H3C S5500产品培训教材

,32,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,杭州华三通信技术有限公司,*,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,S5500,产品及其业务特性,ISSUE 1.1,日期：,杭州华三通信技术有限公司 版权所有，未经授权不得使用与传播,S5500-SI,产品概述,产品概述,千兆弱三层以太网交换机,高端口密度,灵活扩展槽位,支持,10GE,上行,支持,PoE,功能,支持,IPv6,设备定位,企业网接入层设备,企业网或园区网汇聚层设备,H3C,系列产品比较,S5500-SI,S5100-EI,S5600,S5510,GE,端口数,24/48,24/48,24/48,24,10GE,端口数,4,2,2,0,10GE,端口类型,XFP/CX4,XENPAK/CX4,XENPAK/XFP,NA,IRF,NA,支持,支持,NA,PoE,支持,NA,支持,NA,MAC,地址,8K,16K,16K,12K,ARP,表,2K,256,8K,4K,路由表,512,16,16K,16K,RIP,支持,NA,支持,支持,OSPF,NA,NA,支持,支持,PIM,NA,NA,支持,支持,VRRP,NA,NA,支持,支持,IPv6,协议栈,支持,NA,NA,支持,RIPng,支持,NA,NA,支持,OSFPv3,NA,NA,NA,支持,软件平台,ComwareV5,ComwareV3,ComwareV3,ComwareV5,产品型号及形态,H3C S5500-SI,系列产品型号及形态,H3C S5500-28C-SI,24,千兆电口,+4 SFP,端口,(combo)+2,个扩展槽位,H3C S5500-52C-SI,48,千兆电口,+4 SFP,端口,(combo)+2,个扩展槽位,H3C S5500-28C-PWR-SI,24,千兆电口,+PoE+4 SFP,端口,(combo)+2,个扩展槽位,H3C S5500-52C-PWR-SI,48,千兆电口,+PoE+4 SFP,端口,(combo)+2,个扩展槽位,产品型号及形态,扩展模块（可热插拔）,LSPM1XP1P,1-port XFP 10GE Module, the XFP shall support LR/SR/ER/LRM,LSPM1XP2P,2-port XFP 10GE Module, the XFP shall support LR/SR/ER/LRM,LSPM1CX2P,2-port CX4 10GE Module,CX4,电缆,50cm/100cm/300cm (clip-clip),300cm (screw-clip),面板指示灯,Power LED,显示设备状态：正常,/POST,错误,RPS LED,显示当前,RPS,输入状态：,Mode LED,显示当前模式键状态：,Speed/Duplex/PoE,Module LED,显示当前扩展板状态：正常,/,异常,/,不在位,7-Segment Display,显示当前设备状态,POST ID,Cluster Status (Commander/Member/Candidate/Standalone),文件下载过程指示,PoE,利用率指示,风扇,/,温度告警指示,Port LED,根据模式按键显示端口当前状态：,速率：,1000M/10-100M/POST Fail,双工：,Full /Half Duplex/POST Fail,PoE,：,Normal/Fault/POST Fail,硬件体系结构,S5500-28C-SI,硬件体系结构,Switch,CPU,PCI,10GE,10GE,24 GE,Module2,Module1,Module2,Switch,CPU,PCI,Switch,Module1,10GE,10GE,48 GE,S5500-52C-SI,硬件体系结构,硬件体系结构特点,硬件设计特点,超级紧凑，业界最高千兆端口密度,尺寸数据：,440mm X 43.6mm,X 300,mm (Non-PoE)/,440mm X 43.6mm,X 420,mm (PoE),前面板提供,48,千兆电接口和,4,千兆,SFP,光口,后面板提供多至,4,个,10GE,端口,高性能设计，极速体验,所有端口全线速，交换容量,128Gbps/176Gbps,10GE,接口,灵活的可扩展性,多款扩展模块,极低成本的,10GE,接口,(CX4),周全的可靠性设计,提供,RPS,功能，同时提供,AC/DC,双路供电,扩展模块热插拔设计,支持环境温度和风扇的监控告警,温控风扇,扩展模块无,CPU,软件特性概述,软件设计特点,基于,Comware5,全新平台,，合力智慧，混血优势,VRP,八年研发心血,3Com,技术再上层楼,丰富业务,路由协议：静态路由,/RIP,IPv6,：,RIPng,组播能力：支持,IGMP Snooping,，,MLD Snooping,，,MVR+,基于,Radius,的用户认证：,802.1x,，,Mac,认证,Voice VLAN,支持,PoE,功能,贴心设计，兼顾易用与安全,基于,Profile,的管理（,PoE profile,）,支持热插拔的扩展模块,密码保护功能,维护功能强大，方便的故障诊断,完备的,LED,和,7,段数码管显示，,实时反映设备当前状态,端口特性介绍,基本特性,Port Types: 1000Base-T, SFP, XFP, CX4,Speed/Duplex auto-negotiation,Auto MDI/MDIX,Broadcast storm control (BC, MC, UC),端口聚合,Support 12 trunk groups,Each