Page 1
2650 and switch 6108 www.hp.com/go/hpprocurve...
Page 3
HP Procurve Switch 2650 and Switch 6108 Software Release H.07.01 or Greater Management and Configuration Guide...
Page 4
Microsoft, Windows, Windows 95, and Microsoft Windows Hewlett-Packard products and replacement parts can be NT are registered trademarks of Microsoft Corporation. obtained from your HP Sales and Service Office or Internet Explorer is a trademark of Microsoft Corporation. authorized dealer.
Advantages of Using the CLI ........1-4 Advantages of Using the HP Web Browser Interface ... . . 1-5 Advantages of Using HP TopTools for Hubs &...
Page 6
Using a Standalone Web Browser in a PC or UNIX Workstation ..4-4 Using HP TopTools for Hubs & Switches ..... . . 4-5 Tasks for Your First HP Web Browser Interface Session .
Page 7
Help and the Management Server URL ......4-13 Status Reporting Features ........4-15 The Overview Window .
Page 8
System Information ......... . . 6-9 Menu: Viewing and Configuring System Information .
Page 9
SNTP: Viewing, Selecting, and Configuring ..... 8-4 Menu: Viewing and Configuring SNTP ......8-5 CLI: Viewing and Configuring SNTP .
Page 10
10 Configuring for Network Management Applications Contents ........... . . 10-1 Using SNMP Tools To Manage the Switch .
Page 11
The Secure Management VLAN ......11-27 Effect of VLANs on Other Switch Features ....11-31 VLAN Restrictions .
Page 16
Menu: Viewing the Switch’s MAC Addresses ....D-3 CLI: Viewing the Port and VLAN MAC Addresses ....D-4 E Daylight Savings Time on HP Procurve Switches Index...
Page 17
Getting Started Contents Introduction ..........xvi Conventions .
“Related Publications” on page xviii. The Product Documentation CD-ROM shipped with the switch includes a copy of this guide. You can also download a copy from the HP Procurve website. (See “Getting Documentation From the Web” on page xix, below.)
Getting Started Conventions Command Prompts In the default configuration, your Switch 2650 or 6108 displays one of the following CLI prompts: To simplify recognition, this guide uses to represent command prompts for all models. For example: (You can use the hostname command to change the text in the CLI prompt.) Screen Simulations Figures containing simulated screen text and command output look like this: Figure 1.
A PDF version of this guide is also provided on the Product Documentation CD-ROM shipped with the switch. And you can download a copy from the HP Procurve website. (See “Getting Documentation From the Web” on page xix.) Access Security Guide.
Getting Started Getting Documentation From the Web Getting Documentation From the Web Go to the HP Procurve website at http://www.hp.com/go/hpprocurve Click on technical support. Click on manuals. Click on the product for which you want to view or download a manual.
Interface (hereafter referred to as the “web browser interface”), use the online help available for the web browser interface. For more information on web browser Help options, refer to “Online Help for the HP Web Browser Interface” on page 4-11.
IP Addressing. If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing.
For information on how to access the web browser interface Help, see “Online Help for the Web Browser Interface” on page 4-11. To use HP TopTools for Hubs & Switches, refer to the HP TopTools User’s Guide and the TopTools online help, which are available electronically with the TopTools software.
Selecting a Management Interface Advantages of Using the Menu Interface Advantages of Using the Menu Interface Figure 1-1. Example of the Console Interface Display Provides quick, easy management access to a menu-driven subset of switch configuration and performance features: • IP addressing •...
Selecting a Management Interface Advantages of Using the CLI Advantages of Using the CLI Operator Level Manager Level Global Configuration Level Context Configuration Levels (port, VLAN) <context> Figure 1-2. Command Prompt Examples Provides access to the complete set of the switch configuration, perfor- mance, and diagnostic features.
Advantages of Using the HP Web Browser Interface Advantages of Using the HP Web Browser Interface Figure 1-3. Example of the HP Web Browser Interface Easy access to the switch from anywhere on the network Familiar browser interface--locations of window objects consistent...
Advantages of Using HP TopTools for Hubs & Switches You can operate HP TopTools from a PC on the network to monitor traffic, manage your hubs and switches, and proactively recommend network changes to increase network uptime and optimize performance. Easy to install and use, HP TopTools for Hubs &...
Page 31
Enables you to proactively manage your network by using the Alert Log to quickly identify problems and suggest solutions, saving valu- able time. • Notifies you when HP hubs use “self-healing” features to fix or limit common network problems. • Provides a list of discovered devices, with device type, connectivity status, the number of new or open alerts for each device, and the type of management for each device.
Page 33
Using the Menu Interface Contents Overview ........... . . 2-2 Starting and Ending a Menu Session .
Reboot the switch For a detailed list of menu features, see the “Menu Features List” on page 2-14. Privilege Levels and Password Security. HP strongly recommends that you configure a Manager password to help prevent unauthorized access to your network. A Manager password grants full read-write access to the switch.
Using the Menu Interface Starting and Ending a Menu Session N o t e If the switch has neither a Manager nor an Operator password, anyone having access to the console interface can operate the console with full manager privileges. Also, if you configure only an Operator password, entering the Operator password enables full manager privileges.
A PC terminal emulator or terminal • Telnet (You can also use the stack Commander if the switch is a stack member. See Chapter 14, “HP Procurve Stack Management”). Do one of the following: • If you are using Telnet, go to step 3.
Using the Menu Interface Starting and Ending a Menu Session Figure 2-1. The Main Menu with Manager Privileges For a description of Main Menu features, see “Main Menu Features” on page 2-7. N o t e To configure the switch to start with the menu interface instead of the CLI, go to the Manager level prompt in the CLI, enter the command, and in the setup...
Page 38
Using the Menu Interface Starting and Ending a Menu Session Asterisk indicates a configuration change that requires a reboot to activate. Figure 2-2. An Asterisk Indicates a Configuration Change Requiring a Reboot In the current session, if you have not made configuration changes that require a switch reboot to activate, return to the Main Menu and press (zero) to log out.
Using the Menu Interface Main Menu Features Main Menu Features Figure 2-3. The Main Menu View with Manager Privileges The Main Menu gives you access to these Menu interface features: Status and Counters: Provides access to display screens showing switch information, port status and counters, port and VLAN address tables, and spanning tree information.
Page 40
Stacking: Enables you to use a single IP address and standard network cabling to manage a group of up to 16 switches in the same subnet (broadcast domain). See Chapter 14, “HP Procurve Stack Management”. Logout: Closes the Menu interface and console session, and disconnects Telnet access to the switch.
Using the Menu Interface Screen Structure and Navigation Screen Structure and Navigation Menu interface screens include these three elements: Parameter fields and/or read-only information such as statistics Navigation and configuration actions, such as Save, Edit, and Cancel Help line to describe navigation options, individual parameters, and read- only data For example, in the following System Information screen: Screen title –...
Page 42
Using the Menu Interface Screen Structure and Navigation Table 2-1. How To Navigate in the Menu Interface Task: Actions: Execute an action Use either of the following methods: • Use the arrow keys ([ <] ,or [ >] ) to highlight the action you want to from the “Actions –>”...
Page 43
Using the Menu Interface Screen Structure and Navigation To get Help on individual parameter descriptions. In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlighted, press , and a separate help screen is displayed. For example: Pressing or highlighting Help and...
Using the Menu Interface Rebooting the Switch Rebooting the Switch Rebooting the switch from the menu interface Terminates all current sessions and performs a reset of the operating system Activates any menu interface configuration changes that require a reboot Resets statistical counters to zero (Note that statistical counters can be reset to zero without rebooting the switch.) To Reboot the switch, use the Reboot Switch option in the Main Menu.
Page 45
Using the Menu Interface Rebooting the Switch Rebooting To Activate Configuration Changes. Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the .
Using the Menu Interface Menu Features List Menu Features List Status and Counters • General System Information • Switch Management Address Information • Port Status • Port Counters • Address Table • Port Address Table • Spanning Tree Information Switch Configuration •...
To use the Run Setup option Refer to the Installation and Getting Started Guide shipped with the switch. To use the HP Procurve Stack Manager Chapter 14, “HP Procurve Stack Management” To view and monitor switch status and Appendix B, “Monitoring and Analyzing Switch counters Operation”...
Using the Command Line Interface (CLI) Overview Overview The CLI is a text-based command interface for configuring and monitoring the switch. The CLI gives you access to the switch’s full set of commands while providing the same password protection that is used in the web browser interface and the menu interface.
Using the Command Line Interface (CLI) Using the CLI Startup Config file in non-volatile memory. If you reboot the switch without first using write memory, all changes made since the last reboot or write memory (whichever is later) will be lost. For more on switch memory and saving configuration changes, see Chapter 5, “Switch Memory and Configuration”.
Using the CLI C a u t i o n HP strongly recommends that you configure a Manager password. If a Man- ager password is not configured, then the Manager level is not password- protected, and anyone having in-band or out-of-band access to the switch may be able to reach the Manager level and compromise switch and network security.
Page 53
Using the Command Line Interface (CLI) Using the CLI Manager Privileges Manager privileges give you three additional levels of access: Manager, Global Configuration, and Context Configuration. (See figure .) A " " character delimits any Manager prompt. For example: (Example of the Manager prompt.) Manager level: Provides all Operator level privileges plus the ability to perform system-level actions that do not require saving changes to the system configuration file.
Page 54
Using the Command Line Interface (CLI) Using the CLI Changing Interfaces. If you change from the CLI to the menu interface, or the reverse, you will remain at the same privilege level. For example, entering command from the Operator level of the CLI takes you to the Operator privilege level in the menu interface.
Using the Command Line Interface (CLI) Using the CLI How To Move Between Levels Change in Levels Example of Prompt, Command, and Result Operator level Manager level enable After you enter , the Password prompt appears. After you enter the Manager password, the system prompt appears with the symbol: Manager level...
Using the Command Line Interface (CLI) Using the CLI for VLAN 1 and later use the CLI to configure a different IP address of “Y” for VLAN 1, then “Y” replaces “X” as the IP address for VLAN 1 in the running- config file.
Page 57
Using the Command Line Interface (CLI) Using the CLI Typing? at the Manager level produces this listing: When - - MORE - - appears, use the Space bar or to list additional commands. Figure 3-4. Example of the Manager-Level Command Listing When - - MORE - - appears, there are more commands in the listing.
Page 58
Using the Command Line Interface (CLI) Using the CLI As mentioned above, if you type part of a command word and press , the CLI completes the current word (if you have typed enough of the word for the CLI to distinguish it from other possibilities), including hyphenated exten- sions.
Using the Command Line Interface (CLI) Using the CLI Listing Command Options. You can use the CLI to remind you of the options available for a command by entering command keywords followed . For example, suppose you want to see the command options for config- uring port C5: This example displays the command options for configuring port C5 on the switch.
Page 60
Using the Command Line Interface (CLI) Using the CLI Figure 3-6. Example of Context-Sensitive Command-List Help Displaying Help for an Individual Command. You can display Help for any command that is available at the current context level by entering enough of the command string to identify the command, along with help.
Using the Command Line Interface (CLI) Using the CLI Figure 3-8. Example of Help for a Specific Instance of a Command Note that trying to list the help for an individual command from a privilege level that does not include that command results in an error message. For example, trying to list the help for the interface command while at the global configuration level produces this result: Configuration Commands and the Context...
Page 62
Using the Command Line Interface (CLI) Using the CLI Lists the commands you can use in the port or static trunk context, plus the Manager, Operator, and context commands you can execute at this level. In the port context, the first block of commands in the "?" listing show the context-specific commands that will affect only ports C3-C6.
Page 63
Using the Command Line Interface (CLI) Using the CLI VLAN Context . Includes VLAN-specific commands that apply only to the selected VLAN, plus Manager and Operator commands. The prompt for this mode includes the VLAN ID of the selected VLAN. For example, if you had already configured a VLAN with an ID of 100 in the switch: Command executed at configura- tion level to enter VLAN 100...
Using the Command Line Interface (CLI) CLI Control and Editing CLI Control and Editing Keystrokes Function Jumps to the first character of the command line. or [ <] Moves the cursor back one character. Terminates a task and displays the command prompt. Deletes the character at the cursor.
Using a Standalone Web Browser in a PC or UNIX Workstation ..4-4 Using HP TopTools for Hubs & Switches ..... . . 4-5 Tasks for Your First HP Web Browser Interface Session .
Using the HP Web Browser Interface Overview Overview The HP web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. This lets you do the following: Optimize your network uptime by using the Alert Log and other diagnostic...
Using the HP Web Browser Interface General Features General Features The Switch 2650 and 6108 include these web browser interface features: Switch Configuration: • Ports • VLANs and Primary VLAN • Fault detection • Port monitoring (mirroring) • System information •...
• Directly connected to your network • Connected through remote access to your network Using a management station running HP TopTools for Hubs & Switches on your network Using a Standalone Web Browser in a PC or UNIX Workstation This procedure assumes that you have a supported web browser installed on your PC or workstation, and that an IP address has been configured on the switch.
Using HP TopTools for Hubs & Switches HP TopTools for Hubs & Switches is designed for installation on a network management workstation. For this reason, the HP TopTools system require- ments are different from the system requirements for accessing the switch’s web browser interface from a non-management PC or workstation.
Page 70
Using the HP Web Browser Interface Starting an HP Web Browser Interface Session with the Switch The web browser interface automatically starts with the Status Overview window displayed for the selected device, as shown in figure 4-1. N o t e If the Registration window appears, click on the Status tab.
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Tasks for Your First HP Web Browser Interface Session The first time you access the web browser interface, there are three tasks that you should perform: Review the “First Time Install”...
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session This window is the launching point for the basic configuration you need to perform to set web browser interface passwords to maintain security and Fault Detection policy, which determines the types of messages that will be displayed in the Alert Log.
Page 73
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Figure 4-3. The Device Passwords Window To set the passwords: Access the Device Passwords screen by one of the following methods: • If the Alert Log includes a “First Time Install” event entry, double click on this event, then, in the resulting display, click on the secure access to the device link.
Page 74
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session N o t e Passwords you assign in the web browser interface will overwrite previous passwords assigned in either the web browser interface, the Command Prompt, or the switch console.
Context-sensitive help is provided for the screen you are on. N o t e If you do not have HP TopTools for Hubs and Switches installed on your network and do not have an active connection to the World Wide Web, then Online help for the web browser interface will not be available.
- the URL of the network Management server or other source of the online help files for this web browser inter- face. (The default accesses Help on HP’s World Wide Web site.) Figure 4-6. The Default Support/Mgmt URLs Window 4-12...
4-6. The switch is shipped with the URL set to retrieve online Help from the HP World Wide Web site. However, if HP TopTools for Hubs & Switches is installed on a management station on your network and discovers the switch, the Management Server URL is automatically changed to retrieve the Help from your TopTools management station.
Page 78
Support/Mgmt URLs Feature If you have World Wide Web access from your PC or workstation, and do not have HP TopTools installed on your network, enter the following URL in the Management Server URL field shown in figure 4-7 on page 4-14: http://www.hp.com/rnd/device_help...
