Page of 524
Download Print This PagePrint Bookmark
   
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524
management and
configuration guide
hp procurve
switch 2650 and switch 6108
www.hp.com/go/hpprocurve

Advertising

   Related Manuals for HP Procurve 2650

   Summary of Contents for HP Procurve 2650

  • Page 1

    2650 and switch 6108 www.hp.com/go/hpprocurve...

  • Page 3

    HP Procurve Switch 2650 and Switch 6108 Software Release H.07.01 or Greater Management and Configuration Guide...

  • Page 4

    Microsoft, Windows, Windows 95, and Microsoft Windows Hewlett-Packard products and replacement parts can be NT are registered trademarks of Microsoft Corporation. obtained from your HP Sales and Service Office or Internet Explorer is a trademark of Microsoft Corporation. authorized dealer.

  • Page 5: Table Of Contents, Selecting A Management Interface, Using The Menu Interface

    Advantages of Using the CLI ........1-4 Advantages of Using the HP Web Browser Interface ... . . 1-5 Advantages of Using HP TopTools for Hubs &...

  • Page 6: Table Of Contents, Using The Command Line Interface (cli), Using The Hp Web Browser Interface

    Using a Standalone Web Browser in a PC or UNIX Workstation ..4-4 Using HP TopTools for Hubs & Switches ..... . . 4-5 Tasks for Your First HP Web Browser Interface Session .

  • Page 7: Table Of Contents, Switch Memory And Configuration

    Help and the Management Server URL ......4-13 Status Reporting Features ........4-15 The Overview Window .

  • Page 8: Table Of Contents, Configuring Ip Addressing, Time Protocols

    System Information ......... . . 6-9 Menu: Viewing and Configuring System Information .

  • Page 9: Table Of Contents

    SNTP: Viewing, Selecting, and Configuring ..... 8-4 Menu: Viewing and Configuring SNTP ......8-5 CLI: Viewing and Configuring SNTP .

  • Page 10: Table Of Contents, Port-based Virtual Lans (vlans) And Gvrp

    10 Configuring for Network Management Applications Contents ........... . . 10-1 Using SNMP Tools To Manage the Switch .

  • Page 11: Table Of Contents, Excluding Well-known Or Reserved Multicast Addresses From Ip

    The Secure Management VLAN ......11-27 Effect of VLANs on Other Switch Features ....11-31 VLAN Restrictions .

  • Page 12: Table Of Contents, W Rapid Spanning Tree Protocol (rstp), And 802.1d Spanning Tree Protocol (stp)

    Which Devices Support Stacking? ......14-4 Components of HP Procurve Stack Management ....14-5 General Stacking Operation .

  • Page 13: Table Of Contents, Ip Routing Features

    Transmission Interval ........14-44 Stacking Operation with Multiple VLANs Configured .

  • Page 14: Table Of Contents

    Switch-to-Switch Download ....... . . A-9 Using the HP TopTools for Hubs & Switches Utility ... . A-11 Troubleshooting TFTP Downloads .

  • Page 15: Table Of Contents

    C Troubleshooting Contents ........... . . C-1 Overview .

  • Page 16: Table Of Contents

    Menu: Viewing the Switch’s MAC Addresses ....D-3 CLI: Viewing the Port and VLAN MAC Addresses ....D-4 E Daylight Savings Time on HP Procurve Switches Index...

  • Page 17: Contents

    Getting Started Contents Introduction ..........xvi Conventions .

  • Page 18: Command Syntax Statements

    “Related Publications” on page xviii. The Product Documentation CD-ROM shipped with the switch includes a copy of this guide. You can also download a copy from the HP Procurve website. (See “Getting Documentation From the Web” on page xix, below.)

  • Page 19: Command Prompts, Screen Simulations

    Getting Started Conventions Command Prompts In the default configuration, your Switch 2650 or 6108 displays one of the following CLI prompts: To simplify recognition, this guide uses to represent command prompts for all models. For example: (You can use the hostname command to change the text in the CLI prompt.) Screen Simulations Figures containing simulated screen text and command output look like this: Figure 1.

  • Page 20: Related Publications

    A PDF version of this guide is also provided on the Product Documentation CD-ROM shipped with the switch. And you can download a copy from the HP Procurve website. (See “Getting Documentation From the Web” on page xix.) Access Security Guide.

  • Page 21: Getting Documentation From The Web

    Getting Started Getting Documentation From the Web Getting Documentation From the Web Go to the HP Procurve website at http://www.hp.com/go/hpprocurve Click on technical support. Click on manuals. Click on the product for which you want to view or download a manual.

  • Page 22: Sources For More Information

    Interface (hereafter referred to as the “web browser interface”), use the online help available for the web browser interface. For more information on web browser Help options, refer to “Online Help for the HP Web Browser Interface” on page 4-11.

  • Page 23: Need Only A Quick Start, To Set Up And Install The Switch In Your Network

    IP Addressing. If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing.

  • Page 25

    Advantages of Using the CLI ........1-4 Advantages of Using the HP Web Browser Interface ... . . 1-5...

  • Page 26: Overview, Understanding Management Interfaces

    For information on how to access the web browser interface Help, see “Online Help for the Web Browser Interface” on page 4-11. To use HP TopTools for Hubs & Switches, refer to the HP TopTools User’s Guide and the TopTools online help, which are available electronically with the TopTools software.

  • Page 27: Advantages Of Using The Menu Interface

    Selecting a Management Interface Advantages of Using the Menu Interface Advantages of Using the Menu Interface Figure 1-1. Example of the Console Interface Display Provides quick, easy management access to a menu-driven subset of switch configuration and performance features: • IP addressing •...

  • Page 28: Advantages Of Using The Cli, Index

    Selecting a Management Interface Advantages of Using the CLI Advantages of Using the CLI Operator Level Manager Level Global Configuration Level Context Configuration Levels (port, VLAN) <context> Figure 1-2. Command Prompt Examples Provides access to the complete set of the switch configuration, perfor- mance, and diagnostic features.

  • Page 29: Advantages Of Using The Hp Web Browser Interface

    Advantages of Using the HP Web Browser Interface Advantages of Using the HP Web Browser Interface Figure 1-3. Example of the HP Web Browser Interface Easy access to the switch from anywhere on the network Familiar browser interface--locations of window objects consistent...

  • Page 30: Advantages Of Using Hp Toptools For Hubs & Switches

    Advantages of Using HP TopTools for Hubs & Switches You can operate HP TopTools from a PC on the network to monitor traffic, manage your hubs and switches, and proactively recommend network changes to increase network uptime and optimize performance. Easy to install and use, HP TopTools for Hubs &...

  • Page 31

    Enables you to proactively manage your network by using the Alert Log to quickly identify problems and suggest solutions, saving valu- able time. • Notifies you when HP hubs use “self-healing” features to fix or limit common network problems. • Provides a list of discovered devices, with device type, connectivity status, the number of new or open alerts for each device, and the type of management for each device.

  • Page 33

    Using the Menu Interface Contents Overview ........... . . 2-2 Starting and Ending a Menu Session .

  • Page 34

    Reboot the switch For a detailed list of menu features, see the “Menu Features List” on page 2-14. Privilege Levels and Password Security. HP strongly recommends that you configure a Manager password to help prevent unauthorized access to your network. A Manager password grants full read-write access to the switch.

  • Page 35: Starting And Ending A Menu Session

    Using the Menu Interface Starting and Ending a Menu Session N o t e If the switch has neither a Manager nor an Operator password, anyone having access to the console interface can operate the console with full manager privileges. Also, if you configure only an Operator password, entering the Operator password enables full manager privileges.

  • Page 36: How To Start A Menu Interface Session

    A PC terminal emulator or terminal • Telnet (You can also use the stack Commander if the switch is a stack member. See Chapter 14, “HP Procurve Stack Management”). Do one of the following: • If you are using Telnet, go to step 3.

  • Page 37: How To End A Menu Session And Exit From The Console:

    Using the Menu Interface Starting and Ending a Menu Session Figure 2-1. The Main Menu with Manager Privileges For a description of Main Menu features, see “Main Menu Features” on page 2-7. N o t e To configure the switch to start with the menu interface instead of the CLI, go to the Manager level prompt in the CLI, enter the command, and in the setup...

  • Page 38

    Using the Menu Interface Starting and Ending a Menu Session Asterisk indicates a configuration change that requires a reboot to activate. Figure 2-2. An Asterisk Indicates a Configuration Change Requiring a Reboot In the current session, if you have not made configuration changes that require a switch reboot to activate, return to the Main Menu and press (zero) to log out.

  • Page 39: Main Menu Features

    Using the Menu Interface Main Menu Features Main Menu Features Figure 2-3. The Main Menu View with Manager Privileges The Main Menu gives you access to these Menu interface features: Status and Counters: Provides access to display screens showing switch information, port status and counters, port and VLAN address tables, and spanning tree information.

  • Page 40

    Stacking: Enables you to use a single IP address and standard network cabling to manage a group of up to 16 switches in the same subnet (broadcast domain). See Chapter 14, “HP Procurve Stack Management”. Logout: Closes the Menu interface and console session, and disconnects Telnet access to the switch.

  • Page 41: Screen Structure And Navigation

    Using the Menu Interface Screen Structure and Navigation Screen Structure and Navigation Menu interface screens include these three elements: Parameter fields and/or read-only information such as statistics Navigation and configuration actions, such as Save, Edit, and Cancel Help line to describe navigation options, individual parameters, and read- only data For example, in the following System Information screen: Screen title –...

  • Page 42

    Using the Menu Interface Screen Structure and Navigation Table 2-1. How To Navigate in the Menu Interface Task: Actions: Execute an action Use either of the following methods: • Use the arrow keys ([ <] ,or [ >] ) to highlight the action you want to from the “Actions –>”...

  • Page 43

    Using the Menu Interface Screen Structure and Navigation To get Help on individual parameter descriptions. In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlighted, press , and a separate help screen is displayed. For example: Pressing or highlighting Help and...

  • Page 44: Rebooting The Switch

    Using the Menu Interface Rebooting the Switch Rebooting the Switch Rebooting the switch from the menu interface Terminates all current sessions and performs a reset of the operating system Activates any menu interface configuration changes that require a reboot Resets statistical counters to zero (Note that statistical counters can be reset to zero without rebooting the switch.) To Reboot the switch, use the Reboot Switch option in the Main Menu.

  • Page 45

    Using the Menu Interface Rebooting the Switch Rebooting To Activate Configuration Changes. Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the .

  • Page 46: Menu Features List

    Using the Menu Interface Menu Features List Menu Features List Status and Counters • General System Information • Switch Management Address Information • Port Status • Port Counters • Address Table • Port Address Table • Spanning Tree Information Switch Configuration •...

  • Page 47: Where To Go From Here

    To use the Run Setup option Refer to the Installation and Getting Started Guide shipped with the switch. To use the HP Procurve Stack Manager Chapter 14, “HP Procurve Stack Management” To view and monitor switch status and Appendix B, “Monitoring and Analyzing Switch counters Operation”...

  • Page 49

    Using the Command Line Interface (CLI) Contents Overview ........... . . 3-2 Accessing the CLI .

  • Page 50: Accessing The Cli, Overview, Using The Cli

    Using the Command Line Interface (CLI) Overview Overview The CLI is a text-based command interface for configuring and monitoring the switch. The CLI gives you access to the switch’s full set of commands while providing the same password protection that is used in the web browser interface and the menu interface.

  • Page 51: Privilege Levels At Logon

    Using the Command Line Interface (CLI) Using the CLI Startup Config file in non-volatile memory. If you reboot the switch without first using write memory, all changes made since the last reboot or write memory (whichever is later) will be lost. For more on switch memory and saving configuration changes, see Chapter 5, “Switch Memory and Configuration”.

  • Page 52: Privilege Level Operation

    Using the CLI C a u t i o n HP strongly recommends that you configure a Manager password. If a Man- ager password is not configured, then the Manager level is not password- protected, and anyone having in-band or out-of-band access to the switch may be able to reach the Manager level and compromise switch and network security.

  • Page 53

    Using the Command Line Interface (CLI) Using the CLI Manager Privileges Manager privileges give you three additional levels of access: Manager, Global Configuration, and Context Configuration. (See figure .) A " " character delimits any Manager prompt. For example: (Example of the Manager prompt.) Manager level: Provides all Operator level privileges plus the ability to perform system-level actions that do not require saving changes to the system configuration file.

  • Page 54

    Using the Command Line Interface (CLI) Using the CLI Changing Interfaces. If you change from the CLI to the menu interface, or the reverse, you will remain at the same privilege level. For example, entering command from the Operator level of the CLI takes you to the Operator privilege level in the menu interface.

  • Page 55: How To Move Between Levels

    Using the Command Line Interface (CLI) Using the CLI How To Move Between Levels Change in Levels Example of Prompt, Command, and Result Operator level Manager level enable After you enter , the Password prompt appears. After you enter the Manager password, the system prompt appears with the symbol: Manager level...

  • Page 56: Listing Commands And Command Options

    Using the Command Line Interface (CLI) Using the CLI for VLAN 1 and later use the CLI to configure a different IP address of “Y” for VLAN 1, then “Y” replaces “X” as the IP address for VLAN 1 in the running- config file.

  • Page 57

    Using the Command Line Interface (CLI) Using the CLI Typing? at the Manager level produces this listing: When - - MORE - - appears, use the Space bar or to list additional commands. Figure 3-4. Example of the Manager-Level Command Listing When - - MORE - - appears, there are more commands in the listing.

  • Page 58

    Using the Command Line Interface (CLI) Using the CLI As mentioned above, if you type part of a command word and press , the CLI completes the current word (if you have typed enough of the word for the CLI to distinguish it from other possibilities), including hyphenated exten- sions.

  • Page 59: Displaying Cli "help", Displaying Cli "help

    Using the Command Line Interface (CLI) Using the CLI Listing Command Options. You can use the CLI to remind you of the options available for a command by entering command keywords followed . For example, suppose you want to see the command options for config- uring port C5: This example displays the command options for configuring port C5 on the switch.

  • Page 60

    Using the Command Line Interface (CLI) Using the CLI Figure 3-6. Example of Context-Sensitive Command-List Help Displaying Help for an Individual Command. You can display Help for any command that is available at the current context level by entering enough of the command string to identify the command, along with help.

  • Page 61: Configuration Commands And The Context Configuration Modes

    Using the Command Line Interface (CLI) Using the CLI Figure 3-8. Example of Help for a Specific Instance of a Command Note that trying to list the help for an individual command from a privilege level that does not include that command results in an error message. For example, trying to list the help for the interface command while at the global configuration level produces this result: Configuration Commands and the Context...

  • Page 62

    Using the Command Line Interface (CLI) Using the CLI Lists the commands you can use in the port or static trunk context, plus the Manager, Operator, and context commands you can execute at this level. In the port context, the first block of commands in the "?" listing show the context-specific commands that will affect only ports C3-C6.

  • Page 63

    Using the Command Line Interface (CLI) Using the CLI VLAN Context . Includes VLAN-specific commands that apply only to the selected VLAN, plus Manager and Operator commands. The prompt for this mode includes the VLAN ID of the selected VLAN. For example, if you had already configured a VLAN with an ID of 100 in the switch: Command executed at configura- tion level to enter VLAN 100...

  • Page 64: Cli Control And Editing

    Using the Command Line Interface (CLI) CLI Control and Editing CLI Control and Editing Keystrokes Function Jumps to the first character of the command line. or [ <] Moves the cursor back one character. Terminates a task and displays the command prompt. Deletes the character at the cursor.

  • Page 65

    Using a Standalone Web Browser in a PC or UNIX Workstation ..4-4 Using HP TopTools for Hubs & Switches ..... . . 4-5 Tasks for Your First HP Web Browser Interface Session .

  • Page 66

    Using the HP Web Browser Interface Overview Overview The HP web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. This lets you do the following: Optimize your network uptime by using the Alert Log and other diagnostic...

  • Page 67: General Features

    Using the HP Web Browser Interface General Features General Features The Switch 2650 and 6108 include these web browser interface features: Switch Configuration: • Ports • VLANs and Primary VLAN • Fault detection • Port monitoring (mirroring) • System information •...

  • Page 68: Starting An Hp Web Browser Interface Session With The Switch

    • Directly connected to your network • Connected through remote access to your network Using a management station running HP TopTools for Hubs & Switches on your network Using a Standalone Web Browser in a PC or UNIX Workstation This procedure assumes that you have a supported web browser installed on your PC or workstation, and that an IP address has been configured on the switch.

  • Page 69: Using Hp Toptools For Hubs & Switches

    Using HP TopTools for Hubs & Switches HP TopTools for Hubs & Switches is designed for installation on a network management workstation. For this reason, the HP TopTools system require- ments are different from the system requirements for accessing the switch’s web browser interface from a non-management PC or workstation.

  • Page 70

    Using the HP Web Browser Interface Starting an HP Web Browser Interface Session with the Switch The web browser interface automatically starts with the Status Overview window displayed for the selected device, as shown in figure 4-1. N o t e If the Registration window appears, click on the Status tab.

  • Page 71: Tasks For Your First Hp Web Browser Interface Session, Viewing The "first Time Install" Window

    Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Tasks for Your First HP Web Browser Interface Session The first time you access the web browser interface, there are three tasks that you should perform: Review the “First Time Install”...

  • Page 72: Creating Usernames And Passwords In The Browser Interface

    Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session This window is the launching point for the basic configuration you need to perform to set web browser interface passwords to maintain security and Fault Detection policy, which determines the types of messages that will be displayed in the Alert Log.

  • Page 73

    Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Figure 4-3. The Device Passwords Window To set the passwords: Access the Device Passwords screen by one of the following methods: • If the Alert Log includes a “First Time Install” event entry, double click on this event, then, in the resulting display, click on the secure access to the device link.

  • Page 74

    Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session N o t e Passwords you assign in the web browser interface will overwrite previous passwords assigned in either the web browser interface, the Command Prompt, or the switch console.

  • Page 75: Online Help For The Hp Web Browser Interface

    Context-sensitive help is provided for the screen you are on. N o t e If you do not have HP TopTools for Hubs and Switches installed on your network and do not have an active connection to the World Wide Web, then Online help for the web browser interface will not be available.

