HP Procurve Series 4100GL Manuals

Manuals and User Guides for HP Procurve Series 4100GL. We have 5 HP Procurve Series 4100GL manuals available for free PDF download: Management And Configuration Manual, Function Manual, Manual, Installation And Getting Started Manual

HP Procurve Series 4100GL Management And Configuration Manual

HP Procurve Series 4100GL Management And Configuration Manual (547 pages)

Brand: HP | Category: Switch | Size: 7.29 MB
Table of contents
Table Of Contents5................................................................................................................................................................
Getting Started5................................................................................................................................................................
Using The Menu Interface6................................................................................................................................................................
Using The Command Line Interface (cli)6................................................................................................................................................................
Using The Hp Web Browser Interface6................................................................................................................................................................
Switch Memory And Configuration7................................................................................................................................................................
Configuring Ip Addressing8................................................................................................................................................................
Time Protocols9................................................................................................................................................................
Port-based Virtual Lans (vlans) And Gvrp11................................................................................................................................................................
And 802.1d Spanning Tree Protocol (stp)12................................................................................................................................................................
Hp Procurve Stack Management13................................................................................................................................................................
Ip Routing Features14................................................................................................................................................................
Contents19................................................................................................................................................................
Introduction20................................................................................................................................................................
About The Feature Descriptions20................................................................................................................................................................
Conventions21................................................................................................................................................................
Command Syntax Statements21................................................................................................................................................................
Command Prompts21................................................................................................................................................................
Screen Simulations22................................................................................................................................................................
Port Identity Convention For Examples22................................................................................................................................................................
Related Publications22................................................................................................................................................................
Getting Documentation From The Web24................................................................................................................................................................
Sources For More Information25................................................................................................................................................................
Need Only A Quick Start?26................................................................................................................................................................
Need Only A Quick Start26................................................................................................................................................................
Overview28................................................................................................................................................................
Advantages Of Using The Menu Interface29................................................................................................................................................................
Advantages Of Using The Cli30................................................................................................................................................................
Advantages Of Using The Hp Web Browser Interface31................................................................................................................................................................
Advantages Of Using Hp Toptools For Hubs & Switches32................................................................................................................................................................
Starting And Ending A Menu Session37................................................................................................................................................................
How To Start A Menu Interface Session38................................................................................................................................................................
How To End A Menu Session And Exit From The Console:39................................................................................................................................................................
How To End A Menu Session And Exit From The Console39................................................................................................................................................................
Main Menu Features41................................................................................................................................................................
Screen Structure And Navigation43................................................................................................................................................................
Rebooting The Switch46................................................................................................................................................................
Menu Features List48................................................................................................................................................................
Where To Go From Here49................................................................................................................................................................
Accessing The Cli52................................................................................................................................................................
Privilege Levels At Logon53................................................................................................................................................................
Privilege Level Operation54................................................................................................................................................................
Operator Privileges54................................................................................................................................................................
Manager Privileges55................................................................................................................................................................
How To Move Between Levels57................................................................................................................................................................
Listing Commands And Command Options58................................................................................................................................................................
Listing Commands Available At Any Privilege Level58................................................................................................................................................................
Command Option Displays60................................................................................................................................................................
Displaying Cli "help"61................................................................................................................................................................
Displaying Cli "help61................................................................................................................................................................
Configuration Commands And The Context Configuration Modes63................................................................................................................................................................
Cli Control And Editing66................................................................................................................................................................
General Features69................................................................................................................................................................
Starting An Hp Web Browser Interface Session With The Switch70................................................................................................................................................................
Using A Standalone Web Browser In A Pc Or Unix Workstation70................................................................................................................................................................
Using Hp Toptools For Hubs & Switches71................................................................................................................................................................
Tasks For Your First Hp Web Browser Interface Session73................................................................................................................................................................
Viewing The "first Time Install" Window73................................................................................................................................................................
Creating Usernames And Passwords In The Browser Interface74................................................................................................................................................................
Online Help For The Hp Web Browser Interface77................................................................................................................................................................
Support/mgmt Urls Feature78................................................................................................................................................................
Support Url79................................................................................................................................................................
Help And The Management Server Url79................................................................................................................................................................
Status Reporting Features81................................................................................................................................................................
The Overview Window81................................................................................................................................................................
The Port Utilization And Status Displays82................................................................................................................................................................
Port Status84................................................................................................................................................................
The Alert Log85................................................................................................................................................................
Alert Types86................................................................................................................................................................
The Status Bar88................................................................................................................................................................
Setting Fault Detection Policy89................................................................................................................................................................
Overview Of Configuration File Management92................................................................................................................................................................
Using The Cli To Implement Configuration Changes95................................................................................................................................................................
Configuration Changes98................................................................................................................................................................
Configuration Changes Using The Menu Interface98................................................................................................................................................................
Rebooting From The Menu Interface100................................................................................................................................................................
Configuration Changes Using The Web Browser Interface101................................................................................................................................................................
Using Primary And Secondary Flash Image Options102................................................................................................................................................................
Displaying The Current Flash Image Data102................................................................................................................................................................
Os Downloads104................................................................................................................................................................
Local Os Replacement And Removal105................................................................................................................................................................
Operating Notes109................................................................................................................................................................
Interface Access: Console/serial Link, Web, And Telnet113................................................................................................................................................................
Menu: Modifying The Interface Access114................................................................................................................................................................
Cli: Modifying The Interface Access115................................................................................................................................................................
Sessions118................................................................................................................................................................
System Information119................................................................................................................................................................
Menu: Viewing And Configuring System Information120................................................................................................................................................................
Cli: Viewing And Configuring System Information121................................................................................................................................................................
Web: Configuring System Parameters124................................................................................................................................................................
Using Friendly (optional) Port Names125................................................................................................................................................................
Configuring And Operating Rules For Friendly Port Names125................................................................................................................................................................
Configuring Friendly Port Names126................................................................................................................................................................
Displaying Friendly Port Names With Other Port Data128................................................................................................................................................................
Ip Configuration133................................................................................................................................................................
Just Want A Quick Start With Ip Addressing?134................................................................................................................................................................
Just Want A Quick Start With Ip Addressing134................................................................................................................................................................
Ip Addressing With Multiple Vlans134................................................................................................................................................................
Ip Addressing In A Stacking Environment135................................................................................................................................................................
Cli: Configuring Ip Address, Gateway, And Time-to-live (ttl)137................................................................................................................................................................
Web: Configuring Ip Addressing141................................................................................................................................................................
How Ip Addressing Affects Switch Operation141................................................................................................................................................................
Dhcp/bootp Operation142................................................................................................................................................................
Network Preparations For Configuring Dhcp/bootp145................................................................................................................................................................
Configuration File Downloads146................................................................................................................................................................
Globally Assigned Ip Network Addresses150................................................................................................................................................................
Timep Time Synchronization152................................................................................................................................................................
Sntp Time Synchronization152................................................................................................................................................................
Turning Off Time Protocol Operation153................................................................................................................................................................
Disabling Time Synchronization154................................................................................................................................................................
Sntp: Viewing, Selecting, And Configuring154................................................................................................................................................................
Menu: Viewing And Configuring Sntp155................................................................................................................................................................
Cli: Viewing And Configuring Sntp158................................................................................................................................................................
Timep: Viewing, Selecting, And Configuring164................................................................................................................................................................
Menu: Viewing And Configuring Timep165................................................................................................................................................................
Cli: Viewing And Configuring Timep166................................................................................................................................................................
Sntp Unicast Time Polling With Multiple Sntp Servers171................................................................................................................................................................
Address Prioritization172................................................................................................................................................................
Adding And Deleting Sntp Server Addresses172................................................................................................................................................................
Configured174................................................................................................................................................................
Sntp Messages In The Event Log174................................................................................................................................................................
Viewing Port Status And Configuring Port Parameters176................................................................................................................................................................
Menu: Viewing Port Status And Configuring Port Parameters179................................................................................................................................................................
Cli: Viewing Port Status And Configuring Port Parameters180................................................................................................................................................................
Web: Viewing Port Status And Configuring Port Parameters183................................................................................................................................................................
Port Trunking184................................................................................................................................................................
Port Trunk Features And Operation185................................................................................................................................................................
Trunk Configuration Methods186................................................................................................................................................................
Menu: Viewing And Configuring A Static Trunk Group190................................................................................................................................................................
Group192................................................................................................................................................................
Using The Cli To Configure A Static Or Dynamic Trunk Group195................................................................................................................................................................
Web: Viewing Existing Port Trunk Groups198................................................................................................................................................................
Trunk Group Operation Using Lacp198................................................................................................................................................................
Lacp Notes And Restrictions203................................................................................................................................................................
Trunk Group Operation Using The "trunk" Option205................................................................................................................................................................
Trunk Operation Using The "fec" Option205................................................................................................................................................................
How The Switch Lists Trunk Data206................................................................................................................................................................
Outbound Traffic Distribution Across Trunked Links206................................................................................................................................................................
Configuring Port-based Priority For Incoming Packets208................................................................................................................................................................
The Role Of 802.1q Vlan Tagging208................................................................................................................................................................
Outbound Port Queues And Packet Priority Settings209................................................................................................................................................................
Operating Rules For Port-based Priority210................................................................................................................................................................
Configuring And Viewing Port-based Priority211................................................................................................................................................................
Messages Related To Prioritization212................................................................................................................................................................
Troubleshooting Prioritization212................................................................................................................................................................
Using Snmp Tools To Manage The Switch214................................................................................................................................................................
Snmp Management Features214................................................................................................................................................................
Configuring For Snmp Access To The Switch215................................................................................................................................................................
Configuring For Snmp Version 3 Access To The Switch216................................................................................................................................................................
Snmp Version 3 Commands217................................................................................................................................................................
Snmpv3 Enable218................................................................................................................................................................
Snmp Version 3 Users219................................................................................................................................................................
Group Access Levels222................................................................................................................................................................
Snmp Communities223................................................................................................................................................................
Communities225................................................................................................................................................................
Cli: Viewing And Configuring Snmp Community Names227................................................................................................................................................................
Snmp Notification And Traps229................................................................................................................................................................
Trap Features231................................................................................................................................................................
Using The Cli To Enable Authentication Traps234................................................................................................................................................................
Advanced Management: Rmon235................................................................................................................................................................
Cdp Terminology237................................................................................................................................................................