Using the HP Web Browser Interface Status Reporting Features Status Reporting Features Browser elements covered in this section include: The Overview window (below) Port utilization and status (page 4-16) The Alert log (page 4-19) The Status bar (page 4-22) The Overview Window The Overview Window is the home screen for any entry into the web browser interface.The following figure identifies the various parts of the screen.
Using the HP Web Browser Interface Status Reporting Features The Port Utilization and Status Displays The Port Utilization and Status displays show an overview of the status of the switch and the amount of network activity on each port. The following figure shows a sample reading of the Port Utilization and Port Status.
Page 81
Using the HP Web Browser Interface Status Reporting Features Maximum Activity Indicator: As the bars in the graph area change height to reflect the level of network activity on the corresponding port, they leave an outline to identify the maximum activity level that has been observed on the port.
Page 82
Using the HP Web Browser Interface Status Reporting Features Port Status Port Status Indicators Legend Figure 4-12. The Port Status Indicators and Legend The Port Status indicators show a symbol for each port that indicates the general status of the port. There are four possible statuses: Port Connected –...
Using the HP Web Browser Interface Status Reporting Features The Alert Log The web browser interface Alert Log, shown in the lower half of the screen, shows a list of network occurrences, or alerts, that were detected by the switch. Typical alerts are Broadcast Storm, indicating an excessive number of broadcasts received on a port, and Problem Cable, indicating a faulty cable.
Using the HP Web Browser Interface Status Reporting Features Alert Types The following table lists the types of alerts that can be generated. Table 4-1. Alert Strings and Descriptions Alert String Alert Description First Time Install Important installation information for your switch.
Page 85
Using the HP Web Browser Interface Status Reporting Features N o t e When troubleshooting the sources of alerts, it may be helpful to check the switch’s Port Status and Port Counter windows and the Event Log in the console interface.
Using the HP Web Browser Interface Status Reporting Features The Status Bar The Status Bar is displayed in the upper left corner of the web browser interface screen. Figure 4-15 shows an expanded view of the status bar. Most Critical Alert Description...
Using the HP Web Browser Interface Status Reporting Features Product Name. The product name of the switch to which you are connected in the current web browser interface session. Setting Fault Detection Policy One of the powerful features in the web browser interface is the Fault Detection facility.
Page 88
Never. Disables the Alert Log and transmission of alerts (traps) to the management server (in cases where a network management tool such as HP TopTools for Hubs & Switches is in use). Use this option when you don’t want to use the Alert Log.
Switch Memory and Configuration Overview Overview This chapter describes: How switch memory manages configuration changes How the CLI implements configuration changes How the menu interface and web browser interface implement configu- ration changes How the switch provides OS (operating system) options through primary/ secondary flash image options How to use the switch’s primary and secondary flash options, including displaying flash information, booting or restarting the switch, and other...
Page 91
Switch Memory and Configuration Overview of Configuration File Management Running Config File: Exists in volatile memory and controls switch operation. If no configuration changes have been made in the CLI since the switch was last booted, the running-config file is identical to the startup-config file.
Switch Memory and Configuration Using the CLI To Implement Configuration Changes "permanent". When you are satisfied that the change is satisfactory, you can make it permanent by executing the command. For example, write memory suppose you use the following command to disable port 5: The above command disables port 5 in the running-config file, but not in the startup-config file.
Page 93
Switch Memory and Configuration Using the CLI To Implement Configuration Changes The option of testing configuration changes before making them perma- nent How To Use the CLI To View the Current Configuration Files. Use commands to view the configuration for individual features, such as port show status or Spanning Tree Protocol.
Page 94
Switch Memory and Configuration Using the CLI To Implement Configuration Changes For example, the default port mode setting is . Suppose that your network auto uses Cat 3 wiring and you want to connect the switch to another autosensing device capable of 100 Mbps operation. Because 100 Mbps over Cat 3 wiring can introduce transmission problems, the recommended port mode is auto-10 which allows the port to negotiate full- or half-duplex, but restricts speed to...
Page 95
Switch Memory and Configuration Using the CLI To Implement Configuration Changes Disables port 1 in the running configuration, which causes port 1 to block all traffic. Press to continue the rebooting process. You will then see this prompt. Figure 5-2. Boot Prompt for an Unsaved Configuration The above prompt means that one or more parameter settings in the running- config file differ from their counterparts in the startup-config file and you need to choose which config file to retain and which to discard.
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes How To Reset the startup-config and running-config Files to the Factory-Default Configuration. This command reboots the switch, replacing the contents of the current startup-config and running-config files with the factory-default startup configuration.
Page 97
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes N o t e The only exception to this operation are two VLAN-related parameter changes that require a reboot—described under “Rebooting To Activate Configuration Changes” on page 5-10. Using in the Menu Interface Save...
Page 98
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes the menu interface, the switch discards the configuration changes made while using the CLI. To ensure that changes made while using the CLI are saved, execute write memory in the CLI before rebooting the switch.
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes (To access these parameters, go to the Main menu and select 2. Switch Configuration, then 8. VLAN Menu, then 1. VLAN Support If configuration changes requiring a reboot have been made, the switch displays an asterisk (*) next to the menu item in which the change has been made.
Switch Memory and Configuration Using Primary and Secondary Flash Image Options Using Primary and Secondary Flash Image Options The Series 4100GL switches feature two flash memory locations for storing system image (operating system, or OS) files: Primary Flash: The default storage for OS (system image) files. Secondary Flash: The additional storage for either a redundant or an alternate OS (system image) file.
Page 101
Switch Memory and Configuration Using Primary and Secondary Flash Image Options For example, if the switch is using an OS version of G.01.01 stored in Primary flash, show version produces the following: Figure 5-7. Example Showing the Identity of the Current Flash Image Determining Whether the Flash Images Are Different Versions.
Switch Memory and Configuration Using Primary and Secondary Flash Image Options 1. In this example show version indicates the switch has version G.05.01 in primary flash. 2. After the boot system command, show version indicates that version G.05.00 is in secondary flash.
OS file. The process automatically overwrites the previous file with the new file. If you want to remove an unwanted OS version from flash, HP recommends that you do so by overwriting it with the same OS version that you are using to operate the switch, or with another acceptable OS version.
Page 104
Switch Memory and Configuration Using Primary and Secondary Flash Image Options Verify that there is a valid flash image in the secondary flash location. The following figure indicates that an OS image is present in secondary flash. (If you are unsure whether the image is secondary flash is valid, try booting from it before you proceed, by using boot system flash secondary.) The unequal code size, differing dates,...
Switch Memory and Configuration Using Primary and Secondary Flash Image Options The prompt shows which flash location will be erased. Figure 5-11. Example of Erase Flash Prompt Type y at the prompt to complete the flash erase. Use show flash to verify erasure of the selected OS flash image The "...
Page 106
Switch Memory and Configuration Using Primary and Secondary Flash Image Options Booting from Primary Flash. This command always boots the switch from primary flash, and executes the complete set of subsystem self-tests. Syntax: boot For example, to boot the switch from primary flash with pending configuration changes in the running-config file: Figure 5-13.
Booting from the Current OS Version. Reload reboots the switch from the flash image on which the switch is currently running, and saves to the startup-config file any configuration changes currently in the running-config file. Because reload bypasses some subsystem self-tests, the switch reboots faster than if you use either of the boot command options.
Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, Using the HP Web Browser Interface” Why Configure Interface Access and System Information? The inter- face access features in the switch operate properly by default. However, you can modify or disable access features to suit your particular needs.
Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet Menu: Modifying the Interface Access The menu interface enables you to modify these parameters: Inactivity Time-out Inbound Telnet Enabled Web Agent Enabled To Access the Interface Access Parameters: From the Main Menu, Select...
Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet CLI: Modifying the Interface Access Interface Access Commands Used in This Section show console below [no] telnet-server below [no] web-management page 6-6 console page 6-6 Listing the Current Console/Serial Link Configuration.
Page 114
Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet Outbound Telnet to Another Device. This feature operates indepen- dently of the telnet-server status and enables you to Telnet to another device that has an IP address. Syntax: telnet <...
Page 115
Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet VT100 operation 19,200 baud No flow control 10-minute inactivity time Critical log events you would use the following command sequence: The switch implements the Event Log change immediately. The switch implements write memory reload the other console changes after executing...
Interface Access, System Information, and Friendly Port Names Denying Interface Access by Terminating Remote Management Sessions Denying Interface Access by Terminating Remote Management Sessions The switch supports up to four management sessions. You can use show ip ssh to list the current management sessions, and kill to terminate a currently running remote session.
System Name: Using a unique name helps you to identify individual devices in stacking environments and where you are using an SNMP network manage- ment tool such as HP TopTools for Hubs & Switches. System Contact and Location: This information is helpful for identifying the person administratively responsible for the switch and for identifying the locations of individual switches.
Daylight Time Rule: Specifies the daylight savings time rule to apply for your location. The default is None. (For more on this topic, see appendix E, “Daylight Savings Time on HP ProCurve Switches.) Time: Used in the CLI to specify the time of day, the date, and other system parameters.
Interface Access, System Information, and Friendly Port Names System Information Refer to the online help provided with this screen for further information on configuration options for these features. When you have finished making changes to the above parameters, press , then press (for Save) and return to the Main Menu.
Page 120
Interface Access, System Information, and Friendly Port Names System Information Configure a System Name, Contact, and Location for the Switch. To help distinguish one switch from another, configure a plain-language identity for the switch. hostname <name-string> Syntax: snmp-server [contact <system contact>] [location <system location>] Both fields allow up to 48 characters.
Page 121
Interface Access, System Information, and Friendly Port Names System Information Reconfigure the Age Time for Learned MAC Addresses. This com- mand corresponds to the MAC Age Interval in the menu interface, and is expressed in seconds. mac-age-time <60...999960> (seconds) Syntax: For example, to configure the age time to seven minutes: Configure the Time Zone and Daylight Time Rule.
Interface Access, System Information, and Friendly Port Names System Information Web: Configuring System Parameters In the web browser interface, you can enter the following system information: System Name System Location System Contact For access to the MAC Age Interval and the Time parameters, use the menu interface or the CLI.
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Using Friendly (Optional) Port Names Feature Default Menu Configure Friendly Port Names Standard Port page 16 Numbering Display Friendly Port Names page 18 This feature enables you to assign alphanumeric port names of your choosing to augment automatically assigned numeric port names.
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names To retain friendly port names across reboots, you must save the current running-configuration to the startup-config file after entering the friendly port names. (In the CLI, use the write memory command.) Configuring Friendly Port Names Syntax:interface [e] <port-list>...
Page 125
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Configuring the Same Name for Multiple Ports. Suppose that you want to use ports A5 through A8 as a trunked link to a server used by a drafting group.
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Displaying Friendly Port Names with Other Port Data You can display friendly port name data in the following combinations: show name: Displays a listing of port numbers with their corresponding friendly port names and also quickly shows you which ports do not have friendly name assignments.
Page 127
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Port Without a "Friendly" Name Friendly port names assigned in previous examples. Figure 6-12. Example of Friendly Port Name Data for Specific Ports on the Switch Including Friendly Port Names in Per-Port Statistics Listings. A friendly port name configured to a port is automatically included when you display the port’s statistics output.
Page 128
Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names For a given port, if a friendly port name does not exist in the running-config file, the line in the above command output appears as: To Search the Configuration for Ports with Friendly Port Names. This option tells you which friendly port names have been saved to the startup- config file.
Configuring IP Addressing Overview Overview You can configure IP addressing through all of the switch’s interfaces. You can also easily edit a switch configuration file to allow downloading the file to multiple Switches 2650 and 6108 without overwriting each switch’s unique gateway and VLAN 1 IP addressing.
Configuring IP Addressing IP Configuration IP Configuration IP Configuration Features Feature Default Menu IP Address and Subnet Mask DHCP/Bootp page 7-5 page 7-7 page 7-9 Default Gateway Address none page 7-5 page 7-7 page 7-9 Packet Time-To-Live (TTL) 64 seconds page 7-5 page 7-7 Time Server (Timep)
If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing. To do so, do one of the following: Enter setup at the CLI Manager level prompt.
IP Addressing in a Stacking Environment If you are installing the switch into an HP Procurve stack management environment, entering an IP address may not be required. See chapter 14, ‘HP Procurve Stack Management’ for more information. Menu: Configuring IP Address, Gateway, and Time-To-...
Page 134
Configuring IP Addressing IP Configuration For descriptions of these parameters, see the online Help for this screen. Before using the DHCP/ Bootp option, refer to “DHCP/Bootp Operation” on page 7-10. Figure 5-1. Example of the IP Service Configuration Screen without Multiple VLANs Configured Press (for Edit).
Configuring IP Addressing IP Configuration CLI: Configuring IP Address, Gateway, and Time-To- Live (TTL) IP Commands Used in This Section show ip page 7-7 vlan <vlan-id> ip page 7-8 address ip default-gateway page 7-8 ip ttl page 7-9 Viewing the Current IP Configuration. The following command displays the IP addressing for each VLAN configured in the switch.
Page 136
Configuring IP Addressing IP Configuration A Switch 4108GL with IP Addressing and VLANs Configured Figure 5-3. Example of Show IP Listing with Non-Default IP Addressing Configured Configure an IP Address and Subnet Mask. The following command includes both the IP address and the subnet mask. You must either include the ID of the VLAN for which you are configuring IP addressing or go to the context configuration level for that VLAN.
Console RS-232 port. You can use direct-connect console access to take advantage of features that do not depend on IP addressing. However, to realize the full performance capabilities HP proactive networking offers through the switch, configure the switch with an IP address and subnet mask compatible with your network.
Page 138
Additional Features Available with an IP Address and Subnet Mask • Direct-connect access to the CLI and the menu interface. • HP web browser interface access, with configuration, security, and diagnostic tools, plus the Alert Log for • Stacking Candidate or Stack Member discovering problems detected in the switch along with •...
Page 139
Configuring IP Addressing IP Configuration DHCP/Bootp requests are automatically broadcast on the local network. (The switch sends one type of request to which either a DHCP or Bootp server can respond.) When a DHCP or Bootp server receives the request, it replies with a previously configured IP address and subnet mask for the switch.
Page 140
Configuring IP Addressing IP Configuration Bootp Operation. When a Bootp server receives a request it searches its Bootp database for a record entry that matches the MAC address in the Bootp request from the switch. If a match is found, the configuration data in the associated database record is returned to the switch.
Page 141
Configuring IP Addressing IP Configuration is the IP address of the default gateway. TFTP server address (source of final configuration file) T144 is the vendor-specific “tag” identifying the configuration file to download. is a required entry that specifies the Bootp report format. For the Switches 2650 and 6108, set this parameter to rfc1048.
Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads IP Preserve enables you to copy a configuration file to multiple Switches 2650 and 6108 while retaining the individual IP address and subnet mask on VLAN 1 in each switch, and the Gateway IP address assigned to the switch.
TFTP server (figure 7-6), but retain their current IP acquires new IP addressing from the DHCP Figure 7-5. Example of IP Preserve Operation with Multiple HP Switches If you apply the following configuration file to figure 7-5, switches 1 - 3 will retain their manually assigned IP addressing and switch 4 will be configured to acquire its IP addressing from a DHCP server.
Page 144
Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Using figure 7-5, above, switches 1 - 3 ignore these entries because the file implements IP Preserve and their current IP addressing was not acquired through DHCP/Bootp. Switch 4 ignores IP Preserve and implements the DHCP/Bootp addressing and IP Gateway specified in this file (because its last IP addressing was acquired...