  • Page 76: Support/mgmt Urls Feature

    - the URL of the network Management server or other source of the online help files for this web browser inter- face. (The default accesses Help on HP’s World Wide Web site.) Figure 4-6. The Default Support/Mgmt URLs Window 4-12...

  • Page 77: Support Url, Help And The Management Server Url

    4-6. The switch is shipped with the URL set to retrieve online Help from the HP World Wide Web site. However, if HP TopTools for Hubs & Switches is installed on a management station on your network and discovers the switch, the Management Server URL is automatically changed to retrieve the Help from your TopTools management station.

  • Page 78

    Support/Mgmt URLs Feature If you have World Wide Web access from your PC or workstation, and do not have HP TopTools installed on your network, enter the following URL in the Management Server URL field shown in figure 4-7 on page 4-14: http://www.hp.com/rnd/device_help...

  • Page 79: Status Reporting Features, The Overview Window

    Using the HP Web Browser Interface Status Reporting Features Status Reporting Features Browser elements covered in this section include: The Overview window (below) Port utilization and status (page 4-16) The Alert log (page 4-19) The Status bar (page 4-22) The Overview Window The Overview Window is the home screen for any entry into the web browser interface.The following figure identifies the various parts of the screen.

  • Page 80: The Port Utilization And Status Displays

    Using the HP Web Browser Interface Status Reporting Features The Port Utilization and Status Displays The Port Utilization and Status displays show an overview of the status of the switch and the amount of network activity on each port. The following figure shows a sample reading of the Port Utilization and Port Status.

  • Page 81

    Using the HP Web Browser Interface Status Reporting Features Maximum Activity Indicator: As the bars in the graph area change height to reflect the level of network activity on the corresponding port, they leave an outline to identify the maximum activity level that has been observed on the port.

  • Page 82

    Using the HP Web Browser Interface Status Reporting Features Port Status Port Status Indicators Legend Figure 4-12. The Port Status Indicators and Legend The Port Status indicators show a symbol for each port that indicates the general status of the port. There are four possible statuses: Port Connected –...

  • Page 83: The Alert Log

    Using the HP Web Browser Interface Status Reporting Features The Alert Log The web browser interface Alert Log, shown in the lower half of the screen, shows a list of network occurrences, or alerts, that were detected by the switch. Typical alerts are Broadcast Storm, indicating an excessive number of broadcasts received on a port, and Problem Cable, indicating a faulty cable.

  • Page 84: Alert Types

    Using the HP Web Browser Interface Status Reporting Features Alert Types The following table lists the types of alerts that can be generated. Table 4-1. Alert Strings and Descriptions Alert String Alert Description First Time Install Important installation information for your switch.

  • Page 85

    Using the HP Web Browser Interface Status Reporting Features N o t e When troubleshooting the sources of alerts, it may be helpful to check the switch’s Port Status and Port Counter windows and the Event Log in the console interface.

  • Page 86: The Status Bar

    Using the HP Web Browser Interface Status Reporting Features The Status Bar The Status Bar is displayed in the upper left corner of the web browser interface screen. Figure 4-15 shows an expanded view of the status bar. Most Critical Alert Description...

  • Page 87: Setting Fault Detection Policy

    Using the HP Web Browser Interface Status Reporting Features Product Name. The product name of the switch to which you are connected in the current web browser interface session. Setting Fault Detection Policy One of the powerful features in the web browser interface is the Fault Detection facility.

  • Page 88

    Never. Disables the Alert Log and transmission of alerts (traps) to the management server (in cases where a network management tool such as HP TopTools for Hubs & Switches is in use). Use this option when you don’t want to use the Alert Log.

  • Page 89

    Switch Memory and Configuration Contents Overview ........... . . 5-2 Overview of Configuration File Management .

  • Page 90: Overview Of Configuration File Management, Overview

    Switch Memory and Configuration Overview Overview This chapter describes: How switch memory manages configuration changes How the CLI implements configuration changes How the menu interface and web browser interface implement configu- ration changes How the switch provides OS (operating system) options through primary/ secondary flash image options How to use the switch’s primary and secondary flash options, including displaying flash information, booting or restarting the switch, and other...

  • Page 91

    Switch Memory and Configuration Overview of Configuration File Management Running Config File: Exists in volatile memory and controls switch operation. If no configuration changes have been made in the CLI since the switch was last booted, the running-config file is identical to the startup-config file.

  • Page 92: Using The Cli To Implement Configuration Changes

    Switch Memory and Configuration Using the CLI To Implement Configuration Changes "permanent". When you are satisfied that the change is satisfactory, you can make it permanent by executing the command. For example, write memory suppose you use the following command to disable port 5: The above command disables port 5 in the running-config file, but not in the startup-config file.

  • Page 93

    Switch Memory and Configuration Using the CLI To Implement Configuration Changes The option of testing configuration changes before making them perma- nent How To Use the CLI To View the Current Configuration Files. Use commands to view the configuration for individual features, such as port show status or Spanning Tree Protocol.

  • Page 94

    Switch Memory and Configuration Using the CLI To Implement Configuration Changes For example, the default port mode setting is . Suppose that your network auto uses Cat 3 wiring and you want to connect the switch to another autosensing device capable of 100 Mbps operation. Because 100 Mbps over Cat 3 wiring can introduce transmission problems, the recommended port mode is auto-10 which allows the port to negotiate full- or half-duplex, but restricts speed to...

  • Page 95

    Switch Memory and Configuration Using the CLI To Implement Configuration Changes Disables port 1 in the running configuration, which causes port 1 to block all traffic. Press to continue the rebooting process. You will then see this prompt. Figure 5-2. Boot Prompt for an Unsaved Configuration The above prompt means that one or more parameter settings in the running- config file differ from their counterparts in the startup-config file and you need to choose which config file to retain and which to discard.

  • Page 96: Configuration Changes, Menu: Implementing Configuration Changes

    Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes How To Reset the startup-config and running-config Files to the Factory-Default Configuration. This command reboots the switch, replacing the contents of the current startup-config and running-config files with the factory-default startup configuration.

  • Page 97

    Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes N o t e The only exception to this operation are two VLAN-related parameter changes that require a reboot—described under “Rebooting To Activate Configuration Changes” on page 5-10. Using in the Menu Interface Save...

  • Page 98

    Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes the menu interface, the switch discards the configuration changes made while using the CLI. To ensure that changes made while using the CLI are saved, execute write memory in the CLI before rebooting the switch.

  • Page 99: Web: Implementing Configuration Changes

    Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes (To access these parameters, go to the Main menu and select 2. Switch Configuration, then 8. VLAN Menu, then 1. VLAN Support If configuration changes requiring a reboot have been made, the switch displays an asterisk (*) next to the menu item in which the change has been made.

  • Page 100: Using Primary And Secondary Flash Image Options, Displaying The Current Flash Image Data

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options Using Primary and Secondary Flash Image Options The Series 4100GL switches feature two flash memory locations for storing system image (operating system, or OS) files: Primary Flash: The default storage for OS (system image) files. Secondary Flash: The additional storage for either a redundant or an alternate OS (system image) file.

  • Page 101

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options For example, if the switch is using an OS version of G.01.01 stored in Primary flash, show version produces the following: Figure 5-7. Example Showing the Identity of the Current Flash Image Determining Whether the Flash Images Are Different Versions.

  • Page 102: Os Downloads

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options 1. In this example show version indicates the switch has version G.05.01 in primary flash. 2. After the boot system command, show version indicates that version G.05.00 is in secondary flash.

  • Page 103: Local Os Replacement And Removal

    OS file. The process automatically overwrites the previous file with the new file. If you want to remove an unwanted OS version from flash, HP recommends that you do so by overwriting it with the same OS version that you are using to operate the switch, or with another acceptable OS version.

  • Page 104

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options Verify that there is a valid flash image in the secondary flash location. The following figure indicates that an OS image is present in secondary flash. (If you are unsure whether the image is secondary flash is valid, try booting from it before you proceed, by using boot system flash secondary.) The unequal code size, differing dates,...

  • Page 105

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options The prompt shows which flash location will be erased. Figure 5-11. Example of Erase Flash Prompt Type y at the prompt to complete the flash erase. Use show flash to verify erasure of the selected OS flash image The "...

  • Page 106

    Switch Memory and Configuration Using Primary and Secondary Flash Image Options Booting from Primary Flash. This command always boots the switch from primary flash, and executes the complete set of subsystem self-tests. Syntax: boot For example, to boot the switch from primary flash with pending configuration changes in the running-config file: Figure 5-13.

  • Page 107: Operating Notes

    Booting from the Current OS Version. Reload reboots the switch from the flash image on which the switch is currently running, and saves to the startup-config file any configuration changes currently in the running-config file. Because reload bypasses some subsystem self-tests, the switch reboots faster than if you use either of the boot command options.

  • Page 109

    Interface Access, System Information, and Friendly Port Names Contents Overview ........... . . 6-2 Interface Access: Console/Serial Link, Web, and Inbound Telnet .

  • Page 110

    Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, Using the HP Web Browser Interface” Why Configure Interface Access and System Information? The inter- face access features in the switch operate properly by default. However, you can modify or disable access features to suit your particular needs.

  • Page 111: Interface Access: Console/serial Link, Web, And Inbound Telnet

    Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet Interface Access: Console/Serial Link, Web, and Inbound Telnet Interface Access Features Feature Default Menu Inactivity Time 0 Minutes page 6-4 page 6-6 — (disabled) Inbound Telnet Access Enabled page 6-4...

  • Page 112: Menu: Modifying The Interface Access

    Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet Menu: Modifying the Interface Access The menu interface enables you to modify these parameters: Inactivity Time-out Inbound Telnet Enabled Web Agent Enabled To Access the Interface Access Parameters: From the Main Menu, Select...

  • Page 113: Cli: Modifying The Interface Access

    Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet CLI: Modifying the Interface Access Interface Access Commands Used in This Section show console below [no] telnet-server below [no] web-management page 6-6 console page 6-6 Listing the Current Console/Serial Link Configuration.

  • Page 114

    Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet Outbound Telnet to Another Device. This feature operates indepen- dently of the telnet-server status and enables you to Telnet to another device that has an IP address. Syntax: telnet <...

  • Page 115

    Interface Access, System Information, and Friendly Port Names Interface Access: Console/Serial Link, Web, and Inbound Telnet VT100 operation 19,200 baud No flow control 10-minute inactivity time Critical log events you would use the following command sequence: The switch implements the Event Log change immediately. The switch implements write memory reload the other console changes after executing...

  • Page 116: Sessions

    Interface Access, System Information, and Friendly Port Names Denying Interface Access by Terminating Remote Management Sessions Denying Interface Access by Terminating Remote Management Sessions The switch supports up to four management sessions. You can use show ip ssh to list the current management sessions, and kill to terminate a currently running remote session.

  • Page 117: System Information

    System Name: Using a unique name helps you to identify individual devices in stacking environments and where you are using an SNMP network manage- ment tool such as HP TopTools for Hubs & Switches. System Contact and Location: This information is helpful for identifying the person administratively responsible for the switch and for identifying the locations of individual switches.

  • Page 118: Menu: Viewing And Configuring System Information

    Daylight Time Rule: Specifies the daylight savings time rule to apply for your location. The default is None. (For more on this topic, see appendix E, “Daylight Savings Time on HP ProCurve Switches.) Time: Used in the CLI to specify the time of day, the date, and other system parameters.

  • Page 119: Cli: Viewing And Configuring System Information

    Interface Access, System Information, and Friendly Port Names System Information Refer to the online help provided with this screen for further information on configuration options for these features. When you have finished making changes to the above parameters, press , then press (for Save) and return to the Main Menu.

  • Page 120

    Interface Access, System Information, and Friendly Port Names System Information Configure a System Name, Contact, and Location for the Switch. To help distinguish one switch from another, configure a plain-language identity for the switch. hostname <name-string> Syntax: snmp-server [contact <system contact>] [location <system location>] Both fields allow up to 48 characters.

  • Page 121

    Interface Access, System Information, and Friendly Port Names System Information Reconfigure the Age Time for Learned MAC Addresses. This com- mand corresponds to the MAC Age Interval in the menu interface, and is expressed in seconds. mac-age-time <60...999960> (seconds) Syntax: For example, to configure the age time to seven minutes: Configure the Time Zone and Daylight Time Rule.

  • Page 122: Web: Configuring System Parameters

    Interface Access, System Information, and Friendly Port Names System Information Web: Configuring System Parameters In the web browser interface, you can enter the following system information: System Name System Location System Contact For access to the MAC Age Interval and the Time parameters, use the menu interface or the CLI.

  • Page 123: Using Friendly (optional) Port Names, Configuring And Operating Rules For Friendly Port Names

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Using Friendly (Optional) Port Names Feature Default Menu Configure Friendly Port Names Standard Port page 16 Numbering Display Friendly Port Names page 18 This feature enables you to assign alphanumeric port names of your choosing to augment automatically assigned numeric port names.

  • Page 124: Configuring Friendly Port Names

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names To retain friendly port names across reboots, you must save the current running-configuration to the startup-config file after entering the friendly port names. (In the CLI, use the write memory command.) Configuring Friendly Port Names Syntax:interface [e] <port-list>...

  • Page 125

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Configuring the Same Name for Multiple Ports. Suppose that you want to use ports A5 through A8 as a trunked link to a server used by a drafting group.

  • Page 126: Displaying Friendly Port Names With Other Port Data

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Displaying Friendly Port Names with Other Port Data You can display friendly port name data in the following combinations: show name: Displays a listing of port numbers with their corresponding friendly port names and also quickly shows you which ports do not have friendly name assignments.

  • Page 127

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names Port Without a "Friendly" Name Friendly port names assigned in previous examples. Figure 6-12. Example of Friendly Port Name Data for Specific Ports on the Switch Including Friendly Port Names in Per-Port Statistics Listings. A friendly port name configured to a port is automatically included when you display the port’s statistics output.

  • Page 128

    Interface Access, System Information, and Friendly Port Names Using Friendly (Optional) Port Names For a given port, if a friendly port name does not exist in the running-config file, the line in the above command output appears as: To Search the Configuration for Ports with Friendly Port Names. This option tells you which friendly port names have been saved to the startup- config file.

  • Page 129

    Configuring IP Addressing Contents Overview ........... . . 7-2 IP Configuration .

  • Page 130

    Configuring IP Addressing Overview Overview You can configure IP addressing through all of the switch’s interfaces. You can also easily edit a switch configuration file to allow downloading the file to multiple Switches 2650 and 6108 without overwriting each switch’s unique gateway and VLAN 1 IP addressing.

  • Page 131: Ip Configuration

    Configuring IP Addressing IP Configuration IP Configuration IP Configuration Features Feature Default Menu IP Address and Subnet Mask DHCP/Bootp page 7-5 page 7-7 page 7-9 Default Gateway Address none page 7-5 page 7-7 page 7-9 Packet Time-To-Live (TTL) 64 seconds page 7-5 page 7-7 Time Server (Timep)

  • Page 132: Just Want A Quick Start With Ip Addressing?, Ip Addressing With Multiple Vlans

    If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing. To do so, do one of the following: Enter setup at the CLI Manager level prompt.

  • Page 133: Ip Addressing In A Stacking Environment, Menu: Configuring Ip Address, Gateway, And Time-to-live (ttl)

    IP Addressing in a Stacking Environment If you are installing the switch into an HP Procurve stack management environment, entering an IP address may not be required. See chapter 14, ‘HP Procurve Stack Management’ for more information. Menu: Configuring IP Address, Gateway, and Time-To-...

  • Page 134

    Configuring IP Addressing IP Configuration For descriptions of these parameters, see the online Help for this screen. Before using the DHCP/ Bootp option, refer to “DHCP/Bootp Operation” on page 7-10. Figure 5-1. Example of the IP Service Configuration Screen without Multiple VLANs Configured Press (for Edit).

  • Page 135: Cli: Configuring Ip Address, Gateway, And Time-to-live (ttl)

    Configuring IP Addressing IP Configuration CLI: Configuring IP Address, Gateway, and Time-To- Live (TTL) IP Commands Used in This Section show ip page 7-7 vlan <vlan-id> ip page 7-8 address ip default-gateway page 7-8 ip ttl page 7-9 Viewing the Current IP Configuration. The following command displays the IP addressing for each VLAN configured in the switch.

  • Page 136

    Configuring IP Addressing IP Configuration A Switch 4108GL with IP Addressing and VLANs Configured Figure 5-3. Example of Show IP Listing with Non-Default IP Addressing Configured Configure an IP Address and Subnet Mask. The following command includes both the IP address and the subnet mask. You must either include the ID of the VLAN for which you are configuring IP addressing or go to the context configuration level for that VLAN.

  • Page 137: Web: Configuring Ip Addressing, How Ip Addressing Affects Switch Operation

    Console RS-232 port. You can use direct-connect console access to take advantage of features that do not depend on IP addressing. However, to realize the full performance capabilities HP proactive networking offers through the switch, configure the switch with an IP address and subnet mask compatible with your network.

  • Page 138

    Additional Features Available with an IP Address and Subnet Mask • Direct-connect access to the CLI and the menu interface. • HP web browser interface access, with configuration, security, and diagnostic tools, plus the Alert Log for • Stacking Candidate or Stack Member discovering problems detected in the switch along with •...

  • Page 139

    Configuring IP Addressing IP Configuration DHCP/Bootp requests are automatically broadcast on the local network. (The switch sends one type of request to which either a DHCP or Bootp server can respond.) When a DHCP or Bootp server receives the request, it replies with a previously configured IP address and subnet mask for the switch.

  • Page 140

    Configuring IP Addressing IP Configuration Bootp Operation. When a Bootp server receives a request it searches its Bootp database for a record entry that matches the MAC address in the Bootp request from the switch. If a match is found, the configuration data in the associated database record is returned to the switch.

  • Page 141

    Configuring IP Addressing IP Configuration is the IP address of the default gateway. TFTP server address (source of final configuration file) T144 is the vendor-specific “tag” identifying the configuration file to download. is a required entry that specifies the Bootp report format. For the Switches 2650 and 6108, set this parameter to rfc1048.

