Page 1 Management and Configuration Guide Switch 2600 Series Switch 2600-PWR Series Switch 2800 Series Switch 4100 Series Switch 6108 www.hp.com/go/hpprocurve...
Page 3 HP ProCurve Switch 2600 Series Switch 2600-PWR Series Switch 2800 Series Switch 4100gl Series Switch 6108 October 2004 Management and Configuration Guide...
Page 4 October 2004 consequential damages in connection with the furnishing, performance, or use of this material. Applicable Products The only warranties for HP products and services are set forth in the express warranty statements accompanying HP ProCurve Switch 2626 (J4900A) such products and services. Nothing herein should be...
Page 5: Table Of Contents
HP ProCurve Manager Plus ........
Page 6 CLI Control and Editing ......... 4-16 5 Using the HP Web Browser Interface Contents .
Page 7 If You Lose a Password ........5-11 Online Help for the HP Web Browser Interface ....5-11 Support/Mgmt URLs Feature .
Page 8 Using Primary and Secondary Flash Image Options ....6-12 Displaying the Current Flash Image Data ..... . 6-12 Switch Software Downloads .
Page 9 Operating Rules for IP Preserve ......8-16 9 Time Protocols Contents ............9-1 Overview .
Page 10 Using the CLI To Configure a Broadcast Limit ....10-11 Configuring HP Auto-MDIX ......10-13 Manual Auto-MDIX Override on the Series 2600/2600-PWR and 2800 Switches .
Page 11 11 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Contents ............11-1 Applicable Switch Models .
Page 12 Trunk Configuration Methods ....... . 12-5 Menu: Viewing and Configuring a Static Trunk Group ... 12-10 CLI: Viewing and Configuring a Static or Dynamic Port Trunk Group .
Page 13 General CDP Operation ........13-27 Outgoing Packets .
Page 14 Using HP PCM+ to Update Switch Software ....A-16 Troubleshooting TFTP Downloads ......A-17 Transferring Switch Configurations .
Page 15 VLAN Information ......... B-21 Web Browser Interface Status Information .
Page 16 Series 2600/2600-PWR, 2800 and 4100gl Switches ....D-6 E Daylight Savings Time on HP ProCurve Switches Configuring Daylight Savings Time ....... E-1...
Page 17 Getting Started Contents Introduction ........... 1-2 About the Feature Descriptions .
Page 18: Getting Started
“Related Publications” on page 1-4. The Product Documentation CD-ROM shipped with the switch includes a copy of this guide. You can also download a copy from the HP ProCurve website, http://www.hp.com/go/hpprocurve. (See “Getting Documentation From the Web” on page 1-6.)
Page 19: Conventions
HP ProCurve Switch 4104# HP ProCurve Switch 4108# HP ProCurve Switch 2626# HP ProCurve Switch 2650# HP ProCurve Switch 6108# To simplify recognition, this guide uses HPswitch to represent command prompts for all models. For example: HPswitch# (You can use the hostname command to change the text in the CLI prompt.)
Page 20 A PDF version of this guide is also provided on the Product Documentation CD-ROM shipped with the switch. And you can download a copy from the HP ProCurve website. (See “Getting Documentation From the Web” on page 1-6.)
Page 21 Authorized IP Managers HP provides a PDF version of this guide on the Product Documentation CD-ROM shipped with the switch. You can also download a copy from the HP ProCurve website. (See “Getting Documentation From the Web” on page 1-6.) Release Notes.
Page 22: Getting Documentation From The Web
1. Go to the HP ProCurve website at http://www.hp.com/go/hpprocurve Click on technical support. Click on manuals. Click on the product for which you want to view or download a manual. Figure 1-2. Finding Product Manuals on the HP ProCurve Website...
Page 23: Sources For More Information
“help”. For example: Figure 1-4. Getting Help in the CLI If you need information on specific features in the HP Web Browser Interface (hereafter referred to as the “web browser interface”), use the online help available for the web browser interface. For more information on web browser Help options, refer to “Online Help for...
Page 24: Need Only A Quick Start
If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing. To do so, do one of the following: Enter setup at the CLI Manager level prompt.
Page 25 HP ProCurve Manager Plus ........
Page 26: Selecting A Management Interface
VLAN management. (HP includes a copy of PCM+ in-box for a free 30-day trial.) This manual describes how to use the menu interface (chapter 3), the CLI (chapter 4), the web browser interface (chapter 5), and how to use these interfaces to configure and monitor the switch.
Page 27: Advantages Of Using The Menu Interface
Selecting a Management Interface Advantages of Using the Menu Interface To use HP ProCurve Manager or HP ProCurve Manager Plus, refer to the Getting Started Guide and the Administrator’s Guide, which are available electronically with the software for these applications. For more information, visit the HP ProCurve web site at http://www.hp.com/go/hpprocurve.
Page 28: Advantages Of Using The Cli
Selecting a Management Interface Advantages of Using the CLI Offers out-of-band access (through the RS-232 connection) to the switch, so network bottlenecks, crashes, lack of configured or correct IP address, and network downtime do not slow or prevent access Enables Telnet (in-band) access to the menu functionality. Allows faster navigation, avoiding delays that occur with slower display of graphical objects over a web browser interface.
Page 29: Advantages Of Using The Hp Web Browser Interface
Help provided in the CLI interface. Advantages of Using the HP Web Browser Interface Figure 2-3. Example of the HP Web Browser Interface Easy access to the switch from anywhere on the network Familiar browser interface--locations of window objects consistent...
Page 30: Advantages Of Using Hp Procurve Manager Or Hp Procurve Manager Plus
Advantages of Using HP ProCurve Manager or HP ProCurve Manager Plus You can operate HP ProCurve Manager and HP ProCurve Manager Plus (PCM and PCM+) from a PC on the network to monitor traffic, manage your hubs and switches, and proactively recommend network changes to increase network uptime and optimize performance.
Page 31 Features and benefits of HP ProCurve Manager Plus: • All of the Features of HP ProCurve Manager: Refer to the above listing. • In-Depth Traffic Analysis: An integrated, low-overhead traffic mon...
Page 32 Selecting a Management Interface Advantages of Using HP ProCurve Manager or HP ProCurve Manager Plus • Device Software Updates: This feature automatically obtains new device software images from HP and updates devices, allowing users to download the latest version or choose the desired version. Updates can be scheduled easily across large groups of devices, all at user- specified times.
Page 33 Using the Menu Interface Contents Overview ............3-2 Starting and Ending a Menu Session .
Page 34: Using The Menu Interface
Reboot the switch For a detailed list of menu features, see the “Menu Features List” on page 3-14). Privilege Levels and Password Security. HP strongly recommends that you configure a Manager password to help prevent unauthorized access to your network. A Manager password grants full read-write access to the switch.
Page 35: Starting And Ending A Menu Session
Using the Menu Interface Starting and Ending a Menu Session N o t e If the switch has neither a Manager nor an Operator password, anyone having access to the console interface can operate the console with full manager privileges. Also, if you configure only an Operator password, entering the Operator password enables full manager privileges.
Page 36: How To Start A Menu Interface Session
Using the Menu Interface Starting and Ending a Menu Session How To Start a Menu Interface Session In its factory default configuration, the switch console starts with the CLI prompt. To use the menu interface with Manager privileges, go to the Manager level prompt and enter the command.
Page 37: How To End A Menu Session And Exit From The Console
Using the Menu Interface Starting and Ending a Menu Session Figure 3-1. The Main Menu with Manager Privileges For a description of Main Menu features, see “Main Menu Features” on page 3-7). N o t e To configure the switch to start with the menu interface instead of the CLI, go to the Manager level prompt in the CLI, enter the command, and in the setup...
Page 38 Using the Menu Interface Starting and Ending a Menu Session Asterisk indicates a configuration change that requires a reboot to activate. Figure 3-2. An Asterisk Indicates a Configuration Change Requiring a Reboot 1. In the current session, if you have not made configuration changes that require a switch reboot to activate, return to the Main Menu and press (zero) to log out.
Page 39: Main Menu Features
Using the Menu Interface Main Menu Features Main Menu Features Figure 3-3. The Main Menu View with Manager Privileges The Main Menu gives you access to these Menu interface features: Status and Counters: Provides access to display screens showing switch information, port status and counters, port and VLAN address tables, and spanning tree information.
Page 40 Using the Menu Interface Main Menu Features Command Line (CLI): Selects the Command Line Interface at the same level (Manager or Operator) that you are accessing in the Menu interface. (See chapter 4, “Using the Command Line Interface (CLI)”.) Reboot Switch: Performs a “warm” reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up-time to zero.
Page 41: Screen Structure And Navigation
Using the Menu Interface Screen Structure and Navigation Screen Structure and Navigation Menu interface screens include these three elements: Parameter fields and/or read-only information such as statistics Navigation and configuration actions, such as Save, Edit, and Cancel Help line to describe navigation options, individual parameters, and read- only data For example, in the following System Information screen: Screen title –...
Page 42 Using the Menu Interface Screen Structure and Navigation Table 3-1. How To Navigate in the Menu Interface Task: Actions: Execute an action Use either of the following methods: from the “Actions –>” • Use the arrow keys ([<] or [>]) to highlight the action you want to list at the bottom of execute, then press [Enter].
Page 43 Using the Menu Interface Screen Structure and Navigation To get Help on individual parameter descriptions. In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlighted, press , and a separate help screen is displayed. For example: Pressing [H] or highlighting Help and pressing [Enter] displays Help for the...
Page 44: Rebooting The Switch
Using the Menu Interface Rebooting the Switch Rebooting the Switch Rebooting the switch from the menu interface Terminates all current sessions and performs a reset of the operating system Activates any menu interface configuration changes that require a reboot Resets statistical counters to zero (Note that statistical counters can be reset to zero without rebooting the switch.) To Reboot the switch, use the Reboot Switch option in the Main Menu.
Page 45 Using the Menu Interface Rebooting the Switch Rebooting To Activate Configuration Changes. Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the .
Page 46: Menu Features List
Using the Menu Interface Menu Features List Menu Features List Status and Counters • General System Information • Switch Management Address Information • Port Status • Port Counters • Address Table • Port Address Table • Spanning Tree Information Switch Configuration •...
Page 47: Where To Go From Here
To use the Run Setup option Refer to the Installation and Getting Started Guide shipped with the switch. To use the HP ProCurve Stack Manager See the chapter on stack management in the Advanced Traffic Management Guide To view and monitor switch status and Appendix B, “Monitoring and Analyzing Switch...
Page 48 Using the Menu Interface Where To Go From Here — This page is intentionally unused. — 3-16...
Page 49 Using the Command Line Interface (CLI) Contents Overview ............4-2 Accessing the CLI .
Page 50: Using The Command Line Interface (Cli)
Using the Command Line Interface (CLI) Overview Overview The CLI is a text-based command interface for configuring and monitoring the switch. The CLI gives you access to the switch’s full set of commands while providing the same password protection that is used in the web browser interface and the menu interface.
Page 51: Privilege Levels At Logon
Using the Command Line Interface (CLI) Using the CLI Startup Config file in non-volatile memory. If you reboot the switch without first using write memory, all changes made since the last reboot or write memory (whichever is later) will be lost. For more on switch memory and saving configuration changes, see Chapter 6, “Switch Memory and Configuration”.
Page 52: Privilege Level Operation
Using the CLI C a u t i o n HP strongly recommends that you configure a Manager password. If a Man ager password is not configured, then the Manager level is not password- protected, and anyone having in-band or out-of-band access to the switch may be able to reach the Manager level and compromise switch and network security.
Page 53: Manager Privileges
Using the Command Line Interface (CLI) Using the CLI Manager Privileges Manager privileges give you three additional levels of access: Manager, Global Configuration, and Context Configuration. (See figure .) A "#" character delimits any Manager prompt. For example: HPswitch#_ Example of the Manager prompt. Manager level: Provides all Operator level privileges plus the ability to perform system-level actions that do not require saving changes to the system configuration file.
Page 54 Using the Command Line Interface (CLI) Using the CLI Changing Interfaces. If you change from the CLI to the menu interface, or the reverse, you will remain at the same privilege level. For example, entering the menu command from the Operator level of the CLI takes you to the Operator privilege level in the menu interface.
Page 55: How To Move Between Levels
Using the Command Line Interface (CLI) Using the CLI How To Move Between Levels Change in Levels Example of Prompt, Command, and Result Operator level HPswitch> enable Password:_ Manager level After you enter enable, the Password prompt appears. After you enter the Manager password, the system prompt appears with the # symbol: HPswitch#_...
Page 56: Listing Commands And Command Options
Using the Command Line Interface (CLI) Using the CLI For example, if you use the menu interface to configure an IP address of “X” for VLAN 1 and later use the CLI to configure a different IP address of “Y” for VLAN 1, then “Y”...
Page 57 Using the Command Line Interface (CLI) Using the CLI Typing ? at the Manager level produces this listing: When - - MORE - - appears, use the Space bar or [Return] to list additional commands. Figure 4-4. Example of the Manager-Level Command Listing When - - MORE - - appears, there are more commands in the listing.
Page 58: Command Option Displays
Using the Command Line Interface (CLI) Using the CLI telnet terminal HPswitch(config)# t As mentioned above, if you type part of a command word and press , the [Tab] CLI completes the current word (if you have typed enough of the word for the CLI to distinguish it from other possibilities), including hyphenated exten...
Page 59: Displaying Cli "Help
Using the Command Line Interface (CLI) Using the CLI Listing Command Options. You can use the CLI to remind you of the options available for a command by entering command keywords followed . For example, suppose you want to see the command options for config uring port C5: This example displays the command options for configuring the switch’s console settings.
Page 60 Using the Command Line Interface (CLI) Using the CLI Figure 4-6. Example of Context-Sensitive Command-List Help Displaying Help for an Individual Command. You can display Help for any command that is available at the current context level by entering enough of the command string to identify the command, along with help.
Page 61: Configuration Commands And The Context Configuration Modes
Using the Command Line Interface (CLI) Using the CLI Figure 4-8. Example of Help for a Specific Instance of a Command Note that trying to list the help for an individual command from a privilege level that does not include that command results in an error message. For example, trying to list the help for the interface command while at the global configuration level produces this result: HPswitch# interface help...
Page 62 Using the Command Line Interface (CLI) Using the CLI Lists the commands you HPswitch(eth-C5-C8)#? can use in the port or static trunk context, plus the HPswitch(eth-C5-C8)#? Manager, Operator, and context commands you can execute at this level. In the port context, the first block of commands in the "?" listing show the context-specific commands that will affect only ports C3-C6.