group supports max to 8 GE ports or 2 10G ports,Support LACP dynamic link aggregation,端口隔离,Port isolation (Protected Port),其他特性,PoE,Combo ports,端口特性注意事项,广播风暴抑制,端口模式下的广播、组播、未知单播的抑制在百分比的模式下只有,64,字节的报文才是准确的，这是因为芯片仅仅支持按照,PPS,来进行广播抑制的，如果按照百分比的话，系统是按照,64,字节将百分比转换成,PPS,，建议采用,PPS,模式；,广播、组播、未知单播的抑制并没有改变端口的瞬时速率，仅仅是利用某个时间片不转发报文的原理来实现抑制；,当端口起广播、组播、未知单播的抑制，同时起了,CAR,最终限速的效果这样计算：,CIR/wire speed * packets suppression pps,。,端口聚合,V3/V5,静态聚合端口的,selected/unselected,的选择原则不相同，所以当有超过,8,个的端口可聚合时，可能会出现两端产品选择的端口不对应的问题；,对,IP,单播报文：根据源、目的,ip,和源,port,计算负载分担；,对非,IP,单播报文：根据源、目的,mac,、,vlan,和,ethertype,计算负载分担；,对于,ipmc,组播：根据源、目的,ip,和入端口索引计算负载分担；,对其它组播、广播和未知单播报文按照源、目的,mac,和入端口索引计算负载分担。,端口特性,POE,PoE:,802.3af standard PD/Legacy PD support (Cisco/Huawei),Max to 15.4Watt power per port,24 Ports max power support with AC input,Full port max power support with DC input,3 priorities support: Critical/High/Low,Power statistics: Current/Average/Peak,CLI,DEVM,Driver,MCU,Others,UART,Switch,PSU,L2,特性介绍,Mac address management,8K Mac addresses /128 static Mac addresses,Mac black hole,Mac learnt limitation,VLAN,4094 802.1q VLANs,GVRP,Auto VLAN assignment via 802.1x,Voice VLAN,QinQ/Selective QinQ,Spanning Tree,STP/RSTP/MSTP,BPDU guard/Root guard/Loop Guard/TC Protect,Selective QinQ,S5500-SI,作为,PE,设备,在上行方向，,UNI,端口收到报文后的处理如下：,1,）使用入端口号和,C-TAG,作为索引查找用户配置的内层,VLAN,和外层,VLAN,的对应表，得到,S-VLAN,；,2,）使用,S-VID,和,C-DA,作为索引查找,MAC,表，得到出端口；,3,）根据,S-VID,和,C-SA,进行,MAC,地址学习；,4,）把,S-TAG,插入报文，然后从出端口发送；,5,）对于,untagged,或,Pri-tagged,报文，插入,VID,等于端口的,PVID,的,TAG,后把报文发送出去；,在下行方向，,UNI,端口上的处理如下：,1,）使用,S-VID,和,C-DA,作为索引查找,MAC,表，得到出端口；,2,）使用,S-VID,和,C-SA,进行,MAC,地址学习；,3,）把,S-TAG,剥除，从出端口发送；,L3,特性介绍,L3 interface:,64 VLAN interfaces,Secondary IP address (4 IP per VLAN),ARP:,2K ARP entries/ 64 static ARP entries,ARP Proxy,Unicast routing protocol,RIPv1/v2,512 routing table (including 64 static routes),Multicast,IGMPv1/v2/v3 Snooping,128 multicast groups,MVR+,IGMP Fast Leave,IGMP Filter,IGMP Group Limit,Drop unknown,Source Deny,组播使用注意事项,IGMP Snooping,当一个,VLAN,使能,IGMP SNOOPING,，如果没有成员加入任何组播组，上行的组播数据将在该,VLAN,内泛滥，解决的办法就是开启,VLAN,的未知组播丢弃；,说明：开启,VLAN,未知组播丢弃或者组播端口源丢弃之后将丢弃组播协议报文,(,包括,RIP,、,NTP,等,),。,Multicast vlan,支持组播,vlan,复制，端口复制能力,64,份。整机共享,2K,复制表项，这样在每个端口都加入,128,个组的情况下，最大支持,16,个端口满配复制。