HP (Hewlett-Packard) T1453-90001 manuale d’uso

Using HP-UX VLANs HP 9000 Networking for HP-UX 11i Manufacturing P art Number: T1453-90001 E0302 U . S . A. © Copyright 2002 Hewlett-P ackard Company.[...]

2 Legal Notices The information in this document is subject to change without notice. Hewlett-P ackard makes no warranty of any kind with regard to this manual, including , but not limited to , the implied warranties of merchantability and fitness f or a particular purpose . Hewlett-Pac kard shall not be held liable for errors contained herein or [...]

Contents 3 1. What are HP-UX VLANs? HP-UX VLAN F eatures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Benefits of HP-UX VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Types of VLANs Supported by HP-UX . . . . . . . . . . . . . . . . [...]

Contents 4 Using lanadmin to Delete a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 A. Troubleshooting Diagnostic Flowcharts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Flowchart 1: Link Level T ests . . . . . . . . . . . . . . . . . . . . . . . . .[...]

T ables 5 T able 1-1. Needed P atches for HP-UX VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 T able 2-1. Summary of VLAN T agging Assignment . . . . . . . . . . . . . . . . . . . . . . . . . 24 T able 2-2. Allow able V alues for P arameters in vlanconf File . . . . . . . . . . . . . . . . . . 29 T able 2-3. T oS to 802.1 Use[...]

T ables 6[...]

F igures 7 Figure 1-1. VLANs (V irtual LANs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Figure 1-2. IEEE 802.1Q VLAN T ag in Ethernet F rame . . . . . . . . . . . . . . . . . . . . . . 15 Figure 1-3. VLANS Overlapping or Sharing the Same LAN Card P ort . . . . . . . . . . 16 Figure 2-1. Communication between VL[...]

F igures 8[...]

Chapter 1 9 1 What are HP-UX VLANs?[...]

What are HP-UX VLANs? Chapter 1 10 A Virtual LAN (VLAN) is a logical or virtual network segment that can span multiple physical network segments. Using VLANs , you can group switched-network end-stations by: • department, such as engineering and manufacturing , • type of user , such as power users or those with special needs , • application, [...]

What are HP-UX VLANs? Chapter 1 11 VLANs create broadcast domains using switches instead of routers . While VLANs in some environments may reduce the number of routers needed (and their latency), you still need a router if you want the VLANs to communicate with each other .[...]

What are HP-UX VLANs? HP-UX VLAN Features Chapter 1 12 HP-UX VLAN F eatures F ollowing are some of the features of HP-UX VLANs: • HP-UX VLANs are implemented with host-based IEEE 802.1Q/p compliant tagging to allow configuring multiple VLANs on a given Ethernet LAN card based on their IP-subnet, protocol, or LAN card port. • HP VLANs are for u[...]

What are HP-UX VLANs? Benefits of HP-UX VLANs Chapter 1 13 Benefits of HP-UX VLANs The advantages of HP-UX VLANs are: • Physically dispersed workgroups can be logically connected within the same broadcast domain to appear as if they are on the same physical LAN . • A single physical link can simultaneously serve several IP subnets when subnet[...]

What are HP-UX VLANs? T ypes of VLANs Supported by HP-UX Chapter 1 14 Types of VLANs Supported by HP-UX The types of HP-UX VLANs that you can create are as follows: • NIC-P ort Based--A group of physical LAN card ports belong to the same layer -2 broadcast domain. Each LAN card port transmits and receives frames belonging to the VLAN associated w[...]

What are HP-UX VLANs? HP-UX VLAN T agging Chapter 1 15 HP-UX VLAN T agging Network switches and end stations that know about VLANs are said to be VLAN-aware . Network switches and end stations that can interpret VLAN tags are said to be VLAN-tag-aware . HP-UX VLAN-tag-aw are end stations add VLAN tags to standard Ethernet frames--a process called e[...]

What are HP-UX VLANs? HP-UX VLAN T agging Chapter 1 16 Figure 1-3 VLANS Overlapping or Sharing the Same LAN Card P ort Server HP Gigabit or F ast Ethernet LAN Card P ort VLAN0 VLAN1024[...]