Page 63 Using the Command Line Interface (CLI) Using the CLI VLAN Context . Includes VLAN-specific commands that apply only to the selected VLAN, plus Manager and Operator commands. The prompt for this mode includes the VLAN ID of the selected VLAN. For example, if you had already configured a VLAN with an ID of 100 in the switch: Command executed at configura...
Page 64: Cli Control And Editing
Using the Command Line Interface (CLI) CLI Control and Editing CLI Control and Editing Keystrokes Function [Ctrl] [A] Jumps to the first character of the command line. or [<] Moves the cursor back one character. [Ctrl] [B] [Ctrl] [C] Terminates a task and displays the command prompt. [Ctrl] [D] Deletes the character at the cursor.
Page 65: Using The Hp Web Browser Interface
Using HP ProCurve Manager (PCM) or HP ProCurve Manager Plus (PCM+) ......5-5 Tasks for Your First HP Web Browser Interface Session .
Page 66: Overview
Using the HP Web Browser Interface Overview Overview The HP web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. This lets you do the following: Optimize your network uptime by using the Alert Log and other diagnostic...
Page 67: General Features
Using the HP Web Browser Interface General Features General Features The switch includes these web browser interface features: Switch Configuration: • Ports • VLANs and Primary VLAN • Fault detection • Port monitoring (mirroring) • System information • Enable/Disable Multicast Filtering (IGMP) and Spanning Tree •...
Page 68: Starting An Hp Web Browser Interface Session With The Switch
Location or Address field instead of the IP address. Using DNS names typically improves browser performance. Contact your network adminis trator to enquire about DNS names associated with your HP switch. Type the IP address (or DNS name) of the switch in the browser Location or Address (URL) field and press .
Page 69: Using Hp Procurve Manager (Pcm) Or Hp Procurve Manager Plus
(optionally) a DNS name, and has been discovered by PCM or PCM+. (For more on assigning an IP address, refer to “IP Configuration” on page 8-3.) To establish a web browser session with HP PCM or PCM+ running, do the following on the network management station: 1. Make sure the Java applets are enabled for your web browser.
Page 70 Using the HP Web Browser Interface Starting an HP Web Browser Interface Session with the Switch First-Time Alert Install Alert Figure 5-1. Example of Status Overview Screen N o t e The above screen appears somewhat different if the switch is configured as a...
Page 71: Tasks For Your First Hp Web Browser Interface Session
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Tasks for Your First HP Web Browser Interface Session The first time you access the web browser interface, there are three tasks that you should perform: Review the “First Time Install”...
Page 72: Creating Usernames And Passwords In The Browser Interface
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session This window is the launching point for the basic configuration you need to perform to set web browser interface passwords to maintain security and Fault Detection policy, which determines the types of messages that will be displayed in the Alert Log.
Page 73 Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session Figure 5-3. The Device Passwords Window To set the passwords: Access the Device Passwords screen by one of the following methods: • If the Alert Log includes a “First Time Install” event entry, double click on this event, then, in the resulting display, click on the secure access to the device link.
Page 74: Using The Passwords
Using the HP Web Browser Interface Tasks for Your First HP Web Browser Interface Session N o t e Passwords you assign in the web browser interface will overwrite previous passwords assigned in either the web browser interface, the Command Prompt, or the switch console.
Page 75: If You Lose A Password
Context-sensitive help is provided for the screen you are on. N o t e To access the online Help for the HP web browser interface, you need either HP ProCurve Manager (version 1.5 or greater) installed on your network or an active connection to the World Wide Web.
Page 76: Support/Mgmt Urls Feature
– The URL for the support information source you want the switch to access when you click on the web browser interface Support tab. The default is the URL for the HP ProCurve Networking home page. – The URL of a PCM (HP ProCurve Network Manager) workstation or other server for the online Help files for this web browser interface.
Page 77: Support Url
URL in this field.) In the default configuration (and if PCM is not running on your network) this field is set to the URL for accessing online Help from the HP ProCurve World Wide Website: http://www.hp.com/rnd/device_help...
Page 78 Using the HP Web Browser Interface Support/Mgmt URLs Feature In the default configuration, the switch uses the URL for accessing the web browser interface help files on the HP ProCurve orld Wide Web site. Figure 5-7. How To Access Web Browser Interface Online Help...
Page 79: Status Reporting Features
Alert Log Control Bar Figure 5-8. The Status Overview Window Policy Management and Configuration. HP PCM can perform network- wide policy management and configuration of your switch. The Management Server URL field (page 5-13) shows the URL for the management station performing that function.
Page 80: The Port Utilization And Status Displays
Using the HP Web Browser Interface Status Reporting Features The Port Utilization and Status Displays The Port Utilization and Status displays show an overview of the status of the switch and the amount of network activity on each port. The following figure shows a sample reading of the Port Utilization and Port Status.
Page 81 Using the HP Web Browser Interface Status Reporting Features Maximum Activity Indicator: As the bars in the graph area change height to reflect the level of network activity on the corresponding port, they leave an outline to identify the maximum activity level that has been observed on the port.
Page 82: Port Status
Using the HP Web Browser Interface Status Reporting Features Port Status Port Status Indicators Legend Figure 5-12. The Port Status Indicators and Legend The Port Status indicators show a symbol for each port that indicates the general status of the port. There are four possible statuses: Port Connected –...
Page 83: The Alert Log
Using the HP Web Browser Interface Status Reporting Features The Alert Log The web browser interface Alert Log, shown in the lower half of the screen, shows a list of network occurrences, or alerts, that were detected by the switch. Typical alerts are Broadcast Storm, indicating an excessive number of broadcasts received on a port, and Problem Cable, indicating a faulty cable.
Page 84: Alert Types And Detailed Views
Using the HP Web Browser Interface Status Reporting Features Alert Types and Detailed Views As of April, 2004, the web browser interface generates the following alert types: • Auto Partition • High collision or drop rate • Backup Transition • Loss of Link •...
Page 85 Using the HP Web Browser Interface Status Reporting Features Figure 5-14.Example of Alert Log Detail View 5-21...
Page 86: The Status Bar
Using the HP Web Browser Interface Status Reporting Features The Status Bar The Status Bar is displayed in the upper left corner of the web browser interface screen. Figure 5-15 shows an expanded view of the status bar. Most Critical Alert Description...
Page 87: Setting Fault Detection Policy
Using the HP Web Browser Interface Status Reporting Features Product Name. The product name of the switch to which you are connected in the current web browser interface session. Setting Fault Detection Policy One of the powerful features in the web browser interface is the Fault Detection facility.
Page 88 Never. Disables the Alert Log and transmission of alerts (traps) to the management server (in cases where a network management tool such as HP ProCurve Manager is in use). Use this option when you don’t want to use the Alert Log.
Page 89: Switch Memory And Configuration
Switch Memory and Configuration Contents Overview ............6-2 Overview of Configuration File Management .
Page 90: Overview
Switch Memory and Configuration Overview Overview This chapter describes: How switch memory manages configuration changes How the CLI implements configuration changes How the menu interface and web browser interface implement configu ration changes How the switch provides software options through primary/secondary flash image options How to use the switch’s primary and secondary flash options, including displaying flash information, booting or restarting the switch, and other...
Page 91 Switch Memory and Configuration Overview of Configuration File Management Running Config File: Exists in volatile memory and controls switch operation. If no configuration changes have been made in the CLI since the switch was last booted, the running-config file is identical to the startup-config file.
Page 92 Switch Memory and Configuration Overview of Configuration File Management “permanent”. When you are satisfied that the change is satisfactory, you can make it permanent by executing the command. For example, write memory suppose you use the following command to disable port 5: HPswitch(config)# interface ethernet 5 disable The above command disables port 5 in the running-config file, but not in the startup-config file.
Page 93: Using The Cli To Implement Configuration Changes
Switch Memory and Configuration Using the CLI To Implement Configuration Changes Using the CLI To Implement Configuration Changes The CLI offers these capabilities: Access to the full set of switch configuration features The option of testing configuration changes before making them perma nent How To Use the CLI To View the Current Configuration Files.
Page 94 Switch Memory and Configuration Using the CLI To Implement Configuration Changes 3. Observe the switch’s performance with the new parameter settings to verify the effect of your changes. 4. When you are satisfied that you have the correct parameter settings, use command to copy the changes to the startup-config file.
Page 95 Switch Memory and Configuration Using the CLI To Implement Configuration Changes Disables port 1 in the running configuration, which causes port 1 to block all traffic. HPswitch(config)# interface e 1 disable HPswitch(config)# boot Device will be rebooted, do you want to continue [y/n]? y Press to continue the rebooting process.
Page 96: Using The Menu And Web Browser Interfaces To Implement Configuration
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes How To Reset the startup-config and running-config Files to the Factory-Default Configuration. This command reboots the switch, replacing the contents of the current startup-config and running-config files with the factory-default startup configuration.
Page 97 Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes N o t e The only exception to this operation are two VLAN-related parameter changes that require a reboot—described under “Rebooting To Activate Configuration Changes” on page 6-11. Using in the Menu Interface Save...
Page 98: Rebooting From The Menu Interface
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes N o t e If you reconfigure a parameter in the CLI and then go to the menu interface without executing a write memory command, those changes are stored only in the running configuration.
Page 99: Configuration Changes Using The Web Browser Interface
Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Implement Configuration Changes Rebooting To Activate Configuration Changes. Configuration changes for most parameters become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the Maximum parameter VLANs to support...
Page 100: Using Primary And Secondary Flash Image Options
Switch Memory and Configuration Using Primary and Secondary Flash Image Options Using Primary and Secondary Flash Image Options The switch features two flash memory locations for storing switch software image files: Primary Flash: The default storage for a switch software image. Secondary Flash: The additional storage for either a redundant or an alternate switch software image.
Page 101 Switch Memory and Configuration Using Primary and Secondary Flash Image Options For example, if the switch is using a software version of G.01.01 stored in Primary flash, show version produces the following: Figure 6-7. Example Showing the Identity of the Current Flash Image Determining Whether the Flash Images Are Different Versions.
Page 102: Switch Software Downloads
Switch Memory and Configuration Using Primary and Secondary Flash Image Options 1. In this example show version indicates the switch has version G.05.01 in primary flash. 2. After the boot system command, show version indicates that version G.05.00 is in secondary flash.
Page 103: Local Switch Software Replacement And Removal
If you want to remove an unwanted software version from flash, HP recommends that you do so by overwriting it with the same software version that you are using to operate the switch, or with another acceptable software version.
Page 104 Switch Memory and Configuration Using Primary and Secondary Flash Image Options 1. Verify that there is a valid flash image in the secondary flash location. The following figure indicates that a software image is present in secondary flash. (If you are unsure whether the image is secondary flash is valid, try booting from it before you proceed, by using boot system flash secondary.) The unequal code size, differing dates,...
Page 105: Rebooting The Switch
Switch Memory and Configuration Using Primary and Secondary Flash Image Options The prompt shows which flash location will be erased. Figure 6-11. Example of Erase Flash Prompt Type y at the prompt to complete the flash erase. Use show flash to verify erasure of the selected software flash image The "0"...
Page 106 Switch Memory and Configuration Using Primary and Secondary Flash Image Options Booting from Primary Flash. This command always boots the switch from primary flash, and executes the complete set of subsystem self-tests. Syntax: boot For example, to boot the switch from primary flash with pending configuration changes in the running-config file: Figure 6-13.
Page 107: Operating Notes
Switch Memory and Configuration Using Primary and Secondary Flash Image Options Booting from the Current Software Version. Reload reboots the switch from the flash image on which the switch is currently running, and saves to the startup-config file any configuration changes currently in the running config file.
Page 108 Switch Memory and Configuration Using Primary and Secondary Flash Image Options — This page is intentionally unused. — 6-20...
Page 109: Interface Access And System Information
Interface Access and System Information Contents Overview ............7-2 Interface Access: Console/Serial Link, Web, and Telnet .
Page 110: Overview
Chapter 2, “Using the Menu Interface” Chapter 4, “Using the Command Line Interface (CLI)” Chapter 5, Using the HP Web Browser Interface” Why Configure Interface Access and System Information? The inter- face access features in the switch operate properly by default. However, you can modify or disable access features to suit your particular needs.
Page 111: Interface Access: Console/Serial Link, Web, And Telnet
Interface Access and System Information Interface Access: Console/Serial Link, Web, and Telnet Interface Access: Console/Serial Link, Web, and Telnet Interface Access Features Feature Default Menu Inactivity Time 0 Minutes page 7-4 page 7-6 — (disabled) Inbound Telnet Access Enabled page 7-4 page 7-5 —...
Page 112: Menu: Modifying The Interface Access
Interface Access and System Information Interface Access: Console/Serial Link, Web, and Telnet Menu: Modifying the Interface Access The menu interface enables you to modify these parameters: Inactivity Time-out Inbound Telnet Enabled Web Agent Enabled To Access the Interface Access Parameters: From the Main Menu, Select...
Page 113: Cli: Modifying The Interface Access
Interface Access and System Information Interface Access: Console/Serial Link, Web, and Telnet CLI: Modifying the Interface Access Interface Access Commands Used in This Section show console below [no] telnet-server below [no] web-management page 7-6 console page 7-6 Listing the Current Console/Serial Link Configuration. This com mand lists the current interface access parameter settings.
Page 114 Interface Access and System Information Interface Access: Console/Serial Link, Web, and Telnet Outbound Telnet to Another Device. This feature operates indepen dently of the telnet-server status and enables you to Telnet to another device that has an IP address. Syntax: telnet <...
Page 115 Interface Access and System Information Interface Access: Console/Serial Link, Web, and Telnet For example, to use one command to configure the switch with the following: VT100 operation 19,200 baud No flow control 10-minute inactivity time Critical log events you would use the following command sequence: The switch implements the Event Log change immediately.
Page 116: Denying Interface Access By Terminating Remote Management Sessions
Interface Access and System Information Denying Interface Access by Terminating Remote Management Sessions Denying Interface Access by Terminating Remote Management Sessions The switch supports up to four management sessions. You can use show ip ssh to list the current management sessions, and kill to terminate a currently running remote session.
Page 117: System Information
System Name: Using a unique name helps you to identify individual devices in stacking environments and where you are using an SNMP network manage ment tool such as HP ProCurve Manager. System Contact and Location: This information is helpful for identifying the person administratively responsible for the switch and for identifying the locations of individual switches.