General Cdp Operation238................................................................................................................................................................
Outgoing Packets238................................................................................................................................................................
Incoming Cdp Packets239................................................................................................................................................................
Configuring Cdp On The Switch242................................................................................................................................................................
Viewing The Switch's Current Cdp Configuration243................................................................................................................................................................
Viewing The Switch's Current Cdp Neighbors Table243................................................................................................................................................................
Clearing (resetting) The Cdp Neighbors Table244................................................................................................................................................................
Configuring Cdp Operation245................................................................................................................................................................
Effect Of Spanning Tree (stp) On Cdp Packet Transmission247................................................................................................................................................................
Cdp Packets248................................................................................................................................................................
Cdp Neighbor Data And Mib Objects249................................................................................................................................................................
Port-based Virtual Lans (static Vlans)255................................................................................................................................................................
Overview Of Using Vlans258................................................................................................................................................................
Vlan Support And The Default Vlan258................................................................................................................................................................
The Primary Vlan258................................................................................................................................................................
Per-port Static Vlan Configuration Options260................................................................................................................................................................
General Steps For Using Vlans261................................................................................................................................................................
Vlan Operating Notes261................................................................................................................................................................
Menu: Configuring Vlan Parameters262................................................................................................................................................................
Cli: Configuring Vlan Parameters267................................................................................................................................................................
Web: Viewing And Configuring Vlan Parameters273................................................................................................................................................................
Vlan Tagging Information274................................................................................................................................................................
The Secure Management Vlan278................................................................................................................................................................
Effect Of Vlans On Other Switch Features282................................................................................................................................................................
Vlan Restrictions283................................................................................................................................................................
Gvrp285................................................................................................................................................................
General Operation286................................................................................................................................................................
Per-port Options For Handling Gvrp "unknown Vlans"288................................................................................................................................................................
Per-port Options For Handling Gvrp "unknown Vlans288................................................................................................................................................................
Per-port Options For Dynamic Vlan Advertising And Joining290................................................................................................................................................................
Gvrp And Vlan Access Control292................................................................................................................................................................
Planning For Gvrp Operation293................................................................................................................................................................
Configuring Gvrp On A Switch293................................................................................................................................................................
Gvrp Operating Notes299................................................................................................................................................................
General Operation And Features303................................................................................................................................................................
Igmp Terms304................................................................................................................................................................
Igmp Operating Features305................................................................................................................................................................
Cli: Configuring And Displaying Igmp306................................................................................................................................................................
Web: Enabling Or Disabling Igmp311................................................................................................................................................................
How Igmp Operates311................................................................................................................................................................
Operation With Or Without Ip Addressing313................................................................................................................................................................
Automatic Fast-leave Igmp313................................................................................................................................................................
Forced Fast-leave Igmp315................................................................................................................................................................
Configuring Per-port Forced Fast-leave Igmp318................................................................................................................................................................
Using The Switch As Querier319................................................................................................................................................................
From Ip Multicast Filtering320................................................................................................................................................................
How Spanning Tree Operates326................................................................................................................................................................
Spanning Tree Options: Rstp (802.1w) And Stp (802.1d)328................................................................................................................................................................
Configuring Rapid Reconfiguration Spanning Tree (rstp)329................................................................................................................................................................
Transitioning From Stp To Rstp330................................................................................................................................................................
Configuring Rstp331................................................................................................................................................................
Optimizing The Rstp Configuration331................................................................................................................................................................
Cli: Configuring Rstp332................................................................................................................................................................
Menu: Configuring Rstp338................................................................................................................................................................
Web: Enabling Or Disabling Rstp339................................................................................................................................................................
D Spanning-tree Protocol (stp)340................................................................................................................................................................
Menu: Configuring 802.1d Stp340................................................................................................................................................................
Cli: Configuring 802.1d Stp343................................................................................................................................................................
Stp Fast Mode347................................................................................................................................................................
Fast-uplink Spanning Tree Protocol (stp)348................................................................................................................................................................
Terminology350................................................................................................................................................................
Operating Rules For Fast Uplink351................................................................................................................................................................
Menu: Viewing And Configuring Fast-uplink Stp352................................................................................................................................................................
Cli: Viewing And Configuring Fast-uplink Stp358................................................................................................................................................................
Web: Enabling Or Disabling Stp362................................................................................................................................................................
Operation365................................................................................................................................................................
Which Devices Support Stacking?366................................................................................................................................................................
Which Devices Support Stacking366................................................................................................................................................................
Components Of Hp Procurve Stack Management367................................................................................................................................................................
General Stacking Operation367................................................................................................................................................................
Operating Rules For Stacking369................................................................................................................................................................
Specific Rules370................................................................................................................................................................
Configuring Stack Management371................................................................................................................................................................
Overview Of Configuring And Bringing Up A Stack371................................................................................................................................................................
Stacking375................................................................................................................................................................
Using The Menu To Manage A Candidate Switch377................................................................................................................................................................
Using The Commander To Manage The Stack379................................................................................................................................................................
Using The Commander To Access Member Switches For Configuration Changes And Monitoring Traffic385................................................................................................................................................................
Another Stack386................................................................................................................................................................
Monitoring Stack Status387................................................................................................................................................................
Using The Cli To View Stack Status And Configure Stacking391................................................................................................................................................................
Using The Cli To View Stack Status393................................................................................................................................................................
Adding To A Stack Or Moving Switches Between Stacks397................................................................................................................................................................
Using The Cli To Remove A Member From A Stack402................................................................................................................................................................
Snmp Community Operation In A Stack405................................................................................................................................................................
Using The Cli To Disable Or Re-enable Stacking406................................................................................................................................................................
Transmission Interval406................................................................................................................................................................
Stacking Operation With Multiple Vlans Configured406................................................................................................................................................................
Web: Viewing And Configuring Stacking407................................................................................................................................................................
Status Messages408................................................................................................................................................................
Overview Of Ip Routing410................................................................................................................................................................
Ip Tables And Caches411................................................................................................................................................................
Ip Global Parameters For Routing Switches413................................................................................................................................................................
Ip Interface Parameters For Routing Switches414................................................................................................................................................................
Configuring Ip Parameters For Routing Switches415................................................................................................................................................................
Configuring Ip Addresses415................................................................................................................................................................
Configuring Arp Parameters415................................................................................................................................................................
Configuring Forwarding Parameters418................................................................................................................................................................
Configuring Icmp420................................................................................................................................................................
Configuring Static Ip Routes422................................................................................................................................................................
Static Route Types422................................................................................................................................................................
Static Ip Route Parameters423................................................................................................................................................................
Static Route States Follow Vlan (interface) States423................................................................................................................................................................
Configuring A Static Ip Route424................................................................................................................................................................
Configuring The Default Route424................................................................................................................................................................
Configuring A "null" Route425................................................................................................................................................................
Configuring Irdp426................................................................................................................................................................
Enabling Irdp Globally427................................................................................................................................................................
Enabling Irdp On An Individual Vlan Interface427................................................................................................................................................................
Displaying Irdp Information429................................................................................................................................................................
Configuring Dhcp Relay430................................................................................................................................................................
Dhcp Packet Forwarding430................................................................................................................................................................
Minimum Requirements For Dhcp Relay Operation431................................................................................................................................................................
General Switch Software Download Rules435................................................................................................................................................................
Menu: Tftp Download From A Server To Primary Flash436................................................................................................................................................................
Flash438................................................................................................................................................................
Workstation439................................................................................................................................................................
Primary Or Secondary Flash440................................................................................................................................................................
Switch-to-switch Download441................................................................................................................................................................
Cli: Switch-to-switch Downloads442................................................................................................................................................................
Using The Hp Toptools For Hubs & Switches Utility443................................................................................................................................................................
Troubleshooting Tftp Downloads444................................................................................................................................................................
Transferring Switch Configurations445................................................................................................................................................................
Copying Event Log Output To A Destination Device449................................................................................................................................................................
Copying Crash Data Content To A Destination Device449................................................................................................................................................................
Copying Crash Log Data Content To A Destination Device450................................................................................................................................................................
Status And Counters Data453................................................................................................................................................................
Menu Access To Status And Counters454................................................................................................................................................................
General System Information455................................................................................................................................................................
Switch Management Address Information456................................................................................................................................................................
Module Information457................................................................................................................................................................
Viewing Port And Trunk Group Statistics And Flow Control Status459................................................................................................................................................................
Menu Access To Port And Trunk Statistics460................................................................................................................................................................
Viewing The Switch's Mac Address Tables462................................................................................................................................................................
Spanning Tree Protocol (stp) Information467................................................................................................................................................................
Cli Access To Stp Data468................................................................................................................................................................
Internet Group Management Protocol (igmp) Status469................................................................................................................................................................
Vlan Information470................................................................................................................................................................
Web Browser Interface Status Information472................................................................................................................................................................
Port And Static Trunk Monitoring Features473................................................................................................................................................................
Menu: Configuring Port And Static Trunk Monitoring474................................................................................................................................................................
Cli: Configuring Port And Static Trunk Monitoring476................................................................................................................................................................
Web: Configuring Port Monitoring478................................................................................................................................................................
Browser Or Telnet Access Problems482................................................................................................................................................................
Unusual Network Activity484................................................................................................................................................................
Prioritization Problems485................................................................................................................................................................
Igmp-related Problems486................................................................................................................................................................
Lacp-related Problems487................................................................................................................................................................
Radius-related Problems490................................................................................................................................................................
Spanning-tree Protocol (stp) And Fast-uplink Problems491................................................................................................................................................................
Ssh-related Problems492................................................................................................................................................................
Stacking-related Problems493................................................................................................................................................................
Tacacs-related Problems494................................................................................................................................................................
Timep, Sntp, Or Gateway Problems496................................................................................................................................................................
Using Logging To Identify Problem Sources499................................................................................................................................................................
Debug And Syslog Operation503................................................................................................................................................................
Diagnostic Tools509................................................................................................................................................................
Ping And Link Tests510................................................................................................................................................................
Displaying The Configuration File514................................................................................................................................................................
Cli Administrative And Troubleshooting Commands517................................................................................................................................................................
Restoring The Factory-default Configuration518................................................................................................................................................................
Restoring A Flash Image519................................................................................................................................................................
Determining Mac Addresses523................................................................................................................................................................

