H3C S9500E Series Routing SwitchesInstallation ManualHangzhou H3C Technologies Co., Ltd.http://www.h3c.com

H3C S9500E Series Installation Manual

S9500E Series

obtaining documentation

irf configuration commands

display irf

display restricted port

irf auto-merge enable

irf auto-update enable

irf member description

irf member priority

irf mode enhanced

irf switch-to

irf-port member-id/port-number

mad arp enable

mad bfd enable

mad enable

set irf slot member-id

technical support

configuring irf

basic concepts

irf fabric

connecting the irf member switches

topology collection

master election

irf fabric configuration task list

configuration prerequisites

non pre-configuration

binding a physical port to an irf port

configuration guidelines

configuration procedure

configuration file auto-conversion

configuring irf member switches in irf mode

configuring irf ports

setting a member id for a switch

specifying the preservation time of the bridge mac address

enabling auto reboot for irf fabric merge

setting the irf link down report delay

enabling irf link failure detection and auto-recovery

configuration procedures

displaying and maintaining an irf fabric

network requirements

configuration considerations

quick start guide

about this guide

installation tools

power on the switch

Preface

About the H3C S9500E documentation set

AAA configuration

Introduction to RADIUS

Security and authentication mechanisms

RADIUS packet format

Extended RADIUS attributes

Basic message exchange process of HWTACACS

Domain-based user management

AAA-across-VPNs

AAA configuration task list

Configuring AAA

Configuring ISP domain attributes

Configuring AAA authentication method for an ISP domain

Configuring AAA authorization methods for an ISP domain

Configuring AAA accounting methods for an ISP domain

Configuring local user attributes

Configuring user group attributes

Disconnect user connections

Displaying and maintaining AAA

Specifying the VPN instance

Specifying the RADIUS accounting servers and relevant parameters

Specifying the shared keys for RADIUS packets

Setting the upper limit of RADIUS request retransmission attempts

Setting the status of RADIUS servers

Configuring attributes related to data to be sent to the RADIUS server

Enabling the RADIUS trap function

Setting timers regarding RADIUS servers

Specifying security policy servers

Enabling the listening port of the RADIUS client

Displaying and maintaining RADIUS

Creating an HWTACACS scheme

Specifying the HWTACACS authorization servers

Setting the shared key for HWTACACS packets

Configuring attributes related to the data sent to HWTACACS server

Setting timers regarding HWTACACS servers

Displaying and maintaining HWTACACS

AAA for telnet users by separate servers

AAA for SSH users by a RADIUS server

Troubleshooting AAA

Troubleshooting HWTACACS

X configuration

Basic concepts of 802.1X

EAP over LAN

EAP over RADIUS

X authentication triggering

X access control method

X timers

X basic configuration

Configuring 802.1X globally

Configuring 802.1X for a port

Configuring the online user handshake function

Enabling the multicast trigger function

Enabling the quiet timer

Configuring an Auth-Fail VLAN

Displaying and maintaining 802.1X

Guest VLAN and VLAN assignment configuration example

MAC authentication configuration

Related concepts

Displaying and maintaining MAC authentication

MAC authentication configuration examples

RADIUS-based MAC authentication configuration

verify the configuration

Portal configuration

Portal authentication mode

Portal authentication process

Basic portal configuration

Configuring a portal-free rule

Configuring an authentication subnet

Specifying a NAS ID profile for an interface

Setting the maximum number of online portal users

Portal configuration examples

Configuring Layer 3 portal authentication with extended functions

Troubleshooting the portal

Public key configuration

Asymmetric key algorithm applications

Displaying or exporting the local RSA or DSA host public key

Displaying and maintaining public keys

Public key configuration examples

Importing the public key of a peer from a public key file

SSH2.0 configuration

Configuring the device as an SSH server

Configuring a client public key

Configuring an SSH user

Setting the SSH management parameters

Configuring the device as an SSH client

Establishing a connection between the SSH client and the server

Displaying and maintaining SSH

When switch acts as server for password authentication

When switch acts as server for public key authentication

SSH client configuration examples

When switch acts as client for public key authentication

SFTP service

Conventions

About the H3C S9500E Documentation Set

High availability overview

High availability technologies

Protection switchover technologies

Active and standby switchover configuration

Ignoring version check of the SMB

Manually configuring active and standby switchover

Ethernet OAM configuration

Ethernet OAM implementation

Standards and protocols

Configuring link monitoring

Configuring errored frame period event detection

Displaying and maintaining Ethernet OAM configuration

Ethernet OAM Configuration Example

DLDP configuration

How DLDP works

Enabling DLDP

Setting DLDP mode

Setting the interval for sending advertisement packets

Setting the port shutdown mode

Resetting DLDP state

Displaying and maintaining DLDP

Troubleshooting

RRPP configuration

RRPPDUs

RRPP timers

Typical RRPP networking

Protocols and standards

Creating an RRPP domain

Configuring protected VLANs

Configuring RRPP ports

Configuring RRPP nodes

Activating an RRPP domain

Configuring RRPP timers

Configuring RRPP fast detection

Configuring an RRPP ring group

Displaying and maintaining RRPP

Intersecting ring configuration example

Intersecting-ring load balancing configuration example

Fast detection configuration example

Smart Link configuration

Terminology

Operating mechanism of Smart Link

Configuring a Smart Link switch

Configuring member ports for a Smart Link group

Enabling the sending of flush messages

Configuring an associated switch

Associated switch configuration example

Multiple Smart Link groups load sharing configuration example

Monitor link configuration

Configuring monitor link

Monitor link configuration example

VRRP configuration

VRRP standard protocol mode

VRRP timers

Principles of VRRP

VRRP application (using IPv4-based VRRP for example)

VRRP load balancing mode

Allocating virtual MAC addresses