Page 118: Menu: Viewing And Configuring System Information
Daylight Time Rule: Specifies the daylight savings time rule to apply for your location. The default is None. (For more on this topic, see Appendix E, “Daylight Savings Time on HP ProCurve Switches.) Time: Used in the CLI to specify the time of day, the date, and other system parameters.
Page 119: Cli: Viewing And Configuring System Information
Interface Access and System Information System Information 3. Refer to the online help provided with this screen for further information on configuration options for these features. 4. When you have finished making changes to the above parameters, press , then press (for Save) and return to the Main Menu.
Page 120 Interface Access and System Information System Information Configure a System Name, Contact, and Location for the Switch. To help distinguish one switch from another, configure a plain-language identity for the switch. Syntax: hostname <name-string> snmp-server [contact <system contact>] [location <system location>] Both fields allow up to 48 characters.
Page 121 Interface Access and System Information System Information Reconfigure the Age Time for Learned MAC Addresses. This com mand corresponds to the MAC Age Interval in the menu interface, and is expressed in seconds. Syntax: mac-age-time <10 . . 1000000> (seconds) For example, to configure the age time to seven minutes: HPswitch(config)# mac-age-time 420 Configure the Time Zone and Daylight Time Rule.
Page 122: Web: Configuring System Parameters
Interface Access and System Information System Information Web: Configuring System Parameters In the web browser interface, you can enter the following system information: System Name System Location System Contact For access to the MAC Age Interval and the Time parameters, use the menu interface or the CLI.
Page 123: Configuring Ip Addressing
Configuring IP Addressing Contents Overview ............8-2 IP Configuration .
Page 124: Overview
Configuring IP Addressing Overview Overview You can configure IP addressing through all of the switch’s interfaces. You can also: Easily edit a switch configuration file to allow downloading the file to multiple switches without overwriting each switch’s unique gateway and VLAN 1 IP addressing.
Page 125: Ip Configuration
Configuring IP Addressing IP Configuration IP Configuration IP Configuration Features Feature Default Menu IP Address and Subnet Mask DHCP/Bootp page 8-5 page 8-7 page 8-11 Multiple IP Addresses on a VLAN page 8-9 Default Gateway Address none page 8-5 page 8-7 page 8-11 Packet Time-To-Live (TTL) 64 seconds...
Page 126: Just Want A Quick Start With Ip Addressing
If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, HP recommends that you use the Switch Setup screen to quickly configure IP addressing. To do so, do one of the following: Enter setup at the CLI Manager level prompt.
Page 127: Ip Addressing In A Stacking Environment
URL in your web browser. IP Addressing in a Stacking Environment If you are installing the switch into an HP ProCurve stack management environment, entering an IP address may not be required. See the chapter on stack management in the Advanced Traffic Management Guide.
Page 128 Configuring IP Addressing IP Configuration For descriptions of these parameters, see the online Help for this screen. Before using the DHCP/ Bootp option, refer to “DHCP/Bootp Operation” on page 8-12. Figure 8-1. Example of the IP Service Configuration Screen without Multiple VLANs Configured Press (for Edit).
Page 129: Cli: Configuring Ip Address, Gateway, And Time-To-Live (Ttl)
Configuring IP Addressing IP Configuration CLI: Configuring IP Address, Gateway, and Time-To- Live (TTL) IP Commands Used in This Section show ip page 8-7 vlan <vlan-id> ip page 8-8 address ip default-gateway page 8-11 ip ttl page 8-11 Viewing the Current IP Configuration. The following command displays the IP addressing for each VLAN configured in the switch.
Page 130 Configuring IP Addressing IP Configuration Figure 8-3. Example of Show IP Listing with Non-Default IP Addressing Configured Configure an IP Address and Subnet Mask. The following command includes both the IP address and the subnet mask. You must either include the ID of the VLAN for which you are configuring IP addressing or go to the context configuration level for that VLAN.
Page 131 Configuring IP Addressing IP Configuration Configure Multiple IP Addresses on a VLAN (Multinetting). You can configure one primary IP address per VLAN and up to seven secondary IP addresses for the same VLAN. That is, the switch enables you to assign up to eight networks to a VLAN.
Page 132 Configuring IP Addressing IP Configuration If you then wanted to multinet the default VLAN, you would do the following: The secondary IP addresses in a VLAN are listed immediately after the primary IP address for the VLAN. Figure 8-5. Example of Multinetting on the Default VLAN N o t e The Internet (IP) Service screen in the Menu interface (figure 8-1 on page 8-6) displays only the primary IP address for each VLAN.
Page 133: Web: Configuring Ip Addressing
Console RS-232 port. You can use direct-connect console access to take advantage of features that do not depend on IP addressing. However, to realize the full performance capabilities HP proactive networking offers through the 8-11...
Page 134: Dhcp/Bootp Operation
Additional Features Available with an IP Address and Subnet Mask • Direct-connect access to the CLI and the menu interface. • HP web browser interface access, with configuration, security, and diagnostic tools, plus the Alert Log for • Stacking Candidate or Stack Member discovering problems detected in the switch along with • DHCP or Bootp support for automatic IP address...
Page 135 Configuring IP Addressing IP Configuration The DHCP/Bootp Process. Whenever the IP Config parameter in the switch or in an individual VLAN in the switch is configured to DHCP/Bootp (the default), or when the switch is rebooted with this configuration: 1. DHCP/Bootp requests are automatically broadcast on the local network. (The switch sends one type of request to which either a DHCP or Bootp server can respond.) 2. When a DHCP or Bootp server receives the request, it replies with a...
Page 136 Configuring IP Addressing IP Configuration For more information on either of these procedures, refer to the documenta tion provided with the DHCP server. Bootp Operation. When a Bootp server receives a request it searches its Bootp database for a record entry that matches the MAC address in the Bootp request from the switch.
Page 137: Network Preparations For Configuring Dhcp/Bootp
Configuring IP Addressing IP Configuration is the IP address to be assigned to the switch (or VLAN). is the subnet mask of the subnet in which the switch (or VLAN) is installed. is the IP address of the default gateway. TFTP server address (source of final configuration file) T144 is the vendor-specific “tag”...
Page 138: Ip Preserve: Retaining Vlan-1 Ip Addressing Across Configuration File
Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads connectivity to the TFTP file server specified in the reply, that the config uration file is correctly named, and that the configuration file exists in the TFTP directory.) IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads...
Page 139 Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Entering "ip preserve" in the last line of a configuration file implements IP Preserve when the file is downloaded to the switch and the switch reboots. Figure 8-6. Example of Implementing IP Preserve in a Switch Configuration File For example, consider Figure 8-7: DHCP TFTP...
Page 140 Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Using figure 8-7, above, switches 1 - 3 ignore these entries because the file implements IP Preserve and their current IP addressing was not acquired through DHCP/Bootp. Switch 4 ignores IP Preserve and implements the DHCP/Bootp addressing and IP Gateway specified in this file (because its last IP addressing was acquired...
Page 141 Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads Because switch 4 (figure 8-7) received its most recent IP addressing from a DHCP/Bootp server, the switch ignores the ip preserve command and implements the IP addressing included in this file.
Page 142 Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads — This page is intentionally unused. — 8-20...
Page 143: Contents
Time Protocols Contents Overview ............9-2 TimeP Time Synchronization .
Page 144: Overview
Time Protocols Overview Overview This chapter describes: SNTP Time Protocol Operation Timep Time Protocol Operation Using time synchronization ensures a uniform time among inter operating devices. This helps you to manage and troubleshoot switch operation by attaching meaningful time data to event and error messages. The switch offers TimeP and SNTP (Simple Network Time Protocol) and a timesync command for changing the time protocol selection (or turning off time protocol operation).
Page 145: Overview: Selecting A Time Synchronization Protocol Or Turning Off Time Protocol Operation
Time Protocols Overview: Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation ular server, it ignores time broadcasts from other SNTP servers unless the configurable expires three consecutive times without Poll Interval an update received from the first-detected server. Note To use Broadcast mode, the switch and the SNTP server must be in the same subnet.
Page 146: Disabling Time Synchronization
Time Protocols SNTP: Viewing, Selecting, and Configuring Note that simply selecting a time synchronization protocol does not enable that protocol on the switch unless you also enable the protocol itself (step 2, above). For example, in the factory-default configuration, TimeP is the selected time synchronization method.
Page 147: Menu: Viewing And Configuring Sntp
Time Protocols SNTP: Viewing, Selecting, and Configuring Table 9-1.SNTP Parameters SNTP Parameter Operation Time Sync Used to select either SNTP, TIMEP, or None as the time synchronization method. Method SNTP Mode Disabled The Default. SNTP does not operate, even if specified by the Menu interface Time Sync Method parameter or the CLI timesync command.
Page 148 Time Protocols SNTP: Viewing, Selecting, and Configuring Time Protocol Selection Parameter – TIMEP – SNTP – None Figure 9-1. The System Information Screen (Default Values) Press (for ). The cursor moves to the field. Edit System Name Use [v] to move the cursor to the Time Sync Method field.
Page 149 SNTP server version running on the device you specified in the preceding step (step ii). If you are unsure which version to use, HP recommends leaving this value at the default setting of and testing SNTP operation to determine whether any change is necessary.
Page 150: Cli: Viewing And Configuring Sntp
Time Protocols SNTP: Viewing, Selecting, and Configuring CLI: Viewing and Configuring SNTP CLI Commands Described in this Section show sntp page 9-8 [no] timesync pages 9-9 and ff., 9-12 sntp broadcast page 9-9 sntp unicast page 9-10 sntp server pages 9-10 and ff. Protocol Version page 9-12 poll-interval...
Page 151: Configuring (Enabling Or Disabling) The Sntp Mode
Time Protocols SNTP: Viewing, Selecting, and Configuring Even though, in this example, TimeP is the current time synchronous method, the switch maintains the SNTP configuration. Figure 9-3. Example of SNTP Configuration When SNTP Is Not the Selected Time Synchronization Method Configuring (Enabling or Disabling) the SNTP Mode Enabling the SNTP mode means to configure it for either broadcast or unicast mode.
Page 152 Time Protocols SNTP: Viewing, Selecting, and Configuring 2. Select SNTP as the time synchronization mode. 3. Enable SNTP for Broadcast mode. 4. View the SNTP configuration again to verify the configuration. The commands and output would appear as follows: show sntp displays the SNTP configuration and also shows that TimeP is the currently active time synchronization mode.
Page 153 Time Protocols SNTP: Viewing, Selecting, and Configuring N o t e Deleting an SNTP server when only one is configured disables SNTP unicast operation. For example, to select SNTP and configure it with unicast mode and an SNTP server at 10.28.227.141 with the default server version (3) and default poll interval (720 seconds): HPswitch(config)# timesync sntp Selects SNTP.
Page 154 Time Protocols SNTP: Viewing, Selecting, and Configuring Deletes unicast SNTP server entry. Re-enters the unicast server with a non- default protocol version. show sntp displays the result. Figure 9-6. Example of Specifying the SNTP Protocol Version Number Changing the SNTP Poll Interval. Syntax: sntp poll-interval <...
Page 155 Time Protocols SNTP: Viewing, Selecting, and Configuring Figure 9-7. Example of SNTP with Time Sychronization Disabled Disabling the SNTP Mode. If you want to prevent SNTP from being used even if selected by (or the Menu interface’s param timesync Time Sync Method eter), configure the SNTP mode as disabled.
Page 156: Timep: Viewing, Selecting, And Configuring
Time Protocols TimeP: Viewing, Selecting, and Configuring TimeP: Viewing, Selecting, and Configuring TimeP Feature Default Menu view the Timep time synchronization page 9-15 page 9-17 — configuration select Timep as the time synchronization TIMEP page 9-13 pages 9-18 — method disable time synchronization timep page 9-15...
Page 157: Menu: Viewing And Configuring Timep
Time Protocols TimeP: Viewing, Selecting, and Configuring Menu: Viewing and Configuring TimeP To View, Enable, and Modify the TimeP Protocol: From the Main Menu, select: 2. Switch Configuration... 1. System Information Time Protocol Selection Parameter – TIMEP (the default) – SNTP –...
Page 158: Cli: Viewing And Configuring Timep
Time Protocols TimeP: Viewing, Selecting, and Configuring • Use the Space bar to select the mode. Manual Press [>] to move the cursor to the field. Server Address ii. Enter the IP address of the TimeP server you want the switch to use for time synchronization.
Page 159: Viewing The Current Timep Configuration
Time Protocols TimeP: Viewing, Selecting, and Configuring This section describes how to use the CLI to view, enable, and configure TimeP parameters. Viewing the Current TimeP Configuration This command lists both the time synchronization method (TimeP, SNTP, or None) and the TimeP configuration, even if SNTP is not the selected time protocol.
Page 160: Configuring (Enabling Or Disabling) The Timep Mode
Time Protocols TimeP: Viewing, Selecting, and Configuring Configuring (Enabling or Disabling) the TimeP Mode Enabling the TimeP mode means to configure it for either broadcast or unicast mode. Remember that to run TimeP as the switch’s time synchronization protocol, you must also select TimeP as the time synchronization method by using the CLI timesync command (or the Menu interface Time Sync Method parameter).
Page 161 Time Protocols TimeP: Viewing, Selecting, and Configuring The commands and output would appear as follows: show timep displays the TimeP configuration and also shows that SNTP is the currently active time synchronization mode. show timep again displays the TimeP configuration and shows that TimeP is now the currently active time synchronization mode.
Page 162 Time Protocols TimeP: Viewing, Selecting, and Configuring HPswitch(config)# timesync timep Selects TimeP. HPswitch(config)# ip timep manual 10.28.227.141 Activates TimeP in Manual mode. Figure 9-13. Example of Configuring Timep for Manual Operation Changing the TimeP Poll Interval. This command lets you specify how long the switch waits between time polling intervals.
Page 163: Sntp Unicast Time Polling With Multiple Sntp Servers
Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers Figure 9-14. Example of TimeP with Time Sychronization Disabled Disabling the TimeP Mode. Disabling the TimeP mode means to configure it as disabled. (Disabling TimeP prevents the switch from using it as the time synchronization protocol, even if it is the selected Time Sync Method option.)
Page 164: Address Prioritization
Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers all servers in the list without success, it sends an error message to the Event Log and reschedules to try the address list again after the configured Poll Interval time has expired. Address Prioritization If you use the CLI to configure multiple SNTP servers, the switch prioritizes them according to the decimal values of their IP addresses.
Page 165 Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers Prioritized list of SNTP Server IP Addresses Figure 9-16. Example of SNTP Server Address Prioritization Note If there are already three SNTP server addresses configured on the switch, and you want to use the CLI to replace one of the existing addresses with a new one, you must delete the unwanted address before you configure the new one.