Advertisement

HP Procurve Series 4100GL Management And Configuration Manual

HP Procurve Series 4100GL Management And Configuration Manual (504 pages)

Brand: HP | Category: Switch | Size: 6.17 MB
Table of contents
Table Of Contents5................................................................................................................................................................
Selecting A Management Interface5................................................................................................................................................................
Using The Menu Interface5................................................................................................................................................................
Using The Command Line Interface (cli)6................................................................................................................................................................
Using The Hp Web Browser Interface6................................................................................................................................................................
Switch Memory And Configuration7................................................................................................................................................................
Configuring Ip Addressing8................................................................................................................................................................
Time Protocols9................................................................................................................................................................
Port-based Virtual Lans (vlans) And Gvrp11................................................................................................................................................................
W Rapid Spanning Tree Protocol (rstp)13................................................................................................................................................................
And 802.1d Spanning Tree Protocol (stp)13................................................................................................................................................................
Hp Procurve Stack Management14................................................................................................................................................................
Getting Started19................................................................................................................................................................
Command Syntax Statements20................................................................................................................................................................
Command Prompts21................................................................................................................................................................
Screen Simulations21................................................................................................................................................................
Related Publications22................................................................................................................................................................
Getting Documentation From The Web23................................................................................................................................................................
Sources For More Information24................................................................................................................................................................
Need Only A Quick Start25................................................................................................................................................................
To Set Up And Install The Switch In Your Network25................................................................................................................................................................
Contents27................................................................................................................................................................
Overview28................................................................................................................................................................
Understanding Management Interfaces28................................................................................................................................................................
Advantages Of Using The Menu Interface29................................................................................................................................................................
Advantages Of Using The Cli30................................................................................................................................................................
Advantages Of Using The Hp Web Browser Interface31................................................................................................................................................................
Advantages Of Using Hp Toptools For Hubs & Switches32................................................................................................................................................................
Starting And Ending A Menu Session37................................................................................................................................................................
How To Start A Menu Interface Session38................................................................................................................................................................
How To End A Menu Session And Exit From The Console:39................................................................................................................................................................
How To End A Menu Session And Exit From The Console39................................................................................................................................................................
Main Menu Features41................................................................................................................................................................
Screen Structure And Navigation43................................................................................................................................................................
Rebooting The Switch46................................................................................................................................................................
Menu Features List48................................................................................................................................................................
Where To Go From Here49................................................................................................................................................................
Accessing The Cli52................................................................................................................................................................
Using The Cli52................................................................................................................................................................
Privilege Levels At Logon53................................................................................................................................................................
Privilege Level Operation54................................................................................................................................................................
Operator Privileges54................................................................................................................................................................
Manager Privileges55................................................................................................................................................................
How To Move Between Levels57................................................................................................................................................................
Listing Commands And Command Options58................................................................................................................................................................
Listing Commands Available At Any Privilege Level58................................................................................................................................................................
Command Option Displays60................................................................................................................................................................
Displaying Cli "help"61................................................................................................................................................................
Displaying Cli "help61................................................................................................................................................................
Configuration Commands And The Context Configuration Modes63................................................................................................................................................................
Cli Control And Editing66................................................................................................................................................................
General Features69................................................................................................................................................................
Starting An Hp Web Browser Interface Session With The Switch70................................................................................................................................................................
Using A Standalone Web Browser In A Pc Or Unix Workstation70................................................................................................................................................................
Using Hp Toptools For Hubs & Switches71................................................................................................................................................................
Tasks For Your First Hp Web Browser Interface Session73................................................................................................................................................................
Viewing The "first Time Install" Window73................................................................................................................................................................
Creating Usernames And Passwords In The Browser Interface74................................................................................................................................................................
Using The Passwords76................................................................................................................................................................
Using The User Names76................................................................................................................................................................
If You Lose A Password77................................................................................................................................................................
Online Help For The Hp Web Browser Interface77................................................................................................................................................................
Support/mgmt Urls Feature78................................................................................................................................................................
Support Url79................................................................................................................................................................
Help And The Management Server Url79................................................................................................................................................................
Status Reporting Features81................................................................................................................................................................
The Overview Window81................................................................................................................................................................
The Port Utilization And Status Displays82................................................................................................................................................................
Port Utilization82................................................................................................................................................................
Port Status84................................................................................................................................................................
The Alert Log85................................................................................................................................................................
Sorting The Alert Log Entries85................................................................................................................................................................
Alert Types86................................................................................................................................................................
Viewing Detail Views Of Alert Log Entries87................................................................................................................................................................
The Status Bar88................................................................................................................................................................
Setting Fault Detection Policy89................................................................................................................................................................
Overview Of Configuration File Management92................................................................................................................................................................
Using The Cli To Implement Configuration Changes94................................................................................................................................................................
Configuration Changes98................................................................................................................................................................
Using The Menu Interface To Implement Configuration Changes99................................................................................................................................................................
Rebooting From The Menu Interface100................................................................................................................................................................
Changes101................................................................................................................................................................
Using Primary And Secondary Flash Image Options102................................................................................................................................................................
Displaying The Current Flash Image Data102................................................................................................................................................................
Os Downloads104................................................................................................................................................................
Local Os Replacement And Removal105................................................................................................................................................................
Operating Notes109................................................................................................................................................................
Inbound Telnet113................................................................................................................................................................
Menu: Modifying The Interface Access114................................................................................................................................................................
Cli: Modifying The Interface Access115................................................................................................................................................................
Sessions118................................................................................................................................................................
System Information119................................................................................................................................................................
Menu: Viewing And Configuring System Information120................................................................................................................................................................
Cli: Viewing And Configuring System Information121................................................................................................................................................................
Web: Configuring System Parameters124................................................................................................................................................................
Using Friendly (optional) Port Names125................................................................................................................................................................
Configuring And Operating Rules For Friendly Port Names125................................................................................................................................................................
Configuring Friendly Port Names126................................................................................................................................................................
Displaying Friendly Port Names With Other Port Data128................................................................................................................................................................
Ip Configuration133................................................................................................................................................................
Just Want A Quick Start With Ip Addressing?134................................................................................................................................................................
Just Want A Quick Start With Ip Addressing134................................................................................................................................................................
Ip Addressing With Multiple Vlans134................................................................................................................................................................
Ip Addressing In A Stacking Environment135................................................................................................................................................................
Cli: Configuring Ip Address, Gateway, And Time-to-live (ttl)137................................................................................................................................................................
Web: Configuring Ip Addressing139................................................................................................................................................................
How Ip Addressing Affects Switch Operation139................................................................................................................................................................
Dhcp/bootp Operation140................................................................................................................................................................
Network Preparations For Configuring Dhcp/bootp143................................................................................................................................................................
File Downloads144................................................................................................................................................................
Globally Assigned Ip Network Addresses148................................................................................................................................................................
Timep Time Synchronization150................................................................................................................................................................
Sntp Time Synchronization150................................................................................................................................................................
