3Com DUA1750-2BAA01 - Manuals

Switch 8800 Configuration Guide About This Manual 6 V. Mouse operation Action Description Select Press and hold the primary mouse button (left mouse button by default). Click Select and release the primary mouse button without moving the pointer. Double-Click Press the primary mouse button twice con...

3Com Switch 8800 Configuration Guide Table of Contents TOC-1 Table of Contents Chapter 1 Product Overview ........................................................................................................ 1-1 1.1 Product Overview....................................................................

3Com Switch 8800 Configuration Guide Chapter 1 Product Overview 1-1 Chapter 1 Product Overview 1.1 Product Overview The Switch 8800 is a large-capacity, modularized L2/L3 switch. It is mainly designed for broadband MAN, backbone, switching core and convergence center of large-sized enterprise networ...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-1 Chapter 2 Logging into Switch 2.1 Setting Up Configuration Environment Through the Console Port Step 1: As shown in the figure below, to set up the local configuration environment, connect the serial port of a PC (or a terminal) ...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-2 Figure 2-3 Configure the port for connection Figure 2-4 Set communication parameters Step 3: The switch is powered on. Display self-test information of the switch and prompt you to press Enter to show the command line prompt such...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-3 2.2 Setting Up Configuration Environment Through Telnet 2.2.1 Connecting a PC to the Switch Through Telnet After you have correctly configured IP address of a VLAN interface for a switch via Console port (using ip address command...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-4 Figure 2-6 Run Telnet Step 4: The terminal displays “Login authentication!” and prompts the user to input the logon password. After you input the correct password, it displays the command line prompt (such as <SW8800>). If ...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-5 Telnet Client PC Telnet Server Figure 2-7 Provide Telnet Client service Step 1: Configure the Telnet user name and password on the Telnet Server through the console port. Note: By default, the password is required for authenticat...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-6 Note: By default, the password is required for authenticating the Modem user to log in the switch. If a user logs in via the Modem without password, he will see the prompt “Login password has not been set !.”. <SW8800> syst...

3Com Switch 8800 Configuration Guide Chapter 2 Logging into Switch 2-7 Figure 2-9 Set the dialed number Figure 2-10 Dial on the remote PC Step 4: Enter the preset login password on the remote terminal emulator and wait for the prompt such as <SW8800>. Then you can configure and manage the swit...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-1 Chapter 3 Command Line Interface 3.1 Command Line Interface The Switch 8800 provides a series of configuration commands and command line interfaces for configuring and managing the switch. The command line interface has the fo...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-2 z Management level: They are commands that influence basis operation of the system and system support module, which plays a support role on service. Commands of this level involve file system commands, FTP commands, TFTP comma...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-7 Command view Function Prompt Command to enter Command to exit VPN-instance subaddress family view Configure VPN instance subaddress family parameters [SW8800-bgp-af-vpn-instance] Key in ipv4-family vpn-instance vpna in BGP/RIP...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-8 z Partial help You can get the help information through these online help commands, which are described as follows. 1) Input “?” in any view to get all the commands in it and corresponding descriptions. <SW8800> ? User v...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-9 3.3.2 Displaying Characteristics of Command Line Command line interface provides the following display characteristics: z For users’ convenience, the instruction and help information can be displayed in both English and Chines...

3Com Switch 8800 Configuration Guide Chapter 3 Command Line Interface 3-10 3.3.4 Common Command Line Error Messages All the input commands by users can be correctly executed, if they have passed the grammar check. Otherwise, error messages will be reported to users. The common error messages are lis...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-1 Chapter 4 User Interface Configuration 4.1 User Interface Overview User interface configuration is another way provided by the switch to configure and manage the port data. The Switch 8800 supports the following configur...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-2 z VTY is numbered after AUX user interface. The absolute number of the first VTY is incremented by 1 than the AUX user interface number. II. Relative number The relative number is in the format of “user interface type” +...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-3 When the users log in the switch, if a connection is activated, the login header will be displayed. After the user successfully logs in the switch, the shell header will be displayed. Perform the following configuration ...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-4 By default, the flow control on an asynchronous port is none, that is, no flow control will be performed. III. Configuring parity Table 4-5 Configure parity Operation Command Configure parity mode parity { even | mark | ...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-5 After the terminal service is disabled on a user interface, you cannot log in to the switch through the user interface. However, the user logged in through the user interface before disabling the terminal service can con...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-6 IV. Setting the screen length If a command displays more than one screen of information, you can use the following command to set how many lines to be displayed in a screen, so that the information can be separated in di...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-7 By default, terminal authentication is not required for local users log in via the Console port. However, password authentication is required for local users and remote Modem users log in via the AUX port, and Telnet use...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-8 Note: By default, password is required to be set for authenticating local users and remote Modem users log in via the AUX port, and Telnet users log in through Ethernet port. If no password has been set, the following pr...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-9 Note: When a user logs in the switch, the command level that it can access depends on two points. One is the command level that the user itself can access, the other is the set command level of this user interface. If th...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-10 4.2.6 Configuring Modem Attributes When logging in the switch via the Modem, you can use the following commands to configure these parameters. Perform the following configuration in AUX user interface view. Table 4-19 C...

3Com Switch 8800 Configuration Guide Chapter 4 User Interface Configuration 4-11 Table 4-21 Configure to automatically run the command Operation Command Configure to automatically run the command auto-execute command text Configure not to automatically run the command undo auto-execute command Note ...

3Com Switch 8800 Configuration Guide Chapter 5 Management Interface Configuration 5-1 Chapter 5 Management Interface Configuration 5.1 Management Interface Overview The Switch 8800 provides a 10/100Base-TX management interface on the Fabric. The management interface can connect a background PC for s...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-1 Chapter 6 Ethernet Port Configuration 6.1 Ethernet Port Overview The Switch 8800 provides conventional Ethernet ports, fast Ethernet ports, 1000 Mbps Ethernet ports and 10 Gbps Ethernet ports. The configurations of these ...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-2 6.2.2 Enabling/Disabling an Ethernet Port After configuring the related parameters and protocol of the port, you can use undo shutdown command to enable the port. If you do not want a port to forward data any more, use sh...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-3 Note that, 10/100 Mbps electrical Ethernet port can operate in full-duplex, half-duplex or auto-negotiation mode. The10/100/1000 Mbps electrical Ethernet port can operate in full duplex, half duplex or auto-negotiation mo...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-4 Operation Command Restore the default type of the cable connected to the Ethernet port undo mdi Note that, the settings only take effect on 10/100 Mbps and 10/100/1000 Mbps electrical ports. By default, the cable type is ...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-5 Note that, the values can be consecutive, but the effective values are discrete. The effective frame length for the FE port is 1552. The effective frame length for the GE port and 10 GE port is 1552, 9022, 9192 and 10240....

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-6 6.2.11 Setting the Link Type for the Ethernet Port Ethernet port can operate in three different link types, access, hybrid, and trunk types. The access port carries one VLAN only, used for connecting to the user’s compute...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-7 Operation Command Add the current trunk port to specified VLANs port trunk permit vlan { vlan_id_list | all } Remove the current access port from to a specified VLAN undo port access vlan Remove the current hybrid port fr...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-8 By default, the VLAN of hybrid port and trunk port is VLAN 1 and that of the access port is the VLAN to which it belongs 6.2.14 Setting the VLAN VPN Feature VLAN Tag consists of 12 bits (defined by IEEE802.1Q), so Etherne...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-9 Path cost Link attributes(point-to-point or not) Port mCheck Max transmission speed Enable/disable root protection Enable/disable loop protection Edge or non-edge port Reset ARP or not Define/apply flow template Traffic r...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-10 Table 6-16 Copy port configuration to other ports Operation Command Copy port configuration to other ports copy configuration source { interface - type interface - number | interface - name | aggregation-group agg - id }...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-11 6.3 Displaying and Debugging Ethernet Port After the above configuration, execute display command in any view to display the running of the Ethernet port configuration, and to verify the effect of the configuration. Exec...

3Com Switch 8800 Configuration Guide Chapter 6 Ethernet Port Configuration 6-12 II. Network diagram Switch A Switch B Figure 6-1 Network diagram for Ethernet port configuration III. Configuration procedure The following configurations are used for Switch A. Please configure Switch B in the similar w...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-1 Chapter 7 Link Aggregation Configuration 7.1 Overview 7.1.1 Introduction to Link Aggregation Link aggregation means aggregating several ports together to implement the outgoing/incoming payload balance among the member...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-2 operation key. The management key of an LACP-enabled dynamic aggregation port is 0 by default. The management key of an LACP-enabled static aggregation port is the same as the aggregation group ID. In a dynamic aggrega...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-3 z The system sets to inactive state the active port connecting to the different peer devices, or the port connecting to the same peer device but locating in the different aggregation group. z The system sets to inactiv...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-5 7.2 Link Aggregation Configuration The following sections describe link aggregation tasks: z Enabling/Disabling LACP at Port z Creating/Deleting an Aggregation Group z Adding/Deleting an Ethernet Port into/from an Aggr...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-6 z You cannot enable LACP at the mirroring port, the port with static MAC address configured, and the port with static ARP configured, port with 802.1x enabled. z You are inhibited to enable LACP at the port in a manual...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-9 7.3 Displaying and Debugging Link Aggregation After the above configuration, execute the display command in any view to display the running of the link aggregation configuration, and to verify the effect of the configu...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-10 7.4 Link Aggregation Configuration Example I. Network requirements Switch A connects switch B with three aggregation ports, numbered as Ethernet2/1/1 to Ethernet2/1/3, so that incoming/outgoing load can be balanced am...

3Com Switch 8800 Configuration Guide Chapter 7 Link Aggregation Configuration 7-11 Enable LACP on Ethernet ports Ethernet2/1/1 to Ethernet2/1/3. [SW8800] interface ethernet2/1/1 [SW8800-Ethernet2/1/1] lacp enable [SW8800-Ethernet1/1/1] interface ethernet2/1/2 [SW8800-Ethernet2/1/2] lacp enable [SW88...

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration 8-1 Chapter 8 VLAN Configuration 8.1 VLAN Overview Virtual local area network (VLAN) groups the devices in a LAN logically, not physically, into segments to form virtual workgroups. IEEE issued the IEEE 802.1Q in 1999 to standardize t...

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration 8-3 8.2.4 Shutting down/Bringing up a VLAN Interface You can use the following commands to shut down/bring up a VLAN interface. Perform the following configuration in VLAN interface view. Table 8-4 Shut down/bring up a VLAN interface ...

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration 8-5 Note: z The port to be associated with a protocol-based VLAN must be of Hybrid type and in this VLAN. z The same protocol can be configured in the different VLANs, but cannot be configured repeatedly in the same VLAN. z A port can...

3Com Switch 8800 Configuration Guide Chapter 8 VLAN Configuration 8-6 8.6 VLAN Configuration Example I. Network requirements z Create VLAN2 and VLAN3. z Add Ethernet3/1/1 and Ethernet4/1/1 to VLAN2. z Add Ethernet3/1/2 and Ethernet4/1/2 to VLAN3. II. Network diagram VLAN 3 Switch E3/1/2 E4/1/1 VLAN ...

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration 9-1 Chapter 9 GARP/GVRP Configuration 9.1 Configuring GARP 9.1.1 GARP Overview Generic attribute registration protocol (GARP) offers a mechanism that is used by the members in the same switching network to distribute, propagate a...

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration 9-2 Note: z The value of GARP timer will be used in all the GARP applications, including GVRP and GMRP, running in one switched network. z In one switched network, the GARP timers on all the switching devices should be set to the...

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration 9-3 Note that, the value of Join timer should be no less than the doubled value of Hold timer, and the value of Leave timer should be greater than the doubled value of Join timer and smaller than the Leaveall timer value. Besides...

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration 9-5 Table 9-3 Enable/disable global GVRP Operation Command Enable global GVRP gvrp Disable global GVRP undo gvrp By default, global GVRP is disabled. 9.2.3 Enabling/Disabling Port GVRP You can use the following command to enable/...

3Com Switch 8800 Configuration Guide Chapter 9 GARP/GVRP Configuration 9-7 III. Configuration procedure Configure Switch A: Enable GVRP globally. [SW8800] gvrp Set Ethernet3/1/1 as a Trunk port and allows all the VLANs to pass through. [SW8800] interface ethernet3/1/1 [SW8800-Ethernet3/1/1] port lin...

3Com Switch 8800 Configuration Guide Chapter 10 Super VLAN Configuration 10-1 Chapter 10 Super VLAN Configuration 10.1 Super VLAN Overview Super VLAN is also called VLAN aggregation: A super VLAN contains multiple sub VLANs . A super VLAN can be configured with an IP address of the virtual port, whi...

3Com Switch 8800 Configuration Guide Chapter 10 Super VLAN Configuration 10-3 10.2.2 Super VLAN Configuration Example I. Network requirements Super VLAN 10 and sub VLANs including VLAN 2, VLAN 3 and VLAN 5 need configuring. VLAN2 contains port 1 and 2; VLAN3 contains port 3 and 4; VLAN5 contains por...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-1 Chapter 11 IP Address Configuration 11.1 Introduction to IP Address 11.1.1 IP Address Classification and Representation An IP address is a 32-bit address allocated to a device that accesses the Internet. It consists of two...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-2 Table 11-1 IP address classes and ranges Network class Address range IP network range available Note A 0.0.0.0 to 127.255.255.255 1.0.0.0 to 126.0.0.0 Host ID with all the digits being 0 indicates that the IP address is th...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-3 Network class Address range IP network range available Note D 224.0.0.0 to 239.255.255.255 None Addresses of class D are multicast addresses, among which: z IP address 224.0.0.0 is reserved and will not be allocated. Those...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-4 138.38.160.0, 138.38.192.0 and 138.38.224.0 (Refer to the following figure). Each subnet can contain more than 8000 hosts. 10001010, 00100110, 000 00000, 00000000 ClassB 138.38.0.0 Subnet mask 255.255.224.0 11111111, 11111...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-5 11.2.2 Configuring the IP Address of the VLAN Interface You can configure an IP address for every VLAN interface of the switch. Generally, it is enough to configure one IP address for an interface. You can also configure t...

3Com Switch 8800 Configuration Guide Chapter 11 IP Address Configuration 11-6 II. Network diagram Console cable Switch PC Console cable Switch PC Figure 11-3 Network diagram for IP address configuration III. Configuration procedure Enter VLAN interface 1. [SW8800] interface vlan-interface 1 Configur...

3Com Switch 8800 Configuration Guide Chapter 12 ARP Configuration 12-1 Chapter 12 ARP Configuration 12.1 Introduction to ARP Address Resolution Protocol (ARP) is used to resolve an IP address into a MAC address. I. Necessity of ARP An IP address cannot be directly used for communication between netw...

3Com Switch 8800 Configuration Guide Chapter 12 ARP Configuration 12-2 corresponding MAC address of Host B and adds them to its own ARP mapping table. Then Host A sends Host B all the packets standing in the queue. Normally, dynamic ARP takes effect and automatically searches for the resolution from...

3Com Switch 8800 Configuration Guide Chapter 12 ARP Configuration 12-3 12.2.2 Configuring the Dynamic ARP Aging Timer For purpose of flexible configuration, the system provides the following commands to assign dynamic ARP aging period. When the system learns a dynamic ARP entry, its aging period is ...

3Com Switch 8800 Configuration Guide Chapter 12 ARP Configuration 12-4 12.3 Displaying and Debugging ARP After the above configuration, execute the display command in any view to display the running of the ARP configuration, and to verify the effect of the configuration. Execute the reset command in...