,IPv6,特性介绍,L3 interface,64 VLAN interfaces,ND:,1K ND entries (including 64 static ND entries ),Unicast routing,RIPng,256 routing table (including 64 static routes),Multicast,MLDv1 Snooping/128 multicast groups,Multicast VLAN,Management,Telnet/SSH/SNMP/HTTP over IPv6,ping/Tracert for IPv6,安全特性介绍,HTTPs,SSHv2:,DES/3DES support,User authentication,802.1x,Centralized Mac authentication,Local Database,Radius,Tacacs+,Packet Filtering,L2L3/L4,Time-based,384 ACL entries per ASIC,Port /VLAN based ACL,Others,DoS protection,Password Recovery,DHCP Snooping Trust,Port Mirroring/Traffic Mirroring,Up to 4 Monitor Port,QoS,特性介绍,Egress Queue:,8 queues,Scheduler : SP, WRR, SP + WRR,Priority mapping/remarking,802.1p,DSCP,Traffic classification,L2(Link)/ L3/L4(Advanced),Time-based,Rate limiting,Port Rate Limitation,Ingress/Egress,64Kbps granularity,Flow Rate Limitation,Ingress only,64Kbps granularity,L4 port range check,管理特性介绍,HGMP V2,Web management:,Support multiple browser: IE 5.5/IE 6/Netscape 7.1/Mozilla 1.4,Rich management function,Basic port management (enable/disable, speed, flow control, etc),Layer 2,VLAN Configuration,Voice VLAN Configuration,Spanning Tree Configuration,Link Aggregation Configuration,IGMP Snooping,Port Mirroring,Management Configuration,Software Agent Upgrade,Network Login Configuration,User management (passwords, etc),Device Configuration Save & Recovery,Administration: Initialize/Reboot/Save Configuration,开发中的特性介绍,Layer2,UDLD,VLAN Mapping,RSPAN,Flex Link,Support 100M SFP Module,Network Security,DHCP Snooping Option82,Dynamic ARP Inspection,IP Source Guard,Port Security,Multicast,MLDv2 Snooping,Management,Enhanced Clustering Support,Enhanced Web Management,典型组网应用（汇聚层）,10 GE,10 GE,GE,CAMS,NMS,Server Farm,Firewall,S9500/S7500,S9500/S7500,S5100,S5100,GE,GE,GE,GE,S3600,S3600,S3600,S3600,S5100,S5100,GE,GE,GE,GE,S3600,S3600,S3600,S3600,S5500-SI,S5500-SI,GE,GE,GE,GE,S3600,S3600,S3600,S3600,典型组网应用（接入层）,S5500-SI,S5500-SI,GE,PoE,GE,GE,PoE,10 GE,10 GE,GE,CAMS,NMS,Server Farm,Firewall,S9500/S7500,S9500/S7500,S5500-SI,S5500-SI,GE,GE,GE,PoE,GE,S5500-SI,S5500-SI,GE,PoE,GE,GE,PoE,典型组网应用（,IPv6,）,IPv4 Network,IPv6 Enterprise Users,IPv6 Users,WLAN,IPv6 Network,Dual-Stack Access,Dual-Stack Access,Mobile,Network,IPv4 Access,IPv6 IDC Network Manager,IPv6 Mobile,Terminal,IPv6 Island,IPv4 Internet,IPv6 Internet,IPv6 Over IPv4Tunnel,IPv6 Access,IPv6 Access,IPv4 User,IPv6 Link,6to4 Relay,S5500-SI,S5500-SI,S5500-SI,常见故障定位,收发报文,H3C-hidecmd_debugging drv ni packet,rxcosDisplay packet info in drv receive from special cos,rxdiag Display drv diag recevie packet info,rxdrop Display drv drop receive packet info,rxdrv Display drv receive all packet info,rxplat Display send to platform all packet info,rxport Display