Page 166: Menu Interface Operation With Multiple Sntp Server Addresses
Time Protocols SNTP Messages in the Event Log Menu Interface Operation with Multiple SNTP Server Addresses Configured When you use the Menu interface to configure an SNTP server IP address, the new address writes over the current primary address, if one is configured. If there are multiple addresses configured, the switch re-orders the addresses according to the criteria described under “Address Prioritization”...
Page 167: Port Status And Basic Configuration
Using the CLI To Configure a Broadcast Limit ....10-11 Configuring HP Auto-MDIX ......10-13 Manual Auto-MDIX Override .
Page 168 Port Status and Basic Configuration Contents Outbound Port Queues and Packet Priority Settings ... . 10-30 Operating Rules for Port-Based Priority ..... . 10-31 Configuring and Viewing Port-Based Priority .
Page 169: Overview
Port Status and Basic Configuration Overview Overview This chapter describes how to view the current port configuration and how to configure ports to non-default settings, including Enable/Disable Mode (speed and duplex) Flow Control Broadcast Limit Auto-MDIX Jumbo Packets on the Series 2800 Switches QoS Pass-Through Mode for Series 2800 Switches Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches...
Page 170 • Auto-10: Allows the port to negotiate between half-duplex (HDx) and full-duplex (FDx) while keeping speed at 10 Mbps. Also negotiates flow control (enabled or disabled). HP recommends Auto-10 for links between 10/100 autosensing ports connected with Cat 3 cabling. (Cat 5 cabling is required for 100 Mbps links.).
Page 171 LACP trunk, if any, to which a port belongs. Trunk Group Note: An LACP trunk requires a full-duplex link. In most cases, HP recommends that you leave the port (CLI) Mode setting at Auto (the default). Refer to “Trunk Group Operation Using LACP” on page 12-18.
Page 172: Menu: Viewing Port Status And Configuring Port Parameters
Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters Status or Description Parameter show trunk Type This parameter appears in the CLI listing and, for a port in a trunk group, specifies the type of trunk group. The default Type is passive LACP, which can be displayed by using the CLI show lacp command. For more on port trunking, see “Port Trunking”...
Page 173: Cli: Viewing Port Status And Configuring Port Parameters
Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters Using the Menu To Configure Ports. N o t e The menu interface uses the same screen for configuring both individual ports and port trunk groups. For information on port trunk groups, see Chapter 12, “Port Trunking”...
Page 174: Using The Cli To View Port Status
Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters From the CLI, you can configure and view all port parameter settings and view all port status indicators. Using the CLI To View Port Status Use the following commands to display port status and configuration: show interfaces brief: Lists the full status and configuration for all ports on the switch.
Page 175 Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters Current Operating Mode Figure 10-3. Example Show Interface Command Listing, 4100gl Switch Current Configured Mode Figure 10-4. Example Show Interface Config Command Listing, 4100gl Switch HPswitch(config)# show interface brief Current Operating Mode S tatus and Counters - Port Status | I ntrusion...
Page 176: Using The Cli To Configure Ports
Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters HPswitch(config)# show interface config P ort Settings Current Configured Mode Port Type | Enabled Mode F low Ctrl MDI ------- --------- + - ------ ------------ --------- ---- 10/100TX | Y es Au to D isable MDIX...
Page 177: Using The Cli To Configure A Broadcast Limit
Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters If port C8 was disabled, and you wanted to enable it and configure it for 100FDx with flow-control active, you could do so with either of the following command sets.
Page 178 Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters For example, to configure a broadcast limit of 20% for all ports on the switch: Figure 10-7. Example of Configuring a Global Broadcast Limit To display the current broadcast limit setting, use either show config or show running: Displays the startup-config file.
Page 179: Configuring Hp Auto-Mdix
Displays the broadcast- limit in the running-config file. Figure 10-1. Configuring and Displaying a Per-Port Broadcast Limit on Switch 2800 Series Device Configuring HP Auto-MDIX Copper ports on the switch can automatically detect the type of cable config uration (MDI or MDI-X) on a connected device and adjust to operate appro...
Page 180: Manual Auto-Mdix Override On The Series 2600/2600-Pwr And 2800 Switches
MDI-X port. HP Auto-MDIX was developed for auto-negotiating devices, and was shared with the IEEE for the development of the IEEE 802.3ab standard. HP Auto- MDIX and the IEEE 802.3ab Auto MDI/MID-X feature are completely compat...
Page 181 Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters Syntax: interface < port-list > mdix-mode < automdix | mdi | mdix > automdix is the automatic, default setting. This configures the port for automatic detection of the cable (either straight-through or crossover).
Page 182 Port Status and Basic Configuration Viewing Port Status and Configuring Port Parameters Per-Port MDI Configuration Figure 10-2. Example of Displaying the Current MDI Configuration Per-Port MDI Operating Mode Figure 10-3. Example of Displaying the Current MDI Operating Mode N o t e Port Response to Switch Software Updates Series 2600 or 2600-PWR Switch software updated from H_07.XX or earlier...
Page 183: Web: Viewing Port Status And Configuring Port Parameters
However, to configure a port trunk group, you must use the CLI or the menu interface. For more on this topic, see Chapter 12, “Port Trunking” . Jumbo Packets on the Series 2800 Switches This section applies only to the HP ProCurve Series 2800 switches. Feature Default Menu display VLAN jumbo status —...
Page 184: Terminology
Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches Terminology Jumbo Packet: On the Series 2800 switches, an IP packet exceeding 1522 bytes in size. The maximum Jumbo packet size is 9220 bytes. (This size includes 4 bytes for the VLAN tag.) Jumbo VLAN: A VLAN configured to allow inbound jumbo traffic.
Page 185: Configuring Jumbo Packet Operation
Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches traffic from devices on either VLAN. For a method to allow only some ports in a VLAN to receive jumbo traffic, refer to “Operating Notes for Jumbo Traffic-Handling” on page 10-22. Configuring Jumbo Packet Operation Command Page...
Page 186: Viewing The Current Jumbo Configuration
Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches Viewing the Current Jumbo Configuration Syntax: show vlans Lists the static VLANs configured on the switch and includes a Jumbo column to indicate which VLANs are configured to support inbound jumbo traffic.
Page 187 Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches Indicates which static VLANs are configured to enable jumbo packets. Figure 10-5. Example of Listing the VLAN Memberships for a Range of Ports Syntax: show vlans < vid > This command shows port membership and jumbo configuration for the specified <...
Page 188: Enabling Or Disabling Jumbo Traffic On A Vlan
VLAN.) Operating Notes for Jumbo Traffic-Handling HP does not recommend configuring a voice VLAN to accept jumbo packets. Voice VLAN packets are typically small, and allowing a voice VLAN to accept jumbo packet traffic can degrade the voice transmission performance.
Page 189 Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches When a port is not a member of any jumbo-enabled VLAN, it drops all jumbo traffic. If the port is receiving “excessive” inbound jumbo traffic, the port generates an Event Log message to notify you of this condition. This same condition generates a Fault-Finder message in the Alert log of the switch’s web browser interface, and also increments the switch’s “Giant Rx”...
Page 190 Port Status and Basic Configuration Jumbo Packets on the Series 2800 Switches Non-Jumbo VLAN Jumbo-Enabled VLAN VLAN 20 VLAN 10 Port 3 belongs to both VLAN 10 and VLAN 20. Jumbo packets received inbound on port 3 can be forwarded out the Non-Jumbo ports 4, 5, and 6. Figure 10-7.
Page 191: Troubleshooting
Port Status and Basic Configuration QoS Pass-Through Mode on the Series 2800 Switches Troubleshooting A VLAN is configured to allow jumbo packets, but one or more ports drops all inbound jumbo packets. The port may not be operating at 1 gigabit or higher.
Page 192: Qos Priority Mapping With And Without Qos Pass-Through Mode
Port Status and Basic Configuration QoS Pass-Through Mode on the Series 2800 Switches cant performance improvement for high-bandwidth traffic flows through the 2800 switches, particularly when running traffic flows from 1000Base to either 100Base or 10Base connections. QoS Pass-Through mode is OFF by default, and must be enabled via the “config”...
Page 193: How To Enable/Disable Qos Pass-Through Mode
The no form of the command sequence disables QoS pass- through mode. (Default: Disabled) For example: HP ProCurve Switch 2824(config)# qos-passthrough-mode Command will take effect after saving configuration and reboot HP ProCurve Switch 2824(config)# write memory HP ProCurve Switch 2824(config)# reload 10-27...
Page 194 Port Status and Basic Configuration QoS Pass-Through Mode on the Series 2800 Switches This command can be enabled and disabled only from the switch's CLI. QoS passthrough mode cannot be enabled or disabled through either the switch's menu or web browser interfaces. Once enabled, this feature adds qos-passthrough-mode to the switch’s startup...
Page 195: Configuring Port-Based Priority For Incoming Packets On The 4100Gl And 6108 Switches
Port Status and Basic Configuration Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches Feature Default Menu Assigning a priority level to traffic on the basis Disabled page 10-32 of incoming port...
Page 196: Outbound Port Queues And Packet Priority Settings
VLAN, then the tag is stripped from the packet, which then exits from the switch without a priority setting. Outbound Port Queues and Packet Priority Settings Ports on the HP ProCurve switches have the following outbound port queue structure: Switch Model...
Page 197: Operating Rules For Port-Based Priority
Port Status and Basic Configuration Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches For example, suppose you have configured port A10 to assign a priority level of 1 (low): An untagged packet coming into the switch on port A10 and leaving the switch through any other port configured as a tagged VLAN member would leave the switch as a tagged packet with a priority level of 1.
Page 198: Configuring And Viewing Port-Based Priority
Port Status and Basic Configuration Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches On a given port, an inbound, tagged packet received on the port with a preset priority of 1 - 7 in its tag keeps that priority and is assigned an outbound queue on the basis of that priority (regardless of the port-based priority configured on the port).
Page 199: Messages Related To Prioritization
Port Status and Basic Configuration Configuring Port-Based Priority for Incoming Packets on the 4100gl and 6108 Switches For example, suppose you wanted to configure ports A10 -A12 on the switch to prioritize all untagged, inbound VLAN traffic as "Low" (priority level = 1; refer to table 10-3 on page 10-30).
Page 200: Using Friendly (Optional) Port Names
Port Status and Basic Configuration Using Friendly (Optional) Port Names Using Friendly (Optional) Port Names Feature Default Menu Configure Friendly Port Names Standard Port page 35 Numbering Display Friendly Port Names page 37 This feature enables you to assign alphanumeric port names of your choosing to augment automatically assigned numeric port names.
Page 201: Configuring Friendly Port Names
Port Status and Basic Configuration Using Friendly (Optional) Port Names To retain friendly port names across reboots, you must save the current running-configuration to the startup-config file after entering the friendly port names. (In the CLI, use the write memory command.) Configuring Friendly Port Names Syntax: interface <port-list>...
Page 202 Port Status and Basic Configuration Using Friendly (Optional) Port Names Configuring the Same Name for Multiple Ports. Suppose that you want to use ports A5 through A8 as a trunked link to a server used by a drafting group. In this case you might configure ports A5 through A8 with the name “Draft-Server:Trunk”.
Page 203: Displaying Friendly Port Names With Other Port Data
Port Status and Basic Configuration Using Friendly (Optional) Port Names Displaying Friendly Port Names with Other Port Data You can display friendly port name data in the following combinations: show name: Displays a listing of port numbers with their corresponding friendly port names and also quickly shows you which ports do not have friendly name assignments.
Page 204 Port Status and Basic Configuration Using Friendly (Optional) Port Names Port Without a "Friendly" Name Friendly port names assigned in previous examples. Figure 10-13. Example of Friendly Port Name Data for Specific Ports on the Switch Including Friendly Port Names in Per-Port Statistics Listings. A friendly port name configured to a port is automatically included when you display the port’s statistics output.
Page 205 Port Status and Basic Configuration Using Friendly (Optional) Port Names For a given port, if a friendly port name does not exist in the running-config file, the Name line in the above command output appears as: Name not assigned To Search the Configuration for Ports with Friendly Port Names. This option tells you which friendly port names have been saved to the startup...
Page 206 Port Status and Basic Configuration Using Friendly (Optional) Port Names — This page is intentionally unused. — 10-40...
Page 207 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Contents Applicable Switch Models ........11-2 Introduction .
Page 208: Applicable Switch Models
802.3af standard. On the Switch 2650-PWR, you can optionally provision ports 1-24 with 406 watts of internal power and ports 25-48 with 408 watts of external power by adding an HP ProCurve 600 Redundant and External Power Supply (HP RPS/EPS; J8168A) or an HP ProCurve 610 External Power Supply.
Page 209: Terminology
PoE provisioning on the switch becomes oversubscribed. EPS External Power Supply; for example, an HP 600 RPS/EPS or an HP ProCurve 610 EPS. An EPS device provides power to provision PoE ports on a switch. See also “RPS”, below.
Page 210: General Poe Operation
2650-PWR are endpoint PSEs. RPS Redundant Power Supply; for example, an HP 600 RPS/EPS. An RPS device provides power to a switch if the switch’s internal power supply fails. RPS power does not provision PoE ports on a switch whose internal power supply has failed.
Page 211: Pd Support
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches General PoE Operation links. Thus, you can connect either a non-PoE device or a PD to a PoE-enabled port without reconfiguring the port. PD Support The switch must have a minimum of 15.4 watts of unused PoE power available when you connect an 802.3af-compliant PD, regardless of how much power the PD actually uses.
Page 212 1-24 or 25-48.) * If both EPS ports on the HP 600 RPS/EPS or both ports of a pair on the HP 610 EPS are connected to switches, each switch can receive 204 watts of power. If a single switch is connected to the EPS ports, that switch can receive 408 watts.
Page 213: Power Priority
The number of switches drawing external PoE power from the HP 600 RPS/EPS or HP 610 EPS unit. If only a single switch is using external PoE power the HP 600 RPS/EPS or HP 610 EPS provides 408 watts of PoE power.
Page 214 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches General PoE Operation Table 2. Example of PoE Priority Operation Port Priority Configuration Command and Resulting Operation Setting 25 - 48 Critical This priority class always receives power. If there is not enough power to provision PDs on all of the ports configured for this class, then no power goes to ports configured for High and Low priority.
Page 215: Configuring Poe Operation
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Configuring PoE Operation Configuring PoE Operation In its default configuration, PoE support is enabled on the switch’s 10/100Base- TX ports, with Priority set to Low and the power threshold set to 80 (%). Syntax: power threshold <...