3Com Switch 8800 Configuration Guide Chapter 12 ARP Configuration 12-5 Table 12-5 Enable/Disable the scheme of preventing attack from packets Operation Command Enable/Disable the scheme of preventing attack from packets anti-attack { arp | dot1x | ip }{ disable | enable } By default, the scheme of p...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-1 Chapter 13 DHCP Configuration 13.1 Introduction to DHCP 13.1.1 How DHCP Works This is a world where networks are ever-growing in both size and complexity, and the network configuration is getting more and more complex. As is oft...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-2 z Automatic IP address assignment. The DHCP server automatically assigns fixed IP addresses to DHCP clients when they connect to the network for the first time. After that, the IP addresses are always occupied by the DHCP client...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-3 z Selection. The DHCP client only receives the first arriving DHCP_Offer packet if there are DHCP_Offer packets from several DHCP servers. Then, it retrieves the IP address carried in the packet, and broadcasts a DHCP_Request pa...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-4 13.2.1 Enabling/Disabling DHCP Service For both DHCP server and DHCP relay, you must enable the DHCP service first before performing other DHCP configurations. The other related DHCP configurations take effect only after the DHC...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-6 13.3 Configuring DHCP Server The following sections describe the DHCP server configuration tasks: z Creating a Global DHCP IP Address Pool z Configuring IP Address Assignment Mode z Forbidding Specified IP Addresses to Be Automa...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-7 So, you can configure the parameters (such as domain name) that are common to all levels in the address pool structure or some subnets only for the network segment or for corresponding subnets. The display dhcp server tree comma...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-9 Caution: A binding in a VLAN interface address pool cannot be overwritten directly. If an IP-to-MAC address binding entry is configured and you want to modify it, you must remove it and redefine a new one. III. Configuring dynam...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-10 You can set multiple IP address ranges that are not assigned automatically by executing the dhcp server forbidden-ip command multiple times. 13.3.4 Configuring Lease Time For DHCP Address Pool You can configure different lease ...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-11 Operation Command Restore the lease time of DHCP address pools of multiple VLAN interfaces to the default value undo dhcp server expired { interface vlan-interface vlan _ id [ to vlan-interface vlan _ id ] | all } The default l...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-12 Table 13-15 Configure a DHCP client domain name for multiple VLAN interfaces Operation Command Configure a DHCP client domain name for DHCP address pools of multiple VLAN interfaces dhcp server domain-name domain - name { inter...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-13 Table 13-17 Configure DNS server address for current VLAN interface Operation Command Configure one or more DNS server addresses for the DHCP address pool of the current VLAN interface dhcp server dns-list ip - address [ ip - a...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-15 13.3.8 Configuring NetBIOS Node Type for DHCP Clients For DHCP clients communicating in wide area network (WAN) by NetBIOS protocol, the mapping between their host names and IP addresses must be established. According to the wa...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-16 Table 13-24 Configure a NetBIOS node type for multiple VLAN interfaces Operation Command Configure NetBIOS node types for DHCP clients of multiple VLAN interface DHCP address pools dhcp server netbios-type { b-node | h-node | m...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-17 III. Configuring custom DHCP options for multiple VLAN interfaces Perform the following configuration in system view. Table 13-27 Configure custom DHCP options for multiple VLAN interfaces Operation Command Configure a custom D...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-18 the DHCP server receives no response after sending all these packets, it considers the IP address is not used by other devices in this network and assigns the IP address to this DHCP client. Otherwise, it does not assign the IP...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-19 Operation Command Display the information about IP address binding in DHCP address pool(s) display dhcp server ip-in-use { ip ip - address | pool [ pool - name ] | interface [ vlan-interface vlan _ id ] | all } Display the stat...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-21 13.4 Configuring DHCP Relay 13.4.1 Introduction to DHCP Relay This is a world where networks are ever-growing in both size and complexity, and the network configuration is getting more and more complex. As is often the case, th...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-22 z After receiving the packet, the DHCP server generates configuration information accordingly and sends it to the DHCP client through the DHCP Relay to complete the dynamic configuration of the DHCP client. Note that the entire...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-23 Table 13-34 Configure user address entries for DHCP server Operation Command Add a user address entry for DHCP server dhcp relay security ip_address mac_address static Remove a user address entry for DHCP server undo dhcp relay...

3Com Switch 8800 Configuration Guide Chapter 13 DHCP Configuration 13-24 Operation Command Disable debugging for DHCP Relay undo debugging dhcp relay { all | packet | error | event } 13.4.4 DHCP Relay Configuration Example I. Network requirements As shown in Figure 13-4, two DHCP clients located at ...

3Com Switch 8800 Configuration Guide Chapter 14 DNS Configuration 14-1 Chapter 14 DNS Configuration 14.1 Introduction to DNS Used in the TCP/IP application, Domain Name System (DNS) is a distributed database which provides the translation between domain name and the IP address. In this way, the user...

3Com Switch 8800 Configuration Guide Chapter 14 DNS Configuration 14-2 “3Com”. Then the system connects the input domain name with the suffix into “3Com.com” automatically to search. When the domain name suffix is used, if the input domain name does not include “.”, like “3Com”, the system regards i...

3Com Switch 8800 Configuration Guide Chapter 14 DNS Configuration 14-3 this function when you do not want to perform dynamic domain name resolution sometimes. Perform the following configuration in system view. Table 14-2 Enable/disable dynamic domain name resolution Operation Command Enable dynamic...

3Com Switch 8800 Configuration Guide Chapter 14 DNS Configuration 14-4 14.4 Displaying and Debugging Domain Name Resolution After the above configuration, you can execute the display command in any view to view the running states of the domain name resolution, and verify the configuration results th...

3Com Switch 8800 Configuration Guide Chapter 14 DNS Configuration 14-5 III. Configuraiton procedure Enable dynamic domain name resolution [SW8800] dns resolve Configure the IP address of the domain name server to 172.16.1.1. [SW8800] dns server 172.16.1.1 Configure the domain name suffix as com. [SW...

3Com Switch 8800 Configuration Guide Chapter 15 IP Performance Configuration 15-1 Chapter 15 IP Performance Configuration 15.1 Configuring IP Performance IP performance configuration includes: z Configuring TCP Attributes 15.1.1 Configuring TCP Attributes TCP attributes that can be configured includ...

3Com Switch 8800 Configuration Guide Chapter 15 IP Performance Configuration 15-2 15.2 Displaying and Debugging IP Performance After the above configuration, execute the display command in any view to display the running of the IP performance configuration, and to verify the effect of the configurat...

3Com Switch 8800 Configuration Guide Chapter 15 IP Performance Configuration 15-3 Operation Command Enable the debugging of UDP connections debugging udp packet [ task - id socket - id ] Disable the debugging of UDP connections undo debugging udp packet [ task - id socket - id ] Enable the debugging...

3Com Switch 8800 Configuration Guide Chapter 15 IP Performance Configuration 15-4 z Use the debugging tcp packet command to enable the TCP debugging to trace the TCP packets. Operations include: <SW8800> terminal debugging <SW8800> debugging tcp packet Then the TCP packets received or se...

3Com Switch 8800 Configuration Guide Chapter 16 IP Routing Protocol Overview 16-1 Chapter 16 IP Routing Protocol Overview Note: A router that is referred to in the following or its icon represents a generalized router or a Switch 8800 running routing protocols. To improve readability, this will not ...

3Com Switch 8800 Configuration Guide Chapter 16 IP Routing Protocol Overview 16-2 A Route segment B C A R R Route segment R R R A Figure 16-1 The concept of route segment As the networks may have different sizes, the segment lengths connected between two different pairs of routers are also different...

3Com Switch 8800 Configuration Guide Chapter 16 IP Routing Protocol Overview 16-4 The Switch 8800 supports the configuration of a series of dynamic routing protocols such as RIP, OSPF, IS-IS and BGP, as well as the static routes. In addition, the running switch will automatically obtain some direct ...

3Com Switch 8800 Configuration Guide Chapter 16 IP Routing Protocol Overview 16-5 Routing protocol or route type The preference of the corresponding route UNKNOWN 255 Apart from direct routing, IBGP and EBGP, the preferences of various dynamic routing protocols can be manually configured to meet the...

3Com Switch 8800 Configuration Guide Chapter 16 IP Routing Protocol Overview 16-6 16.2.3 Routes Shared Between Routing Protocols As the algorithms of various routing protocols are different, different protocols may generate different routes, thus bringing about the problem of how to resolve the diff...

3Com Switch 8800 Configuration Guide Chapter 17 Static Route Configuration 17-1 Chapter 17 Static Route Configuration 17.1 Introduction to Static Route 17.1.1 Static Route A static route is a special route configured manually by an administrator. You can set up an interconnecting network with the st...

3Com Switch 8800 Configuration Guide Chapter 17 Static Route Configuration 17-2 there is no default route and the destination address of the packet fails in matching any entry in the routing table, this packet will be discarded, and an internet control message protocol (ICMP) packet will be sent to ...

3Com Switch 8800 Configuration Guide Chapter 17 Static Route Configuration 17-4 17.3 Displaying and Debugging Static Route After the above configuration, execute the display command in any view to display the running of the static route configuration, and to verify the effect of the configuration. T...

3Com Switch 8800 Configuration Guide Chapter 17 Static Route Configuration 17-5 II. Network diagram Host 1. 1.5. 1 1.1.5. 2/2 4 1.1.2. 2/2 4 1.1.2. 1/2 4 1.1.1. 2/2 4 Host 1. 1.1. 1 Host 1. 1.4. 2 1.1.3. 1/2 4 1.1.3. 2/2 4 1.1.4. 1/2 4 Sw itch A Sw itch B Sw itch C A C B Host 1. 1.5. 1 1.1.5. 2/2 4 ...

3Com Switch 8800 Configuration Guide Chapter 17 Static Route Configuration 17-6 17.5 Troubleshooting Static Route Faults Symptom : The switch is not configured with the dynamic routing protocol and both the physical status and the link layer protocol status of the interface is UP, but the IP packets...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-1 Chapter 18 RIP Configuration 18.1 Introduction to RIP Routing Information Protocol (RIP) is a relatively simple interior gateway protocol (IGP), which is mainly applied to small scale networks. It is easy to implement RIP. You ca...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-2 z Period update is triggered periodically to send all RIP routes to all neighbors. z If the RIP route is not updated (a router receives the update packets from the neighbor) when the Timeout timer expires, this route is regarded ...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-3 If the link, which does not support broadcast or multicast packets, runs RIP, you need to configure RIP to send any packet to the specified destination, establishing RIP neighbors correctly. In NBMA link networking through a Fram...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-4 Table 18-2 Enable RIP Interface Operation Command Enable RIP on the specified network network network - address Disable RIP on the specified network undo network network - address Note that after the RIP task is enabled, you shou...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-5 Table 18-4 Configure Split Horizon Operation Command Enable split horizon rip split-horizon Disable split horizon undo rip split-horizon By default, split horizon of the interface is enabled. 18.2.5 Setting Additional Routing Met...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-6 Perform the following configuration in RIP view. Table 18-6 Configure RIP to import routes of other protocols Operation Command Configure RIP to import routes of other protocols import-route protocol [ cost value | route-policy r...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-7 II. Configuring RIP to filter the routes advertised by RIP Table 18-8 Configure RIP to filter the advertised routes Operation Command Configure RIP to filter the advertised routing information filter-policy { acl - number | ip-pr...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-8 18.2.9 Enabling RIP-2 Route Aggregation Function The so-called route aggregation means that different subnet routes in the same natural network can be aggregated into one natural mask route for transmission when they are sent to ...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-10 always become unreachable at the point when a new period starts, the actual value of Garbage-collection timer is three to four times that of Period Update timer. Note: You must consider network performance when adjusting RIP tim...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-12 18.3 Displaying and Debugging RIP After the above configuration, execute the display command in any view to display the running of the RIP configuration, and to verify the effect of the configuration. Execute the debugging comma...

3Com Switch 8800 Configuration Guide Chapter 18 RIP Configuration 18-14 [Switch C-rip] network 110.11.2.0 18.5 Troubleshooting RIP Faults Symptom : The Switch 8800 cannot receive the update packets when the physical connection to the peer routing device is normal. Solution : RIP does not operate on ...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-1 Chapter 19 OSPF Configuration 19.1 OSPF Overview 19.1.1 Introduction to OSPF Open Shortest Path First (OSPF) is an Interior Gateway Protocol based on the link state developed by IETF. At present, OSPF version 2 (RFC2328) is used...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-2 z A router uses the SPF algorithm to calculate the shortest path tree with itself as the root, which shows the routes to the nodes in the autonomous system. The external routing information is the leave node. A router, which adv...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-3 19.1.4 LSA Type I. Five basic LSA types As mentioned previously, OSPF calculates and maintains routing information from LSAs. RFC2328 defines five LSA types as follows: z Router-LSAs: Type-1. Each router generates Router-LSAs, w...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-4 II. DR and BDR z Designated Router (DR) In multi-access networks, if any two routers establish adjacencies, the same LSA will be transmitted repeatedly, wasting bandwidth resources. To solve this problem, the OSPF protocol regul...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-6 z Authenticator: OSPF provides clear text authenticator and MD5 encryption authenticator to authenticate packets transmitted between neighboring routers in the same area. z Flexible configuration for the router port parameter: O...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-8 By default, OSPF is disabled. When enabling OSPF, pay attention to the following points: z The default OSPF process ID is 1. If no process ID is specified in the command, the default one is adopted. z If a router is running mult...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-9 19.2.5 Configuring OSPF to Import Routes of Other Protocols The dynamic routing protocols on the router can share the routing information. As far as OSPF is concerned, the routes discovered by other routing protocols are always ...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-10 The routes that can be imported include Direct, Static, RIP, IS-IS, or BGP and in addition, the routes of other OSPF processes. Note: z It is recommended to configure the imported route type, cost and tag for the import-route c...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-11 III. Configuring the default interval and number for OSPF to import external routes OSPF can import the external routing information and broadcast it to the entire autonomous system. Importing routes too often and importing too...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-12 z The broadcasting scope of Type-5 LSA or Type-7 LSA advertising the default route is the same as that of the common Type-5 LSA or Type-7 LSA. Perform the following configuration in OSPF view. Table 19-8 Configure OSPF to impor...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-13 By default, OSPF will not filter the received routing information. II. Configuring filtering the routes imported to OSPF Use the filter-policy export command to configure the ASBR router to filter the external routes imported t...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-14 aggregate segment specified by the command will not be transmitted separately. This can reduce the LSDB size in other areas. Once the aggregated segment of a certain network is added to the area, all the internal routes of the ...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-15 19.2.9 Setting OSPF Route Preference Since maybe multiple dynamic routing protocols are running on one router concurrently, the problem of route sharing and selection between various routing protocols occurs. The system sets a ...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-16 II. Setting a dead timer for the neighboring routers The dead timer of neighboring routers refers to the interval in which a router will regard the neighboring router as dead if no Hello packet is received from it. The user can...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-17 19.2.11 Configuring the Network Type on the OSPF Interface The route calculation of OSPF is based upon the topology of the adjacent network of the local router. Each router describes the topology of its adjacent network and tra...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-18 Table 19-17 Configure a network type for an OSPF interface Operation Command Configure the network type on the interface ospf network-type { broadcast | nbma | p2mp | p2p } Restore the default network type of the OSPF interface...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-20 19.2.14 Configuring an Interval Required for Sending LSU Packets Trans-delay seconds should be added to the aging time of the LSA in an LSU packet. Setting the parameter like this mainly considers the time duration that the int...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-21 Table 19-22 Configure whether the MTU field will be filled in when an interface transmits DD packets Operation Command Enable an interface to fill in the MTU field when transmitting DD packets ospf mtu-enable Disable the interf...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-22 By default, all interfaces are allowed to transmit and receive OSPF packets. After an OSPF interface is set to be in silent status, the interface can still advertise its direct route. However, the OSPF hello packets of the inte...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-23 Operation Command Disable the interface to use MD5 authentication undo ospf authentication-mode md5 By default, the interface is not configured with either simple authentication or MD5 authentication. 19.2.20 Configuring OSPF V...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-26 Perform the following configuration in OSPF area view. Table 19-29 Configure NSSA of OSPF Operation Command Configure an area to be the NSSA area nssa [ default-route-advertise | no-import-route | no-summary ]* Cancel the confi...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-27 By default, MIB is bound to the first enabled OSPF process. II. Configuring OSPF TRAP You can configure the switch to send multiple types of SNMP TRAP packets in case of OSPF anomalies. In addition, you can configure the switch...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-28 19.3 Displaying and Debugging OSPF After the above configuration, execute the display command in any view to display the running of the OSPF configuration, and to verify the effect of the configuration. Execute the debugging co...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-29 Operation Command Disable OSPF event debugging undo debugging ospf event Enable OSPF LSA packet debugging debugging ospf lsa-originate Disable OSPF LSA packet debugging undo debugging ospf lsa-originate Enable SPF debugging of ...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-30 III. Configuration procedure Configure Switch A [Switch A] interface Vlan-interface 1 [Switch A-Vlan-interface1] ip address 196.1.1.1 255.255.255.0 [Switch A-Vlan-interface1] ospf dr-priority 100 [Switch A] router id 1.1.1.1 [S...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-33 19.5 Troubleshooting OSPF Faults Symptom 1 : OSPF has been configured in accordance with the earlier-mentioned steps, but OSPF on the router cannot run normally. Solution : Check according to the following procedure. Local trou...

