HP (Hewlett-Packard) 5200zl manuel d'utilisation

Technical overview HP ProCurve Switch 5400zl, 3500yl, and 6200yl Series Table of contents Executive summ ary .............................................................................................. 4 Introduc tion .......................................................................................................... 4 Product pos itioning [...]

2 Specifications ................................................................................................. 18 Management m odule .................................................................................. 18 Line interface m odules ............................................................................... 19 HP ProCurve Switch 3[...]

3 Appendix C: Powe r over Ethernet ..................................................................... 47 PoE device types ............................................................................................ 47 Power delivery options ................................................................................... 48 PoE negotiation ...[...]

4 Executive summary HP ProCurve Networking has an extensive line of network ing products built around the conc ept of the HP ProCurve Adaptive EDGE Arch itecture™ (AEA) that provides the security, mobility, and convergence capab ilities that businesses demand while giving IT administrators the ability to ad apt to the changing needs of their orga[...]

5 Product positioning Overview A widely used method f or segmenting t he areas in whic h switches are in stalled cal ls for three di fferent classifications: access, distribution, and core. Acce ss switches provide aggregation of end nodes for connection to a distribution or core s witch and a re usually fou nd in wirin g closets. Dist ribution swi[...]

6 • Diagnostic —remote intelligent mirroring, loopba ck interface, UDLD , sFlow support • Investment protec tion —upgradable management engine an d CPU (for 5400zl and 8200zl Ser ies), upgradable to Premium License feature group, a dd-in modules and po wer supplies (for 5400zl a nd 8200zl Series), Versatile Intel ligent Ports, programmable [...]

7 Figure 1. ProVi sion ASIC Archi tecture for HP ProCurve Switch 5406zl The diagram above illustrates an example of the logical in terconnection of the ProVision ASICs on the 6-slot 5406zl series s witch. Al l of the key el ements are c onnected to the active back plane. The active backplane cont ains the switch fabric a nd distributes power to al [...]

8 Policy Enforcement Engine The ProVision ASICs on e ach line interface modul e contain the Policy Enforcement Engine. This engine provi des fast packet classification t o be applied to ACLs, QoS, R ate Limi ting, and som e other features through an onboard TCAM. Some of the variables that can b e used include source and destination IP addresses (c[...]

9 ProVision ASIC CPU Each ProVisi on ASIC cont ain its own C PU for lear ning of Lay er 2 nodes, pac ket sampling f or the XRMON funct ion, han dling local M IB count ers, and runni ng other module-rel ated opera tions. Overall , the local CPU of floads the m aster CPU by providing a distributed ap proach to ge neral house keeping tasks associated [...]

10 HP ProCurve Switch 5400zl Series The HP ProC urve Switc h 5400zl series is a high-en d edge switch. This switch series has been designed to be a feature- oriented hi gh-perform ance wiring closet switch. It can also be used as a low-to-medium distribution switch when used with Premium License , described later in this docu ment. The 5400zl ser i[...]

11 Figure 2. H P ProCurve Switch 54 00zl Chass is and Bundles The HP ProCurve Switch 5406zl-48G Intellig ent Edge (J8699A) and 5412zl-96G Intelligen t Edge (J8700A) are preconfigured bundles that offer a pretested envi ronment and a lower cost starter switch to which addi tional mod ules can be a dded. The m ajor components of t hese preconfigu red[...]

12 However, when the m anagement module is removed, all ports lose com munica tion and the system will be powere d down. Figure 3. H P ProCurve Switch 5406zl chass is layout Figure 4. H P ProCurve Switch 5412zl chass is layout[...]

13 The internal power supplies are inserted in the back sl ots. These slots are labeled PS 1 and PS2 on the 5406zl and PS1 through PS4 on th e 5412zl. A power supply is hot-swappab le provided at least one other power supply is oper ational. If the 5412zl has only two power supplies and one of them fails, then only the upper six sl ots (slots A thr[...]

14 Both internal supplies have over-current, over-tem perature, and over-volt age protection , as well as integrated fans. Hot swapping is allo wed, taking into account that disconnecting the power supplies may interrupt PoE operation. An external power shelf, the HP ProCurve Switch zl Power S upply Shel f, is availabl e to house up to two switch z[...]

15 In the event of an individ ual fan fai lure, an SNMP trap and event log entry are gene rated. Figure 6. Fan tray for switch 5406 zl (J8697-60005) zl modules Management module All configurat ions of the HP ProCurve Switch 54 00zl series inclu de a single m anagement module that oversees the operation of the line interface modul es and switch fabr[...]

16 Each of the copper-based line interface modules provides integrated PoE capability. 24-port 10/100/1000 20-port 10/100/1000 + 4-port Mi ni-GBIC 24-port Mini-GBIC 4-port 10-GbE CX4 4-port 10-GbE X2 Wireless Edge Se rvices M odule HP ProCurve ONE Services zl Module Figure 8. HP ProCurve Switch 5 400zl series line interface modules Power supply con[...]

17 Switch mod el Minimum internal Maximum internal Internal + external 5406zl 1 2 4 5412zl 2 4 6 Table 1. Mini mum and m aximum power supply s upport When deciding on which and how many power supplies to configur e for a 5400zl series switch, the following c riteria can be use d to guide the decision: • How much power will be required for each Po[...]

18 Note that two 875W internal power supplies cannot s upply sufficient Po E power to a 5406zl switch fully populated with 24-por t line interface module s (144 por ts). Two 1500W p ower supplies can b e used to supply fu ll PoE power (15.4 watts) to 116 por ts. Power supply configuration Total PoE power (watts) Number of PoE ports at 15.4W Number [...]

19 Figure 9. H P ProCurve Switch 5406zl m anagement m odule block diagram Processor The CPU processor is a Freescale Po werPC 8540 operating at 667 MH z. Memory SDRAM Synchronous Dynamic RAM is used for t he storage of uncompressed e xecutable code and data structures. T he SDRAM c onsists of a 256 MB DDR-1 DIMM in the base module, expa ndable up t[...]

20 HP ProCurve Swi tch 5400zl 24 p 10/100/10 00 PoE Modul e (J8702A) Description This line interface module ha s 24 10/100/1000Bas e-T ports that provi de Gigabit-over-copper connectivity for wiring closets, enabling high-density Gigabit connectivity to th e desktop over Category 5 copper cabling. Each port is capable of providing IEEE 802.3af com [...]

21 • J4860C HP ProCu rve Gigabit -LH-LC Mini-GBIC • J8177C HP ProCu rve Gigabit 1000Base-T M ini-GBIC • J9142B HP ProCurve 1000-BX-D SFP-LC Mini-GBIC • J9143B HP ProCurve 1000-BX-U SFP-LC Mini-GBIC • J9099B HP ProCur ve 100-BX-D SFP-LC Tr ansceiver • J9100B HP ProCur ve 100-BX-U SFP-LC Tr ansceiver • J9054B HP ProCurve 100-FX SFP-LC T[...]

22 Transceivers supported (ordered separately) • J8436A HP ProCurv e 10-GbE X2-SC SR Optic • J8437A HP ProCurv e 10-GbE X2-SC LR Optic • J8438A HP ProCurv e 10-GbE X2-SC ER Optic • J8440A HP ProCurv e 10-GbE X2-CX4 Transceiver • J9144A HP ProCurv e 10-GbE X2-SC LRM Optic HP ProCurve Switch 5400zl 4-port 10-GbE CX4 Module (J8708A) Descript[...]

23 services, enabling a resilient, highly secure, mob ile multi-serv ice network. Each “WES” Module can control up to 156 HP ProCurve Ra dio Ports ( light access points) to provide Layer 2/ 3 seamless roaming and a secure mobility environment. Wireless sFlo w support provides leve raged network managem ent for both wired a nd wireless connectio[...]

24 HP ProCurve Switch 3500yl Series The HP ProCurve Switch 3500yl series is another of the m ost advanced intelligen t edge switches in the HP ProCurve Networking product line. The 35 00yl series includes 24-port an d 48-port stackables. The foundation of these switc hes is a purp ose-buil t, pr ogrammable ProVision ASIC that allows the most demand[...]

25 The table bel ow shows exam ples of the maximum number of PoE ports th at can be support ed by the two 3500yl switch models. One colu mn shows the maximum number of PoE ports at full power (Class 0 – 15.4 wat ts) and the ot her column shows the m aximum number of P oE ports at ty pical phone power (8 watts). For enviro nments needing m ore PoE[...]

26 Specifications Processor The CPU processor is a Freescale Po werPC 8540 operating at 667 MH z. Memory SDRAM Synchronous Dynamic RAM is used for t he storage of uncompressed e xecutable code and data structures. T he SDRAM c onsists of a 256 MB DDR-1 DIMM in the base module, expa ndable up to 1 GB. The DDR-1 interface is 64 bits run ning at 166 M[...]

27 HP ProCurve Switch yl 10-GbE 2p C X4 + 2p X2 Mod ul e (J86 94 A) Description This 10-GbE line interface module has two fixed C X4 ports and two X 2 slots and is supporte d in both models of the HP ProCurve Switch 3500yl series an d also the HP ProCurve Switch 6200yl- 24G- mGBIC. Ports 2 open X2 transcei ver slots 2 10-Gigabit Ethernet ports (I E[...]

28 HP ProCurve Switch 6200yl -24G-mGBIC (J8992A) Figure 11. HP ProC urve Switch 6200yl Processor The CPU processor is a Freescale Po werPC 8540 operating at 667 MH z. Memory SDRAM Synchronous Dynamic RAM is used for t he storage of uncompressed e xecutable code and data structures. T he SDRAM c onsists of a 256 MB DDR-1 DIMM in the base module, exp[...]

29 Overview of features and benefits The HP ProCurve Switch 5400zl, 3500yl, and 6 200yl series use the sam e software image base. For the HP ProCurve Switch 6200yl, th e Premium License feature group is standard. Fo r the HP ProCurve Switch 5400zl and 3500yl series, you have the ch oice of using the Intelligent Edge feature group or the Premium Lic[...]

30 • Identity-driven ACL: enables im plementation of a highly granular and fl exible access security policy specific to each authenticated network use r • Port security: prevents unauthorize d access using MAC address lockdown • MAC address lockout: prevents co nfigured particular MAC addr esses from connecting to the network • Source-port [...]

31 Layer 2 switching • HP ProCurve switch meshing: dynamically load-balances across multiple active redund ant links to increase available aggregate bandwidth • VLAN support and tagging: support for co mplete 802.1Q stand ard and 2,048 VLANs simultaneousl y • 802.1v pr otocol VL ANs: isola te select non-IPv4 protoc ols automatically int o the[...]

32 • Server-to-Switch Distributed Trunking: enables load-balancing and increases resiliency between a server and multiple switches. This feature allows a server to connect to multiple switches with one logical trunk t hat consists of m ultiple physical connections. • Other Layer 2 and Layer 3 redundant protoc ols include MSTP, HP ProCurve s wit[...]

33 Standards and protocols Device management RFC 1591 DNS (client) HTML and tel net managem e nt General protocols IEEE 802.1ad Q-in-Q (Premium License) IEEE 802.1D MAC Bridges IEEE 802.1p Priority IEEE 802.1Q VLANs IEEE 802.1s Multiple Spanning Trees IEEE 802.1v VLAN Classifica tion by Protoc ol and Port IEEE 802.1w Rapid Reconfiguration of Spanni[...]

34 IPv6 RFC 1981 IPv6 Path MTU Discovery RFC 2460 IPv6 Specification RFC 2461 IPv6 N eighbor Discover y RFC 2462 IPv6 Stateless Address Auto- configuration RFC 2463 ICMPv6 RFC 2710 Multicast Listener Discovery (MLD) for IPv6 RFC 2925 Remote Operations MIB (Ping only) RFC 3019 MLDv1 MIB RFC 3315 DHCPv6 (client only) RFC 3513 IPv6 Addressing Arch ite[...]

35 QoS/Cos RFC 2474 DiffServ Precedence, including 8 queues/port RFC 2597 Di ffServ Assu red Forwa rding (A F) RFC 2598 Di ffServ E xpedited Forwardin g (EF) Security IEEE 802.1X Port Based Net work Access Control RFC 1492 TACACS+ RFC 2138 RADIUS Authentication RFC 2866 RADIUS Accounting Secure Sockets Layer (SSL) SSHv1/SSHv2 Secure Shell Performan[...]

36 Per-port buffer sizes The HP ProCurve Switch 5400zl, 3500yl, and 6 200yl series have eight hardware queues to which prioritized traffic can be assigned . Software can designate a certain am ount of output m e mory buf fer for each queue to minimize the im pact from events that exceed line rate su ch as bursty network traffic. Users can cho ose t[...]

37 Optimizing the 10-GbE port configur ation The 10-GbE modules (J8707A , J8708A, and J8694A) used in the HP ProCurve Switch 3500 yl, 5400zl, and 6200yl se ries are designe d to delive r full 10 G bps wire -speed to each port, where either one or two ports are in a l inked state wi th anothe r device. Whe n three or f our 10-GbE ports are in a l in[...]

38 Figure 13. Approach for guara nteei ng 10 Gbps on a s pecific port Connection choices are also im portant where equally balanced bandwidth is nee ded, such as in a Virtual Router Redundancy Protocol (VRRP) applicatio n. This scenario is illustrated in the next figure. Figure 14. G uaranteeing e qually balance d bandwidth in a V RRP environm ent[...]

39 Throughput and latency performance data The following three tab les describe the performance capabilities of the 10 Gbps, 1 Gbps, and 100 Mbps line interface module ports of the HP ProCur ve Switch 5400zl, 3500 yl, and 6200yl series. Over a range of packet sizes from 64 by tes to 1518 bytes, the performance levels achieved are described in terms[...]

40 10 Gbps Thr oughput % Packets per second Full mesh % drops Latency (FIFO) Latency (LIFO) Packet size L2/L3 L2/L3 L2 (µsecs) L3 (µsecs) L2 (µsecs) L3 (µsecs) 64 1 100 1488 0952 0 1.95 2.05 1. 9 2.0 128 100 8445 946 0 2.01 2.11 1.9 2.0 256 100 4528 986 0 2.31 2.31 2.1 2.1 512 100 2349 624 0 2.62 2.72 2.2 2.3 1024 100 1197 318 0 3.73 3.73 2.9 2[...]

41 10 Gigabit perform a nce traffic p atterns In the prior table, the performance levels for 10 Gigabit po rts assume t he underlying traffic patter ns reflect either one of the following minimum conditions to achieve wire-speed through put. • A single source traffic stream with a n average packet size of 88 bytes or larger • Two or more s ourc[...]

42 HP ProCurve warranty and support Industry-leading warranty HP ProCurve Networking product s come with warra nties you would e xpect from HP. • HP ProCurve Lifet ime Warranty ♦ features next-business-day advance replacement • HP ProCurve warranty in cludes coverage for the fans and po wer supplies • Software release notification upon regi[...]

43 Appendix A: Premium License This section of the Technical Overview provides ad ditional background information about th e HP ProCurve Swit ch 5400zl, 3500yl, and 6200yl series pr oducts. Intelligent Edge an d Premium License Introduced with the HP ProCurve Switch 5400 zl and 3500yl series is the option of imple menting Intelligent Edge or Premiu[...]

44 Two metho d s for m anaging Premium Edge licensing on ProCurv e Sw itch 54 00zl and 3500yl series • Ma nu ally usin g Pro C urv e web p orta l and CLI c omm an d s – Good f or small number o f licenses, r equires manager le vel access • Pr oC ur ve M anager (P CM) – Con venient for may lice nses, handles m ost aspects – Req uires PCM c[...]

45 On a subseque nt window, y ou select premium-ed ge for the Feature Group and type the reg istration ID you received with the purchase of the Prem ium Li cense. The registration ID is found on a plastic laminated card that is shipped with the HP ProCurve switch. After you agree to the terms of the License Agreement, the wizard will display the st[...]

46 Policy Enforcement Engine benefits The Policy E nforcement Engi ne has several benefits: • Granular policy enforcement The initial software release on these products takes advantage of a subset of the full Po licy Enforcement Engine ca pabilities, which will provide a com mon front end for the user interface to ACLs, QoS, Rate-Limiting, and Gu[...]

47 Appendix C: Power over Ethernet The IEEE 802. 3af standard fo r Power over Ethernet (PoE ) enables Ethernet swit ches to provi de power, as well as networ k signals, f or compl iant devi ces over existing CAT-5 cabl e. Implem enting devices that support integrated PoE, such as the HP ProC urve Swit ch 5400zl and 3500yl series, has several benefi[...]

48 Power delivery options The 802.3af standard provides two option s for providing power over CAT 5 Ethernet cab le. They are: • Unused pairs —This option takes ad vantage of the fact that 10Base-T and 100Base -TX signals use only two o f the four twi sted pa irs in the cabl e. In this option, the pins on pa irs 1/2 and 3/ 6 are used for data, [...]

49 Support for pre-802.3af standard powere d devices The HP ProCurve Switch 5400zl and 3500yl ser ies also support a number of pre-802.3af standard powered devices. T hese include: • Cisco 7902G, 7905G, 7912 G, 7940G, 7960G IP Phon es • Cisco Aironet 350, 1100, 1200, 1230A G Access Points The Cisco pre -802.3af standard IP phones re quire the u[...]

50 In order to receive a multicast stream, routers explicitly join the stream by sending join messages to the RP. This joi n message i s analogou s to a unicast router foll owing a defaul t route to a destinati on. Effectively, the function of the RP is a pl ace for multicast sources and receivers t o meet. PIM-SM is extrem ely memory and CPU effic[...]

51 LLDP-MED endpoint devices are l o cated at the ne tw ork edge and c ommunicate using the LL DP-MED framework. Any LLDP-MED endpoint device belongs to one of the fo llowing three classes: • Class 1 (Gene ric Endpoi nt Devices): T hese devi ces offer the basic LLDP discovery services, network p olicy adverti sement (VL AN ID, La yer 2/802. 1p pr[...]