What are HP-UX VLANs? System and Software Requirements Chapter 1 17 System and Software Requirements F ollowing are the hardware and softw are requirements for VLANs as of March 2002: • Type of HP System Required — HP-UX Precision Architecture (P A-RISC). • OS Required — HP-UX 11i (11.11). New HP servers and workstations shipped after March[...]

What are HP-UX VLANs? System and Software Requirements Chapter 1 18 SAM PHCO_25866 * Either the 100Base-T or Gigabit patch may be optional depending on which link type you have . T able 1-1 Needed P atches (Continued)for HP-UX VLANs (Continued) Driver 11i P atch #[...]

What are HP-UX VLANs? Supported Switches Chapter 1 19 Supported Switches HP-UX VLANs are supported with switches that implement IEEE 802.1Q-compliant VLAN tagging. The switc hes must implement at least port-based VLANs and must be VLAN-tag aw are. The following switc hes are among those that support HP-UX VLANs: • HP ProCurve 9304M • HP ProCurv[...]

What are HP-UX VLANs? Unsupported Functionality Chapter 1 20 Unsupported Functionality HP-UX VLANs do not support the following functionality: • GARP VLAN registration protocol (GVRP) is currently not supported. HP-UX VLANs will not send GVRP messages or interpret them. • HP-UX VLANs do not operate on: — Any Itanium-based servers whether the [...]

Chapter 2 21 2 Overview of Installation and Configuration[...]

Overview of Installation and Configuration Planning HP-UX VLANs Chapter 2 22 Planning HP-UX VLANs The following requirements must be satisfied before setting up VLANs in an HP-UX network: • In order for both end stations of a VLAN to communicate, both the end-station LAN cards and the switch ports that are connected to those LAN cards on a poin[...]

Overview of Installation and Configuration How to Configure VLANs on the Switch Chapter 2 23 How to Configure VLANs on the Switch IEEE 802.1Q compliant devices and legacy/untagged VLANs can coexist on the same networks, but legacy/untagged VLANS require a separate link, whereas the 802.1Q tagged VLANs can combine several VLANs into one link. On [...]

Overview of Installation and Configuration How to Configure VLANs on the Switch Chapter 2 24 T able 2-1 Summary of VLAN T agging Assignment VLANs P er P ort T agging Scheme 1 Untagged or T agged. If the device connected to the port is 802.1Q-compliant, then the recommended choice is “T agged. ” 2 or more 1 VLAN Untagged; all others T agged or[...]

Overview of Installation and Configuration How to Configure VLANs on HP-UX Chapter 2 25 How to Configure VLANs on HP-UX Choose Configuration Method: Use SAM; Edit vlanconf; Use lanadmin There are three wa ys to configure VLANs: the first two methods preserve configuration changes across reboots; the third applies changes immediately but does[...]

Overview of Installation and Configuration Configuration Process Chapter 2 26 Configuration Process F ollowing are the steps to configure HP-UX VLANs. These steps are for defining VLAN membership, assigning names , VLAN IDs, and port assignments . This procedure assumes that the switches can add VLAN tags: 1. Determine the network topology aff[...]

Overview of Installation and Configuration Properties of a VLAN Chapter 2 27 Properties of a VLAN When a VLAN is created on a given LAN card port, (see “Creating a VLAN”), the system generates a virtual PP A or VPP A whic h can be used to send and receive 802.1Q tagged frames on that LAN card. Each HP-UX VLAN has a Virtual PP A associated with[...]

Overview of Installation and Configuration Special Case of VLAN ID 0--Priority T agged Frames Chapter 2 28 Special Case of VLAN ID 0--Priority T agged F rames VLAN ID 0 means that the frame doesn’t belong to any VLAN but has 802.1p priority information. Ensure that any switches used with HP-UX VLANs support VLAN ID 0. Promiscuous Mode Characteri[...]

Overview of Installation and Configuration Allowable V alues for HP VLANs Chapter 2 29 Allowable V alues for HP VLANs T able 2-2 lists the allowable values for configuring VLANs in the /etc/rc.config.d/vlanconf file. It describes the parameter functions , default values , and allowable ranges . F or the format of the /etc/rc.config.d/vlanconf [...]

Overview of Installation and Configuration Allowable V alues for HP VLANs Chapter 2 30 1 Default is an empty string; lanadmin will display it as UNNAMED . T able 2-2 Allowable V alues for P arameters in vlanconf F ile (Continued) P arameter -- description Range and Restrictions Default Type[...]