Page 216 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Configuring PoE Operation Syntax: interface [e] < port-list > power [ critical | high | low ] Reconfigures the PoE priority level on < port-list >. For a given level, the switch automatically prioritizes ports by port number (in ascending order).
Page 217: Viewing Poe Configuration And Status
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Viewing PoE Configuration and Status Viewing PoE Configuration and Status Displaying the Switch’s Global PoE Power Status Syntax:show power-management Displays the switch’s global PoE power status, including: • Max Power: Lists the maximum PoE wattage available to provision active PoE ports on the switch.
Page 218: Displaying An Overview Of Poe Status On All Ports
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Viewing PoE Configuration and Status Displaying an Overview of PoE Status on All Ports Syntax:show power-management brief Displays the following port power status: • Port: Lists all PoE-capable ports on the switch. Power Enable: Shows Yes for ports enabled to support PoE (the default) and No for ports on which PoE is disabled.
Page 219: Displaying The Poe Status On Specific Ports
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Viewing PoE Configuration and Status Displaying the PoE Status on Specific Ports Syntax:show power-management [e] < port-list > Displays the following PoE status and statistics (since the last reboot) for each port in < port-list >: • Power Enable: Shows Yes for ports enabled to support PoE (the default) and No for ports on which PoE is disabled.
Page 220 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches Viewing PoE Configuration and Status • Power Denied Cnt: Shows the number of times PDs requesting power on the port have been denied due to insufficient power available. Each occurrence generates an Event Log message. •...
Page 221: Planning And Implementing A Poe Configuration
Planning and Implementing a PoE Configuration This section provides an overview of some considerations for planning a PoE application. For additional information on this topic, refer to the HP ProCurve PoE Planning and Implementation Guide. Assigning PoE Ports to VLANs If your network includes VLANs, you may want to assign various PoE-config...
Page 222: Poe Operating Notes
Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches PoE Operating Notes PoE Operating Notes Simply disabling a PoE port does not affect power delivery through that port. To cycle the power on a PD receiving power from a PoE port on the switch, disable, then re-enable the power to that port.
Page 223: Poe Event Log Messages
PoE Event Log Messages PoE operation generates these Event Log messages. You can also configure the switch to send these messages to a configured debug destination (terminal device or SyslogD server. I 1MM/DD/YY HH:MM:SS chassis: Message header, with severity, date, system time, and system module type.
Page 224 • Temperature fault: The operating temperature in an external power supply has exceeded the normal operating range. • 50V fault: The HP 600 RPS/EPS or HP 610 EPS reported a fault condition. Contact your HP ProCurve support representative. • 12V fault: The HP 600 RPS/EPS or HP 610 EPS reported a fault condition.
Page 225 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches PoE Event Log Messages Port < port-# > PD MPS Absent indication. The switch no longer detects a device on < port-# >. The device may have been disconnected, powered down, or stopped functioning.
Page 226 Power Over Ethernet (PoE) Operation for the Series 2600-PWR Switches PoE Event Log Messages — This page is intentionally unused. — 11-20...
Page 227 Port Trunking Contents Overview ........... . . 12-2 Port Status and Configuration .
Page 228: Port Trunking
This capability applies to connections between backbone devices as well as to connections in other network areas where traffic bottlenecks exist. Port Trunking Support HP ProCurve HP ProCurve HP ProCurve HP ProCurve Series 2600,...
Page 229: Port Connections And Configuration
Port Trunking Port Status and Configuration The multiple physical links in a trunk behave as one logical link Switch 2: port c port a Switch 1: port a port c Ports a2 and Ports c1 - c4 port a port c a4 - a6 are configured port a...
Page 230: Trunk Group Boundary Requirement For The Series 4100Gl Switch 10/100/1000 Module (J4908A)
Port Trunking Port Status and Configuration For example: HPswitch(config)# trunk 1-8 trk1 This command is valid in all cases (switching or routing) because all of the ports are in the same port group. HPswitch(config)# trunk 9-14 trk2 This command is NOT valid if IP routing is enabled on the switch (because the selected ports are in different port groups and IP routing is enabled).
Page 231: Port Trunk Options And Operation
L A C P N o t e LACP operation requires full-duplex (FDx) links. For most installations, HP recommends that you leave the port Mode settings at Auto (the default). LACP also operates with Auto-10, Auto-100, and Auto-1000 (if negotiation selects FDx);...
Page 232 On Switch 2800 Series devices, ensure that all ports in a dynamic trunk belong to the same port group. The Switch 2800 Series devices do not support trunks comprised of ports from different port groups.
Page 233 See “Trunk Group Operation Using LACP” on page 12-18. Trunk Provides manually configured, static-only trunking to: (non- • Most HP switches and routing switches not running the 802.3ad LACP protocol. protocol) • Windows NT and HP-UX workstations and servers Use the Trunk option when: –...
Page 234 Port Configuration: The default port configuration is Auto, which enables a port to sense speed and negotiate duplex with an Auto-enabled port on another device. HP recommends that you use the Auto setting for all ports you plan to use for trunking.
Page 235 Port Trunking Port Status and Configuration Trunk Group Boundary Requirement for the Series 4100gl Switch 10/100/1000 Module (J4908A): Trunks must be created, manually or dynamically, with ports from the same group, Group1 or Group2. Group1: Ports 1-5, 7-11, 16 Group2: Ports 6, 12-15, 17-22 For example, a trunk made up of ports 3 - 5 is valid;...
Page 236: Menu: Viewing And Configuring A Static Trunk Group
Port Trunking Port Status and Configuration Menu: Viewing and Configuring a Static Trunk Group Important Configure port trunking before you connect the trunked links to another switch, routing switch, or server. Otherwise, a broadcast storm could occur. (If you need to connect the ports before configuring them for trunking, you can temporarily disable the ports until the trunk is configured.
Page 237 Port Trunking Port Status and Configuration • All ports in a trunk must have the same media type and mode (such as 10/100TX set to 100FDx, or 100FX set to 100FDx). The flow control settings must also be the same for all ports in a given trunk. To verify these settings, see “Viewing Port Status and Configuring Port Param...
Page 238: Cli: Viewing And Configuring A Static Or Dynamic Port Trunk Group
Port Trunking Port Status and Configuration During the Save process, traffic on the ports configured for trunking will be delayed for several seconds. If the Spanning Tree Protocol is enabled, the delay may be up to 30 seconds. 8. Connect the trunked ports on the switch to the corresponding ports on the opposite device.
Page 239 Port Trunking Port Status and Configuration Using a port list specifies, for switch ports in a static trunk group, only the ports you want to view. In this case, the command specifies ports A5 through A7. However, because port A6 is not in a static trunk group, it does not appear in the resulting listing: Port A5 appears with an example of a name that you can optionally assign using the Friendly Port Names feature.
Page 240 Port Trunking Port Status and Configuration Listing Static LACP and Dynamic LACP Trunk Data. This command lists data for only the LACP-configured ports. Syntax: show lacp In the following example, ports A1 and A2 have been previously configured for a static LACP trunk. (For more on “Active”, see table 12-5 on page 12-22.) Figure 12-8.
Page 241: Using The Cli To Configure A Static Or Dynamic Trunk Group
Port Trunking Port Status and Configuration “Up” Links Standby Link Figure 12-9. Example of a Dynamic LACP Trunk with One Standby Link Using the CLI To Configure a Static or Dynamic Trunk Group I m p o r t a n t Configure port trunking before you connect the trunked links between switches.
Page 242 Removing a port from a trunk can result in a loop and cause a broadcast storm. When you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.
Page 243 Unless STP is running on your network, removing a port from a trunk can result in a loop. To help prevent a broadcast storm when you remove a port from a trunk where STP is not in use, HP recommends that you first disable the port or disconnect the link on that port.
Page 244: Web: Viewing Existing Port Trunk Groups
Port Trunking Port Status and Configuration Syntax: no interface <port-list> lacp In this example, port C6 belongs to an operating, dynamic LACP trunk. To remove port C6 from the dynamic trunk and return it to passive LACP, you would do the following: HPswitch>(config)# no interface c6 lacp HPswitch>(config)# interface c6 lacp passive Note that in the above example, if the port on the other end of the link is...
Page 245 Port Trunking Port Status and Configuration N o t e Dynamic LACP trunks operate only in the default VLAN (unless GVRP is enabled and Forbid is used to prevent the trunked ports from joining the default VLAN). Thus, if an LACP dynamic trunk forms using ports that are not in the default VLAN, the trunk will automatically move to the default VLAN unless GVRP operation is configured to prevent this from occurring.
Page 246 Port Trunking Port Status and Configuration Table 12-4. LACP Trunk Types LACP Port Trunk Operation Configuration 802.3ad-compliant Dynamic LACP This option automatically establishes an trunk group, with LACP for the port Type parameter and DynX for the port Group name, where X is an automatically assigned value from 1 to 6 (2600, 2600-PWR, 4100gl, and 6108) or 1 to 24 (2800), depending on how many dynamic and static trunks are currently on the switch.
Page 247: Default Port Operation
Port Trunking Port Status and Configuration Default Port Operation In the default configuration, all ports are configured for passive LACP. How- ever, if LACP is not configured, the port will not try to detect a trunk config uration and will operate as a standard, untrunked port. N o t e Passive and active LACP port will pause and listen for LACP packets once a link is established.
Page 248 Port Trunking Port Status and Configuration Table 12-5. LACP Port Status Data Status Name Meaning Port Numb Shows the physical port number for each port configured for LACP operation (C1, C2, C3 . . .). Unlisted port numbers indicate that the missing ports are assigned to a static Trunk group, an FEC trunk group, or are not configured for any trunking.
Page 249: Lacp Notes And Restrictions
Port Trunking Port Status and Configuration LACP Notes and Restrictions 802.1X (Port-Based Access Control) Configured on a Port. To main tain security, LACP is not allowed on ports configured for 802.1X authenticator operation. If you configure port security on a port on which LACP (active or passive) is configured, the switch removes the LACP configuration, displays a notice that LACP is disabled on the port(s), and enables 802.1X on that port.
Page 250 Port Trunking Port Status and Configuration Static LACP Trunks. Where a port is configured for LACP (Active or Passive), but does not belong to an existing trunk group, you can add that port to a static trunk. Doing so disables dynamic LACP on that port, which means you must manually configure both ends of the trunk.
Page 251: Trunk Group Operation Using The "Trunk" Option
Port Trunking Port Status and Configuration Half-Duplex and/or Different Port Speeds Not Allowed in LACP Trunks. The ports on both sides of an LACP trunk must be configured for the same speed and for full-duplex (FDx). The 802.3ad LACP standard speci fies a full-duplex (FDx) requirement for LACP trunking.
Page 252: How The Switch Lists Trunk Data
Port Trunking Port Status and Configuration Depending on the capabilities of the device on the other end of the trunk, negotiate the forwarding mechanism on the trunk to the non-protocol option. When auto-negotiated to the SA/DA forwarding mechanism, provide higher performance on the trunk for broadcast, multicast, and flooded traffic through distribution in the same manner as non-protocol trunking.
Page 253 In actual networking environments, this is rarely a problem. However, if it becomes a problem, you can use the HP ProCurve Manager Plus network management software to quickly and easily identify the sources of heavy traffic (top talkers) and make adjustments to improve performance.
Page 254 Port Trunking Port Status and Configuration — This page is intentionally unused. — 12-28...
Page 255 Configuring for Network Management Applications Contents Using SNMP Tools To Manage the Switch ......13-3 Overview ..........13-3 SNMP Management Features .
Page 256 Configuring for Network Management Applications Contents Configuring CDP Operation ....... . . 13-34 Effect of Spanning Tree (STP) On CDP Packet Transmission .
Page 257: Configuring For Network Management Applications
For more on Authorized IP Managers, refer to the Access Security Guide on the Documentation CD-ROM shipped with your switch. (For the latest version of this guide, visit the HP ProCurve web site.) For information on the Management VLAN feature, refer to See the chapter on VLANs in the Advanced Traffic Management Guide..
Page 258: Snmp Management Features
Hewlett-Packard proprietary MIB (Management Information Base) file. To ensure that you have the latest version in the database of your SNMP network management tool, you can copy the MIB file from the HP ProCurve World Wide Web site at: http://www.hp.com/go/hpprocurve Click on software, then MIBs.
Page 259: Configuring For Snmp Version 3 Access To The Switch
C a u t i o n The “public” community exists by default and is used by HP’s network man agement applications. Deleting the “public” community disables many net- work management functions (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting).
Page 260: Snmp Version 3 Commands
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Version 3 Commands SNMP version 3 (SNMPv3) adds a new command to the CLI for configuring SNMPv3 functions. To enable SMNPv3 operation on the switch you must: a. Enable SNMPv3 with the snmpv3 enable command.
Page 261: Snmpv3 Enable
(given fewer features), but not upgraded with new features added. For this I n i t i a l U s e r s reason HP recommends that you create a second user with SHA and DES at when you enable SNMPv3...
Page 262: Snmp Version 3 Users
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Version 3 Users The second step to using SNMPv3 on the switch is to configure the users that you assign to different groups. To establish users on the switch: a. Add the users to the User table.
Page 263 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch [no] snmpv3 group group_name user user_name sec-model <ver1| ver2c | ver3> (— Continued —) user user_name This is the user to be added to the access group. This must match the user name added with the snmpv3 user command...
Page 264 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Then you must set the group access level to the user. This is done with the snmpv3 group command. For more details on the MIBs access for a give group see “Group Access Levels”...
Page 265: Group Access Levels
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Group Access Levels The switch supports eight predefined group access levels. There are four levels for use with version 3 users and four are used for access by version 2c or version 1 management applications.
Page 266: Snmp Communities
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Communities SNMP commuities are supported by the switch to allow management applica tion that use version 2c or version 1 to access the switch. The communities are mapped to Group Access Levels that are used for version 2c or version 1 support.
Page 267: Snmp Communities
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Figure 13-4 shows the assigning of the Operator community on MgrStation1 to the CommunityOperatorReadWrite group. Any other Operator only has an access level of CommunityOperatorReadOnly. Add mapping to allow write access for Operator community MgrStation1 Two Operator Access Levels...
Page 268: Menu: Viewing And Configuring Non-Snmp Version 3
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch C a u t i o n Deleting or changing the community named “public” prevents network man agement applications (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting) from operating in the switch. (Changing or deleting the “public”...