packet info in drv receive from special port,rxreason Display packet info in drv receive from special reason,txdiag Display inbound diag send all packet info,txdrop Display drv drop from platform send all packet info,txdrv Display drv send all packet info,txplat Display platform send all packet info,txplatport Display platform send all packet info using port send,txplatvlan Display platform send all packet info using vlan send,txsoftbc Display drv soft vlan flood packet info,terminal debugging,常见故障定位,QACL,实现,QACL,的实现硬件资源,芯片中共有,4,个,TCAM,，每个,TCAM,包含,128,条,entry,，,TCAM,编号分别为,0,，,2,，,4,，,6,，每个,TCAM,中,entry,编号为,0,127,，每个,entry,对应用户的一条规则，编号是,TCAM_id * 128 + entry_id,。,TCAM 6,TCAM 4,TCAM 0,TCAM 2,Entry_id 127,Entry_id 0,编号：,6*128+127=895,编号：,4*128+0=512,常见故障定位,QACL,实现,QACL,的实现优先级,在查看每条规则时，可以查看到每条规则的全局编号，根据编号，可以得出,TCAM_id,和,entry_id,，由此可以确定规则在芯片中的位置。,规则之间优先级的关系是：,不同,TCAM,中，,TCAM_id,大的优先级高；同一个,TCAM,中，,entry_id,小的优先级高。,其中,TCAM0,为系统保留使用，不对用户开放。,LOW PRIORITY,HIGH PRIORITY,TCAM6,TCAM 4,TCAM 0,TCAM 2,HIGH PRIORITY,RULE,TCAM,常见故障定位,QACL,查询,查看端口上下发的,QoS Policy,H3C-GigabitEthernet1/0/1display qos policy interface,H3C-GigabitEthernet1/0/1dis qos p int,Interface: GigabitEthernet1/0/1,Direction: Inbound,Policy: test,Classifier: test,Operator: AND,Rule(s) : If-match source-mac 0000-0000-0001,Behavior: test,Committed Access Rate:,CIR 64 (kbps), CBS 500 (byte),Red Action: discard,常见故障定位,QACL,查询,查看用户配置的,QACL,规则,H3C-hidecmd _dis drv qacl user-rule policy-name,policy-name,H3C-hidecmd _dis drv qacl user-rule policy-name test,port based policy,policy-name test,entry detail info,entry_id:,768,valid_sta 1,ip_ver IPv4,class_name,test,behavior_name,test,acl_num 0,sub_item: 0,if_time_range: 0,硬件中的规则编号：表明这条规则，位于,TCAM6,，,entry_id,为,0,用户配置的,classifier,和,behavior,的名字,常见故障定位,QACL,查询,IPv4 rule content,dst_mac: 0-0-0-0-0-0,dst_mac_mask: 0-0-0-0-0-0,src_mac:,0-0-0-0-0-1,src_mac_mask:,ff-ff-ff-ff-ff-ff,outer_vid: 0,outer_vid_mask: 0,inner_vid: 0,inner_vid_mask: 0,ether_type: 0,ether_type_mask: 0,src_ip: 0,src_ip_mask: 0,dst_ip: 0,dst_ip_mask: 0,ip_protocol: 0,ip_protocol_mask: 0,(,后续内容省略,),匹配源,MAC 0-0-1,常见故障定位,QACL,查询,action content,（前面部分内容省略）,drop: Action not be set,mirror: Action not be set,mtp_modid: 0,mtp_port: 0,change_dmac_vlan: Action not be set,new_dmac_vlan: 0,car: MeterConfig,car_cir: 64,car_cbs: 4,rp_drop: RpDrop,rp_change_dscp: Action not be set,rp_newdscp: 0,count: Action not be set,counter_mode: 0,使能了流限速功能,限速值为,64Kbps,令牌桶深为,4Kbype,Out-profile,丢弃,问题,Any Question?,