3Com Switch 8800 Configuration Guide Chapter 19 OSPF Configuration 19-34 As shown in Figure 19-5: RTA and RTD are configured to belong to only one area, whereas RTB (area0 and area1) and RTC (area1 and area 2) are configured to belong to two areas. In which, RTB also belongs to area0, which is compl...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-1 Chapter 20 Integrated IS-IS Configuration 20.1 Introduction to Integrated IS-IS Intermediate System-to-Intermediate System (IS-IS) intra-domain routing information exchange protocol is designed by the international o...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-2 II. Link types IS-IS routing protocol is applied to IS-IS routing protocol can run on point to point Links, such as PPP, HDLC and others. IS-IS routing protocol can also run on broadcast links, such as Ethernet, Toke...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-4 20.1.3 NSAP Structure of IS-IS Routing Protocol I. Address structure AFI IDI High Order DSP SyStem ID SEL (1 octet) DSP IDP Area Address Figure 20-2 NSAP structure OSI adopts the address structure as shown in Figure ...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-5 z SEL NSAP selector (SEL or N-SEL) functions as the protocol identifier of an IP address. Different transmission protocols correspond to different identifiers. All the SELs of IP are 00. Because the address structure...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-8 Configuring IS-IS Route Metric Type z Setting IS-IS Link State Routing Cost z Configuring IS-IS Timers z Setting to Discard the LSPs with Checksum Errors z Setting LSP Refreshment Interval z Setting Lifetime of LSP z...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-9 Delete a NET undo network-entity network - entity - title The format of the network - entity - title argument is X…X.XXXXXXXXXXXX.XX, among which the first “X…X” is the area address, the twelve Xs in the middle is th...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-10 20.2.3 Enabling IS-IS on the Specified Interface After enabling IS-IS, you need to specify on which Interfaces the IS-IS will be run. Perform the following configuration in interface view. Table 20-3 Enable IS-IS on...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-11 Table 20-5 Set the router type Operation Command Set the router type is-level { level-1 | level-1-2 | level-2 } Restore the default router type undo is-level By default, the router type is level-1-2 . 20.2.6 Setting...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-12 Table 20-7 Import routes of other protocols Operation Command Import routes of other protocols import-route protocol [ cost value | type { external | internal } | [ level-1 | level-1-2 | level-2 ] | route-policy rou...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-14 By default, the system disables route summarization. 20.2.11 Setting to Generate Default Route In the IS-IS route domain, the Level-1 router only has the LSDB of the local area, so it can only generate the routes in...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-15 20.2.13 Configuring IS-IS Route Metric Type IS-IS routing protocol has two styles of route metric: z Narrow: The value of route metric ranges from 1 to 63. z Wide: The value of route metric ranges from 1 to 16,777,2...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-16 Perform the following configuration in interface view. Table 20-16 Set the Hello packet broadcast interval Operation Command Set Hello packet interval, measured in seconds. isis timer hello seconds [ level-1 | level...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-17 Table 20-18 Set the LSP packet transmission interval Operation Command Set LSP packet interval on the interface, measured in milliseconds. isis timer lsp time Restore the default LSP packet interval on the interface...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-18 By default, the number of the invalid Hello packets is set to 3. If this command does not specify Level-1 or Level-2, the system regard the invalid Hello packets are set for both Level-1 and Level-2 routers. 20.2.16...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-19 Table 20-22 Set IS-IS authentication password Operation Command Set authentication-mode password area-authentication-mode { simple | md5 } password [ ip | osi ] Delete authentication-mode password undo area-authenti...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-20 Table 20-24 Set the mesh group of the interface Operation Command Add an interface to a mesh group isis mesh-group { mesh - group - number | mesh-blocked } Remove the interface from the mesh group undo isis mesh-gro...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-21 Table 20-26 Set to discard the LSPs with checksum errors Operation Command Set to discard the LSP with checksum error ignore-lsp-checksum-error Set to ignore the LSP checksum error undo ignore-lsp-checksum-error By ...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-22 Perform the following configuration in IS-IS view. Table 20-29 Set Lifetime of LSP Operation Command Set lifetime of LSP timer lsp-max-age seconds Restore the default LSP lifetime undo timer lsp-max-age By default, ...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-23 By default, SPF calculation is not divided into slices but runs to the end once, which can also be implemented by setting the seconds argument to 0. After slice calculation is set, the routes that are not processed ...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-24 The silent-interface command is only used to restrain the IS-IS packets not to be sent on the interface, but the interface routes can still be sent from other interfaces. On a switch, this command can disable/enable...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-25 Display IS-IS SPF calculation log display isis spf-log Display IS-IS routing information display isis route Display IS-IS neighbor information display isis peer [ verbose ] Display mesh group information display isi...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-26 II. Network diagram Switch A Switch B Switch C 100.20.0.2/24 Vlan-interface 100 Switch D Vlan-interface 102 Vlan-interface 102 Vlan-interface 100 Vlan-interface 101 Vlan-interface 102 Vlan-interface 101 Vlan-interfa...

3Com Switch 8800 Configuration Guide Chapter 20 Integrated IS-IS Configuration 20-27 Configure Switch C [Switch C] isis [Switch C-isis] network-entity 86.0001.0000.0000.0007.00 [Switch C] interface vlan-interface 101 [Switch C-Vlan-interface101] ip address 200.10.0.2 255.255.255.0 [Switch C-Vlan-int...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-1 Chapter 21 BGP Configuration 21.1 BGP/MBGP Overview 21.1.1 Introduction to BGP Border gateway protocol (BGP) is an inter-autonomous system (inter-AS) dynamic route discovery protocol. Three early versions of BGP are BGP-1 (RFC110...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-2 BGP runs on a router in any of the following modes: z Internal BGP (IBGP) z External BGP (EBGP) The BGP is called IBGP when it runs in an AS and EBGP when it runs among different ASs. 21.1.2 BGP Message Types BGP is driven by mes...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-3 z A BGP speaker does not advertise the routes obtained from IBGP to its IBGP peers. z A BGP speaker advertises the routes obtained from IBGP to its IBGP peers (In the Switch 8800, BGP and IGP are asynchronous.) z Once the connect...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-4 z MP_REACH_NLRI: Multiprotocol Reachable NLRI, used to advertise reachable routes and the next hop information. z MP_UNREACH_NLRI: Multiprotocol Unreachable NLRI, used to delete unreachable routes. These two attributes are option...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-5 z Configuring application features of a BGP peer (group) z Configuring Route Filtering of a Peer (group) 3) BGP route configuration z Configuring Network Routes for BGP Distribution z Configuring the Interaction Between BGP and I...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-6 Perform the following configurations in BGP view. I. Creating a peer group A BGP peer must belong to a peer group. Before configuring a BGP peer, a peer group to which the peer belongs must be created first. Table 21-2 Create a p...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-7 Delete a peer undo peer peer - address If you want to add a peer to an IBGP peer group, this command cannot specify AS numbers. When a peer is added to an EBGP peer group and the peer group is defined with an AS number, all its m...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-8 higher than the timer command that is used to configure timers for the whole BGP peers. Perform the following configuration in BGP view. Table 21-7 Configure timer of a peer (group) Operation Command Configure keep-alive message ...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-9 Table 21-9 Configure to permit connections with EBGP peer groups on indirectly connected networks Operation Command Configure to permit connections with EBGP peer groups on indirectly connected networks peer group - name ebgp-max...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-10 After you use the peer default-route-advertise command, the local router will send a default route with the next hop as itself to the peer unconditionally, even if there is no default route in BGP routing table. IV. Configuring ...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-11 Table 21-14 Configure to send the community attributes to a peer group Operation Command Configure to send the community attributes to a peer group peer group - name advertise-community Configure not to send the community attrib...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-12 IX. Configuring BGP MD5 authentification password BGP uses TCP as its transport layer. For the sake of high security, you can configure MD5 authentication password when setting up a TCP connection. In other words, BGP MD5 authen...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-13 Operation Command Configure the egress route policy for a peer group peer group - name route-policy route - policy - name export Remove the egress route policy of a peer group undo peer group - name route-policy route - policy -...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-14 IV. Configuring route filtering policy based on address prefix list for a peer (group) Table 21-21 Configure route filtering policy based on address prefix list for a peer (group) Operation Command Configure the ingress route fi...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-15 Table 21-23 Import IGP routing information Operation Command Configure BGP to import routes of IGP protocol import-route protocol [ process - id ] [ med med ] [ route-policy route - policy - name ] Configure BGP not to import ro...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-16 Table 21-25 Configure BGP route summarization Operation Command Configure the summary automatic function of the subnet routes summary Cancel the summary automatic function of the subnet routes undo summary Configure local route ...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-17 II. Configuring to filter the routes advertised by the BGP Perform the following configuration in the BGP view. Table 21-27 Configure to filter the routes advertised by the BGP Operation Command Configure to filter the routes ad...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-18 suppressed. With time going, the penalty value will decrease according to power function, and when it decreases to certain specific threshold, the route suppression will be eliminated and the route will be re-advertised. Perform...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-19 The ebgp - value , ibgp - value and local - value arguments are in the range of 1 to 256. By default, the first two is 256 and the last one is 130. 21.2.11 Configuring BGP Timer After you established BGP connections between rout...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-21 21.2.15 Configuring BGP Route Reflector To ensure the interconnection between IBGP peers, it is necessary to establish a fully connected network. If there are many IBGP peers, large overhead is needed to establish a fully connec...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-22 By default, the route reflection between clients is allowed. If the clients are fully connected, for the purpose of overhead reduction, it is recommended to use the undo reflect between-clients command to disable the route refle...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-23 Table 21-37 Configure confederation_ID Operation Command Configure confederation_ID confederation id as - number Cancel confederation_ID undo confederation id By default, the confederation_ID is not configured. The configured co...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-24 By default, the configured confederation is consistent with RFC1965. 21.2.17 Clearing BGP Connection After the user changes BGP policy or protocol configuration, they must cut off the current connection so as to enable the new c...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-26 Operation Command Enable/Disable BGP Keepalive debugging [ undo ] debugging bgp keepalive [ receive | send ] [ verbose ] Enable/Disable BGP Open debugging [ undo ] debugging bgp open [ receive | send ] [ verbose ] Enable /Disabl...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-27 II. Network diagram AS200 AS100 AS1002 AS1001 AS1003 Ethernet 172.68.10.1 172.68.10.2 172.68.10.3 172.68.1.2 172.68.1.1 156.10.1.1 156.10.1.2 Switch A Switch B Switch C Switch D Switch E Figure 21-2 Network diagram for AS confed...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-28 Configure Switch C: [Switch C] bgp 1003 [Switch C-bgp] confederation id 100 [Switch C-bgp] confederation peer-as 1001 1002 [Switch C-bgp] group confed1001 external [Switch C-bgp] peer confed1001 as-number 1001 [Switch C-bgp] gro...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-29 [Switch A-Vlan-interface100] quit [Switch A] bgp 100 [Switch A-bgp] network 1.0.0.0 255.0.0.0 [Switch A-bgp] group ex external [Switch A-bgp] peer 192.1.1.2 group ex as-number 200 2) Configure Switch B: Configure VLAN 2: [Switch...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-30 Using the display bgp routing-table command, you can view BGP routing table on Switch B. Note: Switch B has known the existence of network 1.0.0.0. Using the display bgp routing-table command ,you can view the BGP routing table ...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-31 [Switch A-bgp] group ex193 external [Switch A-bgp] peer 193.1.1.2 group ex193 as-number 200 [Switch A-bgp] quit Configure the MED attribute of Switch A z Add ACL on Switch A, enable network 1.0.0.0. [Switch A] acl number 2000 [S...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-32 [Switch C-Vlan-interface3] ip address 193.1.1.2 255.255.255.0 [Switch C] interface vlan-interface 5 [Switch C-Vlan-interface5] ip address 195.1.1.2 255.255.255.0 [Switch C] ospf [Switch C-ospf-1] area 0 [Switch C-ospf-1-area-0.0...

3Com Switch 8800 Configuration Guide Chapter 21 BGP Configuration 21-33 z Define the route policy with the name of localpref, of those, the local preference matching ACL 2000 is set as 200, and that of not matching is set as 100. [Switch C] route-policy localpref permit node 10 [Switch C-route-polic...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-1 Chapter 22 IP Routing Policy Configuration 22.1 Introduction to IP Routing Policy When a router advertises or receives routing information, it possibly needs to implement some policies to filter the routing informat...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-2 II. ip-prefix The function of the ip-prefix is similar to that of the acl, but it is more flexible and easy for the users to understand. When the ip-prefix is applied to the routing information filtering, its matchi...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-5 Operation Command Cancel the matched next-hop of the routing information set by ACL undo if-match ip next-hop Cancel the matched next-hop of the routing information set by address prefix list undo if-match ip next-h...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-6 Operation Command Set the next-hop address of the routing information apply ip next-hop ip - address Cancel the next-hop address of the routing information undo apply ip next-hop Import the route to IS-IS level-1, l...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-8 22.2.4 Configuring a Community Attribute List In BGP, community attribute is optional and transitive. Some community attributes known globally are called standard community attributes. Some community attributes are ...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-9 Operation Command Cancel the setting for importing routes of other protocols undo import-route protocol By default, the routes discovered by other protocols will not be advertised. Note: In different routing protoco...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-10 Table 22-9 Configure to filter the advertised routes Operation Command Configure to filter the routes advertised by the protocol filter-policy { acl - number | ip-prefix ip - prefix - name } export [ protocol ] Can...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-11 22.4 Typical IP Routing Policy Configuration Example 22.4.1 Configuring to Filter the Received Routing Information I. Network requirements z Switch A communicates with Switch B, running OSPF protocol. The router ID...

3Com Switch 8800 Configuration Guide Chapter 22 IP Routing Policy Configuration 22-12 2) Configure Switch B: Configure the IP address of VLAN interface. [Switch B] interface vlan-interface 100 [Switch B-Vlan-interface100] ip address 10.0.0.2 255.0.0.0 Configure the access control list. [Switch B] ac...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-1 Chapter 23 IP Multicast Overview Note: An Ethernet switch functions as a router when it runs IP multicast protocol. A router that is referred to in the following represents a generalized router or a layer 3 Ethernet switch ru...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-2 over the network if there is a large number of users in need of this infomration. As the bandwidth would turn short, the unicast mode is incapable of massive transmission. II. Data transmission in broadcast mode In broadcast ...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-3 Ser ver Multicast Us er A User B Us er D Us er E User C Ser ver Multicast Us er A User B Us er D Us er E User C Figure 23-3 Data transmission in multicast mode Suppose the Users B, D, and E need the information, they need to ...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-4 z Occasional communication for training and cooperation z Data storage and finance (stock) operation z Point-to-multipoint data distribution With the increasing popularity of multimedia services over IP network, multicast is ...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-5 Table 23-1 Ranges and meanings of Class D addresses Class D address range Description 224.0.0.0 ∼ 224.0.0.255 Reserved multicast addresses (addresses of permanent groups). All but 224.0.0.0 can be allocated by routing protoco...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-6 Class D address range Description …… …… II. Ethernet Multicast MAC Addresses When a unicast IP packet is transmitted on the Ethernet, the destination MAC address is the MAC address of the receiver. However, for a multicast pa...

3Com Switch 8800 Configuration Guide Chapter 23 IP Multicast Overview 23-7 Server Multicast User D User E User C IGMP IGMP User A User B IGMP MBGP/MSDP PIM PIM AS1 AS2 Figure 23-5 Application positions of multicast-related protocols I. Multicast group management protocol Multicast groups use Interne...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-1 Chapter 24 IGMP Snooping Configuration 24.1 IGMP Snooping Overview 24.1.1 IGMP Snooping Principle IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on the Layer 2 Ether...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-2 Internet / Intranet Video stream VOD Server Layer 2 Ethernet Switch Video stream Multicast group member Non-multicast group member Multicast router Video stream Video stream Video stream Non-multicastgroup member Figure...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-3 II. Implement Layer 2 multicast with IGMP Snooping The Ethernet switch runs IGMP Snooping to listen to the IGMP messages and map the host and its ports to the corresponding multicast group address. To implement IGMP Sno...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-4 forwarding table, and meanwhile creates an IP multicast group and adds the port received the report message to it. If the corresponding MAC multicast group exists but does not contains the port received the report messa...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-5 Table 24-1 Enabling/Disabling IGMP Snooping Operation Command Enable/disable IGMP Snooping igmp-snooping { enable | disable } By default, IGMP Snooping is disabled. Caution: z Although layer 2 and layer 3 multicast prot...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-6 Table 24-3 Configuring the maximum response time Operation Command Configure the maximum response time igmp-snooping max-response-time seconds Restore the default setting undo IGMP-snooping max-response-time By default,...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-7 Caution: If IGMP snooping is not enabled on the VLAN (nor Layer 3 multicast), unknown multicast packets are broadcasted within the VLAN no matter whether this function is enabled or not. That is, to make unknown multica...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-8 To implement IGMP Snooping on the switch, you need to enable IGMP Snooping on the switch first. The switch is connected with the router via the router port, and connected with user PC through the non-router ports. II. N...

3Com Switch 8800 Configuration Guide Chapter 24 IGMP Snooping Configuration 24-9 z If IGMP Snooping is not enabled, input the igmp-snooping enable command in system view to enable IGMP Snooping. Then, use the same command in VLAN view to enable IGMP Snooping in the corresponding VLAN. 2) Multicast f...

3Com Switch 8800 Configuration Guide Chapter 25 Multicast VLAN Configuration 25-1 Chapter 25 Multicast VLAN Configuration 25.1 Multicast VLAN Overview Based on the current multicast on demand, when users in different VLANs request the service, multicast flow is duplicated in each VLAN and a great de...

3Com Switch 8800 Configuration Guide Chapter 25 Multicast VLAN Configuration 25-2 Item Command Description Add ports to corresponding VLANs port hybrid vlan vlan_id_list untagged Required To cancel the configurations, use the corresponding undo commands. Note: z A port can only belong to one multica...

3Com Switch 8800 Configuration Guide Chapter 25 Multicast VLAN Configuration 25-3 II. Network diagram PC 2 PC 2 PC 2 PC 2 PC 1 PC 1 PC 1 PC 1 Sw itch A PC 2 PC 2 PC 2 PC 1 PC 1 PC 1 PC 1 Sw itch A Works tation Works tation Sw itch B PC 2 PC 2 PC 2 PC 2 PC 1 PC 1 PC 1 PC 1 Sw itch A PC 2 PC 2 PC 2 PC...

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-1 Chapter 26 Common Multicast Configuration 26.1 Introduction to Common Multicast Configuration The multicast common configuration is for both the multicast group management protocol and the multicast routing protocol....