Overview of Installation and Configuration Using VLANs with MC/ServiceGuard Chapter 2 31 Using VLANs with MC/ServiceGuard Y ou can create MC ServiceGuard fail-over groups with VLANs as long as the primary and standby links are both VLAN interfaces with the same VLAN ID . See Figure 2-2 for an example. Please refer to HP MC ServiceGuard documentati[...]

Overview of Installation and Configuration How is 802.1p Priority Set? Chapter 2 32 How is 802.1p Priority Set? IP packets are classified and marked into different priority levels and the markings are transported through a type of service (T oS) octet in the IPv4 header and a traffic class field in the IPv6 header . HP-UX end stations transmit [...]

Overview of Installation and Configuration How do Pri and T oS Override Affect My Inbound and Outbound frames? Chapter 2 33 How do Pri and T oS Override Affect My Inbound and Outbound frames? Consider the following command. lanadmin -V create vlanid VID pri PRI tos TOS pri_override PO tos_override TO 6 This command will create a VLAN interface on [...]

Overview of Installation and Configuration How do Pri and T oS Override Affect My Inbound and Outbound frames? Chapter 2 34 CONF_TOS VLAN T ag priority comes from T oS to 802.1p mapping table (see T able 2-3). The T oS value used is TOS . T able 2-5 Allowable Settings for VLAN_TOS_OVERRIDE V alue in vlanconf File T oS Override Setting Inbound IP P[...]

Overview of Installation and Configuration Setting 802.1p Priority , T oS, and Overrides Chapter 2 35 Setting 802.1p Priority , T oS, and Overrides 802.1p priority is the priority in the tag in the frame header . Switches can use the 802.1p priority . T oS is the IP precedence in the IP header . Switches ignore T oS . Routers may use it. The Prior[...]

Overview of Installation and Configuration Where to Get More Information Chapter 2 36[...]

Chapter 3 37 3 Configuring VLANs Using SAM[...]

Configuring VLANs Using SAM Configuring VLANs Using SAM Chapter 3 38 Configuring VLANs Using SAM Y ou can use SAM to configure VLANs by completing the following steps: 1. Log in as root . 2. Check the HP-UX version by typing: uname -a . The version should be HP-UX 11i (11.11) 3. At the HP-UX prompt, type: sam 4. At the SAM main window , double [...]

Configuring VLANs Using SAM Configuring VLANs Using SAM Chapter 3 39 6. On the Virtual LAN screen, available VLAN-aw are cards are displayed. When you select a LAN card and then use the Create VLAN pulldown (Figure 3-2), the Create VLAN screen appears (F igure 3-3). F or the VLAN ID , enter any number between 0 and 4094 and use it only once withi[...]

Configuring VLANs Using SAM Configuring VLANs Using SAM Chapter 3 40 Figure 3-3 Create Virtual LANs After you have assigned a VLAN ID , the VLAN then shows on the main screen with the status Not Configured . Y ou then highlight the VLAN , and select the Configure IP Address pulldown action. This displays the Add an IP Address for the VLAN screen [...]

Configuring VLANs Using SAM Configuring VLANs Using SAM Chapter 3 41 On the Modify VLAN Properties screen, the fields are all optional; the data elements are the same as discussed in the chapter “Overview of Installation and Configuration:” VLAN name, VPP A, priority , T oS , and overrides. Figure 3-4 Add an IP Address for the VLAN 7. At an[...]

Configuring VLANs Using SAM Configuring VLANs Using SAM Chapter 3 42[...]

Chapter 4 43 4 Configuring VLANs by Editing vlanconf F ile[...]

Configuring VLANs by Editing vlanconf File Modifying P arameters in vlanconf File Chapter 4 44 Modifying P arameters in vlanconf File F ollowing is the format of the /etc/rc.config.d/vlanconf file . T o permanently save changes to this file , either use SAM or use a text editor such as “vi. ” If you use the lanadmin command line interface t[...]

Configuring VLANs by Editing vlanconf File Modifying P arameters in vlanconf File Chapter 4 45 # priority. Only for # IP packets. For non-IP # packets, CONF_PRI # will be used. # CONF_TOS - User specified ToS, taken # from VLAN_TOS[] will be # converted to # 802.1p priority. # # VLAN_TOS_OVERRIDE : Inbound ToS value to be used for IP # packets. # [...]