  • Page 142: File Downloads, Operating Rules For Ip Preserve

    Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads IP Preserve enables you to copy a configuration file to multiple Switches 2650 and 6108 while retaining the individual IP address and subnet mask on VLAN 1 in each switch, and the Gateway IP address assigned to the switch.

  • Page 143

    TFTP server (figure 7-6), but retain their current IP acquires new IP addressing from the DHCP Figure 7-5. Example of IP Preserve Operation with Multiple HP Switches If you apply the following configuration file to figure 7-5, switches 1 - 3 will retain their manually assigned IP addressing and switch 4 will be configured to acquire its IP addressing from a DHCP server.

  • Page 144

    Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Using figure 7-5, above, switches 1 - 3 ignore these entries because the file implements IP Preserve and their current IP addressing was not acquired through DHCP/Bootp. Switch 4 ignores IP Preserve and implements the DHCP/Bootp addressing and IP Gateway specified in this file (because its last IP addressing was acquired...

  • Page 145

    Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Because switch 4 (figure 7-5) received its most recent IP addressing from a DHCP/Bootp server, the switch ignores the ip preserve command and implements the IP addressing included in this file.

  • Page 146: Globally Assigned Ip Network Addresses

    Configuring IP Addressing Globally Assigned IP Network Addresses Globally Assigned IP Network Addresses If you intend to connect your network to other networks that use globally administered IP addresses, Hewlett-Packard strongly recommends that you use IP addresses that have a network address assigned to you. There is a formal process for assigning unique IP addresses to networks worldwide.

  • Page 147

    Time Protocols Contents Overview ........... . . 8-2 TimeP Time Synchronization .

  • Page 148: Timep Time Synchronization, Overview, Sntp Time Synchronization

    Time Protocols Overview Overview This chapter describes: SNTP Time Protocol Operation Timep Time Protocol Operation Using time synchronization ensures a uniform time among inter operating devices. This helps you to manage and troubleshoot switch operation by attaching meaningful time data to event and error messages. The switch offers TimeP and SNTP (Simple Network Time Protocol) and a timesync command for changing the time protocol selection (or turning off time protocol operation).

  • Page 149: Time Protocol Operation, General Steps For Running A Time Protocol On The Switch:

    Time Protocols Overview: Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation ular server, it ignores time broadcasts from other SNTP servers unless the configurable expires three consecutive times without Poll Interval an update received from the first-detected server. N o t e To use Broadcast mode, the switch and the SNTP server must be in the same subnet.

  • Page 150: Disabling Time Synchronization, Sntp: Viewing, Selecting, And Configuring

    Time Protocols SNTP: Viewing, Selecting, and Configuring Note that simply selecting a time synchronization protocol does not enable that protocol on the switch unless you also enable the protocol itself (step 2, above). For example, in the factory-default configuration, TimeP is the selected time synchronization method.

  • Page 151: Menu: Viewing And Configuring Sntp

    Time Protocols SNTP: Viewing, Selecting, and Configuring Table 8-1.SNTP Parameters SNTP Parameter Operation Time Sync Used to select either SNTP, TIMEP, or None as the time synchronization method. Method SNTP Mode Disabled The Default. SNTP does not operate, even if specified by the Menu interface Time Sync Method parameter or the CLI timesync command.

  • Page 152

    Time Protocols SNTP: Viewing, Selecting, and Configuring Time Protocol Selection Parameter – TIMEP – SNTP – None Figure 8-1. The System Information Screen (Default Values) Press (for ). The cursor moves to the field. Edit System Name Use [ v] to move the cursor to the Time Sync Method field.

  • Page 153

    SNTP server version running on the device you specified in the preceding step (step ii). If you are unsure which version to use, HP recommends leaving this value at the default setting of and testing SNTP operation to determine whether any change is necessary.

  • Page 154: Cli: Viewing And Configuring Sntp

    Time Protocols SNTP: Viewing, Selecting, and Configuring CLI: Viewing and Configuring SNTP CLI Commands Described in this Section show sntp page 8-8 [no] timesync pages 8-9 and ff., 8-12 sntp broadcast page 8-9 sntp unicast page 8-10 sntp server pages 8-10 and ff. Protocol Version page 8-12 poll-interval...

  • Page 155

    Time Protocols SNTP: Viewing, Selecting, and Configuring Even though, in this example, TimeP is the current time synchronous method, the switch maintains the SNTP configuration. Figure 8-3. Example of SNTP Configuration When SNTP Is Not the Selected Time Synchronization Method Configuring (Enabling or Disabling) the SNTP Mode Enabling the SNTP mode means to configure it for either broadcast or unicast mode.

  • Page 156

    Time Protocols SNTP: Viewing, Selecting, and Configuring 3. Enable SNTP for Broadcast mode. 4. View the SNTP configuration again to verify the configuration. The commands and output would appear as follows: show sntp displays the SNTP configuration and also shows that TimeP is the currently active time synchronization mode.

  • Page 157

    Time Protocols SNTP: Viewing, Selecting, and Configuring N o t e Deleting an SNTP server when only one is configured disables SNTP unicast operation. For example, to select SNTP and configure it with unicast mode and an SNTP server at 10.28.227.141 with the default server version (3) and default poll interval (720 seconds): Selects SNTP.

  • Page 158

    Time Protocols SNTP: Viewing, Selecting, and Configuring Deletes unicast SNTP server entry. Re-enters the unicast server with a non- default protocol version. show sntp displays the result. Figure 8-6. Example of Specifying the SNTP Protocol Version Number Changing the SNTP Poll Interval. This command lets you specify how long the switch waits between time polling intervals.

  • Page 159: Timep: Viewing, Selecting, And Configuring

    Time Protocols TimeP: Viewing, Selecting, and Configuring Disabling the SNTP Mode. If you want to prevent SNTP from being used even if selected by (or the Menu interface’s param- timesync Time Sync Method eter), configure the SNTP mode as disabled. Syntax: no sntp Disables SNTP by changing the SNTP mode configuration to...

  • Page 160: Menu: Viewing And Configuring Timep

    Time Protocols TimeP: Viewing, Selecting, and Configuring Table 8-2.Timep Parameters SNTP Parameter Operation Time Sync Used to select either TIMEP (the default), SNTP, or None as the time synchronization method. Method Timep Mode Disabled The Default. Timep does not operate, even if specified by the Menu interface Time Sync Method parameter or the CLI timesync command.

  • Page 161

    Time Protocols TimeP: Viewing, Selecting, and Configuring Time Protocol Selection Parameter – TIMEP (the default) – SNTP – None Figure 8-9. The System Information Screen (Default Values) Press (for ). The cursor moves to the field. Edit System Name Use [ v] to move the cursor to the Time Sync Method field.

  • Page 162: Cli: Viewing And Configuring Timep

    Time Protocols TimeP: Viewing, Selecting, and Configuring Note: This step replaces any previously configured TimeP server IP address. iii. Press [ >] to move the cursor to the field, then go to Poll Interval step 6. In the field, enter the time in minutes that you want for a TimeP Poll Interval Poll Interval.

  • Page 163

    Time Protocols TimeP: Viewing, Selecting, and Configuring For example, if you configure the switch with TimeP as the time synchroniza- tion method, then enable TimeP in DHCP mode with the default poll interval, lists the following: show timep Figure 8-10. Example of TimeP Configuration When TimeP Is the Selected Time Synchronization Method If SNTP is the selected time synchronization method), still lists the...

  • Page 164

    Time Protocols TimeP: Viewing, Selecting, and Configuring For example, suppose: Time synchronization is configured for SNTP. You want to: 1. View the current time synchronization. 2. Select TimeP as the time synchronization mode. 3. Enable TimeP for DHCP mode. 4. View the TimeP configuration. The commands and output would appear as follows: –...

  • Page 165

    Time Protocols TimeP: Viewing, Selecting, and Configuring For example, to select TimeP and configure it for manual operation using a TimeP server address of 10.28.227.141 and the default poll interval (720 minutes, assuming the TimeP poll interval is already set to the default): HPswitch(config)# timesync timep Selects TimeP.

  • Page 166

    Time Protocols TimeP: Viewing, Selecting, and Configuring If you then viewed the TimeP configuration, you would see the following: Figure 8-14. Example of TimeP with Time Sychronization Disabled Disabling the TimeP Mode. Disabling the TimeP mode means to configure it as disabled. (Disabling TimeP prevents the switch from using it as the time synchronization protocol, even if it is the selected option.) Time Sync Method...

  • Page 167: Sntp Unicast Time Polling With Multiple Sntp Servers, Address Prioritization

    Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers SNTP Unicast Time Polling with Multiple SNTP Servers When running SNTP unicast time polling as the time synchronization method, the switch requests a time update from the server you configured with either the Server Address parameter in the menu interface, or the primary server in a list of up to three SNTP servers configured using the CLI.

  • Page 168

    Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers Prioritized list of SNTP Server IP Addresses Figure 8-16. Example of SNTP Server Address Prioritization N o t e If there are already three SNTP server addresses configured on the switch, and you want to use the CLI to replace one of the existing addresses with a new one, you must delete the unwanted address before you configure the new one.

  • Page 169: Menu: Operation With Multiple Sntp Server Addresses, Sntp Messages In The Event Log

    Time Protocols SNTP Messages in the Event Log Menu: Operation with Multiple SNTP Server Addresses When you use the Menu interface to configure an SNTP server IP address, the new address writes over the current primary address, if one is configured. If there are multiple addresses configured, the switch re-orders the addresses according to the criteria described under “Address Prioritization”...

  • Page 171

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Contents Overview ........... . . 9-2 Viewing Port Status and Configuring Port Parameters .

  • Page 172: Viewing Port Status And Configuring Port Parameters, Overview

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Overview Overview This chapter includes: Configuring ports to non-default settings (page 9-2) These settings include enable/disable, mode (speed and duplex), flow control, port-trunk group, and port-trunk type. You can also set a broadcast limit that applies to all ports on the switch.

  • Page 173

    • Auto-10: Allows the port to negotiate between half-duplex (HDx) and full-duplex (FDx) while keeping speed at 10 Mbps. Also negotiates flow control (enabled or disabled). HP recommends Auto-10 for links between 10/100 autosensing ports connected with Cat 3 cabling. (Cat 5 cabling is required for 100 Mbps links.).

  • Page 174

    LACP trunk, if any, to which a port belongs. (CLI) Note: An LACP trunk requires a full-duplex link. In most cases, HP recommends that you leave the port Mode setting at Auto (the default). See the LACP Note on page 9-11.

  • Page 175: Menu: Viewing Port Status And Configuring Port Parameters

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Menu: Viewing Port Status and Configuring Port Parameters From the menu interface, you can configure and view all port parameter settings and view all port status indicators. Using the Menu To View Port Status.

  • Page 176: Cli: Viewing Port Status And Configuring Port Parameters

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Figure 9-2. Example of Port/Trunk Settings with a Trunk Group Configured (for Edit). The cursor moves to the Enabled field for the first port. Press Refer to the online help provided with this screen for further information on configuration options for these features.

  • Page 177

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters show interfaces brief Syntax: show interface config The next two figures list examples of the output of the above two commands for the same port configuration. Figure 9-3.

  • Page 178

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Using the CLI To Configure Ports. You can configure one or more of the following port parameters. For details on each option, see Table 9-9-1 on page 9-3.

  • Page 179: Web: Viewing Port Status And Configuring Port Parameters

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Viewing Port Status and Configuring Port Parameters Configuring a Broadcast Limit on the Switch. Executing this command configures the broadcast limit for all ports on the switch. Syntax: broadcast-limit < 0 . . 99 > For example, to configure a broadcast limit of 20% for all ports on the switch: To display the current broadcast limit setting, use one of the following com- mands:...

  • Page 180: Port Trunking

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Port Trunking Port Status and Configuration Features Feature Default Menu viewing port trunks page 9-16 page 9-18 page 9-24 configuring a static trunk none page 9-16 page 9-22 —...

  • Page 181: Switches 2650 And 6108 Port Trunk Features And Operation

    L A C P N o t e LACP operation requires full-duplex (FDx) links. For most installations, HP recommends that you leave the port Mode settings at Auto (the default). LACP also operates with Auto-10, Auto-100, and Auto-1000 (if negotiation selects FDx);...

  • Page 182: Trunk Configuration Methods

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Fault Tolerance: If a link in a port trunk fails, the switch redistributes traffic originally destined for that link to the remaining links in the trunk. The trunk remains operable as long as there is at least one link in operation.

  • Page 183

    See “Trunk Group Operation Using LACP” on page 9-25. Trunk Provides manually configured, static-only trunking to: (non- • Most HP switches and routing switches not running the 802.3ad LACP protocol. protocol) • Windows NT and HP-UX workstations and servers Use the Trunk option when: –...

  • Page 184

    Media: All ports on both ends of a trunk group must have the same media type and mode (speed and duplex). The switch blocks any trunked links that do not conform to this rule. (For the Switches 2650 and 6108, HP recommends leaving the...

  • Page 185

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Spanning Tree: Spanning Tree operates as a global setting on the switch (one instance of Spanning Tree per switch). However, you can adjust Spanning Tree parameters on a per-port basis. A static trunk of any type appears in the Spanning Tree configuration display, and you can configure Spanning Tree parameters for a static trunk in the same way that you would configure Spanning Tree parameters on a non-trunked port.

  • Page 186: Menu: Viewing And Configuring A Static Trunk Group

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Menu: Viewing and Configuring a Static Trunk Group Important Configure port trunking before you connect the trunked links to another switch, routing switch, or server. Otherwise, a broadcast storm could occur. (If you need to connect the ports before configuring them for trunking, you can temporarily disable the ports until the trunk is configured.

  • Page 187

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking • All ports in a trunk must have the same media type and mode (such as 10/100TX set to 100FDx, or 100FX set to 100FDx). The flow control settings must also be the same for all ports in a given trunk.

  • Page 188: Cli: Viewing And Configuring Port Trunk Groups

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking During the Save process, traffic on the ports configured for trunking will be delayed for several seconds. If the Spanning Tree Protocol is enabled, the delay may be up to 30 seconds. Connect the trunked ports on the switch to the corresponding ports on the opposite device.

  • Page 189

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Using a port list specifies, for switch ports in a static trunk group, only the ports you want to view. In this case, the command specifies ports A5 through A7.

  • Page 190

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Listing Static LACP and Dynamic LACP Trunk Data. This command lists data for only the LACP-configured ports. Syntax: show lacp In the following example, ports A1 and A2 have been previously configured for a static LACP trunk.

  • Page 191: Using The Cli To Configure A Static Or Dynamic Trunk Group

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking “Up” Links Standby Link Figure 9-11. Example of a Dynamic LACP Trunk with One Standby Link Using the CLI To Configure a Static or Dynamic Trunk Group I m p o r t a n t Configure port trunking before you connect the trunked links between switches.

  • Page 192

    Removing a port from a trunk can result in a loop and cause a broadcast storm. When you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.

  • Page 193

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Enabling a Dynamic LACP Trunk Group. In the default port configura- tion, all ports on the switch are set to LACP Passive. However, to enable the switch to automatically form a trunk group that is dynamic on both ends of the link, the ports on one end of a set of links must be LACP Active.

  • Page 194: Web: Viewing Existing Port Trunk Groups

    Unless STP is running on your network, removing a port from a trunk can result in a loop. To help prevent a broadcast storm when you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.

  • Page 195: Trunk Group Operation Using Lacp

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Trunk Group Operation Using LACP The switch can automatically configure a dynamic LACP trunk group or you can manually configure a static LACP trunk group. N o t e LACP requires full-duplex (FDx) links of the same media type (10/100Base-T, 100FX, etc.) and the same speed, and enforces speed and duplex conformance across a trunk group.

  • Page 196

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Table 9-5. LACP Trunk Types LACP Port Trunk Operation Configuration 802.3ad-compliant Dynamic LACP This option automatically establishes an trunk group, with LACP for the port Type parameter and DynX for the port Group name, where X is an automatically assigned value from 1 to 6, depending on how many dynamic and static trunks are currently on the switch.

  • Page 197: Default Port Operation

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Default Port Operation In the default configuration, all ports are configured for passive LACP. How- ever, if LACP is not configured, the port will not try to detect a trunk config- uration and will operate as a standard, untrunked port.

  • Page 198

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Status Name Meaning LACP Partner Yes: LACP is enabled on both ends of the link. No: LACP is enabled on the Switches 2650 and 6108, but either LACP is not enabled or the link has not been detected on the opposite device.

  • Page 199

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking LACP Notes and Restrictions 802.1x (Port-Based Access Control) Configured on a Port. To main- tain security, LACP is not allowed on ports configured for 802.1x authenticator operation. If you configure port security on a port on which LACP (active or passive) is configured, the switch removes the LACP configuration, displays a notice that LACP is disabled on the port(s), and enables 802.1x on that port.

  • Page 200

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Changing Trunking Methods. To convert a trunk from static to dynamic, you must first eliminate the static trunk. Static LACP Trunks. Where a port is configured for LACP (Active or Passive), but does not belong to an existing trunk group, you can add that port to a static trunk.

  • Page 201: Trunk Group Operation Using The "trunk" Option, Trunk Operation Using The "fec" Option

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Half-Duplex and/or Different Port Speeds Not Allowed in LACP Trunks. The ports on both sides of an LACP trunk must be configured for the same speed and for full-duplex (FDx). The 802.3ad LACP standard speci- fies a full-duplex (FDx) requirement for LACP trunking.

  • Page 202: How The Switch Lists Trunk Data, Outbound Traffic Distribution Across Trunked Links

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Port Trunking Depending on the capabilities of the device on the other end of the trunk, negotiate the forwarding mechanism on the trunk to the non-protocol option. When auto-negotiated to the SA/DA forwarding mechanism, provide higher performance on the trunk for broadcast, multicast, and flooded traffic through distribution in the same manner as non-protocol trunking.

  • Page 203

    In actual networking environments, this is rarely a problem. However, if it becomes a problem, you can use the HP TopTools for Hubs & Switches network management software available from Hewlett- Packard to quickly and easily identify the sources of heavy traffic (top talkers) and make adjustments to improve performance.