Turning Off Time Protocol Operation151................................................................................................................................................................
Overview: Selecting A Time Synchronization Protocol Or Turning Off151................................................................................................................................................................
Time Protocol Operation151................................................................................................................................................................
Disabling Time Synchronization152................................................................................................................................................................
Sntp: Viewing, Selecting, And Configuring152................................................................................................................................................................
Menu: Viewing And Configuring Sntp153................................................................................................................................................................
Cli: Viewing And Configuring Sntp156................................................................................................................................................................
Configuring (enabling Or Disabling) The Sntp Mode157................................................................................................................................................................
Timep: Viewing, Selecting, And Configuring161................................................................................................................................................................
Menu: Viewing And Configuring Timep162................................................................................................................................................................
Cli: Viewing And Configuring Timep164................................................................................................................................................................
Configuring (enabling Or Disabling) The Timep Mode165................................................................................................................................................................
Sntp Unicast Time Polling With Multiple Sntp Servers168................................................................................................................................................................
Address Prioritization169................................................................................................................................................................
Adding And Deleting Sntp Server Addresses169................................................................................................................................................................
Addresses Configured170................................................................................................................................................................
Sntp Messages In The Event Log171................................................................................................................................................................
Viewing Port Status And Configuring Port Parameters174................................................................................................................................................................
Menu: Viewing Port Status And Configuring Port Parameters177................................................................................................................................................................
Cli: Viewing Port Status And Configuring Port Parameters178................................................................................................................................................................
Web: Viewing Port Status And Configuring Port Parameters181................................................................................................................................................................
Port Trunking182................................................................................................................................................................
Series 4100gl Switches Port Trunk Features And Operation183................................................................................................................................................................
Trunk Configuration Methods184................................................................................................................................................................
Menu: Viewing And Configuring A Static Trunk Group188................................................................................................................................................................
Trunk Group190................................................................................................................................................................
Using The Cli To Configure A Static Or Dynamic Trunk Group193................................................................................................................................................................
Web: Viewing Existing Port Trunk Groups196................................................................................................................................................................
Trunk Group Operation Using Lacp197................................................................................................................................................................
Default Port Operation199................................................................................................................................................................
Lacp Notes And Restrictions200................................................................................................................................................................
Trunk Group Operation Using The "trunk" Option202................................................................................................................................................................
Trunk Operation Using The "fec" Option202................................................................................................................................................................
How The Switch Lists Trunk Data203................................................................................................................................................................
Outbound Traffic Distribution Across Trunked Links203................................................................................................................................................................
Configuring Port-based Priority For Incoming Packets205................................................................................................................................................................
The Role Of 802.1q Vlan Tagging205................................................................................................................................................................
Outbound Port Queues And Packet Priority Settings206................................................................................................................................................................
Gl Switches207................................................................................................................................................................
Configuring And Viewing Port-based Priority208................................................................................................................................................................
Messages Related To Prioritization209................................................................................................................................................................
Troubleshooting Prioritization209................................................................................................................................................................
Using Snmp Tools To Manage The Switch212................................................................................................................................................................
Snmp Management Features213................................................................................................................................................................
Configuring For Snmp Access To The Switch213................................................................................................................................................................
Snmp Communities214................................................................................................................................................................
Menu: Viewing And Configuring Snmp Communities214................................................................................................................................................................
Cli: Viewing And Configuring Community Names216................................................................................................................................................................
Trap Receivers And Authentication Traps218................................................................................................................................................................
Advanced Management: Rmon222................................................................................................................................................................
Introduction223................................................................................................................................................................
Cdp Terminology224................................................................................................................................................................
General Cdp Operation225................................................................................................................................................................
Outgoing Packets225................................................................................................................................................................
Incoming Cdp Packets226................................................................................................................................................................
Configuring Cdp On The Switch229................................................................................................................................................................
Viewing The Switch's Current Cdp Configuration230................................................................................................................................................................
Viewing The Switch's Current Cdp Neighbors Table230................................................................................................................................................................
Clearing (resetting) The Cdp Neighbors Table231................................................................................................................................................................
Configuring Cdp Operation232................................................................................................................................................................
Effect Of Spanning Tree (stp) On Cdp Packet Transmission234................................................................................................................................................................
Outbound Cdp Packets235................................................................................................................................................................
Cdp Neighbor Data And Mib Objects236................................................................................................................................................................
Port-based Virtual Lans (static Vlans)243................................................................................................................................................................
Overview Of Using Vlans246................................................................................................................................................................
Vlan Support And The Default Vlan246................................................................................................................................................................
The Primary Vlan246................................................................................................................................................................
Per-port Static Vlan Configuration Options247................................................................................................................................................................
General Steps For Using Vlans249................................................................................................................................................................
Notes On Using Vlans249................................................................................................................................................................
Menu: Configuring Vlan Parameters250................................................................................................................................................................
Adding Or Editing Vlan Names252................................................................................................................................................................
Adding Or Changing A Vlan Port Assignment253................................................................................................................................................................
Cli: Configuring Vlan Parameters255................................................................................................................................................................
Web: Viewing And Configuring Vlan Parameters261................................................................................................................................................................
Vlan Tagging Information262................................................................................................................................................................
The Secure Management Vlan266................................................................................................................................................................
Preparation267................................................................................................................................................................
Configuration268................................................................................................................................................................
Operating Notes For Management Vlans269................................................................................................................................................................
Effect Of Vlans On Other Switch Features270................................................................................................................................................................
Spanning Tree Operation With Vlans270................................................................................................................................................................
Ip Interfaces270................................................................................................................................................................
Vlan Mac Addresses271................................................................................................................................................................
Port Trunks271................................................................................................................................................................
Port Monitoring271................................................................................................................................................................
Vlan Restrictions271................................................................................................................................................................
Gvrp273................................................................................................................................................................
General Operation274................................................................................................................................................................
Per-port Options For Handling Gvrp "unknown Vlans"276................................................................................................................................................................
Per-port Options For Handling Gvrp "unknown Vlans276................................................................................................................................................................
Per-port Options For Dynamic Vlan Advertising And Joining278................................................................................................................................................................
Gvrp And Vlan Access Control280................................................................................................................................................................
Planning For Gvrp Operation281................................................................................................................................................................
Configuring Gvrp On A Switch281................................................................................................................................................................
Menu: Viewing And Configuring Gvrp282................................................................................................................................................................
Cli: Viewing And Configuring Gvrp283................................................................................................................................................................
Web: Viewing And Configuring Gvrp286................................................................................................................................................................
Gvrp Operating Notes286................................................................................................................................................................
General Operation And Features291................................................................................................................................................................
Igmp Terms292................................................................................................................................................................
Igmp Operating Features293................................................................................................................................................................
Basic Operation293................................................................................................................................................................
Cli: Configuring And Displaying Igmp294................................................................................................................................................................
Web: Enabling Or Disabling Igmp298................................................................................................................................................................
How Igmp Operates299................................................................................................................................................................
Operation With Or Without Ip Addressing300................................................................................................................................................................
Automatic Fast-leave Igmp301................................................................................................................................................................
Forced Fast-leave Igmp302................................................................................................................................................................
Configuration Options For Forced Fast-leave303................................................................................................................................................................
Listing The Forced Fast-leave Configuration303................................................................................................................................................................
Configuring Per-port Forced Fast-leave Igmp305................................................................................................................................................................