Configuring VLANs by Editing vlanconf File Modifying P arameters in vlanconf File Chapter 4 46 # VLAN_ID[1]= # VLAN_PRIORITY[1]= # VLAN_TOS[1]= # VLAN_PRI_OVERRIDE[1]= # VLAN_TOS_OVERRIDE[1]= # VLAN_NAME[1]=”” # VLAN_VPPA[1]= Example: F ollowing is an example where the physical interface lan0 has been assigned a VLAN ID of 1, default values fo[...]

Using lanadmin -V to Administer VLANs Chapter 5 47 5 Using lanadmin -V to Administer VLANs[...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 48 Using the lanadmin -V Command for Administering VLANs T o configure VLANs, you use either the GUI-based system admin manager (SAM) or edit the configuration file with an editor . VLAN configuration doesn’t require a reboot to take effect. [...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 49 CONF_TOS or CONF_PRI) [pri_override <level>(CONF_PRI,IP_HEADER or CONF_TOS)] <vppa> -V scan -V info <vppa> -V basevppa -V help Using lanadmin to Create a VLAN Assume that the system has the following configuration as shown by [...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 50 The VLAN (lan5000) appears in lanscan output just like a physical interface. VPP As are identified by the string “ VLANx ” in the hardw are path, where x is a number and is unique per VPP A. In the lanscan output, VPP As of a given physical[...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 51 Querying for a Single VPP A on a System Y ou can query the Virtual PP A using the following command: lanadmin -V info <vppa> The info command will return the output in the following format when successful. Example: lanadmin -V info 5000 VL[...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 52 lanadmin -V modify vlanid 53 pri 3 5000 Successfully modified lan5000 Old value: vlanid 454 pri 6 New value: vlanid 53 pri 3 After the modification, the lanscan -v output will display: Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI [...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 53 lanadmin -V delete 5000 The lanadmin -p <PPA> , command alwa ys displays the displays the applications and commands that use or are configured on the interface. Lets take another example. Before deleting , the interface lan5001, check if [...]

Using lanadmin -V to Administer VLANs Using the lanadmin -V Command for Administering VLANs Chapter 5 54[...]

Appendix A 55 A T roubleshooting[...]

T roubleshooting Appendix A 56 This chapter provides guidelines for troubleshooting VLANs . It contains the following sections: • Diagnostic Flowcharts . • Use of lanadmin and lanscan commands and scripts for testing or troubleshooting VLANs.[...]

T roubleshooting Diagnostic Flowc harts Appendix A 57 Diagnostic Flowcharts T able A-1 summarizes the types of network tests in the diagnostic flowcharts . F ollow the flowcharts in sequence beginning with Flowchart 1. T able A-1 Flowchart Descriptions Chart Type of T est Purpose 1 Link Level T ests Checks communications between link levels . V e[...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 58 Flowchart 1: Link Level T ests Check communications between link levels on the source and target host using the linkloop , lanscan , and lanadmin commands. The source interface should be a VPP A, that is, a PP A corresponding to a VLAN interface. The destination MAC address is the remote[...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 59 Figure A-1 Flowchart 1 Link Level lanscan and lanadmin Tests Tests linkloop Test[...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 60 Flowchart 1a: Linkloop T est Figure A-2 Flowchart 1a Linkloop YES Linkoop successful? NO Test Execute NO Re-check remote host address YES Network-Level lanscan/lanadmin Tests Loopback FAILED; Address has bad format or Not an individual address address parameter Correct the link linkloop [...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 61 Flowchart 1a Procedures • Execute linkloop to remote host. If linkloop is successful, continue to Network T est. Else if linkloop fails note which error was returned. • If loopback failed error = “ Address has bad format” or “not an individual address” then correct the link l[...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 62 Flowchart 1b: lanscan and lanadmin T est Figure A-3 Flowchart 1b lanscan YES Problem fixed? NO YES YES Execute Is your interface executing displayed after Create VLAN Stop NO and Test lanscan? by running lanadmin -V create Is VLAN ID YES NO lanadmin correct? lanscan -v Run Modify VLAN by[...]