  • Page 204: Configuring Port-based Priority For Incoming Packets

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configuring Port-Based Priority for Incoming Packets Feature Default Menu Assigning a priority level to traffic on the basis Disabled page 9-37 of incoming port When network congestion occurs, it is important to move traffic on the basis of relative importance.

  • Page 205: Outbound Port Queues And Packet Priority Settings

    High. As described below, these three queues map to the eight priority settings specified in the 802.1p standard. Table 9-8. Mapping Priority Settings to Device Queues 802.1p Priority Settings Used HP Switch and Queue Assignment in Downstream Devices In Tagged VLAN Packets Other Devices With:...

  • Page 206

    Otherwise the tag is removed and the 802.1p priority is lost as the packet moves from one switch to the next. Operating Rules for Port-Based Priority on HP Switches In the switch’s default configuration, port-based priority is configured as “0”...

  • Page 207

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configuring and Viewing Port-Based Priority This command enables or disables port-based priority on a per-port basis. You can either enter the command on the interface context level or include the interface in the command.

  • Page 208: Messages Related To Prioritization, Troubleshooting Prioritization

    Optimizing Traffic Flow with Port Controls, Port Trunking, and Port-Based Priority Configuring Port-Based Priority for Incoming Packets Configures port-based priority on ports A9 -A12 to "1" (Low) and saves the configuration changes to the startup- config file. Ports A9 - A12 are now configured to assign a priority level of "1"...

  • Page 209

    Configuring for Network Management Applications Contents Using SNMP Tools To Manage the Switch ..... . 10-2 Overview ..........10-2 SNMP Management Features .

  • Page 210: Using Snmp Tools To Manage The Switch, Overview

    For more on Authorized IP Managers, refer to the Access Security Guide on the Documentation CD-ROM shipped with your switch and also available on the HP Procurve web site. For information on the Manage- ment VLAN feature, refer to “The Secure Management VLAN” on page 11-26.

  • Page 211: Snmp Management Features, Configuring For Snmp Access To The Switch

    Version 1 traps • RMON: groups 1, 2, 3, and 9 Managing the switch with an SNMP network management tool such as HP TopTools for Hubs & Switches Standard MIBs, such as the Bridge MIB (RFC 1493), Ethernet MAU MIB (RFC 1515), and others.

  • Page 212: Snmp Communities

    Using SNMP Tools To Manage the Switch C a u t i o n The “public” community exists by default and is used by HP’s network man- agement applications. Deleting the “public” community disables many net- work management functions (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting).

  • Page 213

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Note: This screen gives an overview of the SNMP communities that are currently Add and Edit options are configured. All fields in used to modify the SNMP this screen are read- options.

  • Page 214

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch CLI: Viewing and Configuring Community Names Community Name Commands Page show snmp-server [<community-string>] 10-6 [no] snmp-server 10-7 [community <community-str>] 10-7 [host <community-str> <ip-addr>] 10-10 [<none | debug | all | not-info | critical>] [enable traps <authentication>...

  • Page 215

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Configuring Community Names and Values. The snmp-server command enables you to add SNMP communities with either default or specific access attributes, and to delete specific communities. Syntax: [no] snmp-server community < community-name > Configures a new community name.

  • Page 216: Trap Receivers And Authentication Traps

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Trap Receivers and Authentication Traps Trap Features Feature Default Menu snmp-server host (trap receiver) public — page — 10-10 snmp-server enable (authentication trap) none — page — 10-11 A trap receiver is a management station designated by the switch to receive SNMP traps sent from the switch.

  • Page 217

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Using the CLI To List Current SNMP Trap Receivers. This command lists the currently configured trap receivers and the setting for authentication traps (along with the current SNMP community name data — see “SNMP Communities”...

  • Page 218

    Table 10-1. Options for Sending Event Log Messages as Traps Event Level Description None (default) Send no log messages. Send all log messages. Not INFO Send the log messages that are not information-only. Critical Send critical-level log messages. Debug Reserved for HP-internal use. 10-10...

  • Page 219

    Configuring for Network Management Applications Using SNMP Tools To Manage the Switch For example, to configure a trap receiver in a community named "red-team" with an IP address of 10.28.227.130 to receive only "critical" log messages: N o t e s To replace one community name with another for the same IP address, you must use no snmp-server host <...

  • Page 220: Advanced Management: Rmon

    RMON traps and events. Note that you can access the Ethernet statistics, Alarm, and Event groups from the HP TopTools for Hubs & Switches network management software. For more on TopTools, see the "Read Me First" document shipped with your switch and also available on HP’s ProCurve website at...

  • Page 221: Introduction

    To take advantage of CDP in Switches 2650 and 6108, you should have a working knowledge of SNMP operation and an SNMP utility capable of polling the switches for CDP data. HP’s implementation of CDP places specific data into the switch’s Management Information Base (MIB). However, retrieval of this data for network mapping is dependent on the operation of your SNMP utility.

  • Page 222: Cdp Terminology

    Configuring for Network Management Applications An SNMP utility can progressively discover CDP devices in a network by: Reading a given device’s CDP Neighbor table (in the Management Infor- mation Base, or MIB) to learn about other, neighbor CDP devices Using the information learned in step 1 to go to and read the neighbor devices’...

  • Page 223: General Cdp Operation, Outgoing Packets

    Configuring for Network Management Applications General CDP Operation The switch stores information about adjacent CDP devices in a CDP Neigh- bors table maintained in the switch’s MIB (Management Information Base). This data is available to SNMP-based applications designed to read CDP data from the MIB.

  • Page 224: Incoming Cdp Packets

    CDP-Aware packets describing itself (Switch "C"). Switch with CDP Disabled Switch "A" Accepts, but does not forward CDP HP Switches with Router "X" packets from Switch "A". Also transmits CDP Running and CDP packets describing itself (Router "X") Forwarding CDP With CDP out all ports.

  • Page 225

    Configuring for Network Management Applications CDP neighbor pairs are as follows: A/1, A/2, A/3, A/B, B/C. Note that “C” and “E” are not neighbors because the intervening CDP-disabled switch “D” does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E”...

  • Page 226

    Configuring for Network Management Applications Using the example in figure 10-7, the CDP Neighbor table for switches “A” and “B” would appear similar to these: Switch A: Switch B: (Note that no CDP devices appear on port B5, which is connected to a device on which CDP is present, but disabled.) Figure 10-8.

  • Page 227: Configuring Cdp On The Switch

    Configuring for Network Management Applications CDP-disabled switch) does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E” does not have any CDP neighbors.) Figure 10-7 (page 10-17) illustrates how multiple CDP neighbors can appear on a single port.

  • Page 228: Viewing The Switch's Current Cdp Configuration, Viewing The Switch's Current Cdp Neighbors Table

    Configuring for Network Management Applications Viewing the Switch’s Current CDP Configuration Syntax: show cdp Lists the switch’s global and per-port CDP configura- tion. This example shows the default CDP configuration. CDP Enable/Disable on the Switch Packet Hold Time in CDP Neighbor Table Interval for Transmitting Outbound CDP Packets on All Ports Per-Port CDP Enable/Disable...

  • Page 229: Clearing (resetting) The Cdp Neighbors Table

    CDP packets. Figure 10-10. Example of CDP Neighbors Table Listing Figure 10-11 illustrates a topology of CDP-enabled devices for the CDP Neigh- bors table listing in figure 10-10. HP Series 6108GL HP Switch 2512 Switch HP J4812A: Accounting...

  • Page 230: Configuring Cdp Operation

    Configuring for Network Management Applications Note that the table will again list entries after the switch receives new CDP packets from neighboring CDP devices. Figure 10-12. View of the CDP Neighbors Table Immediately After Executing cdp clear Configuring CDP Operation Enabling or Disabling CDP Operation on the Switch.

  • Page 231

    Configuring for Network Management Applications Enabling or Disabling CDP Operation on Individual Ports. In the factory-default configuration, the switch has all ports enabled and transmit- ting CDP packets. Disabling CDP on a port prevents that port from sending outbound CDP packets and causes it to drop inbound CDP packets without recording their data in the CDP Neighbors table.

  • Page 232: Effect Of Spanning Tree (stp) On Cdp Packet Transmission

    Configuring for Network Management Applications Changing the Transmission Interval for Outbound CDP Packets. Syntax: cdp timer < 5 . . 254 > Changes the interval the switch uses to transmit CDP packets describing itself to neighbor devices. (Default: 60 seconds) For example, if the switch’s transmit interval for CDP packets was set to a non-default value, you would use this command to reset it to one minute: Changing the Hold Time (CDP Packet Time-To-Live) for a Switch’s...

  • Page 233: Selection Of The Ip Address In Outbound Cdp Packets

    Configuring for Network Management Applications CDP Packets from Switch "A" to Switch "B" Switch "B" Switch "A" Port A3 CDP Enabled CDP Enabled Port B1 STP Root Device CDP Neighbor Table Port C5 CDP Packets from Port | Data Switch "B" to Switch "A" ------|------------------ CDP Neighbor Table A3 | Switch "B"data...

  • Page 234: Cdp Neighbor Data And Mib Objects

    Configuring for Network Management Applications If a CDP switch does not detect an IP address on the connecting port of a CDP neighbor, then the loopback IP address is used (127.0.0.1). For example, in figure 10-15, port A1 on CDP switch “X” is connected to port C5 on CDP neighbor switch “Y”, with the indicated VLAN configuration on port C5: VLAN Membership in Port C5 of Switch "Y"...

  • Page 235

    CDP Cache Address IP address of source device. Software Version ASCII String Device Name (ASCII string) In HP Procurve switches, this is the value configured for the System Name parameter. Device MAC Address Included in the Device Name entry. Destination Port Number On the Switches 2650 and 6108 (the receiving device), the number of the port through which the CDP packet arrived.

  • Page 236

    Figure 10-16. Example of CDP Neighbor Data in a Switch 2650 or 6108MIB For the current Switch 2650 or 6108 MIB, go to the HP Procurve World Wide Web site at: http://ww.hp.com/go/hpprocurve...

  • Page 237

    Configuring for Network Management Applications CDP-Capable Hubs. Some hubs are capable of running CDP, but also forward CDP packets as if the hub itself were transparent to CDP. Such hubs will appear in the switch’s CDP Neighbor table and will also maintain a CDP neighbor table similar to that for switches.

  • Page 239: Table Of Contents

    Port-Based Virtual LANs (VLANs) and GVRP Contents Overview ........... . 11-3 Port-Based Virtual LANs (Static VLANs) .

  • Page 240

    For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 11-2...

  • Page 241: Port-based Virtual Lans (static Vlans), Port-based Virtual Lans (static Vlans)

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Port-Based Virtual LANs (Static VLANs) VLAN Features Feature Default Menu view existing VLANs n/a page 11-10 page 11-16 page 11-21 thru 11-15 configuring static default VLAN with page 11-10 page 11-15 page 11-21 VLANs VID = 1...

  • Page 242

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) For example, referring to figure 11-1, if ports A1 through A4 belong to VLAN_1 and ports A5 through A8 belong to VLAN_2, traffic from end-node stations on ports A2 through A4 is restricted to only VLAN_1, while traffic from ports A5 through A7 is restricted to only VLAN_2.

  • Page 243

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Switch 2650 or 6108 Figure 11-2. Example of Overlapping VLANs Using the Same Server Similarly, using 802.1Q-compliant switches, you can connect multiple VLANs through a single switch-to-switch link. Procurve Procurve Switch Switch...

  • Page 244: Overview Of Using Vlans

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Switch 2524 Switch Procurve Procurve Switch Switch Tagged VLAN Link Untagged VLAN Links Non-802.1Q- compliant switch Figure 11-4. Example of Tagged and Untagged VLAN Technology in the Same Network For more information on VLANs, refer to: “Overview of Using VLANs”...

  • Page 245

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) The Primary VLAN Because certain features and management functions, such as single IP- address stacking, run on only one VLAN in the switch, and because DHCP and Bootp can run per-VLAN, there is a need for a dedicated VLAN to manage these features and ensure that multiple instances of DHCP or Bootp on different VLANs do not result in conflicting configuration values for the switch.

  • Page 246

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Per-Port Static VLAN Configuration Options The following figure and table show the options you have for assigning individual ports to a static VLAN. Note that GVRP, if configured, affects these options and VLAN behavior on the switch.

  • Page 247

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) General Steps for Using VLANs Plan your VLAN strategy and create a map of the logical topology that will result from configuring VLANs. Include consideration for the interaction between VLANs and other features such as Spanning Tree Protocol, load balancing, and IGMP.

  • Page 248: Menu: Configuring Vlan Parameters

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Menu: Configuring VLAN Parameters In the factory default state, support is enabled for up to eight VLANs. (You can change the switch VLAN configuration to support up to 30 VLANs.) Also, all ports on the switch belong to the default VLAN (DEFAULT_VLAN) and are in the same broadcast/multicast domain.

  • Page 249

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) To change the maximum number of VLANs, type the new number (1 - 30 allowed; default 8). To designate a different VLAN as the primary VLAN, select the Primary VLAN field and use the space bar to select from the existing options.

  • Page 250: Adding Or Editing Vlan Names

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Adding or Editing VLAN Names Use this procedure to add a new VLAN or to edit the name of an existing VLAN. From the Main Menu select: 2. Switch Configuration 8.

  • Page 251

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Example of a New VLAN and ID Figure 11-9. Example of VLAN Names Screen with a New VLAN Added Repeat steps 2 through 5 to add more VLANs. Remember that you can add VLANs until you reach the number specified in the Maximum VLANs to support field on the VLAN Support screen (see figure 11-6 on page 11-10).

  • Page 252

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Default: In this example, the “VLAN-22” has been defined, but no ports have yet been assigned to it. (“No” means the port is not assigned to that VLAN.) Using GVRP? If you plan on using GVRP, any ports you don’t want to join should be changed...

  • Page 253: Cli: Configuring Vlan Parameters

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Ports A4 and A5 are assigned to both VLANs. Ports A6 and A7 are assigned only to VLAN-22. All other ports are assigned only to the Default VLAN. Figure 11-11. Example of VLAN Assignments for Specific Ports For information on VLAN tags (“Untagged”...

  • Page 254

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN Commands Used in this Section show vlans below show vlan <vlan-id> page 11-17 max-vlans <1..30> page 11-18 primary-vlan <vlan-id> page 11-18 [no] vlan <vlan-id> page 11-19 name <vlan-name> page 11-20 [no] tagged <port-list>...

  • Page 255

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Displaying the Configuration for a Particular VLAN . This command uses the VID to identify and display the data for a specific static or dynamic VLAN. show vlan <vlan-id> Syntax: Figure 11-13.

  • Page 256

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Changing the Number of VLANs Allowed on the Switch. By default, the switch allows a maximum of 8 VLANs. You can specify any value from 1 to 30. (If GVRP is enabled, this setting includes any dynamic VLANs on the switch.) As part of implementing a new value, you must execute a write memory command (to save the new value to the startup-config file) and then reboot the switch.

  • Page 257

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Creating a New Static VLAN Changing the VLAN Context Level. With this command, entering a new VID creates a new static VLAN. Entering the VID or name of an existing static VLAN places you in the context level for that VLAN.

  • Page 258

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Converting a Dynamic VLAN to a Static VLAN. If GVRP is running on the switch and a port dynamically joins a VLAN, you can use the next command to convert the dynamic VLAN to a static VLAN. (For GVRP and dynamic VLAN operation, see “GVRP”...

  • Page 259: Web: Viewing And Configuring Vlan Parameters

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) For example, if you have a VLAN named VLAN100 with a VID of 100, and all ports are set to No for this VLAN. To change the VLAN name to “Blue_Team” and set ports 1-5 to Tagged, you could do so with these commands: To move to the vlan 100 context level and execute the same commands: Similarly, to change the tagged ports in the above examples to No (or Auto, if...

  • Page 260: Vlan Tagging Information

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN Tagging Information VLAN tagging enables traffic from more than one VLAN to use the same port. (Even when two or more VLANs use the same port they remain as separate domains and cannot receive traffic from each other without going through an external router.) As mentioned earlier, a “tag”...

  • Page 261

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) In switch X: • VLANs assigned to ports X1 - X6 can all be untagged because there is only one VLAN assignment per port. Red VLAN traffic will go out only the Red ports;...

  • Page 262

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) VLAN tagging gives you several options: Since the purpose of VLAN tagging is to allow multiple VLANs on the same port, any port that has only one VLAN assigned to it can be configured as “Untagged”...

  • Page 263

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) The VLANs assigned to ports X3, X4, Y2, Y3, and Y4 can all be untagged because there is only one VLAN assigned per port. Port X1 has multiple VLANs assigned, which means that one VLAN assigned to this port can be untagged and any others must be tagged.

  • Page 264: The Secure Management Vlan

    Configures a secure Management VLAN by creating an isolated network for managing the HP Procurve switches that support this feature. This includes the HP Procurve Switches 2650 and 6108, Series 4100GL switches, and Series 5300XL switches. Access to this VLAN, and to the switch’s management functions (Menu, CLI, and web browser interface) is available only through ports configured as members.

  • Page 265

    Determine a VID and VLAN name suitable for your Management VLAN. Determine the IP addressing for the Management VLAN (DHCP/Bootp or Manual. Plan your Management VLAN topology to use HP Procurve switches that support this feature. This includes the HP Procurve Series 5300XL, Series 4100GL, Switches 2650 and 6108.

  • Page 266

    • Ports on one switch that you will use to extend the Management VLAN to ports on other HP Procurve switches (such as ports A1 and B2 or B4 and C2 in figure 11-21 on page 11-27.). Hubs dedicated to connecting management stations to the Management VLAN can also be included in the above topology.

  • Page 267

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) Deleting the Management VLAN. You can disable the Secure Manage- ment feature without deleting the VLAN itself. For example, either of the following commands disables the Secure Management feature in the above example: Operating Notes for Management VLANs Only one Management-VLAN can be active in the switch.