Page 269 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch If you are adding a community, the fields in this screen are blank. If you are editing an existing community, Type the value for this field. the values for the currently selected Use the Space bar to select Community appear...
Page 270: Cli: Viewing And Configuring Snmp Community Names
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch CLI: Viewing and Configuring SNMP Community Names Community Name Commands Page show snmp-server [<community-string>] 13-16 [no] snmp-server 13-17 [community <community-str>] 13-17 [host <community-str> <ip-addr>] 13-22 [<none | debug | all | not-info | critical>] [enable traps <authentication>...
Page 271 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Configuring Community Names and Values. The snmp-server command enables you to add SNMP communities with either default or specific access attributes, and to delete specific communities. Syntax: [no] snmp-server community < community-name > Configures a new community name.
Page 272: Snmp Notification And Traps
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Notification and Traps The switches covered in this guide support the SNMPv3 notification process. They also support version 1or version 2c traps. For more information on version 1or version2c traps, see “Trap Features” on page 13-20. The SNMPv3 notification process allows for the messages passed to be authenticated and encrypted if you choose.
Page 273 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch [no] snmpv3 targetaddress < addr-name > params < parms-name> < IP-Addr > ( — Continued — ) max-msg-size<size> The maximum number of bytes of length a message to this target can be.
Page 274: Trap Features
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Trap Features Feature Default Menu snmp-server host (trap receiver) public — page — 13-22 snmp-server enable (authentication trap) none — page — 13-23 A trap receiver is a management station designated by the switch to receive SNMP traps sent from the switch.
Page 275 Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Using the CLI To List Current SNMP Trap Receivers. This command lists the currently configured trap receivers and the setting for authentication traps (along with the current SNMP community name data — see “SNMP Communities”...
Page 276 Table 13-2. Options for Sending Event Log Messages as Traps Event Level Description None (default) Send no log messages. Send all log messages. Not INFO Send the log messages that are not information-only. Critical Send critical-level log messages. Debug Reserved for HP-internal use. 13-22...
Page 277: Using The Cli To Enable Authentication Traps
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch For example, to configure a trap receiver in a community named "red-team" with an IP address of 10.28.227.130 to receive only "critical" log messages: HPswitch(config)# snmp-server trap-receiver red-team 10.28.227.130 critical N o t e s To replace one community name with another for the same IP address, you...
Page 278: Advanced Management: Rmon
Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Advanced Management: RMON The switches covered in this guide support RMON (Remote Monitoring) on all connected network segments. This allows for troubleshooting and optimiz ing your network. The following RMON groups are supported: Ethernet Statistics (except the numbers of packets of different frame sizes) Alarm...
Page 279: Cdp
To take advantage of CDP in the switch, you should have a working knowledge of SNMP operation and an SNMP utility capable of polling the switches for CDP data. HP’s implementation of CDP places specific data into the switch’s Management Information Base (MIB). However, retrieval of this data for network mapping is dependent on the operation of your SNMP utility.
Page 280: Cdp Terminology
Configuring for Network Management Applications An SNMP utility can progressively discover CDP devices in a network by: 1. Reading a given device’s CDP Neighbor table (in the Management Infor mation Base, or MIB) to learn about other, neighbor CDP devices 2. Using the information learned in step 1 to go to and read the neighbor devices’...
Page 281: General Cdp Operation
Configuring for Network Management Applications General CDP Operation The switch stores information about adjacent CDP devices in a CDP Neigh bors table maintained in the switch’s MIB (Management Information Base). This data is available to SNMP-based applications designed to read CDP data from the MIB.
Page 282: Incoming Cdp Packets
Configuring for Network Management Applications Accepts, but does not forward CDP Switch "B" packets describing Switch "A". Also CDP-Aware transmits CDP packets describing itself Switch with (Switch "B") out all ports. CDP Running Switch "C" Drops CDP packets describing Switch "A".
Page 283 Configuring for Network Management Applications and “E” are not neighbors because the intervening CDP-disabled switch “D” does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E” does not have any CDP neighbors.) Switch "A"...
Page 284 Configuring for Network Management Applications Using the example in figure 13-12, the CDP Neighbor table for switches “A” and “B” would appear similar to these: Switch A: Switch B: (Note that no CDP devices appear on port B5, which is connected to a device on which CDP is present, but disabled.) Figure 13-13.
Page 285: Configuring Cdp On The Switch
Configuring for Network Management Applications CDP-disabled switch) does not forward CDP packets; i.e. is not transparent to CDP traffic. (For the same reason, switch “E” does not have any CDP neighbors.) Figure 13-12 (page 13-29) illustrates how multiple CDP neighbors can appear on a single port.
Page 286: Viewing The Switch's Current Cdp Configuration
Configuring for Network Management Applications Viewing the Switch’s Current CDP Configuration Syntax: show cdp Lists the switch’s global and per-port CDP configuration. This example shows the default CDP configuration. CDP Enable/Disable on the Switch Packet Hold Time in CDP Neighbor Table Interval for Transmitting Outbound CDP Packets on All Ports Per-Port CDP Enable/Disable...
Page 287: Clearing (Resetting) The Cdp Neighbors Table
CDP packets. Figure 13-15. Example of CDP Neighbors Table Listing Figure 13-16 illustrates a topology of CDP-enabled devices for the CDP Neigh bors table listing in figure 13-15. HP ProCurve Switch HP Switch 2512 Running CDP HP J4812A: Accounting...
Page 288: Configuring Cdp Operation
Configuring for Network Management Applications Note that the table will again list entries after the switch receives new CDP packets from neighboring CDP devices. Figure 13-17. View of the CDP Neighbors Table Immediately After Executing cdp clear Configuring CDP Operation Enabling or Disabling CDP Operation on the Switch.
Page 289 Configuring for Network Management Applications Enabling or Disabling CDP Operation on Individual Ports. In the factory-default configuration, the switch has all ports enabled and transmit ting CDP packets. Disabling CDP on a port prevents that port from sending outbound CDP packets and causes it to drop inbound CDP packets without recording their data in the CDP Neighbors table.
Page 290: Effect Of Spanning Tree (Stp) On Cdp Packet Transmission
Configuring for Network Management Applications Changing the Transmission Interval for Outbound CDP Packets. Syntax: cdp timer < 5 . . 254 > Changes the interval the switch uses to transmit CDP packets describing itself to neighbor devices. (Default: 60 seconds) For example, if the switch’s transmit interval for CDP packets was set to a non-default value, you would use this command to reset it to one minute: HPswitch(config) cdp timer 60...
Page 291: Packets
Configuring for Network Management Applications CDP Packets from Switch "A" to Switch "B" Switch "B" Switch "A" Port A3 CDP Enabled CDP Enabled Port B1 STP Root Device CDP Neighbor Table Port C5 CDP Packets from Port | Data Switch "B" to Switch "A" ------|------------------ CDP Neighbor Table A3 | Switch "B"data...
Page 292: Cdp Neighbor Data And Mib Objects
Configuring for Network Management Applications 4. If a CDP switch does not detect an IP address on the connecting port of a CDP neighbor, then the loopback IP address is used (127.0.0.1). For example, in figure 13-20, port A1 on CDP switch “X” is connected to port C5 on CDP neighbor switch “Y”, with the indicated VLAN configuration on port C5: VLAN Membership in Port C5 of Switch "Y"...
Page 293 CDP Cache Address IP address of source device. Software Version ASCII String Device Name (ASCII string) In HP ProCurve switches, this is the value configured for the System Name parameter. Device MAC Address Included in the Device Name entry. Destination Port Number On the switch itself (the receiving device), the number of the port through which the CDP packet arrived.
Page 294: Operating Notes
1 to n, where n is the last consecutive port on the switch.) Figure 13-21. Example of CDP Neighbor Data For the current switch MIB, go to the HP ProCurve World Wide Web site at: http://ww.hp.com/go/hpprocurve Click on software, then MIBs.
Page 295 Configuring for Network Management Applications CDP-Capable Hubs. Some hubs are capable of running CDP, but also forward CDP packets as if the hub itself were transparent to CDP. Such hubs will appear in the switch’s CDP Neighbor table and will also maintain a CDP neighbor table similar to that for switches.
Page 296 Configuring for Network Management Applications — This page is intentionally unused. — 13-42...
Page 297 CLI: Switch-To-Switch Downloads ..... . . A-15 Using HP PCM+ to Update Switch Software ....A-16 Troubleshooting TFTP Downloads .
Page 298: Overview
In the switch console interface, the switch software is referred to as the OS, for switch “operating system”. Downloading Switch Software HP periodically provides switch software updates through the HP ProCurve website (http://www.hp.com/go/hpprocurve). For more information, see the support and warranty booklet shipped with the switch. After you acquire a...
Page 299: General Switch Software Download Rules
An switch software file for the switch has been stored on a TFTP server accessible to the switch. (The switch software file is typically available from the HP ProCurve website at http://www.hp.com/go/hpprocurve.) The switch is properly connected to your network and has already been configured with a compatible IP address and subnet mask.
Page 300: Menu: Tftp Download From A Server To Primary Flash
File Transfers Downloading Switch Software N o t e If your TFTP server is a Unix workstation, ensure that the case (upper or lower) that you specify for the filename is the same case as the characters in the switch software filenames on the server. Menu: TFTP Download from a Server to Primary Flash Note that the menu interface accesses only the primary flash.
Page 301 File Transfers Downloading Switch Software Progress Bar Figure A-2. Example of the Download OS Screen During a Download A “progress” bar indicates the progress of the download. When the entire switch software file has been received, all activity on the switch halts and you will see Validating and writing system software to FLASH...
Page 302: Cli: Tftp Download From A Server To Primary Or Secondary Flash
File Transfers Downloading Switch Software CLI: TFTP Download from a Server to Primary or Secondary Flash This command automatically downloads a switch software image to primary or secondary flash. Syntax: copy tftp flash < ip-address > < remote-os-file > [< primary | secondary >] Note that if you do not specify the flash destination, the Xmodem download defaults to primary flash.
Page 303: Using Secure Copy And Sftp
As described earlier in this chapter you can use a TFTP client on the admin istrator workstation to update software images. This is a plain text mechanism and it connects to a standalone TFTP server or another HP ProCurve switch acting as a TFTP server to obtain the software image file(s). Using SCP and SFTP allows you to maintain your switches with greater security.
Page 304: How It Works
File Transfers Downloading Switch Software Note SFTP over SSH version 1 (SSH v1) is not supported. A request from either the client or the switch (or both) using SSH v1 generates an error message. The actual text of the error message differs, depending on the client software in use.
Page 305: The Scp/Sftp Process
As a matter of policy, administrators should not enable the SSHv1-only or the SSHv1-or-v2 advertisement modes. SSHv1 is supported on only some legacy switches (such as the HP ProCurve Series 2500 switches). To confirm that SSH is enabled type in the command HPswitch(config)# show ip ssh 3. Once you have confirmed that you have enabled an SSH session (with the...
Page 306: Authentication
File Transfers Downloading Switch Software Authentication Switch memory allows up to ten public keys. This means the authentication and encryption keys you use for your third-party client SCP/SFTP software can differ from the keys you use for the SSH session, even though both SCP and SFTP use a secure SSH tunnel.
Page 307: Using Xmodem To Download Switch Software From A Pc Or Unix Workstation
File Transfers Downloading Switch Software All files have read-write permission. Several SFTP commands, such as create or remove, are not allowed and return an error message. The switch displays the following files: +---cfg running-config startup-config +---log crash-data crash-log event log +---os primary secondary...
Page 308: Cli: Xmodem Download From A Pc Or Unix Workstation To Primary Or Secondary Flash
File Transfers Downloading Switch Software From the console Main Menu, select 7. Download OS (for Edit). Press Use the Space bar to select XMODEM in the Method field. (for eXecute) to begin the switch software download. 4. Press , then [Enter] The following message then appears: Press enter and then initiate Xmodem transfer...
Page 309 File Transfers Downloading Switch Software Note that if you do not specify the flash destination, the Xmodem download defaults to primary flash. For example, to download a switch software file named G0103.swi from a PC (running a terminal emulator program such as HyperTerminal) to primary flash: Execute the following command in the CLI: Figure A-4. Example of the Command to Download Switch Software Using...
Page 310: Switch-To-Switch Download
Downloading Switch Software Switch-to-Switch Download You can use TFTP to transfer a switch software file between two HP ProCurve switches that use the same software code base. The menu interface enables you to transfer primary-to-primary or secondary-to-primary. The CLI enables all combinations of flash location options.
Page 311: Cli: Switch-To-Switch Downloads
File Transfers Downloading Switch Software General System Information b. Check the Firmware revision line. CLI: Switch-To-Switch Downloads You can download a switch software file between two switches that use the same code base and which are connected on your LAN. To do so, use a copy tftp command from the destination switch.The options for this CLI feature include: Copy from primary flash in the source to either primary or secondary in...
Page 312: Using Hp Pcm+ To Update Switch Software
Destination Using HP PCM+ to Update Switch Software HP ProCurve Manager Plus include a software update utility for updating on HP ProCurve switch products. For further information, refer to the Getting Started Guide and the Administrator’s Guide, provided electronically with the application.
Page 313: Troubleshooting Tftp Downloads
File Transfers Troubleshooting TFTP Downloads Troubleshooting TFTP Downloads When using the menu interface, if a TFTP download fails, the Download OS screen indicates the failure. Message Indicating cause of TFTP Download Failure Figure A-7. Example of Message for Download Failure To find more information on the cause of a download failure, examine the messages in the switch’s Event Log by executing this CLI command: HPswitch# show log tftp...
Page 314: Transferring Switch Configurations
File Transfers Transferring Switch Configurations For a Unix TFTP server, the file permissions for the switch software file do not allow the file to be copied. Another console session (through either a direct connection to a terminal device or through Telnet) was already running when you started the session in which the download was attempted.
Page 315 File Transfers Transferring Switch Configurations TFTP: Copying a Configuration File to a Remote Host. Syntax: copy < startup-config | running-config > tftp < ip-addr > < remote-file > This command copies the switch’s startup configuration (startup-config file) to a remote TFTP host. For example, to upload the current startup configuration to a file named sw4100 in the configs directory on drive "d"...
Page 316 File Transfers Transferring Switch Configurations Xmodem: Copying a Configuration File from a Serially Connected PC or Unix Workstation. To use this method, the switch must be connected via the serial port to a PC or Unix workstation on which is stored the configuration file you want to copy.
Page 317: Copying Diagnostic Data To A Remote Host, Pc, Or Unix Workstation
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation You can use the CLI to copy the following types of switch data to a text file in a management device: Command Output: Sends the output of a switch CLI command as a file on the destination device.