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-2 26.2.2 Configuring multicast route number limit Because too many multicast routes may exhaust the router memory, you need to limit the number of multicast routes. Perform the following configuration in system view. T...

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-3 26.3 Controlled Multicast Configuration 26.3.1 Controlled Multicast Overview The controlled multicast feature controls user’s authority to join multicast groups. This feature is based on ports: users must first pass ...

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-4 Caution: In local user view, before executing this command, you must configure user service type to LAN-ACCESS, which is the only one supported by controlled multicast at present. 26.3.3 Controlled Multicast Configur...

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-5 [SW8800-GigabitEthernet2/1/1] dot1x [SW8800-GigabitEthernet2/1/2] dot1x Configure the authentication mode on the controlled ports to port-based mode. [SW8800-GigabitEthernet2/1/1] dot1x –method portbased [SW8800-Giga...

3Com Switch 8800 Configuration Guide Chapter 26 Common Multicast Configuration 26-6 Operation Command Enable multicast kernel routing debugging debugging multicast kernel-routing Disable multicast kernel routing debugging undo debugging multicast kernel-routing The multicast routing tables can be la...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-1 Chapter 27 IGMP Configuration 27.1 IGMP Overview 27.1.1 Introduction to IGMP Internet Group Management Protocol (IGMP) is a protocol in the TCP/IP suite responsible for management of IP multicast members. It is used to establish...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-2 address is elected as the querier when there are multiple multicast routers on the same network segment. II. Leaving group mechanism In IGMP Version 1, hosts leave the multicast group quietly without informing the multicast rout...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-4 27.2.4 Configuring the Interval to Send IGMP Query Message Multicast routers send IGMP query messages to discover which multicast groups are present on attached networks. Multicast routers send query messages periodically to ref...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-5 I. Configuring interval for querying IGMP packets Table 27-4 Configuring interval for querying IGMP packets Operation Command Configure interval for querying IGMP packets igmp lastmember-queryinterval seconds Restore te default ...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-6 maximum response time. When any timer becomes 0, the host will send the membership report message of the multicast group. Setting the maximum response time reasonably can enable the host to respond to query messages quickly. In ...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-7 Configuring one interface of the router as multicast member can avoid such problem. When the interface receives IGMP query packet, the router will respond, thus ensuring that the network segment where the interface located can n...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-8 Table 27-10 Limiting multicast groups an interface can access Operation Command Limit the range of allowed multicast groups on current interface (in VLAN interface view) igmp group-policy acl-number [ 1 | 2 | port { interface_ty...

3Com Switch 8800 Configuration Guide Chapter 27 IGMP Configuration 27-9 27.3 Displaying and Debugging IGMP After the above configuration, execute display command in any view to display the running of IGMP configuration, and to verify the effect of the configuration. Execute debugging command in corr...

3Com Switch 8800 Configuration Guide Chapter 28 PIM-DM Configuration 28-1 Chapter 28 PIM-DM Configuration 28.1 PIM-DM Overview 28.1.1 Introduction to PIM-DM PIM-DM (Protocol Independent Multicast, Dense Mode) belongs to dense mode multicast routing protocols. PIM-DM is suitable for small networks. M...

3Com Switch 8800 Configuration Guide Chapter 28 PIM-DM Configuration 28-2 During this process, PIM-DM uses the RPF check and the existing unicast routing table to build a multicast forwarding tree rooted at the data source. When a packet arrives, the router will first judge the correctness of the pa...

3Com Switch 8800 Configuration Guide Chapter 28 PIM-DM Configuration 28-5 28.2.5 Configuring the Filtering of Multicast Source/Group You can set to filter the source (and group) address of multicast data packets via this command. When this feature is configured, the router filters not only multicast...

3Com Switch 8800 Configuration Guide Chapter 28 PIM-DM Configuration 28-6 Table 28-6 Configuring the maximum number of PIM neighbor on an interface Operation Command Configure the maximum number of PIM neighbor on an interface pim neighbor-limit limit Restore the limit of PIN neighbor to the default...

3Com Switch 8800 Configuration Guide Chapter 28 PIM-DM Configuration 28-8 Lans witch3 Lans witch1 RECEIVER 1 Lans witch2 VL AN10 VL AN11 VL AN12 Multicast Source RECEIVER 2 VL AN20 VL AN30 RECEIVER 1 Multicas t Source Lans witch3 Lans witch1 RECEIVER 1 Lans witch2 VL AN10 VL AN11 VL AN12 Multicast S...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-1 Chapter 29 PIM-SM Configuration 29.1 PIM-SM Overview 29.1.1 Introduction to PIM-SM PIM-SM (Protocol Independent Multicast, Sparse Mode) belongs to sparse mode multicast routing protocols. PIM-SM is mainly applicable to large-s...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-2 I. Build the RP shared tree (RPT) When hosts join a multicast group G, the leaf routers that directly connect with the hosts send IGMP messages to learn the receivers of multicast group G. In this way, the leaf routers calcula...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-3 It should be noted that one RP can serve multiple multicast groups or all multicast groups. Each multicast group can only be uniquely correspondent to one RP at a time rather than multiple RPs. II. Configuring BSRs The BSR is ...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-7 By default, no domain border is set. After this configuration is performed, a bootstrap message can not cross the border but other PIM packets can. This configuration can effectively divide a network into domains using differe...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-8 Perform the following configuration in PIM view. Table 29-7 Limiting the range of legal BSR Operation Command Set the limit legal BSR range bsr-policy acl-number Restore to the default setting undo bsr-policy For detailed info...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-9 Table 29-9 Displaying and debugging PIM-SM Operation Command Display the BSR information display pim bsr-info Display the RP information display pim rp-info [ group-address ] Enable the PIM-SM debugging debugging pim sm { all ...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-10 II. Networking diagram LSD LS_B LS_C LS_A Host A Host B VLAN11 VLAN12 VLAN10 VLAN10 VLAN11 VLAN12 VLAN12 VLAN10 VLAN11 LSD LS_B LS_C LS_A Host A Host B VLAN11 VLAN12 VLAN10 VLAN10 VLAN11 VLAN12 VLAN12 VLAN10 VLAN11 Figure 29-...

3Com Switch 8800 Configuration Guide Chapter 29 PIM-SM Configuration 29-11 [SW8800-vlan-interface12] quit 2) Configure LS_B Enable PIM-SM. [SW8800] multicast routing-enable [SW8800] vlan 10 [SW8800-vlan10] port ethernet 2/1/2 to ethernet 2/1/3 [SW8800-vlan10] quit [SW8800] interface vlan-interface 1...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-1 Chapter 30 MSDP Configuration 30.1 MSDP Overview 30.1.1 Introduction Multicast source discovery protocol (MSDP) is used to discover multicast source information in other PIM-SM domains. No ISP would like to forward multicast tra...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-2 30.1.2 Working Principle I. Indentifying multicast source and receiving multicast data As shown in Figure 30-1, the RPs of PIM-SM domains 1, 2 and 3 establish peer relationship between them. Domain 3 contains a group member. Sou...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-3 this case, the last hop router connected with the group member in domain 3 can choose whether to switch to SPT. II. Message forwarding and RPF check between MSDP peers As shown in Figure 30-2 MSDP working principles (II), Switch...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-4 case when the message is from Switch E to Switch F, it is received and forwarded to other peers. 6) If the SA message is sent from a MSDP peer in a different domain which is the next autonomous domain along the optimal path to t...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-7 30.2.6 Configuring the Maximum Number of SA caching To prevent DoS (Deny of Service) attacks, you can set the maximum number of SAs cached on the router. Perform the following configuration in MSDP view. Table 30-6 Configuring t...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-8 qualified (S, G) entries in the multicast routing table when creating SA messages, that is, to control the (S,G) entries imported from the multicast routing table to the domain. Please perform the following configurations in MSD...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-9 I. Using MSDP outbound filter MSDP outbound filter of are functional in: z Filtering off all the (S, G) entries z Forwarding only the SA messages permitted by the advanced ACL Please perform the following configurations in MSDP ...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-10 Table 30-12 Controlling the received source information Operation Command Filter off the SA messages from a specified MSDP peer peer peer-address sa-policy import Receive the SA messages permitted by the advanced ACL from a spe...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-12 30.3 Displaying and Debugging MSDP I. Displaying and Debugging MSDP After the above configuration, execute display commands in any view to display the running information of MSDP and to verify the effect of the configuration. E...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-13 30.4 MSDP Configuration Examples 30.4.1 Configuring Static RPF Peers I. Networking requirements In the following networking environment, four Switch 8800s all are in the PIM-SM domains with no BGP or MBGP running among them (No...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-14 [SwitchD-msdp] static-rpf-peer 10.10.1.1 rp-policy list-a Configure Switch B to be a static RPF peer of Switch D. [SwitchD] ip ip-prefix list-b permit 10.21.0.0 16 [SwitchD] msdp [SwitchD-msdp] peer 10.21.1.1 connect-interface ...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-15 II. Networking diagram SRC A SwitchE Loopback0 10.10.1.1 Loopback10 10.1.1.1 Vlan-interface20 10.10.3.1/24 Loopback10: Anycast RP address 10.1.1.1 Loopback0 : MSDP peer address & Originating-RP SwitchB SwitchD SwitchA SRC B...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-16 [SwitchB-LoopBack10] igmp enable [SwitchB-LoopBack10] pim sm [SwitchB-LoopBack10] quit Configure the IP address of Vlan-interface10 and enable IGMP and PIM-SM. [SwitchB] interface Vlan-interface10 [SwitchB-Vlan-interface10] ip ...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-17 [SwitchA] vlan 10 [SwitchA-vlan10] port ethernet1/1/2 [SwitchA-vlan10] quit [SwitchA] vlan 20 [SwitchA-vlan20] port ethernet1/1/3 [SwitchA-vlan20] quit Enable multicast. [SwitchA] multicast routing-enable Configure the IP addre...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-18 [SwitchA-ospf-1] quit Configure Switch B as its MSDP peer. [SwitchA] msdp [SwitchA-msdp] peer 10.10.1.1 connect-interface loopback 0 Configure Originating RP. [SwitchA-msdp] originating-rp loopback0 [SwitchA-msdp] quit Configur...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-19 II. Networking diagram SRC A Vlan-interface30 Vlan-interface20 Vlan-interface10 PIM-SM domain 4 Loopback10 10.1.1.1 Loopback0 10.25.1.1 Loopback0 10.25.1.2 Ethernet: 10.25.2.0 Loopback0 10.26.1.1 Loopback0 10.28.1.1 Loopback0 1...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-20 Enable multicast. [SwitchA] multicast routing-enable Configure the IP address of interface loopback0 and enable PIM-SM. [SwitchA] interface loopback0 [SwitchA-LoopBack0] ip address 10.25.1.1 255.255.255.255 [SwitchA-LoopBack0] ...

3Com Switch 8800 Configuration Guide Chapter 30 MSDP Configuration 30-21 [SwitchA-bgp] peer 10.27.1.2 group in [SwitchA-bgp] peer in connect-interface loopback0 [SwitchA-bgp] ipv4-family multicast [SwitchA-bgp-af-mul] peer in enable [SwitchA-bgp-af-mul] peer 10.26.1.2 group in [SwitchA-bgp-af-mul] p...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-1 Chapter 31 MBGP Multicast Extension Configuration 31.1 MBGP Multicast Extension Overview 31.1.1 Introduction At present, the most widely used inter-domain unicast routing protocol is BGP-4. Because the multic...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-2 I. MP_REACH_NLRI attribute MP_REACH_NLRI is an optional non-transitive attribute, and can be used to: z Send the routing information of a new reachable protocol. z Send the next hop information about the new ...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-3 31.2 MBGP Multicast Extension Configuration Basic configuration tasks of MBGP multicast extension include: z Enable MBGP multicast extension protocol z Specify the network routes notified by the MBGP multicas...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-4 Table 31-1 Enabling MBGP multicast extension protocol Operation Command Enter the MBGP multicast address family view ipv4-family multicast Remove the MBGP multicast address family view undo ipv4-family multic...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-5 31.2.5 Configuring Local Preference Different local preference can be configured as a reference of the MBGP route selection. When an MBGP router gets routes with the same destination but different next hops t...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-6 II. Enabling a peer (group) Please perform the following configurations in IPV4 multicast sub-address family view. Table 31-3 Enabling a peer (group) Operation Command Enable the specified peer (group) peer g...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-7 By default, there is no route reflector in an AS. It is generally unnecessary to configure this command for a peer group. This command is reserved for the occasional compatibility with the network equipments ...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-8 Table 31-9 Configuring IP-ACL-based route filtering policy for a peer (group) Operation Command Configure filteriing policy for incoming packets peer { group-name | peer-address } filter-policy acl-number imp...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-9 Operation Command Remove outgoing policy cnfiguration undo peer group-name ip-prefix prefixname export By default, a peer (group) does not perform route filtering based on the prefix list. 31.2.8 Configuring ...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-10 31.2.10 Configure MBGP Community Attributes Within the MBGP, a community is a set of destinations with some characteriestics in common. A community is not limited to a network or an AS has no physical bounda...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-11 31.2.14 Resetting BGP Connections After changing the MBGP policy or protocol configuration, users must disconnect the present BGP connection to make the new configuration effective. For details, refer to “BG...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-12 31.4 MBGP Multicast Extension Configuration Example I. Networking requirement This example describes how the administrator uses the MBGP attributes to manage route selection. All switches are configured with...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-13 [SwitchA-bgp-af-mul] network 1.0.0.0 [SwitchA-bgp-af-mul] network 2.0.0.0 [SwitchA-bgp-af-mul] quit Configure peers relationship. [SwitchA-bgp] bgp 100 [SwitchA-bgp] group a1 external [SwitchA-bgp] peer 192....

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-14 [SwitchB-vlan40] quit [SwitchB] interface vlan-interface 40 [SwitchB-Vlan-interface40] ip address 194.1.1.2 255.255.255.0 [SwitchB-Vlan-interface40] quit [SwitchB] ospf [SwitchB-ospf-1] area 0 [SwitchB-ospf-...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-15 [SwitchC-bgp] group c2 internal [SwitchC-bgp] peer 194.1.1.2 group c2 [SwitchC-bgp] peer 195.1.1.1 group c2 [SwitchC-bgp] ipv4-family multicast [SwitchC-bgp-af-mul] peer c1 enable [SwitchC-bgp-af-mul] peer c...

3Com Switch 8800 Configuration Guide Chapter 31 MBGP Multicast Extension Configuration 31-16 [SwitchD-ospf-1-area-0.0.0.0] quit [SwitchD-ospf-1] quit [SwitchD] bgp 200 [SwitchD-bgp] undo synchronization [SwitchD-bgp] group d1 internal [SwitchD-bgp] peer 194.1.1.2 group d1 [SwitchD-bgp] peer 195.1.1....

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-1 Chapter 32 ACL Configuration 32.1 ACL Overview 32.1.1 Introduction to ACL A series match rules must be configured to recognize the packets before they are filtered. Only when packets are identified, can the network take correspon...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-3 Table 32-1 Requirements for defining ACLs Item Number range Maximum number Number-based basic ACL 2000 to 2999 1000 Number-based advanced ACL 3000 to 3999 1000 Number-based L2 ACL 4000 to 4999 1000 Number-based user ACL 5000 to 5...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-5 start - time and end - time days - of - the - week define period time range together. start - time start - date and end - time end - date define absolute time range together. If a time range only defines the period time range, th...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-6 Table 32-6 Length of template elements Name Description Length in template cos 802.1p priority 1 byte dip Destination IP field in IP packet header 4 bytes dmac Destination MAC field in Ethernet packet header 6 bytes dport Destina...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-7 The fragment-flags field is 0 in length in flow template, so it can be ignored in calculating the total length of template elements. You can either use the default template or define a flow template based on your needs. Note: Def...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-8 Note: z If the time-range keyword is not selected, the ACL will be effective at any time after being activated. z You can define multiple rules for the ACL by using the rule command several times. z If the ACL is sent directly to...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-9 Table 32-9 Define advanced ACL Operation Command Enter advanced ACL view (system view) acl { number acl - number | name acl - name advanced } [ match-order { config | auto } ] Define an ACL rule (advanced ACL view) rule [ rule - ...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-10 32.2.4 Activating ACL After defining an ACL, you must activate it. This configuration activates those ACLs to filter or classify the packets forwarded by hardware. For interface cards, perform the following configurations in Eth...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-11 Display ACL configuration display acl config { all | acl - number | acl - name } Display ACL application information display acl running-packet-filter { all | interface { interface - name | interface - type interface - num } | v...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-12 III. Configuration procedure Note: Only the commands concerning ACL configuration are listed here. 1) Define the time range. Define the time range from 8:00 to 18:00. [SW8800] time-range 3Com 8:00 to 18:00 working-day 2) Define ...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-13 Note: Only the commands concerning ACL configuration are listed here. 1) Define the time range. Define the time range from 8:00 to 18:00. [SW8800] time-range 3Com 8:00 to 18:00 daily 2) Define the traffic with source IP 10.1.1.1...