  • Page 268: Effect Of Vlans On Other Switch Features

    Operation with 802.1Q VLANs” on page 13-4. Note that Spanning Tree operates differently in different devices. For example, in the (obsolete, non-802.1Q) HP Switch 2000 and the HP Switch 800T, Span- ning Tree operates on a per-VLAN basis, allowing redundant physical links as long as they are in separate VLANs.

  • Page 269: Vlan Restrictions

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) IP interface for that VLAN is also activated. Likewise, when a VLAN is deactivated because all of its ports are down, the corresponding IP interface is also deactivated. VLAN MAC Addresses The switch has one unique MAC address for each of its VLAN interfaces.

  • Page 270

    Port-Based Virtual LANs (VLANs) and GVRP Port-Based Virtual LANs (Static VLANs) HP Router Requirements. Use the Hewlett-Packard version A.09.70 (or later) router OS release if any of the following Hewlett-Packard routers are installed in networks in which you will be using VLANs:...

  • Page 271: Gvrp

    Port-Based Virtual LANs (VLANs) and GVRP GVRP GVRP Feature Default Menu view GVRP configuration page 11-42 page 11-43 page 11-46 list static and dynamic VLANs — page 11-45 page 11-46 on a GVRP-enabled switch enable or disable GVRP disabled page 11-42 page 11-44 page 11-46 enable or disable GVRP on...

  • Page 272: General Operation

    Port-Based Virtual LANs (VLANs) and GVRP GVRP General Operation When GVRP is enabled on a switch, the VID for any static VLANs configured on the switch is advertised (using BPDUs—Bridge Protocol Data Units) out all ports, regardless of whether a port is up or assigned to any particular VLAN. A GVRP-aware port on another device that receives the advertisements over a link can dynamically join the advertised VLAN.

  • Page 273

    Port-Based Virtual LANs (VLANs) and GVRP GVRP For example, in the following figure, Tagged VLAN ports on switch “A” and switch “C” advertise VLANs 22 and 33 to ports on other GVRP-enabled switches that can dynamically join the VLANs. Switch “C” Switch “A”...

  • Page 274: Per-port Options For Handling Gvrp "unknown Vlans", Per-port Options For Handling Gvrp "unknown Vlans

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Note also that a port belonging to a Tagged or Untagged static VLAN has these configurable options: Send VLAN advertisements, and also receive advertisements for VLANs on other ports and dynamically join those VLANs. Send VLAN advertisements, but ignore advertisements received from other ports.

  • Page 275

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Table 11-3. Options for Handling “Unknown VLAN” Advertisements: Unknown VLAN Operation Mode Learn Enables the port to become a member of any unknown VLAN for which it (the Default) receives an advertisement. Allows the port to advertise other VLANs that have at least one other port on the same switch as a member.

  • Page 276: Per-port Options For Dynamic Vlan Advertising And Joining

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Per-Port Options for Dynamic VLAN Advertising and Joining Initiating Advertisements. As described in the preceding section, to enable dynamic joins, GVRP must be enabled and a port must be configured to Learn (the default). However, to send advertisements in your network, one or more static (Tagged, Untagged, or Auto) VLANs must be configured on one or more switches (with GVRP enabled), depending on your topology.

  • Page 277

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Table 11-4. Controlling VLAN Behavior on Ports with Static VLANs Per-Port Static VLAN Options—Per VLAN Specified on Each Port “Unknown VLAN” Port Activity: Port Activity: Port Activity: Forbid (Per VLAN) (GVRP) Auto (Per VLAN) Tagged or Untagged (Per VLAN) Configuration Learn...

  • Page 278: Gvrp And Vlan Access Control

    Because dynamic VLANs operate as Tagged VLANs, and because a tagged port on one device cannot communicate with an untagged port on another device, HP recommends that you use Tagged VLANs for the static VLANs you will use to generate advertisements.

  • Page 279: Planning For Gvrp Operation, Configuring Gvrp On A Switch

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Planning for GVRP Operation These steps outline the procedure for setting up dynamic VLANs for a seg- ment. Determine the VLAN topology you want for each segment (broadcast domain) on your network. Determine the VLANs that must be static and the VLANs that can be dynamically propagated.

  • Page 280

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Menu: Viewing and Configuring GVRP From the Main Menu, select: 2. Switch Configuration . . . 8. VLAN Menu . . . 1. VLAN Support Figure 11-27. The VLAN Support Screen (Default Configuration) Do the following to enable GVRP and display the Unknown VLAN fields: (for Edit).

  • Page 281

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Use the arrow keys to select the port you want, and the Space bar to select Unknown VLAN option for any ports you want to change. When you finish making configuration changes, press , then (for Save) to save your changes to the Startup-Config file.

  • Page 282

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Enabling and Disabling GVRP on the Switch. This command enables GVRP on the switch. Syntax: gvrp This example enables GVRP: This example disables GVRP operation on the switch: Enabling and Disabling GVRP On Individual Ports. When GVRP is enabled on the switch, use the unknown-vlans command to change the Unknown VLAN field for one or more ports.

  • Page 283

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Displaying the Static and Dynamic VLANs Active on the Switch. The show vlans command lists all VLANs present in the switch. Syntax: show vlans For example, in the following illustration, switch “B” has one static VLAN (the default VLAN), with GVRP enabled and port 1 configured to Learn for Unknown VLANs.

  • Page 284: Gvrp Operating Notes

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Converting a Dynamic VLAN to a Static VLAN. If a port on the switch has joined a dynamic VLAN, you can use the following command to convert that dynamic VLAN to a static VLAN: static <dynamic-vlan-id>...

  • Page 285

    Port-Based Virtual LANs (VLANs) and GVRP GVRP Converting a dynamic VLAN to a static VLAN and then executing the write memory command saves the VLAN in the startup-config file and makes it a permanent part of the switch’s VLAN configuration. Within the same broadcast domain, a dynamic VLAN can pass through a device that is not GVRP-aware.

  • Page 287

    Multimedia Traffic Control with IP Multicast (IGMP) Contents Overview ........... . 12-2 General Operation and Features .

  • Page 288

    For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 12-2...

  • Page 289: General Operation And Features

    Multimedia Traffic Control with IP Multicast (IGMP) General Operation and Features General Operation and Features IGMP Features Feature Default Menu view igmp configuration — page 12-6 — show igmp status for multicast — — groups used by the selected VLAN enabling or disabling IGMP disabled —...

  • Page 290: Igmp Terms

    Querier. When enabled (the default state), the switch’s querier function eliminates the need for a multicast router. In most cases, HP recommends that you leave this parameter in the default “enabled”...

  • Page 291: Igmp Operating Features

    Multimedia Traffic Control with IP Multicast (IGMP) General Operation and Features IGMP Operating Features Basic Operation In the factory default configuration, IGMP is disabled. If multiple VLANs are not configured, you must configure IGMP on the default VLAN (DEFAULT_VLAN; VID = 1). If multiple VLANs are configured, you must configure IGMP on a per-VLAN basis for every VLAN where this feature is desired.

  • Page 292: Cli: Configuring And Displaying Igmp

    Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Querier Capability: The switch performs this function for IGMP on VLANs having an IP address when there is no other device in the VLAN acting as querier. See “Querier Operation” on page 12-18. N o t e s Whenever IGMP is enabled, the switch generates an Event Log message indicating whether querier functionality is enabled.

  • Page 293

    Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Viewing the Current IGMP Configuration. This command lists the IGMP configuration for all VLANs configured on the switch or for a specific VLAN. Syntax: show ip igmp config IGMP configuration for all VLANs on the switch show ip igmp vlan <vid>...

  • Page 294

    Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP IGMP Configuration for the Selected VLAN IGMP Configuration On the Individual Ports in the VLAN Figure 12-2. Example Listing of IGMP Configuration for A Specific VLAN Enabling or Disabling IGMP on a VLAN. You can enable IGMP on a VLAN, along with the last-saved or default IGMP configuration (whichever was most recently set), or you can disable IGMP on a selected VLAN.

  • Page 295

    Multimedia Traffic Control with IP Multicast (IGMP) CLI: Configuring and Displaying IGMP Configuring Per-Port IGMP Packet Control. Use this command in the VLAN context to specify how each port should handle IGMP traffic. Syntax: vlan <vid> ip igmp [auto <port-list> | blocked <port-list> | forward <port-list>] Default: auto For example, suppose you wanted to configure IGMP as follows for VLAN 1...

  • Page 296: Web: Enabling Or Disabling Igmp

    Multimedia Traffic Control with IP Multicast (IGMP) Web: Enabling or Disabling IGMP Returns IGMP traffic to “normal” priority. Show command to display results of above high-priority commands. Configuring the Querier Function. The default querier capability is “enabled”. This command disables or re-enables the ability for the switch to become querier if necessary.

  • Page 297: How Igmp Operates

    Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates How IGMP Operates The Internet Group Management Protocol (IGMP) is an internal protocol of the Internet Protocol (IP) suite. IP manages multicast traffic by using switches, multicast routers, and hosts that support IGMP. (In Hewlett-Pack- ard’s implementation of IGMP, a multicast router is not necessary as long as a switch is configured to support IGMP with the querier...

  • Page 298: Operation With Or Without Ip Addressing

    IGMP client on a port in the VLAN leaves the cast router or another switch configured for IGMP oper- group. ation. (HP recommends that the VLAN also include a device operating as a backup Querier in case the device Support Fast-Leave IGMP (below) and Forced operating as the primary Querier fails for any reason.

  • Page 299: Automatic Fast-leave Igmp

    Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates Automatic Fast-Leave IGMP IGMP Operation Presents a “Delayed Leave” Problem. Where multiple IGMP clients are connected to the same port on an IGMP device (switch or router), if only one IGMP client joins a given multicast group, then later sends a Leave Group message and ceases to belong to that group, the IGMP device retains that IGMP client in its IGMP table and continues forwarding IGMP traffic to the IGMP client until the Querier triggers confirmation that no other...

  • Page 300: Forced Fast-leave Igmp

    Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates In the next figure, automatic Fast-Leave operates on the switch ports for IGMP clients “3A” and “5B”, but not on the switch port for IGMP clients “7A” and 7B, Server “7C”, and printer “7D”. Fast-Leave IGMP Server automatically operates on...

  • Page 301

    Forced Fast-Leave operates only if the switch detects multiple end nodes (and at least one IGMP client) on that port. N o t e o n V L A N In the HP Procurve Switches 2650 and 6108, the walkmib setmib commands...

  • Page 302

    Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates Enter either of the following walkmib command options: - OR - The resulting display lists the Forced Fast-Leave state for all ports in the switch, by VLAN. (A port belonging to more than one VLAN will be listed once for each VLAN, and if multiple VLANs are not configured, all ports will be listed as members of the default VLAN.) The following command produces a listing such as that shown in figure 12-4:...

  • Page 303: Configuring Per-port Forced Fast-leave Igmp

    Multimedia Traffic Control with IP Multicast (IGMP) How IGMP Operates shows that Fast Forced-Leave is disabled on port 7. 6 specifies port A6. indicates the default VLAN. (See the “Note on VLAN Numbers” on page 12-15.) Figure 15-5. Example Listing the Forced Fast-Leave State for a Single Port on the Default VLAN Configuring Per-Port Forced Fast-Leave IGMP In the factory-default configuration, Forced Fast-Leave is disabled for all ports...

  • Page 304: Using The Switch As Querier, Querier Operation

    Multimedia Traffic Control with IP Multicast (IGMP) Using the Switch as Querier Verifies Forced Fast-Leave enabled. indicates port C1. indicates the default VLAN. (See the note on page 12-15.) Figure 15-6. Example of Changing the Forced Fast-Leave Configuration on Port 49 Using the Switch as Querier Querier Operation The function of the IGMP Querier is to poll other IGMP-enabled devices in an...

  • Page 305: Multicast Filtering

    Multimedia Traffic Control with IP Multicast (IGMP) Excluding Well-Known or Reserved Multicast Addresses from IP Multicast Filtering In the above scenario, if the other device ceases to operate as a Querier on the default VLAN, then the switch detects this change and can become the Querier as long as it is not preempted by some other IGMP Querier on the VLAN.

  • Page 306

    N o t e s : IP Multicast Filters. This operation applies to the HP Procurve Switch 1600M, 2400M, 2424M, 4000M, and 8000M, but not to the HP Procurve switches that do not have static traffic/security filters. These include the Switches 2650 and 6108, Switches 2650 and 6108 , and Series 2500 switches.

  • Page 307

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Contents Overview ........... . 13-2 How Spanning Tree Operates .

  • Page 308

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Overview Overview STP Features 802.1d Spanning Tree Default Menu Protocol viewing the STP page 13-19 page 13-10 — configuration enable/disable STP disabled page 13-19 page 13-23 page 13-41 reconfiguring general priority: 32768 page 13-19 page 13-24...

  • Page 309

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Overview Use spanning tree to ensure that only one active path at a time exists between any two nodes on the network. In networks where there is more than one physical, active path between any two nodes, enabling spanning tree ensures a single active path between such nodes by blocking all redundant paths.

  • Page 310: How Spanning Tree Operates

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) How Spanning Tree Operates How Spanning Tree Operates The switch automatically senses port identity and type, and automatically defines spanning-tree parameters for each type, as well as parameters that apply across the switch.

  • Page 311: Spanning Tree Options: Rstp (802.1w) And Stp (802.1d)

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) How Spanning Tree Operates ates untagged BPDUs). This means that if redundant physical links exist in separate VLANs, spanning tree will block all but one of those links. However, if you need to use spanning tree on the Switches 2650 and 6108 in a VLAN environment with redundant physical links, you can prevent blocked redun- dant links by using a port trunk.

  • Page 312

    RSTP is designed to be compatible with IEEE 802.1d STP, and HP recommends that you employ it in your network. For more information, refer to “Transi- tioning from STP to RSTP”...

  • Page 313: Configuring Rapid Reconfiguration Spanning Tree (rstp), Overview, Configuring Rapid Reconfiguration Spanning Tree (rstp)

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) This section describes the operation of the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) Overview RSTP Feature Default Menu Viewing the RSTP/STP configuration...

  • Page 314: Transitioning From Stp To Rstp

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Transitioning from STP to RSTP IEEE 802.1w RSTP is designed to be compatible with IEEE 802.1d STP. Even if all the other devices in your network are using STP, you can enable RSTP on your switch, and even using the default configuration values, your switch will interoperate effectively with the STP devices.

  • Page 315: Configuring Rstp

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Configuring RSTP The default switch configuration has spanning tree disabled with RSTP as the selected protocol. That is, when spanning tree is enabled, RSTP is the version of spanning tree that is enabled, by default.

  • Page 316

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) CLI: Configuring RSTP Spanning Tree Commands in This Section Applicable Location Protocol Version show spanning-tree config both Below on this page spanning-tree both page 13-11 protocol-version <rstp | stp>...

  • Page 317

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Figure 13-3. Example of the Spanning Tree Configuration Display Enabling or Disabling RSTP. Issuing the command to enable spanning tree on the switch implements, by default, the RSTP version of spanning tree for all physical ports on the switch.

  • Page 318

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) For the STP version of spanning tree, the rest of the information in this section does not apply. Refer to “802.1p Spanning-Tree Protocol (STP)” on page 13-19 for more information on the STP version and its parameters.

  • Page 319

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) N o t e Executing the spanning-tree command alone enables spanning tree. Executing the command with one or more of the whole-switch RSTP parameters shown in the table on the previous page, or with any of the per-port RSTP parameters shown in the table on page 14, does not enable spanning tree.

  • Page 320

    Forwarding state. In this way, the ports operate very similarly to ports that are configured in “fast mode” under the STP implementation in previous HP switch software. Disable this feature on all switch ports that are connected to another switch, or bridge, or hub.

  • Page 321

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Syntax: Abbreviations: spanning-tree [ethernet] <port-list> span <port-list> path-cost <1 - 200000000> path <1 - 200000000> point-to-point-mac <force-true | force-false | auto> forc <force-t | force-f | auto> priority <0 - 15>...

  • Page 322

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Menu: Configuring RSTP From the console CLI prompt, enter the menu command. HP Procurve Switch # menu From the switch console Main Menu, select 2. Switch Configuration ... 4. Spanning Tree Operation (for Edit) to highlight the Protocol Version parameter field.

  • Page 323

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Figure 13-4. Example of the RSTP Configuration Screen Press the key or use the arrow keys to go to the next parameter you want to change, then type in the new value or press the Space bar to select to select the Actions –>...

  • Page 324

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Configuring Rapid Reconfiguration Spanning Tree (RSTP) Web: Enabling or Disabling RSTP In the web browser interface, you can enable or disable spanning tree on the switch. If the default configuration is in effect such that RSTP is the selected protocol version, enabling spanning tree through the web browser interface will enable RSTP with its current configuration.

  • Page 325: P Spanning-tree Protocol (stp), Menu: Configuring 802.1d Stp, P Spanning-tree Protocol (stp)

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Menu: Configuring 802.1D STP From the Main Menu, select: 2. Switch Configuration . . . 4. Spanning Tree Operation Use this field to select the 802.1d version of STP. Figure 13-5.

  • Page 326

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Use this field to enable spanning tree. Read-Only Fields Figure 13-6. Enabling Spanning-Tree Operation If the remaining STP parameter settings are adequate for your network, go to step 10.

  • Page 327

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Figure 13-7. The Configuration Menu Indicating a Reboot Is Needed to Implement a Configuration Change 11. Press to return to the Main menu. Figure 13-8. The Main Menu Indicating a Reboot Is Needed To Implement a Configuration Change 12.

  • Page 328: Cli: Configuring 802.1d Stp

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) CLI: Configuring 802.1D STP STP Commands Used in This Section show spanning-tree config Below spanning-tree protocol-version page 13-23 forward-delay <4 - 30> page 13-24 hello-time <1 - 10>...

  • Page 329

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Configuring the Switch To Use the 802.1d Spanning Tree Protocol (STP). In the default configuration, the switch is set to RSTP (that is, 802.1w Rapid Spanning Tree), and spanning tree operation is disabled.

  • Page 330

    C a u t i o n Because incorrect STP settings can adversely affect network performance, HP recommends that you use the default STP parameter settings. You should not change these settings unless you have a strong understanding of how STP operates.