Page 145
Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Because switch 4 (figure 7-5) received its most recent IP addressing from a DHCP/Bootp server, the switch ignores the ip preserve command and implements the IP addressing included in this file.
Configuring IP Addressing Globally Assigned IP Network Addresses Globally Assigned IP Network Addresses If you intend to connect your network to other networks that use globally administered IP addresses, Hewlett-Packard strongly recommends that you use IP addresses that have a network address assigned to you. There is a formal process for assigning unique IP addresses to networks worldwide.
Time Protocols Overview Overview This chapter describes: SNTP Time Protocol Operation Timep Time Protocol Operation Using time synchronization ensures a uniform time among inter operating devices. This helps you to manage and troubleshoot switch operation by attaching meaningful time data to event and error messages. The switch offers TimeP and SNTP (Simple Network Time Protocol) and a timesync command for changing the time protocol selection (or turning off time protocol operation).
Time Protocols Overview: Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation ular server, it ignores time broadcasts from other SNTP servers unless the configurable expires three consecutive times without Poll Interval an update received from the first-detected server. N o t e To use Broadcast mode, the switch and the SNTP server must be in the same subnet.
Time Protocols SNTP: Viewing, Selecting, and Configuring Note that simply selecting a time synchronization protocol does not enable that protocol on the switch unless you also enable the protocol itself (step 2, above). For example, in the factory-default configuration, TimeP is the selected time synchronization method.
Time Protocols SNTP: Viewing, Selecting, and Configuring Table 8-1.SNTP Parameters SNTP Parameter Operation Time Sync Used to select either SNTP, TIMEP, or None as the time synchronization method. Method SNTP Mode Disabled The Default. SNTP does not operate, even if specified by the Menu interface Time Sync Method parameter or the CLI timesync command.
Page 152
Time Protocols SNTP: Viewing, Selecting, and Configuring Time Protocol Selection Parameter – TIMEP – SNTP – None Figure 8-1. The System Information Screen (Default Values) Press (for ). The cursor moves to the field. Edit System Name Use [ v] to move the cursor to the Time Sync Method field.
Page 153
SNTP server version running on the device you specified in the preceding step (step ii). If you are unsure which version to use, HP recommends leaving this value at the default setting of and testing SNTP operation to determine whether any change is necessary.
Time Protocols SNTP: Viewing, Selecting, and Configuring CLI: Viewing and Configuring SNTP CLI Commands Described in this Section show sntp page 8-8 [no] timesync pages 8-9 and ff., 8-12 sntp broadcast page 8-9 sntp unicast page 8-10 sntp server pages 8-10 and ff. Protocol Version page 8-12 poll-interval...
Page 155
Time Protocols SNTP: Viewing, Selecting, and Configuring Even though, in this example, TimeP is the current time synchronous method, the switch maintains the SNTP configuration. Figure 8-3. Example of SNTP Configuration When SNTP Is Not the Selected Time Synchronization Method Configuring (Enabling or Disabling) the SNTP Mode Enabling the SNTP mode means to configure it for either broadcast or unicast mode.
Page 156
Time Protocols SNTP: Viewing, Selecting, and Configuring 3. Enable SNTP for Broadcast mode. 4. View the SNTP configuration again to verify the configuration. The commands and output would appear as follows: show sntp displays the SNTP configuration and also shows that TimeP is the currently active time synchronization mode.
Page 157
Time Protocols SNTP: Viewing, Selecting, and Configuring N o t e Deleting an SNTP server when only one is configured disables SNTP unicast operation. For example, to select SNTP and configure it with unicast mode and an SNTP server at 10.28.227.141 with the default server version (3) and default poll interval (720 seconds): Selects SNTP.
Page 158
Time Protocols SNTP: Viewing, Selecting, and Configuring Deletes unicast SNTP server entry. Re-enters the unicast server with a non- default protocol version. show sntp displays the result. Figure 8-6. Example of Specifying the SNTP Protocol Version Number Changing the SNTP Poll Interval. This command lets you specify how long the switch waits between time polling intervals.
Time Protocols TimeP: Viewing, Selecting, and Configuring Disabling the SNTP Mode. If you want to prevent SNTP from being used even if selected by (or the Menu interface’s param- timesync Time Sync Method eter), configure the SNTP mode as disabled. Syntax: no sntp Disables SNTP by changing the SNTP mode configuration to...
Time Protocols TimeP: Viewing, Selecting, and Configuring Table 8-2.Timep Parameters SNTP Parameter Operation Time Sync Used to select either TIMEP (the default), SNTP, or None as the time synchronization method. Method Timep Mode Disabled The Default. Timep does not operate, even if specified by the Menu interface Time Sync Method parameter or the CLI timesync command.
Page 161
Time Protocols TimeP: Viewing, Selecting, and Configuring Time Protocol Selection Parameter – TIMEP (the default) – SNTP – None Figure 8-9. The System Information Screen (Default Values) Press (for ). The cursor moves to the field. Edit System Name Use [ v] to move the cursor to the Time Sync Method field.
Time Protocols TimeP: Viewing, Selecting, and Configuring Note: This step replaces any previously configured TimeP server IP address. iii. Press [ >] to move the cursor to the field, then go to Poll Interval step 6. In the field, enter the time in minutes that you want for a TimeP Poll Interval Poll Interval.
Page 163
Time Protocols TimeP: Viewing, Selecting, and Configuring For example, if you configure the switch with TimeP as the time synchroniza- tion method, then enable TimeP in DHCP mode with the default poll interval, lists the following: show timep Figure 8-10. Example of TimeP Configuration When TimeP Is the Selected Time Synchronization Method If SNTP is the selected time synchronization method), still lists the...
Page 164
Time Protocols TimeP: Viewing, Selecting, and Configuring For example, suppose: Time synchronization is configured for SNTP. You want to: 1. View the current time synchronization. 2. Select TimeP as the time synchronization mode. 3. Enable TimeP for DHCP mode. 4. View the TimeP configuration. The commands and output would appear as follows: ...
Page 165
Time Protocols TimeP: Viewing, Selecting, and Configuring For example, to select TimeP and configure it for manual operation using a TimeP server address of 10.28.227.141 and the default poll interval (720 minutes, assuming the TimeP poll interval is already set to the default): HPswitch(config)# timesync timep Selects TimeP.
Page 166
Time Protocols TimeP: Viewing, Selecting, and Configuring If you then viewed the TimeP configuration, you would see the following: Figure 8-14. Example of TimeP with Time Sychronization Disabled Disabling the TimeP Mode. Disabling the TimeP mode means to configure it as disabled. (Disabling TimeP prevents the switch from using it as the time synchronization protocol, even if it is the selected option.) Time Sync Method...
Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers SNTP Unicast Time Polling with Multiple SNTP Servers When running SNTP unicast time polling as the time synchronization method, the switch requests a time update from the server you configured with either the Server Address parameter in the menu interface, or the primary server in a list of up to three SNTP servers configured using the CLI.
Page 168
Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers Prioritized list of SNTP Server IP Addresses Figure 8-16. Example of SNTP Server Address Prioritization N o t e If there are already three SNTP server addresses configured on the switch, and you want to use the CLI to replace one of the existing addresses with a new one, you must delete the unwanted address before you configure the new one.
Time Protocols SNTP Messages in the Event Log Menu: Operation with Multiple SNTP Server Addresses When you use the Menu interface to configure an SNTP server IP address, the new address writes over the current primary address, if one is configured. If there are multiple addresses configured, the switch re-orders the addresses according to the criteria described under “Address Prioritization”...
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Contents Overview ........... . . 9-2 Viewing Port Status and Configuring Port Parameters .
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Overview Overview This chapter includes: Configuring ports to non-default settings (page 9-2) These settings include enable/disable, mode (speed and duplex), flow control, port-trunk group, and port-trunk type. You can also set a broadcast limit that applies to all ports on the switch.
Page 173
• Auto-10: Allows the port to negotiate between half-duplex (HDx) and full-duplex (FDx) while keeping speed at 10 Mbps. Also negotiates flow control (enabled or disabled). HP recommends Auto-10 for links between 10/100 autosensing ports connected with Cat 3 cabling. (Cat 5 cabling is required for 100 Mbps links.).
Page 174
LACP trunk, if any, to which a port belongs. (CLI) Note: An LACP trunk requires a full-duplex link. In most cases, HP recommends that you leave the port Mode setting at Auto (the default). See the LACP Note on page 9-11.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Menu: Viewing Port Status and Configuring Port Parameters From the menu interface, you can configure and view all port parameter settings and view all port status indicators. Using the Menu To View Port Status.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Figure 9-2. Example of Port/Trunk Settings with a Trunk Group Configured (for Edit). The cursor moves to the Enabled field for the first port. Press Refer to the online help provided with this screen for further information on configuration options for these features.
Page 177
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters show interfaces brief Syntax: show interface config The next two figures list examples of the output of the above two commands for the same port configuration. Figure 9-3.
Page 178
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Using the CLI To Configure Ports. You can configure one or more of the following port parameters. For details on each option, see Table 9-9-1 on page 9-3.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Configuring a Broadcast Limit on the Switch. Executing this command configures the broadcast limit for all ports on the switch. Syntax: broadcast-limit < 0 . . 99 > For example, to configure a broadcast limit of 20% for all ports on the switch: To display the current broadcast limit setting, use one of the following com- mands:...
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Port Trunking Port Status and Configuration Features Feature Default Menu viewing port trunks page 9-16 page 9-18 page 9-24 configuring a static trunk none page 9-16 page 9-22 —...
L A C P N o t e LACP operation requires full-duplex (FDx) links. For most installations, HP recommends that you leave the port Mode settings at Auto (the default). LACP also operates with Auto-10, Auto-100, and Auto-1000 (if negotiation selects FDx);...
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Fault Tolerance: If a link in a port trunk fails, the switch redistributes traffic originally destined for that link to the remaining links in the trunk. The trunk remains operable as long as there is at least one link in operation.
Page 183
See “Trunk Group Operation Using LACP” on page 9-25. Trunk Provides manually configured, static-only trunking to: (non- • Most HP switches and routing switches not running the 802.3ad LACP protocol. protocol) • Windows NT and HP-UX workstations and servers Use the Trunk option when: –...
Page 184
Media: All ports on both ends of a trunk group must have the same media type and mode (speed and duplex). The switch blocks any trunked links that do not conform to this rule. (For the Switches 2650 and 6108, HP recommends leaving the...
Page 185
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Spanning Tree: Spanning Tree operates as a global setting on the switch (one instance of Spanning Tree per switch). However, you can adjust Spanning Tree parameters on a per-port basis. A static trunk of any type appears in the Spanning Tree configuration display, and you can configure Spanning Tree parameters for a static trunk in the same way that you would configure Spanning Tree parameters on a non-trunked port.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Menu: Viewing and Configuring a Static Trunk Group Important Configure port trunking before you connect the trunked links to another switch, routing switch, or server. Otherwise, a broadcast storm could occur. (If you need to connect the ports before configuring them for trunking, you can temporarily disable the ports until the trunk is configured.
Page 187
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking • All ports in a trunk must have the same media type and mode (such as 10/100TX set to 100FDx, or 100FX set to 100FDx). The flow control settings must also be the same for all ports in a given trunk.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking During the Save process, traffic on the ports configured for trunking will be delayed for several seconds. If the Spanning Tree Protocol is enabled, the delay may be up to 30 seconds. Connect the trunked ports on the switch to the corresponding ports on the opposite device.
Page 189
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Using a port list specifies, for switch ports in a static trunk group, only the ports you want to view. In this case, the command specifies ports A5 through A7.
Page 190
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Listing Static LACP and Dynamic LACP Trunk Data. This command lists data for only the LACP-configured ports. Syntax: show lacp In the following example, ports A1 and A2 have been previously configured for a static LACP trunk.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking “Up” Links Standby Link Figure 9-11. Example of a Dynamic LACP Trunk with One Standby Link Using the CLI To Configure a Static or Dynamic Trunk Group I m p o r t a n t Configure port trunking before you connect the trunked links between switches.
Page 192
Removing a port from a trunk can result in a loop and cause a broadcast storm. When you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.
Page 193
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Enabling a Dynamic LACP Trunk Group. In the default port configura- tion, all ports on the switch are set to LACP Passive. However, to enable the switch to automatically form a trunk group that is dynamic on both ends of the link, the ports on one end of a set of links must be LACP Active.
Unless STP is running on your network, removing a port from a trunk can result in a loop. To help prevent a broadcast storm when you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Trunk Group Operation Using LACP The switch can automatically configure a dynamic LACP trunk group or you can manually configure a static LACP trunk group. N o t e LACP requires full-duplex (FDx) links of the same media type (10/100Base-T, 100FX, etc.) and the same speed, and enforces speed and duplex conformance across a trunk group.
Page 196
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Table 9-5. LACP Trunk Types LACP Port Trunk Operation Configuration 802.3ad-compliant Dynamic LACP This option automatically establishes an trunk group, with LACP for the port Type parameter and DynX for the port Group name, where X is an automatically assigned value from 1 to 6, depending on how many dynamic and static trunks are currently on the switch.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Default Port Operation In the default configuration, all ports are configured for passive LACP. How- ever, if LACP is not configured, the port will not try to detect a trunk config- uration and will operate as a standard, untrunked port.
Page 198
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Status Name Meaning LACP Partner Yes: LACP is enabled on both ends of the link. No: LACP is enabled on the Switches 2650 and 6108, but either LACP is not enabled or the link has not been detected on the opposite device.
Page 199
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking LACP Notes and Restrictions 802.1x (Port-Based Access Control) Configured on a Port. To main- tain security, LACP is not allowed on ports configured for 802.1x authenticator operation. If you configure port security on a port on which LACP (active or passive) is configured, the switch removes the LACP configuration, displays a notice that LACP is disabled on the port(s), and enables 802.1x on that port.
Page 200
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Changing Trunking Methods. To convert a trunk from static to dynamic, you must first eliminate the static trunk. Static LACP Trunks. Where a port is configured for LACP (Active or Passive), but does not belong to an existing trunk group, you can add that port to a static trunk.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Half-Duplex and/or Different Port Speeds Not Allowed in LACP Trunks. The ports on both sides of an LACP trunk must be configured for the same speed and for full-duplex (FDx). The 802.3ad LACP standard speci- fies a full-duplex (FDx) requirement for LACP trunking.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Depending on the capabilities of the device on the other end of the trunk, negotiate the forwarding mechanism on the trunk to the non-protocol option. When auto-negotiated to the SA/DA forwarding mechanism, provide higher performance on the trunk for broadcast, multicast, and flooded traffic through distribution in the same manner as non-protocol trunking.
Page 203
In actual networking environments, this is rarely a problem. However, if it becomes a problem, you can use the HP TopTools for Hubs & Switches network management software available from Hewlett- Packard to quickly and easily identify the sources of heavy traffic (top talkers) and make adjustments to improve performance.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configuring Port-Based Priority for Incoming Packets Feature Default Menu Assigning a priority level to traffic on the basis Disabled page 9-37 of incoming port When network congestion occurs, it is important to move traffic on the basis of relative importance.
