Installing Virus Throttle for Windows ......................12 Monitoring Virus Throttle status........................13 Virus Throttle Status and Configuration Utility ....................16 Launching the Virus Throttle Status and Configuration Utility ..............16 Configuring Virus Throttle parameters....................17 Using advanced networking features..................... 21 Configuring advanced features .........................
Should any group completely fail, caused by a failure of all teamed ports in the group or by a failure of the group's switch, the team remains available through the other group. Two types of Dual Channel Load Balancing teams can be configured: Switch-assisted Dual Channel Load Balancing teams and 802.3ad...
Each server requires a separate INP license. When installed on the system, the license is "attached" to the server and cannot be revoked. The license will stay with that server for the life of the server. The license is associated with the server's serial number, so a change in the server's name or IP address will not invalidate the license.
Page 6
Microsoft®Windows® 2000, Microsoft Windows Server 2003, or Microsoft Windows Server 2003 x64. Launching the license manager through the Network Configuration Utility If the NCU software (release 7.71 and higher) is installed on your server, click License Manager on the NCU Main window to display the License Manager.
Page 7
Launching the license manager through the Virus Throttle installation When you first install Virus Throttle the utility looks for a valid INP license on the system. If it does not find one, it automatically launches the ProLiant Essentials Network License Manager for you to enter a license key.
Page 8
Click the HP Virus Throttle link. If the utility does not identify a valid INP license on the system, the following message displays: Click Yes to display the ProLiant Essentials Network License Manager. For information on installing licenses refer to "About ProLiant Essentials Network License Manager (on page 8)."...
Page 9
License seat unavailable—If all seats for a given license have been used, a licensed port of the same type must be disabled to make a license seat available to a different port or an additional license of the same product type with additional seats must be installed.
Page 10
Windows command file. The nalicense command validates that the license is a proper INP license and if it is valid it adds it to the system. The nalicense command can also be used to display valid licenses on the system.
Page 11
Windows-based command line utility that is run at a command line of a Command Prompt window or from a Windows command file. The vtlicense command validates an INP license and then adds it to the system if it is valid. The vtlicense command also displays licenses currently installed on the system.
Virus Throttle helps to stop the spread of viruses on your system by detecting abnormal "virus like" behavior in the requests. It slows down excessive connection requests to new hosts until you can determine if they are viral in nature and take action.
Click the SoftPaq file to extract the files and then open the cmponent.htm file. Click the HP Virus Throttle link. If a valid INP license is identified on the system, Virus Throttle installation continues. If the utility does not identify a valid INP license on the system, the following message appears: Click Yes to install a license key.
Page 14
Statistics and delay queue information can be viewed on the Status tab in either Aggregate (summary for all active instances of the Virus Throttle filter driver) or Individual (per instance) mode. The default setting is the Aggregate mode.
Page 15
Currently Queued TCP Packets. Number of connection TCP packets currently on the delay queue. TCP Packets Dropped Due to Queue Overflow. Number of TCP packets that were dropped due to the delay queue being full since filter driver initialization.
Virus Throttle filter driver parameters are made to all active instances of the Virus Throttle filter driver. When a new server adapter is installed on the system or a new team or VLAN is created, the Virus Throttle filter driver parameters for that interface are set to the default settings.
If inconsistencies are found, the following message appears. Click OK to display the Configuration tab. Update the current settings for all active instances of the filter driver as needed. Refer to "Configuring Virus Throttle parameters (on page 17)." Configuring Virus Throttle parameters The Configuration tab shows the current delay queue and host settings and allows you to configure them for all active instances of the Virus Throttle filter driver.
Page 18
When a new connection is made, the oldest member of the working set is replaced with the new host. The default setting is 5 hosts. The valid range is 1-100. Address Lifetime (UDP). Number of timer intervals that an address will remain in the working set after the last outbound UDP packet was sent to that address.
Page 19
The Keep Proportions option provides a way to keep the high and low water mark values at a preset percentage of the delay queue size for TCP and UDP outbound connection request. When Keep Proportions is not selected, the delay queue high and low water mark values can be changed.
Page 20
When you click OK to process your changes, an informational message appears warning about a network interruption. Click Yes to start and stop the Virus Throttle instances so the new parameters can be read from the registry. After the configuration is completed, a successful message appears. Click OK to close the Virus Throttle Status and Configuration Utility.
During normal operations, if the adapters in the primary team fail, a link to one of the adapters in the secondary, backup team automatically takes over.
Page 22
Switch-assisted Dual Channel NFT and Preference Order Provides the same options as Switch-assisted Dual Channel Network Fault Tolerance except it offers the additional option to select the priority order of the group (Group 0 or Group 1) used for the primary and secondary teams.