3Com Switch 8800 Configuration Guide Chapter 32 ACL Configuration 32-14 1) Define the time range. Define the time range from 8:00 to 18:00. [SW8800] time-range 3Com 8:00 to 18:00 daily 2) Define a user-defined flow template [SW8800] flow-template user-defined slot 3 ethernet-protocol smac 0-0-0 dmac...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-1 Chapter 33 QoS Configuration 33.1 QoS Overview Conventional packet network treats all packets equally. Each switch/router processes all packets in First-in-First-out (FIFO) mode and then transfers them to the destination in the b...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-2 There are two key steps in packet filtering: Step 1: Classify the traffic at the port according to a specific rule. Step 2: Run filtering operation (deny or permit) to the identified traffic. By default, deny operation is selecte...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-3 Figure 33-2 Ethernet frame with 802.1Q tag header In the above figure, each host supporting 802.1Q protocol adds a 4-byte 802.1Q tag header after the source address in Ethernet header. The 802.1Q tag header contains a 2-byte TPID...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-5 Another merit for WRR algorithm: Though the queues are scheduled by turn, they are not configured with fixed time quantum. If a queue has no packets, the system immediately schedules the next queue. Then bandwidth resources can b...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-6 Item Command Description Apply flow template flow-template user-defined Optional. Refer to section 32.2.2 “Defining and Applying Flow Template”. Activate ACL packet-filter inbound Optional. Refer to section 32.2.4 “Activating ACL...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-7 Item Command Description Display QoS configuration display You can execute the display command in any view to check the QoS configuration. Refer to section 33.3.11 “Displaying and Debugging QoS Configuration”. For the common inte...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-8 II. Network diagram GE7/1/8 GE7/1/1 GE7/1/2 VLAN2, 1.0.0.1/8 PC1 GE7/1/8 GE7/1/1 GE7/1/2 VLAN2, 1.0.0.1/8 PC1 VLAN3, 2.0.0.1/8 PC2 VLAN3, 2.0.0.1/8 PC2 3.0.0.1/8 PC3 GE7/1/8 GE7/1/1 GE7/1/2 VLAN2, 1.0.0.1/8 PC1 GE7/1/8 GE7/1/1 GE...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-9 z Configuring Traffic Shaping z Configuring Traffic Priority z Configuring Traffic Redirection z Configuring Queue Scheduling z Configuring Traffic Mirroring z Configuring Port Mirroring z Configuring Traffic Statistics Before in...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-10 After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The switch first gets its local precedence and drop precedence according to the packet 802.1p priority value, by sear...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-11 Table 33-4 Configure default local precedence for port Operation Command Configure default local precedence for a port priority priority - level Restore the default local precedence for a port undo priority 33.3.2 Configuring Tr...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-12 Restore the default values of the Local-precedence + Conform-Level — > mapping table (conform level view) undo local-precedence The system provides default mapping tables. II. Configuring traffic policing The purpose of this ...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-13 Note: z The parameters of traffic policy must be the same if you configure the same tc-index for different traffic; otherwise the system prompts you for the wrong configuration. z For traffic policing configuration over the port...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-15 Remove traffic priority setting which applies IP group ACL and link group ACL at same time undo traffic-priority inbound ip-group { acl - number | acl - name } { rule rule link-group { acl - number | acl - name } [ rule rule ] |...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-16 Table 33-9 Configure traffic redirection Operation Command Configure traffic redirection which only applies IP group ACL traffic-redirect inbound ip-group { acl - number | acl - name } [ rule rule [ system-index index ] ] { cpu ...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-18 1) Tail drop mode: Different queues (red, yellow and red) are allocated with different drop thresholds. When these thresholds are exceeded respectively, excessive packets will be dropped. 2) WRED drop mode: Drop precedence is ta...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-19 II. Configuring drop algorithm Please perform the following configurations in Ethernet port view. Table 33-12 Configure drop algorithm Operation Command Configure drop algorithm drop-mode { tail-drop | wred } [ wred - index ] Re...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-22 Configure traffic statistics which only applies link group ACL traffic-statistic inbound link-group { acl - number | acl - name } [ rule rule [ system-index index ] ] [ tc-index index ] Remove traffic statistics setting which on...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-23 Operation Command Display traffic limit configuration of a port display qos-interface [ interface - name | interface - type interface - num ] traffic-limit Display queue scheduling configuration of a port display qos-interface [...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-24 33.4 Configuration Example 33.4.1 Traffic Shaping Configuration Example I. Network requirements Set traffic shaping for the outbound queue 2 at the port GE7/1/8: maximum rate 500kbps, burst size 12k bytes. II. Network diagram GE...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-25 II. Network diagram Ser ver E3/0/8 E3/0/2 E3/0/1 Ser ver GE3/1/8 GE3/1/2 GE3/1/1 Ser ver E3/0/8 E3/0/2 E3/0/1 Server GE3/1/8 GE3/1/2 GE3/1/1 Ser ver E3/0/8 E3/0/2 E3/0/1 Ser ver GE3/1/8 GE3/1/2 GE3/1/1 Ser ver E3/0/8 E3/0/2 E3/0...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-27 Re-allocate service parameters for the packets from PC1. [SW8800-GigabitEthernet7/1/1] traffic-priority inbound ip-group 2000 remark-policed-service dscp 63 33.4.4 Traffic Redirection Configuration Example I. Network requirement...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-28 33.4.5 Queue Scheduling Configuration Example I. Network requirements Modify the correspondence between 802.1p priority levels and local priority levels to change the mapping between 802.1p priority levels and queues. That is, p...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-29 2) Use WRR algorithm for the queues 0 to 5. Set the queues 0, 1 and 2 into WRR queue 1, with weight respectively as 20, 20 and 30; set the queues 3, 4 and 5 into WRR queue 2, with weight respectively as 20, 20 and 40. Use SP alg...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-30 III. Configuration procedure 1) Configure WRED parameters Configure parameters for WRED 0. [SW8800] wred 0 [SW8800-wred-0] queue 7 150 500 5 100 150 10 50 100 15 10 2) Set drop algorithm and thresholds. Define the port GE7/1/1 i...

3Com Switch 8800 Configuration Guide Chapter 33 QoS Configuration 33-31 3) Count the packets to PC1 and display the result using the display command. [SW8800-GigabitEthernet7/1/1] traffic-statistic inbound ip-group 2000 rule 0 [SW8800] display qos-interface GigabitEthernet7/1/1 traffic-statistic Gig...

3Com Switch 8800 Configuration Guide Chapter 34 Logon User ACL Control Configuration 34-1 Chapter 34 Logon User ACL Control Configuration 34.1 Overview As the Ethernet switches are used more and more widely over the networks, the security issue becomes even more important. The switches provide sever...

3Com Switch 8800 Configuration Guide Chapter 34 Logon User ACL Control Configuration 34-2 Operation Command Delete a sub-rule (basic ACL view) undo rule rule - id [ source ] [ fragment ] [ time-range ] Delete an ACL or all ACLs (system view) undo acl { number acl - number | name acl - name | all } E...

3Com Switch 8800 Configuration Guide Chapter 34 Logon User ACL Control Configuration 34-3 34.2.3 Configuration Example I. Network requirements Only the Telnet users from 10.110.100.52 and 10.110.100.46 can access the switch. II. Network diagram Internet Switch Figure 34-1 ACL configuration for Telne...

3Com Switch 8800 Configuration Guide Chapter 34 Logon User ACL Control Configuration 34-5 34.3.3 Configuration Example I. Network requirements Only SNMP users from 10.110.100.52 and 10.110.100.46 can access the switch. II. Network diagram Internet Switch Figure 34-2 ACL configuration for SNMP users ...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-1 Chapter 35 MPLS Architecture Note: A Switch 8800 running MPLS can serve as a router. Routers mentioned in this manual can be either a router in common sense, or a layer 3 Ethernet switch running MPLS. To enable MPLS function on t...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-2 35.2.2 Label I. Label definition A label is a locally significant short identifier with fixed length, which is used to identify a FEC. When reaching at MPLS network ingress, packets are divided into different FECs, based on their...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-4 In independent control mode, each LSR can send label mapping messages to the LSRs it connects to at anytime. In ordered control mode, a LSR can send label mapping messages to upstream only when it receives a specific label mappin...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-5 with labels, distributes label binding messages, establishes and maintains label forwarding table. The network consisting of LSRs is called MPLS domain. The LSR that is located at the edge of the domain is called edge LSR (LER, L...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-6 35.3.3 Establishing LSP Actually, the establishment of LSP refers to the process of binding FEC with the label, and then advertising this binding to the adjacent LSR on LSP. This process is implemented through LDP, which regulate...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-7 received the returned label map message from its downstream LSR. Usually, the upstream LSR selects the downstream LSR according to the information in its routing table. In Figure 35-4, LSRs on the way along LSP1 use the sequentia...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-8 As shown in Figure 35-5, LSP <R2 R21 R22 R3> is a tunnel between R2 and R3. II. Multi-layer label stack In MPLS, a packet may carry multiple labels which are in the form of stack. Operations to the stack follow the “last in...

3Com Switch 8800 Configuration Guide Chapter 35 MPLS Architecture 35-9 there are obvious advantages to implement VPN by MPLS. MPLS VPN connects the geographically different branches of private network by using LSP, forming a united network. MPLS VPN also supports the interconnection between differen...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-1 Chapter 36 MPLS Basic Capability Configuration 36.1 MPLS Basic Capability Overview Basic MPLS forwarding functions includes LDP session establishment and LSP path maintenance. The typical configuration procedure...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-2 Table 36-1 Define MPLS LSR ID Operation Command Define LSR ID mpls lsr-id ip-address Delete LSR ID undo mpls lsr-id By default, LSR ID is not defined. 36.2.2 Enabling MPLS and Entering MPLS View In system view, ...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-3 be the ingress node, an intermediate node (also called transit node), or the egress node. Note that an LSP operates normally only after all the LSRs along the LSP have been properly configured. The undo static-l...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-5 There is no default remote-peer. II. Configuring an address for the remote-peer You can specify the address of any LDP-enabled interface on the remote-peer or the address of the loopback interface on the LSR tha...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-7 36.3.5 Configuring LDP Loop Detection Control I. Enabling loop detection It is used to enable or disable the loop detection function during LDP signaling process. The loop detection includes maximum hop count mo...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-8 III. Setting the maximum hop count in path vector mode When path vector mode is adopted for loop detection, it is also necessary to specify the maximum value of LSP path. In this way, when one of the following c...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-10 V. Trapping MPLS This command is used to enable the trap function of MPLS during an LSP/LDP setup process. Perform the following configuration in system view. Table 36-20 Enable the trap function of MPLS Operat...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-11 II. LDP debugging commands Execute debugging command in user view for the debugging of various messages related to LDP Table 36-22 Enable/disable debugging for MPLS LDP Operation Command Enable debugging for MP...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-14 Configure LSR ID and enable MPLS and LDP. [SW8800] mpls lsr-id 100.10.1.1 [SW8800] mpls [SW8800-mpls] quit [SW8800] mpls ldp Configure IP address and enable LDP and MPLS for VLAN interface 202. [SW8800] vlan 20...

3Com Switch 8800 Configuration Guide Chapter 36 MPLS Basic Capability Configuration 36-15 36.6 Troubleshooting MPLS Configuration Symptom: Session cannot be setup with the peer after LDP is enabled on the interface. Troubleshooting: Cause 1: Loop detection configuration is different at the two ends....

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-1 Chapter 37 BGP/MPLS VPN Configuration 37.1 BGP/MPLS VPN Overview Traditional VPN, for which layer 2 tunneling protocols (L2TP, L2F and PPTP, and so on.) or layer 3 tunnel technology (IPSec, GRE and so on.) is adopted, is...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-2 37.1.1 BGP/MPLS VPN Model I. BGP/MPLS VPN model site 1 CE site 2 CE VPN1 site 3 CE VPN2 site 1 VPN1 site 2 VPN 2 CE PE P PE P P PE PE site 1 VPN1 site 2 VPN 2 CE PE P PE P P PE PE site 1 CE site 2 CE VPN1 site 3 CE VPN2 ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-3 VPNs. These disadvantages not only increase the network operating cost, but also bring relevant management and security issues. The nested VPN is a better solution. Its main idea is to transfer VPNv4 route between PE and...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-4 compatibility: It not only supports traditional IPv4 address family, but also supports other address families, for example, VPN-IPv4 address family. MP-BGP ensures that VPN private routes are only advertised within VPNs,...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-5 RD IPv4 address ... ERT1 ERT2 ... ERTn ERT: Export Route Targets Import Route Targets: ( IRT1, IRT2, ... ,IRTm ) MPLS VPN Route Figure 37-3 Route filtering through matching VPN Target attribute Note: The routes for other...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-6 LSPs must be set up between PEs for VPN data traffic forwarding with MPLS LSP. The PE router which receives packets from CE and create label protocol stack is called ingress LSR, while the BGP next hop (egress PE router)...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-8 As shown in Figure 37-5, the PEs directly connected with user devices are called UPE (underlayer PE or user-end PE); the devices in the core network connected with the UPEs are called SPE (superstratum PE or service-prov...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-9 interface, routing table, and sends VPN routing information over MPLS network using BGP/OSPF interaction. If supporting OSPF multi-instance, one router can run multiple OSPF procedures, which can be bound to different VP...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-11 I. Creating static route If you select static route mode for CE-PE route switching, you should then configure a private static route pointing to PE on CE. Perform the following configuration in the system view. Table 37...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-12 37.2.2 Configuring PE Router I. Configuring basic MPLS capability It includes configuring MPLS LSR ID, enable MPLS globally and enable MPLS in the corresponding VLAN interface view. See MPLS Basic Capacity Configure for...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-19 Caution: The configured value will not take effect unit the command reset ospf is executed. Step 3: Configure tag for imported VPN route (optional) If a VPN site links to multiple PEs, routing ring may present when the ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-21 By default, BGP neighbor is active while MBGP neighbor is inactive. You should activate MBGP neighbor in VPNv4 sub-address family view. Perform the following configuration in VPNv4 sub-address family view. Table 37-22 A...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-25 Operation Command Remove to advertise default route to the peer (group) undo peer { peer - address | group - name } default-route-advertise [ vpn-instance vpn - instancename ] Step 7: Configure BGP neighbor as the UPE o...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-26 II. Displaying IP routing table associated with vpn-instance After the above configuration, you can execute display command in any view to display the corresponding information in the IP routing tables related to vpn-in...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-27 V. Displaying MPLS l3vpn-lsp information Table 37-38 Display MPLS l3vpn-lsp information Operation Command Display MPLS l3vpn LSP information display mpls l3vpn-lsp [ verbose ] include text Display MPLS l3vpn LSP vpn-ins...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-28 II. Network diagram AS 65430 AS 65410 AS 65430 AS 65440 VPN-B CE4 PE1 RD(100:1) P VPN-A CE3 VLAN201 168.3.1.1/16 168.3.1.2/16 AS 65420 VPN- B CE2 VPN-A CE1 VLAN201 168.1.1.1/16 VLAN202 168.1.1.2/16 VLAN301 VLAN201 172.1...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-29 Note: The configuration on the other three CE switches (CE2 to CE4) is similar to that on CE1, the details are omitted here. 2) Configure PE1 Configure vpn-instance for VPN-A on PE1, as well as other associated attribut...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-30 [PE1] mpls lsr-id 202.100.1.1 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp [PE1] vlan 201 [PE1-vlan201] port gigabitethernet 2/1/1 [PE1-vlan201] quit [PE1] interface Vlan-interface 201 [PE1-Vlan-interface201] ip address 17...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-31 [P-LoopBack 0] quit [P] vlan 301 [P-vlan301] port gigabitethernet 3/1/1 [P-vlan301] quit [P] interface Vlan-interface 301 [P-Vlan-interface301] ip address 172.1.1.2 255.255.0.0 [P-Vlan-interface301] mpls [P-Vlan-interfa...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-32 [P-ospf-1] import-route direct 4) Configure PE3 Note: The configuration on PE3 is similar to that on PE1, you should pay more attention to VPN routing attribute setting on PE3 to get information about how to control adv...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-33 [PE3] mpls lsr-id 202.100.1.3 [PE3] mpls [PE3-mpls] quit [PE3] mpls ldp [PE3] vlan 201 [PE3-vlan201] interface gigabitethernet 2/1/1 [PE3-vlan201] quit [PE3] interface Vlan-interface 201 [PE3-Vlan-interface201] ip addre...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-34 z Two Switch 8800s serve as PE devices, which support MPLS feature. CE-1 and CE-2 are two mid-range switches; a Layer 2 switch serves as both CE-3 and CE-4, which is accessed directly with users. z Two PEs are configure...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-37 Note: The configuration on VPN-B is similar to that on VPN-A and only VPN-A configuration is detailed here. [PE2] ip vpn-instance vpna [PE2-vpn-vpna] route-distinguisher 100:1 [PE2-vpn-vpna] vpn-target 100:1 both [PE2-v...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-38 [PE2-bgp-af-vpn] peer 2 enable [PE2-bgp-af-vpn] peer 1.1.1.9 group 2 Globally enable MPLS. [PE2] mpls lsr-id 2.2.2.9 [PE2] mpls [PE2] mpls ldp Configure the public network interface and enable MPLS on it. [PE2] interfac...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-39 Note: Cautions and configuration limitations in hybrid networking: z For a trunk port on the common interface card, you can configure to redirect MPLS VPN of multiple VLANs to the same destination port. z In a VLAN you ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-40 37.4.3 Extranet Configuration Example I. Network requirements Company A and Company B are located at City A and City B respectively. Their headquarters is located at City C. They respectively own VPN1 and VPN2. In this ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-41 III. Configuration procedure Note: This configuration procedure has omitted configurations between PE and P, and configurations on CEs. For these details refer to the former example. 1) Configure PE-A: Configure VPN-ins...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-43 [PE-C-LoopBack0] ip address 20.1.1.1 255.255.255.255 [PE-C-LoopBack0] quit Configure MPLS basic capacity. [PE-C] mpls lsr-id 20.1.1.1 [PE-C] mpls [PE-C-mpls] quit [PE-C] mpls ldp Set up MP-IBGP adjacency between PEs to ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-44 [PE-B] vlan 301 [PE-B-vlan301] port gigabitethernet 3/1/1 [PE-B-vlan301] quit [PE-B] interface Vlan-interface 301 [PE-B-Vlan-interface301] ip binding vpn-instance vpn-instance3 [PE-B-Vlan-interface301] ip address 172.17...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-45 z Set up IBGP adjacency between PE1 and PE2 or PE1 and PE3, but not between PE2 and PE3, that is, VPN routing information cannot be exchanged between PE2 and PE3. z Create two VPN-instances on PE1, import VPN routes of ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-46 II. Network diagram Internet CE1 PE1 CE2 PE2 PE3 20.1.1.2 CE3 Hub Site Spoke Site Spoke Site VLAN201 172.18.0.1/16 VLAN201 172.16.0.1/16 VLAN202 172.17.0.1/16 VLAN201 172.15.0.1/16 Loopback0 22.1.1.1/32 Loopback0 33.1.1...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-50 [PE3] interface loopback 0 [PE3-LoopBack0] ip address 33.1.1.1 255.255.255.255 [PE3-LoopBack0] quit Set up MP-IBGP adjacency between PE3 and PE1 to exchange inter-PE VPN routing information and activate MP-IBGP peer in ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-51 II. Network diagram AS:100 CE1 PE1 CE2 PE2 PE3 Loopback0 1.1.1.1/32 Loopback0 2.2.2.2/32 Loopback0 3.3.3.3/32 VLAN211 172.11.11.2/24 VLAN211 172.11.11.1/24 VLAN212 172.21.21.2/24 VLAN212 172.21.21.1/24 AS:65002 AS:65001...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-53 Configure MPLS basic capacity, enable LDP on the interface connecting PE1 and PE2 and the interface connecting PE1 and PE3. [PE1] mpls lsr-id 1.1.1.1 [PE1] mpls [PE1-mpls] quit [PE1] mpls ldp [PE1] vlan 213 [PE1-vlan213...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-55 [PE2-bgp-af-vpn-instance] peer 172.22.22.2 group 17222 as-number 65002 [PE2-bgp-af-vpn] quit [PE2-bgp] quit Bind the interface connecting PE2 and CE1 to VPN-instance 2.1 and the interface connecting PE2 and CE2 to VPN-i...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-57 II. Network diagram P1 VLAN205 10.1.1.2/24 20.1.1.1/24 CE1 CE2 172.12.12.2/24 PC1 PC2 CE4 PC4 CE3 172.21.21.2/24 PC3 192.168.11.10 192.168.21.10 192.168.12.10 192.168.22.10 172.21.21.1/24 172.11.11.1/24 10.1.1.1/24 20.1...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-58 [PE1] vlan 205 [PE1-vlan205] port gigabitethernet 2/2/1 [PE1-vlan205] quit [PE1] interface Vlan-interface 205 [PE1-Vlan-interface205] mpls [PE1-Vlan-interface205] mpls ldp enable [PE1-Vlan-interface205] ip address 10.1....