  • Page 331

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) N o t e Executing spanning-tree alone enables STP. Executing spanning-tree with one or more of the above “STP Operating Parameters” does not enable STP. It only configures the STP parameters (regardless of whether STP is actually running (enabled) on the switch).

  • Page 332: Stp Fast Mode

    (Forwarding or Blocking, as determined by the STP negotiation). This sequence takes two times the forward delay value configured for the switch. The default is 15 seconds on HP switches, per the IEEE 802.1D standard recommendation, resulting in a total STP negotiation time of 30 seconds. Each switch port goes through this start-up sequence whenever the network con- nection is established on the port.

  • Page 333: Fast-uplink Spanning Tree Protocol (stp), Fast-uplink Spanning Tree Protocol (stp), Fast-uplink Spanning Tree Protocol (stp)

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) C a u t i o n The Fast Mode configuration should be used only on switch ports connected to end nodes. Changing the Mode to Fast on ports connected to hubs, switches, or routers may cause loops in your network that STP may not be able to immediately detect, in all cases.

  • Page 334

    Switch 2650 or 6108 uplink ports, the device(s) on the other end of the links can be either HP devices or another vendor’s devices, regardless of whether they support fast uplink. For example: Port A is the STP root port.

  • Page 335

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Terminology Term Definition downlink port A switch port that is linked to a port on another switch (or to an end node) that is sequentially further away from the STP root device.

  • Page 336: Operating Rules For Fast Uplink

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In figure 13-12, STP is enabled and in its default configuration on all switches, unless otherwise indicated in table 13-5, below: Table 13-5.STP Parameter Settings for Figure 13-12 STP Parameter Switch “1”...

  • Page 337

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Edge switches cannot be directly linked together using fast-uplink ports. For example, the connection between switches 4 and 5 in figure 13-13 is not allowed for fast-uplink operation. Switch The ports that make up...

  • Page 338

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) To View and/or Configure Fast-Uplink STP. This procedure uses the Spanning Tree Operation screen to enable STP and to set the Mode for fast- uplink STP operation.

  • Page 339

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) If the Protocol Version is set to RSTP (as shown in figure 13-14), do the following: ) to move the cursor to the Protocol Version field. Press Edit b.

  • Page 340

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In this example, ports 2 and 3 have already been configured as a port trunk (Trk1), which appears at the end of the port listing. All ports (and the trunk) are in their default STP configuration.

  • Page 341

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) STP is enabled. Port A1 and Trk1 are now configured for fast-uplink STP. Figure 13-17. Example of STP Enabled with Two Redundant Links Configured for Fast-Uplink STP Press (for...

  • Page 342

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Indicates which uplink is the active path to the STP root device. Note: A switch using fast-uplink STP must never be the STP root device.

  • Page 343

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) In figure 13-19: • Port A1 and Trk1 (trunk 1; formed from ports 2 and 3) are redundant fast-uplink STP links, with trunk 1 forwarding (the active link) and port A1 blocking (the backup link).

  • Page 344

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Indicates that Trk1 (Trunk 1) provides the currently active path to the STP root device. Redundant STP link in the Blocking state. Links to PC or Workstation End Nodes Redundant STP link in the Forwarding state.

  • Page 345

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) STP Enabled on the Switch Fast-Uplink Configured on Port 1 and Trunk 1 (Trk1) Figure 13-22. Example of a Configuration Supporting the STP Topology Shown in Figure 13-20 Using the CLI To Configure Fast-Uplink STP.

  • Page 346

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) 802.1p Spanning-Tree Protocol (STP) Lists STP configuration. Shows the default STP protocol 1. Changes the Spanning-Tree protocol to STP (required for Fast-Uplink). 2. Saves the change to the startup-configuration 3.

  • Page 347: Web: Enabling Or Disabling Stp

    802.1w Rapid Spanning Tree Protocol (RSTP) and 802.1d Spanning Tree Protocol (STP) Web: Enabling or Disabling STP N o t e When you add a port to a trunk, the port takes on the STP mode configured for the trunk, regardless of which STP mode was configured on the port before it was added to the trunk.

  • Page 349

    Which Devices Support Stacking? ......14-4 Components of HP Procurve Stack Management ....14-5 General Stacking Operation .

  • Page 350

    For general information on how to use the switch’s built-in interfaces, see: Chapter 2, “Using the Menu Interface” Chapter 3, “Using the Command Line Interface (CLI)” Chapter 4, “Using the HP Web Browser Interface Chapter 5, “Switch Memory and Configuration” 14-2...

  • Page 351: Operation

    60 seconds page 14-13 page 14-44 HP Procurve Stack Management (termed stacking) enables you to use a single IP address and standard network cabling to manage a group of up to 16 total switches in the same IP subnet (broadcast domain). Using stacking, you can: Reduce the number of IP addresses needed in your network.

  • Page 352: Which Devices Support Stacking?, Which Devices Support Stacking

    *Requires software release C.08.03 or later, which is included with the 8000M, 4000M, 2424M, and 1600M models as of July, 2000. Release C.08.03 or a later version is also available on the HP Procurve website at www.hp.com/go/ procurve. (Click on...

  • Page 353: Components Of Hp Procurve Stack Management, General Stacking Operation

    HP Procurve Stack Management Operation Components of HP Procurve Stack Management Table 14-1. Stacking Definitions Stack Consists of a Commander switch and any Member switches belonging to that Commander’s stack. Commander A switch that has been manually configured as the controlling device for a stack. When this occurs, the switch’s stacking configuration appears as Commander.

  • Page 354: Operating Rules For Stacking

    HP Procurve Stack Management Operation Use the Commander’s console or web Wiring Closet "A" browser interface to access the user Member Switch 1 Candidate Switch interface on any Member switch in IP Address: None Assigned IP Address: None Assigned the same stack.

  • Page 355

    HP Procurve Stack Management Operation If multiple VLANs are configured, stacking uses only the primary VLAN on any switch. In the factory-default configuration, the DEFAULT_VLAN is the primary VLAN. (See “Stacking Operation with Multiple VLANs Configured” on page 14-44 and “The Primary VLAN”...

  • Page 356: Specific Rules

    HP Procurve Stack Management Operation Specific Rules Table 14-2. Specific Rules for Commander, Candidate, and Member Switches IP Addressing and Number Allowed Passwords SNMP Communities Stack Name Per Stack Commander IP Addr: Requires an Only one The Commander’s Manager Standard SNMP community...

  • Page 357: Configuring Stack Management, Overview Of Configuring And Bringing Up A Stack

    Candidates from automatically joining a stack prematurely or joining the wrong stack (if more than one stack Commander is configured in a subnet or broadcast domain). If you plan to install more than one stack in a subnet, HP recommends that you leave...

  • Page 358

    HP Procurve Stack Management Configuring Stack Management Options for Configuring a Commander and Candidates. Depending on how Commander and Candidate switches are configured, Candidates can join a stack either automatically or by a Commander manually adding (“pulling”) them into the stack. In the default configuration, a Candidate joins only when manually pulled by a Commander.

  • Page 359

    HP Procurve Stack Management Configuring Stack Management Default stacking configuration ( set to , and Stack State Candidate Auto Join set to Same subnet (broadcast domain) and default VLAN as the Commander (If VLANs are used in the stack environment, see “Stacking Operation with a Tagged VLAN”...

  • Page 360

    HP Procurve Stack Management Configuring Stack Management Configure the Commander switch. Doing this first helps to establish consistency in your stack configuration, which can help prevent startup problems. • A stack requires one Commander switch. If you plan to implement...

  • Page 361: Menu: View Stack Status And Configure Stacking

    HP Procurve Stack Management Configuring Stack Management Menu: View Stack Status and Configure Stacking Using the Menu Interface To View and Configure a Commander Switch Configure an IP address and subnet mask on the Commander switch. (See Chapter 7, “Configuring IP Addressing”.) Display the Stacking Menu by selecting in the Main Menu.

  • Page 362

    HP Procurve Stack Management Configuring Stack Management Move the cursor to the Stack State field by pressing (for ). Then Edit use the Space bar to select the option. Commander Press the down arrow key to display the Commander configuration fields in the Stack Configuration screen.

  • Page 363

    HP Procurve Stack Management Configuring Stack Management Using the Menu To Manage a Candidate Switch Using the menu interface, you can perform these actions on a Candidate switch: Add (“push”) the Candidate into an existing stack Modify the Candidate’s stacking configuration (...

  • Page 364

    1 to 300 seconds. Note: All switches in the stack must be set to the same transmis- sion interval to help ensure proper stacking operation. HP recom- mends that you leave this parameter set to the default 60 seconds.

  • Page 365: Using The Commander To Manage The Stack

    HP Procurve Stack Management Configuring Stack Management Press (for ) to save your configuration changes and return to the Save Stacking menu. Using the Commander To Manage The Stack The Commander normally operates as your stack manager and point of entry into other switches in the stack.

  • Page 366

    HP Procurve Stack Management Configuring Stack Management For status descriptions, see the table on page 14-46. Figure 14-9. Example of the Stack Management Screen Press (for ) to add a Candidate. You will then see this screen listing the available Candidates: The Commander automatically selects an available switch number (SN).

  • Page 367

    HP Procurve Stack Management Configuring Stack Management • If the desired Candidate has a Manager password, press the down arrow key to move the cursor to the Candidate Password field, then type the password. • If the desired Candidate does not have a password, go to step 6.

  • Page 368

    HP Procurve Stack Management Configuring Stack Management 2. Stacking Status (All) You will then see the Stacking Status (All) screen: For status descriptions, see the table on page 14-46. This column lists the MAC Addresses for switches Using the MAC addresses for these...

  • Page 369

    HP Procurve Stack Management Configuring Stack Management Do one of the following: • If the stack containing the Member you are moving has a Manager password, press the down arrow key to select the Candidate Password field, then type the password.

  • Page 370

    HP Procurve Stack Management Configuring Stack Management To remove a Member from a stack, use the Stack Management screen. From the Main Menu, select: 9. Stacking... 4. Stack Management You will then see the Stack Management screen: For status descriptions, see the table on page 14-46.

  • Page 371

    HP Procurve Stack Management Configuring Stack Management To continue deleting the selected Member, press the Space bar once to select for the prompt, then press to complete the deletion. The Stack Management screen updates to show the new stack Member list.

  • Page 372

    HP Procurve Stack Management Configuring Stack Management Main Menu for stack Member named “Coral Sea” (SN = 1 from figure 14-16) Figure 14-17. The eXecute Command Displays the Console Main Menu for the Selected Stack Member You can now make configuration changes and/or view status data for the selected Member in the same way that you would if you were directly connected or telnetted into the switch.

  • Page 373: Monitoring Stack Status

    HP Procurve Stack Management Configuring Stack Management (for Back) to return to the Stacking Menu. Press To display Stack Configuration menu for the switch you are moving, select 3. Stack Configuration Press (for Edit) to select the Stack State parameter.

  • Page 374

    HP Procurve Stack Management Configuring Stack Management Using Any Stacked Switch To View the Status for All Switches with Stacking Enabled. This procedure displays the general status of all switches in the IP subnet (broadcast domain) that have stacking enabled.

  • Page 375

    HP Procurve Stack Management Configuring Stack Management You will then see the Commander’s Stacking Status screen: Figure 14-19. Example of the Commander’s Stacking Status Screen Viewing Member Status. This procedure displays the Member’s stacking information plus the Commander’s status, IP address, and MAC address.

  • Page 376

    HP Procurve Stack Management Configuring Stack Management Figure 14-20. Example of a Member’s Stacking Status Screen Viewing Candidate Status. This procedure displays the Candidate’s stacking configuration. To display the status for a Candidate: Use Telnet (if the Candidate has a valid IP address for your network) or...

  • Page 377: Cli: View Stack Status And Configure Stacking

    HP Procurve Stack Management Configuring Stack Management CLI: View Stack Status and Configure Stacking The CLI enables you to do all of the stacking tasks available through the menu interface.) Table 14-6. CLI Commands for Configuring Stacking on a Switch...

  • Page 378

    HP Procurve Stack Management Configuring Stack Management CLI Command Operation [no] stack member Commander: Adds a Candidate to stack membership. “No” form removes a Member from stack membership. To easily determine the MAC address of a <switch-num> Candidate, use the show stack candidates command. To determine the MAC mac-address <mac-addr>...

  • Page 379

    HP Procurve Stack Management Configuring Stack Management Using the CLI To View Stack Status You can list the stack status for an individual switch and for other switches that have been discovered in the same subnet. Syntax: show stack [candidates | view | all] Viewing the Status of an Individual Switch.

  • Page 380

    HP Procurve Stack Management Configuring Stack Management Viewing the Status of all Stack-Enabled Switches Discovered in the IP Subnet. The next example lists all the stack-configured switches discovered in the IP subnet. Because the Switch 2650 or Switch 6108 on which the show stack all command was executed is a candidate, it is included in the “Others”...

  • Page 381

    HP Procurve Stack Management Configuring Stack Management Using the CLI To Configure a Commander Switch You can configure any stacking-enabled switch to be a Commander as long as the intended stack name does not already exist on the broadcast domain.

  • Page 382

    Syntax: no stack stack commander <stack name> Suppose, for example, that an HP switch named “Bering Sea” is a Member of a stack named “Big_Waters”. To use the switch’s CLI to convert it from a stack Member to the Commander of a new stack named “Lakes”, you would use the...

  • Page 383: Adding To A Stack Or Moving Switches Between Stacks

    HP Procurve Stack Management Configuring Stack Management The output from this command tells you the MAC address of the current stack Commander. Removes the Member from the “Big_Waters” stack. Converts the former Member to the Com- mander of the new “Lakes”...

  • Page 384

    HP Procurve Stack Management Configuring Stack Management Using the Commander’s CLI To Manually Add a Candidate to the Stack. To manually add a candidate, you will use: A switch number (SN) to assign to the new member. Member SNs range from 1 to 15.

  • Page 385

    HP Procurve Stack Management Configuring Stack Management For example, if the HP 8000M in the above listing did not have a Manager password and you wanted to make it a stack Member with an , you would execute the following command:...

  • Page 386

    HP Procurve Stack Management Configuring Stack Management The Candidate’s Auto Join is set to Yes (and you do not want to enable Auto Grab on the Commander) or the Candidate’s Auto Join is set to No. Either you know the MAC address of the Commander for the stack into which you want to insert the Candidate, or the Candidate has a valid IP address and is operating in your network.

  • Page 387

    HP Procurve Stack Management Configuring Stack Management Syntax: stack member <switch-number> mac-address <mac-addr> [password <password-str>] In the destination Commander, use show stack all to find the MAC address of the Member you want to pull into the destination stack. For example, suppose you created a new Commander with a stack name of “Cold_Waters”...

  • Page 388: Using The Cli To Remove A Member From A Stack

    HP Procurve Stack Management Configuring Stack Management Syntax: no stack name <stack name> stack join <mac-address> If you don’t know the MAC address of the destination Commander, you can to identify it. show stack all For example, suppose you have a Switch 2650 or Switch 6108 operating as the Commander for a temporary stack named “Test”.

  • Page 389

    HP Procurve Stack Management Configuring Stack Management Syntax: [no] stack member <switch-num> mac-address <mac-addr> Use show stack view to list the stack Members. For example, suppose that you wanted to use the Commander to remove the “North Sea” Member from the...

  • Page 390

    HP Procurve Stack Management Configuring Stack Management You would then execute this command in the “North Sea” switch’s CLI to remove the switch from the stack: Using the CLI To Access Member Switches for Configuration Changes and Traffic Monitoring After a Candidate becomes a Member, you can use the telnet command from the Commander to access the Member’s CLI or console interface for the same...

  • Page 391: Snmp Community Operation In A Stack

    HP Procurve Stack Management Configuring Stack Management SNMP Community Operation in a Stack Community Membership In the default stacking configuration, when a Candidate joins a stack, it automatically becomes a Member of any SNMP community to which the Commander belongs, even though any community names configured in the Commander are not propagated to the Member’s SNMP Communities listing.

  • Page 392: Cli: Disable Or Re-enable Stacking, Transmission Interval, Stacking Operation With Multiple Vlans Configured

    <MIB variable> CLI: Disable or Re-Enable Stacking In the default configuration, stacking is enabled on the HP Procurve Switches 2650 and 6108. You can use the CLI to disable stacking on these switches at any time. Disabling stacking has the following effects:...

  • Page 393: Web: Viewing And Configuring Stacking

    HP Procurve Stack Management Configuring Stack Management Stacking uses only the primary VLAN on each switch in a stack. The primary VLAN can be tagged or untagged as needed in the stacking path from switch to switch. The same VLAN ID (VID) must be assigned to the primary VLAN in each stacked switch.

  • Page 394: Status Messages

    HP Procurve Stack Management Configuring Stack Management Status Messages Stacking screens and listings display these status messages: Message Condition Action or Remedy Candidate Auto-join Indicates a switch configured with Stack State set to None required Candidate, Auto Join set to Yes (the default), and no Manager password.

  • Page 395

    IP Routing Features Contents Overview of IP Routing ........15-2 IP Interfaces .

  • Page 396: Overview Of Ip Routing, Ip Interfaces

    IP Routing Features Overview of IP Routing Overview of IP Routing The HP Procurve Switches 2650 and 6108 offer IP static routing, supporting up to 16 static routes. IP static routing is configurable through the switch’s console CLI. Throughout this chapter, the HP Procurve Switches 2650 and 6108 will be referred to as “routing switches”.

  • Page 397: Ip Tables And Caches

    IP Routing Features Overview of IP Routing N o t e All HP Procurve devices support configuration and display of IP address in classical sub-net format (example: 192.168.1.1 255.255.255.0) and Classless Interdomain Routing (CIDR) format (example: 192.168.1.1/24). You can use either format when configuring IP address information.

  • Page 398

    IP Forwarding Cache The IP forwarding cache provides a fast-path mechanism for forwarding IP packets. The cache contains entries for IP destinations. When an HP ProCurve routing switch has completed processing and addressing for a packet and is ready to forward the packet, the device checks the IP forwarding cache for an entry to the packet’s destination.