52 Virus Throttle works by in tercepting IP connection requ ests, that is, connections in which the so urce subnet and destination address are different. The Virus Throttle tracks the number of recently made connections. If a new, intercep ted request is to a destination to which a c onnection was recen tly made, the request is processed as norm al[...]

53 Response options The response behavior of connection-rate filtering can b e adjusted by using filtering options. When a worm-like behavior is detected, the connection-rate filter can respond to the threats on the port in the following ways: • Notify on ly of potential attack: While the appare nt attack conti nues, the switch generat es an Even[...]

54 The VRRP Master router peri odically sends advertisem ents to a reserved mul ticast group address. The VRRP Backup routers listen for adver tisements and one of the backups will assume the Master role, if necessary. A V RRP router can support m any virtua l router instances, each with a unique VRID/IP address combination. The election process pr[...]

55 Appendix H: OSPF Equal Cost Multipath In Open Shortest Path First (OSPF), if di fferent subnet destinations in a network are reachable through multiple equal-cost paths, the router chooses a single path for each destination subnet. (A trunk is considered a path ev en though a trunk consists of multiple link s). With OSPF Equal Cost Multipath (OS[...]

56 Appendix I: Advanced Classifier-Based QoS Released with software ve rsion K.14 , the Advance d Classifier-Base d QoS provides: • A finer gra nularity t han globall y configure d features for cl assifying network tra ffic (IPv4 or IPv6) into classes that can be us ed in cr oss-feature so ftware configu rations • Traffic selection based on mul[...]

57 Appendix J: Server-to-Switch Distributed Trunking Distributed Trunking is a link aggre gation techni que where t wo or more l inks across t wo switches a re aggregated together to form a trunk. This feat ure overc o mes the limitati on in IEEE 802.3ad that specifies all links of a trunk have to be from a si ngle switch. Distributed Trunking impr[...]

58 • ISC port ca n be an indi vidual port or a m anual LACP trunk, but a dynamic LACP trunk c an’t be configu red as an IS C port. • Maximum of 8 links in a DT trun k across two s witches is supporte d with a m aximum of 4 links per DT switch • The current limitation of 60 manual tru nks in a switch will now includ e DT manual trunks too. ?[...]

59 LED State Indication Blinking (orange) If DIMM, Fault, and Self Test LEDs are blinking , DIMM failed self-test. If DIMM and Fault LEDs are blinking, an operational f ault has occurred. If blinking at a f ast rate, an operational alert occurred and is unresolved. Flash On (green) Flash Card st atus is known and fault free. Off Flash Card status i[...]

60 Modules A, B, C, D, E, F, G, H, I, J, K, L On (green) A module is installed in th e switch module slot co rresponding to the letter and the module is undergoing or has passed self-test. This also occurs when you install a modul e when th e switch is already powered on (“hot swap”). Off A module is not installed in the switch module slot corr[...]

61 The LED status i ndicators for the HP ProCur ve Switch 5 400zl series switc h modules are described in the following table. LED State Indication Link On (green) Indicates the port is enabled and receiving a link beat signal (for the twisted-pair ports), or a strong enough light level (for the fiber-optic ports) from the connected device Off Indi[...]

62 LED State Indication Temp On (green) Internal tempe rature is normal. Blinking (orange) An over temperat ure condition has been detected. Fan Status On (green) Normal operation. Blinking (orange) One of the unit’s fans has failed. The switch Fau lt LED will be blinking simultaneously. PoE Status On (green) If any ports are s upplying PoE power[...]

63 LED State Indication PoE (green) Indicates which ports are supplying power: • If the Mode LED is on, the port is providing PoE power. • If the Mode LED is off, the port is not providing PoE power. • If the Link LED is on, the port is enabled for PoE. • If the Link LED is off, the port is disabled for PoE. • If the Link LED is blinking,[...]

64 The switches normally ship with a rack-mounting k it that allows installation into a two-post, 19-inch data comm unications rack. If installat ion into a 10 K four-post 19-inch rac k or a fou r-post rack m eeting the standard EIA unit of measurement is desired, a rack-mounting kit is available providing rails that give sturdy s upport for the sw[...]

The table bel ow lists the part num bers of power cords that can be used wit h the HP ProC urve Switch 5400zl, 35 00yl, and 6 200yl series products . The power cords available for these switches are sized fo r the increased current that can be drawn, m eeting th e needs of PoE. As a re sult, these power cords m ay not be found in a typical envi ron[...]