulator (such as Terminal on Windows 3X or the Hyper Terminal
on Windows 9X) on the Computer. Set the terminal communication parameters as
follows: Set the baud rate to 9600, databit to 8, parity check to none, stopbit to 1, flow
control to none and select the terminal type as VT100.

Figure 2-2 Set up new connection

2-1

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

Figure 2-3 Configure the port for connection

Figure 2-4 Set communication parameters

Step 3: The switch i s powered on. Display self-test information of the switch and prompt
you to press Enter to show the command line prompt such as <SW8800>.

Step 4: Input a command to config ure the switch or view the operation st ate. Input a “?”
for an immediate help. For details of specific commands, refer to the following chapters.

2-2

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

2.2 Setting Up Configuration Environment Through Telnet

2.2.1 Connecting a PC to the Switch Through Telnet

After you have correctly configured IP address of a VLAN interface for a switch via
Console port (using ip address command in VLAN interface view), and added the port
(that connects to a terminal) to this VLAN (usi ng port command in VLAN view), you can
telnet this switch and configure it.

Step 1: Before logging into the switch through telnet, you need to configure the Telnet
user name and password on the switch through the console port.

 Note:

By default, the password is required for authenticating the Telnet user to log in the
switch. If a user logs in via the Telnet without password, he will see the prompt “Login
password has not been set !”.

<SW8800> system-view
Enter system view , return user view with Ctrl+Z.
[SW8800] user-interface vty 0
[SW8800-ui-vty0] set authentication password simple xxxx (xxxx is the preset login

password of Telnet user)

Step 2: To set up the configuration environment, connect the Ethernet port of the PC to
that of the switch via the LAN, as shown in

Workstation

Workstation

Ethernet port

Ethernet port

Ethernet

Ethernet

Server

Server

Workstation

Workstation

PC ( for co n fi g u ring th e sw i tch

PC ( for co n fi g u ring th e sw i tch

via Te l net )

via Te l net )

Figure 2-5.

Figure 2-5 Set up configuration environment through telnet

Step 3: Run Telnet on the PC and input the IP address of the VLAN connected to the PC
port, as shown in

Figure 2-6.

2-3

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

Figure 2-6 Run Telnet

Step 4: The terminal displays “Login authentication!” and prompts the user to input the
logon password. After you input the correct password, it displays the command line
prompt (such as <SW8800>). If the prompt “All user interfaces are used, please try
later! The connection was closed by the remote host!” appears, it indicates that the
maximum number of Telnet users that can be accessed to the switch is reached at this
moment. In this case, please reconnect later. At most 5 Telnet users are allowed to log
on to the Switch 8800 simultaneously.

Step 5: Use the corresponding commands to configure the switch or to monitor the
running state. Enter “?” to get the immediate help. For details of specific commands,
refer to the following chapters.

 Note:

z When configuring the switch via Telnet, do not modify the IP address of it unless

necessary, for the modification might cut the Telnet connection.

z By default, when a Telnet user passes the password authentication to log on to the

switch, he can access the commands at Level 0.

2.2.2 Telneting a Switch Through Another Switch

After a user has logged into a switch, he or she can configure another switch through
the switch via Telnet. The local switch serves as Telnet client and the peer switch
serves as Telnet server. If the ports connecting these two switches are in a same local
network, their IP addresses must be configured in the same network segment.
Otherwise, the two switches must establish a route that can reach each other.

As shown in the figure below, af ter you telnet to a switch, you can run telnet command
to log in and configure another switch.

2-4

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

PC

Telnet Client

Telnet Server

Figure 2-7 Provide Telnet Client service

Step 1: Configure the Telnet user name and password on the Telnet Server through the
console port.

 Note:

By default, the password is required for authenticating the Telnet user to log in the
switch. If a user logs in via the Telnet without password, he will see the prompt “Login
password has not been set !.”.

<SW8800> system-view
System View: return to User View with Ctrl+Z
[SW8800] user-interface vty 0
[SW8800-ui-vty0] set authentication password simple xxxx (xxxx is the preset login

password of Telnet user)

Step 2: The user logs in the Telnet Client (switch). For the login process, refer to the
section describing “Connecting a PC to the Switch through Telnet”.

Step 3: Perform the following operations on the Telnet Client:

<SW8800> telnet xxxx (xxxx can be the hostname or IP address of the Telnet Server. If it is the
hostname, you need to use the ip host command to specify.)

Step 4: Enter the preset login password and you will see the prompt such <S W8800>. If
the prompt “All user interfaces are used, please try later! The connection was clo sed by
the remote host!” appears, it indicates that the maximum number of Telnet users that
can be accessed to the switch is reached at this moment. In this case, please connect
later.

Step 5: Use the corresponding commands to configure the switch or view it running
state. Enter “?” to get the immediate help. For details of specific commands, refe r to the
following chapters.

2.3 Setting Up Configuration Environment Through a Dial-up the Modem

Step 1: Authenticate the Modem user via the Console port of the switch before he logs
in the switch through a dial-up Modem.

2-5

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

 Note:

By default, the password is required for authenticating the Modem user to log in the
switch. If a user logs in via the Modem without password, he will see the prompt “Login
password has not been set !.”.

<SW8800> system-view
System View: return to User View with Ctrl+Z..
[SW8800] user-interface aux 0
[SW8800-ui-aux0] set authentication password simple xxxx (xxxx is the preset login

password of the Modem user.)

Step 2: As shown in the figure below, to set up the remote configuration environment,
connect the Modems to a PC (or a terminal) serial port and the switch AUX port
respectively.

Modem serial port line

Telephone line

AUX port

Remote tel:

82882285

Modem

PSTN

Modem

Figure 2-8 Set up remote configuration environment

Step 3: Dial for connection to the switch, using the terminal emulat or and Modem on the
remote end. The number dialed shall be the telephone number of the Modem
connected to the switch. See the two figures below.

2-6

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch

Figure 2-9 Set the dialed number

Figure 2-10 Dial on the remote PC

Step 4: Enter the preset login password on the remote terminal emulator and wait for
the prompt such as <SW8800>. Then you can configure and man age the switch. Enter
“?” to get the immediate help. For details of specific commands, refer to the following
chapters.

 Note:

By default, when a Modem user logs in, he can access the commands at Level 0.

2-7

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Chapter 3 Command Line Interface

3.1 Command Line Interface

The Switch 8800 provides a series of configuration commands and command line
interfaces for configuring and managing the switch. The command line interface has
the following characteristics:

z Local configuration via the Console port and AUX port.
z Local or remote configuration via Telnet.
z Remote configuration through dialing with modem via the AUX port.
z Hierarchy command protection to avoid the unauthorized users accessing switch.
z Enter a “?” to get immediate online help.
z Provide network testing commands, such as Tracert and Ping, to fast troubleshoot

the network.

z Provide various detailed debugging information to help with network

troubleshooting.

z Log in and manage other switch directly, using the Telnet command.
z Provide FTP service for the users to upload and download files.
z Provide the function similar to Doskey to execute a history command.
z The command line interpreter searches for target not fully matching the keywords.

It is ok for you to key in the whole keyword or part of it, as long as it is unique and
not ambiguous.

3.2 Command Line View

The Switch 8800 provides hierarchy protection for the command lines to avoid
unauthorized user accessing illegally.

Commands are classified into four levels, namely visit level, monitoring level,
configuration level and management level. They are introduced as follows:

z Visit level: Commands of this level involve command of network diagnosis tool

(such as ping and tracert), command of switch between different language
environments of user interface (language-mode) and telnet command etc. The
operation of saving configuration file is not allowed on this level of commands.

z Monitoring level: Commands of this level, including the display command and the

debugging command, are used to system maintenance, service fault diagnosis,

etc. The operation of saving configuration file is not allowed on this level of
commands.

z Configuration level: Service configuration commands, including routing command

and commands on each network layer, are used to provide direct network service
to the user.

3-1

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

z Management level: They are commands that influence basis operation of the

system and system support module, which plays a support role on service.
Commands of this level involve file system commands, FTP commands, TFTP
commands, XModem downloading commands, user management commands,
and level setting commands.

At the same time, login users are classified into four levels that correspond to the four
command levels respectively. After users of different levels log in, they can only use
commands at the levels that are equal to or lower than its own level.

In order to prevent unauthorized users from illegal intrusion, user will be identified whe n
switching from a lower level to a higher level with super [ level ] command. User ID
authentication is performed when users at lower level switch to use rs at higher level. In
other words, user password of the higher level is needed (Suppose the user has set the
super password [ level level ] { simple | cipher } password.) For the sake of
confidentiality, on the screen the user cannot see the password that he entered. Only
when correct password is input for three times, can the user switch to the higher level.
Otherwise, the original user level will remain unchanged.

Different command views are implemented according to different requirements. They
are related to one another. For example, after logging in the switch, you will enter user
view, in which you can only use some basic functions such as displaying the running
state and statistics information. In user view, key in system-view to enter system view,
in which you can key in different configuration commands and enter the corresponding
views.

The command line provides the following views:

z User view
z System view
z Port view
z VLAN view
z VLAN interface view
z Local-user view
z User interface view
z FTP Client view
z SFTP Client view
z MST region view
z PIM view
z MSDP view
z IPv4 multicast sub-address family view
z RIP view
z OSPF view
z OSPF area view
z BGP view
z IS-IS view

3-2

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

z Route policy view
z Basic ACL view
z Advanced ACL view
z Layer-2 ACL view
z Conform-level view
z WRED index view
z RADIUS server group view
z ISP domain view
z MPLS view
z VPNv4 sub-address family view
z VPN-instance sub-address family view
z Remote-peer view
z VSI-LDP view
z VSI view
z TACACS+ view
z Port group view
z Lanswitch view

The following table describes the function features of different views and the ways to
enter or quit.

Table 3-1 Function feature of command view

Command

view

User view

System
view

Function Prompt

Show the basic
information
about operation

<SW8800
>

and statistics
Configure

system

[SW8800]

parameters

Command to

enter

Enter right after
connecting the
switch

Key in
system-view in
user view

Command to

exit

quit

disconnects
to the switch

quit or return
returns to
user view

3-3

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Command

view

Port view

VLAN view

Function Prompt

[SW8800­Ethernet2/
1/1]

Ethernet port
view:

Configure
Ethernet port

[SW8800­GigabitEth
ernet2/1/1
]

parameters

[SW8800­10-Gigabit
Ethernet2/
1/1]

Configure VLAN
parameters

[SW8800­Vlan1]

Command to

enter

100M Ethernet port
view

Key in interface
ethernet 2/1/1 in
system view

GigabitEthernet
port view

Key in interface
gigabitethernet
2/1/1 in system
view

10G Ethernet port
view

Key in interface

10-gigabitetherne
t 2/1/1 in system

view

Key in vlan 1 in
system view

Command to

exit

quit returns to

system view
return returns

to user view

quit returns to
system view

return returns
to user view

VLAN
interface
view

Local-user
view

User
interface
view

FTP Client
view

SFTP
Client view

MST
region view

Configure IP
interface
parameters for a
VLAN or a VLAN

[SW8800­Vlan-interf
ace1]

aggregation

Configure local
user parameters

Configure user
interface
parameters

[SW8800-l
user-user
1]

[SW8800­ui0]

Configure FTP
Client

[ftp]

parameters

Configure SFTP
Client
parameters

Configure MST
region
parameters

sftp-client
>

[SW8800­mst-region
]

Key in interface
vlan-interface 1 in
system view

Key in local-user
user1 in system
view

Key in
user-interface 0 in
system view

Key in ftp in user
view

Key in sftp
ip-address in
system view

Key in stp

region-configurati
on in system view

quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view

quit returns to
system view

quit returns to
system view

return returns
to user view

quit returns to
system view

return returns
to user view

3-4

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Command

view

PIM view

MSDP view

Configure PIM
parameters

Configure MSDP
parameters

Enter the IPv4

IPv4
multicast
sub-addres
s family
view

multicast
sub-address
family view to
configure MBGP
multicast
extension
parameters

RIP view

Configure RIP
parameters

Function Prompt

[SW8800­PIM]

[SW8800­msdp]

[SW8800­bgp-af-mu
l]

[SW8800­rip]

Command to

enter

Key in pim in
system view

Key in msdp in
system view

Key in ipv4-family
multicast in BGP
view

Key in rip in
system view

Command to

exit

quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view

quit returns to
BGP view

return returns
to user view

quit returns to
system view

return returns
to user view

OSPF view

OSPF area
view

BGP view

IS-IS view

Route
policy view

Configure OSPF
parameters

Configure OSPF
area parameters

Configure BGP
parameters

Configure IS-IS
parameters

Configure route
policy
parameters

[SW8800­ospf]

[SW8800­ospf-0.0.0.
1]

[SW8800­bgp]

[SW8800-i
sis]

[SW8800­route-polic
y]

quit returns to

Key in ospf in
system view

system view
return returns

to user view
quit returns to

Key in area 1 in
OSPF view

OSPF view
return returns

to user view
quit returns to

Key in bgp 100 in
system view

system view
return returns

to user view
quit returns to

Key in isis in
system view

system view
return returns

to user view

Key in
route-policy
policy1 permit
node 10 in system
view

quit returns to
system view

return returns
to user view

Basic ACL
view

Define the rule of
basic ACL

[SW8800­acl­basic-200
0]

3-5

Key in acl number
2000 in system
view

quit returns to
system view

return returns
to user view

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Command

view

Advanced
ACL view

Layer-2
ACL view

Conform-le
vel view

Function Prompt

Define the rule of
advanced ACL

Define the rule of
layer-2 ACL

[SW8800­acl-adv-30
00]

[SW8800­acl-link-40
00]

Configure the
"DSCP +
Conform-level
Service group"
mapping table
and”EXP +
Conform-level­>service
parameters”map

[SW8800­conform-le

vel-0]
ping table and
"Local-preceden
ce +
Conform-level

802.1p priority"
mapping table

Command to

enter

Key in acl number
3000 in system
view

Key in acl number
4000 in system
view

Key in qos
conform-level 0 in
system view

Command to

exit

quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view

quit returns to
system view

return returns
to user view

WRED
index view

RADIUS
server
group view

ISP
domain
view

MPLS view

VPNv4
subaddres
s family
view

Configure
WRED
parameters

Configure radius
parameters

Configure ISP
domain
parameters

Configure MPLS
parameters

Configure
VPNv4 address
family
parameters

[SW8800-

wred-0]

[SW8800-

radius-1]

[SW8800-i

sp-3Com1

63.net]

[SW8800-

mpls]

[SW8800-

bgp-af-vp

n]

Key in wred 0 in
system view

Key in radius
scheme 1 in
system view

Key in domain
3Com163.net in
system view

Key in mpls in
system view

Key in ipv4-family

vpnv4 in BGP view

quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view
quit returns to

system view
return returns

to user view

3-6

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Command

view

VPN-instan
ce
subaddres
s family
view

Remote-pe
er view

VSI-LDP
view

VSI view

TACACS+
view

Configure VPN
instance
subaddress
family
parameters

Configure MPLS
peer group
parameters

Configure some
VPLS features

Specify VPLS
mode

Configure
TACACS+
protocol
parameters

Function Prompt

[SW8800-

bgp-af-vp

n-instance

]

[SW8800-

mpls-remo

te1]

[SW8800-

vsi-3Com-

ldp]

[SW8800-

vsi-3Com]

[SW8800-t

acacs+-3

Com]

Command to

enter

Key in ipv4-family
vpn-instance vpna

in BGP/RIP view

Key in mpls
remote1

Key in vsi 3Co m in
system view

Key in pwsignal
ldp in vsi view

Key in vsi 3Co m in
system view

Key in tacacs+
scheme 3Com in
system view

quit returns to
system view

return returns
to user view

quit returns to
system view

return returns
to user view

quit returns to
vsi view

return returns
to user view

quit returns to
system view

return returns
to user view

quit returns to
system view

return returns
to user view

Command to

exit

Combine the
ports with the

Port group
view

Lanswitch
view

same
configuration,
omitting
repeated
configuration
procedure

Enter lanswitch
view.

After entering
the specified
lanswitch view,
you can use the
specified
Ethernet switch.

[SW8800-

port-group

X]

[SW8800-l

answitchX

/X/X-/]

Key in port-group
X in system view

Key in lanswitch
X/X/X-/ in HGMP
view

3.3 Features and Functions of Command Line

3.3.1 Online Help of Command Line

quit returns to

system view
return returns

to user view

quit returns to
HGMP view

return returns
to user view

The command line interface provides the following online help modes.

z Full help

3-7

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

z Partial help

You can get the help information through these online help commands, which are
described as follows.

1) Input “?” in any view to get all the commands in it and corresponding de scriptions.

<SW8800> ?
User view commands:
language-mode Specify the language environment
ping Ping function
quit Exit from current command view
super Privilege current user a specified priority level
telnet Establish one TELNET connection
tracert Trace route function

2) Input a command with a “?” separated by a space. If this position is for keywords,
all the keywords and the corresponding brief descriptions will be listed.

<SW8800> language-mode ?
chinese Chinese environment
english English environment

3) Input a command with a “?” separated by a space. If this position is for parameters,
all the parameters and their brief descriptions will be listed.

[SW8800] garp timer leaveall ?
INTEGER<65-32765> Value of timer in centiseconds
(LeaveAllTime > (LeaveTime [On all ports]))
Time must be multiple of 5 centiseconds
[SW8800] garp timer leaveall 300 ?
<cr>

<cr> indicates no parameter in this position. The next command line repeats the
command, you can press <Enter> to execute it directly.

4) Input a character string with a “?”, then all the commands with this cha racter string
as their initials will be listed.

<SW8800> p?
ping pwd

5) Input a command with a character string and “?”, then all the key words with this
character string as their initials in the command will be listed.

<SW8800> display ver?
version

6) Input the first letters of a keyword of a command and press <Tab> key. If no other
keywords are headed by this letters, then this unique keyword will be displayed
automatically.

7) To switch to the Chinese display for the above information, perform the
language-mode command.

3-8

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

3.3.2 Displaying Characteristics of Command Line

Command line interface provides the following display characteristics:

z For users’ convenience, the instruction and help information can be displayed in

both English and Chinese.

z For the information to be displayed exceeding one screen, pausing function is

provided. In this case, users can have three choices, as shown in the table below.

Table 3-2 Functions of displaying

Key or Command Function

Press <Ctrl+C> when the display
pauses

Enter a space when the display pauses

Press <Enter> when the display pauses

3.3.3 History Command of Command Line

Command line interface provides the function similar to that of DosKey . The commands
entered by users can be automatically saved by the command line interface and you
can invoke and execute them at any time later. Histo ry command buf fer is defaulted a s

10. The operations are shown in the table below.

Table 3-3 Retrieve history command

Operation Key Result

Display history
command

display
history-command

Stop displaying and executing
command.

Continue to display the next screen of
information.

Continue to display the next line of
information.

Display history command by user
inputting

Retrieve the
previous history
command

Retrieve the next
history command

Up cursor key <↑> or
<Ctrl+P>

Down cursor key <↓>
or <Ctrl+N>

Retrieve the previous history
command, if there is any.

Retrieve the next history
command, if there is any.

 Note:

Cursor keys can be used to retrieve the history commands in Windows 3.X Terminal
and Telnet. However, in Windows 9X HyperTerminal, the cursor keys ↑ and ↓ do not
work, because Windows 9X HyperTerminal defines the two keys differently. In this
case, use the combination keys <Ctrl+P> and <Ctrl+N> instead for the same purpose.

3-9

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

3.3.4 Common Command Line Error Messages

All the input commands by users can be correctly executed, if they have passed the
grammar check. Otherwise, error messages will be reported to users. The common
error messages are listed in the following table.

Table 3-4 Common command line error messages

Error messages Causes

Cannot find the command.

Unrecognized command

Incomplete command The input command is incomplete.
Too many parameters Enter too many parameters.
Ambiguous command The parameters entered are not specific.

Cannot find the keyword.
Wrong parameter type.
The value of the parameter exceeds the range.

3.3.5 Editing Characteristics of Command Line

Command line interface provides the basic command editing function and supports to
edit multiple lines. A command cannot longer than 256 characte rs. See the table below .

Table 3-5 Editing functions

Key Function

Common keys

Backspace

Insert from the cursor position and the cursor moves to the
right, if the edition buffer still has free space.

Delete the character preceding the cursor and the cursor
moves backward.

Leftwards cursor key
<←> or <Ctrl+B>

Rightwards cursor key
<→> or <Ctrl+F>

Up cursor key <↑> or
<Ctrl+P>

Down cursor key <↓>
or <Ctrl+N>

Move the cursor a character backward

Move the cursor a character forward

Retrieve the history command.

3-10

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface

Press <Tab> after typing the incomplete key word and the
system will execute the partial help: If the key word
matching the typed one is unique, the system will replace

<Tab>

the typed one with the complete key word and display it in
a new line; if there is not a matched key word or the
matched key word is not unique, the system will do no
modification but display the originally typed word in a new
line.

3-11

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

Chapter 4 User Interface Configuration

4.1 User Interface Overview

User interface configuration is another way provided by the switch to configure and
manage the port data.

The Switch 8800 supports the following configuration methods:

z Local configuration via the Console port and AUX port
z Local and remote configuration through Telnet on Ethernet port
z Remote configuration through dialing with modem via the AUX port.

According to the above-mentioned configuration methods, there are three types of user
interfaces:

z Console user interface

Console user interface is used to log in the switch via the Console port. A switch can
only have one Console user interface.

z AUX user interface

AUX user interface is used to log in the switch locally or remotely with a modem via the
AUX port. A switch can only have one AUX user interface. The local config uration for it
is similar to that for the Console user interface.

z VTY user interface

VTY user interface is used to telnet the switch. A switch can have up to five VTY user
interface.

User interface is numbered in the following two ways: absolute number and relative
number.

I. Absolute number

The user interfaces for IP PBX fall into three types and they are sequenced as follows:
console interface (CON), auxiliary interface (AUX) and virtual interface (VTY). A switch
has one CON, one AUX and multiple VTYs. The first absol ute number is designat ed as
0; the second one is designated as 1; and so on. This method can specify a unique user
interface or a group of interfaces.

It follows the rules below.

z Console user interface is numbered as the first interface designated as user

interface 0.

z AUX user interface is numbered as the second interface designated as user

interface 1.

4-1

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

z VTY is numbered after AUX user interface. The absolute number of the first VTY is

incremented by 1 than the AUX user interface number.

II. Relative number

The relative number is in the format of “user interface type” + “number”. The “number”
refers to the internal number for each user interface type. This method can only specify
one interface or one group of interfaces for a user interface type instead of different
user interface types.

It follows the rules below:

z Number of Console user interface: console 0.
z Number of AUX user interface: AUX 0.
z Number of VTY: The first VTY interface is designated as VTY 0; the second one is

designated as VTY 1, and so on.

4.2 User Interface Configuration

The following sections describe the user interface configuration tasks.

z Entering User Interface View
z Define the Login Header
z Configuring Asynchronous Port Attributes
z Configuring Terminal Attributes
z Managing Users
z Configuring Modem Attributes
z Configuring Redirection

4.2.1 Entering User Interface View

The following command is used for entering a user interface view. You can enter a
single user interface view or multi user interface view to configure one or more user
interfaces respectively.

Perform the following configuration in system view.

Table 4-1 Enter user interface view

Operation Command

Enter a single user interface view or
multi user interface views

user-interface [ type ] first-number
[ last-number ]

4.2.2 Define the Login Header

The following command is used for configuring the displayed header when user login.

4-2

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

When the users log in the switch, if a connection is activated, the login header will be
displayed. After the user successfully logs in the switch, the shell header will be
displayed.

Perform the following configuration in system view.

Table 4-2 Configure the login header.

Operation Command

Configure the login header header [ shell | incoming | login ] text
Remove the login header configured undo header [ shell | incoming | login ]

Note that if you press <Enter> after typing any of the three keywords shell, login and
incoming in the command, then what you type after the word header is th e contents of
the login information, instead of identifying header type.

4.2.3 Configuring Asynchronous Port Attributes

The following commands can be used for configuring the attributes of the
asynchronous port in asynchronous interactive mode, including speed, flow control,
parity, stop bit and data bit.

Perform the following configurations in user interface (Console and AUX use r interface
only) view.

I. Configuring the transmission speed

Table 4-3 Configure the transmission speed

Operation Command

Configure the transmission speed
Restore the default transmission speed

speed speed-value
undo speed

By default, the transmission speed on an asynchronous port is 9600bps.

II. Configuring flow control

Table 4-4 Configure flow control

Operation Command

Configure the flow control

Restore the default flow control mode

flow-control { hardware | none |
software }

undo flow-control

4-3

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

By default, the flow control on an asynchronous port is none, that is, no flow control will
be performed.

III. Configuring parity

Table 4-5 Configure parity

Operation Command

Configure parity mode parity { even | mark | none | odd | space }
Restore the default parity mode

By default, the parity on an asynchronous port is none, that is, no parity bit.

undo parity

IV. Configuring the stop bit

Table 4-6 Configure the stop bit

Operation Command

Configure the stop bit stopbits { 1 | 1.5 | 2 }
Restore the default stop bit

By default, an asynchronous port supports 1 stop bit.
Note that setting 1.5 stop bits is not available on the Switch 8800.

undo stopbits

V. Configuring the data bit

Table 4-7 Configure the data bit

Operation Command

Configure the data bit databits { 7 | 8 }
Restore the default data bit

By default, an asynchronous port supports 8 data bit s.

4.2.4 Configuring Terminal Attributes

The following commands can be used for configuring the terminal attributes, including
enabling/disabling terminal service, disconnection upon timeout, lockable user
interface, configuring terminal screen length and history comman d buffer size.

Perform the following configuration in user interface view. Perform lock command in
user view.

I. Enabling/disabling terminal service

undo databits

4-4

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

After the terminal service is disabled on a user interface, you cannot log in to the switch
through the user interface. However, the user logged in through the user interface
before disabling the terminal service can continue his operation. After such user logs
out, he cannot log in again. In this case, a user can log in to the switch through the user
interface only when the terminal service is enabled again.

Table 4-8 Enable/disable terminal service

Operation Command

Enable terminal service
Disable terminal service

shell
undo shell

By default, terminal service is enabled on all the user interfaces.
Note the following points:

z For the sake of security, the undo shell command can only be used on the user

interfaces other than Console user interface.

z You cannot use this command on the user interface via which you log in.
z You will be asked to confirm before using undo shell on any legal user interface.

II. Configuring idle-timeout

Table 4-9 Configure idle-timeout

Operation Command

Configure idle-timeout idle-timeout minutes [ seconds ]
Restore the default idle-timeout

undo idle-timeout

By default, idle-timeout is enabled and set to 10 minutes on all the user interfaces. That
is, the user interface will be disconnected automatically after 10 minutes without any
operation.

idle-timeout 0 means disabling idle-timeout.

III. Locking user interface

This configuration is to lock the current user interface and prompt the user to enter the
password. This makes it impossible for others to operate in the interface after the user
leaves.

Table 4-10 Lock user interface

Operation Command

Lock user interface

lock

4-5

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

IV. Setting the screen length

If a command displays more than one screen of information, you can use the following
command to set how many lines to be displayed in a screen, so that the information can
be separated in different screens and you can vie w it more conveniently.

Table 4-11 Set the screen length

Operation Command

Set the screen length
Restore the default screen length

By default, the terminal screen length is 24 lines.

screen-length 0 indicates to disable screen display separation function.

V. Setting the history command buffer size

Table 4-12 Set the history command buffer size

Set the history command buffer size
Restore the default history command

buffer size

By default, the size of the history command buffer is 10, that is, 10 history commands
can be saved.

4.2.5 Managing Users

screen-length screen-length
undo screen-length

Operation Command

history-command max-size value

undo history-command max-size

The management of users includes the setting of user logon authentication method,
level of command which a user can use after logging on, level of command which a
user can use after logging on from the specifically user interface, and command level.

I. Configuring the authentication method

The following command is used for configuring the user login authentication m ethod to
deny the access of an unauthorized user .

Perform the following configuration in user interface view.

Table 4-13 Configure the authentication method

Operation Command

Configure the authentication method

4-6

authentication-mode { password |
scheme | none }

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

By default, terminal authentication is not required for local users log in via the Console
port. However, password authentication is required for local users and remote Modem
users log in via the AUX po rt, and Telnet users log in through Ethernet port.

1) Perform local password authentication to the user interface

Using authentication-mode password command, you can perform local password
authentication. That is, you need use the command below to configure a login
password in order to login successfully.

Perform the following configuration in user interface view.

Table 4-14 Configure the local authentication password

Operation Command

Configure the local authentication
password

Remove the local authentication
password

set authentication password { cipher |
simple }password

undo set authentication password

Configure for password authentication when a user logs in through a VTY 0 user
interface and set the password to 3Com.

[SW8800] user-interface vty 0
[SW8800-ui-vty0] authentication-mode password
[SW8800-ui-vty0] set authentication password simple 3Com

2) Perform local or remote authentication of username and password to the user
interface

Using authentication-mode scheme command, you can perform local or remote
authentication of username and password. The type of the authentication depends on
your configuration. For detailed information, see “Security” section.

In the following example, local username and password authentication are configured.
Perform username and password authentication when a user logs in through VTY 0

user interface and set the username and password to zb r and 3Com respectively.

[SW8800-ui-vty0] authentication-mode scheme
[SW8800-ui-vty0] quit
[SW8800] local-user zbr
[SW8800-luser-zbr] password simple 3Com
[SW8800-luser-zbr] service-type telnet

3) No authentication

[SW8800-ui-vty0] authentication-mode none

4-7

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

 Note:

By default, password is required to be set for authenticating local users and remote
Modem users log in via the AUX port, and Telnet users log in through Ethernet port. If
no password has been set, the following prompt will be displayed “Login password has
not been set !.”
If the authentication-mode none command is used, the local and Modem users via
the AUX port and Telnet users will not be required to input password.

II. Setting the command level used after a user logging in

The following command is used for setting the command level used after a user logging
in.

Perform the following configuration in local-user view.

Table 4-15 Set the command level used after a user logging in

Operation Command

Set command level used after a user
logging in

Restore the default command level used
after a user logging in

service-type telnet [ level level ]

undo service-type telnet [ level ]

By default, the specified logon user can access the commands at Level 0.

III. Setting the command level used after a user logs in from a user interface

You can use the following command to set the command level after a user log s in from
a specific user interface, so that a user is able to execute the commands at such
command level.

Perform the following configuration in user interface view.

Table 4-16 Set the command level used after a user logging in from a user interface

Operation Command

Set command level used after a user
logging in from a user interface

user privilege level level

Restore the default command level used
after a user logging in from a user

undo user privilege level

interface

By default, you can access the commands at Level 3 after logging in through the
Console user interface, and the commands at Level 0 after lo gging in through t he AUX
or VTY user interface.

4-8

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

 Note:

When a user logs in the switch, the command level that it can access depends on two
points. One is the command level that the user itself can access, the other is the set
command level of this user interface. If the two levels are different, the former will be
taken. For example, the command level of VTY 0 user interface is 1, however, you have
the right to access commands of level 3; if you log in from VTY 0 user interface, you can
access commands of level 3 and lower.

IV. Setting the command priority

The following command is used for setting the priority of a specified command in a
certain view. The command levels include visit, monitoring, configuration, and
management, which are identified with 0 through 3 respectively. An administrator
assigns authorities as per user requirements.

Perform the following configuration in system view.

Table 4-17 Set the command priority

Operation Command

Set the command priority in a specified
view.

Restore the default command level in a
specified view.

command-privilege level level view
view command

Undo command-privilege view view
command

V. Setting input protocol for a user terminal

You can use the following command to set input protocol for a user terminal. The input
protocol type can be TELNET, SSH or all.

Perform the following configuration in user interface view.

Table 4-18 Set input protocol for a user terminal

Operation Command

Set input protocol for a user terminal protocol inbound { all | telnet | ssh }

By default, the input protocol type for a user terminal is all.

4-9

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

4.2.6 Configuring Modem Attributes

When logging in the switch via the Modem, you can use the following commands to
configure these parameters.

Perform the following configuration in AUX user interface view.

Table 4-19 Configure Modem attributes

Operation Command

Set the interval since the system receives
the RING until CD_UP

Restore the default interval since the
system receives the RING until CD_UP

Configure auto answer
Configure manual answer
Configure to allow call-in
Configure to bar call-in
Configure to permit call-in and call-out.
Configure to disable call-in and call-out

4.2.7 Configuring Redirection

I. Send command

The following command can be used for sending messages between user interfaces.
Perform the following configuration in user view.

modem timer answer seconds

undo modem timer answer

modem auto-answer
undo modem auto-answer
modem call-in
undo modem call-in
modem both
undo modem both

Table 4-20 Configure to send messages between different user interfaces.

Operation Command

Configure to send messages between
different user interfaces.

send { all | number | type number }

II. Auto-execute command

The following command is used to automatically run a command after you log in. Af ter a
command is configured to be run automatically, it will be automatically executed when
you log in again.

This command is usually used to automatically execute telnet command on the
terminal, which will connect the user to a designated device automatically.

Perform the following configuration in user interface view.

4-10

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration

Table 4-21 Configure to automatically run the command

Operation Command

Configure to automatically run the command
Configure not to automatically run the

command

auto-execute command text

undo auto-execute command

Note the following points:

z After executing this command, the user interface can no longer be used to carry

out the routine configurations for the local system. Use this command with cautio n.

z Make sure that you will be able to log in the system in some other way and cancel

the configuration, before you use the auto-execute command command and
save the configuration.

Telnet 10.110.100.1 after the user logs in through VT Y0 automatically.

[SW8800-ui-vty0] auto-execute command telnet 10.110.100.1

When a user logs on via VTY 0, the system will run telnet 10.110.100.1 automatically.

4.3 Displaying and Debugging User Interface

After the above configuration, execute display command in any view to display the
running of the user interface configuration, and to verify the effect of the configuration.

Execute free command in user view to clear a specified user interface.

Table 4-22 Display and debug user interface

Operation Command

Clear a specified user interface free user-interface [ type ] number
Display the user application information

of the user interface
Display the physical attributes and some

configurations of the user interface

display users [ all ]

display user-interface [ type number |

number ] [ summary ]

4-11

3Com Switch 8800 Configuration Guide Chapter 5 Management Interface Configuration

Chapter 5 Management Interface Configuration

5.1 Management Interface Overview

The Switch 8800 provides a 10/100Base-TX management interface on the Fabric. The
management interface can connect a background PC for softwa re loading and system
debugging, or a remote network management station for remote system manage ment.

5.2 Management Interface Configuration

The following sections describe management interface configuration t asks.

z Configuring interface IP address
z Enabling/disabling the interface
z Setting interface description
z Displaying current system information
z Test network connectivity (ping, tracert)

See the Port and System Management parts of this manual for details.

Caution:

Only the management interface configured with an IP address can run normally.

5-1

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Chapter 6 Ethernet Port Configuration

6.1 Ethernet Port Overview

The Switch 8800 provides conventional Ethernet ports, fast Ethernet port s, 1000 Mbp s
Ethernet ports and 10 Gbps Ethernet ports. The configurations of these Ethernet ports
are basically the same, which will be described in the following sections.

6.2 Ethernet Port Configuration

The following sections describe Ethernet port configuration tasks:

z Entering Ethernet Port View
z Enabling/Disabling an Ethernet Port
z Setting Ethernet Port Description
z Setting the Duplex Attribute of the Ethernet Port
z Setting Speed on the Ethernet Port
z Setting the Cable Type for the Ethernet Port
z Enabling/Disabling Flow Control for the Ethernet Port
z Permitting/Forbidding Jumbo Frame to Pass the Ethernet Port
z Setting the Ethernet Port Broadcast Suppression Ratio
z Setting the Ethernet Port Mode
z Setting the Link Type for the Ethernet Port
z Adding the Ethernet Port to Specified VLANs
z Setting the Default VLAN ID for the Ethernet Port
z Setting the VLAN VPN Feature
z Copying Port Configuration to Other Ports
z Setting Port Hold Time
z Setting the Ethernet Port in Loopback Mode

6.2.1 Entering Ethernet Port View

Before configuring the Ethernet port, enter Ethernet port view first.
Perform the following configuration in system view.

Table 6-1 Enter Ethernet port view

Operation Command

Enter Ethernet port view

interface { interface_type interface_num |
interface_name }

6-1

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

6.2.2 Enabling/Disabling an Ethernet Port

After configuring the related parameters and protocol of the port, you can use undo
shutdown command to enable the port. If you do not want a port to forward data any

more, use shutdown command to disable it.
Perform the following configuration in Ethernet port view.

Table 6-2 Enable/disable an Ethernet port

Operation Command

Disable an Ethernet port
Enable an Ethernet port

By default, the port is enabled.

6.2.3 Setting Ethernet Port Description

To distinguish the Ethernet ports, you can use the following command to make some
necessary descriptions.

Perform the following configuration in Ethernet port group view.

Table 6-3 Set Ethernet port description

Operation Command

Set an Ethernet port description
Delete the Ethernet port description

By default, an Ethernet port has no description.

shutdown
undo shutdown

description text
undo description

6.2.4 Setting the Duplex Attribute of the Ethernet Port

To configure a port to send and receive data packets at the same time, set it to
full-duplex. To configure a port to either send or receive data packets at a time, set it to
half-duplex. If the port has been set to auto-negotiation mode, the local and peer ports
will automatically negotiate about the duplex mode.

Perform the following configuration in Ethernet port view.

Table 6-4 Set the duplex attribute for the Ethernet port

Operation Command

Set duplex attribute for Ethernet port duplex { auto | full | half }
Restore the default duplex attribute of Ethernet port

6-2

undo duplex

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Note that, 10/100 Mbps electrical Ethernet port can operate in full-duplex, half-duplex
or auto-negotiation mode. The10/100/1000 Mbps electrical Ethernet port can operate
in full duplex, half duplex or auto-negotiation mode. When the port operates at 1000
Mbps or in auto mode, the duplex mode can be set to full (full duplex) or auto
(auto-negotiation). The optical 100/1000 Mbps and 10 Gbps Ethernet ports work in full
duplex mode without user intervention.

The port defaults the auto (auto-negotiation) mode.

6.2.5 Setting Speed on the Ethernet Port

You can use the following command to set the speed on the Ethernet port. If the speed
is set to auto-negotiation mode, the local and peer ports will automatically negotiate
about the port speed.

Perform the following configuration in Ethernet port view.

Table 6-5 Set speed on the Ethernet port

Operation Command

Set Ethernet port speed speed { 10 | 100 | 1000 | 10000 | auto }
Restore the default speed on Ethernet

port

Note that, the 10/100 Mbps electrical Ethernet port can operate at 10 Mbps, 100 Mbps
and in auto mode. You can set it accordingly. The 10/100/1000Mbps electrical Ethernet
port can operate at 10 Mbps, 100 Mbps, or 1000 Mbps as per different requirements.
However in half duplex mode, the port cannot operate at 1000 Mbps or in auto mode.
The 100 Mbps optical Ethernet port supports 100 Mbps; the 1000 Mbps optical
Ethernet port supports 1000 Mbps; the 10 Gbps opti cal Ethernet port support s 10 Gbps
without user intervention.

By default, the speed of the port is in auto mode.

undo speed

6.2.6 Setting the Cable Type for the Ethernet Port

The Ethernet port supports the straight-through and cross-over network cables. The
following command can be used for configuring the cable type.

Perform the following configuration in Ethernet port view.

Table 6-6 Set the type of the cable connected to the Ethernet port

Operation Command

Set the type of the cable connected to
the Ethernet port

6-3

mdi { across | auto | normal }

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Operation Command

Restore the default type of the cable
connected to the Ethernet port

Note that, the settings only take effect on 10/100 Mbps and 10/100/1000 Mbps
electrical ports.

By default, the cable type is auto (auto-recognized). That is, the system can
automatically recognize the type of cable connecting to the port.

undo mdi

6.2.7 Enabling/Disabling Flow Control for the Ethernet Port

After enabling flow control in both the local and the peer switch, if conge stion occurs in
the local switch, the switch will inform its peer to pause packet sending. Once the peer
switch receives this message, it will pause p acket sending, and vice versa. In this way,
packet loss is reduced effectively. The flow control function of the Ethernet port can be
enabled or disabled through the following command.

Perform the following configuration in Ethernet port view.

Table 6-7 Enable/disable flow control for the Ethernet port

Operation Command

Enable Ethernet port flow control
Disable Ethernet port flow control

By default, Ethernet port flow control is disabled.

flow-control
undo flow-control

6.2.8 Permitting/Forbidding Jumbo Frame to Pass the Ethernet Port

The Ethernet port may encounter the jumbo frame exceeding the standard frame
length, when switching large throughput data like transmitting files. This comman d can
forbid or permit the jumbo frame to pass the Ethernet port.

Perform the following configuration in Ethernet port view.

Table 6-8 Permit/forbid jumbo frame to pass the Ethernet port

Operation Command

Permit jumbo frame to pass the Ethernet port

Forbid jumbo frame to pass the Ethernet port

jumboframe enable
[ jumboframe-value ]

undo jumboframe enable

By default, the jumbo frame is permitted to pass the Ethernet port.

6-4

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Note that, the values can be consecutive, but the effective values are discrete. The
effective frame length for the FE port is 1552. The effe ctive frame length for the GE port
and 10 GE port is 1552, 9022, 9192 and 10240. You can execute the display interface
command to view the configured effective value for the port.

6.2.9 Setting the Ethernet Port Broadcast Suppression Ratio

You can use the following commands to restrict the broadcast traffic. Once the
broadcast traffic exceeds the value set by the user, the system will maintain an
appropriate broadcast packet ratio by discarding the overflow traffic, so as to suppress
broadcast storm, avoid suggestion and ensure the normal service. The parameter is
taken the maximum wire speed ratio of the broadcast traffic allowed on the port. The
smaller the ratio is, the smaller the broadcast traffic is allowed. If the ratio is 100%, it
means not to perform broadcast storm suppression on the port.

Perform the following configuration in Ethernet port view.

Table 6-9 Set the Ethernet port broadcast suppression ratio

Operation Command

Set Ethernet port broadcast suppression ratio
Restore the default Ethernet port broadcast

suppression ratio

By default, 50% broadcast traffic is allowed to pass,

6.2.10 Setting the Ethernet Port Mode

Most ports adopt the LAN mode for general data exchange. The port must wo rk in WAN
mode, however, if it needs special frame format for data transfer (such as in fiber
transmission). You can configure network mode available on the port using the
port-mode command.

Perform the following configuration in Ethernet port view.

Table 6-10 Set the Ethernet port mode

Operation Command

Set the Ethernet port mode port-mode { wan | lan }

broadcast-suppression pct

undo broadcast-suppression

Restore the default Ethernet port mode

By default, the Ethernet port works in LAN mode.
Note that only GE or 10GE port supports this command.

6-5

undo port-mode

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

6.2.11 Setting the Link Type for the Ethernet Port

Ethernet port can operate in three different link types, access, hybrid, and trunk types.
The access port carries one VLAN only, used for connecting to the user’s computer.
The trunk port can belong to more than one VLAN and receive/send the packets on
multiple VLANs, used for connection between the switches. The hybrid port can also
carry more than one VLAN and receive/send the packets on multiple VLANs, used for
connecting both the switches and user’s computers. The difference betwe en the hybrid
port and the trunk port is that the hybrid port allows the packet s from multiple VLANs to
be sent without tags, but the trunk port only allows the packet s from the default VLAN to
be sent without tags.

Perform the following configuration in Ethernet port view.

Table 6-11 Set the link type for the Ethernet port

Operation Command

Configure the port as access port
Configure the port as hybrid port
Configure the port as trunk port
Restore the default link type, that is, the

access port

Y ou can co nfigure three types of ports concurrently on the same swit ch, but you cannot
switch between trunk port and hybrid port. You must turn it first into access port and
then set it as other type. For example, you cannot configure a trunk port directly as
hybrid port, but first set it as access port and then as hybrid port.

By default, the port is access port.

port link-type access
port link-type hybrid
port link-type trunk

undo port link-type

6.2.12 Adding the Ethernet Port to Specified VLANs

The following commands are used for adding an Ethernet port to a specified VLAN. The
access port can only be added to one VLAN, while the hybrid and trunk ports can be
added to multiple VLANs.

Perform the following configuration in Ethernet port view.

Table 6-12 Add the Ethernet port to specified VLANs

Operation Command

Add the current access port to a
specified VLAN

Add the current hybrid port to specified
VLANs

6-6

port access vlan vlan_id

port hybrid vlan vlan_id_list { tagged |
untagged }

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Operation Command

Add the current trunk port to specified
VLANs

Remove the current access port from to
a specified VLAN

Remove the current hybrid port from to
specified VLANs

Remove the current trunk port from
specified VLANs

port trunk permit vlan { vlan_id_list |
all }

undo port access vlan

undo port hybrid vlan vlan_id_list

undo port trunk permit vlan

{ vlan_id_list | all }

Note that the access port shall be added to an existing VLAN other than VLAN 1. The
VLAN to which Hybrid port is added must have been existed.

After adding the Ethernet port to specified VLANs, the local port can forward packets of
these VLANs. The hybrid and trunk ports can be added to multiple VLANs, thereby
implementing the VLAN intercommunication between peers. For the hybrid port, you
can configure to tag some VLAN packets, based on which the packets can be
processed differently.

6.2.13 Setting the Default VLAN ID for the Ethernet Port

Since the access port can only be included in one VLAN only, its default VLAN is the
one to which it belongs. The hybrid port and the trunk port can be included in several
VLANs, it is necessary to configure the default VLAN ID. If the default VLAN ID has
been configured, the packets without VLAN Tag will be forwarded to the port that
belongs to the default VLAN. When sending the packets with VLAN Tag, if the VLAN ID
of the packet is identical to the default VLAN ID of the port, the system will remove
VLAN Tag before sending this packet.

Perform the following configuration in Ethernet port view.

Table 6-13 Set the default VLAN ID for the Ethernet port

Operation Command

Set the default VLAN ID for the hybrid port
Set the default VLAN ID for the trunk port
Restore the default VLAN ID of the hybrid

port to the default value
Restore the default VLAN ID of the trunk port

to the default value

port hybrid pvid vlan vlan_id
port trunk pvid vlan vlan_id

undo port hybrid pvid

undo port trunk pvid

Note that: to guarantee the proper packet transmission, the default VLAN ID of local
hybrid port or Trunk port should be id entical with that of the hybrid p ort or T runk p ort on
the peer switch.

6-7

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

By default, the VLAN of hybrid port and trunk port is VLAN 1 and that of the access port
is the VLAN to which it belongs

6.2.14 Setting the VLAN VPN Feature

VLAN Tag consists of 12 bits (defined by IEEE802.1Q), so Ethernet Switches can
support up to 4k VLANs. In networking, especially in MAN (metropolitan area network),
a large numbers of VLANs are required to segment users. In this case, 4k VLANs are
not enough.

VLAN VPN feature can provide duplex VLAN T ags to a p acket, i.e. mark the packet with
another VLAN Tag besides the original one, thus to provide 4k x 4k VLANs to meet
user’s demands. At the same time, VLAN VPN feature provides the following functions:
using the original VLAN Tag to differentiate users and services, and using the new
VLAN Tag to load service and VPN users. These make VLAN configuration simple and
practicable. Thus, Ethernet Switches can meet the requirement of MAN.

If VLAN VPN is enabled on a port, all the packets (no matter wheth er it carries a VLAN
Tag or not) will be given a new Tag that specifies the default VLAN of this port.
Therefore, the packets that have had a VLAN Tag get two Tags, and the packets that
have not had a VLAN Tag get one.

Perform the following configuration in Ethernet port view.

Table 6-14 Set the VLAN VPN feature

Operation Command

Enable the VLAN VPN feature
Disable the VLAN VPN feature

Note that if anyone of GVRP, STP , and 802.1x has been enabled on a port, VLAN VPN
cannot be enabled on it.

By default, the port VLAN VPN is disabled.

vlan-vpn enable
undo vlan-vpn

6.2.15 Copying Port Configuration to Other Ports

To keep the configuration of other ports consistent with a specified port, you can use
copy configuration command to copy the configuration of that specified port to other
ports. Such configurations may involve: STP setting, QoS setting, LACP setting, and
port setting. The detailed table is as follows:

Table 6-15 Configurations that can be copied

Attribute Detailed Setting

Enable/disable STP STP setting
Port priority

6-8

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

QoS setting

Path cost
Link attributes(point-to-point or not)
Port mCheck
Max transmission speed
Enable/disable root protection
Enable/disable loop protection
Edge or non-edge port
Reset ARP or not
Define/apply flow template
Traffic reshaping
Traffic redire ction
Packet filtering
Priority re-assignment
Traffi c st at isti cs
Traffic mirroring
Rate limiting
Permitted VLAN ID
Default VLAN ID
Add ports to VLAN

Port setting

Default 802.1p priority
Port speed, duplex mode
Port link type

LACP Enable/disable LACP on the port

 Note:

z Using copy configuration command will clear protocol VLAN attributes of the

destination port, but it can not copy protocol VLAN attributes of source port to the
destination port.

z Using the copy configuration command, you can only copy the configurations of

Ethernet ports, GigabitEthernet ports and aggregation groups.

Perform the following configuration in system VLAN

6-9

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

Table 6-16 Copy port configuration to other ports

Operation Command

Copy port
configuration to
other ports

Note that if the copy source is an aggregation group, take th e port with minimum Active
as the source; if the copy destination is an aggregation group, make the configurations
of all group member ports identical with that of the source. You cannot specify a
dynamic aggregation group as the copy destination.

copy configuration source { interface-type interface-number |
interface-name | aggregation-group agg-id } destination

{ interface_list [ aggregation-group agg-id ] |
aggregation-group agg-id }

6.2.16 Setting Port Hold Time

When you use the shutdown/undo shutdown command on ports too frequently, the
switch may fail. Therefore, you can configure port hold time to prohibit frequent change
of the port status.

Perform the following configuration in system view.

Table 6-17 Set the port hold time

Operation Command

Set the port hold time link-status hold hold-time
Restore the default value

By default, the port hold time is set to 3 seconds.

undo link-status hold

6.2.17 Setting the Ethernet Port in Loopback Mode

Perform the following configuration in Ethernet port view.

Table 6-18 Set the Ethernet port in loopback mode

Operation Command

Set the Ethernet port in loopback mode loopback { external | internal }
Remove loopback configuration on the port

By default, the Ethernet port is set in loopback mode. At present, the Switch 8800 does
not support external loopback mode.

undo loopback

6-10

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

6.3 Displaying and Debugging Ethernet Port

After the above configuration, execute display command in any view to display the
running of the Ethernet port configuration, and to verify the effect of the configuration.

Execute reset command in user view to clear the statistics information of the port.

Table 6-19 Display and debug Ethernet port

Operation Command

display interface { interface_type |

Display all the information of the port

Display hybrid port or trunk port display port { hybrid | trunk }

interface_type interface_num [ packets ] |
interface_name }

Display the information of VLAN VPN
Display the statistics information of

the port

Clear the statistics information of the
port

display port vlan-vpn
display counters [ rate ] { inbound |

outbound } interface [ interface-type ]
reset counters interface [ interface_type |

interface_type interface_num |
interface_name ]

 Note:

z The Switch 8800 does not support external loopback mode.
z When 802.1x is enabled on the port, its statistics information can not be cleared.
z By default, the display counters command displays the statistic information of all

the ports.

6.4 Ethernet Port Configuration Example

I. Network requirements

Switch A is connected to Switch B through Trunk port GigabitEthernet2/1/1. Configure
the Trunk port with default VLAN ID, so that: when receiving the p ackets without VLAN
Tag, the port can forward them to the member ports belonging to the default VLAN;
when it sending the packets with VLAN Tag and the packet VLAN ID is the default
VLAN ID, the Trunk port remove the packet VLAN Tag and forward the packet.

6-11

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration

II. Network diagram

Switch A

Switch B

Figure 6-1 Network diagram for Ethernet port configuration

III. Configuration procedure

The following configurations are used for Switch A. Please configure Switch B in the
similar way.

Enter the Ethernet port view of GigabitEthernet2/1/1.

[SW8800] interface gigabitethernet2/1/1

Set the GigabitEthernet2/1/1 as a trunk port and allows VLANs 2, 6 through 50, and
100 to pass.

[SW8800-GigabitEthernet2/1/1] port link-type trunk
[SW8800-GigabitEthernet2/1/1] port trunk permit vlan 2 6 to 50 100

Create the VLAN 100.

[SW8800] vlan 100

Configure the default VLAN ID of GigabitEthernet2/1/1 as 100.

[SW8800-GigabitEthernet2/1/1] port trunk pvid vlan 100

6.5 Ethernet Port Troubleshooting

Symptom 1: Default VLAN ID configuration fails.
Solution: Take the following steps:

z Execute the display interface or display port command to check if the port is a

trunk port or a hybrid port. If it is neither of them, configure it as a trunk or hybrid
port.

z Then configure the default VLAN ID.

Symptom 2: The port is in down status.
Solution: Please check

z If the cable connection is correct and if the optical fiver cable is inversely

connected.

z If the shutdown command is used on the port.
z If the right optical module is inserted.

6-12

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

Chapter 7 Link Aggregation Configuration

7.1 Overview

7.1.1 Introduction to Link Aggregation

Link aggregation means aggregating several ports together to implement the
outgoing/incoming payload balance among the member ports and enhance the
connection reliability. Link aggregation may be manual aggregation, dynamic LACP
aggregation or static LACP agg regation. For the member ports in an aggregatio n group,
their basic configurations must be the same. That is, if one is a trunk port, others must
also be; when it turns into access port, then others must change to access port.

Basic configuration includes STP setting, QoS setting, VLAN setting, and port setting.
The STP setting includes STP enabling/disabling, link attribute (point-to-point or not),
STP priority, path cost, max transmission speed, loop protection, root protection, edge
port or not. The QoS setting includes traffic limiting, priority marking, default 802.1p
priority , bandwidth assurance, congestio n avoidance, traffic redirection, traf fic statistics.
The VLAN setting includes permitted VLAN types, default VLAN ID. The port setting
includes port link type.

One Switch 8800 can support up to 728 aggregation groups (seven load sharing
aggregation groups at most), with each group containing a maximum of eight ports.

 Note:

The Switch 8800 also supports trans-board aggregation. The trans-board aggregation
is the same as the intra-board aggregation.

7.1.2 Introduction to LACP

Link aggregation control protocol (LACP) based on the IEEE802.3ad standard can be
used in dynamic link aggregation. An LACP-enabled port sends link aggregation
control protocol data units (LACPDUs) to tell the peer about its system prio rity, system
MAC address, port priority, port number and operation key. After receiving the
information from the sender, the receiver comp ares it with the locally saved information
about other ports, chooses member ports for the aggregation group and reaches
agreement about if a port can join or leave a dynamic aggregation group.

During port aggregation, LACP generates a configuration mix according to the port
configuration (rate, duplex, basic configuration, management key), which is called an

7-1

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

operation key. The management key of an LACP-e nabled dynamic aggregation port is
0 by default. The management key of an LACP-enabled static aggregation port is the
same as the aggregation group ID. In a dynamic aggregation group, the member ports
must have the same operation key . In manual and st atic aggregation group s, the active
ports have the same operation key.

7.1.3 Aggregation Types

Port aggregation can be divided into manual aggregation, dynamic LACP aggregation
and static LACP aggregation.

I. Manual aggregation and static LACP aggregation

Both manual aggregation and static LACP aggregation are configured manually, and
cannot be added or removed automatically by the system. A manual or static LACP
aggregation group must contain a member port at least. In the case of one port in an
aggregation group, the unique method for you to remove the port from the aggregation
group is to delete the aggregation group. By default, the system disables the LACP for
the manual aggregation port. You are prohibited to enable the LACP for the manual
aggregation port. By default, the system enables the LACP for the static aggregation
port. When a static aggregation group is removed, the member ports will form one or
more dynamic LACP aggregation groups with LACP enabled. You are prohibited to
disable the LACP for the static aggregation port.

In the manual and static aggregation groups, a port maybe in active or inactive state.
The port in active state can tranceive user service packet s, but the port in inactive st ate
cannot. The active port with the minimum port number serves as the master port, while
others as slave ports.

In a manual aggregation group, the system sets the ports to active or inactive state
based on these rules:

z Based on the descending order of priority levels from full duplex/high speed, to full

duplex/low-speed, to half duplex/high speed and till half duplex/low speed, the
system sets the port with the highest priority to active state, and others to inactive
state.

z The system sets to inactive state the ports which cannot aggregate with the

master port, due to hardware limit (such as trans-board aggregation is forbidde n).

z The system sets to inactive state the ports with basic configurations different from

the active port.

In a static aggregation group, the system sets the ports to active or inactive state based
on these rules:

z Based on the descending order of priority levels from full duplex/high speed, to full

duplex/low-speed, to half duplex/high speed and till half duplex/low speed, the
system sets the port with the highest priority to active state, and others to inactive
state.

7-2

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

z The system sets to inactive state the active port connecting to the different peer

devices, or the port connecting to the same peer device but locating in the different
aggregation group.

z The system sets to inactive state the ports which cannot be aggregated with the

port, due to hardware limit (for example, trans-board aggregation is forbidden).

z The system sets to inactive state the ports with basic configurations different from

the active port.

Since only a defined number of ports can be a dded in an aggregati on group, then if the
active ports in an aggregation group exceed the maximum threshold for that group, the
system shall set some ports with smaller port numbers (in ascending order) as active
ports and others as inactive ports. Both active and inactive ports can transceive LACP
protocol, but the inactive ports cannot forward user service packets.

II. Dynamic LACP aggregation

The system can create/delete automatically dynamic LACP aggregations, and you
cannot add/delete member ports into/from dynamic LACP aggregation. The system
can also aggregate one port, which is called single port aggregation. The dynamic
LACP aggregation LACP is in enabled state. The system can only aggregate the ports
with the same speed, duplex attribute, device connection, basic configuration.

Since only a defined number of ports can be a dded in an aggregati on group, then if the
current member ports in an aggregation group exceed the maximum threshold for that
group, the system shall set some ports with smaller device ID (system priority + system
MAC address) and smaller port ID (port priority + port number) as active ports, and
others as inactive ports. If the maximum threshold is not exceeded, all member ports
are active ports. Both active and inactive ports can transceive LACP protocol, but the
inactive ports cannot forward user service p a cket s. In an aggre gation group, the a ctive
port with the minimum port number serves as the master port, while others as slave
ports. When comparing device ID, the system compare system priority first, and then
system MAC address in the case of the sam e system priority. The smaller device ID is
regarded as higher priority. When comparing port ID, the system compares port priority
first, and then port number in the case of the same port priority. The smaller port ID is
regarded as higher priority. If the device ID changes to higher priority, the active and
inactive state of the member ports in an aggregation group depen ds on the device port
ID. You can also set system and port priority to define active and inactive ports.

7.1.4 Load Sharing

I. Types of Load sharing

In terms of load balancing, link aggregation may be load balancing aggregation and
non-load balancing aggregation The Switch 8800 allocates IP packet load sharing
according to destination and source IP addresses. The switches allocate no n-IP packet
load sharing according to source and destination MAC addresses. You can check

7-3

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

protocol types in determining if to use IP or MAC addresses. The packet with 0800
ETYPE Ethernet field is IP packet. In general, the system only provides limited
resources. The system will always allocate hardware aggregatio n resources to the load
balancing aggregation groups with higher priority levels. When the load sharing
aggregation resources are used up for existing aggregation groups, newly-created
aggregation groups will be non-load sharing ones. The priority levels (in descending
order) for allocating load sharing aggregation resources are as follows:

z Aggregation groups of special ports with hardware aggregation resources

included

z Aggregation groups including special ports which require hardware aggregation

resources

z Aggregation groups that probably reach the maximum rate after the resources are

allocated to them

z Aggregation groups with the minimum master port numbers if they reach the equal

rate with other groups after the resources are allocated to them

When aggregation groups of higher priority levels appear, the aggregation groups of
lower priority levels release their hardware resources. For single-port aggregation
groups, if they can transceive packet s normally without occupyin g hardware resources,
they shall not occupy the resources.

II. Port state

In a aggregation group, its ports may be in active or inactive state and only the active
ports can transceive user service packets, but not inactive ports. The active port with
the minimum port number serves as the master port, while others as slave ports.

In a aggregation group, the system sets the ports to active or inactive state based on
these rules:

z Based on the descending order of priority levels from full duplex/high speed, to full

duplex/low-speed, to half duplex/high speed and till half duplex/low speed, the
system sets the port with the highest priority to active state, and others to inactive
state.

z The system sets to inactive state the ports which cannot aggregate with the

master port, due to hardware limit.

z The system sets to inactive state the ports with basic configurations different from

the master port.

Since only a defined number of ports can be supported in an aggregation group, then if
the active ports in an aggregation group exceed the port quantity threshold for that
group, the system shall set some ports with smaller port numbers (in ascending order)
as active ports and others as inactive ports. The active ports can transceive user
service packets, but not inactive port s.