High. As described below, these three queues map to the eight priority settings specified in the 802.1p standard. Table 9-8. Mapping Priority Settings to Device Queues 802.1p Priority Settings Used HP Switch and Queue Assignment in Downstream Devices In Tagged VLAN Packets Other Devices With:...
Page 206
Otherwise the tag is removed and the 802.1p priority is lost as the packet moves from one switch to the next. Operating Rules for Port-Based Priority on HP Switches In the switch’s default configuration, port-based priority is configured as “0”...
Page 207
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configuring and Viewing Port-Based Priority This command enables or disables port-based priority on a per-port basis. You can either enter the command on the interface context level or include the interface in the command.
Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configures port-based priority on ports A9 -A12 to "1" (Low) and saves the configuration changes to the startup- config file. Ports A9 - A12 are now configured to assign a priority level of "1"...
Configuring for Network Management Applications Contents Using SNMP Tools To Manage the Switch ..... . 10-2 Overview ..........10-2 SNMP Management Features .
For more on Authorized IP Managers, refer to the Access Security Guide on the Documentation CD-ROM shipped with your switch and also available on the HP Procurve web site. For information on the Manage- ment VLAN feature, refer to “The Secure Management VLAN” on page 11-26.
Version 1 traps • RMON: groups 1, 2, 3, and 9 Managing the switch with an SNMP network management tool such as HP TopTools for Hubs & Switches Standard MIBs, such as the Bridge MIB (RFC 1493), Ethernet MAU MIB (RFC 1515), and others.
Using SNMP Tools To Manage the Switch C a u t i o n The “public” community exists by default and is used by HP’s network man- agement applications. Deleting the “public” community disables many net- work management functions (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting).
Page 213
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Note: This screen gives an overview of the SNMP communities that are currently Add and Edit options are configured. All fields in used to modify the SNMP this screen are read- options.
Page 214
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch CLI: Viewing and Configuring Community Names Community Name Commands Page show snmp-server [<community-string>] 10-6 [no] snmp-server 10-7 [community <community-str>] 10-7 [host <community-str> <ip-addr>] 10-10 [<none | debug | all | not-info | critical>] [enable traps <authentication>...
Page 215
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Configuring Community Names and Values. The snmp-server command enables you to add SNMP communities with either default or specific access attributes, and to delete specific communities. Syntax: [no] snmp-server community < community-name > Configures a new community name.
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Trap Receivers and Authentication Traps Trap Features Feature Default Menu snmp-server host (trap receiver) public — page — 10-10 snmp-server enable (authentication trap) none — page — 10-11 A trap receiver is a management station designated by the switch to receive SNMP traps sent from the switch.
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Using the CLI To List Current SNMP Trap Receivers. This command lists the currently configured trap receivers and the setting for authentication traps (along with the current SNMP community name data — see “SNMP Communities”...
Page 218
Table 10-1. Options for Sending Event Log Messages as Traps Event Level Description None (default) Send no log messages. Send all log messages. Not INFO Send the log messages that are not information-only. Critical Send critical-level log messages. Debug Reserved for HP-internal use. 10-10...
Page 219
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch For example, to configure a trap receiver in a community named "red-team" with an IP address of 10.28.227.130 to receive only "critical" log messages: N o t e s To replace one community name with another for the same IP address, you must use no snmp-server host <...
RMON traps and events. Note that you can access the Ethernet statistics, Alarm, and Event groups from the HP TopTools for Hubs & Switches network management software. For more on TopTools, see the "Read Me First" document shipped with your switch and also available on HP’s ProCurve website at...
To take advantage of CDP in Switches 2650 and 6108, you should have a working knowledge of SNMP operation and an SNMP utility capable of polling the switches for CDP data. HP’s implementation of CDP places specific data into the switch’s Management Information Base (MIB). However, retrieval of this data for network mapping is dependent on the operation of your SNMP utility.
Configuring for Network Management Applications An SNMP utility can progressively discover CDP devices in a network by: Reading a given device’s CDP Neighbor table (in the Management Infor- mation Base, or MIB) to learn about other, neighbor CDP devices Using the information learned in step 1 to go to and read the neighbor devices’...
Configuring for Network Management Applications General CDP Operation The switch stores information about adjacent CDP devices in a CDP Neigh- bors table maintained in the switch’s MIB (Management Information Base). This data is available to SNMP-based applications designed to read CDP data from the MIB.
CDP-Aware packets describing itself (Switch "C"). Switch with CDP Disabled Switch "A" Accepts, but does not forward CDP HP Switches with Router "X" packets from Switch "A". Also transmits CDP Running and CDP packets describing itself (Router "X") Forwarding CDP With CDP out all ports.
Page 225
Configuring for Network Management Applications CDP neighbor pairs are as follows: A/1, A/2, A/3, A/B, B/C. Note that “C” and “E” are not neighbors because the intervening CDP-disabled switch “D” does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E”...
Page 226
Configuring for Network Management Applications Using the example in figure 10-7, the CDP Neighbor table for switches “A” and “B” would appear similar to these: Switch A: Switch B: (Note that no CDP devices appear on port B5, which is connected to a device on which CDP is present, but disabled.) Figure 10-8.
Configuring for Network Management Applications CDP-disabled switch) does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E” does not have any CDP neighbors.) Figure 10-7 (page 10-17) illustrates how multiple CDP neighbors can appear on a single port.
Configuring for Network Management Applications Viewing the Switch’s Current CDP Configuration Syntax: show cdp Lists the switch’s global and per-port CDP configura- tion. This example shows the default CDP configuration. CDP Enable/Disable on the Switch Packet Hold Time in CDP Neighbor Table Interval for Transmitting Outbound CDP Packets on All Ports Per-Port CDP Enable/Disable...
CDP packets. Figure 10-10. Example of CDP Neighbors Table Listing Figure 10-11 illustrates a topology of CDP-enabled devices for the CDP Neigh- bors table listing in figure 10-10. HP Series 6108GL HP Switch 2512 Switch HP J4812A: Accounting...
Configuring for Network Management Applications Note that the table will again list entries after the switch receives new CDP packets from neighboring CDP devices. Figure 10-12. View of the CDP Neighbors Table Immediately After Executing cdp clear Configuring CDP Operation Enabling or Disabling CDP Operation on the Switch.
Page 231
Configuring for Network Management Applications Enabling or Disabling CDP Operation on Individual Ports. In the factory-default configuration, the switch has all ports enabled and transmit- ting CDP packets. Disabling CDP on a port prevents that port from sending outbound CDP packets and causes it to drop inbound CDP packets without recording their data in the CDP Neighbors table.
Configuring for Network Management Applications Changing the Transmission Interval for Outbound CDP Packets. Syntax: cdp timer < 5 . . 254 > Changes the interval the switch uses to transmit CDP packets describing itself to neighbor devices. (Default: 60 seconds) For example, if the switch’s transmit interval for CDP packets was set to a non-default value, you would use this command to reset it to one minute: Changing the Hold Time (CDP Packet Time-To-Live) for a Switch’s...
Configuring for Network Management Applications CDP Packets from Switch "A" to Switch "B" Switch "B" Switch "A" Port A3 CDP Enabled CDP Enabled Port B1 STP Root Device CDP Neighbor Table Port C5 CDP Packets from Port | Data Switch "B" to Switch "A" ------|------------------ CDP Neighbor Table A3 | Switch "B"data...
Configuring for Network Management Applications If a CDP switch does not detect an IP address on the connecting port of a CDP neighbor, then the loopback IP address is used (127.0.0.1). For example, in figure 10-15, port A1 on CDP switch “X” is connected to port C5 on CDP neighbor switch “Y”, with the indicated VLAN configuration on port C5: VLAN Membership in Port C5 of Switch "Y"...
Page 235
CDP Cache Address IP address of source device. Software Version ASCII String Device Name (ASCII string) In HP Procurve switches, this is the value configured for the System Name parameter. Device MAC Address Included in the Device Name entry. Destination Port Number On the Switches 2650 and 6108 (the receiving device), the number of the port through which the CDP packet arrived.
Figure 10-16. Example of CDP Neighbor Data in a Switch 2650 or 6108MIB For the current Switch 2650 or 6108 MIB, go to the HP Procurve World Wide Web site at: http://ww.hp.com/go/hpprocurve...
Page 237
Configuring for Network Management Applications CDP-Capable Hubs. Some hubs are capable of running CDP, but also forward CDP packets as if the hub itself were transparent to CDP. Such hubs will appear in the switch’s CDP Neighbor table and will also maintain a CDP neighbor table similar to that for switches.
For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 11-2...
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Port-Based Virtual LANs (Static VLANs) VLAN Features Feature Default Menu view existing VLANs n/a page 11-10 page 11-16 page 11-21 thru 11-15 configuring static default VLAN with page 11-10 page 11-15 page 11-21 VLANs VID = 1...
Page 242
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) For example, referring to figure 11-1, if ports A1 through A4 belong to VLAN_1 and ports A5 through A8 belong to VLAN_2, traffic from end-node stations on ports A2 through A4 is restricted to only VLAN_1, while traffic from ports A5 through A7 is restricted to only VLAN_2.
Page 243
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Switch 2650 or 6108 Figure 11-2. Example of Overlapping VLANs Using the Same Server Similarly, using 802.1Q-compliant switches, you can connect multiple VLANs through a single switch-to-switch link. Procurve Procurve Switch Switch...
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Switch 2524 Switch Procurve Procurve Switch Switch Tagged VLAN Link Untagged VLAN Links Non-802.1Q- compliant switch Figure 11-4. Example of Tagged and Untagged VLAN Technology in the Same Network For more information on VLANs, refer to: “Overview of Using VLANs”...
Page 245
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) The Primary VLAN Because certain features and management functions, such as single IP- address stacking, run on only one VLAN in the switch, and because DHCP and Bootp can run per-VLAN, there is a need for a dedicated VLAN to manage these features and ensure that multiple instances of DHCP or Bootp on different VLANs do not result in conflicting configuration values for the switch.
Page 246
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Per-Port Static VLAN Configuration Options The following figure and table show the options you have for assigning individual ports to a static VLAN. Note that GVRP, if configured, affects these options and VLAN behavior on the switch.
Page 247
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) General Steps for Using VLANs Plan your VLAN strategy and create a map of the logical topology that will result from configuring VLANs. Include consideration for the interaction between VLANs and other features such as Spanning Tree Protocol, load balancing, and IGMP.
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Menu: Configuring VLAN Parameters In the factory default state, support is enabled for up to eight VLANs. (You can change the switch VLAN configuration to support up to 30 VLANs.) Also, all ports on the switch belong to the default VLAN (DEFAULT_VLAN) and are in the same broadcast/multicast domain.
Page 249
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) To change the maximum number of VLANs, type the new number (1 - 30 allowed; default 8). To designate a different VLAN as the primary VLAN, select the Primary VLAN field and use the space bar to select from the existing options.
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Adding or Editing VLAN Names Use this procedure to add a new VLAN or to edit the name of an existing VLAN. From the Main Menu select: 2. Switch Configuration 8.
Page 251
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Example of a New VLAN and ID Figure 11-9. Example of VLAN Names Screen with a New VLAN Added Repeat steps 2 through 5 to add more VLANs. Remember that you can add VLANs until you reach the number specified in the Maximum VLANs to support field on the VLAN Support screen (see figure 11-6 on page 11-10).
Page 252
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Default: In this example, the “VLAN-22” has been defined, but no ports have yet been assigned to it. (“No” means the port is not assigned to that VLAN.) Using GVRP? If you plan on using GVRP, any ports you don’t want to join should be changed...
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Ports A4 and A5 are assigned to both VLANs. Ports A6 and A7 are assigned only to VLAN-22. All other ports are assigned only to the Default VLAN. Figure 11-11. Example of VLAN Assignments for Specific Ports For information on VLAN tags (“Untagged”...
Page 254
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN Commands Used in this Section show vlans below show vlan <vlan-id> page 11-17 max-vlans <1..30> page 11-18 primary-vlan <vlan-id> page 11-18 [no] vlan <vlan-id> page 11-19 name <vlan-name> page 11-20 [no] tagged <port-list>...
Page 255
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Displaying the Configuration for a Particular VLAN . This command uses the VID to identify and display the data for a specific static or dynamic VLAN. show vlan <vlan-id> Syntax: Figure 11-13.
Page 256
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Changing the Number of VLANs Allowed on the Switch. By default, the switch allows a maximum of 8 VLANs. You can specify any value from 1 to 30. (If GVRP is enabled, this setting includes any dynamic VLANs on the switch.) As part of implementing a new value, you must execute a write memory command (to save the new value to the startup-config file) and then reboot the switch.
Page 257
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Creating a New Static VLAN Changing the VLAN Context Level. With this command, entering a new VID creates a new static VLAN. Entering the VID or name of an existing static VLAN places you in the context level for that VLAN.
Page 258
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Converting a Dynamic VLAN to a Static VLAN. If GVRP is running on the switch and a port dynamically joins a VLAN, you can use the next command to convert the dynamic VLAN to a static VLAN. (For GVRP and dynamic VLAN operation, see “GVRP”...
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) For example, if you have a VLAN named VLAN100 with a VID of 100, and all ports are set to No for this VLAN. To change the VLAN name to “Blue_Team” and set ports 1-5 to Tagged, you could do so with these commands: To move to the vlan 100 context level and execute the same commands: Similarly, to change the tagged ports in the above examples to No (or Auto, if...
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN Tagging Information VLAN tagging enables traffic from more than one VLAN to use the same port. (Even when two or more VLANs use the same port they remain as separate domains and cannot receive traffic from each other without going through an external router.) As mentioned earlier, a “tag”...
Page 261
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) In switch X: • VLANs assigned to ports X1 - X6 can all be untagged because there is only one VLAN assignment per port. Red VLAN traffic will go out only the Red ports;...
Page 262
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN tagging gives you several options: Since the purpose of VLAN tagging is to allow multiple VLANs on the same port, any port that has only one VLAN assigned to it can be configured as “Untagged”...
Page 263
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) The VLANs assigned to ports X3, X4, Y2, Y3, and Y4 can all be untagged because there is only one VLAN assigned per port. Port X1 has multiple VLANs assigned, which means that one VLAN assigned to this port can be untagged and any others must be tagged.
Configures a secure Management VLAN by creating an isolated network for managing the HP Procurve switches that support this feature. This includes the HP Procurve Switches 2650 and 6108, Series 4100GL switches, and Series 5300XL switches. Access to this VLAN, and to the switch’s management functions (Menu, CLI, and web browser interface) is available only through ports configured as members.
Page 265
Determine a VID and VLAN name suitable for your Management VLAN. Determine the IP addressing for the Management VLAN (DHCP/Bootp or Manual. Plan your Management VLAN topology to use HP Procurve switches that support this feature. This includes the HP Procurve Series 5300XL, Series 4100GL, Switches 2650 and 6108.
Page 266
• Ports on one switch that you will use to extend the Management VLAN to ports on other HP Procurve switches (such as ports A1 and B2 or B4 and C2 in figure 11-21 on page 11-27.). Hubs dedicated to connecting management stations to the Management VLAN can also be included in the above topology.
Page 267
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Deleting the Management VLAN. You can disable the Secure Manage- ment feature without deleting the VLAN itself. For example, either of the following commands disables the Secure Management feature in the above example: Operating Notes for Management VLANs Only one Management-VLAN can be active in the switch.
