H3C S5830V2 & S5820V2 Switch SeriesOpenFlow Configuration GuideHangzhou H3C Technologies Co., Ltd.http://www.h3c.comSoftware version: Release 23xxDocument version: 6W102-20150315

H3C S5830V2 Series Configuration Manual

installation guide

obtaining documentation

Preparing for installation

Cleanliness

Installation tools

Installing the switch

Installing the switch in a 19-inch rack

Rack-mounting procedures at a glance

Attaching the slide rails to the rack

Mounting the switch in the rack

Grounding the switch

Grounding the switch with a grounding strip

Grounding the switch by using the AC power cord

Installing/removing a fan tray

Removing a fan tray

Installing a power module

Removing a power module

Connecting the power cord

Connecting the LSVM1AC650 or LSVM1AC300 power module

Verifying the installation

Accessing the switch for the first time

Connection procedure

Setting up an IRF fabric

Planning IRF fabric setup

Planning IRF topology and connections

Identifying physical IRF ports on the member switches

Configuring basic IRF settings

Maintenance and troubleshooting

No terminal display

Appendix A Chassis views and technical specifications

S5820V2-48S

S5820V2-52QF

S5820V2-52QF-U

S5820V2-52Q

S5820V2-54QS-GE

Technical specifications

Appendix B FRUs and compatibility matrixes

Fan trays

Appendix C Ports and LEDs

SFP+ port

QSFP+ port

Base-T autosensing Ethernet port

LEDs

Base-T autosensing Ethernet port LEDs

Appendix D Cooling system

Index

S5820V2 series

command conventions

documentation set

documentation feedback

configuring ethernet interfaces

Splitting a 40-GE interface and combining 10-GE breakout interfaces

Configuring basic settings of an Ethernet interface

Configuring the link mode of an Ethernet interface

Configuring physical state change suppression on an Ethernet interface

Performing a loopback test on an Ethernet interface

Configuring PFC on an Ethernet interface

Enabling energy saving features on an Ethernet interface

Setting the statistics polling interval

Forcibly bringing up a fiber port

configuring storm suppression

Configuring storm control on an Ethernet interface

Setting the MDIX mode of an Ethernet interface

Testing the cable connection of an Ethernet interface

displaying and maintaining an ethernet interface

configuring a loopback interface

Configuring a null interface

Bulk configuring interfaces

Displaying and maintaining bulk interface configuration

configuring the mac address table

types of mac address entries

configuring mac address entries

on an interface

Adding or modifying a multiport unicast MAC address entry

disabling mac address learning

disabling mac address learning on a vlan

Configuring the MAC learning limit on an interface

Assigning MAC learning priority to an interface

Enabling MAC address synchronization

Enable MAC address move notifications (for Release 2307)

Enable MAC address move notifications (for Release 2310 and later)

Enabling ARP fast update for MAC address moves

Enabling SNMP notifications for the MAC address table

mac address table configuration example

Configuration procedure

configuring mac information

configuring the mac information queue length

Configuration guidelines

Configuring Ethernet link aggregation

Aggregation states of member ports in an aggregation group

link aggregation modes

aggregating links in dynamic mode

LACP

How dynamic link aggregation works

ethernet link aggregation configuration task list

configuring an aggregation group

configuring a static aggregation group

configuring a dynamic aggregation group

configuring an aggregate interface

Specifying ignored VLANs on a Layer 2 aggregate interface

Configuring the expected bandwidth of an aggregate interface

Configuring an edge aggregate interface

shutting down an aggregate interface

Restoring the default settings for an aggregate interface

Enabling local-first load sharing for link aggregation

Configuring per-flow load sharing algorithm settings for Ethernet link aggregation

ethernet link aggregation configuration examples

layer 2 dynamic aggregation configuration example

Layer 2 aggregation load sharing configuration example

Layer 2 edge aggregate interface configuration example

Layer 3 static aggregation configuration example

Layer 3 dynamic aggregation configuration example

Layer 3 edge aggregate interface configuration example

configuring port isolation

port isolation configuration example

stp protocol packets

basic concepts in stp

calculation process of the stp algorithm

RSTP

mstp features

how mstp works

mstp implementation on devices

STP configuration task list

RSTP configuration task list

PVST configuration task list

mstp configuration task list

configuring an mst region

Configuring the root bridge or a secondary root bridge

spanning tree

configuring the maximum hops of an mst region

Setting spanning tree timers

Configuring the BPDU transmission rate

configuration example

Configuring the port link type

Configuring the mode a port uses to recognize and send MSTP packets

technical support

configuring aaa

RADIUS

HWTACACS

LDAP

AAA implementation on the device

AAA for MPLS L3VPNs

radius attributes

FIPS compliance

configuring local users

Configuring RADIUS schemes

Configuring HWTACACS schemes

Configuring LDAP schemes

Configuring AAA methods for ISP domains

Configuration prerequisites

Configuring authentication methods for an ISP domain

Configuring authorization methods for an ISP domain

Configuring accounting methods for an ISP domain

displaying and maintaining aaa

Local authentication, HWTACACS authorization, and RADIUS accounting for SSH users

Authentication and authorization for SSH users by a RADIUS server

Authentication for SSH users by an LDAP server

troubleshooting radius

troubleshooting hwtacacs

X overview

X-related protocols

Packet formats

EAP over RADIUS

Access device as the initiator

Comparing EAP relay and EAP termination

EAP termination

x configuration task list

Enabling 802.1X

Setting the port authorization state

Setting the maximum number of authentication request attempts

Configuring the online user handshake function

Configuring the quiet timer

X authentication configuration example

Verifying the configuration

configuring mac authentication

Specifying a MAC authentication domain

Configuring MAC authentication timers

displaying and maintaining mac authentication

RADIUS-based MAC authentication configuration example

configuring port security

enabling port security

Setting port security's limit on the number of secure MAC addresses on a port

setting the port security mode

configuring port security features

configuring secure mac addresses

displaying and maintaining port security

port security configuration examples

userLoginWithOUI configuration example

macAddressElseUserLoginSecure configuration example

troubleshooting port security

cannot configure secure mac addresses

password setting

Password updating and expiration

User login control

Logging

Setting global password control parameters

Setting user group password control parameters

Setting super password control parameters