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-59 [PE2] mpls [PE2-mpls] quit [PE2] mpls ldp Configure the VLAN interface connecting CE. [PE2] vlan 203 [PE2-vlan203] port gigabitethernet 2/1/1 [PE2-vlan203] quit [PE2] vlan 204 [PE2-vlan204] port gigabitethernet 2/1/2 [P...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-60 [PE2-bgp-af-vpn-instance] import-route direct [PE2-bgp-af-vpn-instance] group 172-12 external [PE2-bgp-af-vpn-instance] peer 172.12.12.2 group 172-12 as-number 65012 [PE2-bgp] ipv4-family vpn-instance vpnb [PE2-bgp-af-v...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-61 [P1-Vlan-interface206] mpls ldp enable [P1-Vlan-interface206] ip address 98.98.98.1 255.255.255.0 [P1-Vlan-interface206] quit Configure IBGP neighbors and EBGP neighbors. [P1] bgp 100 [P1-bgp] group 1 internal [P1-bgp] ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-62 III. Configuration procedure z Configuring OSPF on the MPLS backbone network z Configuring basic MPLS capability on the MPLS backbone network z Configuring a VPN instance on PEs. z Configuring MP-BGP 1) Configure OSPF a...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-63 [PE2] interface pos1/1/0 [PE2-Pos1/1/0] ip address 162.1.1.2 255.255.0.0 [PE2-Pos1/1/0] quit [PE2] ospf [PE2-ospf-1] area 0 [PE2-ospf-1-area-0.0.0.0] network 162.1.0.0 0.0.255.255 [PE2-ospf-1-area-0.0.0.0] network 202.2...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-65 3) Create a VPN instance on each PE, and bind the instance to the interface connected to the corresponding CE. Configure CE1 [CE1] interface ethernet 1 [CE1-Ethernet1] ip address 168.1.1.2 255.255.0.0 [CE1-Ethernet1] qu...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-66 Note: z Enable the exchanging of label-carried IPv4 route between the following routers: PE1 and ASBR-PE1, PE2 and ASBR-PE2, ASBR-PE1 and ASBR-PE2. z Make each ASBR-PE change the next hop to its own when it advertises r...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-69 networks at the city level into a single MPLS VPN will impose a high requirement in performance on the equipment on the entire network, in the event that the network topology size is large. However, the requirement in e...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-70 [SPE] mpls ldp Configure VPN-instance [SPE] ip vpn-instance vpn1 [SPE-vpn-vpn1] route-distinguisher 100:1 [SPE-vpn-vpn1] vpn-target 100:1 both Configure interfaces (So far as a PE router concerned, its LOOPBACK 0 interf...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-71 Configure the basic MPLS capability. [UPE] mpls lsr-id 1.0.0.1 [UPE] mpls [UPE-mpls] quit [UPE] mpls ldp Configure VPN-instance [UPE] ip vpn-instance vpn1 [UPE-vpn-vpn1] route-distinguisher 100:1 [UPE-vpn-vpn1] vpn-targ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-72 37.4.9 OSPF Multi-instance sham link Configuration Example I. Network requirements As shown in the following picture, a company connects to a WAN through OSPF multi-instance function of a router. OSPF is bind to VPN1.MP...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-73 [PE1] vlan 203 [PE1-vlan203] port gigabitethernet 2/1/3 [PE1-vlan203] quit [PE1] interface Vlan-interface 203 [PE1-Vlan-interface203] ip address 168.1.12.1 255.255.255.0 [PE1-Vlan-interface203] mpls [PE1-Vlan-interface2...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-74 [PE1-bgp-af-vpn-instance] import-route ospf-ase 100 [PE1-bgp-af-vpn-instance] import-route ospf-nssa 100 [PE1-bgp-af-vpn-instance] import-route direct [PE1-bgp-af-vpn-instance] undo synchronization Create and activate p...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-75 [PE2-Vlan-interface203] mpls ldp enable [PE2-Vlan-interface203] quit [PE2] vlan 201 [PE2-vlan201] port gigabitethernet 2/1/1 [PE2-vlan201] quit [PE2] interface Vlan-interface 201 [PE2-Vlan-interface201] ip binding vpn-i...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-76 [PE2-bgp-af-vpn] peer fc enable [PE2-bgp-af-vpn] peer fc advertise-community [PE2-bgp-af-vpn] peer 50.1.1.1 group fc Configure OSPF and import BGP and direct-connect route. [PE2] ospf 100 router-id 2.2.2.2 vpn-instance ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-77 [CE1-ospf-100-area-0.0.0.0] network 12.1.1.0 0.0.0.255 4) Configure CE2 Configure interface. [CE2] vlan 202 [CE2-vlan202] port gigabitethernet 2/1/2 [CE2-vlan202] quit [CE2] interface Vlan-interface 202 [CE2-Vlan-interf...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-78 II. Network diagram VPN3 VPN2 VPN1 AS50002 VPN1 AS50001 prov_pe1 5.5.5.5 cus t_pe1 6.6.6.6 CE1 CE2 CE3 CE4 VPN2 VPN1 AS50003 CE5 VPN3 CE6 CE7 cus t_pe2 7.7.7.7 prov_pe2 4.4.4.4 Pos1/1/0: 10.1.1.1/8 Pos1/1/0: 10.1.1.2/8 ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-79 [prov_pe1-ospf-area-0.0.0.0] network 10.0.0.0 0.255.255.255 Configure prov_pe2 <SW8800> system-view [SW8800] sysname prov_pe2 [prov_pe2] interface LoopBack0 [prov_pe2-LoopBack0] ip address 4.4.4.4 255.255.255.255 ...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-81 [prov_pe2-Pos3/1/0] ip binding vpn-instance customer_vpn [prov_pe2-Pos3/1/0] link-protocol ppp [prov_pe2-Pos3/1/0] ip address 2.1.1.2 255.0.0.0 [prov_pe2-Pos3/1/0] mpls [prov_pe2-Pos3/1/0] quit Configure cust_pe1 <SW...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-82 [prov_pe1-bgp-af-vpn] peer ebgp vpn-instance customer_vpn enable [prov_pe1-bgp-af-vpn] peer 1.1.1.1 vpn-instance customer_vpn group ebgp [prov_pe1-bgp-af-vpn] peer 1.1.1.1 vpn-instance customer_vpn route-policy comm imp...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-84 II. Network diagram MPLS Network PE vpn2 vpn1 Multi-VPN-Instance CE ospf 100 vpn1 ospf 300 vpn2 VLAN201 10.1.1.2/24 VLAN204 20.2.1.2/24 VLAN202 10.2.1.2/24 VLAN203 20.1.1.2/24 MPLS Network PE vpn2 vpn1 Multi-VPN-Instanc...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-85 [CE] vlan 203 [CE-vlan203] port gigabitethernet 2/1/3 [CE-vlan203] quit [CE] interface Vlan-interface 203 [CE-Vlan-interface203] ip binding vpn-instance vpn2 [CE-Vlan-interface203] ip address 20.1.1.2 255.255.255.0 Conf...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-86 II. Network diagram PC2 172.16.0.1/16 192.168.1.1/24 192.168.1.2/24 Ethernet2/1/0 20.1.1.2/24 Ethernet2/1/0 172.16.0.2/16 Ethernet1/1/0 20.1.1.1/24 CE2 PE1 PE2 PC3 172.19.0.1/16 Ethernet2/1/0 172.19.0.2/ Ethernet1/1/0 2...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-87 [PE2-LoopBack0] ip address 2.2.2.9 32 [PE2-LoopBack0] quit [PE2] interface Ethernet1/1/0 [PE2-Ethernet1/1/0] ip address 192.168.1.2 24 [PE2-Ethernet1/1/0] quit [PE2] ospf [PE2-ospf-1] area 0 [PE2-ospf-1-area-0.0.0.0] ne...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-89 [CE3-Ethernet1/1/0] quit [CE3] bgp 65430 [CE3-bgp] import-route direct [CE3-bgp] group 10 external [CE3-bgp] peer 20.3.1.2 group 10 as-number 100 [CE3-bgp] quit Configure PE1: set up IBGP peer relation with PE2 in BGP-V...

3Com Switch 8800 Configuration Guide Chapter 37 BGP/MPLS VPN Configuration 37-90 [PE2-bgp] quit Configure multi-role host feature. Configure a default route pointing to PE1 on CE2. [CE2] ip route-static 0.0.0.0 0.0.0.0 20.1.1.2 If routing protocol is used between CE2 and PE1, to avoid routing loop, ...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-1 Chapter 38 MSTP Region-configuration 38.1 Introduction to MSTP MSTP stands for Multiple Spanning Tree Protocol, which is compatible with Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). STP is not fas...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-2 C A B BPDU BPDU BPDU CIST: common andinternal spanning tree MSTI: multiple spanningtree instance CST: common spanning tree Area A0VLAN 1 mapped to Instance 1VLAN 2 mapped to Instance 2Other VLANs mapped to CIST D Area B0V...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-3 IV. CST Common Spanning Tree (CST): a LAN has only one CST. CST connects the spanning trees of all MST regions. Regard every MST region as a “switch”, and the CST is generated by the computing of “switches” through STP/RS...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-5 Figure 38-3 BPDU packet format Figure 38-4 MSTI information format of the last part in BPDU packets Besides field root bridge priority, root path cost, local bridge priority and port priority, the field flags which takes ...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-6 7 6 5 4 3 2 1 0 Tc Proposal Lear ning For war ding Agreem ent Tc Ack 7 6 5 4 3 2 1 0 Tc Proposal Lear ning For war ding Agreem ent Tc Ack Figure 38-5 Meaning of 1-byte Flags in BPDU packets The second and third bits toget...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-7 Switch A Switch C Switch B CP2 BP2 CP1 BP1 AP2 AP1 LAN Figure 38-6 Designated bridge and designated port For a switch, the designated bridge is a switch in charge of forwarding BPDU to the local switch via a port called t...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-9 BPDU for every port: substituting the root ID with the root ID in the configuration BPDU of the root port, the cost of path to root with the value made by the root path cost plus the path cost corresponding to the root po...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-10 CP2 receives from the BP2 of Switch B the configuration BPDU {1, 0, 1, BP2} that has not been updated and then the updating process is launched. The configuration BPDU is updated as {1, 0, 1, BP2}. CP1 receives the confi...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-11 configuration BPDUs besides the first four items will make modifications according to certain rules. The basic calculation process is described below: In addition, with identical priority, the path cost of an aggregation...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-12 38.2 Configuring MSTP MSTP configuration includes: z Configuring the MST Region for a Switch z Specifying the Switch as a Primary or a Secondary Root bridge z Configuring the MSTP Running Mode z Configuring the Bridge Pr...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-13 Setting the Timeout Factor of a Specific Bridge z Configuring the Max Transmission Speed on a Port z Configuring a Port as an Edge Port or Non-edge Port z Configuring the Path Cost of a Port z STP Path Cost Calculation S...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-14 Table 38-1 Enter MST region view Operation Command Enter MST region view (from system view) stp region-configuration Restore the default settings of MST region undo stp region-configuration II. Configuring parameters for...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-15 III. Activating the MST region configuration,and exit the MST region view Perform the following configuration in MST region view. Table 38-3 Activate the MST region configuration and exit the MST region view Operation Co...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-16 If the primary root is down or powered off, the secondary root will take its place, unless you configure a new primary root. Of two or more configured secondary root bridges, MSTP selects the one with the smallest MAC ad...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-17 Restore the default MSTP running mode undo stp mode Generally, if there is a STP switch on the switching network, the port connected to it will automatically transit from MSTP mode to STP-compatible mode. But the port ca...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-18 discards the configuration BPDU with 0 hops left. This makes it impossible for the switch beyond the max hops to take part in the spanning tree calculation, thereby limiting the scale of the MST region. You can use the f...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-19 Note: The stp bridge-diameter command configures the switching network diameter and determines the three MSTP time parameters (Hello Time, Forward Delay, and Max Age) accordingly. 38.2.7 Configuring the Time Parameters o...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-20 Caution: The Forward Delay configured on a switch depends on the switching network diameter. Generally, the Forward Delay is supposed to be longer when the network diameter is longer. Note that too short a Forward Delay ...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-21 38.2.8 Setting the Timeout Factor of a Specific Bridge A switch transmits hello packet regularly to the adjacent bridges to check if there is link failure. Generally, if the switch does not receive the STP packets from t...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-22 II. Configuration in Ethernet port view Perform the following configuration in Ethernet port view. Table 38-12 Configure the max transmission speed on a port Operation Command Configure the max transmission speed on a po...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-23 Table 38-14 Configure a port as an edge port or a non-edge port Operation Command Configure a port as an edge port. stp edged-port enable Configure a port as a non-edge port. stp edged-port disable Restore the default se...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-24 I. Configuration in system view Perform the following configuration in system view. Table 38-15 Configure the path cost of a port Operation Command Configure the path cost of a port. stp interface interface - list [ inst...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-25 The actual rate counts. 2) Calculating the path cost z Full-duplex and non-aggregation port at a rate less than 1 GE Path cost = [200,000,000 / (rate × 10)] – 1 z Other ports Path cost = 200,000,000 / (rate × 10) II. DOT...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-26 The rate of the primary port in an aggregation group is determined by the sum of the port rates in this group. No calculation is performed for secondary port. z Non-aggregation port The actual rate counts, but the rate i...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-28 Operation Command Configure MSTP to automatically detect if the port is directly connected with the point-to-point link. stp interface interface - list point-to-point auto Configure MSTP to automatically detect if the po...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-29 By default, the parameter is configured as auto . 38.2.15 Configuring the mCheck Variable of a Port The port of an MSTP switch operates in either STP-compatible or MSTP mode. Suppose a port of an MSTP switch on a switchi...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-30 You can configure mCheck variable on a port with either of the earlier-mentioned measures. Note that the command can be used only if the switch runs MSTP. The command does not make any sense when the switch runs in STP-c...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-31 Note: For the loop protection-enabled port, if the port participates in STP calculation, all the instances of the port will be always set to be in discarding state regardless of the port role. IV. TC-protection As a gene...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-32 Operation Command Configure TC protection of the switch (from system view) stp tc-protection enable Disable TC protection (from system view) stp tc-protection disable By default, only the protection from TC-BPDU packet a...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-33 Table 38-27 Enable/Disable MSTP on a device Operation Command Enable MSTP on a device. stp enable Disable MSTP on a device. stp disable Restore the disable state of MSTP, as defaulted. undo stp Only if MSTP has been enab...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-35 Table 38-31 Enable/Disable MSTP on a port Operation Command Enable MSTP on a port. stp enable Disable MSTP on a port. stp disable You can enable/disable MSTP on a port with either of the earlier-mentioned measures. Note ...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-36 Operation Command Enable STP global error or event debugging debugging stp { global-error | global-event } Disable STP global error or event debugging undo debugging stp { global-error | global-event } 38.4 Typical MSTP ...