Page 318: Copying Event Log Output To A Destination Device
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Event Log Output to a Destination Device This command uses TFTP or Xmodem to copy the Event Log content to a PC or UNIX workstation on the network. Syntax: copy event-log tftp <...
Page 319: Copying Crash Log Data Content To A Destination Device
File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation Copying Crash Log Data Content to a Destination Device This command uses TFTP or Xmodem to copy the Crash Log content to a PC or UNIX workstation on the network. You can copy individual slot information or the master switch information.
Page 320 File Transfers Copying Diagnostic Data to a Remote Host, PC, or Unix Workstation — This page is intentionally unused. — A-24...
Page 321 Monitoring and Analyzing Switch Operation Contents Overview ........... . . B-3 Status and Counters Data .
Page 322 Monitoring and Analyzing Switch Operation Contents Switch 6108 and Series 4100gl Switches ..... . B-24 Series 2600, 2600-PWR, and 2800 Switches ....B-24 Menu: Configuring Port and Static Trunk Monitoring .
Page 323: Overview
Monitoring and Analyzing Switch Operation Overview Overview The switch has several built-in tools for monitoring, analyzing, and trouble- shooting switch and network operation: Status: Includes options for displaying general switch information, man agement address data, port status, port and trunk group statistics, MAC addresses detected on each port or VLAN, and STP, IGMP, and VLAN data (page B-4).
Page 324: Status And Counters Data
Monitoring and Analyzing Switch Operation Status and Counters Data Status and Counters Data This section describes the status and counters screens available through the switch console interface and/or the web browser interface. N o t e You can access all console screens from the web browser interface via Telnet to the console.
Page 325: Menu Access To Status And Counters
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access To Status and Counters Beginning at the Main Menu, display the Status and Counters menu by select ing: 1. Status and Counters Figure B-1. The Status and Counters Menu Each of the above menu items accesses the read-only screens described on the following pages.
Page 326: General System Information
Monitoring and Analyzing Switch Operation Status and Counters Data General System Information Menu Access From the console Main Menu, select: 1. Status and Counters 1. General System Information Figure B-2. Example of General Switch Information This screen dynamically indicates how individual switch resources are being used.
Page 327: Switch Management Address Information
Monitoring and Analyzing Switch Operation Status and Counters Data Switch Management Address Information Menu Access From the Main Menu, select: 1 Status and Counters . . . 2. Switch Management Address Information Figure B-3. Example of Management Address Information with VLANs Configured This screen displays addresses that are important for management of the switch.
Page 328: Module Information
Monitoring and Analyzing Switch Operation Status and Counters Data Module Information Use this feature to determine which slots have modules installed and which type(s) of modules are installed. Menu: Displaying Port Status From the Main Menu, select: 1. Status and Counters . . . 3.
Page 329: Port Status
Monitoring and Analyzing Switch Operation Status and Counters Data Port Status The web browser interface and the console interface show the same port status data. Menu: Displaying Port Status From the Main Menu, select: 1. Status and Counters . . . 4.
Page 330: Viewing Port And Trunk Group Statistics And Flow Control Status
Monitoring and Analyzing Switch Operation Status and Counters Data Viewing Port and Trunk Group Statistics and Flow Control Status Feature Default Menu viewing port and trunk statistics for all page B-11 page B-12 page B-12 ports, and flow control status viewing a detailed summary for a page B-11 page B-12...
Page 331: Menu Access To Port And Trunk Statistics
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to Port and Trunk Statistics To access this screen from the Main Menu, select: 1. Status and Counters . . . 4. Port Counters Figure B-6. Example of Port Counters on the Menu Interface To view details about the traffic on a particular port, use the [v] key to highlight that port number, then select Show Details.
Page 332: Cli Access To Port And Trunk Group Statistics
Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access To Port and Trunk Group Statistics To Display the Port Counter Summary Report. This command provides an overview of port activity for all ports on the switch. Syntax: show interfaces To Display a Detailed Traffic Summary for Specific Ports.
Page 333: Viewing The Switch's Mac Address Tables
Monitoring and Analyzing Switch Operation Status and Counters Data Viewing the Switch’s MAC Address Tables Feature Default Menu viewing MAC addresses on all page B-14 page B-16 — ports on a specific VLAN viewing MAC addresses on a page B-15 page B-16 —...
Page 334: Menu Access To The Mac Address Views And Searches
Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access to the MAC Address Views and Searches Per-VLAN MAC-Address Viewing and Searching. This feature lets you determine which switch port on a selected VLAN is being used to communi cate with a specific device on the network.
Page 335 Monitoring and Analyzing Switch Operation Status and Counters Data Finding the Port Connection for a Specific Device on a VLAN. This feature uses a device’s MAC address that you enter to identify the port used by that device. 1. Proceeding from figure B-8, press (for Search), to display the following prompt: Enter MAC address: _...
Page 336: Cli Access For Mac Address Views And Searches
Monitoring and Analyzing Switch Operation Status and Counters Data Prompt for Selecting the Port To Search Figure B-10. Listing MAC Addresses for a Specific Port 2. Use the Space bar to select the port you want to list or search for MAC addresses, then press to list the MAC addresses detected on that [Enter]...
Page 337 Monitoring and Analyzing Switch Operation Status and Counters Data Corresponding Port Numbers. For example, to list the learned MAC address on ports A1 through A4 and port A6: HPswitch> show mac-address a1-a4,a6 To List All Learned MAC Addresses on a VLAN, with Their Port Numbers.
Page 338: Spanning Tree Protocol (Stp) Information
Monitoring and Analyzing Switch Operation Status and Counters Data Spanning Tree Protocol (STP) Information Menu Access to STP Data From the Main Menu, select: 1. Status and Counters . . . 8. Spanning Tree Information STP must be enabled on the switch to display the following data: Figure B-12.
Page 339: Cli Access To Stp Data
Monitoring and Analyzing Switch Operation Status and Counters Data Figure B-13. Example of STP Port Information CLI Access to STP Data This option lists the STP configuration, root data, and per-port data (cost, priority, state, and designated bridge). Syntax: show spanning-tree HPswitch>...
Page 340: Internet Group Management Protocol (Igmp) Status
Monitoring and Analyzing Switch Operation Status and Counters Data Internet Group Management Protocol (IGMP) Status The switch uses the CLI to display the following IGMP status on a per-VLAN basis: Show Command Output show ip igmp Global command listing IGMP status for all VLANs configured in the switch: •...
Page 341: Vlan Information
Monitoring and Analyzing Switch Operation Status and Counters Data VLAN Information The switch uses the CLI to display the following VLAN status: Syntax: show vlan Lists: • Maximum number of VLANs to support • Existing VLANs • Status (static or dynamic) •...
Page 342 Monitoring and Analyzing Switch Operation Status and Counters Data Listing the VLAN ID (VID) and Status for ALL VLANs in the Switch. Figure B-15. Example of VLAN Listing for the Entire Switch Listing the VLAN ID (VID) and Status for Specific Ports. Because ports A1 and A2 are not members of VLAN-...
Page 343: Web Browser Interface Status Information
Alert Log, which informs you of any problems that may have occurred on the switch. For more information on this screen, see chapter 5, ‘Using the HP Web Browser Interface’. Port...
Page 344: Port And Static Trunk Monitoring Features
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Port and Static Trunk Monitoring Features Port Monitoring Features Feature Default Menu display monitoring disabled page B-25 page B-27 page B-29 configuration configure the monitor port(s) ports: none page B-25 page B-27 page B-29 selecting or removing ports none selected page B-25 page B-28 page B-29 Switch 6108 and Series 4100gl Switches...
Page 345: Menu: Configuring Port And Static Trunk Monitoring
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Menu: Configuring Port and Static Trunk Monitoring This procedure describes configuring the switch for monitoring when moni toring is disabled. (If monitoring has already been enabled, the screens will appear differently than shown in this procedure.) From the Console Main Menu, Select: 2.
Page 346 Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Move the cursor to the Monitoring Port parameter. Port where monitored traffic exits the switch. Figure B-20. How To Select a Monitoring Port Use the Space bar to select the port to use for monitoring. 6. Use the downarrow key to move the cursor to the Action column for the individual ports and position the cursor at a port you want to monitor.
Page 347: Cli: Configuring Port And Static Trunk Monitoring
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features CLI: Configuring Port and Static Trunk Monitoring Port and Static Trunk Monitoring Commands Used in This Section show monitor below mirror-port page B-27 monitor page B-28 You must use the following configuration sequence to configure port and static trunk monitoring in the CLI: Assign a monitoring (mirror) port.
Page 348 Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features To turn off monitoring: HPswitch(config)# no mirror-port Selecting or Removing Ports and Static Trunks As Monitoring Sources. After you configure a monitor port you can use either the global configuration level or the interface context level to select ports and static trunks as monitoring sources.
Page 349: Web: Configuring Port Monitoring
Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features Web: Configuring Port Monitoring To enable port monitoring: Click on the Configuration tab. Click on Monitor Port. To monitor one or more ports. Click on the radio button for Monitor Selected Ports. b.
Page 350 Monitoring and Analyzing Switch Operation Port and Static Trunk Monitoring Features — This page is intentionally unused. — B-30...
Page 351 Troubleshooting Contents Overview ........... . . C-3 Troubleshooting Approaches .
Page 352 Troubleshooting Contents Displaying the Configuration File ......C-39 CLI: Viewing the Configuration File ..... . C-39 Web: Viewing the Configuration File .
Page 353: Overview
N o t e HP periodically places switch software updates on the HP ProCurve web site. HP recommends that you check this web site for software updates that may have fixed a problem you are experiencing. For information on support and warranty provisions, see the Support and Warranty booklet shipped with the switch.
Page 354 Web Browser Interface – Use the Port Utilization Graph and Alert Log in the web browser interface included in the switch to help isolate problems. See Chapter 5, “Using the HP Web Browser Interface” for operating information. These tools are available through the web browser interface: –...
Page 355: Chassis Over-Temperature Detection
Check the event log for fan failure warnings. If the switch has experienced a fan failure, remove power from the switch and contact your HP service and support representative. If there are no fan failures, ensure that the ambient temperature in the switch’s operating area is not causing the over-temperature condition.
Page 356: Browser Or Telnet Access Problems
Troubleshooting Browser or Telnet Access Problems Browser or Telnet Access Problems Cannot access the web browser interface: Access may be disabled by the Web Agent Enabled parameter in the switch console. Check the setting on this parameter by selecting: 2. Switch Configuration . . . 1.
Page 357 Troubleshooting Browser or Telnet Access Problems Cannot Telnet into the switch console from a station on the network: Telnet access may be disabled by the Inbound Telnet Enabled parameter in the System Information screen of the menu interface: 2. Switch Configuration 1.
Page 358: Unusual Network Activity
Unusual network activity is usually indicated by the LEDs on the front of the switch or measured with the switch console interface or with a network management tool such as the HP ProCurve Manager. Refer to the Installation Guide you received with the switch for information on using LEDs to identify unusual network activity.
Page 359: Cdp Problems
Troubleshooting Unusual Network Activity This can also happen, for example, if the server is first configured to issue IP addresses with an unlimited duration, then is subsequently configured to issue IP addresses that will expire after a limited duration. One solution is to configure “reservations”...
Page 360: Igmp-Related Problems
Troubleshooting Unusual Network Activity If there is more than one physical path between the switch and the other CDP device and STP is running on the switch, then STP will block the redundant link(s). In this case, the switch port on the remaining open link may not be a member of an untagged VLAN, or any untagged VLANs to which the port belongs may not have an IP address.
Page 361: Lacp-Related Problems
Removing a port from a trunk without first disabling the port can create a traffic loop that can slow down or halt your network. Before removing a port from a trunk, HP recommends that you either disable the port or disconnect it from the LAN.
Page 362 Troubleshooting Unusual Network Activity Ensure that the radius-server timeout period is long enough for network conditions. The switch does not authenticate a client even though the RADIUS server is properly configured and providing a response to the authentication request. If the RADIUS server configuration for authenti cating the client includes a VLAN assignment, ensure that the VLAN exists as a static VLAN on the switch.
Page 363 Troubleshooting Unusual Network Activity Port A9 shows an “Open” status even though Access Control is set to Unauthorized (Force Auth). This is because the port-access authenticator has not yet been activated. Figure C-2. Example of a Port Remaining Open After Being Configured with “Control Unauthorized” RADIUS server fails to respond to a request for service, even though the server’s IP address is correctly configured in the switch.
Page 364: Radius-Related Problems
Troubleshooting Unusual Network Activity Also, ensure that the switch port used to access the RADIUS server is not blocked by an 802.1X configuration on that port. For example, show port- access authenticator < port-list > gives you the status for the specified ports. Also, ensure that other factors, such as port security or any 802.1X configura...
Page 365: Spanning-Tree Protocol (Stp) And Fast-Uplink Problems
Troubleshooting Unusual Network Activity it either must match the server key or you must configure a server-specific key. If the switch already has a server-specific key assigned to the server’s IP address, then it overrides the global key and must match the server key. Global RADIUS Encryption Key Unique RADIUS Encryption Key for the RADIUS server at...
Page 366: Ssh-Related Problems
Troubleshooting Unusual Network Activity Fast-Uplink Troubleshooting. Some of the problems that can result from incorrect usage of Fast-Uplink STP include temporary loops and generation of duplicate packets. Problem sources can include: Fast-Uplink is configured on a switch that is the STP root device. Either the Hello Time or the...
Page 367: Stacking-Related Problems
Troubleshooting Unusual Network Activity Switch does not detect a client’s public key that does appear in the switch’s public key file (show ip client-public-key). The client’s public key entry in the public key file may be preceded by another entry that does not terminate with a new line (CR).
Page 368: Tacacs-Related Problems
Troubleshooting Unusual Network Activity TACACS-Related Problems Event Log. When troubleshooting TACACS+ operation, check the switch’s Event Log for indications of problem areas. All Users Are Locked Out of Access to the Switch. If the switch is func tioning properly, but no username/password pairs result in console or Telnet access to the switch, the problem may be due to how the TACACS+ server and/or the switch are configured.
Page 369 Troubleshooting Unusual Network Activity The encryption key configured in the server does not match the encryption key configured in the switch (by using the tacacs-server key command). Verify the key in the server and compare it to the key configured in the switch. (Use show tacacs-server to list the global key. to list any server-specific keys.) show config show config running...