Using The Switch As Querier306................................................................................................................................................................
Querier Operation306................................................................................................................................................................
The Switch Excludes Well-known Or Reserved Multicast Addresses From Ip Multicast Filtering307................................................................................................................................................................
Number Of Ip Multicast Addresses Allowed308................................................................................................................................................................
How Spanning Tree Operates312................................................................................................................................................................
Spanning Tree Options: Rstp (802.1w) And Stp (802.1d)313................................................................................................................................................................
Stp (802.1d)314................................................................................................................................................................
Configuring Rapid Reconfiguration Spanning Tree (rstp)315................................................................................................................................................................
Transitioning From Stp To Rstp316................................................................................................................................................................
Configuring Rstp317................................................................................................................................................................
Optimizing The Rstp Configuration317................................................................................................................................................................
Cli: Configuring Rstp318................................................................................................................................................................
Menu: Configuring Rstp324................................................................................................................................................................
Web: Enabling Or Disabling Rstp326................................................................................................................................................................
P Spanning-tree Protocol (stp)327................................................................................................................................................................
Menu: Configuring 802.1d Stp327................................................................................................................................................................
Cli: Configuring 802.1d Stp330................................................................................................................................................................
Stp Fast Mode334................................................................................................................................................................
Fast-uplink Spanning Tree Protocol (stp)335................................................................................................................................................................
Terminology337................................................................................................................................................................
Operating Rules For Fast Uplink338................................................................................................................................................................
Menu: Viewing And Configuring Fast-uplink Stp339................................................................................................................................................................
Cli: Viewing And Configuring Fast-uplink Stp345................................................................................................................................................................
Web: Enabling Or Disabling Stp349................................................................................................................................................................
Operation353................................................................................................................................................................
Which Devices Support Stacking?354................................................................................................................................................................
Which Devices Support Stacking354................................................................................................................................................................
Components Of Hp Procurve Stack Management355................................................................................................................................................................
General Stacking Operation355................................................................................................................................................................
Operating Rules For Stacking356................................................................................................................................................................
Specific Rules358................................................................................................................................................................
Configuring Stack Management359................................................................................................................................................................
Overview Of Configuring And Bringing Up A Stack359................................................................................................................................................................
Configure Stacking363................................................................................................................................................................
Using The Menu To Manage A Candidate Switch365................................................................................................................................................................
Using The Commander To Manage The Stack367................................................................................................................................................................
Using The Commander To Access Member Switches For Configuration Changes And Monitoring Traffic373................................................................................................................................................................
Another Stack374................................................................................................................................................................
Monitoring Stack Status375................................................................................................................................................................
Using The Cli To View Stack Status And Configure Stacking379................................................................................................................................................................
Using The Cli To View Stack Status381................................................................................................................................................................
Using The Cli To Configure A Commander Switch383................................................................................................................................................................
Adding To A Stack Or Moving Switches Between Stacks385................................................................................................................................................................
Using The Cli To Remove A Member From A Stack390................................................................................................................................................................
Changes And Traffic Monitoring392................................................................................................................................................................
Snmp Community Operation In A Stack393................................................................................................................................................................
Using The Cli To Disable Or Re-enable Stacking394................................................................................................................................................................
Transmission Interval394................................................................................................................................................................
Stacking Operation With Multiple Vlans Configured394................................................................................................................................................................
Web: Viewing And Configuring Stacking395................................................................................................................................................................
Status Messages396................................................................................................................................................................
Using Tftp To Download An Os Image From A Server399................................................................................................................................................................
Menu: Tftp Download From A Server To Primary Flash400................................................................................................................................................................
Secondary Flash401................................................................................................................................................................
Workstation402................................................................................................................................................................
Menu: Xmodem Download To Primary Flash403................................................................................................................................................................
Primary Or Secondary Flash404................................................................................................................................................................
Switch-to-switch Download405................................................................................................................................................................
Cli: Switch-to-switch Downloads406................................................................................................................................................................
Using The Hp Toptools For Hubs & Switches Utility407................................................................................................................................................................
Troubleshooting Tftp Downloads408................................................................................................................................................................
Transferring Switch Configurations409................................................................................................................................................................
Unix Workstation412................................................................................................................................................................
Copying Event Log Output To A Destination Device413................................................................................................................................................................
Copying Crash Log Data Content To A Destination Device414................................................................................................................................................................
Status And Counters Data417................................................................................................................................................................
Menu Access To Status And Counters418................................................................................................................................................................
General System Information419................................................................................................................................................................
Switch Management Address Information420................................................................................................................................................................
Module Information421................................................................................................................................................................
Viewing Port And Trunk Group Statistics And Flow Control Status423................................................................................................................................................................
Menu Access To Port And Trunk Statistics424................................................................................................................................................................
Cli Access To Port And Trunk Group Statistics425................................................................................................................................................................
Viewing The Switch's Mac Address Tables426................................................................................................................................................................
Menu Access To The Mac Address Views And Searches427................................................................................................................................................................
Cli Access For Mac Address Views And Searches429................................................................................................................................................................
Spanning Tree Protocol (stp) Information431................................................................................................................................................................
Cli Access To Stp Data432................................................................................................................................................................
Internet Group Management Protocol (igmp) Status433................................................................................................................................................................
Vlan Information434................................................................................................................................................................
Web Browser Interface Status Information436................................................................................................................................................................
Port And Static Trunk Monitoring Features437................................................................................................................................................................
Menu: Configuring Port And Static Trunk Monitoring438................................................................................................................................................................
Cli: Configuring Port And Static Trunk Monitoring440................................................................................................................................................................
Web: Configuring Port Monitoring442................................................................................................................................................................
Troubleshooting Approaches445................................................................................................................................................................
Browser Or Telnet Access Problems446................................................................................................................................................................
Unusual Network Activity448................................................................................................................................................................
Prioritization Problems449................................................................................................................................................................
Igmp-related Problems450................................................................................................................................................................
Lacp-related Problems451................................................................................................................................................................
Radius-related Problems454................................................................................................................................................................
Spanning-tree Protocol (stp) And Fast-uplink Problems456................................................................................................................................................................
Ssh-related Problems457................................................................................................................................................................
Stacking-related Problems458................................................................................................................................................................
Timep, Sntp, Or Gateway Problems460................................................................................................................................................................
Using The Event Log To Identify Problem Sources463................................................................................................................................................................
Menu: Entering And Navigating In The Event Log464................................................................................................................................................................
Cli:465................................................................................................................................................................
Diagnostic Tools466................................................................................................................................................................
Web: Executing Ping Or Link Tests468................................................................................................................................................................
Cli: Ping Or Link Tests469................................................................................................................................................................
Displaying The Configuration File471................................................................................................................................................................
Troubleshooting472................................................................................................................................................................
Web: Viewing The Configuration File474................................................................................................................................................................
Cli Administrative And Troubleshooting Commands475................................................................................................................................................................
Restoring The Factory-default Configuration476................................................................................................................................................................
Restoring A Flash Image477................................................................................................................................................................
Mac Address Management481................................................................................................................................................................
Determining Mac Addresses482................................................................................................................................................................
Menu: Viewing The Switch's Mac Addresses483................................................................................................................................................................
Cli: Viewing The Port And Vlan Mac Addresses484................................................................................................................................................................
HP Procurve Series 4100GL Function Manual