  • Page 399: Ip Global Parameters For Routing Switches

    IP Routing Features Overview of IP Routing If the cache does not contain an entry, the software can create an entry in the forwarding cache. Each entry in the IP forwarding cache has an age timer. If the entry remains unused for five minutes, the software removes the entry.

  • Page 400: Ip Interface Parameters For Routing Switches

    IP Routing Features Overview of IP Routing Parameter Description Default See page ICMP Router An IP protocol that a router can use to advertise the IP addresses of its Disabled 15-17 Discovery router interfaces to directly attached hosts. You can enable or disable the Protocol protocol at the Global CLI Config level.

  • Page 401: Configuring Ip Parameters For Routing Switches, Configuring Ip Addresses, Configuring Arp Parameters

    IP Routing Features Configuring IP Parameters for Routing Switches Configuring IP Parameters for Routing Switches The following sections describe how to configure IP parameters. Some param- eters can be configured globally while others can be configured on individual VLAN interfaces. Some parameters can be configured globally and overridden for individual VLAN interfaces.

  • Page 402

    IP Routing Features Configuring IP Parameters for Routing Switches table or forwarding cache. The routing switch needs to know the MAC address that corresponds with the IP address of either the packet’s locally attached destination or the next-hop router that leads to the destination. For example, to forward a packet whose destination is multiple router hops away, the routing switch must send the packet to the next-hop router toward its destination, or to a default route or default network route if the IP route...

  • Page 403

    (Ethernet cable), since MAC-layer broadcasts reach all the devices on the segment. Proxy ARP is disabled by default on HP routing switches. To enable Proxy ARP, enter the following commands from the VLAN context level in the CLI:...

  • Page 404: Configuring Forwarding Parameters

    HPswitch(config)# ip directed-broadcast Syntax: [no] ip directed-broadcast HP software makes the forwarding decision based on the routing switch's knowledge of the destination network prefix. Routers cannot determine that a message is unicast or directed broadcast apart from the destination network prefix.

  • Page 405: Configuring Icmp

    Reply Limit – You can enable or disable ICMP reply rate limiting. Disabling ICMP Messages HP devices are enabled to reply to ICMP echo messages and send ICMP Destination Unreachable messages by default. You can selectively disable the following types of Internet Control Message Protocol (ICMP) messages: Echo messages (ping messages) –...

  • Page 406

    Configuring IP Parameters for Routing Switches Disabling ICMP Destination Unreachable Messages By default, when an HP device receives an IP packet that the device cannot deliver, the device sends an ICMP Unreachable message back to the host that sent the packet. The following types of ICMP Unreachable messages are generated: Administration –...

  • Page 407: Configuring Static Ip Routes, Static Route Types

    Configuring Static IP Routes Disabling ICMP Redirects You can disable ICMP redirects on the HP routing switch. only on a global basis, for all the routing switch interfaces. To disable ICMP redirects globally, enter the following command at the global CONFIG level of the CLI:...

  • Page 408: Static Ip Route Parameters, Static Route States Follow Port States

    IP Routing Features Configuring Static IP Routes Static IP Route Parameters When you configure a static IP route, you must specify the following param- eters: The IP address and network mask for the route’s destination network. The route’s path, which can be one of the following: •...

  • Page 409: Configuring A Static Ip Route

    IP Routing Features Configuring Static IP Routes When you configure a static IP route, you specify the destination address for the route and the next-hop gateway or routing switch interface through which the routing switch can reach the route. The routing switch adds the route to the IP route table.

  • Page 410: Configuring A "null" Route

    IP Routing Features Configuring Static IP Routes Configuring a “Null” Route You can configure the routing switch to drop IP packets to a specific network or host address by configuring a “null” (sometimes called “null0”) static route for the address. When the routing switch receives a packet destined for the address, the routing switch drops the packet instead of forwarding it.

  • Page 411: Configuring Irdp

    Some types of hosts use the Router Solicitation messages to discover their default gateway. When IRDP is enabled on the HP routing switch, the routing switch responds to the Router Solicitation messages. Some clients interpret this response to mean that the routing switch is the default gateway. If another router is actually the default gateway for these clients, leave IRDP disabled on the HP routing switch.

  • Page 412: Enabling Irdp Globally, Enabling Irdp On An Individual Vlan Interface

    IP Routing Features Configuring IRDP messages from other routers at the same time. The interval on each IRDP- enabled routing switch interface is independent of the interval on other IRDP-enabled interfaces. The default maximum message interval is 600 seconds. The default minimum message interval is 450 seconds. Preference - If a host receives multiple Router Advertisement messages from different routers, the host selects the router that send the message with the highest preference as the default gateway.

  • Page 413: Displaying Irdp Information

    IP Routing Features Configuring IRDP for the routing switch to the hold time specified in the new advertisement. If the hold time of an advertisement expires, the host discards the adver- tisement, concluding that the router interface that sent the advertisement is no longer available.

  • Page 414: Configuring Dhcp Relay, Overview, Dhcp Packet Forwarding

    IP Routing Features Configuring DHCP Relay Configuring DHCP Relay Overview The Dynamic Host Configuration Protocol (DHCP) is used for configuring hosts with IP address and other configuration parameters without human intervention. The protocol is composed of three components: the DHCP client, the DHCP server, and the DHCP relay agent.

  • Page 415: Minimum Requirements For Dhcp Relay Operation

    IP Routing Features Configuring DHCP Relay Minimum Requirements for DHCP Relay Operation In order for the DHCP Relay agent to work, the following steps must be completed: DHCP Relay is enabled on the routing switch A DHCP server is servicing the routing switch IP Routing is enabled on the routing switch There is a route from the DHCP server to the routing switch and back An IP Helper address is configured on the routing switch, set to the IP...

  • Page 417

    Switch-to-Switch Download ....... . . A-9 Using the HP TopTools for Hubs & Switches Utility ... . A-11 Troubleshooting TFTP Downloads .

  • Page 418: Downloading Switch Software, Overview, General Switch Software Download Rules

    In the switch console interface, the switch software is referred to as the OS, for switch “operating system”. Downloading Switch Software HP periodically provides switch software updates through the HP Procurve website (http://www.hp.com/go/hpprocurve). For more information, see the support and warranty booklet shipped with the switch. After you acquire a...

  • Page 419: Using Tftp To Download Switch Software From A Server

    An switch software file for the switch has been stored on a TFTP server accessible to the switch. (The switch software file is typically available from the HP Procurve website at http://www.hp.com/go/hpprocurve.) The switch is properly connected to your network and has already been configured with a compatible IP address and subnet mask.

  • Page 420

    File Transfers Downloading Switch Software Menu: TFTP Download from a Server to Primary Flash Note that the menu interface accesses only the primary flash. In the console Main Menu, select Download OS to display this screen: Figure A-1. Example of the Download OS Screen (Default Values) (for Edit).

  • Page 421

    File Transfers Downloading Switch Software A “progress” bar indicates the progress of the download. When the entire switch software file has been received, all activity on the switch halts and you will see Validating and writing system software to FLASH... After the primary flash memory has been updated with the new switch software, you must reboot the switch to implement the newly downloaded code.

  • Page 422

    File Transfers Downloading Switch Software CLI: TFTP Download from a Server to Primary or Secondary Flash This command automatically downloads a switch software image to primary or secondary flash. Syntax: copy tftp flash <ip-address> <remote-os-file> [< primary | secondary >] Note that if you do not specify the flash destination, the Xmodem download defaults to primary flash.

  • Page 423: Unix Workstation

    File Transfers Downloading Switch Software Using Xmodem to Download Switch Software From a PC or UNIX Workstation This procedure assumes that: The switch is connected via the Console RS-232 port to a PC operating as a terminal. (Refer to the Installation and Getting Started Guide you received with the switch for information on connecting a PC as a terminal and running the switch console interface.) The switch software is stored on a disk drive in the PC.

  • Page 424

    File Transfers Downloading Switch Software Continue reboot of system? Press the space bar once to change , then press to begin the reboot. To confirm that the switch software downloaded correctly: From the Main Menu, select 1. Status and Counters 1.

  • Page 425: Switch-to-switch Download

    File Transfers Downloading Switch Software When the download finishes, you must reboot the switch to implement the newly dowloaded switch software. To do so, use one of the following commands: boot system flash <primary | secondary>Reboots from the selected flash. -or- reload Reboots from the flash image...

  • Page 426

    File Transfers Downloading Switch Software • To download the switch software from the secondary flash of the source switch, type /os/secondary. Press , then (for eXecute) to begin the switch software download. A “progress” bar indicates the progress of the download. When the entire operating system has been received, all activity on the switch halts and the following messages appear: Validating and writing system software to FLASH...

  • Page 427: Using The Hp Toptools For Hubs & Switches Utility

    Using the HP TopTools for Hubs & Switches Utility HP TopTools for Hubs & Switches includes a software update utility for updating on HP Procurve switch products such as the Switches 2650 and 6108. For further information, refer to the HP TopTools for Hubs & Switches User Guide, provided electronically with the HP TopTools software.

  • Page 428: Troubleshooting Tftp Downloads

    File Transfers Troubleshooting TFTP Downloads Troubleshooting TFTP Downloads When using the menu interface, if a TFTP download fails, the Download OS screen indicates the failure. Message Indicating cause of TFTP Download Failure Figure A-7. Example of Message for Download Failure To find more information on the cause of a download failure, examine the messages in the switch’s Event Log by executing this CLI command: (For more on the Event Log, see “Using the Event Log To Identify Problem...

  • Page 429: Transferring Switch Configurations

    File Transfers Transferring Switch Configurations For a Unix TFTP server, the file permissions for the switch software file do not allow the file to be copied. Another console session (through either a direct connection to a terminal device or through Telnet) was already running when you started the session in which the download was attempted.

  • Page 430

    File Transfers Transferring Switch Configurations TFTP: Copying a Configuration File to a Remote Host. Syntax: copy <startup-config | running-config> tftp <ip-addr> <remote-file> This command copies the switch’s startup configuration (startup-config file) to a remote TFTP host. For example, to upload the current startup configuration to a file named HPswitch in the configs directory on drive “d”...

  • Page 431

    File Transfers Transferring Switch Configurations Xmodem: Copying a Configuration File from a Serially Connected PC or Unix Workstation. To use this method, the switch must be connected via the serial port to a PC or Unix workstation on which is stored the configuration file you want to copy.

  • Page 432

    File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation You can use the CLI to copy the following types of switch data to a text file in a management device: Command Output: Sends the output of a switch CLI command as a file on the destination device.

  • Page 433: Copying Event Log Output To A Destination Device

    File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Event Log Output to a Destination Device This command uses TFTP or Xmodem to copy the Event Log content to a PC or UNIX workstation on the network. copy event-log tftp <ip-address>...

  • Page 434: Copying Crash Log Data Content To A Destination Device

    File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Crash Log Data Content to a Destination Device This command uses TFTP or Xmodem to copy the Crash Log content to a PC or UNIX workstation on the network. You can copy individual slot information or the master switch information.

  • Page 435

    Monitoring and Analyzing Switch Operation Contents Overview ........... . B-2 Status and Counters Data .

  • Page 436

    Monitoring and Analyzing Switch Operation Overview Overview The Switch 2650 or 6108 has several built-in tools for monitoring, analyzing, and troubleshooting switch and network operation: Status: Includes options for displaying general switch information, man- agement address data, port status, port and trunk group statistics, MAC addresses detected on each port or VLAN, and STP, IGMP, and VLAN data (page B-3).

  • Page 437: Status And Counters Data

    Monitoring and Analyzing Switch Operation Status and Counters Data Status and Counters Data This section describes the status and counters screens available through the switch console interface and/or the web browser interface. N o t e You can access all console screens from the web browser interface via Telnet to the console.

  • Page 438: Menu Access To Status And Counters

    Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access To Status and Counters Beginning at the Main Menu, display the Status and Counters menu by select- ing: 1. Status and Counters Figure B-1. The Status and Counters Menu Each of the above menu items accesses the read-only screens described on the following pages.

  • Page 439: General System Information

    Monitoring and Analyzing Switch Operation Status and Counters Data General System Information Menu Access From the console Main Menu, select: 1. Status and Counters 1. General System Information Figure B-2. Example of General Switch Information This screen dynamically indicates how individual switch resources are being used.

  • Page 440: Switch Management Address Information

    Monitoring and Analyzing Switch Operation Status and Counters Data Switch Management Address Information Menu Access From the Main Menu, select: 1 Status and Counters . . . 2. Switch Management Address Information Figure B-3. Example of Management Address Information with VLANs Configured This screen displays addresses that are important for management of the switch.

  • Page 441: Port Status

    Monitoring and Analyzing Switch Operation Status and Counters Data Port Status The web browser interface and the console interface show the same port status data. Menu: Displaying Port Status From the Main Menu, select: 1. Status and Counters . . . 4.

  • Page 442: Viewing Port And Trunk Group Statistics And Flow Control Status

    Monitoring and Analyzing Switch Operation Status and Counters Data Viewing Port and Trunk Group Statistics and Flow Control Status Feature Default Menu viewing port and trunk statistics for all page B-9 page B-10 page B-10 ports, and flow control status viewing a detailed summary for a page B-9 page B-10...

  • Page 443: Menu Access To Port And Trunk Statistics

    Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to Port and Trunk Statistics To access this screen from the Main Menu, select: 1. Status and Counters . . . 4. Port Counters Figure B-5. Example of Port Counters on the Menu Interface To view details about the traffic on a particular port, use the [ v] key to highlight that port number, then select Show Details.

  • Page 444

    Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access To Port and Trunk Group Statistics To Display the Port Counter Summary Report. This command provides an overview of port activity for all ports on the switch. show interfaces Syntax: To Display a Detailed Traffic Summary for Specific Ports.

  • Page 445: Viewing The Switch's Mac Address Tables

    Monitoring and Analyzing Switch Operation Status and Counters Data Viewing the Switch’s MAC Address Tables Feature Default Menu viewing MAC addresses on all page B-12 page B-14 — ports on a specific VLAN viewing MAC addresses on a page B-13 page B-14 —...

  • Page 446

    Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to the MAC Address Views and Searches Per-VLAN MAC-Address Viewing and Searching. This feature lets you determine which switch port on a selected VLAN is being used to communi- cate with a specific device on the network.

  • Page 447

    Monitoring and Analyzing Switch Operation Status and Counters Data Finding the Port Connection for a Specific Device on a VLAN. This feature uses a device’s MAC address that you enter to identify the port used by that device. Proceeding from figure B-7, press (for Search), to display the following prompt: Type the MAC address you want to locate and press...

  • Page 448

    Monitoring and Analyzing Switch Operation Status and Counters Data Prompt for Selecting the Port To Search Figure B-9. Listing MAC Addresses for a Specific Port Use the Space bar to select the port you want to list or search for MAC addresses, then press to list the MAC addresses detected on that port.

  • Page 449

    Monitoring and Analyzing Switch Operation Status and Counters Data Corresponding Port Numbers. For example, to list the learned MAC address on ports A1 through A4 and port A6: To List All Learned MAC Addresses on a VLAN, with Their Port Numbers.

  • Page 450: Spanning Tree Protocol (stp) Information

    Monitoring and Analyzing Switch Operation Status and Counters Data Spanning Tree Protocol (STP) Information Menu Access to STP Data From the Main Menu, select: 1. Status and Counters . . . 8. Spanning Tree Information STP must be enabled on the switch to display the following data: Figure B-11.

  • Page 451: Cli Access To Stp Data

    Monitoring and Analyzing Switch Operation Status and Counters Data Figure B-12. Example of STP Port Information CLI Access to STP Data This option lists the STP configuration, root data, and per-port data (cost, priority, state, and designated bridge). Syntax: show spanning-tree B-17...

  • Page 452: Internet Group Management Protocol (igmp) Status

    Monitoring and Analyzing Switch Operation Status and Counters Data Internet Group Management Protocol (IGMP) Status The switch uses the CLI to display the following IGMP status on a per-VLAN basis: Show Command Output show ip igmp Global command listing IGMP status for all VLANs configured in the switch: •...

  • Page 453: Vlan Information

    Monitoring and Analyzing Switch Operation Status and Counters Data VLAN Information The switch uses the CLI to display the following VLAN status: Show Command Output show vlan Lists: • Maximum number of VLANs to support • Existing VLANs • Status (static or dynamic) •...

  • Page 454

    Monitoring and Analyzing Switch Operation Status and Counters Data HPswitch> show vlan Status and Counters - VLAN Information VLAN support : Yes Maximum VLANs to Support : 9 Primary VLAN: DEFAULT_VLAN 802.1Q VLAN ID Name Status -------------- -------------- -------- DEFAULT _VLAN Static VLAN-33 Static...

  • Page 455

    Monitoring and Analyzing Switch Operation Status and Counters Data HPswitch> show vlan1 Status and Counters - VLAN Information - Ports - VLAN1 802.1Q VLAN ID : 1 Name : DEFAULT_VLAN Status : Static Port Information Mode Unknow VLAN Status ---------------- -------- ----------- ---------- Untagged Learn Tagged Learn...

  • Page 456: Web Browser Interface Status Information

    Alert Log, which informs you of any problems that may have occurred on the switch. For more information on this screen, see chapter 4, ‘Using the HP Web Browser Interface’. Port...

  • Page 457: Port And Static Trunk Monitoring Features

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Port and Static Trunk Monitoring Features Port Monitoring Features Feature Default Menu display monitoring disabled page B-24 page B-26 page B-28 configuration configure the monitor port(s) ports: none page B-24 page B-26 page B-28 selecting or removing ports none selected page B-24 page B-27 page B-28 You can designate a port for monitoring incoming traffic of other ports and of...

  • Page 458: Menu: Configuring Port And Static Trunk Monitoring

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Menu: Configuring Port and Static Trunk Monitoring This procedure describes configuring the switch for monitoring when moni- toring is disabled. (If monitoring has already been enabled, the screens will appear differently than shown in this procedure.) From the Console Main Menu, Select: 2.

  • Page 459

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Move the cursor to the Monitoring Port parameter. Inbound Port and Trunk Monitoring (Only) on the Switch 4108 Figure B-19. How To Select a Monitoring Port Use the Space bar to select the port to use for monitoring. Use the down arrow key to move the cursor to the Action column for the individual ports and position the cursor at a port you want to monitor.