Link Aggregation Control Protocol (LACP), with the switch. A failure of a team member to negotiate joining a port trunk or channel with the switch is treated as an error and that team member is considered failed.
Page 24
Group 0 and Group 1. Click the User Preference Order up and down arrows to assign the members to be in Group 0 and the members to be in Group 1. There must be a minimum of two adapters in a dual channel team with a minimum of one adapter in each group.
— Degraded (Rx Path)—The team member is not receiving packets, and no other team member is receiving packets. Because all team members are equal, the team member is still in use by the team. — Degraded (Multiple)—The team member has multiple degraded conditions.
Page 26
Router Redundancy Protocols (HSRP, VRRP) allow you to set up two or more routers into a single router group, which acts as a backup for a virtual router. At any given time, only one router is designated as the active router, which takes up the functionality of the router. If the active router fails, a second router or standby router assumes the role of the active router.
The absence of a reply within the specified time period can be used to determine when a team member does not have a path to the echo node. The default setting is disabled. If Active Path Failover is enabled, you must enter a valid IP address for the echo node.
The default setting is 3 seconds. The timeout value must be less than or equal to the probe interval. If a larger value is entered for the timeout, it is automatically set to the probe interval when you click OK.
Select the Router Path Failover option. This Router Redundancy Protocols (HSRP, VRRP) allow you to set up two or more routers into a single router group, which acts as a backup for a virtual router. Click the Router Protocol list and select the protocol type to monitor.
Configuring VLAN IDs If Active Path Failover, Fast Path Failover (with Cisco PVST+ set as the Spanning Tree Protocol), or Router Path Failover are configured for a team, you can select the VLAN ID for validation and monitoring. Before creating and editing VLANs, you should be aware that: The NCU supports IEEE 802.1Q VLAN tagging only.
Page 31
The next available VLAN ID appears in the VLAN ID box. Change the VLAN ID by either typing an ID or by using the list to select a valid ID. A valid ID is any number that is not already being used for a VLAN defined on this team or adapter and that is in the range of 1-4094.
Native Vlan ID for untagged packets on the interface Duplex Each team member configured for CDP or LLDP registers an address at which it can receive CDP or LLDP messages. The advertisements that come from network devices such as the switch will contain this information.
From the Discovery Protocols tab, you can configure CDP and LLDP settings for the selected team. These advanced teaming features are disabled unless a valid ProLiant Essentials Intelligent Networking Pack license is installed on the system. For more information on how to install a license, refer to "Installing an Intelligent Networking Pack license."...
Page 34
VTP Management Domain—The system's VTP management domain name. This is used to verify VTP domain configuration in adjacent network nodes. Native Vlan ID—The VLAN for untagged packets on the interface. CDP or LLDP learns the native VLAN for an interface. This is implemented only for interfaces that support the IEEE 8021Q protocol.
When a server runs an application that wants to join a multicast group, the join message is sent out to the aggregation and only those ports in the multicast group. During a failover situation, the NCU will maintain connectivity with the multicast group and respond with IGMP reports.
Potential solutions for INP configuration problems ..................36 Potential solutions for INP configuration problems This section provides possible solutions to problems that may occur during the configuration of INP features. The following tables provide steps to take before calling your service representative.
"Degraded Path Failover mechanism. If all If the echo node device is not on the same IP (Active Path)" and the team is members of the team have a subnet, reconfigure the echo node settings on degraded (yellow team icon).
Page 38
Default/Native VLAN configured PVST+, my adapters all show configured on the VLAN tab of in the NCU on the VLAN tab of the team. For a yellow X with a status of the team in the Default/Native example, if the Native VLAN on the ports you "Degraded (Fast Path)";...
Fast Path Failover, Active Path Failover and Router Path Failover. If you are unable to set the VLAN ID for fast path even though Fast Path has been selected in the Advanced Redundancy tab, then consider changing the Spanning Tree Protocol as Cisco PVST+.
Page 40
Dual-Channel teams only transmit a CDP or LLDP Discovery Protocol and verify the configuration some ports in my frame down a single port in a is satisfactory. aggregation (trunk) do not trunk. In that case, you should have any information expect that the data from the displayed.
Acronyms and abbreviations Address Resolution Protocol BPDU Bridge Protocol Data Unit Cisco Discovery Protocol HSRP Hot Standby Routing Protocol IGMP Internet Group Management Protocol Internet Protocol LACP Link Aggregation Control Protocol local-area network LLDP Link Layer Discovery Protocol medium access control...
Page 42
Systems Insight Manager switch-assisted load balancing SNMP Simple Network Management Protocol Spanning Tree Protocol Transmission Control Protocol transmit load balancing User Datagram Protocol VLAN virtual local-area network Windows Management Instrumentation Acronyms and abbreviations 42...