A load sharing aggregation group may contain several active ports, but a non-load
sharing aggregation group can only have one active port, while others as inactive port s.

7-4

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

7.2 Link Aggregation Configuration

The following sections describe link aggregation tasks:

z Enabling/Disabling LACP at Port
z Creating/Deleting an Aggregation Group
z Adding/Deleting an Ethernet Port into/from an Aggregation Group
z Setting/Deleting Aggregation Group Description
z Configuring System Priority
z Configuring Port Priority

 Note:

z When configuring an aggregation group, the status of GVRP feature configured on

the master port is reserved, but that on the slave port is disabled.

z When adding a port to an existing aggregation group, the GVRP feature on the port

is disabled.

z When the master port leaves an aggregation group, the status of GVRP feature on

both the group and port is reserved; when a slave port leaves an aggregation group,
the GVRP feature on the port is disabled.

z When configuring GVRP feature on any port in an aggregation group, the

configuration is mapped to the master port of the group.

z When querying the GVRP feature configured on any port in an aggregation group,

the returned result is about the master port of the group.

For details, refer to the “VLAN” part of this manual

7.2.1 Enabling/Disabling LACP at Port

You should first enable LACP at the ports before performing dynamic aggregation, so
that both parties can agree on adding/deleting the ports into/from a dynamic LACP
aggregation group.

Perform the following configuration in Ethernet port view.

Table 7-1 Enable/disable LACP at port

Operation Command

Enable LACP at the port
Disable LACP at the port

By default, LACP is not enabled at the port.
Note that:

lacp enable
undo lacp enable

7-5

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

z You cannot enable LACP at the mirroring port, the port with static MAC address

configured, and the port with static ARP configured, port with 802.1x enabled.

z You are inhibited to enable LACP at the port in a manual aggregation group.
z You can add a port with LACP enabled into a manual aggregation group, but then

the LACP will be disabled on it automatically. Or you can add a port with LACP
disabled into a static LACP aggregation group, and then the LACP will be enabled
automatically.

7.2.2 Creating/Deleting an Aggregation Group

You can use the following command to create/delete a aggregation group. When you
delete a aggregation group, all its member port s are disaggregated.

Perform the following configuration in system view.

Table 7-2 Create/delete an aggregation group

Operation Command

Create an aggregation group

link-aggregation group agg-id mode
{ manual | static }

Delete an aggregation group undo link-aggregation group agg-id

During creating an aggregation group, if it already exists in the system but contains no
member port, it changes to the new type; if it already exists in the system and contains
member ports, then you can only change a dynamic or static LACP aggregation group
to a manual one, or a dynamic LACP aggregation group to a static one. In the former
case, LACP shall be disabled at the me mber ports automatically, while in the latter case,
LACP shall remain enabled.

 Note:

There are three types of link aggregation: manual aggregation, static aggregation and
dynamic aggregation.

7.2.3 Adding/Deleting an Ethernet Port into/from an Aggregation Group

You can add/delete ports into/from an aggregation group.
Perform the following configuration in corresponding view.

7-6

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

Table 7-3 Add/delete an Ethernet port into/from an aggregation group

Operation Command

Add an Ethernet port into the
aggregation group (Ethernet port view)

Delete an Ethernet port from the
aggregation port (Ethernet port view)

Aggregate Ethernet ports (system view)

port link-aggregation group agg-id

undo port link-aggregation group

link-aggregation interface_name1 to

interface_name2 [ both ]

Note that:

z You cannot add the mirrored port, port with static MAC address configured, port

with static ARP configured, port with 802.1x enabled, and VPN port into an
aggregation group.

z You must delete the aggregation group, instead of the port, if the aggregation

group contains only one port.

z When master port enables VLAN VPN, aggregation is permitted in the system.

Because the link type of slave port will always keep same as that of master port.
When master port and slave port disable VLAN VPN, aggregation is permitted in
the system, it is average aggregation .After the port enabling VLAN VPN,
aggregation is not permitted in the system, at the same time, the system will tell
users that the slave port in the aggregation group conflict with the master port on
VLAN VPN.

7.2.4 Setting/Deleting Aggregation Group Description

Perform the following configuration in system view.

Table 7-4 Set/delete aggregation group description

Operation Command

Set an aggregation group description

Delete the aggregation group
description

By default, an aggregation group has no description.

link-aggregation group agg-id
description alname

undo link-aggregation group agg-id
description

7-7

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

 Note:

If you save the current configuration using the save command, the static and dynamic
LACP aggregation groups and their description strings remains on the system after
rebooting, but not the dynamic LACP aggregation groups, or their description strings.

7.2.5 Configuring System Priority

The LACP refers to system IDs to determine if the member ports are active or inactive
for a dynamic LACP aggregation group. The system ID consists of two-byte system
priority and six-byte system MAC (system ID = system priority + system MAC). In
comparing system IDs, the system first compares system priority values; if they are
equal, then it compares system MAC addresses. The smaller system ID is considered
prior. Changing system priority may affect the priority levels of member ports, and
further their active or inactive state.

Perform the following configuration in system view.

Table 7-5 Configure system priority

Operation Command

Configure system priority lacp system-priority system-priority-value
Restore the default system priority undo lacp system-priority

By default, system priority is 32,768.

7.2.6 Configuring Port Priority

The LACP compares syste m IDs first and then port IDs (if sy stem I Ds are the same) to
determine if the member ports are active or inactive for a dynamic LACP aggregation
group. If the ports in an aggregation group exceed the port quantity threshold for that
group, the system sets some ports with smaller port IDs as active ports and others as
inactive ports. The port ID consists of two-byte port priority and two-byte port number,
that is, port ID = port priority + port number. The system first compares port priority
values and then port numbers and the small port ID is considered prior.

Perform the following configuration in Ethernet port view.

Table 7-6 Configure port priority

Operation Command

Configure port priority lacp port-priority port-priority-value
Restore the default port priority undo lacp port-priority

By default, port priority is 32,768.

7-8

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

7.3 Displaying and Debugging Link Aggregation

After the above configuration, execute the display command in any view to display the
running of the link aggregation configuration, and to verify the effect of the
configuration.

In user view, execute the reset command to clear statistics on the LACP-enabled port,
and the debugging command to enable LACP debugging.

Table 7-7 Display and debug link aggregation

Operation Command

Display summary information of all
aggregation groups

Display detailed information of a specific
aggregation group

Display the local device ID

Display detailed link aggregation
information at the port

Clear LACP statistics on the port

Disable/enable LACP state debuggin g

Disable/enable LACP packet debugging

display link-aggregation summary

display link-aggregation verbose
agg-id

display lacp system-id
display link-aggregation interface

{ interface-type interface-number |
interface-name } [ to { interface-type
interface-num | interface-name } ]

reset lacp statistics [ interface
{ interface-type interface-number |

interface-name } [ to { interface-type
interface-num | interface-name } ] ]

[ undo ] debugging lacp state
[ interface { interface-type
interface-number | interface-name } [ to
{ interface-type interface-num |

interface-name } ] ] { { actor-churn |
mux | partner-churn | ptx | rx }* | all }

[ undo ] debugging lacp packet
[ interface { interface-type
interface-number | interface-name } [ to
{ interface-type interface-num |
interface-name } ] ]

Disable/enable link aggregation error
debugging

Disable/enable link aggregation event
debugging

7-9

[ undo ] debugging link-aggregation
error

[ undo ] debugging link-aggregation

event

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

7.4 Link Aggregation Configuration Example

I. Network requirements

Switch A con nects switch B with three aggregation ports, num bered as Ethernet2/1/1 to
Ethernet2/1/3, so that incoming/outgoing load can be balanced among the member
ports.

II. Network diagram

Switch A

Link aggregation

Switch B

Figure 7-1 Network diagram for link aggregation configuration

III. Configuration procedure

The following only lists the configuration for switch A, and that on switch B is similar.

1) In manual aggregation mode

Create aggregation group 1.

[SW8800] link-aggregation group 1 mode manual

Add Ethernet ports Ethernet2/1/1 to Ethernet2/1/3 into aggregation group 1.

[SW8800] interface ethernet2/1/1
[SW8800-Ethernet2/1/1] port link-aggregation group 1
[SW8800-Ethernet2/1/1] interface ethernet2/1/2
[SW8800-Ethernet2/1/2] port link-aggregation group 1
[SW8800-Ethernet2/1/2] interface ethernet2/1/3
[SW8800-Ethernet2/1/3] port link-aggregation group 1

2) In static LACP aggregation mode

Create aggregation group 1.

[SW8800] link-aggregation group 1 mode static

Add Ethernet ports Ethernet2/1/1 to Ethernet2/1/3 into aggregation group 1.

[SW8800] interface ethernet2/1/1
[SW8800-Ethernet2/1/1] port link-aggregation group 1
[SW8800-Ethernet2/1/1] interface ethernet2/1/2
[SW8800-Ethernet2/1/2] port link-aggregation group 1
[SW8800-Ethernet2/1/2] interface ethernet2/1/3
[SW8800-Ethernet2/1/3] port link-aggregation group 1

3) In dynamic LACP aggregation mode

7-10

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration

Enable LACP on Ethernet ports Ethernet2/1/1 to Ethernet2/1/3.

[SW8800] interface ethernet2/1/1
[SW8800-Ethernet2/1/1] lacp enable
[SW8800-Ethernet1/1/1] interface ethernet2/1/2
[SW8800-Ethernet2/1/2] lacp enable
[SW8800-Ethernet2/1/2] interface ethernet2/1/3
[SW8800-Ethernet2/1/3] lacp enable

You must set basic configuration, rate and duplex attribute consistent at both ends to
aggregate successfully the LACP-enabled ports into a dynami c aggregation g roup and
achieve load sharing.

7-11

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

Chapter 8 VLAN Configuration

8.1 VLAN Overview

Virtual local area network (VLAN) group s the devices in a LAN logi cally, not physically,
into segments to form virtual workgroups. IEEE issued the IEEE 802.1Q in 1999 to
standardize the VLAN implementations.

The VLAN technology allows network administrators to logically divide a physical LAN
into different broadcast domains or the so-called virtual LANs. Every VLAN contains a
group of workstations with the same demand s. The workst ations, p hysically sep arated,
are not necessarily on the same physical LAN segment.

You can establish VLANs of the following types on switches:

z Port-based
z MAC address-based
z IP multicast-based (A multicast group can be a VLAN.)
z Network layer-based (A VLAN can be established by the network layer add resses

or protocols of the hosts.)

With the VLAN technology, the broadcast and unicast traffic within a VLAN will not be
forwarded to other VLANs. This is helpful to control network traffic, save device
investment, simplify network management and enhance security.

8.2 Configuring VLAN

The following sections describe VLAN configuration tasks:

z Creating/Deleting a VLAN
z Specifying a Description Character String for a VLAN or VLAN interface
z Creating/Removing a VLAN Interface
z Shutting down/Bringing up a VLAN Interface

8.2.1 Creating/Deleting a VLAN

You can use the following commands to create/delete a VLAN. If the VLAN to be
created exists, the system enters the VLAN view directly. Otherwise, the system
creates the VLAN first, and then enters the VLAN view.

Perform the following configuration in system view.

8-1

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

Table 8-1 Create/Delete a VLAN

Operation Command

Create a VLAN and enter the VLAN view vlan vlan_id
Delete a specified VLAN undo vlan { vlan_id [ to vlan_id ] | all }

Note that the default VLAN, namely VLAN 1, cannot be deleted.

8.2.2 Specifying a Description Character String for a VLAN or VLAN interface

You can use the following commands to specify a description character string for a
VLAN or VLAN interface.

Perform the following configuration in VLAN view or VLAN interface view.

Table 8-2 Specify a description character string for a VLAN or VLAN interface

Operation Command

Specify a description character string for a
VLAN or VLAN interface

Restore the default description of the
current VLAN or VLAN interface

By default, the description character string of a VLAN is the VLAN ID of the VLAN, such
as VLAN 0001. The description character string of a VLAN interface is the VLAN
interface name, such as Vlan-interface1 Interface.

8.2.3 Creating/Removing a VLAN Interface

Y ou can use the follo wing commands to create/remove a VLAN interface. To implement
the network layer function on a VLAN interface, IP address and mask should be set to
the VLAN interface. For corresponding configuration, refer to “Network protocol” part in
this manual.

Perform the following configuration in system view.