  • Page 460: Cli: Configuring Port And Static Trunk Monitoring

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features CLI: Configuring Port and Static Trunk Monitoring Port and Static Trunk Monitoring Commands Used in This Section show monitor below mirror-port page B-26 monitor page B-27 You must use the following configuration sequence to configure port and static trunk monitoring in the CLI: Assign a monitoring (mirror) port.

  • Page 461

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features To turn off monitoring: Selecting or Removing Ports and Static Trunks As Monitoring Sources. After you configure a monitor port you can use either the global configuration level or the interface context level to select ports and static trunks as monitoring sources.

  • Page 462: Web: Configuring Port Monitoring

    Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Web: Configuring Port Monitoring To enable port monitoring: Click on the Configuration tab. Click on To monitor one or more ports. Click on the radio button for Monitor Selected Ports. b.

  • Page 463

    Troubleshooting Contents Overview ........... . C-2 Troubleshooting Approaches .

  • Page 464: Troubleshooting Approaches, Overview

    Warranty booklet shipped with the switch. Troubleshooting Approaches Use these approaches to diagnose switch problems: Check the HP Procurve web site – the web site my have software updates or other information that may have solved your problem: http://www.hp.com/go/hpprocurve Check the switch LEDs – The LEDs on the switch are a fundamental diagnostic tool.

  • Page 465

    Use the software tools – • HP TopTools for Hubs & Switches: Use HP TopTools for Hubs & Switches (if installed on your network) to help isolate problems and recommend solutions. HP TopTools is shipped at no extra cost with the switch.

  • Page 466: Browser Or Telnet Access Problems

    Troubleshooting Browser or Telnet Access Problems Browser or Telnet Access Problems Cannot access the web browser interface: Access may be disabled by the Web Agent Enabled parameter in the switch console. Check the setting on this parameter by selecting: 2. Switch Configuration . . . 1.

  • Page 467

    Troubleshooting Browser or Telnet Access Problems Cannot Telnet into the switch console from a station on the network: Telnet access may be disabled by the Inbound Telnet Enabled parameter in the System Information screen of the menu interface: 2. Switch Configuration 1.

  • Page 468: Unusual Network Activity, General Problems

    Unusual network activity is usually indicated by the LEDs on the front of the switch or measured with the switch console interface or with a network management tool such as the HP TopTools for Hubs & Switches. Refer to the Installation Guide you received with the switch for information on using LEDs to identify unusual network activity.

  • Page 469: Q Prioritization Problems, Cdp Problems

    Troubleshooting Unusual Network Activity This can also happen, for example, if the server is first configured to issue IP addresses with an unlimited duration, then is subsequently configured to issue IP addresses that will expire after a limited duration. One solution is to configure “reservations”...

  • Page 470: Igmp-related Problems

    Troubleshooting Unusual Network Activity If there is more than one physical path between the switch and the other CDP device and STP is running on the switch, then STP will block the redundant link(s). In this case, the switch port on the remaining open link may not be a member of an untagged VLAN, or any untagged VLANs to which the port belongs may not have an IP address.

  • Page 471: Lacp-related Problems, Port-based Access Control (802.1x)-related Problems

    Removing a port from a trunk without first disabling the port can create a traffic loop that can slow down or halt your network. Before removing a port from a trunk, HP recommends that you either disable the port or disconnect it from the LAN.

  • Page 472

    Troubleshooting Unusual Network Activity Ensure that the period is long enough for network radius-server timeout conditions. The switch does not authenticate a client even though the RADIUS server is properly configured and providing a response to the authentication request. If the RADIUS server configuration for authenti- cating the client includes a VLAN assignment, ensure that the VLAN exists as a static VLAN on the switch.

  • Page 473

    Troubleshooting Unusual Network Activity Port A9 shows an “Open” status even though Access Control is set to Unauthorized (Force Auth). This is because the port-access authenticator has not yet been activated. Figure C-1. Example of a Port Remaining Open After Being Configured with "Control Unauthorized" RADIUS server fails to respond to a request for service, even though the server’s IP address is correctly configured in the switch.

  • Page 474: Radius-related Problems

    Troubleshooting Unusual Network Activity The authorized MAC address on a port that is configured for both 802.1x and port security either changes or is re-acquired after execution of . If the port is aaa port-access authenticator < port-list > initialize force-authorized with com- aaa port-access authenticator <port-list>...

  • Page 475

    Troubleshooting Unusual Network Activity Global RADIUS Encryption Key Unique RADIUS Encryption Key for the RADIUS server at 10.33.18.119 Figure C-2. Examples of Global and Unique Encryption Keys C-13...

  • Page 476: Spanning-tree Protocol (stp) And Fast-uplink Problems

    Troubleshooting Unusual Network Activity Spanning-Tree Protocol (STP) and Fast-Uplink Problems C a u t i o n If you enable STP, it is recommended that you leave the remainder of the STP parameter settings at their default values until you have had an opportunity to evaluate STP performance in your network.

  • Page 477: Ssh-related Problems

    Troubleshooting Unusual Network Activity SSH-Related Problems Switch access refused to a client. Even though you have placed the cli- ent’s public key in a text file and copied the file (using the copy tftp pub-key-file command) into the switch, the switch refuses to allow the client to have access.

  • Page 478: Stacking-related Problems, Tacacs-related Problems

    Troubleshooting Unusual Network Activity A key in the file is too long. The maximum key length is 1024 characters, including spaces. This could also mean that two or more keys are merged together instead of being separated by a <CR><LF>. There are more than ten public keys in the key file.

  • Page 479

    Troubleshooting Unusual Network Activity Disconnect the switch from network access to any TACACS+ servers and then log in to the switch using either Telnet or direct console port access. Because the switch cannot access a TACACS+ server, it will default to local authentication. You can then use the switch’s local Operator or Manager username/password pair to log on.

  • Page 480: Timep, Sntp, Or Gateway Problems, Vlan-related Problems

    Troubleshooting Unusual Network Activity For more help, refer to the documentation provided with your TACACS+ server application. Unknown Users Allowed to Login to the Switch. Your TACACS+ appli- cation may be configured to allow access to unknown users by assigning them the privileges included in a default user profile.

  • Page 481

    Troubleshooting Unusual Network Activity Link Configured for Multiple VLANs Does Not Support Traffic for One or More VLANs. One or more VLANs may not be properly configured as “Tagged” or “Untagged”. A VLAN assigned to a port connecting two 802.1Q- compliant devices must be configured the same on both ports.

  • Page 482

    Troubleshooting Unusual Network Activity is moving among ports because packets with the same MAC address but different VLANs are received on different ports. You can avoid this problem by creating redundant paths using port trunks or spanning tree. MAC Address "A"; VLAN 1 Server VLAN 1 Switch with...

  • Page 483: Using The Event Log To Identify Problem Sources, Structure Of The Event Log

    W (warning) indicates that a service has behaved unexpectedly. (critical) indicates that a severe switch error has occurred. (debug) reserved for HP internal diagnostic information. Date is the date in mm/dd/yy format that the entry was placed in the log.

  • Page 484

    Troubleshooting Using the Event Log To Identify Problem Sources N o t e The event log will be erased if power to the switch is interrupted. The event log is not erased by using the option in the Main Menu. Reboot Switch Table C-1.

  • Page 485: Menu: Entering And Navigating In The Event Log

    Troubleshooting Using the Event Log To Identify Problem Sources Menu: Entering and Navigating in the Event Log From the Main Menu, select Event Log Range of Events in the Log Range of Log Events Displayed Log Status Line Figure C-6. Example of an Event Log Display The log status line at the bottom of the display identifies where in the sequence of event messages the display is currently positioned.

  • Page 486: Cli:

    Troubleshooting Using the Event Log To Identify Problem Sources CLI: Using the CLI, you can list Events recorded since the last boot of the switch All events recorded Event entries containing a specific keyword, either since the last boot or all events recorded show logging [-a] [<search-text>] Syntax:...

  • Page 487: Diagnostic Tools

    Troubleshooting Diagnostic Tools Diagnostic Tools Diagnostic Features Feature Default Menu Port Autonegotiation PingTest — page C-28 page C-27 Link Test — page C-28 page C-27 Display Config File — page C-30 page C-30 Admin. and Troubleshooting — page C-32 — Commands Factory-Default Config page C-33...

  • Page 488: Port Auto-negotiation, Ping And Link Tests

    Troubleshooting Diagnostic Tools Port Auto-Negotiation When a link LED does not light (indicating loss of link between two devices), the most common reason is a failure of port auto-negotiation between the connecting ports. If a link LED fails to light when you connect the switch to a port on another device, do the following: Ensure that the switch port and the port on the attached end-node are both set to...

  • Page 489

    Troubleshooting Diagnostic Tools Web: Executing Ping or Link Tests 1. Click here. 2. Click here. 3. Select Ping Test (the 4. For a Ping test, enter default) or Link Test the IP address of the target device. For a Link test, enter the MAC address of the target device.

  • Page 490

    Troubleshooting Diagnostic Tools is the number of seconds to allow per attempt to test a Timeout in Seconds connection before determining that the current attempt has failed. To halt a Link or Ping test before it concludes, click on the Stop button. To reset the screen to its default settings, click on the Defaults button.

  • Page 491

    Troubleshooting Diagnostic Tools Link Tests. You can issue single or multiple link tests with varying repeti- tions and timeout periods. The defaults are: Repetitions: 1 (1 - 999) Timeout: 5 seconds (1 - 256 seconds) link <mac-address> [repetitions <1 - 999>] [timeout <1 - 256>] Syntax: [vlan <vlan-id>] Basic Link Test...

  • Page 492: Displaying The Configuration File

    Troubleshooting Diagnostic Tools Displaying the Configuration File The complete switch configuration is contained in a file that you can browse from either the CLI or the web browser interface. It may be useful in some troubleshooting scenarios to view the switch configuration. CLI: Viewing the Configuration File Using the CLI, you can display either the running configuration or the startup configuration.

  • Page 493

    Troubleshooting Diagnostic Tools Executing outputs a data listing to your terminal emulator. However, show tech using your terminal emulator’s text capture features, you can also save show data to a text file for viewing, printing, or sending to an associate. For tech example, if your terminal emulator is the Hyperterminal application available with Microsoft®...

  • Page 494: Cli Administrative And Troubleshooting Commands

    Troubleshooting Diagnostic Tools b. When the CLI prompt appears, the show tech listing is complete. At this point, click on in HyperTerminal to stop Transfer Capture Text Stop copying data into the text file created in the preceding steps. N o t e Remember to do the above step to stop HyperTerminal from copying into the text file.

  • Page 495: Restoring The Factory-default Configuration

    Clear/Reset button combination N o t e HP recommends that you save your configuration to a TFTP server before resetting the switch to its factory-default configuration. You can also save your configuration via Xmodem, to a directly connected PC.

  • Page 496: Restoring A Flash Image

    Troubleshooting Restoring a Flash Image Restoring a Flash Image The switch can lose its operating system if either the primary or secondary flash image location is empty or contains a corrupted OS file and an operator uses the command to erase a good OS image file from the opposite erase flash flash location.

  • Page 497

    Troubleshooting Restoring a Flash Image Since the OS file is large, you can increase the speed of the download by changing the switch console and terminal emulator baud rates to a high speed. For example: Change the switch baud rate to 115,200 Bps. b.

  • Page 498

    Troubleshooting Restoring a Flash Image Figure C-12. Example of Xmodem Download in Progress When the download completes, the switch reboots from primary flash using the OS image you downloaded in the preceding steps, plus the most recent startup-config file. C-36...

  • Page 499

    MAC Address Management Contents Overview ........... . D-1 Determining MAC Addresses .

  • Page 500: Determining Mac Addresses

    MAC Address Management Determining MAC Addresses Determining MAC Addresses MAC Address Viewing Methods Feature Default Menu view switch’s base (default vlan) MAC address — and the addressing for any added VLANs view port MAC addresses (hexadecimal format) — — Use the menu interface to view the switch’s base MAC address and the MAC address assigned to any non-default VLAN you have configured on the switch.

  • Page 501: Menu: Viewing The Switch's Mac Addresses

    MAC Address Management Determining MAC Addresses Menu: Viewing the Switch’s MAC Addresses The Management Address Information screen lists the MAC addresses for: Base switch (default VLAN; VID = 1) Any additional VLANs configured on the switch. Also, the Base MAC address appears on a label on the back of the switch. N o t e The Base MAC address is used by the first (default) VLAN in the switch.

  • Page 502: Cli: Viewing The Port And Vlan Mac Addresses

    MAC Address Management Determining MAC Addresses CLI: Viewing the Port and VLAN MAC Addresses The MAC address assigned to each switch port is used internally by such features as Flow Control and the Spanning Tree Protocol. Using the walkmib command to determine the MAC address assignments for individual ports can sometimes be useful when diagnosing switch operation.

  • Page 503

    MAC Address Management Determining MAC Addresses ifPhysAddress.1 - 6: Ports A1 - A6 in Slot 1 (Addresses 7 - 24 in slot 1 and 25 - 48 in slot 2 are unused.) ifPhysAddress.49 - 51: Ports C1 - C3 in Slot 3 (Addresses 52 - 72 in slot 3 are unused.) ifPhysAddress.205 Base MAC Address (MAC...

  • Page 505

    • 4000M • 8000M HP Procurve switches provide a way to automatically adjust the system clock for Daylight Savings Time (DST) changes. To use this feature you define the month and date to begin and to end the change from standard time. In addition to the value “none”...

  • Page 506

    Daylight Savings Time on HP Procurve Switches Middle Europe and Portugal: • Begin DST at 2am the first Sunday on or after March 25th. • End DST at 2am the first Sunday on or after September 24th. Southern Hemisphere: •...

  • Page 507

    Daylight Savings Time on HP Procurve Switches Before configuring a “User defined” Daylight Time Rule, it is important to understand how the switch treats the entries. The switch knows which dates are Sundays, and uses an algorithm to determine on which date to change the system clock, given the configured “Beginning day”...

  • Page 509

    Index Symbols SNMP, blocking … 10-2 auto negotiation … 9-4 => prompt … C-34 auto port setting … 12-5 Auto-10 … 9-11, 9-14 Numerics auto-discovery … 10-4 auto-negotiation … 9-3 802.1Q VLAN standard … 13-3 802.3u auto negotiation standard … 9-3 bandwidth displaying utilization …...

  • Page 510

    effect of spanning tree … 10-24 IP routing forwarding parameters … 15-10 factory-default … 10-19 IP routing parameters … 15-7 general operation … 10-15 IRDP … 15-17 hold time … 10-24 network monitoring … B-23 IP address in outbound packet … 10-25 permanent …...

  • Page 511

    enabling STP CLI … 13-11 date format … C-21 ending a console session … 2-5 date,configure … 6-13 event log … 2-7, C-21 dedicated management VLAN … 11-8 navigation … C-23 default gateway … 7-3 severity level … C-21 default route … 15-15 use during troubleshooting …...

  • Page 512

    … 7-8 HP Procurve GVRP support URL … 4-13 advertisement … 11-48 HP Router 440 … 11-33 advertisement, defined … 11-34 HP Router 470 … 11-33 advertisement, responses to … 11-36 HP Router 480 … 11-33 advertisements, generating … 11-41 HP Router 650 …...

  • Page 513

    interfaces listed … 1-2 static route configuration … 15-15 invalid input … 3-13 static route types … 15-13 tables and caches … 15-3 CLI access … 7-7 VLAN interface … 15-2 configuration … 7-3 IP, for SNMP … 10-2 DHCP/Bootp … 7-3 duplicate address …...

  • Page 514

    … 7-2 MIB … 10-3 leave group listing … 10-3 See IGMP. HP proprietary … 10-3 legacy VLAN … 11-6 standard … 10-3 limit, broadcast … 9-9 Microsoft Internet Explorer … 4-4 link speed, port trunk … 9-11 mirroring link test …...

  • Page 515

    displaying … 6-18 summary … 6-15 parameters port security IP global … 15-5 port trunk restriction … 9-11 IP interface … 15-6 trunk restriction … 9-15 password … 4-8, 4-10 port trunk … 9-10 creating … 4-8 caution … 9-11, 9-16, 9-24 delete …...

  • Page 516

    IRDP configuration … 15-17 See VLAN. null static route … 15-16 priority … 12-5 static route types … 15-13 Procurve, HP, URL … 10-3 RS-232 … 1-3 prompt, => … C-34 RSTP Proxy ARP, enabling … 15-9 configuring … 13-9 public SNMP community …...

  • Page 517

    … C-15 spanning tree stacking 802.1Q standard … 13-3 benefits … 14-3, 14-4 blocked link … 13-5 minimum software version, other HP blocked port … 13-4 switches … 14-9 BPDU … 13-3 primary … 14-45 broadcast storm … 13-3, 13-7 See also virtual stacking.

  • Page 518

    static IP routes download … A-4 configuring … 15-13, 15-15 OS download … A-3 IP routing threshold setting … 10-4 static route parameters … 15-14 thresholds, SNMP … 10-8 route types … 15-13 time format … C-21 static VLAN, convert to … 11-34 time protocol statistical sampling …...

  • Page 519

    … 11-14 URL … 4-13 OS download … A-3 browser interface online help location … 4-13 port assignment … 11-14 HP ProCurve … 4-13 port configuration … 11-26, C-19 HP Procurve … 10-3 port monitoring … 11-32 management … 4-13 port restriction …...

  • Page 520

    URL default … 4-14 URL, management server … 4-14 warranty … 1-ii URL, support … 4-14 web agent enabled … 4-2 web site, HP … 10-3 web agent, world wide web site, HP advantages … 1-5 See HP Procurve web browser interface write access …...

  • Page 524

    Technical information in this document is subject to change without notice. ©Copyright Hewlett-Packard Company 2002. All right reserved. Reproduction, adaptation, or translation without prior written permission is prohibited except as allowed under the copyright laws. October 2002 Manual Part Number 5990-3062 *5990-3062*...

This manual also for:

Procurve 6108

Comments to this Manuals

Symbols: 0
Latest comments: