HP (Hewlett-Packard) 2520 Bedienungsanleitung

HP Pr oC ur v e S wit ch So ft w ar e Management and Co nfi guratio n Guide 25 20 S wit ches So ftwar e v ersi on S. 1 4. 03 No vembe r 2009[...]

[...]

HP ProCurve 2520 Switches November 2009 S.14.03 Management and Configuration Guide[...]

© Copyright 2009 Hewlett-Pa ckard Development Company , L.P . The information contained herein is subject to change with- out notice. All Rights Reserved. This document contains proprie tary information, which is protected by copyright. No pa rt of this document may be photocopied, reproduced, or translated into another language without the prior [...]

Contents Product Documentation About Your Switch Manual Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Printed Publications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Electronic Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Software Feature[...]

2 Selecting a M anagement Interface Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 Advantages of Using ProCurve Manager Custom Login Banne rs for the Console Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2[...]

4 Using the Command Line Interface (CLI) Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

Security: Creating Usernames and Passwords in the Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8 Entering a User Name and Password . . . . . . . . . . . . . . . . . . . . . . 5-10 Using a User Name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10 If You Lose the Pass[...]

Local Switch Software Replacement and Re moval . . . . . . . . . . . . . . 6-16 Viewing the Startup -Config File Status with Multiple Using the Clear + Reset Butt on Combination To Reset th e Xmodem: Copying a Configur ation File to a Serially Xmodem: Copying a Config uration from a Serially Rebooting the Switch . . . . . . . . . . . . . . . . . . [...]

7 Interface Access and System Information Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 Interface Access: Console/Serial Link, Web, and Inbound Telnet . 7-3[...]

9 Time Protocols Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2 TimeP Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

11 Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-5 Broadcast Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-5 Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6 Configuring Ports . . . . . . . . .[...]

How Is Power Allo cation Prioriti zed? . . . . . . . . . . . . . . . . . . . . . . 11-5 Configuring PoE Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-6 Disabling or Re-Enablin g PoE Port Operat io n . . . . . . . . . . . . . . . . . . 11-6 Enabling Support for Pre-Standa rd Devices . . . . . . . . . . . . . . . [...]

13 Trunk Group Operation Usin g the “Trunk” Option . . . . . . . . . . . . 12-26 How the Switch Lists Trunk Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-27 Outbound Traffic Distribu tion Across Trunked Links . . . . . . . . . 12-27 Configuring for Network Management Applications Contents . . . . . . . . . . . . . . . . . . . [...]

LLDP-MED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-37 Configuring Support f or Port Speed and Dup lex Advertising Device Capability, Network Policy, PoE Status Displaying Swit ch Information Availa ble for Outbound Packet Boundaries in a Netw ork Topology . . . . . . . . . . . . . . . . . . . . 13-37 C[...]

Menu: TFTP Down load from a Server t o Primary Flash . . . . . . . A-4 CLI: TFTP Downlo ad from a Server to Flash . . . . . . . . . . . . . . . . A-7 Using Secure Copy and SFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-9 How It Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-10 The S[...]

Copying Crash Data Content to a Dest inat ion Device . . . . . . . A-29 Copying Crash Log Da ta Content to a Destination Device . . . . A-30 B Monitoring and Analyzing Switch Operation Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1 Web Browser Access To View Port and Trunk Over[...]

Web: Configuring Port Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . B-28 Locating a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-28 C Troubleshooting Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-1 Overview . .[...]

Debug/Syslog Destination Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . C-32 Configuring the Severit y Level for Event Log Configuring the System Module Used to Select the Event Log Debug/Syslog Configuration Commands . . . . . . . . . . . . . . . . . . . . . . C-33 Configuring Debug/Syslog Operat ion . . . . . . . . . . . . . . . . [...]

DNS Resolver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-71 Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-71 Basic Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-71 Configuring and Usin g DNS Res[...]

Product Documentation About Y our Switch Manual Set Note For the latest version of all ProCur ve switch documentation, including Release Notes covering re cently added features, please visit the ProCurve Networking W eb site at www .procurve.com, click on Support , and then click on Manuals . Printed Publications The publication s listed below are [...]

Software Feature Index For the software manual set support ing your series 2520 switch models, thi s feature index indicates wh ic h manual to consul t fo r information on a given software feature. Feature Management and Configuration Advanced T raffic Management Access Security Guide 802.1Q VLAN T agging - X - 802.1p Priority X - - 802.1X Authenti[...]

Feature Management and Configuration Advanced T raffic Management Access Security Guide File T ransfers X - - Friendly Port Names X GVRP - X - IGMP - X - Interface Access (T elnet , Console/Serial, Web) X - - IP Addressing X - - LACP X - - Link X - - LLDP X - - LLDP-MED X Loop Protection X MAC Address Management X - - MAC Lockdown - - X MAC Lockout[...]

Feature Management and Configuration Advanced T raffic Management Access Security Guide Power over Ethernet (PoE) Quality of Service (QoS) - X - RADIUS Authenticat ion and Accounting - - X Secure Copy X - - SFTP X - - SNMP X - - Software Downloads (SCP/SFTP , TFTP , Xmodem) X - - Spanning T ree (MSTP) - X - SSH (Secure Shell) Encryption - - X SSL ([...]

1 Getting Started Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Command Syntax Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

Getting Started Introduction Introduction This guide is intended for use with th e following switches: ■ HP ProCurve 2520-8-PoE Switch ■ HP ProCurve 2520-24-PoE Switch It describes how to use the command lin e interface (CLI), Menu interface, and web browser to conf igure, manage, monitor , and troubleshoot switch opera- tion. For an ove rview [...]

Getting Started Conventions ■ Braces within squa re brackets ( [ < > ] ) indicate a required element within an optional choice. ■ Boldface indicates use of a CLI command, part of a CLI command syntax, or other displayed element in general text. For example: “Use the copy tftp command to downl oad the key from a TFTP server .” ■ Ital[...]

Getting Started Sources for More Information Keys Simulations o f actual keys use a bo ld, sa ns-serif typeface with square brackets. For example, the T ab key appears as [T ab] and the “Y” key appears as [Y] . Sources for More Information For information about switch operation and features no t covered in this guide, consult the f ollowing sou[...]

Getting Started Sources for More Information • port configurati on, trunking, traf fic control, and PoE operation • SNMP , LLDP , and other netwo rk management topi cs • file transfers, switch monitoring, troub leshooting, and MAC address management ■ Advanced T raffic Management Guide —Use this guide for inform ation on topics such as: ?[...]

Getting Started Sources for More Information Getting Documentation From the W eb T o obtain the latest versions of documentation and release notes for your switch: 1. Go to the ProCurve Networking web site at www .procurve.com 2. Click on Support . 3. Click on Manuals . 4. Click on the pr oduct for which you want to view or downl oad a manual. If y[...]

Getting Started Sources for More Information Command Line Interface If you need i nformation on a specific command in the CLI, type the co mmand name fo llowed by help . For exampl e: Figure 1-3. Example of CLI Help W eb Browser Interface If you need information on specific features in the Pro Curve W eb Browser Interface (hereafter referred to as [...]

1 Getting Started Need Only a Quick Start? Need Only a Quick Start? IP Addressing If you just want to give th e switch an IP address so that it can communicate on your network, or if you are not us in g VLANs, ProCur ve recommends that you use the Switch Setup sc reen to quickly configure IP addressing. T o do so, do one of the following: ■ Enter[...]

2 Selecting a Management Interface Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 Advantages of Using ProCurve Manager Custom Login Banne rs for the Console Understanding Management I n terface s . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 Advantages of Using[...]

Selecting a Management Interface Overview Overview This chapter describes the foll owing: ■ Management interfaces for the sw itches covered in this guide ■ Advantages of using each interface Understanding Management Interfaces Management interfaces enable you to re configure the switch and to monitor switch status and performance. The sw itch o[...]

Selecting a Management Interface Advantages of Using the Menu Interface T o use ProCurve Manager or ProCurve Manager Plus, refer to the Getting Started Guide and th e Administrator’ s Guide , which are available electron- ically with t he software for these appl ications. For more info rmation, visit the ProCurve Networking web s ite at www .proc[...]

Selecting a Management Interface Advantages of Using the CLI ■ Enables T elnet (in-band ) access to t he menu functionality . ■ Allows faster navi gation , avoiding delays that occur with slower display of graphical objects over a web browser interface. ■ Provides more security ; configuratio n information and passwords are not seen on the ne[...]

Selecting a Management Interface Advantages of Using t he Web Browser Interface ■ T o perform specific procedures (such as configuring IP addressing or VLANs), use the Contents listing at th e front of the manu al to locate the informat ion you need . ■ For monitoring and analyzing switch operation , refer to Ap pendix B. ■ For information o [...]

Selecting a Management Interface Advantages of Using ProCurve Manager or ProCurve Manager Plus ■ More visual cues , using colors, status bars , device icons, and other graphical objects instead of relyin g solely on alphanumeric values ■ Display of acce ptable ranges of values av ailable in configurat ion list boxes Advantages of Using ProCurve[...]

Selecting a Management Interface Advantages of Using ProCurve Manager or ProCurve Manager Plus • In-Depth T raffic Analysis: An integrated, low- overhead traffic mon- itor interface shows de tailed info rmation on traff ic throughout the network. Using en hanced traffi c analysis protocols such as Extended RMON, users can monitor overall tr affic[...]

Selecting a Management Interface Custom Login Banners for the Console and Web Browser Interfaces Custom Login Banners for the Console and W eb Browser Interfaces Y ou can now configure the switch to di splay a login banner of up to 3070 characters when an operat or initiates a mana gement session with the switch through any of the follo wing method[...]

Selecting a Management Interface Custom Login Banners for the Console and Web Browser Interfaces or if the switch is using the factory-de fault banner shown in figure 2-5, then the banner page does not appear in the W eb browser when an operator initiates a log in session with the switch. Configuring and Displaying a Non-Default Banner Y ou can ena[...]

Selecting a Management Interface Custom Login Banners for the Console and Web Browser Interfaces This is a private system maintained by the Allied Widget Corporation. Unauthorized use of this system can result in civil and criminal penalties! In this case, the operator will use the [Enter] key to create line breaks, blank spaces for line centering,[...]

Selecting a Management Interface Custom Login Banners for the Console and Web Browser Interfaces ProCurve(config)# show running Running configuration: ; J9137A Configuration Editor; Created on release #S.14.XX hostname "ProCurve Switch" console baud-rate 9600 module 1 type JXXXXA snmp-server community "public" Operato r vlan 1 n[...]

Selecting a Management Interface Custom Login Banners for the Console and Web Browser Interfaces Figure 2-8. Example of Web Browser Interface Result of the Logi n Banner Configuration Operating Notes ■ The default banner appears only when the switch is in the factory default config uration. Using no banner motd deletes the currently configured ba[...]

3 Using the Menu Interface Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2 Starting and Ending a Me nu Session . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 How To Start a Menu Interface Session . . . . . . . . . . . . . . . . . . . . . . . . . 3-4 How To En[...]

Using the Menu Interface Overview Overview This chapter describes the follow ing features: ■ Overview of the Menu Interfa ce (page 3-2) ■ Starting and ending a Menu session (page 3-3) ■ The Main Menu (page 3-7) ■ Screen structure and nav igation (page 3-9) ■ Rebooting the switch (page 3-12) The menu interface operates through th e switch [...]

Using the Menu Interface Starting and Ending a Menu Session Note If the switch has neither a Manag er nor an Operator password, anyone having access to the console interface can oper ate the console with full manager privileges. Also, if you co nfigure only an Operator password, entering the Operator password en ables full manager privileges. For m[...]

Using the Menu Interface Starting and Ending a Menu Session How T o Start a Menu Interface Session In its factory default configuration, th e switch console starts with the CLI prompt. T o use the menu interface with Manager privileges, go to the Manager level prompt and ent er the menu command. 1. Use one of these methods to connect to the switch:[...]

Using the Menu Interface Starting and Ending a Menu Session Figure 3-1. Example of the Main Menu wi th Manager Privileges For a description of M ain Menu featur es, see “Main Menu Feat ures” on page 3- 7. Note T o configure the switc h to start with th e menu interface inst ead of the CLI, go to the Manager level prompt in th e CLI, enter the s[...]

Using the Menu Interface Starting and Ending a Menu Session Asterisk indicates a configuration change that requires a reboot to activate. Figure 3-2. Example Indicatio n of a Configuration Change Requiring a Reboot 1. In the current session, if you have not made conf iguration changes that require a switch reboot to activate, return to t he Main Me[...]

Using the Menu Interface Main Menu Features Main Menu Features ProCurve Switch 2-Jan-2009 0:00:44 ===========================- TELNET - MA NAGER MODE -========================= Main Menu 1. Status and Counters... 2. Switch Configuration... 3. Console Passwords... 4. Event Log 5. Command Line (CLI) 6. Reboot Switch 7. Download OS 8. Run Setup 9. Sta[...]

Using the Menu Interface Main Menu Features ■ Command Line (CLI): Selects the Command Line Interface at the same level (Manager or Operator) that you are accessing in the Me nu interface. (Refer to Chapter 4, “Using th e Command Line Interface (CLI)”.) ■ Reboot Switch: Performs a “warm” reboot of the switch, which clears most temporary [...]

Using the Menu Interface Screen Structure and Navigation Screen Structure and Navigation Menu interface screens incl ude these three e lements: ■ Parameter fields and/or read-o nl y information such as statistics ■ Navigati on and config uration act ions, such as Save, Edit, and Cancel ■ Help line to describe navigati on options, in dividual [...]

Using the Menu Interface Screen Structure and Navigation T able 3-5. How T o Navigate in the Menu Interface T ask: Actions: Execute an action from the “Actions –>” list at the bottom of the screen: Use either of the following methods: • Use the arrow keys ( [<] , or [>] ) to highlight the action you want to execute, then press [Ent[...]

Using the Menu Interface Screen Structure and Navigation T o get Help on indivi dual parameter descripti ons. In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlig hted, press [H] , and a sep arate help screen is displayed. For example: Pressing [H] or highlighting H elp and pressing [E[...]

Using the Menu Interface Rebooting the Switch Rebooting the Switch Rebooting the switch fr om the me nu interface ■ T erminates all current sessions and performs a reset of the operating system ■ Activates any menu interface configuration changes that req uire a reboot ■ Resets statistical counters to zero (Note that statistical counters can [...]

Using the Menu Interface Rebooting the Switch Rebooting T o Activate Configuration Changes. Configuration changes for most parameters in th e menu interface become ef fective as soon as you save them. However , you must reboot the switch in orde r to implement a change in the Maximum VLANs to support parameter . (T o access this parameter , go to t[...]

Using the Menu Interface Menu Features List Menu Features List Status and Count ers • General System Information • Switch Management Address I n format ion • Port Status • Port Counters • VLAN Address T able • Port Address T able Switch Configur ation • System Info rmation • Port/T runk Se ttings • Network M onitoring Port • IP [...]

Using the Menu Interface Where To Go From Here Where T o Go From Here This chapter provides a n overview of the menu interf ace and how to use it. The followi ng table indicates where t o turn for det ailed informatio n on how to use the individual features av ailable through the menu interface. Option: Tu r n t o : T o use the Run Setup option Ref[...]

Using the Menu Interface Where To Go From Here 3-16[...]

4 Using the Command Line Interface (CLI) Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

Using the Command Line Interface (CLI) Overview Overview The CLI is a text-based command interf ace for configuring an d monitoring the switch. The CLI gives you access to the switch’ s full set of commands while providing the same password protecti on that is used in the web browser interface and the menu interface. Accessing the CLI Like the me[...]

Using the Command Line Interface (CLI) Using the CLI When you use the CLI to make a config uration change, the switch writes the change to the Ru nning-Config file in vola tile memory . This allows you to test your configurat ion changes before ma ki ng them permanent. T o make changes permanent, you must use t he write memory command to save them [...]

Using the Command Line Interface (CLI) Using the CLI Caution ProCurve strongly recom mends that you confi gure a Manager passwo rd. If a Manager password is not configured, th en the Manager level is not password- protected, and anyone having in-band or out-of-band access to the switch may be able to reach the Manager level and compromise switch an[...]

Using the Command Line Interface (CLI) Using the CLI Manager Privileges Manager privileges give you three additi onal leve ls of access: Manager , Global Configuration, and Context Con figuration. A “ # ” character delimits any Man- ager prompt. For example: ProCurve #_ Example of the Manager prompt. ■ Manager level : Provides all Operat or l[...]

Using the Command Line Interface (CLI) Using the CLI T able 4-1. Privilege Level Hierarchy Privilege Level Example of Prompt and Permitted Operations Operator Privilege Operator Level ProCurve> show < command > setup ping < argument > link-test < argument > enable menu logout exit View status and con figuration information. Per[...]

Using the Command Line Interface (CLI) Using the CLI How T o Move Between Levels Change in Levels Example of Prompt, Command, and Result Operator level to Manager level Manager level to Global configuration level Global configuration level to a Context configuration level Context configuration level to another Context configuration level Move from [...]

Using the Command Line Interface (CLI) Using the CLI For example, if you use the menu interf ace to configure an IP address of “ X ” for VLAN 1 and later use the CLI t o co nfigure a different IP address of “ Y ” for VLAN 1, then “ Y ” replaces “ X ” as the IP address for VLAN 1 in the runni ng- config file. If you subsequently exe [...]

Using the Command Line Interface (CLI) Using the CLI T y ping ? at the Manager level produces this listing: When - - MORE - - appears, use the Spa ce bar or [Return] to list additional co mmands. Figure 4-4.Example of the Manager-Level Command Listing When - - MORE - - appears, there are more comma nds in the listing. T o list the next screenfull o[...]

Using the Command Line Interface (CLI) Using the CLI As mentioned above, if you type part of a command word and press [T ab] , the CLI completes the current wo rd (if you have typed enou gh of the word for the CLI to distingui sh it from other possibilities), including hyphen ated exten- sions. For ex ample: ProCurve (config)# port- [T ab] ProCurve[...]

Using the Command Line Interface (CLI) Using the CLI Displaying CLI “Help” CLI Help provides two types o f context- sensitive in formation: ■ Command list with a brief summary of each command’ s purpose ■ Detailed informati on on how to use individu al commands Displaying Command-List Help. Syntax: help Displays a listing of comm and Help[...]

Using the Command Line Interface (CLI) Using the CLI Figure 4-7.Example of How T o Display Help for a Specific Comma nd Note that trying to list the help for an individual command from a privilege level that does no t includ e that command results in an error message. For example, trying to li st the help for the interface command while at the glob[...]

Using the Command Line Interface (CLI) Using the CLI Configuration Comma nds and the Context Configuration Modes Y ou can execute any configurati on comma nd in the global configuration mode or in selected context modes. However , using a c ontext mode enables you to execute context-specific commands fast er , with shorter command strings. The swit[...]

Using the Command Line Interface (CLI) Using the CLI In the port context, the first block of commands in the “?” listing show the context-specif ic commands that will affect only ports C3-C6. The remaining commands in the listing are Manager , Operator , and context commands. Figure 4-8. Context-Specific Com mands Affecting Port Context 4-14[...]

Using the Command Line Interface (CLI) Using the CLI VLAN Context . Includes VLAN-specific command s that apply only to the selected VL AN, plus Manager an d Operator commands. The promp t for this mode includes the VLAN I D of the sel ected VLAN. For example, if you had already configur ed a VLAN wi th an ID of 100 in the switch: ProCurve(config)#[...]

Using the Command Line Interface (CLI) CLI Control and Editing CLI Control and Editing Executing a Prior Command—Redo The redo command executes a prior command i n the history list . Syntax: re do [number | command-str] Re-executes a command from history. Executes the last command by default. number : The position of the command to execute in the[...]

Using the Command Line Interface (CLI) CLI Control and Editing Syntax: re peat [cmdlist] [count] [delay] Repeats execution of a previo us command. Repeats the last command by default until a key is pressed. cmdlist: If a number or range of numbers is specified, the command repeats the n th most recent commands (where “n” is the position in the [...]

Using the Command Line Interface (CLI) CLI Control and Editing Using a Command Alias Y ou can crea te a simple command alias to use in place of a command name and its options. Choose an alias name that is not an existing CLI co mmand already . Existing CLI commands are se arched before looking for an alias command; an alias that is identical to an [...]

Using the Command Line Interface (CLI) CLI Control and Editing ProCurve(config)# show int custom 1-4 p ort name:4 type vlan intrusion speed enabled mdi Status and Counters - Custom Port Stat us Intrusion Port Name Type VLAN Aler t Speed Enabled MDI-mode ---- ---------- ---------- ----- ---- ----- ------- ------- -------- 1 Acco 10/100T 1 No 100FDx [...]

Using the Command Line Interface (CLI) CLI Control and Editing ProCurve(config)# show alias Name Command -------------------- ------------ ------------------ sc show config sic show int custom 1-4 port nam e:4 type vlan intrusion speed enabled mdi Figure 4-13. Example of Alias Commands and Their Co nfigurations 4-20[...]

Using the Command Line Interface (CLI) CLI Editing Shortcuts CLI Editing Shortcuts Keystrokes Function [Ctrl] [A ] Jumps to the first character of the command line. [Ctrl] [B] or [<] Moves the cursor back one character . [Ctrl] [C ] T erminates a task and displays the command prompt. [Ctrl] [D ] Deletes the character at the cursor . [Ctrl] [E] J[...]

Using the Command Line Interface (CLI) CLI Editing Shortcuts 4-22[...]

5 Using the ProCurve W eb Browser Interface Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2 Starting a Web Browser Using ProCurve Manager (PCM) or Security: Creating Usernames and Passwords General Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

Using the ProCurve Web Browser Interface Overview Overview The ProCurve web browser interface buil t into the switch lets you easily access the switch f rom a browser -based PC on your network. This lets you do the followin g: ■ Optimize your network uptim e by using the Alert Log and other diagnostic tools ■ Make config uration ch anges to the[...]

Using the ProCurve Web Browser Interface General Features General Features The web browser interface includes these features: Switch Identity and Status: • General system da ta • Software version • IP address • Status Overview • Port utilizat ion • Port counters • P o r t s t a t u s • Alert log Switch Configu ration: • Device vi [...]

Using the ProCurve Web Browser Interface Starting a Web Browser Interface Session with the Switch Starting a W eb Browser Interface Session with the Switch Y ou can sta rt a web browser session in the following ways: ■ Using a standalone web brow ser on a network con nection from a PC o r UNIX workstation: • Directly connected to your network ?[...]

Using the ProCurve Web Browser Interface Starting a Web Browser Interface Session with the Switch Using ProCurve Ma nager (PCM) or ProCurve Manager Plus (PCM+) ProCurve Manager and ProCurve Manager Pl us are designed for i nstallation on a network management work station. For this reason, the system require- ments are different from the system requ[...]

Using the ProCurve Web Browser Interface Starting a Web Browser Interface Session with the Switch First time install alert Figure 5-1. Example of Status Overview Scre en 5-6[...]

Using the ProCurve Web Browser Interface Tasks for Your First ProCurve Web Browser Interface Session T asks for Y our First ProCurve W eb Browser Interface Session The first time y ou access the web browse r interface, there ar e three tasks you should perform: ■ Review the “First Time Install” window ■ Set Manager and Op erator passwords ?[...]

Using the ProCurve Web Browser Interface Tasks for Your First ProCurve Web Browser Interface Session This window is the la unching point fo r the basic configur ation you need to perform to set web browser interface pa ssw ords for maintaining security and a fault detection policy , which determines the types of messages that the Alert Log displays[...]

Using the ProCurve Web Browser Interface Tasks for Your First ProCurve Web Browser Interface Session Figure 5-3.The Device Pa sswords Window T o set the passwords: 1. Access the Device Passwords screen by one of t he following met hods: • If the Alert Log includes a “First T ime Install” event entry , double click on this event, then, in the [...]

Using the ProCurve Web Browser Interface Tasks for Your First ProCurve Web Browser Interface Session Entering a User Name and Password Figure 5-4. Example of the Password Prompt in the W eb Browser Interface The manager and operator passw ords are us ed to control access to all switch interfaces. Once set, y ou will be prompt ed to supply the passw[...]

Using the ProCurve Web Browser Interface Tasks for Your First ProCurve Web Browser Interface Session The Clear button is provided for your convenience, but its presence means that if you are concerned with the security of the switch configuration and operation, you should make sure the swit ch is installed in a secure location, such as a locked wir[...]

Using the ProCurve Web Browser Interface Support/Mgmt URLs Feature Support/Mgmt URLs Feature The Support/ Mgmt URLs window en ables you to change the W orld W ide W eb Universal Resource Lo cator (URL) for two functions: ■ Support URL – A support information site for your switch ■ Management S erver URL – The web sit e for web browser onlin[...]

Using the ProCurve Web Browser Interface Support/Mgmt URLs Feature Support URL This is the site the switch accesses when you click on the Support tab on the web browser interf ace. The default URL is: www .procurve.com which is the W orld W ide W eb site for Pr oCurve networking pr oducts. Click on technical suppo rt on that page to get suppor t in[...]

Using the ProCurve Web Browser Interface Support/Mgmt URLs Feature In the defa ult configuratio n, the switch uses the URL for accessing the web browser interface help files on the ProCurve World Wide W eb site. Figure 5-7. How T o Access W eb Browse r Interface Online Help Using the PCM Server for Switch W eb Help For ProCurve devices that support[...]

Using the ProCurve Web Browser Interface Support/Mgmt URLs Feature 3. Add an entry , or edit the existing entry in the Discovery portion of the global properties (globalpro ps.prp) in PCM to redire ct the switches to the help files on the PCM server . For example: Global { T e mpDir=data/temp ... Discovery{ ... ... DeviceHelpUrlRedirect=htt p:// 15[...]

Using the ProCurve Web Browser Interface Status Reporting Features Status Reporting Features Browser elemen ts covered in this section includ e: ■ The Overv iew window (below) ■ Port utilization and status (page 5-17) ■ The Alert log (page 5-20) The Overview W indow The Overvi ew W indow is the home screen for any entry into the web browser i[...]

Using the ProCurve Web Browser Interface Status Reporting Features The Port Utilization and Status Displays The Port Utiliza tion and Status displays show an overview of the status of the switch and the amount of ne twork activi ty on each port. The following figure shows a sample reading of the Po rt Utilization and P ort Status. Port Status Indic[...]

Using the ProCurve Web Browser Interface Status Reporting Features ■ Maximum Activity Indicator: As the bars in the graph area change height to reflect the leve l of networ k activity on th e corresponding port, they leave an outline to identify th e ma ximum activity level t hat has been observed on the port. Utilization Guide line. A network ut[...]

Using the ProCurve Web Browser Interface Status Reporting Features Port Status Port Status Indicators Legend Figure 5-12. The Port Status Indicato rs and Legend The Port Status indicators show a symbol for each port th at indicates the general status of the port. Th ere are four possible statuses: ■ Port Connected – the port is enabled and is p[...]

Using the ProCurve Web Browser Interface Status Reporting Features The Alert Log The web browser interface Al ert Log, sh own in th e lower half of the sc reen, shows a list of network occurrences, or alerts , that were detected by the switch. T ypic al alerts are Broadcast Storm , indicating an excessive numbe r of broadcasts received on a port, a[...]

Using the ProCurve Web Browser Interface Status Reporting Features Alert T ypes and Detailed Views As of June, 2007, the web browser in terface generates th e following alert types: • Auto Partition • High collision or drop rate • Backup T ransition • Loss of Link • Excessive broadcasts • Mis-Configured SQE • Excessive CRC/alignment e[...]

Using the ProCurve Web Browser Interface Status Reporting Features Figure 5-14. Example of Alert Log Detail View 5-22[...]

Using the ProCurve Web Browser Interface Status Reporting Features Setting Fault Detection Policy One of the powerful features in the web browser interface is the Fault Detection facility . For your switch, this feature controls the types of alerts reported to the Alert Log based on their level of severity . Set this policy in the Fault De tection [...]

Using the ProCurve Web Browser Interface Status Reporting Features T o provide the most information on ne twork problems in the Alert Log, the recommended sensitivity level for Log Network Problems is High Sensitivity . The Fault Detec tion settings are: ■ High Sensitivity . This policy directs the swit ch to se nd all alerts to the Alert Log. Th[...]

6 Switch Memory and Configuration Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3 Using the Menu and Web Browse r Interfaces To Implement Viewing the Startup -Config File Status with Multiple Configuration File Management . . . . . . . . . . . . . . . . . . . . . . . . [...]

Switch Memory and Configuration Contents Changing or Overriding t he Reboot Configurat ion Policy . . . . . . . . . 6-28 Using the Clear + Reset Butt on Combination To Reset th e Xmodem: Copying a Configur ation File to a Serially Xmodem: Copying a Config uration from a Serially Managing Startup-Confi g Files in the Switch . . . . . . . . . . . . .[...]

Switch Memory and Configuration Overview Overview This chapter describes: ■ How switch memory manag e s co nfiguration chang es ■ How the CLI impl ements config uration changes ■ How the menu interface and web br owse r interface im plement configu- ration changes ■ How the swi tch provid es software options through pr imary/seco ndary flas[...]

Switch Memory and Configuration Configuration File Management ■ Running Config File: Exists in volatile memory and controls switch operation. If no configu ration changes have been made in the CLI since the switch was last booted, t he runnin g-config file is identical to the startup- config fi le. ■ Startup-config File: Exists in flash (non-vo[...]

Switch Memory and Configuration Configuration File Management “permanent”. When you are satisfied that the change is satisfactory , you can make it permanent by executing the write memory command. For ex ample, suppose you use t he following command to disabl e port 5: ProCurve(config)# interface ethernet 5 disable The above command disables po[...]

Switch Memory and Configuration Using the CLI To Implement Configuration Changes Using the CLI T o Implement Configuration Changes The CLI offers these capabili ties: ■ Access to the fu ll set of swit ch configuration f eatures ■ The option of testing configuration changes before making them perma- nent How T o Use the CLI T o V iew the Current[...]

Switch Memory and Configuration Using the CLI To Implement Configuration Changes 3. Observe the switch’ s performance wi th the new parameter settings to verify the effect of your changes. 4. When you are satisfied that you ha ve the correct parameter settings, use the write memory command to copy the changes to the startup-config file. Syntax: w[...]

Switch Memory and Configuration Using the CLI To Implement Configuration Changes If you use the CLI to ch ange a parameter setting, and then execute the boot command without f irst executing the write memory command to save the change, the switch prompts you to specify wh ether to save the changes in the current run ning-config file. F or example: [...]

Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Imple m ent Configuration Changes value will a ppear in the menu interface display for tha t parameter . However , as indicated above, unless you also ma ke a configuration change i n the menu interface, only the write memory command in the CLI will actually save the chang[...]

Switch Memory and Configuration Using the Menu and Web Browser Inte rfaces To Implement Configuration Changes Menu: Implementing Configuration Changes Y ou can use the menu inte rface to simu ltaneously save and implement a subset of switch configuration ch anges witho ut having to re boot the swi tch. That is, when you save a c onfiguration change[...]

Switch Memory and Configuration Using the Menu and Web Browser Interfaces To Imple m ent Configuration Changes the switch discards the configuration changes made while using the CLI. T o ensure that changes made while using the CLI are saved, execute wr ite memory in the CLI before rebootin g the switch. Rebooting from the Menu Interface ■ T e rm[...]

Switch Memory and Configuration Using the Menu and Web Browser Inte rfaces To Implement Configuration Changes If configur ation changes requirin g a reboot have been made, the switc h displays an asterisk ( * ) next to the menu it em in which the ch ange has been made. For example, if you change an d save parameter values for the Maximum VLANs to s[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options Using Primary and Secondary Flash Image Options T he sw it ch e s covered in this guide f eature two flash memory locations for storing switch softw are image files: ■ Primary Flash: The defaul t storage for a switch software image. ■ Secondary Flash: The additional[...]

----- ---------- -------- ------- ------- Switch Memory and Configuration Using Primary and Secondary Flash Image Options For example, if the switch is using a software version of S.14.XX stored in Primary flash, show version produces the fo llowing: ProCurve(config)# show version Image stamp: /su/code/build/info(s01) Jun 01 2009 10:50:26 S.14.XX 1[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options Image stamp: /sw/code/build/info(s02) Sept 01 2008 14.03.06 W.14.02 45 Boot Image: Primary ProCurve(config)# boot system flash secondary Device will be rebooted, do you want to continue [y/n]? y . . . ProCurve> show version Image stamp: /sw/code/build/info(s01) 1. In[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options flash and you can either copy the seco ndary image into primary or download another image to primary from an external source. Refe r to Appendix A, “File T ransfers”. Local Switch Software Replacement and Removal This section describes co mmands for erasing a soft w[...]

----- ---------- -------- ------- ------- Switch Memory and Configuration Using Primary and Secondary Flash Image Options Syntax: copy flash flash < destination flash > where: destination flash = primary or secondary : For example, to copy the image in secondary flash to primary flash: 1. V erify that there is a va lid flash im age in the sec[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options 2. Then e rase the software image in the se lected flash (in th is case, primary): The prompt shows which flash location will be erased . Figure 6-11. Example of Erase Flash Promp t 3. T ype y at the pro mpt to co mplete the flash erase. 4. Use show flash to verify eras[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options factory-default values to the paramete rs controlling the new features. Si mi- larly , If you create a startup-config fi le while using a version “Y” of the switc h software, and then reboot the switch with an earlier software ve rsion “X” that does not include [...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options Setting the Default Flash Y ou can specify the default flash to boot from on the next b oot by entering the boot set-default fl ash command . Syntax: boot set-defau lt flash [primary |secondary] Upon booting, set the default flas h for the next boot to primary or second[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options ProCurve(config)# boot system flash secon dary System will be rebooted from secondary im age. Do you want to continue [y/n]? Figure 6-13. Example of Boot Command with Se condary Flash Option In the above example, typi ng either a y or n at the second prompt in itiates t[...]

Switch Memory and Configuration Using Primary and Secondary Flash Image Options Scheduled Reload. Additional parameters have been added to the reload command to allow for a sche duled re boot of t he swit ch via the CLI. Syntax: [no] reload [after <[dd:]hh:]mm> | at <hh :mm[:ss]> [<mm/dd[/[yy]yy]>]] Enables a scheduled warm reboot[...]

Switch Memory and Configuration Multiple Configuration Files Multiple Configuration Files Action Page Listing and Displaying Startup-Config Files 6-27 Changing or Overriding the Reboot Configuration Policy 6-28 Managing Startup-Config Files Renaming Startup-Config Files 6-31 Copying Startup-Config Files 6-31 Erasing Startup-Config Files 6-32 Effect[...]

Switch Memory and Configuration Multiple Configuration Files ■ T ransitions fro m o ne software releas e to another can be perf ormed while maintaining a se parate configuration fo r the different software relea se versions. ■ By setting a reboot policy using a known good co nfiguration and then overriding the policy on a per -instance basis, y[...]

Switch Memory and Configuration Multiple Configuration Files 1. Reboot the switch through the Primary boot path using the startup-config file named backu pConfig . 2. Use the CLI to ma ke configuration ch anges in the running-config file, and then execute write mem . The result is that the startup-config fi le used to reboot the switch is modified [...]

Switch Memory and Configuration Multiple Configuration Files T ransitioning to Multip le Configuration Files At the first reboot with a sof tware release supporting multiple c onfiguration, the switch: ■ Assigns the filename oldConfig to the existing startup- config file (which is stored in memory slot 1). ■ Saves a copy of the existing startup[...]

Switch Memory and Configuration Multiple Configuration Files Listing and Displaying Startup-Config Files Command Page show config files Below show config < filename > 6 - 2 8 Viewing the Startup-Config File Status with Multiple Configuration Enabled Rebooting th e switch automatically enables the multip le configuration fea- ture. Syntax: sho[...]

Switch Memory and Configuration Multiple Configuration Files Displaying the Content of A Specific Startup-Config File W it h Multiple Configuration ena bled, th e switch can have up to three startup- config files. Because the sh ow config command always displa ys the content of the currently active startup-config fi le, the command extens ion shown[...]

Switch Memory and Configuration Multiple Configuration Files Syntax: startup-defau lt [ primary | secondary ] config < filename > Specifies a boot configur ation policy option: [ primary | secondary ] confi g < filename >: Designates the startup-config file to use in a reboot with the software version stored in a specific fl ash locatio[...]

Switch Memory and Configuration Multiple Configuration Files ProCurve(config)# startup-default pri config minconfig ProCurve(config) # startup-default sec config newconfig. Overriding the Default Re boot Configuration Policy . This com mand provides a method for manually r ebootin g with a specific startup-config file other than t he file specified[...]

Switch Memory and Configuration Multiple Configuration Files Renaming an Existing Startup-Config File Syntax: rename con fig < current-filename > < newname-str > This command changes the name of an existing startup- config file. A file name can include up to 63, alphanumeric characters. Blanks are allowed in a file name enclosed in quot[...]

Switch Memory and Configuration Multiple Configuration Files Figure 6-17. Example of Using One Startup-Config File for Both Primary and Secondary Flash If you wanted t o experiment with co nfiguration change s to the software version in secondary fl ash, you could create and assign a separate startup- config file for this purpo se. The first two co[...]

Switch Memory and Configuration Multiple Configuration Files Syntax: erase < config < file name >> | startup-config > config < filename >: This option erases the specified startup- config file. If the specified file is not the currently active startup-config file, then the file is simply deleted from the memory slot it occupi e[...]

Switch Memory and Configuration Multiple Configuration Files Figure 6-19 illustrates using erase config < filename > to remove a startup-config file. Figure 6-19. Example of Erasing a Non-Active Startup-Config File W ith the same memory configuration as is sh own in the botto m portion of figure 6-19, executing erase startup-config boots the [...]

Switch Memory and Configuration Multiple Configuration Files ProCurve(config)# show config files Press ing Clear + Reset: Configuration files: – Repl aces all startup-config files wi th a singl e file named config1 that contains the default id | act pri sec | name configuration for the software versi on in primary flash. ---+-------------+-------[...]

Switch Memory and Configuration Multiple Configuration Files TFTP: Copying a Configuration File from a Remote Host Syntax: copy tftp con fig < dest-file > < ip-addr > < remote-file > < pc | u nix > This is an addition to the co py tftp command options. Use this command to download a co nfiguration file from a TFTP server to [...]

Switch Memory and Configuration Automatic Configuration Update with DHCP Option 66 Xmodem: Copying a Configuration from a Serially Connected Host Syntax: copy xmodem co nfig < dest-file > < pc | unix > This is an addition to the copy xmodem command options. Use this command to download a configuration file from an Xmodem host to the swi[...]

Switch Memory and Configuration Automatic Configuration Update with DHCP Option 66 CLI Command The command to enable the configur ation update using Option 66 is: Syntax: [no] dhcp config-file-upd ate Enables configuration file update using Op tion 66. Default: En abled ProCurve(config)# dhcp config-file-up date Figure 6-21. Example of Enabling Co [...]

Switch Memory and Configuration Automatic Configuration Update with DHCP Option 66 Multiple Servers serving Multiple VLANs • Each DHSP -enabled VLAN interface initiates DHCPDISCOVER and receives one or more DHCPOFFER messages. Scenario Behavior • Each interface accepts the best offer . • Option 66 is processed only for the interface belongin [...]

Switch Memory and Configuration Automatic Configuration Update with DHCP Option 66 6-40[...]

7 Interface Access and System Information Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 Interface Access: Console/Serial Link, Web, and Inbound Telnet . 7-3 Menu: Modifying the Interface Access . . . . . . . . . . . . . . . . . . . . . . . . . . 7-4 CLI: Modifyin g th[...]

Interface Access and System Information Overview Overview This chapter describes how to: ■ View and modify the configuration for swi tch interface access ■ Use the CLI kill command to terminate a remo te session ■ View an d modify switch system information For help on how to actu ally use the interfaces built into th e switch, refer to: ■ C[...]

Interface Access and System Information Interface Access: Cons ole/Serial Link, W eb, and Inbound Telnet Interface Access: Console/Serial Link, W eb, and Inbound T elnet Interface Access Features Feature Default Menu CLI We b Inactivity T ime 0 Minutes (disabled) page 7-4 page 7-8 — Inbound T elne t Access Enabled page 7-4 page 7-5 — Outbound T[...]

Interface Access and System Information Interface Access: Console/Serial Link, Web, and Inbound Telnet Menu: Modifying the Interface Access The menu interface enables you to modify these parameters: ■ Inactivity T imeout ■ Inbound T elnet Enabled ■ W eb Agent Enabled T o Access the Interface Access Parameters: 1. From the Main Menu, Select...[...]

Interface Access and System Information Interface Access: Cons ole/Serial Link, W eb, and Inbound Telnet 3. Use the arrow ke ys ( [v] , [^] , [<] , [>] ) to move to th e parameters you wan t to change. Refer to the online h elp provided with this screen for fu rther information on configurat ion options for these feat ures. 4. When you have f[...]

Interface Access and System Information Interface Access: Console/Serial Link, Web, and Inbound Telnet T o disable inbound T elnet acce ss: ProCurve(config)# no telnet-server T o re-enable inbound T elnet access: ProCurve(config)# telnet-server Outbound T elnet to Another Device. This feat ure operates indepen- dently of th e telnet-server status a[...]

--------------------------------------- ---------------- --------------------------------------- ---------------- Interface Access and System Information Interface Access: Cons ole/Serial Link, W eb, and Inbound Telnet ProCurve(config)# show telnet Telnet Activity -------------------------------------- ------------------ Session : ** 1 Privilege: M[...]

Interface Access and System Information Interface Access: Console/Serial Link, Web, and Inbound Telnet Reconfigure the Console/Seri al Link Settings. Y ou can reconfigure one or more console parameters with one console command. Syntax: c onsole [terminal < vt100 | ansi | none >] [screen-refresh < 1 | 3 | 5 | 10 | 20 | 30 | 45 | 60 >] [b[...]

Interface Access and System Information Denying Interface Access by Termi nating Remote Management Sessions Y ou ca n also execute a series of co nsole commands and then save the configuration and boot the switch . For exam ple: ProCurve(config)# console baud-rate sp eed-sense Command will take effect after saving configuration and reboot ProCurve([...]

Session 2 is an active T elnet sessi on. Interface Access and System Information Denying Interface Access by Term inating Remote Management Sessions The kill 2 comm and terminates session 2. Session 2 is an active T elnet sessi on. Figure 7-6. Example of Using th e “Kill” Command T o T erminate a Remote Session 7-10[...]

Interface Access and System Information System Information System Information System Information Feature s Feature Default Menu CLI Web System Name switch product name page 7-12 page 7-14 page 7-17 System Contact n/a page 7-12 page 7-14 page 7-17 System Location n/a page 7-12 page 7-14 page 7-17 MAC Age T ime 300 seconds page 7-12 page 7-16 — T i[...]

Interface Access and System Information System Information Ti m e Z o n e : The number of minutes your time z o n e l o c a t i o n i s t o t h e W e s t ( + ) or East (-) of Co ordinated Universal T ime (formerly GMT). Th e default 0 means no time zone is con f ig ured. For example, the time zone for Berlin, Germany is + 60 (minutes) and the time [...]

Interface Access and System Information System Information 2. Press [E] (for E dit). The cursor moves to the System Name fi eld. 3. Refer to the online help provided with this screen for further informatio n on configurat ion options for these feat ures. 4. When you have finished mak ing ch anges to the above parameters, press [Enter] , then press [...]

Interface Access and System Information System Information Configure a System Na me, Contact, and Location for the Switch. To help distinguis h one switch from another , co nfigure a plai n-language ident ity for the switch. Syntax: hostname < name-string > snmp-server [contact < system-contact >] [locat ion < system-location >] E[...]

Interface Access and System Information System Information MENU ProCurve-Switch-2520 24-May-2009 12:41:47 ===========================- TELNET - MANAGER MODE ======== =================== Switch Configuration - System Informa tion System Name : Green System Contact : Ext-4475 System Location : + characters of the location are missing. It’s too long[...]

Interface Access and System Information System Information Reconfigure the MAC Age T ime for Learned MAC Addresses. This command corresponds to the MAC Age Inte rval in the menu interface, and is expressed in seco nds. Syntax: mac-age-time < 60 - 999960> (seconds) Allows you to set the MAC address table’ s age-o ut interval. An address is a[...]

Interface Access and System Information System Information Note Executing reload or boot resets the time and date to t heir default startup values. W eb: Configuring System Parameters In the web browser interface, you can enter the follow ing system informatio n: ■ System Name ■ System Locati on ■ System Contact For access to the MAC Age Inte[...]

Interface Access and System Information System Information 7-18[...]

8 Configuring IP Addressing Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 Just Want a Quick Start with IP Addr essing? . . . . . . . . . . . . . . . . . . [...]

Configuring IP Addressing Overview Overview Y ou can configure IP addressing through all of the switch’ s interfaces. Y ou can also: ■ Easily edit a switch conf iguration fi le to allow downloading the file to multiple switches withou t overwriting each switch’ s unique g ateway and VLAN 1 IP addressing. ■ Assign up to 8 IP addresse s to a [...]

Configuring IP Addressing IP Configuration use the men u interface or the CLI to manually c onfigure the initia l IP values. After you have network access to a device, you can use the web browser interface to m odify the initial IP configurat ion if needed. For informati on on how IP add ressing affects switch operat ion, refer to “How IP Address[...]

Configuring IP Addressing IP Configuration Notes For more on using the Switch Setup screen, refer to the Installat ion and Getting Started Guide you rece ived with the switch. IP Addressing with Multiple VLANs In the factory-d efault configuration, the sw itch has one, permanent default VLAN (named DEF AUL T_VLAN) that in cludes all ports on the sw[...]

Configuring IP Addressing IP Configuration Menu: Configuring IP Addres s, Gateway , and T ime-T o- Live (TTL) Do one of the following: ■ T o manually enter an IP ad dress, subnet mask, set the IP Config parameter to Manual and then manually enter the IP addr ess and su bnet mask values you want for the switch. ■ T o use DHCP or Bootp, use the m[...]

Configuring IP Addressing IP Configuration 3. If the switch needs to access a router , for exampl e, to reach off-subnet destinations, select the Default Gateway field and enter the IP address of the gateway router . 4. If you need to change the pa cket T ime-T o-Live (TTL) se tting, select Default TTL and type in a value between 2 and 255. 5. T o [...]

Configuring IP Addressing IP Configuration (Y ou can also use the show management command to display the IP addressing and time server IP addressing config ured on the switch. Refer to figure 9-6 on page 9-10.) For example, in the factor y-default configuration (no IP addressing assigned), the switch’ s IP addressing appears as: The Default IP Co[...]

Configuring IP Addressing IP Configuration Note The default IP address setting for the DEF AUL T_VLAN is DHCP/Bootp . On additional VLANs you create, the default IP address setting is Disabled . Syntax: [ no ] vlan < vlan-id > ip address <ip-address/mask-length> or [ no ] vlan < vlan-id > ip address < ip-ad dress > < mask[...]

Configuring IP Addressing IP Configuration 1. Go to VLAN 20. 2. Configure two additional IP addresses on VLAN 20. 3. Display IP addressing. Figure 8-4. Example of Configu ring and Displaying a Multinetted VLAN If you then wanted to multine t the default VLA N, you would do th e following: Figure 8-5. Example of Multin etting on the Default VLAN Not[...]

Configuring IP Addressing IP Configuration Removing or Replacin g IP Addresses in a Multin etted VLAN. To remove an IP address from a multinetted VLAN, use the no form of the IP address command shown on page 8-8. Ge nerally , to replace one IP address with another , you should firs t remove the address you wan t to replace, an d then enter the new [...]

Configuring IP Addressing IP Configuration How IP Addressing Affe cts Switch Operation W ithout an IP address and subnet mask compatible with your network, the switch can be managed only through a direct terminal d evice connection to the Console RS-232 port. Y ou can use di rect-c onnect console access to take advantage of features that do not dep[...]

Configuring IP Addressing IP Configuration Note Note DHCP/Bootp Operation Overview . DHCP/Bootp is used to provide configuration data from a DHCP or Bootp server to the swit ch. This data can be the IP address, su bnet mask, default gateway , T imep Server address, and TFTP server addres s. If a TFTP server address is provided, this allows the swit[...]

Configuring IP Addressing IP Configuration DHCP Operation. A significant differenc e between a DHCP configuration and a Bootp config uration is that an IP address assignment f rom a DHCP server is automatic. Depe nding on how the DHCP server is configured, the switch may receive an IP address that is temporarily leased . Periodically the switch may[...]

Configuring IP Addressing IP Configuration gw=10.66.77.1: lg=10.22.33.44: T144=”switch.cfg”: vm=rfc1048 where: 2520switch is a user-defined symbolic name to help you find the corr ect section of the bootptab file. If you have multiple switches that will be using Bootp to get their IP configuration, you should use a unique symbolic name for e[...]

Configuring IP Addressing IP Configuration Note Designating a primary VLAN other than the default VLAN affects the switch’ s use of informat ion received via DHCP/Boo tp. For more on this topi c, refer to the chapter describing VLANs in the Advanced T raffic Management Guide for your switch. After you reconfigure or reboot the switch wit h DHCP/B[...]

Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addres sing Across Configuration File Downloads IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads For the switches co ver ed i n th i s gu id e, IP Preserve enables you to c opy a configuratio n file to multiple switches whi le retaining the individual IP addre[...]

Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addres sing Across Configuration File Downloads ; J9137A Configuration Editor; Created on release #S.14.XX hostname “ProCurve” time daylight-time-rule None . . Entering “ip preserve” i n the last line of a co nfiguration . file implements IP Preserve when the file is password manage[...]

Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addres sing Across Configuration File Downloads ProCurve(config)# show run Running configuration: ; J9137A Configuration Editor; Crea ted on release #S.14.XX hostname "ProCurve" trunk A11-A12 Trk1 Trunk ip default-gateway 10.10.10.1 snmp-server community "public" Unre st[...]

Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addres sing Across Configuration File Downloads ProCurve# show run Running configuration: ; J9137A Configuration Editor; Crea ted on release #S.14.XX hostname "ProCurve" trunk A11-A12 Trk1 Trunk ip default-gateway 10.10.10.1 snmp-server community "public" Unre stricted B[...]

Configuring IP Addressing IP Preserve: Retaining VLAN-1 IP Addres sing Across Configuration File Downloads 8-20[...]

9 T i me Protocols Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2 TimeP Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2 SNTP Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2 Select[...]

Time Protocols Overview Overview This chapter describes: ■ SNTP T ime P rotocol Operation ■ T imep Ti me Protocol Operation Using time synchronizat ion ensures a unifo rm time among i nteroperating devices. This helps you to manage a nd troubleshoot switch operation by attaching meaningful time da ta to event and error messages. The switch offe[...]

Time Protocols Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation Note T o use Broadcast mode, the switch and th e SNTP server must be in the same subnet. ■ Unicast Mode: The switch requests a time update from the config- ured SNTP se rver . (Y ou can conf igure one serv er using the menu interface, or up to three se[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring ■ In the Syste m Information scre en of the Menu inte rface, set the Ti m e Synch Method para meter to None , then press [Enter ], then [S ] (for S ave ). ■ In the Global conf ig le vel of the CLI, execute no timesync . SNTP: V i ewing, Selecting, and Configuring SNTP Feature Default Menu[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring T able 9-1. SNTP Parameters SNTP Parameter Operation T ime Sync Method Used to select either SNTP , TIMEP , or None as the time synchronization method. SNTP Mode Disabled T he Default. SNTP does not operate, even if specified by the Menu interface T ime S ync Method parameter or the CLI times[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring ==========================- CONSOLE - MANAGER MODE -======================== Switch Configuration - System Infor mation System Name : ProCurve System Contact : System Location : Inactivity Timeout (min) [0] : 0 MAC Age Time (sec) [300] : 300 Inbound Telnet Enabled [Yes] : Yes Web Agent Enable[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring Note: This step replaces any pre v iously configured server IP address. If you will be using b ackup SNTP servers (requi res use of the CLI), then refer to “SNTP Unicast Time Polling with Multiple SNTP Servers” on page 9-25. iii. Press [v] to move the cursor to the Server V ersion fi eld.[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring CLI: Viewing and Configuring SNTP CLI Commands Described in this Section SNTP Command Page show sntp 9 -8 [no] timesync 9-10 and ff., 9-14 sntp broadcast 9-11 sntp unicast 9-12 sntp server 9-12 and ff. Protocol V ersion 9-10 9-12 Priority 9-10 9-12 poll-interval 9-14 no sntp 9-15 This section[...]

-------- -------------------------------- -------------- ---------------- Time Protocols SNTP: Viewing, Selecting, and Configuring ProCurve(config)# show sntp SNTP Configuration Time Sync Mode: Sntp SNTP Mode : Unicast Poll Interval (sec) [720] : 719 Priority SNTP Server Address Protocol Version -------- ------------------------------ -------------[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring ProCurve(config)# show management Status and Counters - Management Addr ess Information Time Server Address : fe80::215:60ff :fe7a:adc0%vlan10 Priority SNTP Server Address Protocol Version -------- --------------------------- ------------------- ---------------- 1 2001:db8::215:60ff:fe79:8980[...]

4 Time Protocols SNTP: Viewing, Selecting, and Configuring Enabling SNTP in Broadcast Mode. Because the switch provides an SNTP polling interval (default: 720 seconds ), you need only these two commands for minimal SNTP broadcast configurati on: Syntax: timesync sntp Selects SNTP as the time synchronizat ion method . Syntax: sntp broadcast Configur[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring Enabling SNTP in Unicast Mode. Like broadcast mode, config uring SNTP for unicast mode enables SNTP . However , for Unicast operation, you must also specify the IPv4 or IPv6 address an d priority (1 - 3) of at least one SNTP server . The switch allows up to three unicast servers. Y ou can use[...]

-------- -------------------------------- -------------- ---------------- Time Protocols SNTP: Viewing, Selecting, and Configuring . ProCurve(config)# show sntp In this example, the Poll Interval and the Protocol SNTP Configuration Ver s io n appear at their defa u lt settin gs. Time Sync Mode: Sntp Both IPv4 and IPv6 a ddresses are displayed. SNTP[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring Changing the SNTP Poll Interval. Syntax: sntp < 30..720 > Specifies how long the switch waits between time polling intervals. The default is 720 seconds and the range is 30 to 720 seconds. (This parameter is separate from the poll inter - val parameter used for T imep operation.) For ex[...]

Time Protocols SNTP: Viewing, Selecting, and Configuring Disabling the SNTP Mode. If you want t o prevent SNTP from being used even if selected by timesync (or the Menu interface’ s T ime Sync Method param- eter), configure the SN TP mode as disabled. Syntax: no sntp Disables SNTP by changing the SNTP mode configuration to Disabled . For example,[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring T imeP: V iewing, Selecting, and Configuring T imeP Feature Default Menu CL I Web view the T imep time synchronization configuration n/a page 9-17 page 9-19 — select T imep as the time synchronization method TIMEP page 9-15 pages 9-21 ff. — disable time synchronization timep page 9-17 pa[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring Menu: Viewing and Configuring T imeP T o View , Enable, and Modify the T imeP Protocol: 1. From the Main Menu, select: 2. Switch Configuration ... 1. System Information ==========================- CONSOLE - MANAGER MODE -============= ============= Switch Configuration - System Info rmation [...]

Time Protocols TimeP: Viewing, Selecting, and Configuring ii. Enter the IP address of the T ime P server you want the switch to use for time synchronization. Note: This step replaces any previously c onfigured T imeP server IP address. iii. Press [>] to move the cursor to the Pol l Interval field, then go to step 6. 5. In the Poll Inter val fiel[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring Viewing the Current T imeP Configuration Using different show commands, you can display either the full T imeP config- uration or a combined l i sti ng of all T imeP , SNTP , and VLAN IP addresses configured on the switch. Syntax: show timep This command lists both the time synchroni zation [...]

-------- -------------------------------- -------------- ---------------- Time Protocols TimeP: Viewing, Selecting, and Configuring ProCurve(config)# show management Status and Counters - Management A ddress Information Time Server Address : 10.10.28.100 Priority SNTP Server Address Protocol Version 1 10.10..28.101 3 2 10.255.5.24 3 3 fe80::123%vla[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring Enabling T imeP in DHCP Mode. Because the switch provides a T imeP polling interval (defaul t: 720 minutes) , you need only these t w o co mmands for a minimal T imeP DHCP conf iguration: Syntax: timesync timep Selects T imeP as the time synchronization method. Syntax: ip timep dhcp Configur[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring Enabling T imep in Manual Mode. Like DHCP mode, configurin g T imeP for Manual mode enables T i meP . Howeve r , for manual operation, you must also specify the I P address of the T imeP ser ver . (The switch allows only one TimeP server .) T o enable the TimeP protocol: Syntax: timesync tim[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring Changing the T imeP Poll Interval. This command lets you specify how long the switch waits between time po lling intervals. The default is 720 minutes and the range is 1 to 9999 minutes. (T his parameter is separate from the poll interval paramete r used for SNTP operation.) Syntax: ip timep[...]

Time Protocols TimeP: Viewing, Selecting, and Configuring For example, if t he switch is running T imeP in DHCP mode, no ip timep changes the T imeP configuration as shown below , and disables time synchroniz ation. Even though the T ime Sync Mode is se t to T imep, time synchroniza tion is disable d because no i p timep has disabl ed the T imeP Mo[...]

-------- -------------------------------- -------------- ---------------- Time Protocols SNTP Unicast Time Polling with Multiple SNTP Servers SNTP Unicast T ime Polling with Multiple SNTP Servers When running SNTP unicast time polli ng as the time syn c hron ization method, the switch requests a time update fro m the server yo u configured with eit[...]

Time Protocols SNTP Messages in the Event Log Adding and Deleting SNTP Server Addresses Adding Addresses. As mentioned earlier , yo u can configure one S NTP server address using either the Menu interface or the CL I. T o configure a second and third address, you must us e the CLI. T o conf igure the remain ing two addresses, you would do the follo[...]

10 Port Status and Configuration Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3 Viewing Port Status and Configuring Port Parameters . . . . . . . . . . 10-3 Menu: Port Status and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4 Port Type . . . . . [...]

Port Status and Configuration Contents Configuring Transceivers and Modules That Haven’t Been Inserted . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-28 Transceivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-28 10-2[...]

Port Status and Configuration Overview Overview Note On Connecting T ransc eivers to Fixed-Configuratio n Devices This chapter describes how to view th e current port configuration and how to configure ports t o non-d efault settings, including ■ Enable/Disable ■ Mode (speed and duplex) ■ Flow Control ■ Broadcast Limit ■ Friendly P ort Na[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters Menu: Port Status and Configuration From the menu interface, you can view and change the port configuration. Using the Menu T o V iew Port Configurati o n. Th e menu interface dis- plays the configuration for ports an d (if con figured) any trunk groups. From the Mai[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters Status of Ports A port can be enabled or disabled: ■ Ye s : Enabled, the default. Th is indicates th e port is ready for a netwo rk connection. ■ No : Disabled, the port will not operate, even if properly co nnected to a network. Use the setting, for example, to s[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters Modes The mode is the port’ s speed and duplex (date transfer op eration) setting. T able 10-1 shows possible modes available, dependin g on the port type (copper or fiber) and p ort speed. T able 10-1. Su pported Modes Mode Speed and Duplex Settings Auto-MDIX Sens[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters T able 10-2. Prot ocols and Modes Supported for Copper Ports 10/100 Mbps Gigabit 10/100 T X 10/100/1 000-T Modes Settings Modes Settings Auto 10HDx 100HDx 10FDx 100FDx Auto-10 100FDx 10HDx 100HDx 10FDx 100FDX 10FDX Auto Auto-10 Auto-100 Auto-10-100 Auto-1000 10HDx 100[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters ==========================- CONSOLE - MA NAGER MODE -=========================== = Switch Configuration - Port/Trunk Set tings Port Type Enabled Mode Flow Ctrl Group Type ---- --------- + ------- ------------ --------- -- --- ----- 1 10/100TX | Yes Auto Disable 2 10/[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters broadcast-limit page 10-19 auto-mdix page 10-19 Viewing Port Status and Configuration Use the following commands to display port status an d configuration data. Syntax: show interfaces [ brief | c onfig | < port-list >] brief: Lists the current operating st atus[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters ProCurve(config)# show interfaces config Port Settings Port Type | Enabled Mode Flow Ctrl MDI ----- --------- + ------- ------------ --------- ---- 1 10/100TX | Yes Auto-10-100 Disable Auto 2 10/100TX | Yes Auto Disable Auto 3 10/100TX | Yes Auto Disable Auto 4 10/10[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters Status and Counters - Port Counters Port ----- Total Bytes -------------- Total Frames Errors Rx -------------- ------------ Drops Rx ------------ Flow Ctrl ----- Bca* Lim* ---* 1 2 3 4 5 6 7 8 9 10 1,121,436,946 0 0 0 0 0 1,078,679,873 0 0 0 10,610,556 0 0 0 0 0 0 0 [...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters Parameter Column Displays Examples port Port identifier A2 type Port type 100/1000T status Port status up or down speed Connection speed and duplex 1000FDX mode Configured mode aut o, auto-100, 100FDX mdi MDI mode auto, MDIX flow Flow control on or off name Friendly [...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters Note Each field has an fi xed minimum width to b e displayed. If you specif y a field width smaller than the minimum width, the inf ormation is displayed at the minimum width . For example, if th e minimum wi dth for the Nam e field is 4 characters and you specify Nam[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters V iewing Port Utilization Statistics Use the show interface port-utilization command to view a real- time rate display for all port s on the switch. T he following shows a sample ou tput from this command. ProCurve(config)# show interfaces port- utilization Status an[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters ■ Display real-time status informatio n about all installed transceivers, including non- operat ional transceivers. Figure 10-8 shows sample o utput from the show tech transceivers command. ProCurve# show tech transceivers Transceiver Technical Information: Port # |[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters • Transceiver type not supported in this software version. • Not a ProCurve Transceiver. Please go to: www.hp.com/rnd/device_help/2_inform for more info. Enabling or Disabling Ports and Configuring Port Mode You can configur e one or more of the following port pa[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters These comm ands enable and con figure port 8 from the con fig level: ProCurve(config)# int 8 enable ProCurve(config)# int 8 speed-duple x 100-full ProCurve(config)# int 8 flow-contro l ProCurve(config)# int 8 ProCurve(eth-8)# enable ProCurve(eth-8)# speed-duplex 100-f[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters ProCurve(config)# int 5-6 flow-control ProCurve(config)# show int brief Status and Counters - Port Status | Intrusion MDI Flow Bcast Port Type | Alert Enabled Status Mode Mode Ctrl Limit ----- --------- + --------- ------- --- --- ---------- ----- ----- ------ 1 10/1[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters Configuring a Broadcas t Limit on the Switch Broadcast-Limi t on switches c o ve re d in th is g ui de is configured on a per -port basis. Y ou must be at the port contex t level for this command to work, for example: ProCurve(config)#int B1 ProCurve(int B1)# broadcas[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters This means y ou can us e a “straig ht-thr ough” twisted-pair cable or a “cross- over” twisted-pair cable for any of the connections—the port makes the necessary adjustments to ac commodate ei ther one for correc t operation. The following port types on your[...]

Port Status and Configuration Viewing Port Status and Configuring Port Parameters T able 10-4. Cable T y pes for Auto and Manual MDI/MDI-X Settings MDI/MD I-X Device T ype Setting PC or Other MDI Device T ype Switch, Hub, or Other MDI-X Device Manual MDI Crossover C able Straight-Through Cable Manual MDI-X Straight-Through Cable Crossover Cable Aut[...]

Port Status and Configuration Viewing Port Status and Configur ing Port Parameters ProCurve(config)# show interfaces config Per -Port MD I Configurati on Port Settings Port Type | Enabled Mode Flow Ctrl MDI ------- --------- + ------- ----------- - --------- ---- 1 100/100T | Yes Auto Disable Auto 2 100/100T | Yes Auto Disable MDI 3 100/100T | Yes [...]

Port Status and Configuration Using Friendly (Optional) Port Names Using Friendly (Optional) Port Names Feature Default Menu CLI Web Configure Friendly Port Names S tandard Port Numbering n/a page 24 n/a Display Friendly Port Names n/a n/a page 25 n/a This feature enabl es you to assign alphanumeric port n ames of your choosing to augmen t automati[...]

Port Status and Configuration Using Friendly (Optional) Port Names ■ In a port listing, not assigned indi cates that the port does not have a name assignment other than its fixed port n umber . ■ T o retain friendly port na mes across reboots, you must save the current running-con figuration to the startup- config file after enterin g the frien[...]

Port Status and Configuration Using Friendly (Optional) Port Names Configuring the Sa me Name for Multiple Ports. Suppose that you want to use ports A5 th rough A8 as a trunked link to a server used by a drafting group. In this case you might configure ports A5 through A8 with the name “Draft-Server:T runk”. Figure 10-15. Example of C onfigurin[...]

Port Status and Configuration Using Friendly (Optional) Port Names Syntax: show name [ port-list ] Lists the friendly port name with its corresponding port number and port typ e. The show name command without a port list shows this data for all ports on the switch. For example: Friendly port names assigned in pr evious examples. Ports Without “Fr[...]

Port Status and Configuration Using Friendly (Optional) Port Names Syntax: show interface < port-numbe r > Includes the friendly port name wi th the port’ s traffic statistics listing. For example, if you configure port 5 wi th the name “O’Con nor_10.2 5.101.43”, the show interface output for this por t appear s similar to the followi[...]

Port Status and Configuration Using Friendly (Optional) Port Names Syntax: show config Includes friendly port names in a listing of all interfaces (ports) configured with non-default set tings. Excludes ports that have neither a friendly port na me nor any other non-default configuration settings. For example, if you co nfigure port A1 with a frien[...]

11 Power Over Ethernet (PoE) Operation Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2 Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2 Related Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

Power Over Ethernet (PoE) Operatio n Contents Planning and Impleme nting a PoE Configuration . . . . . . . . . . . . . . 11-20 Assigning PoE Ports to VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-20 Applying Securi ty Features to PoE Config urations . . . . . . . . . . . . . 11-20 PoE Event Log Messages . . . . . . . . . . . [...]

Power Over Ethernet (PoE) Operation Overview Overview Power Over Ethernet (PoE ) technology allo ws IP telephones, wireless LAN access points, and o ther powered devices (PDs) to receive pow er and transfer data over existing LAN cabling. The PoE feature de scribed in this chapte r operates on the following switches: ■ ProCurve Switch 2520-8-PoE [...]

Power Over Ethernet (PoE) Operatio n Overview Related Publications This chapter introduces general Po E operat ion, PoE conf iguration and monitoring comman ds, and event log me ssage s related to PoE operation on the HP ProCurve Series 252 0 and 2520G switches. The follow ing two manuals provide further inform ation: ■ For information on install[...]

Power Over Ethernet (PoE) Operation PoE Operation Te r m Use in this Manual priority class Refers to the type of power prioritization that uses Low (the defa ult), Hig h , and Critical priority assignments to determine which groups of ports will receive power . Note that power priority rules apply only if PoE pr ovisioning becomes oversubscribed. P[...]

Power Over Ethernet (PoE) Operatio n PoE Operation Note Depending on power demands, lower - prio rity ports on a switch with high PoE power demand may occasionally lose po wer due to the demands of higher - priority ports. (Refer to “Power Pr iority Operation” for f urther details.) Power Priority Operation In the default co nfiguration PoE pow[...]

Power Over Ethernet (PoE) Operation Configuring PoE Operation Configuring PoE Operation In the defaul t configur ation, PoE sup port is en abled on the Po E ports. Th e default pr iority for all port s is Low and the default power notif ication threshol d is 80 (%). Using the CLI, you can: ■ Disable or re-enabl e PoE operation o n individual PoE [...]

Power Over Ethernet (PoE) Operatio n Configuring PoE Operation For a current listin g of PDs supported by this feature, visit the ProCurve Networking website at www .procurve.com . Click on T echnical support , and then on FA Q s , and then select the switch model. PoE for pre-802.3af-standard powered devices is disabled by defaul t. Syntax: [no ] [...]

Power Over Ethernet (PoE) Operation Configuring PoE Operation Configuring the PoE Po rt Priority Level Syntax: interface < port-list > po wer -over -ethernet [ critical | h igh | low ] Reconfigures the PoE priority level on < port-list >. For a given level, ports are prioritized by port number in ascending order . For example, if ports [...]

Power Over Ethernet (PoE) Operatio n Configuring PoE Operation Priority Setting Configuration Command and Resulting Operation Low This prio rity class receives power only if all PDs on ports with High and Criti cal priority settings are receiving power . If there is enough power to provision PDs on only some Low prior ity ports, then power is alloc[...]

Power Over Ethernet (PoE) Operation Configuring PoE Operation T able 11-1. Powe r Classes and Their V alue s Power Class Va l ue 0 Depends on cable type and PoE architecture. Maximum power level output of 15.4 watts at the PSE. This is the default class; if there isn’ t enough information about the load for a specific classification, th e PSE cla[...]

Power Over Ethernet (PoE) Operatio n Configuring PoE Operation ProCurve(config)# show power-over-et hernet 6 Status and Counters - Port Power St atus for port 6 Power Enable : Yes LLDP Detect : enabled Priority : low Configured Type : AllocateBy : value Value : 15 W Detection Status : Delivering Power Class : 2 Maximum power delivered Over Current [...]

Power Over Ethernet (PoE) Operation Configuring PoE Operation Changing the Threshold for Generating a Power Notice By default, PoE suppor t is enabled on the switch’ s 10/100Base-TX po rts, with the power pr iority set to Low and the power threshold set to 80 (%). The following co mmands allow you to adjust these settings. Syntax: power thre shol[...]

Power Over Ethernet (PoE) Operatio n Configuring PoE Operation Cycling Power on a Port Simply disabling a PoE port does not affect power delivery t hrough that port. T o cycl e the power on a PD receiving po wer from a PoE port on the switch, disable, then re-enable the power to that port. Syntax: [no] interfa ce [e] < port-list > pow er Re-e[...]

Power Over Ethernet (PoE) Operation PoE/PoE+ Allocation Using LLDP Information PoE/PoE+ Allocation Using LLDP Information LLDP with PoE When using Po E, enabling poe-lldp-detect allows auto matic power configura - tion if the link part ner supports PoE. When LLDP is enabled, th e information about the power usage of the PD is avai lable and the swi[...]

Power Over Ethernet (PoE) Operatio n Viewing PoE Configuration and Status V iewing PoE Configuration and Status Displaying the Switch’ s Global PoE Power Status Syntax: show power-over -ethernet Displays the switch’ s global PoE power status, including: • Pre-standard De tect : Shows whether PoE for pre-802.3af-standard powered devices is ena[...]

Power Over Ethernet (PoE) Operation Viewing PoE Configuration and Status ProCurve(config)# show power-over-etherne t Status and Counters - System Power Statu s Pre-standard Detect : On Operational Status : On Usage Threshold (%) : 80 Chassis power-over-ethernet: Total Available Power: 67 W Total used Power: 0 W +/- 6W Total Remaining Power: 67 W Fi[...]

Power Over Ethernet (PoE) Operatio n Viewing PoE Configuration and Status For example, show power-over -ethernet brief displays this output: ProCurve(config)# show power-over-ethern et brief Status and Counters - Port Power Status PoE | Power LLDP Power Alloc PoE Configur ed Detection Power Port | Enable Detect Priority By Val Type Status Class ---[...]

Power Over Ethernet (PoE) Operation Viewing PoE Configuration and Status Displaying the PoE Stat us on Specific Ports Syntax: show power-over -ethernet < port -list > Displays the following PoE status and statistics (since the last reboot) for each port in < port-list >: • Power Enable: Shows Ye s for ports enabled to support PoE (the[...]

Power Over Ethernet (PoE) Operatio n Viewing PoE Configuration and Status For example, if you wanted to vi ew the PoE status of port 5, you would use show powe r -over -ethernet 5 to display the data: ProCurve(config)# show power-over-et hernet 5 Status and Counters - Port Power St atus for port 5 Power Enable : Yes LLDP Detect : disabled Priority [...]

Power Over Ethernet (PoE) Operation Planning and Imple menti ng a PoE Configuration Planning and Implementing a PoE Configuration This section provides an overview of some considerations for planning a PoE application. Fo r additional inf ormation, refer to the HP ProCurve PoE Planning and Implementation Guide . Assigning PoE Ports to VLANs If your[...]

Power Over Ethernet (PoE) Operatio n PoE Event Log Messages PoE Event Log Messages PoE operat ion generat es these Event Log messages. Y ou can also config ure the switch to send these messages to a configured debug destination (termi nal device or Syslog se rver). I 1 MM/DD/YY HH:MM:SS chassis: Message header , with severity , date, system time, a[...]

Power Over Ethernet (PoE) Operation PoE Event Log Messages W MM/DD/YY HH:MM:SS chassis: Message header , with severity , date, system time, and system module type. For more informatio n on Event Log operation, refer to the “T roubleshooting” appe ndix in the Management and Configuration Guide for your switch. Ext Power Supply connected but not [...]

Power Over Ethernet (PoE) Operatio n PoE Event Log Messages Port < port-# > PD MPS Absent indication. The switch no longer detects a de vice on < port-# >. The device may have been disconnected, powered down, or stopped functioning. Port < port-# > PD Other Fault indication. There is a problem with the PD connected to the port. Po[...]

12 Port T runking Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2 Port Trunk Features and Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4 Trunk Configuration Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4 Menu: Viewing a[...]

Port Trunking Overview Overview This chapter describes creating and modifying port trunk groups. Thi s includes non-protocol trunks and L ACP (802.3ad) trunks. Port Status and Conf iguration Feature s Feature Default Menu CLI W eb viewing port trunks n/a page 12-9 page 12-11 page 12-17 configuring a static trunk none page 12-9 page 12-15 — group [...]

Port Trunking Overview Port Connecti ons and Configuratio n: All port trunk links must be poin t- to-point connections between a sw itch and another switch, router , server , or workstation confi gured for port trunking. No intervening, non-trunking devices are allowed. It is important to note that ports on both ends of a port trunk group must have[...]

Port Trunking Port Trunk Features and Operation Port T runk Features and Operation T he sw it ch es covered in this guide o ff er th es e o pt i on s f or po rt t ru nk in g: ■ LACP: IEEE 802.3ad—page 12-18 ■ T runk: Non- Protocol—page 12-26 Up to 24 trunk groups are suppo rted on th e sw i tc he s covered in this guide. Th e actual maxim u[...]

Port Trunking Trunk Configuration Methods ProCurve(config) int c1-c4 lacp active Note that the preceding ex ample works if the ports are not already operating in a trunk. T o change the LACP option on ports already operating as a trunk, you must first remove them from the trun k. For example, if ports C1 - C4 were LACP-active and operating in a tru[...]

Port Trunking Trunk Configuration Methods T able 12-2. T runk Configuration Protoc ols Protocol T runking Options LACP Provides dynamic and static LACP trunking options. (802.3ad) • Dynamic LACP — Use the switch-negotiated dy namic LACP trunk when: – The port on the other end of the trunk link is configured for Active or Passive LACP . – Y [...]

Port Trunking Trunk Configuration Methods T able 12-3. General Operating Rules for Port T runks Media: For proper trunk operation, all ports on both ends of a trunk group must have th e same media type and mode (speed and duplex). (For the switches cover ed in this guide, ProCurve recommends leaving the port Mode setting at Auto or , in networks us[...]

Port Trunking Trunk Configuration Methods Spanning T ree: 802.1D (STP) and 802.1w (RSTP) Spanning T ree operate as a global setting on the switch (with one instance of Spanning T ree per switch). 802.1s (MSTP) Spanning T r ee operates on a per -instance basis (with multiple instances allowed per switch). For each SpanningT ree instance, you can adj[...]

Port Trunking Menu: Viewing and Configu ring a Static Trunk Group Menu: V iewing and Configuring a Static T runk Group Important Confi gure port trunking before yo u connect the trunked links to anot her switch, routing switch, or server . Otherwise, a broad cast storm could occur . (If you need to connect the ports bef ore configurin g them for tr[...]

Port Trunking Menu: Viewing and Configu ring a Static Trunk Group • For proper trunk operat ion, all por ts in a trunk must have the same media type and mode (such as 10/100TX set to 100FDx, or 100FX set to 100FDx). The flow control settings must also be the same for all ports in a given trunk. T o verify thes e settin gs, refer to “Viewing Por[...]

Port Trunking CLI: Viewing and Configuring Port Trunk Groups 8. Connect the trunked ports on the switch to the correspondi ng ports on the opposite device. If you previousl y disabled any of the trunked ports on the switch, enab le them now . (R efer to “V iewing Port Status and Configuring Port Parameters” on page 10-3.) Check the Event Log (?[...]

Port Trunking CLI: Viewing and Configuring Port T runk Groups Using a port list specifies, for sw itch ports in a static trunk group, only the ports you want to vi ew . In this case, the command specifies ports A5 through A 7 . H o w e v e r , b e c a u s e p o r t A 6 i s n o t i n a static trunk group, i t does no t appear in the resultin g listi[...]

Port Trunking CLI: Viewing and Configuring Port Trunk Groups Listing Static LACP and Dynamic LACP T runk Data. Syntax: show lacp Lists data for only the LACP-configured ports.. In the followin g example, ports A1 and A2 have been previously con figured for a static LACP trunk . (For more on the “Active ” parameter , see table 12-5 on page 12-21[...]

Port Trunking CLI: Viewing and Configuring Port T runk Groups Figure 12-9. Example of a Dyn amic LACP T runk with On e Standby Link “Up” Links Standby Link Using the CLI T o Configure a Static or Dynamic T runk Group Important Configure port trun king before you connect the trunked links betw een switches. Otherwise, a br oadcast storm could oc[...]

Port Trunking CLI: Viewing and Configuring Port Trunk Groups Configuring a Static T runk or Static LACP T runk Group. Syntax: trunk < port-list > < trk1 ... trk24 > < trunk | lacp > Configures the specified static trunk type. This example uses port s C4 - C6 to create a non-protocol st atic trunk group with the group na me of Tr k[...]

Port Trunking CLI: Viewing and Configuring Port T runk Groups Figure 12-10. Example of Criteria for Automatically Forming a Dynamic LACP T runk Switch “A” with ports set to LACP passive. Switch “B” with ports set to LACP passive. Dynamic LACP tru nk cannot automatic ally form because both ends of the lin ks are LACP passive. (In this case s[...]

Port Trunking Web: Viewing Existing Port Trunk Groups Caution Unless spanning tree is running on yo ur network, removing a port from a tru nk can result i n a loop . T o help preven t a broadcast storm when you remove a port from a trunk whe re spanning tree is not in use, ProCurve recommends that you first disable th e port or disconnect the link [...]

Port Trunking Trunk Group Operation Using LACP T runk Group Operation Using LACP The switch can automat ically configure a dy namic LACP trunk gr oup or you can manually configure a static LACP trunk group. Note LACP requires fu ll-duplex (FDx) links of the same medi a type (10/100B ase-T , 100FX, etc.) and the same speed, and en forces speed and d[...]

Port Trunking Trunk Group Operation Using LACP T able 12-4. LACP T runk T ypes LACP Port T runk Configuration Operation Dynamic LACP This option automatically establishes an 802.3ad-compliant trunk group, with LACP for the port T ype parameter and Dyn X for the port Group name, where X is an automatically assigned va lue from 1 to 24, depending on [...]

Port Trunking Trunk Group Operation Using LACP Static LACP Provides a manually configured, st atic LACP trunk to acco mmodate these conditions: LACP Port T runk Configuration Operation • The port on the other end of the trunk link is configured for a static LACP trunk. • Y ou want to configure no n-default spanning tree or IGMP parameters on an[...]

Port Trunking Trunk Group Operation Using LACP Default Port Operation In the defaul t configurat ion, LACP is disabled for al l ports. If LACP is not configured as Active on at least one end of a link, then the p ort does not tr y to detect a trunk conf iguration and operates as a standard, unt runked port. T able 12-5 lists the elements of per -po[...]

Port Trunking Trunk Group Operation Using LACP LACP Partner Ye s : LACP is enabled on both ends of the link. Status Name Meaning No: LACP is enabled on the switch , but either LACP is not enabled or the link has not been detected on the opposite device. LACP Status Success: LACP is enabled on the port, detects and synchr onizes with a device on the[...]

Port Trunking Trunk Group Operation Using LACP The switch will not allo w you to configure LACP on a port on which port security is enabled. For example: ProCurve(config)# int a17 lacp passive Error configuring port A17: LACP and port security cannot be run together. ProCurve(config)# T o rest ore LACP to the port, you must remove port security and[...]

Port Trunking Trunk Group Operation Using LACP Blocked Ports w ith Older Devices. Some older devices are limited to four ports in a trunk. When eight LACP-enabl ed ports are connected to one of these older devices, four p orts connect, but t he other four po rts are blocked. The LACP status of the blocked ports is shown as “Fail ure”. If one of[...]

Port Trunking Trunk Group Operation Using LACP ■ If there are ports that you do not want on the default VLAN, ensu re that they cannot become dynamic LACP trunk members. Otherwise a traffic loop can unexpectedly occur . For example: VLAN-1 (Default VLAN) VLAN-2 VLAN-1 (Default VLAN) VLAN-2 VLAN-1 (Default VLAN) VLAN-2 VLAN-1 (Default VLAN) VLAN-2[...]

Port Trunking Trunk Group Operation Using the “Trunk” Option Dynamic/Static LACP Interoperation: A port configured for d ynamic LACP can properly i nteroperate with a port config ured for static (T rk X ) LACP , but any ports configured as stand by LACP links will be ignored. T runk Group Operation Using the “T runk” Option This method crea[...]

Port Trunking How the Switch Lists Trunk Data How the Switch Lists T runk Data Static T runk Grou p: Appears in the menu interface and the o utput from the CLI show trunk and show interfa ces commands. Dynamic LACP T runk Gro up: Appears in the o utput from the CLI show lacp command. Interface Option Dynamic LACP T runk Group Static LACP T runk Gro[...]

Port Trunking Outbound Traffic Distribution Across Trunked Links The load-balancing is done on a per co mmunication basis. Otherwise, tr affic is transmitted across the same path as show n in figure 12-13. That is, if Client A attached to Switch 1 sends five packet s of data to Server A attached to Switch 2, the same link is used to send a ll five [...]

Port Trunking Outbound Traffic Distribut ion Across Trunked Links T able 12-6. Exa mple of Link Assignments in a T runk Group (SA/DA Distribution) Source: Destination: Link: Node A Node W 1 Node B Node X 2 Node C Node Y 3 Node D Node Z 1 Node A Node Y 2 Node B Node W 3 Because the am ount of traffi c coming from or going t o various nodes in a netw[...]

Port Trunking Outbound Traffic Distribution Across Trunked Links 12-30[...]

13 Configuring for Network Management Applications Contents Using SNMP Tools To Manage the Switch . . . . . . . . . . . . . . . . . . . . . . 13-3 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-3 SNMP Management Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

Configuring for Network Manageme nt Applications Contents Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-35 Configuring Support f or Port Speed and Dup lex Advertising Device Capability, Network Policy, PoE Status Displaying Swit ch Information Availa ble for Outbound General LLDP Operatio[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Using SNMP T ools T o Manage the Switch Overview Y ou ca n manage the switch via SNMP from a networ k management station running an applicat ion such as ProCurve Manager (PCM) or ProCurve Manager Plus (PCM+). For more on PCM and PCM+, visit the ProCurve Networking[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch SNMP Management Features SNMP management features on the switch include: ■ SNMP version 1, version 2c, or version 3 over IP ■ Security via configuration of SNMP communities (page 13-11) ■ Security via authentica tion and privacy for SNMP V ersion 3 access ?[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch If you want to restrict acce ss to one or more specifi c nodes, you can use the switch’ s IP Auth orized Mana ger feature. (R efer to the Access Security Guide for your sw itch.) Caution For ProCurve Manager (PCM) version 1.5 or earlier (or any T opT ools versio[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch SNMP V ersion 3 Commands SNMP version 3 (SNMPv3) adds some new commands to the CLI for configuring SNMPv3 functi ons. T o enable SMNPv3 operation on the switch, use the snmpv3 enable command. An initia l user entry will be generated with MD5 authentication and DE[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Enabling SNMPv3 The snmpv3 enable command allows the switch to: ■ Receive SNMPv3 messa ges. ■ Configure initi al users. ■ Restrict non-version 3 message s to “read only” (optional). Figure 13-1 shows an example of how to use the snmpv3 enable command. No[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch 1. Configure users in the User T able with the snmpv3 user command. T o view the list of co nfigured users, enter the show snmpv3 user command (see “Adding Users” on page 13-8). 2. Assign users to Security Gro ups ba sed on their security model with the snmpv[...]

----------- -------------- ------------- ---- Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMPv3 User Commands Syntax: [no] snmpv3 user <user_nam e> Adds or deletes a user entry for SNMPv3. Authorization and privacy are optional , but to use privacy, y ou must use authorization. When you delete a user[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Assigning Users to Groups. Then you must set the group access level for the user by assigning the user to a group. This is done with the snmpv3 group command. For mo re details on the MI Bs acc ess for a given group refer to “Group Access Levels” on page 13-1[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Group Access Levels The switch suppor ts eight predefined group access levels. There are four levels for use with version 3 users and four are use d for access by version 2c or version 1 management applications. Group Name Group Access T ype Group Read View Group [...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Syntax: [no] snmpv3 community This command maps or removes a mapping of a community name to a group access level. T o remove a mapping you, only n eed to specify the index_name parameter . index <index_name> This is an index number or title for the mapping.[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Community Features Feature Default Menu CLI We b show SNMP communities n/a page page — 13-13 13-15 configure identity information none — page 13-16 configure community names public page pa ge — MIB view for a commun ity name 13-13 13-16 (operator , mana[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Note: This screen gives an overview of the SNMP com munities that are currently configured. All fie lds in this screen are read- only . Figure 13-6. The SNMP Communiti es Screen (Default V alues) 2. Press [A] (for Add ) to display the following screen: Add and Ed[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch CLI: Viewing and Configuring SNMP Community Names Community Name Commands Page show snmp-server [< community-string >] 1 3-15 [no] snmp-server 13-16 [community < community-str >] 13-16 [host < community-str > < ip-addr >] 13-19 [<none | [...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Configuring Community Na mes and V alues. The snmp-server command enables you to add SNMP communities wi th either default or spec ific access attributes, and to delete specific communitie s. Syntax: [no] snmp-server commu nity < community-name > Configures[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMP Notifications T he sw it ch e s covered in this guide su pp or t: ■ SNMP version 1 or SNMP version 2c traps ■ SNMPv2c informs ■ SNMPv3 noti fication process, including traps This section describes how to configure a swi tch to send network security and [...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch ■ Advance T raffic Management Guide: • Loop protection • Spanning T ree (STP , RSTP , MSTP) ■ Access Security Guide: • MAC lockdown • MAC lockout General Steps for Configuring SNMP Notifications T o configure SNMP notific ation s, follow these general[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch SNMPv1 and SNMPv2c T raps T he sw it ch e s covered in this guide su pp or t t h e f ol lo wi n g f un ct i on al it y fr om earlier SNMP versions (SNMPv1 and SNMPv2c): ■ T rap receivers: A trap receiver is a manageme nt st ation to which the switch sends SNMP t[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Syntax: snmp-server host < ipv4-addr | ipv6-addr > < community name > Configures a destination ne twork management station to receive SNMPv1/v2c traps, and (optionally) event log messages sent as traps from the switch, using the specified community na[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch For example, to configur e a trap receiver in a co mmunity named "red-team" with an IP address of 10.28.227.130 to receive only "c ritical" event log messages, you can enter the following comma nd: ProCurve(config)# snmp-server host 10.28.227.1[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch Note The retries and timeout values are not used to send trap requests. T o verify the configuration of SNMPv2c informs, enter the show snmp-server command: ProCurve(config)# show snmp-server SNMP Communities Community Name MIB View Write Access ---------------- [...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Configuring SNMPv3 Notifications The SNMPv3 not ification pro c ess al lows messages th at are passed via SN MP between the switch and a network mana gement station to be authen ticated and encrypted. T o configure SNMPv3 notifi ca tions, follow these steps: 1. En[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch 5. Configure t he target address of the SNMPv3 managemen t station to which SNMPv3 informs and trap s are sent by enteri ng the snmpv3 targetaddress command. Syntax: [no] snmpv3 targetad dress < ipv4-addr | ipv6-addr> < name > Configures the IPv4 or I[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Syntax: [no] snmpv3 targetad dress < ipv4-addr | ipv6-addr> < name > —Continued— [timeout < value > ] (Optional) T ime (in millisecond increments) allowed to receive a response from the target before notification packets are retransmitted . R[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch An example of how to configure SNMPv3 notification i s shown here: The tag _name value in snmpv3 notify command matche s the tag _name val ue in the snmp v3 targetaddress command. Params _name value in the snmpv3 targetaddress command matche s the p arams _name v[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch T o enable or disable noti fication/traps for network sec urity failures and other security events, enter the snmp-server enable traps command. Syntax: [no] snmp-server enable traps [snmp-au th | password-change-mgr | login- failure-mgr | port-security | au th-ser[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch ProCurve(config)# show snmp-server traps Trap Receivers Link-Change Traps Enabled on Ports [All ] : A1-A24 Link-change trap setting Traps Category Current Status ------------------------------ ---------------------- --- - SNMP Authentication : Extended Password c[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Configuring the Source IP Addr ess for SNMP Notifications The switch us es an interface I P address as the source IP address in IP headers when sending SNMP notifications (t raps and informs) or responses to SNMP requests. For multi-nette d interfaces, the source [...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch T o configure the switch to use a specif ied source IP address i n generated trap PDUs, enter the snmp-server trap-sou rce command. Syntax: [no] snmp-server trap-sou rce [< ipv4-addr >] Specifies the source IP address to be used for a trap PDU. The no form [...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch ProCurve(config)# show snmp-server SNMP Communities Community Name MIB View Write Access ---------------- -------- ---------- - - public Manager Unrestrict ed Trap Receivers Link-Change Traps Enabled on Ports [ All] : All ... Excluded MIBs Snmp Response Pdu Source[...]

Configuring for Network Manageme nt Applications Using SNMP Tools To Manage the Switch In the follow in g example, the show snmp-server command output sh ows that the switch has been configured to send SNMP traps and notifi cations to management stations that belong to th e “public”, “red- team ”, and “blue-team” communities. ProCurve(c[...]

Configuring for Network Management Applications Using SNMP Tools To Manage the Switch Advanced Management: RMON The switch supports RM ON (Remote Monitoring) on all con nected network segments. This allows for troubl eshooting and opt imizing your network. The followi ng RMON groups are supported: ■ Ethernet Statistics (except the numbers of pack[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) LLDP (Link-Layer Discovery Protocol) T o standard ize device discovery on al l Pr oCurve switches, LLDP will be implemente d while offering limited read -only support for CDP as documented in this manual. For the latest information on yo ur switch model, consult t[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) LLDP-MED (LLDP Media Endpoint Discovery): Provides an extension to LLDP and is designed to support V oIP deployme nts. Note LLDP-MED is an extension for LLDP , an d the switch requires that LLDP be enabled as a prerequisite to LLDP-MED operation. An SNMP utility ca[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) LLDP Neighbor: An LLDP device that is either directly c onnected to another LLDP device or co nn ected to that device by another , non-LLDP Layer 2 device (such as a hub) Note that an 802.1D-co mpliant switch does not forward LLDP data packets even if it is not LL[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) TL V (T ype-Length-V alue): A dat a unit that in cludes a data type field, a dat a unit length fiel d (in bytes), an d a field cont aining the actual data the unit is designed to carry (as an alphanumeric string, a bitmap, or a subgr oup of information) . Some TL V[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Configuration Options Enable or Disable LLDP on the Switch. In the default configuratio n, LLDP is glob ally enabled on the sw itch. T o prevent transmission or receipt of LLDP traffic, you can disable LLDP operat ion (page 13-38) Enable or Disable LLDP-MED. In th[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) SNMP Notification. Y ou can enable the switch to send a notification to any configured SNMP trap receiver(s) wh en the swi tch detects a remote LLDP data change on an LLDP-e nabled port (page 13-48). Per -Port (Outbound) Data Options. The follow ing table lists the[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Data T ype Configuration Options Default Description System capabilities Enable/Disable Enabled Identifies the prima ry switch functions that are enabled. enabled 5, 6 1 The Packet T ime-to-Live value is included in LLDP data pack ets. (Refer to “Changing the T [...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) LLDP and LLDP-MED St andards Compatibility The operat ion covere d by this section is compatibl e with the se standards: ■ IEEE P802.1AB ■ RFC 2922 (PTOPO, or Physical T opology MIB) ■ RFC 2737 (Entity MIB) ■ RFC 2863 (Interfaces MIB) ■ ANSI/TIA-1057/D6 ([...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) advertisements. Attempting to use th e CLI to configure LLDP with an IP address that is either not configured on a VLAN, o r has been acquired by D HCP or Bootp results in the fo llowing error message. xxx.xxx.xxx.xxx: This IP address is not configured or is a DHC[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Viewing the Current Configuration Displaying the Global LLDP , Port Admin, and SNMP Notificati on Status. This command displays the switch ’ s gen eral LLDP configuration status, including so me per -port inform ation affecting adve rtisement traffic and trap not[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Displaying Port Configurat ion Details. This command displays the port- specific configurat ion, including. Syntax show lldp config < port-list > Displays the LLDP port-specific configuration for all ports in < port-list > , includ ing which optional T[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Enabling or Disabling LLDP Operation on the Switch. Enabling LLDP operation (the de fault) causes the switch to: ■ Use active, LLDP-enabled ports to tran smit LLDP packets describing itself to neighbor devices. ■ Add entries to its neighbors tabl e based on dat[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Changing the T ime-to-Live for T ransmitted Advertisem ents. The T ime-t o-Live value (in seconds) for all LLDP advertisements transmit ted from a switch is controlled by the switch that generate s the advertisement, and determines how long an LLDP neighbor retain[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Syntax setmib lldpTxDelay .0 -i < 1 - 8192 > Uses setmib to change the minimum time (delay-inter val) any LLDP port will delay advertising successive LLDP advertisements due to a change in LLDP MIB content. (Default: 2; Range: 1 - 8192) Note: The LLDP refresh[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) delay interval delays the port’ s ability to reinitialize and g enerate LLDP traffic following an LLDP disable/enable cycle. Syntax setmib lldpReinitDelay .0 -i < 1 - 10 > Uses setmib to change the minimum time (reinitialization delay interval) an LLDP por[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Changing the Minimum Interval for Succe ssive Data Change Notifications for the Same Ne ighbor . If LLDP trap notificati on is enabled on a port, a rapid succession of changes in LLDP inf o rm ation received in advertisements from one or more neighbors can generate[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Configuring Basic LLDP Per - Port Advertisement Content In the defaul t LLDP configu ration, outbound advert isements from each port on the switch includ e both mandatory and optional data. Mandator y Data. An active LLDP port on the switch always includes the man[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) For example, if port 3 belongs to a subn etted VLAN that includes an IP address of 10.10.10.100 and you wanted port 3 to use this secondary address in LLDP advertisements, you would need to exec ute th e fo llowing command: ProCurve(config)# lldp config 3 ipAddrEna[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) system_cap For outbound advertisements, this TL V includes a bitmask of supported syst em capabilities (device functions). Also includes in formation on whether the capabilities are enabled. (Default: Enabled) For example, if you want ed to exclude the system name[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Syntax: [ no ] lldp config < port -list > dot3TlvEnable macphy_co nfig For outbound advertisements, this TL V includes the (local) switch port’ s current speed and duplex settings, the range of speed and duplex set tings the port supports, and the method re[...]

IP Network Infrastructure (IEEE 802 LAN ) IP Network Infrastructure (IEEE 802 LAN ) IP Network Infrastructure (IEEE 802 LAN ) Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) ■ Power over Ethernet (PoE) status and troubleshooting support via SNMP ■ support for IP t elephony network tr oubleshooting of call q[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) ■ able to use th e following network po licy elements configured on the client port • v o i c e V L A N I D • 802.1p (Layer 2) QoS • Diffserv codepoint (DSCP) (Layer 3) QoS ■ discover and advertise device locat ion da ta learned from the switch ■ suppor[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) ■ Class 3 (Communication Devices): These devices are typically IP phones or end-user devices that otherwise support IP m edia and offer all Class 1 and Class 2 features, plus location id en tification and emergency 911 capability , Layer 2 s witch support, and d[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Syntax: lldp top-change-notify < port -list > T opology change notificat ion, when enabled on an LLDP port, causes the switch to send an SNMP trap if it detects LLDP-MED endpoint connection or disconnection activity on the port, or an age-out of the LLDP-MED [...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) LLDP-MED Fast Start Control Syntax: lldp fast-start-count < 1 - 10 > An LLDP-MED device connecting to a switch port may use the data contained in the ME D TL Vs from the switch to configure itself. However , the lldp refresh-inte rval setting (default: 30 se[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Note LLDP-MED op eration re quires the ma cphy_config TL V subelement—enabled by default—that is optional for IEEE 802.1AB LLDP operation. Refer to the dot3TlvEnable macphy_ config command on page 13-53. Network Policy Advertisements. Network policy advertiseme[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Notes A codepoint must have an 802.1p priority before you can configure it for use in prioritizi ng packets by VLAN-ID. If a codepoi nt you want to use shows No Override in the Prio rity column of the DSCP po licy table (display with show qos- dscp map , then use [...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) network-policy This TL V enables the switch port to advertise its configured network policies (voice VLAN, Layer 2 QoS, Layer 3 QoS), and allows LLDP-MED endpoint devices to auto-configure the voice networ k policy advertised by the switch. This also en ables the u[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) PoE Advertisements. These advertisements in form an LLDP-MED endpoint of the power (Po E) configuratio n on switch ports. Similar advertisements from an LLDP-MED endpoint i nform the switch of the endpoint’ s power needs and provide info rmation that can be used[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) ■ ELIN (Emergency Location Identification Number): an emergency number typically assigned to ML TS (Multiline T elephone System Opera- tors) in North America ■ coordinate-based loca tion: attitude, longitude, and altit ude informa- tion (Requires config uration[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) — Continued — T ype/V alue Pairs ( CA-TYPE and CA-V ALUE ): This is a series of data pairs, each co mposed of a location data “type” specifier and the co rresponding location data for that type. That is, the first value in a pair is expected to be the civi[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Note: A switch port allow s one instance of any given CA- TYPE . For example, if a type/value pair of 6 Atlantic (to specify “Atlantic” as a street name) is configured on port A5 and later another type/ value pair of 6 Pacific is configured on the same port, th[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) T able 13-4. Some Lo cation Codes Used in CA-TYPE Fields* Location Element Code Location Elemen t Code national subdivision 1 regional subdivision 2 city or township 3 city subdivision 4 street 6 street suffix 18 street number 19 additional location data 22 unit o[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Figure 13-18 shows the commands for co nfiguring and displ aying the above data. Figure 13-18. Example of a Civi c Address Configuration Displaying Advertisement Data Command Page show lldp info local-device below walkmib lldpXdot3LocPortOperMauT ype show lldp info[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Displaying Switch Informat ion A vailable for Outbound Advertisements These commands display the current switch informati on that will be used to populate outbo und LLDP advertisements. Syntax show lldp info local-device [ port-list ] Without the [ port-list ] opt[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) The Management Addr ess field displays only the LLDP-configurabl e IP addresses on th e switch. (Only manu ally-configure d IP addresses are LLDP-con figurable.) If th e switch has only a n IP address fr om a DHCP or Bootp server , then the Management Address field[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) information on d isplaying the currently conf igured port speed and du plex on an LLDP-MED endpoint, refer to “Dis playing the Current Port Speed and Duplex Configurat ion on a Sw itch Port” on page 13-69. Syntax: show interfaces brief < port-list > Incl[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Figure 13-21. Example of a Global Listing of Discovered Devices Indicates the polic y configured on the telephone. A configurati on mismatch occurs if the supp orting port is configured diffe rently . Figure 13-22. Example of an LLLD P-MED Listing of an Advertiseme[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Displaying LLDP Statistics LLDP statistics are availabl e on both a global and a per -port level s. Rebooting the switch resets the LLDP statisti cs co unters to zero. Disa bling the transmit and/or receive capability on a port “free z es” the related port cou[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) — Continued — Per -Port LLDP Counters: NumFra mesRecvd: Shows the total number of valid, inbound LLDP advertisements received from any neighbor(s) on < port- list > . Where multiple neighbors are connected to a port through a hub, this value is the tota l[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Counters showing frames sent on a port bu t no frames received on that port indicates an a ctive link with a device that either has LLDP disable d on the link or is not LLDP- aware. Figure 13-23. Example of a Gl obal LLDP Statistics Display Figure 13-24. Example o[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) LLDP Packet Forwarding: An 802.1D-compliant switc h does not forward LLDP packets, regardless of whether LL DP is global ly enabled or disabled on the switch. One IP Address Advertiseme nt Per -Port: LLDP advertises only one I P address per -port, even if multiple [...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Figure 13-25. Matching In ternal Port Numbers t o External Slot/Port Numbers ProCurve# walkmib ifDescr ifDescr.1 = A1 ifDescr.2 = A2 ifDescr.3 = A3 . . . ifDescr.23 = A23 ifDescr.24 = A24 ifDescr.27 = B1 ifDescr.28 = B2 ifDescr.29 = B3 . . . ifDescr.48 = B22 ifDes[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) ■ If the switch receives bot h LLDP an d CDP ad vertisemen ts on the same port from the same neigh bor the switch stores thi s information as tw o separate entries if the advertisements have differences chassis ID and port ID information. ■ If the chassis and p[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) Protocol State Packet Generation Inbound Data Management Inbound Packet Forwarding CDP Enabled 1 n/a Store inbound CDP data. No forwarding of inbound CDP packets. CDP Disabled n/a No stor age of CDP data from Floods inbound CDP packets neighbor devices. from conne[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Command Page show cdp 13-79 show cdp neighbors [< port-list > detail] 13-80 [detail < port-list >] [no] cdp run 13-81 [no] cdp enable < port-list > 1 3-81 Note For details on how to use an SN MP utility to retrieve information fro m the switch’ [...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) V iewing the Switch’ s Current CDP Neighbors T a ble. Devices are listed by the port on which they were detected. Syntax: show cdp neighbors Lists the neighboring CDP de vices the switch detects, with a subset of the info rmation collected from the device’ s C[...]

Configuring for Network Management Applications LLDP (Link-Layer Discovery Protocol) Disabling CDP Operation. Disabling CDP operation clears the switch’ s CDP Neighbors table and causes the swit ch to drop inb ound CDP packets from other devices without entering t he data in the CDP Neighbors tabl e. Syntax: [no] cdp run Enables or disables CDP r[...]

Configuring for Network Manageme nt Applications LLDP (Link-Layer Discovery Protocol) 13-82[...]

A File T ransfers Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3 Downloading Switch Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3 General Softwa re Download Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3 Using TFTP To Dow[...]

File Transfers Contents TFTP: Copying a Configurat ion File to a Remote Host . . . . . . . A-24 Xmodem: Copying a Configur ation File to a Serially Xmodem: Copying a Configuratio n File from a Serially TFTP: Copying a Config uration File from a Remote Host . . . . A-24 TFTP: Copying a Customized Command File to a Switch . . . . A-25 Connected PC or[...]

File Transfers Overview Overview The switches co vered in this guide su pport several methods f or transferring files to and from a physic ally connected device, or via the network, including TFTP and Xmodem. Thi s appendix expl ains how to do wnload new swi tch software, upload or download switch configuration files and softw are images. It contai[...]

File Transfers Downloading Switch Software Note Downloading new swi tch software does not chang e the current swit ch con- figuration. The swi tch configur ation is contained in separate files that can also be transferred. Refer to “T ransferring Switch Configurat ions” on page A-22. In most cases, if a powe r failure or other caus e interrupts[...]

File Transfers Downloading Switch Software Figure A-1. Example of a Download OS (Software) Screen (Default Values) 2. Press [E] (for E dit ). 3. Ensure that the Method field is set to TFTP (the default). 4. In the TFTP Server field, type in the IP address of the TFTP server in which the software file has been stored. 5. In the Remote File Name fiel[...]

File Transfers Downloading Switch Software 7. After the pri mary flash memory has been updated with the new software, you must reboot th e switch to impl ement the newly downloaded software. Return to the Main Menu and press [6] (for Reboot Switch ). Y ou will then see this prompt: Continue reboot of system? : No Press the space bar once to change [...]

File Transfers Downloading Switch Software T o find more information on the cause of a download fail ure, examine the messages in the switch’ s Event Log by executing the show l og tftp command from the CLI. Also : ■ For more on the Event Log, see “Usi ng the Even t Log for T roublesh ooting Switch Problems” on page C-22. ■ For descriptio[...]

File Transfers Downloading Switch Software For example, to download a switch so ftware file named k0800.s wi from a TFTP server with the IP address of 10.28.227.103 to primary flash: 1. Execute copy as shown below: Dynamic counter co ntinually disp lays the number of bytes transferred. This message means that the image you want to upload will repla[...]

File Transfers Downloading Switch Software Using Secure Copy and SFTP For some situ ations you may want t o use a secu re method to issue command s or copy files to the switch. By open ing a secure, encrypted SSH session you can then use a third-party software applic ation to take advantage of Secure Copy (SCP) and Secure ftp (SFTP). SCP an d SFTP [...]

File Transfers Downloading Switch Software Protocol major versions differ: 1 vs. 2 Connection closed Received disconnect from < ip-addr > : /usr/local/ libexec/sftp-server: command not supported Connection closed SCP (secure copy) is an im plementation of the BSD rcp (Berkeley UNIX remote copy) command tunneled throug h an SSH connection. SCP[...]

File Transfers Downloading Switch Software Disable TFTP and Auto-TFTP for Enhanced Security Using the ip ssh filetransfer command to enable Secure FTP (SFTP) automat- ically disables TFTP and auto-TFTP (i f either or both are enabled). ProCurve(config)# ip ssh filetransfer Enabling SFTP automati cally disables TFTP Tftp and auto-tftp have been disa[...]

File Transfers Downloading Switch Software Enables/Disables TFTP . Note: If SFTP is enabled, this field will be set to No . Y ou cannot use this field to enable TFTP if SFTP is enabled. Attempting to do so produces an Inconsistent value message in the banner below the Actions line. Figure A-6. Using t he Menu Interface T o Disab le TFTP ■ While S[...]

File Transfers Downloading Switch Software Syntax: no tftp-enable This command disables all TFTP operation on the switch except for the auto-TFTP featu re. T o re-enable TFTP opera- tion, use the tftp-enable command. When TFTP is disabled, the instances of tftp in the CLI copy command and the Menu interface “Download OS” screen become unavailab[...]

File Transfers Downloading Switch Software Authentication Switch mem ory allows up to te n public keys. This means the authentication and encryption keys you use fo r your third-party client SCP/SFTP software can differ from the keys you use for the SSH session, even though both SCP and SFTP use a secure SSH tunn el. Note SSH authentication is mutu[...]

File Transfers Downloading Switch Software ■ The switch suppor ts one SFTP session or o n e SCP session at a time. ■ All files have read-w ri te pe rmission. Several SFTP commands, such as create or remove , are not allowed and return an error message. The switch displays the follow ing files: / +---cfg | running-config | startup-config +---log[...]

File Transfers Downloading Switch Software T roubleshooting SSH, SFTP , and SCP Operations Y ou can v erify secure file transfer op erations by checking the sw itch’ s event log, or by viewin g the error message s sent by the switch th at most SCP and SFTP clients will print out on their console. Note Messages that are sent by the switch to th e [...]

File Transfers Downloading Switch Software Received disconnect from 10.0.12.31: 2: Wait for previous session to complete lost connection Attempt to Start a Second Session. The switch supports only one SFTP session or one SCP session at a time. If a second session is initiated ( for example, an SFTP session is running and then an SCP session is atte[...]

File Transfers Downloading Switch Software 5. Press [Enter] and then execute the terminal emulator command( s) to begin Xmodem bina ry transfer . For example, using HyperT erminal: a. Click on T ransfer , then Send File . b. T ype the file path and na me in the Filename field. c. In the Protocol field, select Xmodem . d. Click on the [Send] button.[...]

File Transfers Downloading Switch Software 2. Execute the termina l emulator comm ands to begin the Xmodem transfer . For example, using HyperT erminal : a. Click on T ransfer , then Send File . b. T ype the file path and na me in the Filename field. c. In the Protocol field, select Xmodem . d. Click on the [Send] button. The download ca n take sev[...]

File Transfers Downloading Switch Software 3. In the TFTP Server field, enter the IP address of the remote sw itch contain- ing the software file you want to download. 4. For the Remote File Name , en ter one of the followin g: • T o download the software in the pr imary flash of the source switch, type “ fl ash ” in lo wercase cha racters. ?[...]

File Transfers Downloading Switch Software Downloading fro m Primary Only . Syntax: copy tftp flash < ip-addr > flash [ primary | secon dary ] This command (executed in the destination switch) downloads the software flash in the source switch’ s primary flash to either the primary or secondary flash in the destination switch. If you do not [...]

File Transfers Copying Software Images Figure A-8. Switch-to-Switch, from Either Flash in Source to Eithe r Flash in Destination Using PCM+ to Update Switch Software ProCurve Manager Plu s includes a software update utility for updatin g on ProCurve switch products. For further informati on, refer to the Getting Started Guide and the Administrator?[...]

File Transfers Transferring Switch Configurations Xmodem: Copying a Software Image from the Switch to a Serially Connected PC or UNIX W orkstation T o use this method, the sw itch must be connected via the serial port to a PC or UNIX workstation. Syntax: copy flash xmodem < pc | unix > Uses Xmodem to copy a designated configuration file from [...]

File Transfers Transferring Switch Configurations Note For greater security , you can perform all TFTP operations using SFTP as described in the section on Using Secure Copy and SFTP on page A-9 . The inclu de-credentials command can also be used to save passwo rds, secret keys, and other security credentials in the running config file. For more in[...]

File Transfers Transferring Switch Configurations TFTP: Copying a Customized Command File to a Switch Using the copy tftp command with the show-tech option provides the abilit y to copy a customi zed command fi le to the switch. When the show tech cu stom command is executed, the comma nds in the custom file ar e executed instead of the hard-c oded[...]

File Transfers Transferring Switch Configurations Xmodem: Copying a Configuration File to a Serially Connected PC or UNIX W orkstation T o use this method, the sw itch must be connected via the serial port to a PC or UNIX workstation. Y ou will need to: ■ Determine a filename to use. ■ Know the directory path y ou will us e to store the configu[...]

File Transfers Transferring Switch Configurations Syntax: copy xmodem startup-config < pc | unix > copy xmodem config < filename > < pc | unix > Copies a configuration file fr om a serially connected PC or UNIX workstation to a designat ed configuration file on the switch. For more on multiple configuration files, refer to “Mult[...]

File Transfers Copying Diagnostic Data to a Remote Host, PC or UNIX Workstation Copying Diagnostic Data to a Remote Host, PC or UNIX W orkstation Y o u can use the CLI to copy th e following types of switch d ata to a text file in a destination device: ■ Command Output: Sen ds the output of a switch CLI com mand as a file on the destination devic[...]

File Transfers Copying Diagnostic Data to a Remote Host, PC or UNIX Workstation At this point, press [Enter] and start the Xmodem command sequence in your terminal em ulator . Indicates the operation is finish ed. Figure A-11. Exa mple of Sending Command Output to a File on an Attached PC Note The command you specify must be enclosed in doubl e-quo[...]

File Transfers Copying Diagnostic Data to a Remote Host, PC or UNIX Workstation Syntax : copy crash-data [< slot-id> | master] tftp < ip-address> <filename > copy crash-data [< slot-id> | mm ] xmodem where: slot-id = a - h , and retrieves the crash log or crash data from the processor on the module in the specified slot. mm [...]

B Monitoring and Analyzing Switch Operation Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-3 Status and Counters Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-4 Menu Access To Stat us and Counters . . . . . . . . . . . . . . . . . . . . . .[...]

Monitoring and Analyzi ng Switch Operation Contents Interface Monitoring Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-23 Menu: Configurin g Port and Static Trunk Monitoring . . . . . . . . . . . B-24 CLI: Configurin g Port and Static Trunk Mo nitoring . . . . . . . . . . . . . B-25 Web: Configuring Port Monitoring . . . . [...]

Monitoring and Analyzing Switch Operation Overview Overview T he sw it ch e s covered in this guide ha ve se v er al bu il t- i n t oo ls f or mo ni t or in g, analyzing, and troubleshootin g switch and network operation: ■ Status: Includes options for displaying general swit ch informatio n, man- agement address data, port st atus, port and trun[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data Status and Counters Data This section describes the status and counters screens available through the switch console interface and/or the web browser interface. Note Y ou can access a ll console screens from the web browser interface v ia T elnet to the console. T elne t access to [...]

Monitoring and Analyzing Switch Operation Status and Counters Data Menu Access T o St atus and Counters Beginning at the Main Menu, display th e Status a nd Counters menu by select- ing: 1. Status and Counte rs Figure B-1. The Status and Counters Menu Each of the above menu items accesses the read-only scr eens desc ribed on the followin g pages. R[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data General System Information Menu Access From the console Main Menu, select: 1. Status and Counte rs 1. General System Information ProCurve Switch 2-Jan-2009 22:14:32 ===========================- TELNET - MAN AGER MODE -========================== Status and Counters - General System [...]

Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access to System Information The show system command displays general sy stem informat ion abou t the switch. Syntax: show system [information] ] Displays global system in formation and operational parameters for the switch. information Displays global system in formation and op[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data When the task-monitor command is enabled, the show cpu command summa- rizes the processor usage by pr otocol and system functions. Syntax: [no] task-monitor cpu Allows the collection of pro cessor utilization data. Only manager logins can execute th is command. The settings are not[...]

Monitoring and Analyzing Switch Operation Status and Counters Data Figure B-5. Example of Managem ent Address Information with VLANs Configured This screen displays a ddresses that are importan t for manage ment of the switch. If multiple VLANs are not configured, this screen displays a single IP address for the entire switc h. Refer to the online [...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data Port Status The web browser interface and the co ns ole interface show the same port status data. Menu: Displaying Port Status From the Main Menu, select: 1. Status and Counters … 4. Port Status Figure B-6. Example of Port Status on t he Menu Interface CLI Access Syntax: show int[...]

Monitoring and Analyzing Switch Operation Status and Counters Data V iewing Port and T runk Gr oup Statistics and Flow Control Status Feature Default Menu CL I We b viewing port and trunk statistics for all ports, and flow control status n/a page B-12 page B-13 page B-13 viewing a detailed summary for a n/a page B-12 page B-13 page B-13 particular [...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data Menu Access to Port and T runk Statistics T o access this screen from the Ma in Menu, select: 1. Status and Counters … 4. Port Counte rs Figure B-7. Example of Port Counters o n the Menu Interface T o view details about the traffi c on a particular port, use the [v] key to highli[...]

Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access T o Port and T runk Group Statistics T o Display the Port Counter Summary Report. Syntax: show interfaces This command provides an overvie w of port activity for al l ports on the switch. T o Display a Detail ed T raffi c Summary for Specific Ports. Syntax: show interface[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data V iewing the Switch’ s MAC Address T ables Feature Default Menu CLI Web viewing MAC addresses on all ports on a specific VLAN n/a page B-14 page B-17 — viewing MAC addresses on a specific port n/a page B-16 page B-17 — searching for a MAC address n/a page B-16 page B-17 — T[...]

Monitoring and Analyzing Switch Operation Status and Counters Data Figure B-9. Example of the Address T able T o page through the listing, use N ext page and P re v page . Finding the Po rt Connection for a Specific Device on a VLAN. This feature uses a devi ce’ s MAC address that you enter to identify the port used by that device. 1. Proceeding [...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data Port-Level MAC Address V i ewin g and Searching. This feature di splays and searches for MAC addresses on the specified port instead of for all ports on the switch. 1. From the Main Menu, select: 1. Status and Counte rs 7. Port Address T able Prompt for Selecti ng the Port T o Sear[...]

Monitoring and Analyzing Switch Operation Status and Counters Data CLI Access for MAC Address Views and Searches Syntax: show mac -address [ vlan < vlan-id > ] [ < port-li st > ] [< mac-addr >] T o List All Learned MAC Addresse s on the Switch, with The Port Number on Which Each MAC Address W as Lea rned. ProCurve> show mac-add[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data Spanning T ree Protocol (MSTP) Information CLI Access to MSTP Data This option lists the MSTP co nfiguration, root data, and per -port data (cost, priority , state, a nd designated bridge). Syntax: show spanning-tree This command displays the sw itch’ s global and regional spanni[...]

Monitoring and Analyzing Switch Operation Status and Counters Data Internet Group Management Protocol (IGMP) Status The switch uses the CLI to display th e following IGMP st atus on a per -VLAN basis: Show Command Output show ip igmp Global command listing IG MP status for a ll VLANs configured in the switch: • VLAN ID (VID) and name • Active g[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data VLAN Information The switch uses the CLI to disp lay the following VLAN status: Show Command Output show vlan Lists: • Maximum number of VLANs to support • Existing VLANs • Status (static or dynamic) • Primary VLAN show vlan < vlan-id > For the specified VLAN, lists: [...]

Monitoring and Analyzing Switch Operation Status and Counters Data Because ports A1 and A2 are no t members of VLAN- 44, it does not appear in this listing. Figure B-15. Example of VLAN Listing fo r Specific Ports Figure B-16. Example of Port Listing f or an Individual VLAN B-21[...]

Monitoring and Analyzi ng Switch Operation Status and Counters Data W eb Browser Interface Status Information The “home” screen for the web brow se r interface is the Status Overview screen, as shown below . As the title imp lies, it provides an overview of the status of the swit ch, including summary gr aphs indicat ing the network ut ili- zat[...]

Monitoring and Analyzing Switch Operation Interface Monitoring Features Interface Monitoring Features Port Monitoring Features Feature Default Menu CLI Web display monitoring configuration disabled page B-24 page B-26 page B-28 configure the monitor port(s) ports: none page B-24 page B-26 page B-28 selecting or removing ports none selected page B-2[...]

Monitoring and Analyzi ng Switch Operation Interface Monitoring Features Menu: Configuring Port an d Static T runk Monitoring This procedure describes co nfiguring the switch for monitoring wh en moni- toring is disabled . (If monitoring has already bee n enabled, the screens will appear differently than sh own in this procedure.) 1. From the Conso[...]

Monitoring and Analyzing Switch Operation Interface Monitoring Features Move the cursor to the Mon i tori ng Port parameter . Inbound Port an d T runk Mon itoring (Only) on th e Switch Figure B-19. How T o Select a Monitoring Port 5. Use the Space bar to select the port to use for monitoring. 6. Use the down arrow key to move the cursor to the Acti[...]

Monitoring and Analyzi ng Switch Operation Interface Monitoring Features Y ou must use the following configuration sequence to config ure port and static trunk monit oring in the CLI: 1. Assign a monitori ng (mirror) port. 2. Designate the port(s) and/or stat ic trunk(s) to monitor . Displaying the Monitoring Configuration. Syntax: show monitor Thi[...]

Monitoring and Analyzing Switch Operation Interface Monitoring Features Selecting or Removing Monitori ng Source Interfaces. After you con- figure a monitor port you can use either the global configuration level or the interface context level to select ports or static trunks as monitori ng sources. Y ou can al so use either level to remove monitori[...]

Monitoring and Analyzi ng Switch Operation Locating a Device W eb: Configuring Port Monitoring To e n a b l e p o r t monitoring: 1. Click on the Configuration tab. 2. Click on [Monitor P ort]. 3. T o monitor one or more port s. a. Click on the radio button for Monitor Selected Ports . b. Select the port(s) to m onitor . 4. Click on [Apply Changes][...]

Monitoring and Analyzing Switch Operation Locating a Device ProCurve(config)# chassislocate blink <1-1440> Blink the chassi s locate led (default 30 minutes). off Turn the chassis locate led off. on <1-1440> Turn the chassis locate led on (default 30 minutes). ProCurve(config)# chassislocate Figure B-23. The chassislocate co mmand B-29[...]

Monitoring and Analyzi ng Switch Operation Locating a Device B-30[...]

C T roubleshooting Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-4 Troublesho oting Approa ches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-5 Browser or Telnet Access Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . C-6 Unusual Netw[...]

Troubleshooting Contents Debug/Syslog Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-32 Configuring the Severit y Level for Event Log Configuring the System Module Used to Select the Event Log Debug/Syslog Messaging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-32 Debug/Syslog Destina[...]

Troubleshooting Contents Clear/Reset: Resetting to the Factory- Default Configuration . . . . . C-67 Restoring a Flash Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-68 DNS Resolver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-71 Terminology . . . . . . . . . . . [...]

Troubleshooting Overview Overview This appendix addresses performance- relat ed network problems th at can be caused by topology , switch configurat ion, and the effects of other devices o r their config urations on sw itch operation. (For swit ch-speci fic inform ation on hardware problems indicated by LED behavior , cabl ing requirements, and oth[...]

Troubleshooting Troubleshooting Approaches T roubleshooting Approaches Use these approaches to diagnose switch problems: ■ Check the ProCurve Networking web site f or software up dates that may have solved your problem: www.procurve.com ■ Check the switch LEDs for indicati ons of proper switch operation: • Each sw itch port has a Link LED th [...]

Troubleshooting Browser or Telnet Access Problems Browser or T elnet Access Problems Cannot access the we b browser interface: ■ Access may be disabled by the Web Agent Enabled parameter in the switch console. Check the se tting on this parame ter by selecting: 2. Switch Configuration … 1. System Information ■ The switch may not have the corr[...]

Troubleshooting Browser or Telnet Access Problems Cannot T elnet into the switch console from a station on the network: ■ T e lnet access may be disabled by the Inbound T elnet Enabled parameter in the System Informati on scr een of the menu interface: 2. Switch Configuration 1. System Information ■ The switch may not have the correct IP addres[...]

Troubleshooting Unusual Network Activity Unusual Network Activity Network activity that fails to meet ac cepted norms may indicate a hardware problem with one or more of the netw ork components, possi bly including the switch. Such problems can also be caused by a network loop or simpl y too much traffic for t he network as it is currently de signe[...]

Troubleshooting Unusual Network Activity This can also happen, for example, if the server is first conf igured to issue IP addresses with an un limited duration, th en is subsequently co nfigured to issue IP addresses that will expire after a limit ed duration. One solution is to configure “reservations” in the DHCP server for speci fic IP addr[...]

Troubleshooting Unusual Network Activity Caution Note IP Multicast T raf fic Floods Out All Ports; IGMP Does Not Appear T o Filter T raffic. The IGMP feature does not operat e if the sw itch or VLAN does not have an IP address configured manu ally or ob tained through DHCP/Bootp . T o verify whether an IP address is config ured for the switch or VL[...]

Troubleshooting Unusual Network Activity The switch does not receive a res ponse to RADIUS authentication requests. In this case, the switch wi ll attempt authen tication using the secondary method configured for the type of acce ss you are using (console, T e lnet, or SSH). There can be several reasons for not recei ving a response to an authentic[...]

Troubleshooting Unusual Network Activity The supplicant statistics listing sh ows multiple ports with the same authenticator MAC address. The li nk to the authen ticator may have been moved from one port to anot her without the suppl icant statistics havi ng been cleared from the first port. Refer to “Note on Suppli cant Statistics” in the chap[...]

Troubleshooting Unusual Network Activity Figure C-2. Displaying Encryption Keys Global RADIUS Encrypti on Key Unique RADIUS En cryption Key for the RADIUS server at 10.33.18.119 Also, ensure that the swit ch port used to access the RADIUS server is not blocked by a n 802.1X configuration on t hat port. For example, show port- access authenticator &[...]

Troubleshooting Unusual Network Activity Radius-Related Problems The switch does not receive a res ponse to RADIUS authentication requests. In this case, the switch wi ll attempt authen tication using the secondary method configured for the type of acce ss you are using (console, T e lnet, or SSH). There can be several reasons for not recei ving a [...]

Troubleshooting Unusual Network Activity Spanning-T ree Protocol (MSTP) and Fast-Uplink Problems Caution If you enable MSTP , it is recommende d that you leave th e remainder of the MSTP param eter settings at their d efaul t values until you have had an oppor - tunity to evaluate MSTP performance in your network. B ecause incorrect MSTP settings c[...]

Troubleshooting Unusual Network Activity SSH-Related Problems Switch access refused to a client. Even though you have pla ced the client’ s public key in a text file and copied the file (using the copy tftp pub-key- file command) into the switch, the switch refuses to allow the client to have access. If the source SSH client is an SSHv2 applicati[...]

Troubleshooting Unusual Network Activity The public key file you are trying to down load has one of the following problems: ■ A key in the file is too long. The ma ximum key length is 1024 characters, including spaces. This coul d also mean that two or more keys are merged together instead of being separated by a <CR><LF >. ■ There [...]

Troubleshooting Unusual Network Activity ■ Disconnect the switch from netw ork access to any T ACACS+ servers and then log in to the sw itch using either T elnet or direct consol e port access. Because the sw itch cannot access a T ACACS+ server , it will default to loc al authentication. Y o u can then use the switch’ s local Operator or Manag[...]

Troubleshooting Unusual Network Activity For more help, refer to the documentat ion provided wi th your T ACACS+ server application. Unknown Users Allowed to Login to the Switch. Y our T ACACS+ appli- cation may be configured to allow access to unknown users by a ssigning them the privileges included in a default user profi le. Refer to the documen[...]

Troubleshooting Unusual Network Activity Link supporting VLAN_1 and VLAN_2 Switch “Y” Switch “X” Port Y - 7 Port X-3 VLAN Port Assignment VLAN Port Assignment Po rt VLA N_ 1 VL AN _2 Po rt VLA N_ 1 VL AN _2 X-3 Untagged T agged Y -7 Untagged T agged Figure C-4. Exampl e of Correct VLAN Port Assignments on a Link 1. If VLAN_1 (VID=1) is conf[...]

Troubleshooting Unusual Network Activity Server 8212zl Switch (Multiple Forwarding Database) Switch with Single Forwarding Database MAC Address “A”; VLAN 1 MAC Address “A”; VLAN 2 Problem: This switch detec ts continual move s of MAC address “A” between ports. VLAN 1 VLAN 2 Figure C-5. Exampl e of Duplicate MAC Address Fan Failure When [...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems Using the Event Log for T roubleshooting Switch Problems The Event Log records oper ating event s in single- or double-line entries an d serves as a tool to isolate and troubleshoot problems. Entries are listed in chronolo gical order , from the oldest to the most recent . Onc[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems Date is the date in the format mm/dd/yy when an entry is recorded in the log. Ti m e i s the time in the format hh:mm:ss whe n an entry is recorded in the log. Event Number is the number assigne d to an e vent. Y ou can turn event numberin g on and off with th e [ no ] log-nu [...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems cos Class of Service (CoS): Prov ides priority handling of packets traversing the switch, based on the IEEE 802.1p priority carrie d by each packet. CoS messages also include Qual ity of Service (QoS) events. The QoS feature classifies and pr ioritizes traffic throughout a net[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems ip IP addressing: Configures the switch with an IP address and subnet mask to communicate on the network and support remote management access; configures multiple IP addresses on a VLAN. Management and Configuration Guide iplock IP Lockdown: Prevents IP source address spoofing[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems netinet Network Internet: Monitors the creation of a route or an Address Resolution Protocol (ARP) entry and sends a log message in case of failure. Advanced T raffic Management Guide pagp Ports Aggregation Protocol (P AgP): Obsolete. Replaced by LACP (802.3ad). Not used for l[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems stp Multiple-instance spanning tree protocol/M STP (802.1s): Ensures that only one active path exists between any two nodes in a group of VLANs in the network. MSTP operation is designed to avoid loops and br oadcast storms of duplicate messages that can bring down the network[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems Menu: Displaying and Navi gating in the Event Log T o display the Event Log fr om the Main Menu, select Event Log . Figure C-7 shows a sample ev ent log display . ProCurve Switch 25-Oct-2007 18:02:52 ==========================-CONSOLE - MANAGER MODE -= ========================[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems CLI: Displaying the Event Log T o display messages record ed in the event log fr om the CLI, enter the show logging command. Keyword searches are supported. Syntax: show log ging [-a, -r] [< search-text >] By default, the show logging command displa ys the log messages r[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems CLI: T u rning Event Numbering On Syntax: [no] lo g-numbers T urns event numbering on and off Using Log Throttling to Reduce Duplicate Event Log and SNMP Messages A recurring event can gener ate a seri es of duplicat e Event Log messages and SNMP traps in a relativel y short t[...]

Troubleshooting Using the Event Log for Tr oubleshooting Switch Problems Log Throttle Periods The length of the log thro ttle period di ffers according to an e vent’ s severity level: Severity Level Log Throttle Period I (Information) 6000 Seconds W (W arning) 600 Seconds D (Debug) 60 Seconds M (Major) 6 Seconds Example of Event Counter Operation[...]

Troubleshooting Debug/Syslog Operation Debug/Syslog Operation While the Event Log records switch-l evel progress, status, and warning messages on the swi tch, the De bug/System L ogging ( Syslog ) feature provides a way to record Event Log and debu g messages on a remote device. For example, you can send messages about mi sconfigurations an d other[...]

Troubleshooting Debug/Syslog Operation Debug/Syslog Conf iguration Commands Event Notification Logging — Automatically sends switch-level event me ssages to the switch’ s Event Log. Debug and Syslog do not affect this operation, but add the capability of directing Event Log messaging to an external device. logging Command < syslog-ip-addr &g[...]

Troubleshooting Debug/Syslog Operation lldp ssh Sends LLDP debug logging to the debug destination(s). Sends SSH debug messages at the specifi ed level to the debug destination. The levels are fatal, error , info, verbose, debug, debug2, and debug 3. Figure C-8. Su mmary of Debug/Syslog Configurat ion Commands Using the Debug/Syslog f eature, you ca[...]

Troubleshooting Debug/Syslog Operation ■ Display the current debug configuration. If Syslog l ogging is currently active, the list f configured Syslog servers is displayed. ■ Display the current Syslog server list when Syslog logg ing is disabled. Configuring Debug/Syslog Operation 1. T o use a Syslog server as the de stination device for debug[...]

Troubleshooting Debug/Syslog Operation Caution T o display a list of valid values for each command, enter logging severity or logging system-module followed by ? or pressing the Ta b key . The severity lev els in order from the highest to lowest severity are: majo r , error , warning, info, debug. Fo r a list of vali d values for the logging system[...]

Troubleshooting Debug/Syslog Operation ProCurve(config)# show debug Debug Logging Destination: Logging - - 10.28.38.164 Facility=kern Severity=warning System module=all-pass Enabled debug types: event Figure C-9. Sample Outp ut of show debug Command Example: In the following example, no Sysl og servers are configured on the switch (default setting)[...]

Troubleshooting Debug/Syslog Operation As shown at the top of Fi gure C-10, if you en ter the show debug command when no Syslog server IP address is confi gured, the configuration settings for Syslog server facility , Event Log severity leve l and system module are not displayed. However , after you configure a Sysl og server address and enable Sys[...]

Troubleshooting Debug/Syslog Operation event Configures the switch to send Event Log messages to config- ured debug destinations. Note: This value does not aff ect the reception of event notification messages in th e Event Log on the switch. Syntax: [no] debug < debu g-type > (Continued) event Event Log messages are automati cally enabled to [...]

Troubleshooting Debug/Syslog Operation Debug Destinations Use the debug destination comm and to enable (and disable) Syslog messaging on a Syslog server or to a CLI session for specified types of debug and Event Log messages. Syntax: [no] debug destina tion < logging | session | buffer > logging Enables Syslog loggin g to configured Sysl og s[...]

Troubleshooting Debug/Syslog Operation Logging Command At the global configuration level, the lo gging command allows you to enable debug logging on specified Syslog server s and select a subset of Event Log messages to send for debuggi ng purposes according to: ■ Severity level ■ System modul e By specifying both a severity level and system mo[...]

Troubleshooting Debug/Syslog Operation When you configure a Syslog server , Event Log messag es are automatically enabled to be sent to the serv er . T o re c onfigure this setting, use the following commands: ■ Use debug command to specify addi tional debug message types (see “Debug Messages” on page C-38). ■ Use the logging command to con[...]

Troubleshooting Debug/Syslog Operation Syntax: [no] logging < syslo g-ip-addr > Enables or disables Syslog messaging to the specified IP address. You can configure up to six addresses. If you configure an address when none are already configured, this command enables destinatio n logging (Syslog) and the Event debug type. Therefore, at a mini[...]

Troubleshooting Debug/Syslog Operation Syntax: [no] logging facility < fac i lity-name > The logging facility specifies th e destination subsystem used in a configured Syslog server . (All configured Syslog servers must use the same subsystem.) ProCurve recommends the default (user) subsystem unless your application specifically requires anot[...]

Troubleshooting Debug/Syslog Operation The CLI comm and is: Syntax: logging <ip-addr> control-descr <te xt_string>] no logging <ip-addr> [control-descr] An optional user -frien dly description that can be associated with a server IP address. If no description is entered, this is blank. If <text_string> contains white space, [...]

Troubleshooting Debug/Syslog Operation ProCurve(config)# logging priority-descr severe-pri Figure C-12. Example of the Lo gging Command with a Priority Description Note A notificati on is sent to the SNMP agent if there are any changes to the sy slog parameters eith er through the CLI or with SNMP . Configuring the Severity Level for Event Log Mess[...]

Troubleshooting Debug/Syslog Operation Configuring the System Module Us ed to Select the Event Log Messages Sent to a Syslog Server Event Log messages contain the name of the system module that reported the event. Using the logging system-module command, you can select a set of Event Log messages according to the originating system module and send [...]

Troubleshooting Debug/Syslog Operation Debug Option Effect of a Reboot or Reset event (debug type) If a Syslog server IP address is configured in the star tup- config file, the sending of Event Log messages is reset to enabled , regardless of the last active setting. If no Syslog server is configur ed, the sending of E v ent Log messages is disable[...]

Troubleshooting Diagnostic Tools Diagnostic T ools Diagnostic Features Feature Default Menu CLI We b Port Auto negotiation n/a — — — Ping test n/a — page C-52 page C-51 Link test n/a — page C-52 page C-51 T raceroute op eration n/a — page C-54 n/a View switch configuration files n/a — page C-58 page C-58 View switch (show tech) n/a ?[...]

Troubleshooting Diagnostic Tools Port Auto-Negotiation When a link LED does not light (indicat ing loss of link between two devices), the most commo n reason is a fail ure of port au to-negotiati on between the connecting ports. If a lin k LED fails to light wh en you conn ect the swit ch to a port on another devi ce, do the following: 1. Ensure th[...]

C-51 Troubleshooting Diagnostic Tools Successes indicates th e number of Pi ng or Link packets th at successfully completed the m ost recent test. Failures indicates the number of Ping or Link packets that were unsuccessful in the last test. Failures in dicate co nnectivity or network perfor mance prob- lems (such as overloaded links or devices). D[...]

Troubleshooting Diagnostic Tools T imeout in Seconds is th e number of seconds to allow per attempt to test a connection before determining that the current atte mpt has failed. T o halt a Link or Ping test before it conclude s, click on the Stop button. T o reset the screen to its default settin gs, click on the Defaults button. CLI: Ping T est Th[...]

Troubleshooting Diagnostic Tools data-size <0-65471> Size of packet sent. Default: 0 (zero) data-fill <0-1024> The data pattern in th e packet. Default: Zero length string Ping with Repetitions and T imeout Basic Ping Operation Ping Failure Ping with Repetitions Figure C-14. Examples of Ping T ests T o halt a ping test before it conclud[...]

Troubleshooting Diagnostic Tools Basic Link T est Link T est with Repetitions Link T est with Repetitions and T imeout Link T est Over a Specific VLAN Link T est Over a Specific VLAN; T est Fail Figure C-15. Example of Link T ests T raceroute Command The traceroute command enables you to trace th e route from the switch to a host address. This comm[...]

Troubleshooting Diagnostic Tools <ip-address | hostname> The IP address or hostname of the device to which to send the traceroute. [minttl < 1-255 >] For the current instance of traceroute , changes the minimum number of hops allowed for each probe packet sent along the route. If minttl is greater than the actual number of hops, then th[...]

Troubleshooting Diagnostic Tools Intermediate router hops with the time taken for the switch to receive acknowledgement of each probe reach ing each router . Destination IP Address Figure C-16. Example of a Completed T rac eroute Enquiry Continuing fr om the previous ex ample (Figure C- 16, above), ex ecuting traceroute with an insu fficient maxttl[...]

Troubleshooting Diagnostic Tools If A Network Condition Preven ts T raceroute from Reaching the Destination. Common reasons for T raceroute fa iling to reach a destination include: ■ T im eouts (indicated by one asterisk per probe, per hop; refer to Figure C-17, above.) ■ Unreachable hosts ■ Unreachable networks ■ Interference from firewall[...]

Troubleshooting Viewing Switch Configur ation a nd Operation V iewing Switch Configuration and Operation In some troublesho oting s cenarios, you may need to view the switch config- uration to diagnose a problem. The co mplete switch configur ation is con- tained in a file that you can browse fr om either the web browse r interface or the CLI using[...]

Troubleshooting Viewing Switch Configuration and Operation CLI: Vi ewing a Summary of Switch Operational Data Syntax: show tech By default, the show tech command displays a single output of switch operat- ing and running -configuration data from several internal switch sources, including: ■ Image stamp (software version data) ■ Running configur[...]

Troubleshooting Viewing Switch Configur ation a nd Operation Figure C-19 shows sample ou tput from the show tech command. ProCurve# show tech show system Status and Counters - General System Information System Name System Contact System Location : ProCurve : : MAC Age Time (sec) : 300 Time Zone : 0 Daylight Time Rule : None Software revision ROM Ve[...]

Troubleshooting Viewing Switch Configuration and Operation The following exampl e uses the Microsoft W indows terminal emulator . If you are using a different termin al emulator application, refer to the document ation provided wi th the application. T o save show tech command output from your t erm inal emulator to a text file, follow these steps:[...]

Troubleshooting Viewing Switch Configur ation a nd Operation 5. Click on T ransfer | Capture T ext | Stop in HyperT erminal to stop co pying data and save the text file. If you do not stop HyperT erminal from copying command outpu t into the text file, additional unwanted data can be copi ed from the HyperT erminal screen. 6. T o access the file, o[...]

Troubleshooting Viewing Switch Configuration and Operation Syntax: show boot-history Displays the same information as the show interfaces command and dynamically updates the ou tput every three seconds. Press Ctrl + C to stop the dynamic updates of system information. Use the Arrow keys to view in formation that is off the screen. Pattern Matching [...]

Troubleshooting Viewing Switch Configur ation a nd Operation ProCurve(config)# show run | exclude ipv6 Running configuration: ; J9146A Configuration Editor; Creat ed on release #W.14.06 hostname "ProCurve Switch" module 1 type J8702A module 2 type J8705A snmp-server community "notpublic" Un restricted vlan 1 name "DEFAULT_V[...]

Troubleshooting Viewing Switch Configuration and Operation ProCurve(config)# show run | begin ipv6 ipv6 enable no untagged B21-B24 Displays the running config begin ning at the first line exit that contains “ipv6”. vlan 20 name "VLAN20" untagged B21-B24 ipv6 enable no ip address exit policy qos "michael" exit ipv6 access-lis[...]

Troubleshooting Viewing Switch Configur ation a nd Operation CLI: Useful Commands for T roubleshooting Sessions Use the following commands in a troubleshooti ng session to more accurately display the information yo u need to diagnose a problem. For more informati on on other these CLI pra ctices, refer to chapter Chapter 4, “Using the Command Lin[...]

Troubleshooting Restoring the Factory-Default Configuration Restoring the Factory-Default Configuration As part of your troubleshooting pr ocess, it may become necessary to return the switch configuration to the factor y default settings. This process momen- tarily interrup ts the switch operation, clears any passw ords, clears the console Event Lo[...]

Troubleshooting Restoring a Flash Image 2. Continue to press the Clear butt on while releasing the Reset button . 3. When the Self T est LED begins to flash, release the Clear but ton. The switch will then complete its self te st and begi n operat ing with t he configuration restored to th e factory default settings. Restoring a Flash Image The swi[...]

Troubleshooting Restoring a Flash Image 3. Use the Reset button to reset the switc h. The following prompt should then appear in the terminal emulator: Enter h or ? for help. => 4. Sinc e the OS file is large, you can increase the speed of the download by changing the switch console and termin al emulator baud rates to a high speed. For example:[...]

Troubleshooting Restoring a Flash Image Figure C-26. Example of Xmodem Download in Progress 8. When the download completes, the switch reboots from primary f lash using the OS image you down loaded in the preceding steps, plus th e most recent startup-config file. C-70[...]

Troubleshooting DNS Resolver DNS Resolver The Domain Name System (D NS) resolver is designed for use in local network domains where it enables us e of a host name or fully qualified domain name with DNS-compa tible switch CLI commands. DNS operation supports both IPv4 and IPv6 DNS resoluti on and multiple, prioritized DNS servers. (F or information[...]

Troubleshooting DNS Resolver ■ When the switch is config ured with both of the following: • the IP address of a DNS server availabl e to the switch • the domain suffix of a domain availabl e to the configured DNS server then: • A DNS-compatible command tha t includes t he host name of a device in t he same domain as t he configured do main [...]

Troubleshooting DNS Resolver Note that if the target host is in a domain other than the domain configured on the switch, then: ■ The host’ s dom ain must be reachabl e from the switch . This requires that the DNS server for the switch must be able to communicate with the DNS serv er(s) in the path to the dom ain in which the targ et host operat[...]

Troubleshooting DNS Resolver operating in the select ed domain. Refer to “T erminology” on page C- 71.) Note that if a domain suffix is not configured, f ully qualified domain names can be used to resolve DNS-compatible commands. d. the host names assigned to target IP addresses in th e DNS server for the specified dom ain 2. Use the data from [...]

Troubleshooting DNS Resolver Syntax: [no] ip dns dom ain-name < domain-name-suffix > This optional DNS command conf igures the domain suffix that is automatically appended to the host name entered with a DNS-compatible command. When th e domain suffix and the IP address for a DNS server that can access that domain are both configured on the s[...]

Troubleshooting DNS Resolver Configuring switch “A” w ith the domain name and the IP address of a DNS server for the domain enables the switch to use host names assigned to IP addresses in the dom ain to perform ping and traceroute act ions on the devices in the domain. T o summarize: Entity: Identity: DNS Server IP Address 10.28.229.10 Domain [...]

Subnet Mask Troubleshooting DNS Resolver As mentioned under “Basic Operation” on page C-71, if the DNS entry config- ured in the switch does not i nclude the domain suffix f or the desired target , then you must use the target host’ s fully qualified dom ain name with DNS- compatible commands. For example, using the docume nt server in Fi gur[...]

Troubleshooting DNS Resolver Operating Notes ■ Configuring anot her IP address for a priority that has already been assigned to an IP address is not a llowed. T o replace one IP address at a given priority level w ith another ad dress having the same priority , you must first use the no form of the command to remove the unwanted address. Also, on[...]

Troubleshooting DNS Resolver Event Log Messages Message Meaning DNS server address not config ured The switch does no t have an IP address configured for the DNS server . DNS server not responding T he DNS server failed to respond or is unreachable. An in correct server IP address can produce t his result. Unknown host < ho st-name > The host[...]

Troubleshooting DNS Resolver C-80[...]

D MAC Address Management Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D-2 Determining MAC A ddresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D-3 Menu: Viewing th e Switch’s MAC Addresses . . . . . . . . . . . . . . . . . . . . D-4 CLI: Viewing[...]

MAC Address Management Overview Overview The switch assigns MAC ad dresses in these areas: ■ For management functions, one Base MAC address is assigned to the de f au lt VL A N ( VI D = 1 ). (A ll V LA Ns on t he sw i tc he s covered in this guide use the same MAC address.) ■ For internal switch operations: One M AC address per port (Refer to ?[...]

MAC Address Management Determining MAC Addresses Determining MAC Addresses MAC Address Viewing Methods Feature Default Menu CLI We b view switch’ s base ( default vlan) MAC address and the addressing for any added VLANs n/a D-4 D-5 — view port MAC addresses (hexadecimal format) n/a — D-5 — ■ Use the menu interface to view the switch’ s [...]

MAC Address Management Determining MAC Addresses Menu: V iewing the Switch’ s MAC Addresses The Management Address Information screen lists the MAC addresses for: ■ Base switch (d efault VLAN; V ID = 1) ■ Any additional V LANs conf igured on the switch. Also, the Base MAC address appears on a label on the back of the switch. Note The Base MAC[...]

MAC Address Management Determining MAC Addresses CLI: Vi ewing the Port and VLAN MAC Addresses The MAC address assigned to each switch port is used inte rnally by such features as Flow Control and the spanning-tree protoc ol. Using the walkmib command to determi ne the MAC address assignment s for individual ports can sometimes be useful when di ag[...]

MAC Address Management Viewing the MAC Addresses of Connected Devices V iewing the MAC Addresses of Connected Devices Syntax: show mac-address [ | mac-addr | Lists the MAC addresses of the de vices the switch has detected, along with the number of the specific port on wh ich each MAC address was detected. [ port-list ] Lists the MAC addresses of th[...]

E Daylight Savings T i me on ProCurve Switches This information applies to the fo llowing ProCurve switch es: • 212M • Seri es 2500 • Series 4200vl • 224M • Seri es 2520 • Series 5300xl • 1600M • Series 2600 • S eries 5400zl • 2400M • Series 2800 • S witch 6108 • 2424M • Series 2900 • S witch 6200yl • 4000M • Serie[...]

Daylight Savings Time on ProCurve Switches Canada and Continental US: • Begin DST at 2am on the second Sunday in March. • End DST at 2am on the first Sunday in November . Middle Europe and Portugal: • Begin DST at 2am the first Su nday on or after March 25th. • End DST at 2am the first Sund ay on or after September 24th. Southern Hemisphere[...]

Daylight Savings Time on ProCurve Switches Before configuring a “User defined” Daylight Time Rule, it is important to understand how t he switch treats the entries. Th e switch knows which dates are Sundays, and uses an algorithm to determine on which date to change the system clock, given the configured “Beginning day” and “Ending day”[...]

Daylight Savings Time on ProCurve Switches E-4[...]

F Power -Saving Features Contents Configuring Power-Saving for LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . F-2 Show Savepower Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . F-2 F-1[...]

Power-Saving Features Configuring Power-Saving for LEDs Configuring Power -Saving for LEDs The savepower led comma nd provides the ability to tu rn off the switch link, mode, and activity LEDs and turn them on aga in. When power - saving is turned off, it will turn on again automatically after 10 minutes. Syntax: [no] savepower led T urns power -sa[...]

Index Symbols => prompt …C - 6 8 Numerics 802.1X effect, LLDP … 13-75 LLDP blocked … 13-42 802.1X access control authentication fa ilure, SNMP notification … 13-26 SNMP notification of authentication failure … 13-26 A access manager … 13-13 operator … 13-13 out-of-band … 2-3 ACL debug messages … C-33 See also debug command. add[...]

broadcast limit … 10-19 broadcast storm … 12-3, C-15 broadcast traffic IPX … 10-19 RIP … 10-19 browser interface See web browser interface. C CDP … 13-76, 13-77, 13-78, 13 -79, 13-81 Clear + Reset button combinat ion …6 - 3 4 Clear button …5 - 1 0 restoring factory default configuration … C-68 clear logging …C - 2 9 CLI accessing [...]

power cycle … 6-29 primary boot path … 6-27 reboot policy options … 6-24 reboot policy, override … 6-28 reboot process … 6-25 reload … 6-30 rename config file … 6-31 reset … 6-29 running-config file … 6 -25 running-config fi le operation … 6-24 secondary boot path … 6-27 show config file content … 6-28 show multiple files ?[...]

Device Passwords window …5 - 8 DHCP address problems … C-8 Best Offer … 6-39 Bootp operation … 8-12 effect of no reply … C-8 manual gateway precedence … 8-12 Option 66 … 6-37, 6-38 DHCP snooping SNMP notification … 13-17, 13-26 DHCP/Bootp differences …8 - 1 3 DHCP/Bootp process …8 - 1 2 DHCP/Bootp, LLDP …1 3 - 5 0 DHCPv6 debug[...]

F facility logging … C-33 factory defaul t configuration restoring … 6-9, C-67 failure, switch software download …A - 7 fastboot command …6 - 2 1 fault detection policy …5 - 8 , 5 - 2 3 fault-tolerance … 12-4 firmware version …B - 6 flash memory … 3-10, 6-3 flow control constraints … 10-17 global … 10-17 per-port … 10-17 termi[...]

L network number … B-9 K kill command …7 - 9 LACP 802.1X not allowed … 12-22 active … 12-15 blocked ports … 12-24 CLI access … 12-11 default port operation … 12-21 described … 12-6, 12-18 Dyn1 … 12-7 dynamic … 12-19 enabling dynamic trunk … 12-15 full-duplex required … 12-4, 12-18 IGMP … 12-23 monitoring static trunk … B[...]

optional data, configuring … 13-51 outbound packet options … 13-39 packet boundaries … 13-37 packet dropped … 13-37 packet time-to-live … 13-40 packet-forwarding … 1 3-37, 13-75 packets not forwarded … 13-36 per-port counters … 13-73 port descriptio n … 13-51 port ID … 13-50 port speed … 13-52 port trunks … 13-41 port type ?[...]

MDI/MDI-X configuration, display … 10-21 operation … 10-19 port mode, display … 10-21 media type, port trunk … 12-3 memory flash … 3-10, 6-3 startup configuration … 3-10 menu inter face configuration changes, saving … 3-10 moving to or from the CLI … 4-7 See also console. MIB HP proprietary … 13-4 listing … 13-4 standard … 13-[...]

configuring port priority … 11-8 disabling a port … 11-13 enable or disable operation … 11-6 event log messages … 11-21 fault … 11-11 LLDP detection, enabli ng or disabling … 11-14 manually configuring power levels … 11-10 operation on ProCurve switch es … 11-2 oversubscribed … 11-3 planning and implementation … 11-20 poe-lldp-d[...]

LACP not allowed … 12-22 troubleshooting … C-10 port-utilization and status displays … 10-14 power levels, configuring … 11-10 power over ethernet See PoE. Power-Sourcing Equipment … 11-4, 13-36 pre-standard detect … 11-15 priority class defined … 11-4 privilege levels …4 - 3 ProCurve Auto-MDIX feature … 10-19 support URL … 5-13[...]

secure FTP See SCP/SFTP. secure management VLAN, DNS …C - 7 8 security Clear button … 5-11 enabling network security notifications … 13-26 privilege levels in CLI … 4-3 username and password … 5-8 web browser access, RADIUS … 5-8 Self Test LED behavior during factory default reset … C-68 serial number …B - 6 setmib, delay interval ?[...]

disabling … 9-12 enabling and disabling … 9-10 event log messages … 9-26 manual config pr iority … 8-12 menu interface operation … 9-26 operating modes … 9-2 poll interval See TimeP. selecting … 9-3 show management … 9-9 unicast mode … 9-3, 9-12 unicast time polling … 9-25 unicast, deleting addresses … 9-26 unicast, replacing [...]

T TACACS SSH exclusion … A-14 task monitor …B - 7 taskusage -d …B - 7 taskUsageShow …B - 7 Telnet connecting to switch … 3-4 enable/disable … 7-4 outbound … 7-6 terminate session, kill command … 7-9 troubleshooting access … C-7 telnet domain name address … 7-6 hostname … 7-6 ipv6 address … 7-6 show command … 7-6 switch-num[...]

approaches … C-5 browsing the configuration file … C-58 configuring debug destinations … C-32 console access problems … C-6 diagnosing unusual networ k activity … C-8 diagnostics tools … C-49 displaying switch operation … C-59 DNS See DNS. fast-uplink … C-15 ping and link tests … C-50 restoring factory default configuration … C-[...]

W walkmi b … 13-40, D-5 warranty …- i i web agent advantages … 2-5 disabling access … 5-2 enable/disable … 7-4 enabled parameter … 5-2 Web authentication SNMP notification … 13-26 web brow ser interface access configuration … 7-3 access parameters … 5-8 access security … 7-3 alert log … 5-20 alert log details … 5-21 bandwidt[...]

16 – Index[...]

[...]

Pr oC ur v e 5400zl S w itc hes Inst allati on and Gettin g Startd Guide T echnology for bet ter business outcom es T o l earn m or e , visit ww w .hp .com/go/p roc urve/ © Cop yri ght 2009 Hew lett-P ac kar d Dev elopment C ompan y , L.P . The info rmation contained her ein is sub ject to change without noti ce. The onl y warr anties f or HP prod[...]