Page 370: Timep, Sntp, Or Gateway Problems
Troubleshooting Unusual Network Activity TimeP, SNTP, or Gateway Problems The Switch Cannot Find the Time Server or the Configured Gateway . TimeP, SNTP, and Gateway access are through the primary VLAN, which in the default configuration is the DEFAULT_VLAN. If the primary VLAN has been moved to another VLAN, it may be disabled or does not have ports assigned to it.
Page 371 Troubleshooting Unusual Network Activity Link supporting VLAN_1 and VLAN_2 Switch “Y” Switch “X” Port Y- 7 Port X-3 VLAN Port Assignment VLAN Port Assignment Port VLAN_1 VLAN_2 Port VLAN_1 VLAN_2 Untagged Tagged Untagged Tagged Figure C-5. Example of Correct VLAN Port Assignments on a Link If VLAN_1 (VID=1) is configured as “Untagged”...
Page 372 Troubleshooting Unusual Network Activity MAC Address “A”; VLAN 1 Server VLAN 1 Switch with HP ProCurve Single Switches Covered MAC Address “A”; VLAN 2 Forwarding by this Guide Database VLAN 2 (Multiple Forwarding Database) Problem: This switch detects continual moves of MAC address “A” between ports.
Page 373: Using Logging To Identify Problem Sources
W (warning) indicates that a service has behaved unexpectedly. (critical) indicates that a severe switch error has occurred. (debug) reserved for HP internal diagnostic information. Date is the date in mm/dd/yy format that the entry was placed in the log.
Page 374 Troubleshooting Using Logging To Identify Problem Sources (The event log is not erased by using the Reboot Switch command in the Main Menu.) Table C-1.Event Log System Modules Module Event Description Module Event Description addrMgr Address table Console management chassis switch hardware ports Change in port status;...
Page 375: Menu: Entering And Navigating In The Event Log
Troubleshooting Using Logging To Identify Problem Sources Menu: Entering and Navigating in the Event Log From the Main Menu, select Event Log. Range of Events in the Log Range of Log Events Displayed Log Status Line Figure C-8. Example of an Event Log Display The log status line at the bottom of the display identifies where in the sequence of event messages the display is currently positioned.
Page 376: Cli
Troubleshooting Using Logging To Identify Problem Sources CLI: Using the CLI, you can list Events recorded since the last boot of the switch All events recorded Event entries containing a specific keyword, either since the last boot or all events recorded Syntax: show logging [-a] [<search-text>] HPswitch>...
Page 377: Debug And Syslog Operation
H.07.30 or greater) • Switch 2800 Series For the latest feature information on HP ProCurve switches, visit the HP ProCurve web site and check the latest release notes for the switch products you use. Configure the switch to send Event Log messages to the current manage...
Page 378 Troubleshooting Using Logging To Identify Problem Sources Debug Types. This section describes the types of debug messages the switch can send to configured debug destinations. Syntax: [no] debug < debug-type > Configures the switch to send all debug types to the config ured debug destination(s).
Page 379 < facility-name > Specifies the destination subsystem the SyslogD server(s) must use. (All SyslogD servers must use the same subsystem.) HP recommends the default (user) subsystem unless your application specifically requires another subsystem. Options include: user (the default) - Various user-level messages...
Page 380 Troubleshooting Using Logging To Identify Problem Sources For example, on a switch where there are no SyslogD servers configured, you would do the following to configure SyslogD servers 18.120.38.155 and 18.120.43.125 and automatically enable Syslog logging (with user as the default logging facility): logging <...
Page 381 Troubleshooting Using Logging To Identify Problem Sources Enabling or Disabling Logging to Management Sessions and SyslogD Servers. Use this command when you want to do any of the following: Disable Syslog logging on all currently configured SyslogD servers with- out removing the servers from the switch configuration. Re-enable Syslog logging if it is disabled and there is at least one SyslogD server currently configured in the switch.
Page 382 Troubleshooting Using Logging To Identify Problem Sources Shows that Syslog (Destination) logging is enabled and transmitting log messages to IP address 18.120.38.155. Also shows that the logging facility is set to user (the default), and that session logging is enabled.) Disables Syslog logging (but retains the Syslog IP address in the switch configuration).
Page 383 Troubleshooting Using Logging To Identify Problem Sources Syntax: show debug List the current debug status for both Syslog logging and Session logging. Shows that Syslog logging is enabled and sending event messages to the user facility on the SyslogD server at IP address 18.120.38.155.
Page 384: Diagnostic Tools
Troubleshooting Diagnostic Tools Ensure that your Syslog server(s) will accept Debug messages. All Syslog messages the switch generates carry the configured facility. All Syslog messages resulting from debug operation carry a “debug” severity. If you configure the switch to transmit debug messages to a SyslogD server, ensure that the server’s Syslog application is configured to accept the “debug”...
Page 385: Ping And Link Tests
Troubleshooting Diagnostic Tools 2. If the attached end-node does not have an Auto mode setting, then you must manually configure the switch port to the same setting as the end- node port. See Chapter 10, “Port Status and Basic Configuration”. Ping and Link Tests The Ping test and the Link test are point-to-point tests between your switch and another IEEE 802.3-compliant device on your network.
Page 386: Web: Executing Ping Or Link Tests
Troubleshooting Diagnostic Tools Web: Executing Ping or Link Tests 1. Click here. 2. Click here. 3. Select Ping Test (the default) or Link Test 4. For a Ping test, enter the IP address of the target device. For a Link test, enter the MAC address of the target device.
Page 387: Cli: Ping Or Link Tests
Troubleshooting Diagnostic Tools Timeout in Seconds is the number of seconds to allow per attempt to test a connection before determining that the current attempt has failed. To halt a Link or Ping test before it concludes, click on the Stop button. To reset the screen to its default settings, click on the Defaults button.
Page 388 Troubleshooting Diagnostic Tools Link Tests. You can issue single or multiple link tests with varying repeti tions and timeout periods. The defaults are: Repetitions: 1 (1 - 999) Timeout: 5 seconds (1 - 256 seconds) Syntax: link < mac-address > [repetitions < 1 - 999 >] [timeout < 1 - 256 >] [vlan <...
Page 389: Displaying The Configuration File
Troubleshooting Diagnostic Tools Displaying the Configuration File The complete switch configuration is contained in a file that you can browse from either the web browser interface or the CLI. It may be useful in some troubleshooting scenarios to view the switch configuration. CLI: Viewing the Configuration File Using the CLI, you can display either the running configuration or the startup configuration.
Page 390: Listing Switch Configuration And Operation Details For Help In Troubleshooting
Troubleshooting Diagnostic Tools Listing Switch Configuration and Operation Details for Help in Troubleshooting Release G.04.05 and greater includes the command. This command show tech outputs, in a single listing, switch operating and running configuration details from several internal switch sources, including: Image stamp (software version data) Running configuration Event Log listing...
Page 391 Troubleshooting Diagnostic Tools In Hyperterminal, click on Transfer Capture Text... Figure C-17. The Capture Text window of the Hypertext Application Used with Microsoft Windows Software 2. In the field, enter the path and file name under which you want to store File output.
Page 392: Cli Administrative And Troubleshooting Commands
Troubleshooting Diagnostic Tools CLI Administrative and Troubleshooting Commands These commands provide information or perform actions that you may find helpful in troubleshooting operating problems with the switch. N o t e For more on the CLI, refer to “Using the Command Line Interface (CLI)” on page 4-1.
Page 393: Restoring The Factory-Default Configuration
Clear/Reset button combination N o t e HP recommends that you save your configuration to a TFTP server before resetting the switch to its factory-default configuration. You can also save your configuration via Xmodem, to a directly connected PC.
Page 394: Restoring A Flash Image
Troubleshooting Restoring a Flash Image Restoring a Flash Image The switch can lose its operating system if either the primary or secondary flash image location is empty or contains a corrupted OS file and an operator uses the erase flash command to erase a good OS image file from the opposite flash location.
Page 395 Troubleshooting Restoring a Flash Image 4. Since the OS file is large, you can increase the speed of the download by changing the switch console and terminal emulator baud rates to a high speed. For example: a. Change the switch baud rate to 115,200 Bps. =>...
Page 396 Troubleshooting Restoring a Flash Image Figure C-19. Example of Xmodem Download in Progress 8. When the download completes, the switch reboots from primary flash using the OS image you downloaded in the preceding steps, plus the most recent startup-config file. C-46...
Page 397 MAC Address Management Contents Overview ........... . . D-2 Determining MAC Addresses in the Switch .
Page 398: Overview
MAC Address Management Overview Overview The switch assigns MAC addresses in these areas: For management functions: • One Base MAC address assigned to the default VLAN (VID = 1) • Additional MAC address(es) corresponding to additional VLANs you configure in the switch For internal switch operations: One MAC address per port (See "CLI: Viewing the Port and VLAN MAC Addresses"...
Page 399: Menu: Viewing The Switch's Mac Addresses
MAC Address Management Determining MAC Addresses in the Switch Use the CLI to view the switch’s port MAC addresses in hexadecimal format. Menu: Viewing the Switch’s MAC Addresses The Management Address Information screen lists the MAC addresses for: Base switch (default VLAN; VID = 1) Any additional VLANs configured on the switch.
Page 400: Cli: Viewing The Port And Vlan Mac Addresses
MAC Address Management Determining MAC Addresses in the Switch CLI: Viewing the Port and VLAN MAC Addresses The MAC address assigned to each switch port is used internally by such features as Flow Control and the Spanning Tree Protocol. Using the walkmib command to determine the MAC address assignments for individual ports can sometimes be useful when diagnosing switch operation.
Page 401 MAC Address Management Determining MAC Addresses in the Switch ifPhysAddress.1 - 6: Ports A1 - A6 in Slot 1 (Addresses 7 - 24 in slot 1 and 25 - 48 in slot 2 are unused.) ifPhysAddress.49 - 51: Ports C1 - C3 in Slot 3 (Addresses 52 - 72 in slot 3 are unused.) ifPhysAddress.205 Base MAC Address (MAC...
Page 402: Viewing Themac Addresses Of Connected Devices On Series 2600/2600-Pwr, 2800 And 4100Gl Switches
MAC Address Management Viewing theMAC Addresses of Connected Devices on Series 2600/2600-PWR, 2800 and 4100gl Switches Viewing theMAC Addresses of Connected Devices on Series 2600/ 2600-PWR, 2800 and 4100gl Switches Syntax: show mac-address [ | mac-addr | Lists the MAC addresses of the devices the switch has detected, along with the number of the specific port on which each MAC address was detected.
Page 403 • 224M • 2848 HP ProCurve switches provide a way to automatically adjust the system clock for Daylight Savings Time (DST) changes. To use this feature you define the month and date to begin and to end the change from standard time. In addition to the value "none"...
Page 404 Daylight Savings Time on HP ProCurve Switches Configuring Daylight Savings Time Canada and Continental US: • Begin DST at 2am the first Sunday on or after April 1st. • End DST at 2am the first Sunday on or after October 25th.
Page 405 Daylight Savings Time on HP ProCurve Switches Configuring Daylight Savings Time Before configuring a "User defined" Daylight Time Rule, it is important to understand how the switch treats the entries. The switch knows which dates are Sundays, and uses an algorithm to determine on which date to change the system clock, given the configured "Beginning day"...
Page 406 Daylight Savings Time on HP ProCurve Switches Configuring Daylight Savings Time — This page is intentionally unused. — E-4...
Page 407 Index Symbols See also reboot. boot ROM console … A-3 => prompt … C-44 boot ROM mode … C-44 Bootp Numerics Bootp table file … 8-14 Bootptab file … 8-14 802.3u auto negotiation standard … 10-4 effect of no reply … C-8 operation …...
Page 408 priority settings mapped to downstream status and counters access … 3-7 devices … 10-30 troubleshooting access problems … C-6 Clear button … 5-11 context level restoring factory default configuration … C-43 global config … 8-11 CLI copyright … 1-ii context level … 10-10 CPU utilization …...
Page 409 … C-23 HP Procurve temperature messages … C-5 support URL … 5-13 use during troubleshooting … C-23 HP web browser interface … 2-5 with debug … C-33 excessive packets … 10-25 IEEE 802.1d … C-15 IEEE 802.3ab … 10-5...
Page 410 removing or replacing … 8-10 operation not allowed … C-11 IP preserve outbound traffic distribution … 12-26 DHCP server … 8-16 overview … 12-5 overview … 8-16 passive … 12-16, 12-20 rules, operating … 8-16 removing port from active trunk … 12-17 summary of effect …...
Page 411 … 5-8 MIB … 13-4 delete … 3-7, 5-11 MIB listing … 13-4 if you lose the password … 5-11 MIB, HP proprietary … 13-4 lost … 5-11 MIB, standard … 13-4 manager … 5-8 mirroring operator … 5-8 See port monitoring.
Page 412 … 10-32 media requirements … 12-8 power interruption, effect on event log … C-23 media type … 12-3 Procurve, HP, URL … 13-4 menu access to static trunk … 12-10 prompt, => … C-44 monitor port restrictions … 12-9 public SNMP community …...
Page 413 secure copy configuration … 9-4 See SCP/SFTP. disabling … 9-11 secure FTP enabling and disabling … 9-9 See SCP/SFTP. event log messages … 9-24 security … 5-11, 7-3 menu interface operation … 9-24 Self Test LED operating modes … 9-2 behavior during factory default reset …...
Page 414 URL … 5-12 timesync, disabling … 9-20 URL Window … 5-12 Time-To-Live … 8-4, 8-5 switch console traffic monitoring … 13-5, B-24 See console. traffic, port … B-10 switch setup menu … 3-8 transceiver, fiber-optic … 10-5 switch software trap … 5-24 See OS.
Page 415 URL web browser enable/disable … 7-4 browser interface online help location … 5-13 web browser interface HP Procurve … 5-13, 13-4 access parameters … 5-8 management … 5-13 alert log … 5-6, 5-19 management server … 5-12, 5-13 alert log details … 5-20 support …...
Page 416 10 – Index...
Page 418 Technical information in this document is subject to change without notice. ©Copyright 2000, 2004. Hewlett-Packard Development Company, L.P. Reproduction, adaptation, or translation without prior written permission is prohibited except as allowed under the copyright laws. October 2004 Manual Part Number 5990-6023...

This manual is also suitable for:

Switch 2600-pwr series Switch 2600 series Switch 4100 series Switch 6108

HP Switch 2800 Series Management And Configuration Manual

Quick Links

Troubleshooting

Related Manuals for HP Switch 2800 Series

Summary of Contents for HP Switch 2800 Series