HP Procurve Series 4100GL Function Manual (306 pages)

Access Security Guide ProCurve 2600, 2600-PWR, 2800, 4100, 6108 Series  
Brand: HP | Category: Switch | Size: 2.18 MB
Table of contents
Access Security Guide1................................................................................................................................................................
Table Of Contents5................................................................................................................................................................
Product Documentation13................................................................................................................................................................
About Your Switch Manual Set13................................................................................................................................................................
Feature Index14................................................................................................................................................................
Contents17................................................................................................................................................................
Getting Started18................................................................................................................................................................
Introduction18................................................................................................................................................................
Overview Of Access Security Features18................................................................................................................................................................
Management Access Security Protection19................................................................................................................................................................
General Switch Traffic Security Guidelines20................................................................................................................................................................
Conventions21................................................................................................................................................................
Feature Descriptions By Model21................................................................................................................................................................
Command Syntax Statements21................................................................................................................................................................
Command Prompts22................................................................................................................................................................
Screen Simulations22................................................................................................................................................................
Port Identity Examples22................................................................................................................................................................
Sources For More Information23................................................................................................................................................................
Need Only A Quick Start24................................................................................................................................................................
Ip Addressing24................................................................................................................................................................
To Set Up And Install The Switch In Your Network25................................................................................................................................................................
Configuring Username And Password Security28................................................................................................................................................................
Overview28................................................................................................................................................................
Configuring Local Password Security30................................................................................................................................................................
Menu: Setting Passwords30................................................................................................................................................................
Cli: Setting Passwords And Usernames31................................................................................................................................................................
Web: Setting Passwords And Usernames32................................................................................................................................................................
Front-panel Security33................................................................................................................................................................
When Security Is Important33................................................................................................................................................................
Front-panel Button Functions34................................................................................................................................................................
Configuring Front-panel Security36................................................................................................................................................................
Password Recovery41................................................................................................................................................................
Password Recovery Process43................................................................................................................................................................
Web And Mac Authentication For The Series 2600/2600-pwr And 2800 Switches45................................................................................................................................................................
Client Options47................................................................................................................................................................
General Features48................................................................................................................................................................
How Web And Mac Authentication Operate49................................................................................................................................................................
Authenticator Operation49................................................................................................................................................................
Terminology53................................................................................................................................................................
Operating Rules And Notes54................................................................................................................................................................
General Setup Procedure For Web/mac Authentication56................................................................................................................................................................
Do These Steps Before You Configure Web/mac Authentication56................................................................................................................................................................
Additional Information For Configuring The Radius Server To Support Mac Authentication58................................................................................................................................................................
Configuring The Switch To Access A Radius Server59................................................................................................................................................................
Configuring Web Authentication61................................................................................................................................................................
Configure The Switch For Web-based Authentication62................................................................................................................................................................
Configuring Mac Authentication On The Switch66................................................................................................................................................................
Configure The Switch For Mac-based Authentication67................................................................................................................................................................
Show Status And Configuration Of Web-based Authentication70................................................................................................................................................................
Show Status And Configuration Of Mac-based Authentication71................................................................................................................................................................
Show Client Status73................................................................................................................................................................
Tacacs+ Authentication75................................................................................................................................................................
Terminology Used In Tacacs Applications77................................................................................................................................................................
General System Requirements79................................................................................................................................................................
General Authentication Setup Procedure79................................................................................................................................................................
Configuring Tacacs+ On The Switch82................................................................................................................................................................
Before You Begin82................................................................................................................................................................
Cli Commands Described In This Section83................................................................................................................................................................
Viewing The Switch's Current Authentication Configuration83................................................................................................................................................................
Viewing The Switch's Current Tacacs+ Server Contact Configuration84................................................................................................................................................................
Configuring The Switch's Authentication Methods85................................................................................................................................................................
Configuring The Switch's Tacacs+ Server Access89................................................................................................................................................................
How Authentication Operates94................................................................................................................................................................
General Authentication Process Using A Tacacs+ Server94................................................................................................................................................................
Local Authentication Process96................................................................................................................................................................
Using The Encryption Key97................................................................................................................................................................
Controlling Web Browser Interface Access When Using Tacacs+ Authentication98................................................................................................................................................................
Controlling Web Browser Interface Access When Using Tacacs98................................................................................................................................................................
Authentication98................................................................................................................................................................
Messages Related To Tacacs+ Operation99................................................................................................................................................................
Operating Notes99................................................................................................................................................................
Radius Authentication And Accounting101................................................................................................................................................................
Switch Operating Rules For Radius104................................................................................................................................................................
General Radius Setup Procedure105................................................................................................................................................................
Configuring The Switch For Radius Authentication106................................................................................................................................................................
Outline Of The Steps For Configuring Radius Authentication107................................................................................................................................................................
Configure Authentication For The Access Methods You Want Radius108................................................................................................................................................................
To Protect108................................................................................................................................................................
Configure Authentication For The Access Methods You Want108................................................................................................................................................................
Configure The Switch To Access A Radius Server110................................................................................................................................................................
Configure The Switch's Global Radius Parameters112................................................................................................................................................................
Controlling Web Browser Interface Access When Using Radius Authentication117................................................................................................................................................................
Configuring Radius Accounting117................................................................................................................................................................
Operating Rules For Radius Accounting119................................................................................................................................................................
Steps For Configuring Radius Accounting119................................................................................................................................................................
Reports To The Radius Server122................................................................................................................................................................
Viewing Radius Statistics125................................................................................................................................................................
General Radius Statistics125................................................................................................................................................................
Radius Authentication Statistics127................................................................................................................................................................
Radius Accounting Statistics128................................................................................................................................................................
Changing Radius-server Access Order129................................................................................................................................................................
Messages Related To Radius Operation131................................................................................................................................................................
Configuring Secure Shell (ssh)133................................................................................................................................................................
Prerequisite For Using Ssh137................................................................................................................................................................
Public Key Formats137................................................................................................................................................................
Steps For Configuring And Using Ssh For Switch And Client Authentication138................................................................................................................................................................
General Operating Rules And Notes140................................................................................................................................................................
Configuring The Switch For Ssh Operation141................................................................................................................................................................
Assign Local Login (operator) And Enable (manager) Password141................................................................................................................................................................
Generate The Switch's Public And Private Key Pair142................................................................................................................................................................
Provide The Switch's Public Key To Clients144................................................................................................................................................................
Enable Ssh On The Switch And Anticipate Ssh Client Contact Behavior147................................................................................................................................................................
Enable Ssh On The Switch And Anticipate Ssh Client147................................................................................................................................................................
Configure The Switch For Ssh Authentication150................................................................................................................................................................
Use An Ssh Client To Access The Switch153................................................................................................................................................................
Further Information On Ssh Client Public-key Authentication153................................................................................................................................................................
Messages Related To Ssh Operation159................................................................................................................................................................
Configuring Secure Socket Layer (ssl)161................................................................................................................................................................
Prerequisite For Using Ssl165................................................................................................................................................................
Steps For Configuring And Using Ssl For Switch And Client Authentication165................................................................................................................................................................
Configuring The Switch For Ssl Operation167................................................................................................................................................................
Generate The Switch's Server Host Certificate169................................................................................................................................................................
Comments On Certificate Fields171................................................................................................................................................................
Enable Ssl On The Switch And Anticipate Ssl Browser Contact177................................................................................................................................................................
Behavior181................................................................................................................................................................
Common Errors In Ssl Setup181................................................................................................................................................................
Configuring Port-based Access Control (802.1x)183................................................................................................................................................................
Why Use Port-based Access Control185................................................................................................................................................................
How 802.1x Operates188................................................................................................................................................................
Switch-port Supplicant Operation189................................................................................................................................................................
General Setup Procedure For Port-based Access Control (802.1x)194................................................................................................................................................................
Do These Steps Before You Configure 802.1x Operation194................................................................................................................................................................
Overview: Configuring 802.1x Authentication On The Switch195................................................................................................................................................................
Configuring Switch Ports As 802.1x Authenticators197................................................................................................................................................................
Enable 802.1x Authentication On Selected Ports197................................................................................................................................................................
Configure The 802.1x Authentication Method201................................................................................................................................................................
Enter The Radius Host Ip Address(es)202................................................................................................................................................................
Enable 802.1x Authentication On The Switch202................................................................................................................................................................
802.1x Open Vlan Mode203................................................................................................................................................................
Use Models For 802.1x Open Vlan Modes204................................................................................................................................................................
Operating Rules For Authorized-client And Unauthorized-client Vlans207................................................................................................................................................................
Setting Up And Configuring 802.1x Open Vlan Mode209................................................................................................................................................................
802.1x Open Vlan Operating Notes213................................................................................................................................................................
Option For Authenticator Ports: Configure Port-security To Allow Only 802.1x Devices214................................................................................................................................................................
Configuring Switch Ports To Operate As Supplicants For 802.1x Connections To Other Switches216................................................................................................................................................................
Displaying 802.1x Configuration, Statistics, And Counters220................................................................................................................................................................
Show Commands For Port-access Authenticator220................................................................................................................................................................
Viewing 802.1x Open Vlan Mode Status222................................................................................................................................................................
Show Commands For Port-access Supplicant225................................................................................................................................................................
How Radius/802.1x Authentication Affects Vlan Operation226................................................................................................................................................................
Messages Related To 802.1x Operation230................................................................................................................................................................
Configuring And Monitoring Port Security231................................................................................................................................................................
Basic Operation232................................................................................................................................................................
Blocking Unauthorized Traffic233................................................................................................................................................................
Trunk Group Exclusion234................................................................................................................................................................
Planning Port Security235................................................................................................................................................................
Port Security Command Options And Operation236................................................................................................................................................................
Retention Of Static Mac Addresses240................................................................................................................................................................
Displaying Current Port Security Settings240................................................................................................................................................................
Configuring Port Security242................................................................................................................................................................
Mac Lockdown247................................................................................................................................................................
Differences Between Mac Lockdown And Port Security249................................................................................................................................................................
Deploying Mac Lockdown251................................................................................................................................................................
Mac Lockout255................................................................................................................................................................
Port Security And Mac Lockout257................................................................................................................................................................
Ip Lockdown258................................................................................................................................................................
Web: Displaying And Configuring Port Security Features259................................................................................................................................................................
Reading Intrusion Alerts And Resetting Alert Flags259................................................................................................................................................................
Notice Of Security Violations259................................................................................................................................................................
How The Intrusion Log Operates260................................................................................................................................................................
Keeping The Intrusion Log Current By Resetting Alert Flags261................................................................................................................................................................
Using The Event Log To Find Intrusion Alerts266................................................................................................................................................................
Web: Checking For Intrusions, Listing Intrusion Alerts, And Resetting Alert Flags266................................................................................................................................................................
Operating Notes For Port Security267................................................................................................................................................................
Traffic/security Filters (procurve Series 2600/2600-pwr And 2800 Switches)270................................................................................................................................................................
Using Source-port Filters272................................................................................................................................................................
Operating Rules For Source-port Filters272................................................................................................................................................................
Configuring A Source-port Filter273................................................................................................................................................................
Viewing A Source-port Filter275................................................................................................................................................................
Filter Indexing276................................................................................................................................................................
Editing A Source-port Filter277................................................................................................................................................................
Using Named Source-port Filters278................................................................................................................................................................
Using Authorized Ip Managers288................................................................................................................................................................
Configuration Options289................................................................................................................................................................
Access Levels289................................................................................................................................................................
Defining Authorized Management Stations290................................................................................................................................................................
Overview Of Ip Mask Operation290................................................................................................................................................................
Menu: Viewing And Configuring Ip Authorized Managers291................................................................................................................................................................
Cli: Viewing And Configuring Authorized Ip Managers292................................................................................................................................................................
Configuring Ip Authorized Managers For The Switch293................................................................................................................................................................
Web: Configuring Ip Authorized Managers295................................................................................................................................................................
Building Ip Masks295................................................................................................................................................................
Configuring One Station Per Authorized Manager Ip Entry295................................................................................................................................................................
Configuring Multiple Stations Per Authorized Manager Ip Entry296................................................................................................................................................................
Additional Examples For Authorizing Multiple Stations297................................................................................................................................................................