Operation with 802.1Q VLANs” on page 13-4. Note that Spanning Tree operates differently in different devices. For example, in the (obsolete, non-802.1Q) HP Switch 2000 and the HP Switch 800T, Span- ning Tree operates on a per-VLAN basis, allowing redundant physical links as long as they are in separate VLANs.
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) IP interface for that VLAN is also activated. Likewise, when a VLAN is deactivated because all of its ports are down, the corresponding IP interface is also deactivated. VLAN MAC Addresses The switch has one unique MAC address for each of its VLAN interfaces.
Page 270
Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) HP Router Requirements. Use the Hewlett-Packard version A.09.70 (or later) router OS release if any of the following Hewlett-Packard routers are installed in networks in which you will be using VLANs:...
Port-Based Virtual LANs (VLANs) and GVRP GVRP General Operation When GVRP is enabled on a switch, the VID for any static VLANs configured on the switch is advertised (using BPDUs—Bridge Protocol Data Units) out all ports, regardless of whether a port is up or assigned to any particular VLAN. A GVRP-aware port on another device that receives the advertisements over a link can dynamically join the advertised VLAN.
Port-Based Virtual LANs (VLANs) and GVRP GVRP For example, in the following figure, Tagged VLAN ports on switch “A” and switch “C” advertise VLANs 22 and 33 to ports on other GVRP-enabled switches that can dynamically join the VLANs. Switch “C” Switch “A”...
Port-Based Virtual LANs (VLANs) and GVRP GVRP Note also that a port belonging to a Tagged or Untagged static VLAN has these configurable options: Send VLAN advertisements, and also receive advertisements for VLANs on other ports and dynamically join those VLANs. Send VLAN advertisements, but ignore advertisements received from other ports.
Page 275
Port-Based Virtual LANs (VLANs) and GVRP GVRP Table 11-3. Options for Handling “Unknown VLAN” Advertisements: Unknown VLAN Operation Mode Learn Enables the port to become a member of any unknown VLAN for which it (the Default) receives an advertisement. Allows the port to advertise other VLANs that have at least one other port on the same switch as a member.
Port-Based Virtual LANs (VLANs) and GVRP GVRP Per-Port Options for Dynamic VLAN Advertising and Joining Initiating Advertisements. As described in the preceding section, to enable dynamic joins, GVRP must be enabled and a port must be configured to Learn (the default). However, to send advertisements in your network, one or more static (Tagged, Untagged, or Auto) VLANs must be configured on one or more switches (with GVRP enabled), depending on your topology.
Page 277
Port-Based Virtual LANs (VLANs) and GVRP GVRP Table 11-4. Controlling VLAN Behavior on Ports with Static VLANs Per-Port Static VLAN Options—Per VLAN Specified on Each Port “Unknown VLAN” Port Activity: Port Activity: Port Activity: Forbid (Per VLAN) (GVRP) Auto (Per VLAN) Tagged or Untagged (Per VLAN) Configuration Learn...
Because dynamic VLANs operate as Tagged VLANs, and because a tagged port on one device cannot communicate with an untagged port on another device, HP recommends that you use Tagged VLANs for the static VLANs you will use to generate advertisements.
Port-Based Virtual LANs (VLANs) and GVRP GVRP Planning for GVRP Operation These steps outline the procedure for setting up dynamic VLANs for a seg- ment. Determine the VLAN topology you want for each segment (broadcast domain) on your network. Determine the VLANs that must be static and the VLANs that can be dynamically propagated.
Page 280
Port-Based Virtual LANs (VLANs) and GVRP GVRP Menu: Viewing and Configuring GVRP From the Main Menu, select: 2. Switch Configuration . . . 8. VLAN Menu . . . 1. VLAN Support Figure 11-27. The VLAN Support Screen (Default Configuration) Do the following to enable GVRP and display the Unknown VLAN fields: (for Edit).
Page 281
Port-Based Virtual LANs (VLANs) and GVRP GVRP Use the arrow keys to select the port you want, and the Space bar to select Unknown VLAN option for any ports you want to change. When you finish making configuration changes, press , then (for Save) to save your changes to the Startup-Config file.
Port-Based Virtual LANs (VLANs) and GVRP GVRP Enabling and Disabling GVRP on the Switch. This command enables GVRP on the switch. Syntax: gvrp This example enables GVRP: This example disables GVRP operation on the switch: Enabling and Disabling GVRP On Individual Ports. When GVRP is enabled on the switch, use the unknown-vlans command to change the Unknown VLAN field for one or more ports.
Page 283
Port-Based Virtual LANs (VLANs) and GVRP GVRP Displaying the Static and Dynamic VLANs Active on the Switch. The show vlans command lists all VLANs present in the switch. Syntax: show vlans For example, in the following illustration, switch “B” has one static VLAN (the default VLAN), with GVRP enabled and port 1 configured to Learn for Unknown VLANs.
Port-Based Virtual LANs (VLANs) and GVRP GVRP Converting a Dynamic VLAN to a Static VLAN. If a port on the switch has joined a dynamic VLAN, you can use the following command to convert that dynamic VLAN to a static VLAN: static <dynamic-vlan-id>...
Page 285
Port-Based Virtual LANs (VLANs) and GVRP GVRP Converting a dynamic VLAN to a static VLAN and then executing the write memory command saves the VLAN in the startup-config file and makes it a permanent part of the switch’s VLAN configuration. Within the same broadcast domain, a dynamic VLAN can pass through a device that is not GVRP-aware.
For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 12-2...
Multimedia Traffic Control with IP Multicast (IGMP) General Operation and Features General Operation and Features IGMP Features Feature Default Menu view igmp configuration — page 12-6 — show igmp status for multicast — — groups used by the selected VLAN enabling or disabling IGMP disabled —...
Querier. When enabled (the default state), the switch’s querier function eliminates the need for a multicast router. In most cases, HP recommends that you leave this parameter in the default “enabled”...
Multimedia Traffic Control with IP Multicast (IGMP) General Operation and Features IGMP Operating Features Basic Operation In the factory default configuration, IGMP is disabled. If multiple VLANs are not configured, you must configure IGMP on the default VLAN (DEFAULT_VLAN; VID = 1). If multiple VLANs are configured, you must configure IGMP on a per-VLAN basis for every VLAN where this feature is desired.
Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Querier Capability: The switch performs this function for IGMP on VLANs having an IP address when there is no other device in the VLAN acting as querier. See “Querier Operation” on page 12-18. N o t e s Whenever IGMP is enabled, the switch generates an Event Log message indicating whether querier functionality is enabled.
Page 293
Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Viewing the Current IGMP Configuration. This command lists the IGMP configuration for all VLANs configured on the switch or for a specific VLAN. Syntax: show ip igmp config IGMP configuration for all VLANs on the switch show ip igmp vlan <vid>...
Page 294
Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP IGMP Configuration for the Selected VLAN IGMP Configuration On the Individual Ports in the VLAN Figure 12-2. Example Listing of IGMP Configuration for A Specific VLAN Enabling or Disabling IGMP on a VLAN. You can enable IGMP on a VLAN, along with the last-saved or default IGMP configuration (whichever was most recently set), or you can disable IGMP on a selected VLAN.
Page 295
Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Configuring Per-Port IGMP Packet Control. Use this command in the VLAN context to specify how each port should handle IGMP traffic. Syntax: vlan <vid> ip igmp [auto <port-list> | blocked <port-list> | forward <port-list>] Default: auto For example, suppose you wanted to configure IGMP as follows for VLAN 1...
Multimedia Traffic Control with IP Multicast (IGMP) Web: Enabling or Disabling IGMP Returns IGMP traffic to “normal” priority. Show command to display results of above high-priority commands. Configuring the Querier Function. The default querier capability is “enabled”. This command disables or re-enables the ability for the switch to become querier if necessary.
Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates How IGMP Operates The Internet Group Management Protocol (IGMP) is an internal protocol of the Internet Protocol (IP) suite. IP manages multicast traffic by using switches, multicast routers, and hosts that support IGMP. (In Hewlett-Pack- ard’s implementation of IGMP, a multicast router is not necessary as long as a switch is configured to support IGMP with the querier...
IGMP client on a port in the VLAN leaves the cast router or another switch configured for IGMP oper- group. ation. (HP recommends that the VLAN also include a device operating as a backup Querier in case the device Support Fast-Leave IGMP (below) and Forced operating as the primary Querier fails for any reason.
Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates Automatic Fast-Leave IGMP IGMP Operation Presents a “Delayed Leave” Problem. Where multiple IGMP clients are connected to the same port on an IGMP device (switch or router), if only one IGMP client joins a given multicast group, then later sends a Leave Group message and ceases to belong to that group, the IGMP device retains that IGMP client in its IGMP table and continues forwarding IGMP traffic to the IGMP client until the Querier triggers confirmation that no other...
Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates In the next figure, automatic Fast-Leave operates on the switch ports for IGMP clients “3A” and “5B”, but not on the switch port for IGMP clients “7A” and 7B, Server “7C”, and printer “7D”. Fast-Leave IGMP Server automatically operates on...
Page 301
Forced Fast-Leave operates only if the switch detects multiple end nodes (and at least one IGMP client) on that port. N o t e o n V L A N In the HP Procurve Switches 2650 and 6108, the walkmib setmib commands...
Page 302
Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates Enter either of the following walkmib command options: - OR - The resulting display lists the Forced Fast-Leave state for all ports in the switch, by VLAN. (A port belonging to more than one VLAN will be listed once for each VLAN, and if multiple VLANs are not configured, all ports will be listed as members of the default VLAN.) The following command produces a listing such as that shown in figure 12-4:...
Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates shows that Fast Forced-Leave is disabled on port 7. 6 specifies port A6. indicates the default VLAN. (See the “Note on VLAN Numbers” on page 12-15.) Figure 15-5. Example Listing the Forced Fast-Leave State for a Single Port on the Default VLAN Configuring Per-Port Forced Fast-Leave IGMP In the factory-default configuration, Forced Fast-Leave is disabled for all ports...
Multimedia Traffic Control with IP Multicast (IGMP) Using the Switch as Querier Verifies Forced Fast-Leave enabled. indicates port C1. indicates the default VLAN. (See the note on page 12-15.) Figure 15-6. Example of Changing the Forced Fast-Leave Configuration on Port 49 Using the Switch as Querier Querier Operation The function of the IGMP Querier is to poll other IGMP-enabled devices in an...
Multimedia Traffic Control with IP Multicast (IGMP) Excluding Well-Known or Reserved Multicast Addresses from IP Multicast Filtering In the above scenario, if the other device ceases to operate as a Querier on the default VLAN, then the switch detects this change and can become the Querier as long as it is not preempted by some other IGMP Querier on the VLAN.
Page 306
N o t e s : IP Multicast Filters. This operation applies to the HP Procurve Switch 1600M, 2400M, 2424M, 4000M, and 8000M, but not to the HP Procurve switches that do not have static traffic/security filters. These include the Switches 2650 and 6108, Switches 2650 and 6108 , and Series 2500 switches.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Overview Overview STP Features 802.1d Spanning Tree Default Menu Protocol viewing the STP page 13-19 page 13-10 — configuration enable/disable STP disabled page 13-19 page 13-23 page 13-41 reconfiguring general priority: 32768 page 13-19 page 13-24...
Page 309
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Overview Use spanning tree to ensure that only one active path at a time exists between any two nodes on the network. In networks where there is more than one physical, active path between any two nodes, enabling spanning tree ensures a single active path between such nodes by blocking all redundant paths.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) How Spanning Tree Operates How Spanning Tree Operates The switch automatically senses port identity and type, and automatically defines spanning-tree parameters for each type, as well as parameters that apply across the switch.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) How Spanning Tree Operates ates untagged BPDUs). This means that if redundant physical links exist in separate VLANs, spanning tree will block all but one of those links. However, if you need to use spanning tree on the Switches 2650 and 6108 in a VLAN environment with redundant physical links, you can prevent blocked redun- dant links by using a port trunk.
Page 312
RSTP is designed to be compatible with IEEE 802.1d STP, and HP recommends that you employ it in your network. For more information, refer to “Transi- tioning from STP to RSTP”...
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) This section describes the operation of the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) Overview RSTP Feature Default Menu Viewing the RSTP/STP configuration...
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Transitioning from STP to RSTP IEEE 802.1w RSTP is designed to be compatible with IEEE 802.1d STP. Even if all the other devices in your network are using STP, you can enable RSTP on your switch, and even using the default configuration values, your switch will interoperate effectively with the STP devices.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Configuring RSTP The default switch configuration has spanning tree disabled with RSTP as the selected protocol. That is, when spanning tree is enabled, RSTP is the version of spanning tree that is enabled, by default.
Page 316
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) CLI: Configuring RSTP Spanning Tree Commands in This Section Applicable Location Protocol Version show spanning-tree config both Below on this page spanning-tree both page 13-11 protocol-version <rstp | stp>...
Page 317
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Figure 13-3. Example of the Spanning Tree Configuration Display Enabling or Disabling RSTP. Issuing the command to enable spanning tree on the switch implements, by default, the RSTP version of spanning tree for all physical ports on the switch.
Page 318
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) For the STP version of spanning tree, the rest of the information in this section does not apply. Refer to “802.1p Spanning-Tree Protocol (STP)” on page 13-19 for more information on the STP version and its parameters.
Page 319
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) N o t e Executing the spanning-tree command alone enables spanning tree. Executing the command with one or more of the whole-switch RSTP parameters shown in the table on the previous page, or with any of the per-port RSTP parameters shown in the table on page 14, does not enable spanning tree.
Page 320
Forwarding state. In this way, the ports operate very similarly to ports that are configured in “fast mode” under the STP implementation in previous HP switch software. Disable this feature on all switch ports that are connected to another switch, or bridge, or hub.
Page 322
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Menu: Configuring RSTP From the console CLI prompt, enter the menu command. HP Procurve Switch # menu From the switch console Main Menu, select 2. Switch Configuration ... 4. Spanning Tree Operation (for Edit) to highlight the Protocol Version parameter field.
Page 323
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Figure 13-4. Example of the RSTP Configuration Screen Press the key or use the arrow keys to go to the next parameter you want to change, then type in the new value or press the Space bar to select to select the Actions –>...
Page 324
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Web: Enabling or Disabling RSTP In the web browser interface, you can enable or disable spanning tree on the switch. If the default configuration is in effect such that RSTP is the selected protocol version, enabling spanning tree through the web browser interface will enable RSTP with its current configuration.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Menu: Configuring 802.1D STP From the Main Menu, select: 2. Switch Configuration . . . 4. Spanning Tree Operation Use this field to select the 802.1d version of STP. Figure 13-5.
Page 326
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Use this field to enable spanning tree. Read-Only Fields Figure 13-6. Enabling Spanning-Tree Operation If the remaining STP parameter settings are adequate for your network, go to step 10.
Page 327
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Figure 13-7. The Configuration Menu Indicating a Reboot Is Needed to Implement a Configuration Change 11. Press to return to the Main menu. Figure 13-8. The Main Menu Indicating a Reboot Is Needed To Implement a Configuration Change 12.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) CLI: Configuring 802.1D STP STP Commands Used in This Section show spanning-tree config Below spanning-tree protocol-version page 13-23 forward-delay <4 - 30> page 13-24 hello-time <1 - 10>...