T roubleshooting Flowchart 1: Link Level T ests Appendix A 63 Flowchart 1b Procedures • Execute lanscan command and verify your interface is displayed by the system. — If it is displayed, run lanscan -v to ensure the VLAN ID is correct. If so, return to the network T est. If not, modify the VLAN to the correct one by running the command lanadmi[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 64 Flowchart 2: Network Level T ests Figure A-4 Flowchart 2 Network Tests ARP Test ping Test Level[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 65 Flowchart 2 Procedures • See Flowchart 2a to validate ARP entries and remote host availability . • See Flowchart 2b to check communication between network la yers on source and target host using ping.[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 66 Flowchart 2a: ARP T est Figure A-5 Flowchart 2a ARP Test YES Remote host up? NO NO YES ping Test Bring up Use ARP to Is remote host cache? entry in ARP Is the ARP and complete entry correct correct and complete the entry YES NO remote host ?[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 67 Flowchart 2a Procedures • Use ARP to verify that an entry exists for the remote host in your system's ARP cache by executing arp hostname • If there is no ARP entry for the remote host, check to see if the remote host is up. If not, bring up remote host and continue to ping [...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 68 Flowchart 2b: ping T est Figure A-6 Flowchart 2b ping Test ping successful? NO YES Execute ping remotehost Validate network, remote host, and configuration settings Stop YES continued[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 69 Flowchart 2b Procedures • Execute ping to remote host using ping . • If ping is successful, stop. If not, validate network, remote host, and configuration settings. V erify the routing tables using the netstat -rn command.[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 70 Flowchart 2b (continued): Figure A-7 Flowchart 2b (continued) YES NO NO YES Network NO Correct BIND, YP, Call HP YES successful ping not unreachable? error? No response from ping? Unknown host error? No route to host error? or /etc/hosts configuration Link-Level Tests YES NO Add rout[...]

T roubleshooting Flowchart 2: Network Le vel T ests Appendix A 71 Flowchart 2b (continued) Procedures • If network unreachable error , go to the Configuration T ests . • If no response from ping, validate switc hes in path support VLANs and remote host supports them as well. Otherwise, reconfigure network path, or configure VLANs on remote h[...]

T roubleshooting NetTL T race and Log of VLANs Appendix A 72 NetTL T race and Log of VLANs The nettl tool can be used to troubleshoot VLANs. F ollowing is a sample trace output from a Gigabit Ethernet card: Tracing Output from a Gigabit Ethernet Card ^^^^^^^^^^^^^^^^^^^^^^Gigabit Ethernet LAN/9000 Networking^^^^^^^^^^^^^^^^^^ Timestamp : Wed Nov 07[...]

T roubleshooting NetTL T race and Log of VLANs Appendix A 73 Device ID : 1 Path ID : -1 Connection ID : 0 Location : 00123 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Received 1480 bytes via Ethernet Wed Nov 07 11:08:03.961449 PST 2001 pid=[ICS] interface=[1] Dest: 00-10-83-05-16-7d Source: 00-10-83-05-16-7e 00-10-8[...]

T roubleshooting NetTL T race and Log of VLANs Appendix A 74[...]

Glossary 75 Glossary 802.1p: IEEE Standard supplement, now incorporated in IEEE 802.1D . Defines 8 priority levels for traffic classification at the data link level and suggests how they might be used. 802.1Q: IEEE Standard that specifies the architecture for VLAN tagging , association, and VLAN-capable bridges. 100Base-T: A 100 Mbit/s communic[...]

Glossar y IP: Glossary 76 IP: Internet protocol. IP Address: See Internet Address glossary entry . LAN: See Local Area Network. Local Area Network (LAN): A data communications system that allows a number of independent devices to communicate with each other . Local Network: The network to which a node is directly attached. Maximum Transmission Unit[...]

Glossar y VPP A: Glossary 77 Virtual PP A or VPP A: Virtual Interfaces which are dynamically created by you (using lanadmin or SAM). The interfaces are “virtual” because they do not have a unique hardware instance . A virtual PP A is the PP A associated with a VLAN . VLAN: Virtual LAN .VLANs , are a mechanism to determine which end stations sho[...]

Glossar y Virtual PP A or VPP A: Glossary 78[...]