Table 8-3 Create/remove a VLAN interface

Operation Command

description string

undo description

Create a new VLAN interface and enter
the VLAN interface view

Remove a specified VLAN interface undo interface vlan-interface vlan_id

Create a VLAN before creating a VLAN interface corresponding to the VLAN.

8-2

interface vlan-interface vlan_id

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

8.2.4 Shutting down/Bringing up a VLAN Interface

You can use the following commands to shut down/bring up a VLAN interface.
Perform the following configuration in VLAN interface view.

Table 8-4 Shut down/bring up a VLAN interface

Operation Command

Shut down a VLAN interface
Bring up a VLAN interface

Shutting down or bringing up a VLAN interface has no effect on the UP/DOWN st atus of
the Ethernet ports in this VLAN.

By default, when all the Ethernet ports in a VLAN are in the DOWN state, this VLAN
interface is also DOWN. When there are one or more Ethernet ports in the UP state,
this VLAN interface is also UP.

8.3 Configuring Port-Based VLAN

8.3.1 Adding Ethernet Ports to a VLAN

You can use the following commands to add the Ethernet ports to a VLAN.
Perform the following configuration in VLAN view.

Table 8-5 Add Ethernet ports to a VLAN

Operation Command

shutdown
undo shutdown

Add Ethernet ports to a VLAN port interface_list
Remove Ethernet ports from a VLAN undo port interface_list

By default, the system adds all the ports to a default VLAN whose ID is 1.
Note that you can add/remove the trunk and Hybrid ports to/from a VLAN by the

port/undo port commands in Ethernet port view, but not in VLAN view.

8-3

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

8.4 Configuring Protocol-Based VLAN

The following sections describe the protocol-based VLAN configuration tasks:

z Creating/Deleting a VLAN Protocol Type
z Associating/Dissociating a Port with/from a Protocol-Based VLAN

8.4.1 Creating/Deleting a VLAN Protocol Type

You can use the following commands to create/delete a VLAN protocol type.
Perform the following configuration in VLAN view.

Table 8-6 Create/Delete a VLAN protocol type

Operation Command

protocol-vlan protocol { ip ip_address

Create a VLAN protocol type

[ net_mask ] | mode { ethernetii etype

etype_id | llc dsap dsap_id ssap
ssap_id | snap etype etype_id } }

Delete an existing VLAN protocol type

undo protocol-vlan protocol
{ protocol_index [ to protocol_end ] | all }

8.4.2 Associating/Dissociating a Port with/from a Protocol-Based VLAN

Perform the following configuration in Ethernet port view.

Table 8-7 Associate/Dissociate a port with/from a protocol-based VLAN

Operation Command

Associate a port with a protocol-based
VLAN

Remove a port from a protocol-based
VLAN

port hybrid protocol-vlan vlan vlan-id
{ vlan-protocol_list | all }

undo port hybrid protocol-vlan vlan
vlan-id { vlan-protocol_list | all }

8-4

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

 Note:

z The port to be associated with a protocol-based VLAN must be of Hybrid type and in

this VLAN.

z The same protocol can be configured in the different VLANs, but cannot be

configured repeatedly in the same VLAN.

z A port cannot be associated with different VLANs with the same protocols

configured.

z You cannot delete a protocol-based VLAN that has ports associated with.
z You cannot delete a protocol-based VLAN on a port while the port is associated with

the VLAN.

8.5 Displaying VLAN

After the above configuration, execute the display command in any view to display the
running of the VLAN configuration, and to verify the configuration.

Table 8-8 Display VLAN

Operation Command

Display the related information about the
VLAN interface

Display the related information about the
VLAN

Display the protocol information and
protocol index configured on the
specified VLAN

Display the protocol information and
protocol index configured on the
specified port

display interface vlan-interface
[ vlan_id ]

display vlan[ vlan_id to vlan_id | all |
static | dynamic ]

display vlan-protocol vlan { vlan_list |
all }

display vlan-protocol interface

{ interface_list | all }

8-5

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration

8.6 VLAN Configuration Example

I. Network requirements

z Create VLAN2 and VLAN3.
z Add Ethernet3/1/1 and Ethernet4/1/1 to VLAN2.
z Add Ethernet3/1/2 and Ethernet4/1/2 to VLAN3.

II. Network diagram

Switch

E3/1/2E4/1/1

E4/1/2E3/1/1

VLAN 2

VLAN 3

Figure 8-1 Network diagram for VLAN configuration

III. Configuration procedure

Create VLAN 2 and enter its view .

[SW8800] vlan 2

Add Ethernet3/1/1 and Ethernet4/1/1 to VLAN2.

[SW8800-vlan2] port ethernet3/1/1 ethernet4/1/1

Create VLAN 3 and enters its view.

[SW8800-vlan2] vlan 3

Add Ethernet3/1/2 and Ethernet4/1/2 to VLAN3.

[SW8800-vlan3] port ethernet3/1/2 ethernet4/1/2

8-6

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

Chapter 9 GARP/GVRP Configuration

9.1 Configuring GARP

9.1.1 GARP Overview

Generic attribute registration protocol (GARP) offers a mechanism that is used by the
members in the same switching network to distribute, propagate and register such
information as VLAN and multicast addresses.

GARP dose not exist in a switch as an entity. A GARP participant is called GARP
application. The main GARP applications at present are GVRP (GARP VLAN
registration protocol) and GMRP. For details, refer to section
and section ”Configuring Multicast”. When a GARP particip ant is on a port of the switch,
this port corresponds to a GARP participant.

9.2 “Configuring GVRP”

The GARP mechanism enables the configuration information o n one GARP mem ber to
be propagated rapidly across the whole switching network. A GARP member can be a
terminal workstation or a bridge. The GARP member can notify other members to
register or remove its attribute information by sending declarations or withdrawing
declarations. It can also register or remove the attribute information of other GARP
members according to the received declarations/withdrawn d eclarations.

GARP members exchange information by sending messages. There are mainly three
types of GARP messages, Join, Leave, and LeaveAll. When a GARP p articipa nt wants
to register its attribute information with other switches, it sends the Join message
outward. When it wants to remove some attribute information from other switches, it
sends the Leave message. The LeaveAll timer is started simultaneously when each
GARP participant is enabled and the LeaveAll message is sent upon expiration. The
Join and Leave messages cooperate to ensure the logout and the re-registration of a
message. The message exchange enables all the to-be-registered attribute information
to be propagated to all the switches across the same switching network.

The destination MAC addresses of the packets of the GARP participants are specific
multicast MAC addresses. A GARP-supporting switch classifies the packets received
from the GARP participants and processes them with corresponding GARP
applications (GVRP or GMRP).

GARP and GMRP are described in details in the IEEE 802.1P standard (which has
been added to the IEEE802.1D standard). Quidway series switches fully support the
GARP compliant with the IEEE standards.

The following section describes the GARP configuration task:

z Setting the GARP Timer

9-1

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

 Note:

z The value of GARP timer will be used in all the GARP applications, including GVRP

and GMRP, running in one switched network.

z In one switched network, the GARP timers on all the switching devices should be

set to the same value. Otherwise, GARP application cannot work normally.

9.1.2 Setting the GARP Timer

GARP timers include Hold timer, Join timer, Leave timer and LeaveAll timer.
The GARP participant sends the Join Message regularly when Join timer times out so

that other GARP participants can register its attribute values.
When the GARP particip ant want s to remove some attribute values, it send s the Leave

Message. The GARP participant that receives the message starts the Leave timer. If
the Join Message is not received again before the Leave timer expires, the GARP
attribute values are removed

LeaveAll timer is started as soon as the GARP participant is enabled. The LeaveAll
message is sent upon timeout so that other GARP p articipants remove all the attribute
values of this participant. Then, LeaveAll timer is restarted and a new cycle begins.

When the switch receives some GARP registration information, it does not send the
Join Message immediately. Instead, it enables a Hold timer and sends the Join
Message upon timeout of the Hold timer. In this way, all the VLAN registration
information received within the time specified by the Hold timer can be sent in one
frame so as to save the bandwidth resources.

Configure Hold timer, Join timer and Leave timer in Ethernet port view. Configure
LeaveAll timer in system view.

Table 9-1 Set the GARP timer

Operation Command

Set GARP Hold timer, Join timer and
Leave timer

garp timer { hold | join | leave }

timer_value
Set GARP LeaveAll timer garp timer leaveall timer_value
Restore the default settings of GARP

Hold timer, Join timer and Leave timer

undo garp timer { hold | join | leave }

Restore the default settings of GARP
LeaveAll timer

undo garp timer leaveall

By default, Hold timer is 10 centiseconds, Join timer is 20 centiseconds, Leave timer is
60 centiseconds, and LeaveAll timer is 1000 centiseconds.

9-2

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

Note that, the value of Join timer should be no less than the doubl ed value of Hold timer ,
and the value of Leave timer should be greater than the doubled value of Join timer and
smaller than the Leaveall timer value. Besides, you must set the value of the Join timer
in terms of 5 centiseconds. Otherwise, the system will prompt message of error.

The value range of a timer varies with the values of other timers. So if the value of a
timer you want to set is not within the available value range, you can change the value
range by changing the values of other related timers.

z The lower limit of Hold timer is 10 centiseconds. You can change its upper limit by

changing the value of Join timer.

z You can change the lower limit and upper limit of Join timer by changing the value

of Hold timer and Leave timer respectively.

z You can change the lower limit and upper limit of Leave timer by changing the

value of Join timer and LeaveAll timer respectively.

z The upper limit of LeaveAll timer is 32765 centiseconds. You can change its lower

limit by changing the value of Leave timer.

9.1.3 Displaying and Debugging GARP

After the above configuration, execute the display command in any view to display the
running of GARP configuration, and to verify the configuration.

Execute the reset command in user view to reset the configuration of GARP. Execute
the debugging command in user view to debug the configuration of GARP.

Table 9-2 Display and debug GARP

Operation Command

Display GARP statistics information

Display GARP timer

Clear GARP statistics information

Enable GARP event debugging
Disable GARP event debugging

9.2 Configuring GVRP

display garp statistics [ interface

interface-list ]

display garp timer [ interface

interface-list ]

reset garp statistics [ interface

interface-list ]

debugging garp event

undo debugging garp event

9.2.1 GVRP Overview

GARP VLAN Registration Protocol (GVRP) is a GARP application. Based on GARP
operating mechanism, GVRP provides maintenance of the dynamic VLAN registration
information in the switch and propagates the information to other switches. All the

9-3

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

GVRP-supporting switches can receive VLAN registration information from other
switches and dynamically update the local VLAN registration information including the
active members and through which port those members can be reached. All the
GVRP-supporting switches can propagate their local VLAN registration information to
other switches so that the VLAN information can be consistent on all GVRP-sup porting
devices in one switching network. The VLAN registration information propagated by
GVRP includes both the local static registration information configured manually and
the dynamic registration information from other switches.

GVRP is described in details in the IEEE 802.1Q standard. Quidway series switches
fully support the GARP compliant with the IEEE standards.

Main GVRP configuration includes:

z Enabling/Disabling Global GVRP
z Enabling/Disabling Port GVRP
z Setting the GVRP Registration Type

In the above-mentioned configuration tasks, GVRP should be ena bled globally before it
is enabled on the port. Configuration of GVRP registration type can only take effect
after the port GVRP is enabled. Besides, GVRP must be configured on the Trunk port.

 Note:

z When you configure an aggregation group, the GVRP feature configured on the

master port is unchanged, but that on the slave port is disabled.

z When you add a port to an existing aggregation group, the GVRP feature on the port

is disabled.

z When the master port leaves an aggregation group, the GVRP feature on both the

group and port is unchanged; when a slave port leaves an aggregation group, the
GVRP feature on the port is disabled.

z When you configure GVRP feature on any port in an aggregation group, the

configuration is mapped to the master port of the group.

z When you query the GVRP feature configured on any port in an aggregation group,

the returned result is about the master port of the group.

9.2.2 Enabling/Disabling Global GVRP

You can use the following command to enable/disable global GVRP.
Perform the following configurations in system view.

9-4

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

Table 9-3 Enable/disable global GVRP

Operation Command

Enable global GVRP
Disable global GVRP

By default, global GVRP is disabled.

9.2.3 Enabling/Disabling Port GVRP

You can use the following command to enable/disable the GVRP on a port.
Perform the following configurations in Ethernet port view.