Page 329
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Configuring the Switch To Use the 802.1d Spanning Tree Protocol (STP). In the default configuration, the switch is set to RSTP (that is, 802.1w Rapid Spanning Tree), and spanning tree operation is disabled.
Page 330
C a u t i o n Because incorrect STP settings can adversely affect network performance, HP recommends that you use the default STP parameter settings. You should not change these settings unless you have a strong understanding of how STP operates.
Page 331
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) N o t e Executing spanning-tree alone enables STP. Executing spanning-tree with one or more of the above “STP Operating Parameters” does not enable STP. It only configures the STP parameters (regardless of whether STP is actually running (enabled) on the switch).
(Forwarding or Blocking, as determined by the STP negotiation). This sequence takes two times the forward delay value configured for the switch. The default is 15 seconds on HP switches, per the IEEE 802.1D standard recommendation, resulting in a total STP negotiation time of 30 seconds. Each switch port goes through this start-up sequence whenever the network con- nection is established on the port.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) C a u t i o n The Fast Mode configuration should be used only on switch ports connected to end nodes. Changing the Mode to Fast on ports connected to hubs, switches, or routers may cause loops in your network that STP may not be able to immediately detect, in all cases.
Page 334
Switch 2650 or 6108 uplink ports, the device(s) on the other end of the links can be either HP devices or another vendor’s devices, regardless of whether they support fast uplink. For example: Port A is the STP root port.
Page 335
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Terminology Term Definition downlink port A switch port that is linked to a port on another switch (or to an end node) that is sequentially further away from the STP root device.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In figure 13-12, STP is enabled and in its default configuration on all switches, unless otherwise indicated in table 13-5, below: Table 13-5.STP Parameter Settings for Figure 13-12 STP Parameter Switch “1”...
Page 337
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Edge switches cannot be directly linked together using fast-uplink ports. For example, the connection between switches 4 and 5 in figure 13-13 is not allowed for fast-uplink operation. Switch The ports that make up...
Page 338
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) To View and/or Configure Fast-Uplink STP. This procedure uses the Spanning Tree Operation screen to enable STP and to set the Mode for fast- uplink STP operation.
Page 339
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) If the Protocol Version is set to RSTP (as shown in figure 13-14), do the following: ) to move the cursor to the Protocol Version field. Press Edit b.
Page 340
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In this example, ports 2 and 3 have already been configured as a port trunk (Trk1), which appears at the end of the port listing. All ports (and the trunk) are in their default STP configuration.
Page 341
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) STP is enabled. Port A1 and Trk1 are now configured for fast-uplink STP. Figure 13-17. Example of STP Enabled with Two Redundant Links Configured for Fast-Uplink STP Press (for...
Page 342
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Indicates which uplink is the active path to the STP root device. Note: A switch using fast-uplink STP must never be the STP root device.
Page 343
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In figure 13-19: • Port A1 and Trk1 (trunk 1; formed from ports 2 and 3) are redundant fast-uplink STP links, with trunk 1 forwarding (the active link) and port A1 blocking (the backup link).
Page 344
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Indicates that Trk1 (Trunk 1) provides the currently active path to the STP root device. Redundant STP link in the Blocking state. Links to PC or Workstation End Nodes Redundant STP link in the Forwarding state.
Page 345
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) STP Enabled on the Switch Fast-Uplink Configured on Port 1 and Trunk 1 (Trk1) Figure 13-22. Example of a Configuration Supporting the STP Topology Shown in Figure 13-20 Using the CLI To Configure Fast-Uplink STP.
Page 346
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Lists STP configuration. Shows the default STP protocol 1. Changes the Spanning-Tree protocol to STP (required for Fast-Uplink). 2. Saves the change to the startup-configuration 3.
802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Web: Enabling or Disabling STP N o t e When you add a port to a trunk, the port takes on the STP mode configured for the trunk, regardless of which STP mode was configured on the port before it was added to the trunk.
For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 14-2...
60 seconds page 14-13 page 14-44 HP Procurve Stack Management (termed stacking) enables you to use a single IP address and standard network cabling to manage a group of up to 16 total switches in the same IP subnet (broadcast domain). Using stacking, you can: Reduce the number of IP addresses needed in your network.
*Requires software release C.08.03 or later, which is included with the 8000M, 4000M, 2424M, and 1600M models as of July, 2000. Release C.08.03 or a later version is also available on the HP Procurve website at www.hp.com/go/ procurve. (Click on...
HP Procurve Stack Management Operation Components of HP Procurve Stack Management Table 14-1. Stacking Definitions Stack Consists of a Commander switch and any Member switches belonging to that Commander’s stack. Commander A switch that has been manually configured as the controlling device for a stack. When this occurs, the switch’s stacking configuration appears as Commander.
HP Procurve Stack Management Operation Use the Commander’s console or web Wiring Closet "A" browser interface to access the user Member Switch 1 Candidate Switch interface on any Member switch in IP Address: None Assigned IP Address: None Assigned the same stack.
Page 355
HP Procurve Stack Management Operation If multiple VLANs are configured, stacking uses only the primary VLAN on any switch. In the factory-default configuration, the DEFAULT_VLAN is the primary VLAN. (See “Stacking Operation with Multiple VLANs Configured” on page 14-44 and “The Primary VLAN”...
HP Procurve Stack Management Operation Specific Rules Table 14-2. Specific Rules for Commander, Candidate, and Member Switches IP Addressing and Number Allowed Passwords SNMP Communities Stack Name Per Stack Commander IP Addr: Requires an Only one The Commander’s Manager Standard SNMP community...
Candidates from automatically joining a stack prematurely or joining the wrong stack (if more than one stack Commander is configured in a subnet or broadcast domain). If you plan to install more than one stack in a subnet, HP recommends that you leave...
Page 358
HP Procurve Stack Management Configuring Stack Management Options for Configuring a Commander and Candidates. Depending on how Commander and Candidate switches are configured, Candidates can join a stack either automatically or by a Commander manually adding (“pulling”) them into the stack. In the default configuration, a Candidate joins only when manually pulled by a Commander.
Page 359
HP Procurve Stack Management Configuring Stack Management Default stacking configuration ( set to , and Stack State Candidate Auto Join set to Same subnet (broadcast domain) and default VLAN as the Commander (If VLANs are used in the stack environment, see “Stacking Operation with a Tagged VLAN”...
Page 360
HP Procurve Stack Management Configuring Stack Management Configure the Commander switch. Doing this first helps to establish consistency in your stack configuration, which can help prevent startup problems. • A stack requires one Commander switch. If you plan to implement...
HP Procurve Stack Management Configuring Stack Management Menu: View Stack Status and Configure Stacking Using the Menu Interface To View and Configure a Commander Switch Configure an IP address and subnet mask on the Commander switch. (See Chapter 7, “Configuring IP Addressing”.) Display the Stacking Menu by selecting in the Main Menu.
Page 362
HP Procurve Stack Management Configuring Stack Management Move the cursor to the Stack State field by pressing (for ). Then Edit use the Space bar to select the option. Commander Press the down arrow key to display the Commander configuration fields in the Stack Configuration screen.
Page 363
HP Procurve Stack Management Configuring Stack Management Using the Menu To Manage a Candidate Switch Using the menu interface, you can perform these actions on a Candidate switch: Add (“push”) the Candidate into an existing stack Modify the Candidate’s stacking configuration (...
Page 364
1 to 300 seconds. Note: All switches in the stack must be set to the same transmis- sion interval to help ensure proper stacking operation. HP recom- mends that you leave this parameter set to the default 60 seconds.
HP Procurve Stack Management Configuring Stack Management Press (for ) to save your configuration changes and return to the Save Stacking menu. Using the Commander To Manage The Stack The Commander normally operates as your stack manager and point of entry into other switches in the stack.
Page 366
HP Procurve Stack Management Configuring Stack Management For status descriptions, see the table on page 14-46. Figure 14-9. Example of the Stack Management Screen Press (for ) to add a Candidate. You will then see this screen listing the available Candidates: The Commander automatically selects an available switch number (SN).
Page 367
HP Procurve Stack Management Configuring Stack Management • If the desired Candidate has a Manager password, press the down arrow key to move the cursor to the Candidate Password field, then type the password. • If the desired Candidate does not have a password, go to step 6.
Page 368
HP Procurve Stack Management Configuring Stack Management 2. Stacking Status (All) You will then see the Stacking Status (All) screen: For status descriptions, see the table on page 14-46. This column lists the MAC Addresses for switches Using the MAC addresses for these...
Page 369
HP Procurve Stack Management Configuring Stack Management Do one of the following: • If the stack containing the Member you are moving has a Manager password, press the down arrow key to select the Candidate Password field, then type the password.
Page 370
HP Procurve Stack Management Configuring Stack Management To remove a Member from a stack, use the Stack Management screen. From the Main Menu, select: 9. Stacking... 4. Stack Management You will then see the Stack Management screen: For status descriptions, see the table on page 14-46.
Page 371
HP Procurve Stack Management Configuring Stack Management To continue deleting the selected Member, press the Space bar once to select for the prompt, then press to complete the deletion. The Stack Management screen updates to show the new stack Member list.
Page 372
HP Procurve Stack Management Configuring Stack Management Main Menu for stack Member named “Coral Sea” (SN = 1 from figure 14-16) Figure 14-17. The eXecute Command Displays the Console Main Menu for the Selected Stack Member You can now make configuration changes and/or view status data for the selected Member in the same way that you would if you were directly connected or telnetted into the switch.
HP Procurve Stack Management Configuring Stack Management (for Back) to return to the Stacking Menu. Press To display Stack Configuration menu for the switch you are moving, select 3. Stack Configuration Press (for Edit) to select the Stack State parameter.
Page 374
HP Procurve Stack Management Configuring Stack Management Using Any Stacked Switch To View the Status for All Switches with Stacking Enabled. This procedure displays the general status of all switches in the IP subnet (broadcast domain) that have stacking enabled.
Page 375
HP Procurve Stack Management Configuring Stack Management You will then see the Commander’s Stacking Status screen: Figure 14-19. Example of the Commander’s Stacking Status Screen Viewing Member Status. This procedure displays the Member’s stacking information plus the Commander’s status, IP address, and MAC address.
Page 376
HP Procurve Stack Management Configuring Stack Management Figure 14-20. Example of a Member’s Stacking Status Screen Viewing Candidate Status. This procedure displays the Candidate’s stacking configuration. To display the status for a Candidate: Use Telnet (if the Candidate has a valid IP address for your network) or...
HP Procurve Stack Management Configuring Stack Management CLI: View Stack Status and Configure Stacking The CLI enables you to do all of the stacking tasks available through the menu interface.) Table 14-6. CLI Commands for Configuring Stacking on a Switch...
Page 378
HP Procurve Stack Management Configuring Stack Management CLI Command Operation [no] stack member Commander: Adds a Candidate to stack membership. “No” form removes a Member from stack membership. To easily determine the MAC address of a <switch-num> Candidate, use the show stack candidates command. To determine the MAC mac-address <mac-addr>...
Page 379
HP Procurve Stack Management Configuring Stack Management Using the CLI To View Stack Status You can list the stack status for an individual switch and for other switches that have been discovered in the same subnet. Syntax: show stack [candidates | view | all] Viewing the Status of an Individual Switch.
Page 380
HP Procurve Stack Management Configuring Stack Management Viewing the Status of all Stack-Enabled Switches Discovered in the IP Subnet. The next example lists all the stack-configured switches discovered in the IP subnet. Because the Switch 2650 or Switch 6108 on which the show stack all command was executed is a candidate, it is included in the “Others”...
Page 381
HP Procurve Stack Management Configuring Stack Management Using the CLI To Configure a Commander Switch You can configure any stacking-enabled switch to be a Commander as long as the intended stack name does not already exist on the broadcast domain.
Page 382
Syntax: no stack stack commander <stack name> Suppose, for example, that an HP switch named “Bering Sea” is a Member of a stack named “Big_Waters”. To use the switch’s CLI to convert it from a stack Member to the Commander of a new stack named “Lakes”, you would use the...
HP Procurve Stack Management Configuring Stack Management The output from this command tells you the MAC address of the current stack Commander. Removes the Member from the “Big_Waters” stack. Converts the former Member to the Com- mander of the new “Lakes”...
Page 384
HP Procurve Stack Management Configuring Stack Management Using the Commander’s CLI To Manually Add a Candidate to the Stack. To manually add a candidate, you will use: A switch number (SN) to assign to the new member. Member SNs range from 1 to 15.
Page 385
HP Procurve Stack Management Configuring Stack Management For example, if the HP 8000M in the above listing did not have a Manager password and you wanted to make it a stack Member with an , you would execute the following command:...
Page 386
HP Procurve Stack Management Configuring Stack Management The Candidate’s Auto Join is set to Yes (and you do not want to enable Auto Grab on the Commander) or the Candidate’s Auto Join is set to No. Either you know the MAC address of the Commander for the stack into which you want to insert the Candidate, or the Candidate has a valid IP address and is operating in your network.
Page 387
HP Procurve Stack Management Configuring Stack Management Syntax: stack member <switch-number> mac-address <mac-addr> [password <password-str>] In the destination Commander, use show stack all to find the MAC address of the Member you want to pull into the destination stack. For example, suppose you created a new Commander with a stack name of “Cold_Waters”...
HP Procurve Stack Management Configuring Stack Management Syntax: no stack name <stack name> stack join <mac-address> If you don’t know the MAC address of the destination Commander, you can to identify it. show stack all For example, suppose you have a Switch 2650 or Switch 6108 operating as the Commander for a temporary stack named “Test”.
Page 389
HP Procurve Stack Management Configuring Stack Management Syntax: [no] stack member <switch-num> mac-address <mac-addr> Use show stack view to list the stack Members. For example, suppose that you wanted to use the Commander to remove the “North Sea” Member from the...
Page 390
HP Procurve Stack Management Configuring Stack Management You would then execute this command in the “North Sea” switch’s CLI to remove the switch from the stack: Using the CLI To Access Member Switches for Configuration Changes and Traffic Monitoring After a Candidate becomes a Member, you can use the telnet command from the Commander to access the Member’s CLI or console interface for the same...
HP Procurve Stack Management Configuring Stack Management SNMP Community Operation in a Stack Community Membership In the default stacking configuration, when a Candidate joins a stack, it automatically becomes a Member of any SNMP community to which the Commander belongs, even though any community names configured in the Commander are not propagated to the Member’s SNMP Communities listing.
<MIB variable> CLI: Disable or Re-Enable Stacking In the default configuration, stacking is enabled on the HP Procurve Switches 2650 and 6108. You can use the CLI to disable stacking on these switches at any time. Disabling stacking has the following effects:...
HP Procurve Stack Management Configuring Stack Management Stacking uses only the primary VLAN on each switch in a stack. The primary VLAN can be tagged or untagged as needed in the stacking path from switch to switch. The same VLAN ID (VID) must be assigned to the primary VLAN in each stacked switch.
HP Procurve Stack Management Configuring Stack Management Status Messages Stacking screens and listings display these status messages: Message Condition Action or Remedy Candidate Auto-join Indicates a switch configured with Stack State set to None required Candidate, Auto Join set to Yes (the default), and no Manager password.