Advertisement

HP Procurve Series 4100GL Manual

HP Procurve Series 4100GL Manual (300 pages)

Access Security Guide  
Brand: HP | Category: Switch | Size: 3.68 MB
Table of contents
Table Of Contents5................................................................................................................................................................
Getting Started14................................................................................................................................................................
Introduction And Applicable Switches14................................................................................................................................................................
About The Feature Descriptions14................................................................................................................................................................
Overview Of Access Security Features15................................................................................................................................................................
General Switch Traffic Security Guideline17................................................................................................................................................................
Command Syntax Conventions18................................................................................................................................................................
Simulating Display Output18................................................................................................................................................................
Command Prompts18................................................................................................................................................................
Screen Simulations19................................................................................................................................................................
Port Identity Convention For Examples19................................................................................................................................................................
Related Publications19................................................................................................................................................................
Getting Documentation From The Web21................................................................................................................................................................
Sources For More Information22................................................................................................................................................................
Need Only A Quick Start23................................................................................................................................................................
To Set Up And Install The Switch In Your Network23................................................................................................................................................................
Contents25................................................................................................................................................................
Configuring Username And Password Security26................................................................................................................................................................
Overview26................................................................................................................................................................
Configuring Local Password Security28................................................................................................................................................................
Menu: Setting Passwords28................................................................................................................................................................
Cli: Setting Passwords And Usernames29................................................................................................................................................................
Web: Setting Passwords And Usernames30................................................................................................................................................................
Front-panel Security31................................................................................................................................................................
When Security Is Important31................................................................................................................................................................
Front-panel Button Functions33................................................................................................................................................................
Configuring Front-panel Security36................................................................................................................................................................
Password Recovery41................................................................................................................................................................
Password Recovery Process43................................................................................................................................................................
Web And Mac Authentication For The Series 2600/2600-pwr And 2800 Switches45................................................................................................................................................................
Client Options47................................................................................................................................................................
General Features48................................................................................................................................................................
How Web And Mac Authentication Operate49................................................................................................................................................................
Authenticator Operation49................................................................................................................................................................
Terminology53................................................................................................................................................................
Operating Rules And Notes54................................................................................................................................................................
General Setup Procedure For Web/mac Authentication56................................................................................................................................................................
Do These Steps Before You Configure Web/mac Authentication56................................................................................................................................................................
Additional Information For Configuring The Radius Server To Support Mac Authentication58................................................................................................................................................................
Configuring The Switch To Access A Radius Server59................................................................................................................................................................
Configuring Web Authentication On The Switch61................................................................................................................................................................
Configure The Switch For Web-based Authentication62................................................................................................................................................................
Configuring Mac Authentication On The Switch66................................................................................................................................................................
Configure The Switch For Mac-based Authentication67................................................................................................................................................................
Show Status And Configuration Of Web-based Authentication70................................................................................................................................................................
Show Status And Configuration Of Mac-based Authentication72................................................................................................................................................................
Client Status74................................................................................................................................................................
Tacacs+ Authentication76................................................................................................................................................................
Terminology Used In Tacacs Applications77................................................................................................................................................................
General System Requirements79................................................................................................................................................................
General Authentication Setup Procedure79................................................................................................................................................................
Configuring Tacacs+ On The Switch82................................................................................................................................................................
Beforeyou Begin82................................................................................................................................................................
Cli Commands Described In This Section83................................................................................................................................................................
Viewing The Switch's Current Authentication Configuration83................................................................................................................................................................
Viewing The Switch's Current Tacacs+ Server Contact Configuration84................................................................................................................................................................
Configuring The Switch's Authentication Methods85................................................................................................................................................................
Configuring The Switch's Tacacs+ Server Access89................................................................................................................................................................
How Authentication Operates94................................................................................................................................................................
General Authentication Process Using A Tacacs+ Server94................................................................................................................................................................
Local Authentication Process96................................................................................................................................................................
Using The Encryption Key97................................................................................................................................................................
Controlling Web Browser Interface Access When Using Tacacs+ Authentication98................................................................................................................................................................
Controlling Web Browser Interface Access When Using Tacacs98................................................................................................................................................................
Authentication98................................................................................................................................................................
Messages Related To Tacacs+ Operation99................................................................................................................................................................
Operating Notes99................................................................................................................................................................
Radius Authentication And Accounting101................................................................................................................................................................
Switch Operating Rules For Radius104................................................................................................................................................................
General Radius Setup Procedure105................................................................................................................................................................
Configuring The Switch For Radius Authentication106................................................................................................................................................................
Outline Of The Steps For Configuring Radius Authentication106................................................................................................................................................................
Configure Authentication For The Access Methods You Want Radius108................................................................................................................................................................
To Protect108................................................................................................................................................................
Configure The Switch To Access A Radius Server110................................................................................................................................................................
Configure The Switch's Global Radius Parameters112................................................................................................................................................................
Controlling Web Browser Interface Access When Using Radius Authentication117................................................................................................................................................................
Configuring Radius Accounting117................................................................................................................................................................
Operating Rules For Radius Accounting119................................................................................................................................................................
Steps For Configuring Radius Accounting119................................................................................................................................................................
Reports To The Radius Server122................................................................................................................................................................
Viewing Radius Statistics125................................................................................................................................................................
General Radius Statistics125................................................................................................................................................................
Radius Authentication Statistics127................................................................................................................................................................
Radius Accounting Statistics128................................................................................................................................................................
Changing Radius-server Access Order129................................................................................................................................................................
Messages Related To Radius Operation131................................................................................................................................................................
Configuring Secure Shell (ssh)133................................................................................................................................................................
Prerequisite For Using Ssh137................................................................................................................................................................
Public Key Formats137................................................................................................................................................................
Steps For Configuring And Using Ssh For Switch And Client Authentication138................................................................................................................................................................
General Operating Rules And Notes140................................................................................................................................................................
Configuring The Switch For Ssh Operation141................................................................................................................................................................
Assigning A Local Login (operator) And Enable (manager) Password141................................................................................................................................................................
Generating The Switch's Public And Private Key Pair142................................................................................................................................................................
Providing The Switch's Public Key To Clients144................................................................................................................................................................
Enabling Ssh On The Switch And Anticipating Ssh Client Contact147................................................................................................................................................................
Behavior147................................................................................................................................................................
Configuring The Switch For Ssh Authentication150................................................................................................................................................................
Use An Ssh Client To Access The Switch153................................................................................................................................................................
Further Information On Ssh Client Public-key Authentication153................................................................................................................................................................
Messages Related To Ssh Operation159................................................................................................................................................................
Configuring Secure Socket Layer (ssl)161................................................................................................................................................................
Prerequisite For Using Ssl165................................................................................................................................................................
Steps For Configuring And Using Ssl For Switch And Client Authentication165................................................................................................................................................................
Configuring The Switch For Ssl Operation167................................................................................................................................................................
Assigning A Local Login (operator) And Enable (manager)password167................................................................................................................................................................
Generating The Switch's Server Host Certificate169................................................................................................................................................................
Comments On Certificate Fields171................................................................................................................................................................
Enabling Ssl On The Switch And Anticipating Ssl Browser Contact177................................................................................................................................................................
Common Errors In Ssl Setup181................................................................................................................................................................
Configuring Port-based Access Control (802.1x)183................................................................................................................................................................
Why Use Port-based Access Control185................................................................................................................................................................
How 802.1x Operates188................................................................................................................................................................
Switch-port Supplicant Operation189................................................................................................................................................................
General Setup Procedure For Port-based Access Control (802.1x)194................................................................................................................................................................
Do These Steps Before You Configure 802.1x Operation194................................................................................................................................................................
Overview: Configuring 802.1x Authentication On The Switch195................................................................................................................................................................
Configuring Switch Ports As 802.1x Authenticators197................................................................................................................................................................
Enable 802.1x Authentication On Selected Ports197................................................................................................................................................................
Configure The 802.1x Authentication Method201................................................................................................................................................................
Enter The Radius Host Ip Address(es)202................................................................................................................................................................
Enable 802.1x Authentication On The Switch202................................................................................................................................................................
802.1x Open Vlan Mode203................................................................................................................................................................
Introduction203................................................................................................................................................................
Use Models For 802.1x Open Vlan Modes204................................................................................................................................................................
Operating Rules For Authorized-client And Unauthorized-client Vlans207................................................................................................................................................................
Setting Up And Configuring 802.1x Open Vlan Mode209................................................................................................................................................................
802.1x Open Vlan Operating Notes213................................................................................................................................................................
Option For Authenticator Ports: Configure Port-security To Allow Only214................................................................................................................................................................
802.1x Devices214................................................................................................................................................................
To Other Switches216................................................................................................................................................................
Displaying 802.1x Configuration, Statistics, And Counters220................................................................................................................................................................
Show Commands For Port-access Authenticator220................................................................................................................................................................
Viewing 802.1x Open Vlan Mode Status222................................................................................................................................................................
Show Commands For Port-access Supplicant225................................................................................................................................................................
How Radius/802.1x Authentication Affects Vlan Operation226................................................................................................................................................................
Messages Related To 802.1x Operation230................................................................................................................................................................
Configuring And Monitoring Port Security231................................................................................................................................................................
Basic Operation232................................................................................................................................................................
Blocking Unauthorized Traffic233................................................................................................................................................................
Trunk Group Exclusion234................................................................................................................................................................
Planning Port Security235................................................................................................................................................................
Port Security Command Options And Operation236................................................................................................................................................................
Retention Of Static Mac Addresses240................................................................................................................................................................
Displaying Current Port Security Settings240................................................................................................................................................................
Configuring Port Security242................................................................................................................................................................
Mac Lockdown247................................................................................................................................................................
Differences Between Mac Lockdown And Port Security249................................................................................................................................................................
Deploying Mac Lockdown251................................................................................................................................................................
Mac Lockout255................................................................................................................................................................
Port Security And Mac Lockout257................................................................................................................................................................
Web: Displaying And Configuring Port Security Features257................................................................................................................................................................
Reading Intrusion Alerts And Resetting Alert Flags258................................................................................................................................................................
Notice Of Security Violations258................................................................................................................................................................
How The Intrusion Log Operates259................................................................................................................................................................
Keeping The Intrusion Log Current By Resetting Alert Flags259................................................................................................................................................................
Using The Event Log To Find Intrusion Alerts265................................................................................................................................................................
Web: Checking For Intrusions, Listing Intrusion Alerts, And Resetting265................................................................................................................................................................
Alert Flags266................................................................................................................................................................
Operating Notes For Port Security266................................................................................................................................................................
Traffic/security Filters269................................................................................................................................................................
(hp Procurve Series 2600/2600-pwr And 2800 Switches)269................................................................................................................................................................
Using Source-port Filters272................................................................................................................................................................
Operating Rules For Source-port Filters272................................................................................................................................................................
Configuring A Source-port Filter273................................................................................................................................................................
Viewing A Source-port Filter275................................................................................................................................................................
Filter Indexing276................................................................................................................................................................
Editing A Source-port Filter277................................................................................................................................................................
Using Authorized Ip Managers280................................................................................................................................................................
Options281................................................................................................................................................................
Access Levels281................................................................................................................................................................
Defining Authorized Management Stations282................................................................................................................................................................
Overview Of Ip Mask Operation282................................................................................................................................................................
Menu: Viewing And Configuring Ip Authorized Managers283................................................................................................................................................................
Cli: Viewing And Configuring Authorized Ip Managers284................................................................................................................................................................
Configuring Ip Authorized Managers For The Switch285................................................................................................................................................................
Web: Configuring Ip Authorized Managers287................................................................................................................................................................
Building Ip Masks287................................................................................................................................................................
Configuring One Station Per Authorized Manager Ip Entry287................................................................................................................................................................
Configuring Multiple Stations Per Authorized Manager Ip Entry289................................................................................................................................................................
Additional Examples For Authorizing Multiple Stations291................................................................................................................................................................
HP Procurve Series 4100GL Installation And Getting Started Manual