Table 9-4 Enable/disable port GVRP

Operation Command

Enable port GVRP
Disable port GVRP

GVRP should be enabled globally before it is enabled on the port. The GVRP can only
be enabled/disabled on Trunk ports.

gvrp

undo gvrp

gvrp

undo gvrp

By default, port GVRP is disabled.

9.2.4 Setting the GVRP Registration Type

The GVRP registration types include normal, fixed and forbidden (refer to IEEE

802.1Q).

z When an Ethernet port is set to be in normal registration mode, the dynamic and

manual creation, registration and deregistration of VLAN are allowed on this port.

z When a Trunk port is set as fixed, the port is not allowed to dynamically

register/deregister a VLAN, it only propagates information about static VLANs that
are manually configured instead of that of dynamic VLANs. That is, a Trunk port
that is of fixed type only permits manually configured VLANs even you configure it
to permit all VLANs.

z When an Ethernet port is set to be in forbidden registration mode, all the VLANs

except VLAN1 will be deregistered and no other VLANs can be created and
registered on this port.

Perform the following configuration in Ethernet port view.

9-5

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

Table 9-5 Set the GVRP registration type

Operation Command

Set GVRP registration type

Restore the default GVRP registration
type

By default, GVRP registration type is normal.

9.2.5 Displaying and Debugging GVRP

After the above configuration, execute the display command in any view to display the
running of GVRP configuration, and to verify the configuration.

Execute the debugging command in user view to debug the configuration of GVRP.

Table 9-6 Display and debug GVRP

Operation Command

Display GVRP statistics information

Display GVRP global status information

gvrp registration { normal | fixed |

forbidden }

undo gvrp registration

display gvrp statistics [ interface

interface-list ]

display gvrp status
Enable GVRP packet or event

debugging
Disable GVRP packet or event

debugging

9.2.6 GVRP Configuration Example

I. Network requirements

T o dynamicall y register and update VLAN information among switches, GVRP needs to
be enabled on the switches.

II. Network diagram

E3/1/1

E3/1/1

Switch A Switch B

Switch A Switch B

Switch A Switch B

Switch A Switch B

Figure 9-1 GVRP configuration example

E4/1/1

E4/1/1

debugging gvrp { packet | event}

undo debugging gvrp { packet |

event }

9-6

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration

III. Configuration procedure

Configure Switch A:
Enable GVRP globally.

[SW8800] gvrp

Set Ethernet3/1/1 as a Trunk port and allows all the VLANs to pass through.

[SW8800] interface ethernet3/1/1
[SW8800-Ethernet3/1/1] port link-type trunk
[SW8800-Ethernet3/1/1] port trunk permit vlan all

Enable GVRP on the Trunk port.

[SW8800-Ethernet3/1/1] gvrp

Configure Switch B:
Enable GVRP globally.

[SW8800] gvrp

Set Ethernet4/1/1 as a Trunk port and allows all the VLANs to pass through.

[SW8800] interface ethernet4/1/1
[SW8800-Ethernet4/1/1] port link-type trunk
[SW8800-Ethernet4/1/1] port trunk permit vlan all

Enable GVRP on the Trunk port.

[SW8800-Ethernet4/1/1] gvrp

9-7

3Com Switch 8800 Configuration Guide Chapter 10 Super VLAN Configuration

Chapter 10 Super VLAN Configuration

10.1 Super VLAN Overview

Super VLAN is also called VLAN aggregation: A super VLAN contains multiple sub
VLANs. A super VLAN can be configured with an IP address of the virtual port, while a

sub VLAN cannot be configured with the IP address of the virtual port. Each sub VLAN
is a broadcast domain. Different sub VLANs are isolated at Layer 2. When users in a
sub VLAN need to communicate with each other, they use the IP address of the virtual
interface of the super VLAN as the IP address of the ga teway . The IP address is sh ared
by multiple VLANs. Therefore IP addresses are saved. If different sub VLANs want to
communicate with each other at Layer 3, or a sub VLAN communicates with other
networks, you must enable ARP proxy (by default it is disabled). Th e address resolution
protocol (ARP) proxy can forward and process ARP request and response packets so
that the isolated sub VLANs can communicate with each other at Layer 3.

10.2 Configuring a Super VLAN

Super VLAN configuration includes:

z Configuring a Super VLAN

10.2.1 Configuring a Super VLAN

 Note:

z You can configure multiple super VLANs for a switch. The configured VLAN port

and IP address configurations are the same as common VLAN configurations.

z A sub VLAN configuration is the same as a common VLAN configuration. The

following table describes the specific commands to configure a sub VLAN. For
detailed information, refer to

z By default, ARP proxy is enabled for super VLANs and disabled on the sub VLANs.

You can configure a super VLAN as follows:

Chapter 8 “VLAN Configuration”.

Table 10-1 Configure a super VLAN

Number Item Command Description

1

Enter system
view

<SW8800> system-view ––

10-1

3Com Switch 8800 Configuration Guide Chapter 10 Super VLAN Configuration

Number Item Command Description

2 Enter VLAN view [SW8800] vlan vlan_id Required

Required. The
VLAN_ID is the
configured VLAN ID in
the range 1 to 4,094.

3

Set the VLAN
type to super
VLAN

[SW8800-vlan4093]
supervlan

Create a sub

4

VLAN and enter

[SW8800] vlan vlan_id Required

sub VLAN view

5

Add Ethernet
ports to sub
VLANs

[SW8800] port
interface_list

Optional

Configure the

6

mapping relation
between super
VLANs and sub

[SW8800-vlan4093]
subvlan sub-vlan-list

Required. The view is
the VLAN view of a
super VLAN.

VLANs

Optional. You can
execute the display
super vlan command
in any view.

7

Display
configuration
information

<SW8800> display super
vlan [ supervlan_id ]

To cancel the configurations, use the corresponding undo commands.

Caution:

z Super VLANs cannot contain ports.
z After you set the VLAN type to super VLAN, the ARP proxy is automatically enabled

on the VLAN port, and you do not need to configure the proxy.

z When a super VLAN exists, the ARP proxy should be enabled on the corresponding

VLAN port.

z The default VLAN cannot be set to a super VLAN.
z You can add multiple ports (non-uplink port) to each sub VLAN.
z You cannot configure a virtual port for a sub VLAN.
z If the undo subvlan command is not followed by vlan_id, the mapping relationship

between all sub VLANs and specified super VLANs is removed; if the undo
subvlan command is followed by vlan_id, the mapping relationship between the

specified sub VLANs and specified super VLANs is removed.

10-2

3Com Switch 8800 Configuration Guide Chapter 10 Super VLAN Configuration

10.2.2 Super VLAN Configuration Example

I. Network requirements

Super VLAN 10 and sub VLANs including VLAN 2, VLAN 3 and VLAN 5 need
configuring. VLAN2 contains port 1 and 2; VLAN3 contains port 3 and 4; VLAN5
contains port 5 and 6. These sub VLA Ns are isolated at Layer 2. It is required that these
sub VLANs communicate with each other at Layer 3.

II. Network diagram

Omitted

III. Configuration procedure

[SW8800] vlan 10
[SW8800-vlan10] supervlan
[SW8800-vlan10] vlan 2
[SW8800-vlan2] port ethernet3/1/1ethernet3/1/2
[SW8800-vlan2] vlan 3
[SW8800-vlan3] port Ethernet3/1/3 ethernet3/1/4
[SW8800-vlan3] vlan 5
[SW8800-vlan5] port ethernet3/1/5 ethernet3/1/6
[SW8800-vlan5] vlan 10
[SW8800-vlan10] subvlan 2 3 5
[SW8800-vlan10] interface vlan 10
[SW8800-Vlan-interface10] ip address 10.110.1.1 255.255.255.0

 Note:

By default ARP proxy on super VLANs is enabled, and disabled on sub VLANs.

10-3

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration

Chapter 11 IP Address Configuration

11.1 Introduction to IP Address

11.1.1 IP Address Classification and Representation

An IP address is a 32-bit address allocated to a device that accesses the Internet. It
consists of two fields: net-id field and host-id field. IP addresses are allocated by
Network Information Center (NIC) of American Defense Data Network (DDN). To
manage IP addresses conveniently, IP addresses are classified into five types. See the
following figure.

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

host-id

Class A

Class A

net-id

net-id

0

0

host-id

net-id

Class B

Class B

Class C

Class C

Class D

Class D

Class E

Class E

1 0

1 0

1 1 0

1 1 0

1 1 1 0

1 1 1 0

1 1 1 1 0

1 1 1 1 0

net-id

net-id

net-id

Multicas t addres s

Multicas t addres s

Reserved

Reserved

net-id: network ID host-id: Host ID

net-id: network ID host-id: Host ID

host-id

host-id

host-id

host-id

Figure 11-1 Five classes of IP address

Here, Class A, Class B and Class C addresses are unicast addresses, while Class D
addresses are multicast ones and class E addresses are reserved for special
applications in future. The first three types are commonly used.

The IP address is in dotted decimal format. Each IP address contains four integers in
dotted decimal notation. Each integer corresponds to one byte, for example,

10.110.50.101.
When using IP addresses, note that some of them are reserved for special uses, and

are seldom used. The IP addresses you can use are listed in the following table.

11-1

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration

Table 11-1 IP address classes and ranges

Network

class

A

Address

range

0.0.0.0 to

127.255.2

55.255

IP network

range

available

Host ID with all the digits being 0
indicates that the IP address is the
network address, and is used for
network routing.

Host ID with all the digits being 1
indicates the broadcast address, that
is, broadcast to all hosts on the
network.

IP address 0.0.0.0 is used for the host

1.0.0.0 to

126.0.0.0

that is not put into use after starting up.
The IP address with network ID being

0 indicates the current network and its
network can be cited by the router
without knowing its network number.

The IP addresses with the format of

127.X.Y.Z are reserved for self-loop
test and the packets sent to these
addresses are not output to the line.
The packets are processed internally
and regarded as input packets.

Note

B

C

128.0.0.0
to

191.255.2

55.255

192.0.0.0
to

223.255.2

55.255

128.0.0.0 to

191.254.0.0

192.0.0.0 to

223.255.254.0

Host ID with all the digits being 0
indicates that the IP address is the
network address, and is used for
network routing.

Host ID with all the digits being 1
indicates the broadcast address, that
is, broadcast to all hosts on the
network.

Host ID with all the digits being 0
indicates that the IP address is the
network address, and is used for
network routing.

Host ID with all the digits being 1
indicates the broadcast address, that
is, broadcast to all hosts on the
network.

11-2

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration

Network

class

D

E

Other
addresses

Address

range

224.0.0.0
to

239.255.2

55.255

240.0.0.0
to

255.255.2

55.254

255.255.2

55.255

IP network

range

available

None

None

255.255.255.2
55

Note

Addresses of class D are multicast
addresses, among which:

z IP address 224.0.0.0 is reserved

and will not be allocated. Those
from 224.0.0.1 to 224.0.0.255 are
reserved for routing protocols and
other protocols that are used to
discover and maintain routes.

z Those from 239.0.0.0 to

239.255.255.255 are used for local
multicast management.

z Those from 224.0.0.255 to

238.255.255.255 are for users.

The addresses are reserved for future
use.

255.255.255.255 is used as a Local
Area Network (LAN) broadcast
address.

11.1.2 Subnet and Mask

Nowadays, with rapid development of the Internet, IP addresses are depleting very fast.
The traditional IP address allocation method wastes IP addresses greatly. In order to
make full use of the available IP addresses, the concept of mask and subnet is
proposed.

A mask is a 3 2-bit number corresponding to an IP address. The number consists of 1s
and 0s. Principally, these 1s and 0s can be combined randomly. However, the first
consecutive bits are set to 1s when you design a mask. The mask divides the IP
address into two parts: subnet address and host address. The part of IP address that
corresponds to the bits 1s in the ma sk indicates the subnet address and the other part
of IP address indicate the host address. If there is no subnet division, then its subnet
mask is the default value and the length of "1" indicates the net-id length. Therefore, for
IP addresses of classes A, B and C, the default values of corresponding subnet mask
are 255.0.0.0, 255.255.0.0 and 255.255.255.0 respectively.

The mask can be used to divide a Class A network containing more than 16,000,000
hosts or a Class B network containing more than 60,000 hosts into multiple small
networks. Each small network is call ed a subnet. For ex ample, for the Class B net work
address 138.38.0.0, the mask 255.255.224.0 can be used to divide the network into
eight subnets: 138.38.0.0, 138.38.32.0, 138.38.64.0, 138.38.96.0, 138.38.128.0,

11-3