Page 395
IP Routing Features Contents Overview of IP Routing ........15-2 IP Interfaces .
IP Routing Features Overview of IP Routing Overview of IP Routing The HP Procurve Switches 2650 and 6108 offer IP static routing, supporting up to 16 static routes. IP static routing is configurable through the switch’s console CLI. Throughout this chapter, the HP Procurve Switches 2650 and 6108 will be referred to as “routing switches”.
IP Routing Features Overview of IP Routing N o t e All HP Procurve devices support configuration and display of IP address in classical sub-net format (example: 192.168.1.1 255.255.255.0) and Classless Interdomain Routing (CIDR) format (example: 192.168.1.1/24). You can use either format when configuring IP address information.
IP Forwarding Cache The IP forwarding cache provides a fast-path mechanism for forwarding IP packets. The cache contains entries for IP destinations. When an HP ProCurve routing switch has completed processing and addressing for a packet and is ready to forward the packet, the device checks the IP forwarding cache for an entry to the packet’s destination.
IP Routing Features Overview of IP Routing If the cache does not contain an entry, the software can create an entry in the forwarding cache. Each entry in the IP forwarding cache has an age timer. If the entry remains unused for five minutes, the software removes the entry.
IP Routing Features Overview of IP Routing Parameter Description Default See page ICMP Router An IP protocol that a router can use to advertise the IP addresses of its Disabled 15-17 Discovery router interfaces to directly attached hosts. You can enable or disable the Protocol protocol at the Global CLI Config level.
IP Routing Features Configuring IP Parameters for Routing Switches Configuring IP Parameters for Routing Switches The following sections describe how to configure IP parameters. Some param- eters can be configured globally while others can be configured on individual VLAN interfaces. Some parameters can be configured globally and overridden for individual VLAN interfaces.
Page 402
IP Routing Features Configuring IP Parameters for Routing Switches table or forwarding cache. The routing switch needs to know the MAC address that corresponds with the IP address of either the packet’s locally attached destination or the next-hop router that leads to the destination. For example, to forward a packet whose destination is multiple router hops away, the routing switch must send the packet to the next-hop router toward its destination, or to a default route or default network route if the IP route...
Page 403
(Ethernet cable), since MAC-layer broadcasts reach all the devices on the segment. Proxy ARP is disabled by default on HP routing switches. To enable Proxy ARP, enter the following commands from the VLAN context level in the CLI:...
HPswitch(config)# ip directed-broadcast Syntax: [no] ip directed-broadcast HP software makes the forwarding decision based on the routing switch's knowledge of the destination network prefix. Routers cannot determine that a message is unicast or directed broadcast apart from the destination network prefix.
Reply Limit – You can enable or disable ICMP reply rate limiting. Disabling ICMP Messages HP devices are enabled to reply to ICMP echo messages and send ICMP Destination Unreachable messages by default. You can selectively disable the following types of Internet Control Message Protocol (ICMP) messages: Echo messages (ping messages) –...
Page 406
Configuring IP Parameters for Routing Switches Disabling ICMP Destination Unreachable Messages By default, when an HP device receives an IP packet that the device cannot deliver, the device sends an ICMP Unreachable message back to the host that sent the packet. The following types of ICMP Unreachable messages are generated: Administration –...
Configuring Static IP Routes Disabling ICMP Redirects You can disable ICMP redirects on the HP routing switch. only on a global basis, for all the routing switch interfaces. To disable ICMP redirects globally, enter the following command at the global CONFIG level of the CLI:...
IP Routing Features Configuring Static IP Routes Static IP Route Parameters When you configure a static IP route, you must specify the following param- eters: The IP address and network mask for the route’s destination network. The route’s path, which can be one of the following: •...
IP Routing Features Configuring Static IP Routes When you configure a static IP route, you specify the destination address for the route and the next-hop gateway or routing switch interface through which the routing switch can reach the route. The routing switch adds the route to the IP route table.
IP Routing Features Configuring Static IP Routes Configuring a “Null” Route You can configure the routing switch to drop IP packets to a specific network or host address by configuring a “null” (sometimes called “null0”) static route for the address. When the routing switch receives a packet destined for the address, the routing switch drops the packet instead of forwarding it.
Some types of hosts use the Router Solicitation messages to discover their default gateway. When IRDP is enabled on the HP routing switch, the routing switch responds to the Router Solicitation messages. Some clients interpret this response to mean that the routing switch is the default gateway. If another router is actually the default gateway for these clients, leave IRDP disabled on the HP routing switch.
IP Routing Features Configuring IRDP messages from other routers at the same time. The interval on each IRDP- enabled routing switch interface is independent of the interval on other IRDP-enabled interfaces. The default maximum message interval is 600 seconds. The default minimum message interval is 450 seconds. Preference - If a host receives multiple Router Advertisement messages from different routers, the host selects the router that send the message with the highest preference as the default gateway.
IP Routing Features Configuring IRDP for the routing switch to the hold time specified in the new advertisement. If the hold time of an advertisement expires, the host discards the adver- tisement, concluding that the router interface that sent the advertisement is no longer available.
IP Routing Features Configuring DHCP Relay Configuring DHCP Relay Overview The Dynamic Host Configuration Protocol (DHCP) is used for configuring hosts with IP address and other configuration parameters without human intervention. The protocol is composed of three components: the DHCP client, the DHCP server, and the DHCP relay agent.
IP Routing Features Configuring DHCP Relay Minimum Requirements for DHCP Relay Operation In order for the DHCP Relay agent to work, the following steps must be completed: DHCP Relay is enabled on the routing switch A DHCP server is servicing the routing switch IP Routing is enabled on the routing switch There is a route from the DHCP server to the routing switch and back An IP Helper address is configured on the routing switch, set to the IP...
Page 417
Switch-to-Switch Download ....... . . A-9 Using the HP TopTools for Hubs & Switches Utility ... . A-11 Troubleshooting TFTP Downloads .
In the switch console interface, the switch software is referred to as the OS, for switch “operating system”. Downloading Switch Software HP periodically provides switch software updates through the HP Procurve website (http://www.hp.com/go/hpprocurve). For more information, see the support and warranty booklet shipped with the switch. After you acquire a...
An switch software file for the switch has been stored on a TFTP server accessible to the switch. (The switch software file is typically available from the HP Procurve website at http://www.hp.com/go/hpprocurve.) The switch is properly connected to your network and has already been configured with a compatible IP address and subnet mask.
Page 420
File Transfers Downloading Switch Software Menu: TFTP Download from a Server to Primary Flash Note that the menu interface accesses only the primary flash. In the console Main Menu, select Download OS to display this screen: Figure A-1. Example of the Download OS Screen (Default Values) (for Edit).
Page 421
File Transfers Downloading Switch Software A “progress” bar indicates the progress of the download. When the entire switch software file has been received, all activity on the switch halts and you will see Validating and writing system software to FLASH... After the primary flash memory has been updated with the new switch software, you must reboot the switch to implement the newly downloaded code.
Page 422
File Transfers Downloading Switch Software CLI: TFTP Download from a Server to Primary or Secondary Flash This command automatically downloads a switch software image to primary or secondary flash. Syntax: copy tftp flash <ip-address> <remote-os-file> [< primary | secondary >] Note that if you do not specify the flash destination, the Xmodem download defaults to primary flash.
File Transfers Downloading Switch Software Using Xmodem to Download Switch Software From a PC or UNIX Workstation This procedure assumes that: The switch is connected via the Console RS-232 port to a PC operating as a terminal. (Refer to the Installation and Getting Started Guide you received with the switch for information on connecting a PC as a terminal and running the switch console interface.) The switch software is stored on a disk drive in the PC.
Page 424
File Transfers Downloading Switch Software Continue reboot of system? Press the space bar once to change , then press to begin the reboot. To confirm that the switch software downloaded correctly: From the Main Menu, select 1. Status and Counters 1.
File Transfers Downloading Switch Software When the download finishes, you must reboot the switch to implement the newly dowloaded switch software. To do so, use one of the following commands: boot system flash <primary | secondary>Reboots from the selected flash. -or- reload Reboots from the flash image...
Page 426
File Transfers Downloading Switch Software • To download the switch software from the secondary flash of the source switch, type /os/secondary. Press , then (for eXecute) to begin the switch software download. A “progress” bar indicates the progress of the download. When the entire operating system has been received, all activity on the switch halts and the following messages appear: Validating and writing system software to FLASH...
Using the HP TopTools for Hubs & Switches Utility HP TopTools for Hubs & Switches includes a software update utility for updating on HP Procurve switch products such as the Switches 2650 and 6108. For further information, refer to the HP TopTools for Hubs & Switches User Guide, provided electronically with the HP TopTools software.
File Transfers Troubleshooting TFTP Downloads Troubleshooting TFTP Downloads When using the menu interface, if a TFTP download fails, the Download OS screen indicates the failure. Message Indicating cause of TFTP Download Failure Figure A-7. Example of Message for Download Failure To find more information on the cause of a download failure, examine the messages in the switch’s Event Log by executing this CLI command: (For more on the Event Log, see “Using the Event Log To Identify Problem...
File Transfers Transferring Switch Configurations For a Unix TFTP server, the file permissions for the switch software file do not allow the file to be copied. Another console session (through either a direct connection to a terminal device or through Telnet) was already running when you started the session in which the download was attempted.
Page 430
File Transfers Transferring Switch Configurations TFTP: Copying a Configuration File to a Remote Host. Syntax: copy <startup-config | running-config> tftp <ip-addr> <remote-file> This command copies the switch’s startup configuration (startup-config file) to a remote TFTP host. For example, to upload the current startup configuration to a file named HPswitch in the configs directory on drive “d”...
Page 431
File Transfers Transferring Switch Configurations Xmodem: Copying a Configuration File from a Serially Connected PC or Unix Workstation. To use this method, the switch must be connected via the serial port to a PC or Unix workstation on which is stored the configuration file you want to copy.
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation You can use the CLI to copy the following types of switch data to a text file in a management device: Command Output: Sends the output of a switch CLI command as a file on the destination device.
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Event Log Output to a Destination Device This command uses TFTP or Xmodem to copy the Event Log content to a PC or UNIX workstation on the network. copy event-log tftp <ip-address>...
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Crash Log Data Content to a Destination Device This command uses TFTP or Xmodem to copy the Crash Log content to a PC or UNIX workstation on the network. You can copy individual slot information or the master switch information.
Page 435
Monitoring and Analyzing Switch Operation Contents Overview ........... . B-2 Status and Counters Data .
Monitoring and Analyzing Switch Operation Overview Overview The Switch 2650 or 6108 has several built-in tools for monitoring, analyzing, and troubleshooting switch and network operation: Status: Includes options for displaying general switch information, man- agement address data, port status, port and trunk group statistics, MAC addresses detected on each port or VLAN, and STP, IGMP, and VLAN data (page B-3).
Monitoring and Analyzing Switch Operation Status and Counters Data Status and Counters Data This section describes the status and counters screens available through the switch console interface and/or the web browser interface. N o t e You can access all console screens from the web browser interface via Telnet to the console.
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access To Status and Counters Beginning at the Main Menu, display the Status and Counters menu by select- ing: 1. Status and Counters Figure B-1. The Status and Counters Menu Each of the above menu items accesses the read-only screens described on the following pages.
Monitoring and Analyzing Switch Operation Status and Counters Data General System Information Menu Access From the console Main Menu, select: 1. Status and Counters 1. General System Information Figure B-2. Example of General Switch Information This screen dynamically indicates how individual switch resources are being used.
Monitoring and Analyzing Switch Operation Status and Counters Data Switch Management Address Information Menu Access From the Main Menu, select: 1 Status and Counters . . . 2. Switch Management Address Information Figure B-3. Example of Management Address Information with VLANs Configured This screen displays addresses that are important for management of the switch.
Monitoring and Analyzing Switch Operation Status and Counters Data Port Status The web browser interface and the console interface show the same port status data. Menu: Displaying Port Status From the Main Menu, select: 1. Status and Counters . . . 4.
Monitoring and Analyzing Switch Operation Status and Counters Data Viewing Port and Trunk Group Statistics and Flow Control Status Feature Default Menu viewing port and trunk statistics for all page B-9 page B-10 page B-10 ports, and flow control status viewing a detailed summary for a page B-9 page B-10...
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to Port and Trunk Statistics To access this screen from the Main Menu, select: 1. Status and Counters . . . 4. Port Counters Figure B-5. Example of Port Counters on the Menu Interface To view details about the traffic on a particular port, use the [ v] key to highlight that port number, then select Show Details.
Page 444
Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access To Port and Trunk Group Statistics To Display the Port Counter Summary Report. This command provides an overview of port activity for all ports on the switch. show interfaces Syntax: To Display a Detailed Traffic Summary for Specific Ports.
Monitoring and Analyzing Switch Operation Status and Counters Data Viewing the Switch’s MAC Address Tables Feature Default Menu viewing MAC addresses on all page B-12 page B-14 — ports on a specific VLAN viewing MAC addresses on a page B-13 page B-14 —...
Page 446
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to the MAC Address Views and Searches Per-VLAN MAC-Address Viewing and Searching. This feature lets you determine which switch port on a selected VLAN is being used to communi- cate with a specific device on the network.
Page 447
Monitoring and Analyzing Switch Operation Status and Counters Data Finding the Port Connection for a Specific Device on a VLAN. This feature uses a device’s MAC address that you enter to identify the port used by that device. Proceeding from figure B-7, press (for Search), to display the following prompt: Type the MAC address you want to locate and press...
Page 448
Monitoring and Analyzing Switch Operation Status and Counters Data Prompt for Selecting the Port To Search Figure B-9. Listing MAC Addresses for a Specific Port Use the Space bar to select the port you want to list or search for MAC addresses, then press to list the MAC addresses detected on that port.
Page 449
Monitoring and Analyzing Switch Operation Status and Counters Data Corresponding Port Numbers. For example, to list the learned MAC address on ports A1 through A4 and port A6: To List All Learned MAC Addresses on a VLAN, with Their Port Numbers.
Monitoring and Analyzing Switch Operation Status and Counters Data Spanning Tree Protocol (STP) Information Menu Access to STP Data From the Main Menu, select: 1. Status and Counters . . . 8. Spanning Tree Information STP must be enabled on the switch to display the following data: Figure B-11.
Monitoring and Analyzing Switch Operation Status and Counters Data Figure B-12. Example of STP Port Information CLI Access to STP Data This option lists the STP configuration, root data, and per-port data (cost, priority, state, and designated bridge). Syntax: show spanning-tree B-17...
Monitoring and Analyzing Switch Operation Status and Counters Data Internet Group Management Protocol (IGMP) Status The switch uses the CLI to display the following IGMP status on a per-VLAN basis: Show Command Output show ip igmp Global command listing IGMP status for all VLANs configured in the switch: •...
Monitoring and Analyzing Switch Operation Status and Counters Data VLAN Information The switch uses the CLI to display the following VLAN status: Show Command Output show vlan Lists: • Maximum number of VLANs to support • Existing VLANs • Status (static or dynamic) •...
Page 454
Monitoring and Analyzing Switch Operation Status and Counters Data HPswitch> show vlan Status and Counters - VLAN Information VLAN support : Yes Maximum VLANs to Support : 9 Primary VLAN: DEFAULT_VLAN 802.1Q VLAN ID Name Status -------------- -------------- -------- DEFAULT _VLAN Static VLAN-33 Static...
Page 455
Monitoring and Analyzing Switch Operation Status and Counters Data HPswitch> show vlan1 Status and Counters - VLAN Information - Ports - VLAN1 802.1Q VLAN ID : 1 Name : DEFAULT_VLAN Status : Static Port Information Mode Unknow VLAN Status ---------------- -------- ----------- ---------- Untagged Learn Tagged Learn...
Alert Log, which informs you of any problems that may have occurred on the switch. For more information on this screen, see chapter 4, ‘Using the HP Web Browser Interface’. Port...
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Port and Static Trunk Monitoring Features Port Monitoring Features Feature Default Menu display monitoring disabled page B-24 page B-26 page B-28 configuration configure the monitor port(s) ports: none page B-24 page B-26 page B-28 selecting or removing ports none selected page B-24 page B-27 page B-28 You can designate a port for monitoring incoming traffic of other ports and of...
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Menu: Configuring Port and Static Trunk Monitoring This procedure describes configuring the switch for monitoring when moni- toring is disabled. (If monitoring has already been enabled, the screens will appear differently than shown in this procedure.) From the Console Main Menu, Select: 2.
Page 459
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Move the cursor to the Monitoring Port parameter. Inbound Port and Trunk Monitoring (Only) on the Switch 4108 Figure B-19. How To Select a Monitoring Port Use the Space bar to select the port to use for monitoring. Use the down arrow key to move the cursor to the Action column for the individual ports and position the cursor at a port you want to monitor.
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features CLI: Configuring Port and Static Trunk Monitoring Port and Static Trunk Monitoring Commands Used in This Section show monitor below mirror-port page B-26 monitor page B-27 You must use the following configuration sequence to configure port and static trunk monitoring in the CLI: Assign a monitoring (mirror) port.
Page 461
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features To turn off monitoring: Selecting or Removing Ports and Static Trunks As Monitoring Sources. After you configure a monitor port you can use either the global configuration level or the interface context level to select ports and static trunks as monitoring sources.
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Web: Configuring Port Monitoring To enable port monitoring: Click on the Configuration tab. Click on To monitor one or more ports. Click on the radio button for Monitor Selected Ports. b.
Warranty booklet shipped with the switch. Troubleshooting Approaches Use these approaches to diagnose switch problems: Check the HP Procurve web site – the web site my have software updates or other information that may have solved your problem: http://www.hp.com/go/hpprocurve Check the switch LEDs – The LEDs on the switch are a fundamental diagnostic tool.
Use the software tools – • HP TopTools for Hubs & Switches: Use HP TopTools for Hubs & Switches (if installed on your network) to help isolate problems and recommend solutions. HP TopTools is shipped at no extra cost with the switch.
Troubleshooting Browser or Telnet Access Problems Browser or Telnet Access Problems Cannot access the web browser interface: Access may be disabled by the Web Agent Enabled parameter in the switch console. Check the setting on this parameter by selecting: 2. Switch Configuration . . . 1.
Page 467
Troubleshooting Browser or Telnet Access Problems Cannot Telnet into the switch console from a station on the network: Telnet access may be disabled by the Inbound Telnet Enabled parameter in the System Information screen of the menu interface: 2. Switch Configuration 1.
Unusual network activity is usually indicated by the LEDs on the front of the switch or measured with the switch console interface or with a network management tool such as the HP TopTools for Hubs & Switches. Refer to the Installation Guide you received with the switch for information on using LEDs to identify unusual network activity.
Troubleshooting Unusual Network Activity This can also happen, for example, if the server is first configured to issue IP addresses with an unlimited duration, then is subsequently configured to issue IP addresses that will expire after a limited duration. One solution is to configure “reservations”...
Troubleshooting Unusual Network Activity If there is more than one physical path between the switch and the other CDP device and STP is running on the switch, then STP will block the redundant link(s). In this case, the switch port on the remaining open link may not be a member of an untagged VLAN, or any untagged VLANs to which the port belongs may not have an IP address.
Removing a port from a trunk without first disabling the port can create a traffic loop that can slow down or halt your network. Before removing a port from a trunk, HP recommends that you either disable the port or disconnect it from the LAN.
Page 472
Troubleshooting Unusual Network Activity Ensure that the period is long enough for network radius-server timeout conditions. The switch does not authenticate a client even though the RADIUS server is properly configured and providing a response to the authentication request. If the RADIUS server configuration for authenti- cating the client includes a VLAN assignment, ensure that the VLAN exists as a static VLAN on the switch.
Page 473
Troubleshooting Unusual Network Activity Port A9 shows an “Open” status even though Access Control is set to Unauthorized (Force Auth). This is because the port-access authenticator has not yet been activated. Figure C-1. Example of a Port Remaining Open After Being Configured with "Control Unauthorized" RADIUS server fails to respond to a request for service, even though the server’s IP address is correctly configured in the switch.
Troubleshooting Unusual Network Activity The authorized MAC address on a port that is configured for both 802.1x and port security either changes or is re-acquired after execution of . If the port is aaa port-access authenticator < port-list > initialize force-authorized with com- aaa port-access authenticator <port-list>...
Page 475
Troubleshooting Unusual Network Activity Global RADIUS Encryption Key Unique RADIUS Encryption Key for the RADIUS server at 10.33.18.119 Figure C-2. Examples of Global and Unique Encryption Keys C-13...
Troubleshooting Unusual Network Activity Spanning-Tree Protocol (STP) and Fast-Uplink Problems C a u t i o n If you enable STP, it is recommended that you leave the remainder of the STP parameter settings at their default values until you have had an opportunity to evaluate STP performance in your network.
Troubleshooting Unusual Network Activity SSH-Related Problems Switch access refused to a client. Even though you have placed the cli- ent’s public key in a text file and copied the file (using the copy tftp pub-key-file command) into the switch, the switch refuses to allow the client to have access.
Troubleshooting Unusual Network Activity A key in the file is too long. The maximum key length is 1024 characters, including spaces. This could also mean that two or more keys are merged together instead of being separated by a <CR><LF>. There are more than ten public keys in the key file.
Page 479
Troubleshooting Unusual Network Activity Disconnect the switch from network access to any TACACS+ servers and then log in to the switch using either Telnet or direct console port access. Because the switch cannot access a TACACS+ server, it will default to local authentication. You can then use the switch’s local Operator or Manager username/password pair to log on.
Troubleshooting Unusual Network Activity For more help, refer to the documentation provided with your TACACS+ server application. Unknown Users Allowed to Login to the Switch. Your TACACS+ appli- cation may be configured to allow access to unknown users by assigning them the privileges included in a default user profile.
Page 481
Troubleshooting Unusual Network Activity Link Configured for Multiple VLANs Does Not Support Traffic for One or More VLANs. One or more VLANs may not be properly configured as “Tagged” or “Untagged”. A VLAN assigned to a port connecting two 802.1Q- compliant devices must be configured the same on both ports.
Page 482
Troubleshooting Unusual Network Activity is moving among ports because packets with the same MAC address but different VLANs are received on different ports. You can avoid this problem by creating redundant paths using port trunks or spanning tree. MAC Address "A"; VLAN 1 Server VLAN 1 Switch with...
W (warning) indicates that a service has behaved unexpectedly. (critical) indicates that a severe switch error has occurred. (debug) reserved for HP internal diagnostic information. Date is the date in mm/dd/yy format that the entry was placed in the log.
Troubleshooting Using the Event Log To Identify Problem Sources N o t e The event log will be erased if power to the switch is interrupted. The event log is not erased by using the option in the Main Menu. Reboot Switch Table C-1.
Troubleshooting Using the Event Log To Identify Problem Sources Menu: Entering and Navigating in the Event Log From the Main Menu, select Event Log Range of Events in the Log Range of Log Events Displayed Log Status Line Figure C-6. Example of an Event Log Display The log status line at the bottom of the display identifies where in the sequence of event messages the display is currently positioned.
Troubleshooting Using the Event Log To Identify Problem Sources CLI: Using the CLI, you can list Events recorded since the last boot of the switch All events recorded Event entries containing a specific keyword, either since the last boot or all events recorded show logging [-a] [<search-text>] Syntax:...
Troubleshooting Diagnostic Tools Port Auto-Negotiation When a link LED does not light (indicating loss of link between two devices), the most common reason is a failure of port auto-negotiation between the connecting ports. If a link LED fails to light when you connect the switch to a port on another device, do the following: Ensure that the switch port and the port on the attached end-node are both set to...
Page 489
Troubleshooting Diagnostic Tools Web: Executing Ping or Link Tests 1. Click here. 2. Click here. 3. Select Ping Test (the 4. For a Ping test, enter default) or Link Test the IP address of the target device. For a Link test, enter the MAC address of the target device.
Page 490
Troubleshooting Diagnostic Tools is the number of seconds to allow per attempt to test a Timeout in Seconds connection before determining that the current attempt has failed. To halt a Link or Ping test before it concludes, click on the Stop button. To reset the screen to its default settings, click on the Defaults button.
Page 491
Troubleshooting Diagnostic Tools Link Tests. You can issue single or multiple link tests with varying repeti- tions and timeout periods. The defaults are: Repetitions: 1 (1 - 999) Timeout: 5 seconds (1 - 256 seconds) link <mac-address> [repetitions <1 - 999>] [timeout <1 - 256>] Syntax: [vlan <vlan-id>] Basic Link Test...
Troubleshooting Diagnostic Tools Displaying the Configuration File The complete switch configuration is contained in a file that you can browse from either the CLI or the web browser interface. It may be useful in some troubleshooting scenarios to view the switch configuration. CLI: Viewing the Configuration File Using the CLI, you can display either the running configuration or the startup configuration.
Page 493
Troubleshooting Diagnostic Tools Executing outputs a data listing to your terminal emulator. However, show tech using your terminal emulator’s text capture features, you can also save show data to a text file for viewing, printing, or sending to an associate. For tech example, if your terminal emulator is the Hyperterminal application available with Microsoft®...
Troubleshooting Diagnostic Tools b. When the CLI prompt appears, the show tech listing is complete. At this point, click on in HyperTerminal to stop Transfer Capture Text Stop copying data into the text file created in the preceding steps. N o t e Remember to do the above step to stop HyperTerminal from copying into the text file.
Clear/Reset button combination N o t e HP recommends that you save your configuration to a TFTP server before resetting the switch to its factory-default configuration. You can also save your configuration via Xmodem, to a directly connected PC.
Troubleshooting Restoring a Flash Image Restoring a Flash Image The switch can lose its operating system if either the primary or secondary flash image location is empty or contains a corrupted OS file and an operator uses the command to erase a good OS image file from the opposite erase flash flash location.
Page 497
Troubleshooting Restoring a Flash Image Since the OS file is large, you can increase the speed of the download by changing the switch console and terminal emulator baud rates to a high speed. For example: Change the switch baud rate to 115,200 Bps. b.
Page 498
Troubleshooting Restoring a Flash Image Figure C-12. Example of Xmodem Download in Progress When the download completes, the switch reboots from primary flash using the OS image you downloaded in the preceding steps, plus the most recent startup-config file. C-36...
MAC Address Management Determining MAC Addresses Determining MAC Addresses MAC Address Viewing Methods Feature Default Menu view switch’s base (default vlan) MAC address — and the addressing for any added VLANs view port MAC addresses (hexadecimal format) — — Use the menu interface to view the switch’s base MAC address and the MAC address assigned to any non-default VLAN you have configured on the switch.
MAC Address Management Determining MAC Addresses Menu: Viewing the Switch’s MAC Addresses The Management Address Information screen lists the MAC addresses for: Base switch (default VLAN; VID = 1) Any additional VLANs configured on the switch. Also, the Base MAC address appears on a label on the back of the switch. N o t e The Base MAC address is used by the first (default) VLAN in the switch.
MAC Address Management Determining MAC Addresses CLI: Viewing the Port and VLAN MAC Addresses The MAC address assigned to each switch port is used internally by such features as Flow Control and the Spanning Tree Protocol. Using the walkmib command to determine the MAC address assignments for individual ports can sometimes be useful when diagnosing switch operation.
Page 503
MAC Address Management Determining MAC Addresses ifPhysAddress.1 - 6: Ports A1 - A6 in Slot 1 (Addresses 7 - 24 in slot 1 and 25 - 48 in slot 2 are unused.) ifPhysAddress.49 - 51: Ports C1 - C3 in Slot 3 (Addresses 52 - 72 in slot 3 are unused.) ifPhysAddress.205 Base MAC Address (MAC...
• 4000M • 8000M HP Procurve switches provide a way to automatically adjust the system clock for Daylight Savings Time (DST) changes. To use this feature you define the month and date to begin and to end the change from standard time. In addition to the value “none”...
Page 506
Daylight Savings Time on HP Procurve Switches Middle Europe and Portugal: • Begin DST at 2am the first Sunday on or after March 25th. • End DST at 2am the first Sunday on or after September 24th. Southern Hemisphere: •...
Page 507
Daylight Savings Time on HP Procurve Switches Before configuring a “User defined” Daylight Time Rule, it is important to understand how the switch treats the entries. The switch knows which dates are Sundays, and uses an algorithm to determine on which date to change the system clock, given the configured “Beginning day”...
Page 514
… 7-2 MIB … 10-3 leave group listing … 10-3 See IGMP. HP proprietary … 10-3 legacy VLAN … 11-6 standard … 10-3 limit, broadcast … 9-9 Microsoft Internet Explorer … 4-4 link speed, port trunk … 9-11 mirroring link test …...
Page 515
displaying … 6-18 summary … 6-15 parameters port security IP global … 15-5 port trunk restriction … 9-11 IP interface … 15-6 trunk restriction … 9-15 password … 4-8, 4-10 port trunk … 9-10 creating … 4-8 caution … 9-11, 9-16, 9-24 delete …...
Page 517
… C-15 spanning tree stacking 802.1Q standard … 13-3 benefits … 14-3, 14-4 blocked link … 13-5 minimum software version, other HP blocked port … 13-4 switches … 14-9 BPDU … 13-3 primary … 14-45 broadcast storm … 13-3, 13-7 See also virtual stacking.
Page 518
static IP routes download … A-4 configuring … 15-13, 15-15 OS download … A-3 IP routing threshold setting … 10-4 static route parameters … 15-14 thresholds, SNMP … 10-8 route types … 15-13 time format … C-21 static VLAN, convert to … 11-34 time protocol statistical sampling …...
Page 519
… 11-14 URL … 4-13 OS download … A-3 browser interface online help location … 4-13 port assignment … 11-14 HP ProCurve … 4-13 port configuration … 11-26, C-19 HP Procurve … 10-3 port monitoring … 11-32 management … 4-13 port restriction …...
Page 520
URL default … 4-14 URL, management server … 4-14 warranty … 1-ii URL, support … 4-14 web agent enabled … 4-2 web site, HP … 10-3 web agent, world wide web site, HP advantages … 1-5 See HP Procurve web browser interface write access …...
Need help?
Do you have a question about the Procurve 2650 and is the answer not in the manual?
Questions and answers