HP Procurve Series 4100GL Installation And Getting Started Manual (90 pages)

Brand: HP | Category: Switch | Size: 6.8 MB
Table of contents
Table Of Contents5................................................................................................................................................................
Introducing The Hp Procurve Series 4100gl Switches9................................................................................................................................................................
Front Of The Switch11................................................................................................................................................................
Leds12................................................................................................................................................................
Led Mode Select Button And Indicator Leds14................................................................................................................................................................
Console Port15................................................................................................................................................................
Reset Button15................................................................................................................................................................
Clear Button15................................................................................................................................................................
Back Of The Switch16................................................................................................................................................................
Power Connector16................................................................................................................................................................
Slot For Redundant Power Supply16................................................................................................................................................................
Switch Features17................................................................................................................................................................
Installing The Series 4100gl Switches19................................................................................................................................................................
Included Parts19................................................................................................................................................................
Installation Procedures20................................................................................................................................................................
Summary20................................................................................................................................................................
Installation Precautions21................................................................................................................................................................
Installation Precautions (continued)22................................................................................................................................................................
Prepare The Installation Site23................................................................................................................................................................
Cabling Infrastructure23................................................................................................................................................................
Installation Location24................................................................................................................................................................
Install Switch Modules25................................................................................................................................................................
Optional) Install Second Power Supply27................................................................................................................................................................
Verify The Switch Passes Self Test29................................................................................................................................................................
Led Behavior30................................................................................................................................................................
Mount The Switch31................................................................................................................................................................
Rack Or Cabinet Mounting31................................................................................................................................................................
Horizontal Surface Mounting34................................................................................................................................................................
Wall Mounting35................................................................................................................................................................
Connect The Switch To A Power Source36................................................................................................................................................................
Connect The Network Devices36................................................................................................................................................................
Optional) Connect A Console To The Switch37................................................................................................................................................................
Terminal Configuration37................................................................................................................................................................
Direct Console Access38................................................................................................................................................................
Telnet Console Access38................................................................................................................................................................
Hot Swapping Switch Modules39................................................................................................................................................................
Adding Or Replacing Modules39................................................................................................................................................................
Changing The Module Type39................................................................................................................................................................
Example Network Topologies40................................................................................................................................................................
Basic Connectivity40................................................................................................................................................................
Use As An Edge Switch41................................................................................................................................................................
Stacking The Switches42................................................................................................................................................................
Getting Started With Switch Configuration43................................................................................................................................................................
Recommended Minimal Configuration43................................................................................................................................................................
Using The Switch Setup Screen44................................................................................................................................................................
Where To Go From Here46................................................................................................................................................................
Using The Ip Address For Remote Switch Management47................................................................................................................................................................
Starting A Telnet Session47................................................................................................................................................................
Starting A Web Browser Session47................................................................................................................................................................
Troubleshooting49................................................................................................................................................................
Basic Troubleshooting Tips49................................................................................................................................................................
Diagnosing With The Leds52................................................................................................................................................................
Diagnostic Tips53................................................................................................................................................................
Proactive Networking57................................................................................................................................................................
Hardware Diagnostic Tests58................................................................................................................................................................
Testing The Switch By Resetting It58................................................................................................................................................................
Checking The Switch Leds58................................................................................................................................................................
Checking Console Messages58................................................................................................................................................................
Testing Twisted-pair Cabling59................................................................................................................................................................
Testing Switch-to-device Network Communications59................................................................................................................................................................
Testing End-to-end Network Communications59................................................................................................................................................................
Restoring The Factory Default Configuration60................................................................................................................................................................
Downloading New Code61................................................................................................................................................................
Hp Customer Support Services61................................................................................................................................................................
Before Calling Support61................................................................................................................................................................
Physical63................................................................................................................................................................
Electrical63................................................................................................................................................................
Environmental63................................................................................................................................................................
Acoustic64................................................................................................................................................................
Switch 4108gl And Switch 4108gl Bundle64................................................................................................................................................................
Switch 4104gl And Switch 4148gl64................................................................................................................................................................
Network Connectors64................................................................................................................................................................
Safety64................................................................................................................................................................
B Switch Ports And Network Cables65................................................................................................................................................................
Switch Ports65................................................................................................................................................................
Twisted Pair65................................................................................................................................................................
Fiber-optic65................................................................................................................................................................
Cables66................................................................................................................................................................
Twisted-pair Cable/connector Pin-outs67................................................................................................................................................................
Straight-through Twisted-pair Cable For 10 Mbps Or 100 Mbps Network Connections69................................................................................................................................................................
Cable Diagram69................................................................................................................................................................
Pin Assignments69................................................................................................................................................................
Crossover Twisted-pair Cable For 10 Mbps Or 100 Mbps Network Connection70................................................................................................................................................................
Straight-through Twisted-pair Cable For 1000 Mbps Network Connections71................................................................................................................................................................
C Safety And Emc Regulatory Statements73................................................................................................................................................................
Hinweise Zur Sicherheit75................................................................................................................................................................
Considerazioni Sulla Sicurezza76................................................................................................................................................................
Consideraciones Sobre Seguridad77................................................................................................................................................................
Safety Information78................................................................................................................................................................
Emc Regulatory Statements80................................................................................................................................................................
Regulatory Model Identification Number81................................................................................................................................................................
European Community82................................................................................................................................................................
Declaration Of Conformity82................................................................................................................................................................
Index83................................................................................................................................................................

Share and save

Advertisement