3Com Switch 8800 Configuration Guide Chapter 38 MSTP Region-configuration 38-38 MST region [SW8800] stp region-configuration [SW8800-mst-region] region-name example [SW8800-mst-region] instance 1 vlan 10 [SW8800-mst-region] instance 3 vlan 30 [SW8800-mst-region] instance 4 vlan 40 [SW8800-mst-region...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-2 is to be encapsulated in the packets of other AAA upper layer protocols (e.g. RADIUS) so as to go through the complicated network to reach the Authentication Server. Such procedure is called EAP Relay. There are two types of p...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-3 802.1x provides an implementation solution of user ID authentication. However, 802.1x itself is not enough to implement the scheme. The administrator of the access device should configure the AAA scheme by selecting RADIUS or ...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-4 Checking the Users that Log on the Switch via Proxy z Setting Supplicant Number on a Port z Setting the Authentication in DHCP Environment z Configuring Authentication Method for 802.1x User z Enabling/Disabling Guest VLAN z S...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-5 Configuring 802.1x Timers z Enabling/Disabling quiet-period Timer Among the above tasks, the first one is compulsory, otherwise 802.1x will not take any effect. The other tasks are optional. You can perform the configurations ...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-6 auto (automatic identification mode, which is also called protocol control mode). That is, the initial state of the port is unauthorized. It only permits EAPoL packets receiving/transmitting and does not permit the user to acc...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-7 39.2.4 Checking the Users that Log on the Switch via Proxy The following commands are used for checking the users that log on the switch via proxy. Perform the following configuration in system view or Ethernet port view. Tabl...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-8 Perform the following configuration in system view. Table 39-6 Set the Authentication in DHCP Environment Operation Command Disable the switch to trigger the user ID authentication over the users who configure static IP addres...

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-13 II. Network diagram Supplicant Authentication Servers (RADIUS Server Cluster IP Address: 10.11.1.1 10.11.1.2) Internet Authenticator Switch Supplicant Authentication Servers (RADIUS Server Cluster IP Address: 10.11.1.1 10.11....

3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration 39-14 [SW8800-radius-radius1] primary accounting 10.11.1.2 Set the IP address of the secondary authentication/accounting RADIUS servers. [SW8800-radius-radius1] secondary authentication 10.11.1.2 [SW8800-radius-radius1] secondary a...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-1 Chapter 40 AAA and RADIUS/TACACS+ Protocol Configuration 40.1 AAA and RADIUS/TACACS+ Protocol Overview 40.1.1 AAA Overview Authentication, Authorization and Accounting (AAA) provide a uniform framewor...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-2 in PSTN environment or Ethernet switch with access function in Ethernet environment), NAS, namely RADIUS client end, will transmit user AAA request to the RADIUS server. RADIUS server has a user datab...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-3 Table 40-1 TACACS+ vs. RADIUS TACACS+ RADIUS Adopts TCP, providing more reliable network transmission. Adopts UDP. Encrypts the entire packet except for the standard TACACS+ header. Encrypts only the ...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-4 z The TACACS server sends back an authentication response, requesting for the login password. Upon receiving the response, the TACACS client requests the user for the login password. z After receiving...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-5 User TACACS Client TACACSServer User logs on Authentication start packet Authentication response packet, requesting username The user inputs username Authentication continuance packet, sending usernam...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-6 Figure 40-3 Network diagram for using RADIUS to authenticate 40.2 AAA Configuration The following sections describe AAA configuration tasks. z Creating/Deleting an ISP Domain z Configuring Relevant At...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-7 Switch 8800 ISP domain view, you can configure a complete set of exclusive ISP domain attributes on a per-ISP domain basis, which includes AAA policy ( RADIUS scheme applied etc.) For the Switch 8800,...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-9 Once this function is enabled on the switch, users can locate the self-service server through the following operations: z Select "Change user password" on the 802.1x client. z After the client...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-10 40.2.5 Setting the Attributes of a Local User The attributes of a local user include its password display mode, state, service type and some other settings. I. Setting the password display mode Perfo...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-11 Operation Command Set the priority of the specified user level level Restore the default priority of the specified user undo level Configure the attributes of lan-access users attribute { ip ip - add...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-12 Table 40-9 Configure VLAN delivering mode Operation Command Configure the VLAN delivering mode to be of string type private-group-id mode standard Revert to the default VLAN delivering mode. undo pri...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-13 Among the above tasks, creating RADIUS scheme and setting IP address of RADIUS server are required, while other takes are optional and can be performed as your requirements. 40.3.1 Creating/Deleting ...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-14 Table 40-11 Set IP Address and Port Number of RADIUS Server Operation Command Set IP address and port number of primary RADIUS authentication/authorization server. primary authentication ip - address...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-15 4 RADIUS servers, or specify one of the two servers as primary authentication/authorization server and secondary accounting server and the other one as secondary authentication/authorization server a...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-16 Set RADIUS accounting packet encryption key key accounting string Restore the default RADIUS accounting packet encryption key undo key accounting By default, the encryption keys of RADIUS authenticat...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-17 By default, RADIUS request packet will be retransmitted up to three times. 40.3.6 Enabling the Selection Of Radius Accounting Option If no RADIUS server is available or if RADIUS accounting server fa...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-18 Table 40-17 Recommended real-time accounting intervals for different number of users Number of users Real-time accounting interval in minutes 1 to 99 3 100 to 499 6 500 to 999 12 ≥ 1000 ≥ 15 By defau...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-19 40.3.9 Enabling/Disabling Stopping Accounting Request Buffer Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both th...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-20 40.3.11 Setting the Supported Type of RADIUS Server The Switch 8800 supports the standard RADIUS protocol and the extended RADIUS service platforms, such as IP Hotel, 201+ and Portal. You can use the...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-21 40.3.13 Setting the Username Format Transmitted to RADIUS Server As mentioned above, the supplicants are generally named in userid@isp-name format. The part following “@” is the ISP domain name. The ...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-22 By default, the default data unit is byte and the default data packet unit is one packet. 40.3.15 Creating/Deleting a Local RADIUS authentication Server RADIUS service, which adopts authentication/au...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-24 40.4.2 Configuring TACACS+ Authentication Servers Perform the following configuration in TACACS+ view. Table 40-27 Configure TACACS+ authentication servers Operation Command Configure the TACACS+ pri...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-25 Note: If only authentication and accounting servers are configured and no authorization server is configured, both authentication and accounting can be performed normally for the ftp, telnet, and ssh...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-26 Table 40-30 Configure stop-accounting packet retransmission Operation Command Enable stop-accounting packet retransmission and set the allowed maximum number of transmission attempts retry stop-accou...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-27 Table 40-32 Set a key for securing the communication with the TACACS+ server Operation Command Configure a key for securing the communication with the accounting, authorization or authentication serv...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-28 40.4.9 Setting Timers Regarding TACACS Server I. Setting the response timeout timer Since TACACS+ is implemented on the basis of TCP, server response timeout or TCP timeout may terminate the connecti...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-29 Table 40-37 Set a real-time accounting interval Operation Command Set a real-time accounting interval timer realtime-accounting minutes Restore the default real-time accounting interval undo timer re...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-30 Operation Command Display related information of user’s connection display connection { access-type { dot1x | gcm } | domain isp - name | interface interface - type interface - number | ip ip - addre...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-31 Operation Command Enable debugging of local RADIUS authentication server debugging local-server { all | error | event | packet } Disable debugging of local RADIUS authentication server undo debugging...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-32 II. Network Topology Authentication Servers ( IP address:10.110.91.164 ) Internet Switch telnet user Internet Figure 40-4 Network diagram for the remote RADIUS authentication of Telnet users III. Con...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-33 40.6.2 Configuring Authentication at Local RADIUS Authentication Server Local RADIUS authentication of Telnet/FTP users is similar to the remote RADIUS authentication described in section 40.6.1 . Bu...

3Com Switch 8800 Configuration Guide Chapter 40 AAA and RADIUS/TACACS+ Protocol Con figuration 40-34 III. Configuration procedure Configure the Telnet user. Here it is omitted. Note: The configuration of the FTP and Telnet users can refer to User Interface Configuration of Getting Started Operation ...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-1 Chapter 41 VRRP Configuration 41.1 Introduction to VRRP Virtual Router Redundancy Protocol (VRRP) is a fault-tolerant protocol. In general, a default route (for example, 10.100.10.1 as shown in the following internetworking diag...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-2 Ethernet Master Host 1 Host 2 Host 3 10.100.10.7 10.100.10.8 10.100.10.9 Virtual IP address10.100.10.1 Network Backup Virtual IP address10.100.10.1 Actual IP address10.100.10.2 Actual IP address10.100.10.3 Figure 41-2 Network di...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-3 41.2.1 Enabling/Disabling the Function to Ping the Virtual IP Address This operation enables or disables the function to ping the virtual IP address of the virtual router. The standard protocol of VRRP does not support the ping ...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-5 The virtual - address can be an unused address in the network segment where the virtual router resides, or the IP address of an interface in the virtual router. If the IP address is of the switch in the virtual router, it can al...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-6 is higher than that of the current Master switch. Accordingly, the former Master switch will become the Backup switch. Together with preemption settings, a delay can also be set. In this way, a Backup will wait for a period of t...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-7 to authenticate the VRRP packets. In this case an authentication key not exceeding 8 characters should be configured. Those packets failing to pass the authentication will be discarded and a trap packet will be sent to the netwo...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-8 Table 41-8 Configure virtual router timer Operation Command Configure virtual router timer vrrp vrid virtual - router - ID timer advertise adver - interval Clear virtual router timer undo vrrp vrid virtual - router - ID timer ad...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-9 41.3 Displaying and debugging VRRP After the above configuration, execute display command in any view to display the running of the VRRP configuration, and to verify the configuration. Execute debugging command in user view to d...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-10 II. Networking diagram Virt ual IP address: 202.38.1 60.111 Switch_A Host A 202.38. 160.3 VLAN-interf ace 2: 202 .38.160 .1 In te rne t Sw itch_B VLAN-int erfa ce2 : 202.3 8.160.2 V LAN-interface3: 10.100 .1 0.2 Host B 10.2 .3....

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-11 [LSW-B-vlan-interface2] ip address 202.38.160.2 255.255.255.0 [LSW-B-vlan-interface2] quit Configure VRRP. [LSW-B] vrrp ping-enable [LSW-B] interface vlan 2 [LSW-B-vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 [LSW-B-v...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-12 [LSW_A-vlan-interface2] vrrp vrid 1 virtual-ip 202.38.160.111 Set the priority for the virtual router. [LSW_A-vlan-interface2] vrrp vrid 1 priority 110 Set the authentication key for the virtual router. [LSW_A-vlan-interface2] ...

3Com Switch 8800 Configuration Guide Chapter 41 VRRP Configuration 41-14 41.5 Troubleshooting VRRP As the configuration of VRRP is not very complicated, almost all the malfunctions can be found through viewing the configuration and debugging information. Here are some possible failures you might mee...

3Com Switch 8800 Configuration Guide Chapter 42 HA Configuration 42-1 Chapter 42 HA Configuration 42.1 Introduction to HA HA (high availability) is to achieve a high availability of the system and to recover the system as soon as possible in the event of Fabric failures so as to shorten the MTBF (Me...

3Com Switch 8800 Configuration Guide Chapter 42 HA Configuration 42-2 z Configuring the Load Mode of the Fabric and Slave Board 42.2.1 Restarting the Slave System Manually In the environment in which the slave system is available, the user can restart the slave system manually. Perform the following...

3Com Switch 8800 Configuration Guide Chapter 42 HA Configuration 42-3 Table 42-3 Enable/Disable automatic synchronization Operation Command Enable automatic synchronization slave auto-update config Disable automatic synchronization undo slave auto-update config By default, the automatic synchronizat...

3Com Switch 8800 Configuration Guide Chapter 42 HA Configuration 42-4 Caution: When a single Fabric is in position, the load-balance mode is not effective and the Fabric changes to the load-single mode automatically. 42.3 Displaying and Debugging HA Configuration After the above configuration, execu...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-1 Chapter 43 File System Management 43.1 File System Configuration 43.1.1 File System Overview The Ethernet switch provides a file system module for user’s efficient management over the storage devices such as flash memory. Th...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-3 Caution: When you use the delete command without the unreserved option to delete a file, the file is in fact saved in the recycle bin and still occupies some of the storage space. So, the frequent uses of this command may re...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-4 43.1.5 Setting the Prompt Mode of the File System The following command can be used for setting the prompt mode of the current file system. Perform the following configuration in system view. Table 43-4 File system operation...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-6 43.2.4 Erasing Configuration Files from Flash Memory The reset saved-configuration command can be used to erase configuration files from Flash Memory. The system will use the default configuration parameters for initializati...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-7 Note: The system supports FTP services over VPN. 43.3.1 FTP Overview FTP (File Transfer Protocol) is a universal method for transmitting files on the Internet and IP networks. In this method, files are copied from one system...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-9 authorized users. You can use the following commands to configure FTP server authentication and authorization. The authorization information of FTP server includes the top working directory provided for FTP clients. Perform ...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-10 43.3.5 Displaying and Debugging FTP Server After the above configuration, execute display command in any view to display the running of the FTP Server configuration, and to verify the effect of the configuration. Table 43-1...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-12 Use the put command to upload the vrpcfg.cfg to the FTP server. [ftp] put vrpcfg.cfg Use the get command to download the switch.app from the FTP server to the Flash directory on the FTP server. [ftp] get switch.app Use the ...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-13 [SW8800] ftp server enable [SW8800] local-user switch [SW8800-luser-switch] service-type ftp ftp-directory flash: [SW8800-luser-switch] password simple hello 2) Run FTP client on the PC and establish FTP connection. Upload ...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-14 Switch PC Network Switch Switch PC Network Figure 43-4 TFTP configuration Table 43-17 lists the configuration of the switch as TFTP client. Table 43-17 Configuration of the switch as TFTP client Device Configuration Default...

3Com Switch 8800 Configuration Guide Chapter 43 File System Management 43-15 43.4.3 Uploading Files by Means of TFTP To upload a file, the client sends a request to the TFTP server and then transmits data to it and receives the acknowledgement from it. You can use the following commands to upload fi...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-1 Chapter 44 MAC Address Table Management 44.1 MAC Address Table Management Overview An Ethernet Switch maintains a MAC address table for fast forwarding packets. A table entry includes the MAC address of a device and th...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-2 You can configure (add or modify) the MAC address entries manually according to the actual networking environment. The entries can be static ones or dynamic ones. 44.2 MAC Address Table Management Configuration The fol...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-3 If aging time is set too short, the Ethernet switch may delete valid MAC address table. You can use the following commands to set the MAC address aging time for the system. Perform the following configuration in system...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-4 44.3.1 Maximum MAC Address Number Learned by a Port and Forwarding Option Configuration Tasks Maximum MAC address number learned by a port and forwarding option configuration tasks are described in the following table:...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-5 Sequence number Configuration item Command Description 5 Set the maximum number of MAC addresses learned by an Ethernet port, and when the current number of MAC addresses exceeds the threshold value, whether the switch...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-6 Execute the debugging command in user view to debug MAC address table configuration. Table 44-4 Display and debug MAC address tables Operation Command Display the information in the address table display mac-address [ ...

3Com Switch 8800 Configuration Guide Chapter 44 MAC Address Table Management 44-7 II. Network diagram Console Port Network Port Switch Internet Figure 44-2 Network diagram for address table management configuration III. Configuration procedure Enter the system view of the switch. <SW8800> syst...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-1 Chapter 45 Device management 45.1 Device Management Overview With the device management function, the Ethernet Switch can display the current running state and event debugging information about the slots, thereby implementing the...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-2 Table 45-2 Enable the Timing Reboot Function Operation Command Enable the timing reboot function of the switch, and set specified time and date schedule reboot at hh:mm [ yyyy/mm/dd ] Enable the timing reboot function of the swit...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-3 45.2.4 Upgrading BootROM You can use followed command to upgrade the BootROM with the BootROM program in the Flash Memory. This configuration task facilitates the remote upgrade. You can upload the BootROM program file from a rem...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-4 main control board of a 16 MB flash, the service processing board cannot be updated according to the original procedure. To update it, you need to execute the following command to download host software containing the app file of...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-5 Display CPU occupancy display cpu [ slot slot - no ] 45.4 Device Management Configuration Example 45.4.1 Using the Switch as an FTP Client to Implement the Remote Upgrade I. Network requirements The user logs into the switch usin...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-6 Caution: If the flash memory of the switch is not enough, you need to first delete the existing programs in the flash memory and then download the new ones to the memory. Enter the corresponding command in user view to establish ...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-7 45.4.2 Use the Switch as an FTP Server to Implement the Remote Upgrade I. Network requirements The switch serves as an FTP server and the PC as an FTP client. The configuration on the FTP server is as follows: an FTP user is conf...

3Com Switch 8800 Configuration Guide Chapter 45 Device management 45-8 Caution: If the flash memory on the switch is not sufficient, delete the original application program in the flash before uploading the new one into the flash of the switch. 3) After uploading, performs upgrading on the switch. &...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-1 Chapter 46 System Maintenance and Debugging 46.1 Basic System Configuration The basic system configuration and management include: z Switch name setting z System clock setting z Time zone setting z Summer time sett...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-2 Table 46-3 Set the time zone Operation Command Set the local time clock timezone zone_name { add | minus } HH:MM:SS Restore to the default UTC time zone undo clock timezone By default, the UTC time zone is adopted....

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-3 Operation Command Display the information about the optical module connected with a in-place optical port on current frame display fiber-module or display fiber-module [ interface - type interface - number | interf...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-4 Table 46-6 Enabling/Disabling the debugging Operation Command Enable the protocol debugging debugging { all [ timeout interval ] | module - name [ debugging - option ] } Disable the protocol debugging undo debuggin...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-5 46.4 Testing Tools for Network Connection 46.4.1 ping The ping command can be used to check the network connection and if the host is reachable. Perform the following configuration in any view. Table 46-8 The ping ...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-6 46.4.3 tracert The tracert is used for testing the gateways passed by the packets from the source host to the destination one. It is mainly used for checking if the network is connected and analyzing where the faul...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-8 Module name Description DEV Device management module DHCP Dynamic host configuration protocol module DIAGCLI Diagnosis module DNS Domain name server module DRVMPLS Multiprotocol label switching drive module DRVL2 L...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-14 Set the information output direction to SNMP — — Set information source — You can define which modules and information to be sent out and the time-stamp format of information, and so on. You must turn on the switc...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-16 Every channel has been set with a default record, whose module name is default and the module number is 0xffff0000. However, for different channels, the default record may have different default settings of log, t...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-19 Enable terminal display function of trap information terminal trapping Disable terminal display function of trap information undo terminal trapping 46.5.5 Sending the Configuration Information to Telnet Terminal o...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-21 This configuration will affect the timestamp of the displayed information. Perform the following configuration in system view: Table 46-32 Configure the output format of time-stamp Operation Command Configure the ...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-23 modu - name specifies the module name; default represents all the modules; all represents all the information filter configuration in channelnum chunnel except default; level refers to the severity levels; severit...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-28 Table 46-46 Display and debug info-center Operation Command Display the content of information channel display channel [ channel - number | channel - name ] Display configuration of system log and memory buffer di...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-29 III. Configuration steps 1) Configuration on the switch Enable info-center [SW8800] info-center enable Set the host with the IP address of 202.38.1.10 as the loghost; set the severity level threshold value as info...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-30 kill -HUP 147 After the above operation, the switch system can record information in related log files. Note: To configure facility, severity, filter and the file syslog.conf synthetically, you can get classificat...

3Com Switch 8800 Configuration Guide Chapter 46 System Maintenance and Debugging 46-31 2) Configuration on the loghost This configuration is performed on the loghost. Step 1: Perform the following command as the super user (root). mkdir /var/log/SW8800 touch /var/log/SW8800/information Step 2: Edit ...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-1 Chapter 47 SNMP Configuration 47.1 SNMP Overview By far, the Simple Network Management Protocol (SNMP) has gained the most extensive application in the computer networks. SNMP has been put into use and widely accepted as an indu...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-2 A 2 6 1 5 2 1 1 2 1 B Figure 47-1 Architecture of the MIB tree The MIB (Management Information Base) is used to describe the hierarchical architecture of the tree and it is the set defined by the standard variables of the monito...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-3 MIB attribute MIB content References DHCP MIB — QACL MIB — ADBM MIB — RSTP MIB — VLAN MIB — Device management — Private MIB Interface management — 47.3 Configuring SNMP The following sections describe the SNMP configuration task...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-5 Table 47-4 Enable/disable SNMP Agent to send Trap Operation Command Enable the sending of trap(system view) snmp-agent trap enable [ standard [ authentication ] [ coldstart ] [ linkdown ] [ linkup ] | bgp [ backwardtransition ] ...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-6 Table 47-6 Set the lifetime of Trap message Operation Command Set lifetime of Trap message snmp - agent trap life seconds Restore lifetime of Trap message undo snmp - agent trap life By default, the lifetime of Trap message is 1...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-7 47.3.8 Setting the Source Address of Trap You can use the following commands to set or remove the source address of the trap. Perform the following configuration in system view. Table 47-9 Set the source address of trap Operatio...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-8 47.3.10 Creating/Updating View Information or Deleting a View You can specify the view to control the access to the MIB by SNMP manager. You can use either the predefined views or the self-defined views. You can use the followin...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-9 47.4 Displaying and Debugging SNMP After the above configuration, execute the display command in any view to display the running of the SNMP configuration, and to verify the effect of the configuration. Table 47-14 Display and d...

3Com Switch 8800 Configuration Guide Chapter 47 SNMP Configuration 47-10 II. Network diagram Ethernet NMS 129.102.0.1 129.102.149.23 Figure 47-2 Network diagram for SNMP configuration III. Configuration procedure Enter the system view. <SW8800> system-view Set the community name, group and use...

3Com Switch 8800 Configuration Guide Chapter 48 RMON Configuration 48-1 Chapter 48 RMON Configuration 48.1 RMON Overview Remote Network Monitoring (RMON) is a type of IETF-defined MIB. It is the most important enhancement to the MIB II standard. It mainly used for monitoring the data traffic on a se...

3Com Switch 8800 Configuration Guide Chapter 48 RMON Configuration 48-5 Delete an entry from the history control table. undo rmon history entry - number History control entry calculates various data at the sampling time interval.You can use the display rmon history command to view the information of...

3Com Switch 8800 Configuration Guide Chapter 48 RMON Configuration 48-6 Display the event log of RMON display rmon eventlog [ event - number ] 48.4 RMON Configuration Example I. Network requirements Set an entry in RMON Ethernet statistics table for the Ethernet port performance, which is convenient...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-1 Chapter 49 NTP Configuration 49.1 Brief Introduction to NTP 49.1.1 NTP Functions As the network topology gets more and more complex, it becomes important to synchronize the clocks of the equipment on the whole network. Network Ti...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-2 z Before synchronizing the system clocks on Ethernet Switch A and B, the clock on Ethernet Switch A is set to 10:00:00am, and that on B is set to 11:00:00am. z Ethernet Switch B serves as an NTP time server. That is, Ethernet Swi...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-3 time server of the local equipment. In this case the local Ethernet Switch works as an NTP client. If you set a remote server as a peer of the local Ethernet Switch, the local equipment operates in symmetric active mode. If you c...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-4 II. Configuring NTP Peer Mode Set a remote server whose ip address is ip - address as the peer of the local equipment. In this case, the local equipment operates in symmetric active mode. ip - address specifies a host address oth...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-5 IV. Configuring NTP Broadcast Client Mode Designate an interface on the local Ethernet Switch to receive NTP broadcast messages and operate in broadcast client mode. The local Ethernet Switch listens to the broadcast from the ser...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-6 VI. Configuring NTP Multicast Client Mode Designate an interface on the local Ethernet Switch to receive NTP multicast messages and operate in multicast client mode. The local Ethernet Switch listens to the multicast from the ser...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-7 Table 49-8 Configure NTP authentication key Operation Command Configure NTP authentication key ntp-service authentication-keyid number authentication-mode md5 value Remove NTP authentication key undo ntp-service authentication-ke...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-8 ntp-service unicast-server or ntp-service unicast-peer command also designates a transmitting interface, use the one designated by them. 49.2.6 Setting NTP Master Clock This configuration task is to set the external reference clo...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-9 server : Allow local NTP time service request and control query. However, the local clock will not be synchronized by a remote server. peer : Allow local NTP time service request and control query. And the local clock will also b...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-10 49.4 NTP Configuration Example 49.4.1 Configuring a NTP Server I. Network requirements On SW88001, set local clock as the NTP master clock at stratum 2. On SW88002, configure SW88001 as the time server in server mode and set the...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-11 clock stratum: 16 reference clock ID: none nominal frequency: 100.0000 Hz actual frequency: 100.0000 Hz clock precision: 2^17 clock offset: 0.0000 ms root delay: 0.00 ms root dispersion: 0.00 ms peer dispersion: 0.00 ms referenc...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-13 Reference time: 19:21:32.287 UTC Oct 24 2004(C5267F3C.49A61E0C) By this time, SW88004 has been synchronized by SW88005 and it is at stratum 2, or higher than SW88005 by 1. Display the sessions of SW88004 and you will see SW88004...

3Com Switch 8800 Configuration Guide Chapter 49 NTP Configuration 49-17 [SW88001] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey Configure the key as reliable. [SW88001] ntp-service reliable authentication-keyid 42

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-1 Chapter 50 SSH Terminal Service 50.1 SSH Terminal Service 50.1.1 SSH Overview This chapter introduces the secure shell (SSH) feature. When a user telnets to the switch from an insecure network, the SSH feature can provide secu...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-3 z The server initiates a procedure to authenticate the user. If the server is configured not to authenticate the user, the process proceeds to session request phase directly. z The client employs an authentication mode to auth...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-4 Num Item Command Description 2 Entering VTY type of user interface view [SW8800] user-interface vty X X – 3 Configure the protocol supported by current user interface [SW8800-ui-vtyX-X] protocol inbound { all | ssh | telnet } ...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-5 Num Item Command Description 15 Configure the SSH compatibility mode [SW8800] ssh server compatible _ ssh1x enable Optional By default, the server is compatible with the SSH1.x client. I. Configuring the protocol the current u...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-6 z The minimum and maximum lengths for the host key and the server key are 512 bits and 2048 bits respectively. Perform the following configuration in system view. Table 50-3 Generate an RSA key pair Operation Command Generate ...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-7 Table 50-5 Configure the updating cycle of the server key Operation Command Configure the updating cycle of the server key ssh server rekey-interval hours Cancel the updating cycle configuration undo ssh server rekey-interval ...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-8 Table 50-8 Public key configuration Operation Command Enter the public key view rsa peer-public-key key - name Exit the public view and return to the system view peer-public-key end Note: The configuration commands are applica...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-9 While the Generator is running, move your mouse over the blank area of the window. Save the pair of keys as publickey and privatekey. File names are aaa.pub and aaa.pri

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-10 Convert the file aaa.pub into key configuration data in Hex. Convert the converted result into the CLI of the switch unit [SW8800-rsa-key-code] [SW8800-rsa-key-code]30818602 81806123 9F5A4D90 9049C7F4 3AC1CAC6 221BAC8B [SW880...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-11 X. Exiting the public key edit view Use this configuration task to return from the public key edit view to the public key view and save the input public key. Before saving the input public key, the system will check the valid...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-12 50.1.3 SSH Client Configuration The following sections describe the SSH client configuration tasks. z Set to perform the first-time authentication on the SSH server to be accessed z Specifying the public key of the server z C...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-13 Perform the following configuration in system view. Table 50-16 Configure the first-time authentication of the server Operation Command Configure the first-time authentication of the server ssh client first-time enable Cancel...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-15 Note: You can use the default values for SSH authentication timeout and retries. After completing the above configurations, you can run the SSH 2.0-enabled client software on any other terminal connected with the switch and a...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-16 50.1.6 SSH Client Configuration Example I. Network requirements As shown in Figure 50-4: z Switch A is used as an SSH client. z Switch B is used as the SSH server, and the IP address is 10.165.87.136. II. Network diagram PC I...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-17 [SW8800] ssh client first-time enable Access the remote server and perform operations. z Employ RSA public key authentication mode, and start using the corresponding encryption algorithm configured. [SW8800] ssh2 10.165.87.13...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-18 Table 50-18 Configure the service type to be used Operation Command Configure the service type to be used ssh user username service-type { telnet | sftp | all } Restore the default service type undo ssh user username service-...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-19 Num Item Command Description sftp-client> bye sftp-client> exit 3 Shut down the SFTP client sftp-client> quit Optional Chang the current directory sftp-client> cd [ remote - path ] Return to the upper directory sf...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-20 Perform the following configuration in system view. Table 50-21 Start the SFTP client Operation Command Start the SFTP client sftp ipaddr [ prefer_kex { dh_group1 | dh_exchange_group } ] [ prefer_ctos_cipher { des | 3des | ae...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-21 Operation Command directory ls [ remote - path ] Create a new directory on the server mkdir remote - path Delete a directory from the server rmdir remote - path Note: The dir command and the ls command have the same functiona...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-22 Table 50-25 Display help information for client commands Operation Command Display help information for client commands help [ command - name ] 50.2.4 SFTP Configuration Example I. Network requirements As shown in Figure 50-5...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-23 [SW8800-rsa-public-key] public-key-code begin [SW8800-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463 [SW8800-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913 [SW8800-rsa-key-code] D7EDF9C08511D83CA4E...

3Com Switch 8800 Configuration Guide Chapter 50 SSH Terminal Service 50-24 -rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2 -rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1 drwxrwxrwx 1 noone nogroup 0 Sep 01 06:22 new -rwxrwxrwx 1 noone nogroup 225 Sep 01 06:55 pub Create a new directory new1...

3Com Switch 8800 Configuration Guide Chapter 51 PoE Configuration 51-1 Chapter 51 PoE Configuration 51.1 PoE Overview 51.1.1 PoE on the Switch The Switch 8800 supports power-over-Ethernet (PoE). Equipped with external power supply and PoE-capable cards, Switch 8800s can provide 48 VDC power for remo...

3Com Switch 8800 Configuration Guide Chapter 51 PoE Configuration 51-2 51.1.2 External PSE4500-A Power System If PSE4500-A power system is taken as the external power supply of the switch, the power distribution is as follows: 1) Input voltage: 90 VAC to 160 VAC z One PSU (power supply unit) of the ...

3Com Switch 8800 Configuration Guide Chapter 51 PoE Configuration 51-3 Table 51-1 PoE configuration tasks on the Switch 8800 No Item Command Description 1 Enter system view system-view — 2 Enter Ethernet port view interface interface - type interface - number As a result of this command, a port view...

3Com Switch 8800 Configuration Guide Chapter 51 PoE Configuration 51-4 To cancel the configurations, use the corresponding undo commands. For details about the parameters, refer to the Command Manual . Note: z When setting the maximum PoE power supplied by the switch, you must set it to a value grea...

3Com Switch 8800 Configuration Guide Chapter 51 PoE Configuration 51-5 II. Network diagram Figure 51-1 PoE remote power supplying III. Configuration procedure Set the maximum power to 400 W on the card in slot 3. By default, the power of each card is full, so the power on the card in slot 5 need not...

3Com Switch 8800 Configuration Guide Chapter 52 PoE PSU Supervision Configuration 52-1 Chapter 52 PoE PSU Supervision Configuration 52.1 Introduction to PoE PSU Supervision The PoE-capable Switch 8800 can monitor the external PoE PSUs through the power supervision module on the PoE external power sy...

3Com Switch 8800 Configuration Guide Chapter 52 PoE PSU Supervision Configuration 52-2 Note: z You can set the thresholds to any appropriate values in the range, but make sure the lower threshold is less than the upper threshold. z For 220 VAC input, it is recommended to set the upper threshold to 2...

3Com Switch 8800 Configuration Guide Chapter 52 PoE PSU Supervision Configuration 52-3 52.3.1 DC Output Alarm Thresholds Configuration Tasks Table 52-2 DC output alarm thresholds configuration tasks No Operation Command Description 1 Enter system view system-view — 2 Set the overvoltage alarm thresh...

3Com Switch 8800 Configuration Guide Chapter 52 PoE PSU Supervision Configuration 52-4 [SW8800] poe-power output-thresh lower 45.0 Display the DC output state of the PoE PSUs. [SW8800] display poe-power dc-output state Display the DC output voltage/current values of the PoE PSUs. [SW8800] display po...

3Com Switch 8800 Configuration Guide Chapter 52 PoE PSU Supervision Configuration 52-5 II. Network diagram Figure 52-1 Network diagram for PoE supervision configuration III. Configuration procedure Enter system view. <SW8800> system-view Set the overvoltage alarm threshold of AC input for PoE ...