Page 5 - iii; Contents; Product Publications and IPv6 Command Index
iii Contents Product Publications and IPv6 Command Index About Your Switch Manual Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Printed Publications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Electronic Publications . . . . . ...
Page 6 - iv; Use Model
iv Information Sources for Tunneling IPv6 Over IPv4 . . . . . . . . . . . 2-5 Use Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6 Adding IPv6 Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6...
Page 7 - IPv6 Addressing
v 3 IPv6 Addressing Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 IPv6 Address Structure and Format . . . . ...
Page 8 - IPv6 Addressing Configuration
vi Overview of the Multicast Operation in IPv6 . . . . . . . . . . . . . . . . . . . . 3-21 IPv6 Multicast Address Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22 Multicast Group Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22 Solicited-Node Mult...
Page 9 - vii; IPv6 Management Features
vii Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-20 View the Current IPv6 Addressing Configuration . . . . . . . . . . . . . . 4-21 Router Access and Default Router Selection . . . . . . . . . . . . . . . . . . . 4-27 Router Advertisements . . . ....
Page 10 - viii; IPv6 Management Security Features
viii Using TFTP to Copy Files over IPv6 . . . . . . . . . . . . . . . . . . . . . . . 5-17 Using Auto-TFTP for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-19 SNMP Management for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20 SNMP Features Sup...
Page 11 - ix; IPv6 Diagnostic and Troubleshooting
ix Configuring Fast Leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-10 Configuring Forced Fast Leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-11 Displaying MLD Status and Configuration . . . . . . . . . . . . . . . . . . . . . 7-12 Current M...
Page 13 - About Your Switch Manual Set; N o t e; Technical support; Printed Publications
ix Product Publications and IPv6 Command Index About Your Switch Manual Set N o t e For the latest version of all ProCurve switch documentation, including Release Notes covering recently added features, please visit the ProCurve Networking Web site at www.procurve.com, click on Technical support , a...
Page 15 - xi; IPv6 Command Index; A link-local address must include
xi IPv6 Command Index This index provides a tool for locating descriptions of individual IPv6 com-mands covered in this guide. N o t e A link-local address must include %vlan< vid > without spaces as a suffix. For example: fe80::110:252%vlan20 The index begins on the next page.
Page 16 - xii
xii Command Min. Level Page Authorized Manager ipv6 authorized managers < ipv6-addr > * Global Config 6-5 show ipv6 authorized-managers Manager 6-12 Copy auto-tftp Global Config 5-19 copy tftp < target > < ipv6-addr > < filename > Manager 5-17 copy < source > tftp < ...
Page 17 - xiii
xiii IPv6 Management (Continued) ipv6 nd dad-attempts < 0 - 600 > Global Config 4-19 show ipv6 neighbors Operator 5-3 show ipv6 route Operator 4-29 show ipv6 routers Operator 4-30 snmp-server host < ipv6-addr > * Global Config 5-21 MLD ipv6 mld VLAN Config 7-8 ipv6 mld [< auto | block...
Page 18 - xiv
Page 19 - Getting Started; Introduction
1-1 1 Getting Started Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2 Command Syntax Statements . . . . . ...
Page 20 - umentation”; Conventions; Command Syntax Statements; copy tftp
1-2 Getting Started Introduction Introduction This guide is intended for use with the following switches: ■ ProCurve Switch 8200zl series ■ ProCurve Switch 5400zl series ■ ProCurve Switch 3500yl and 6200yl series ■ ProCurve Switch 2900 series It describes how to use the command line interface (CLI) ...
Page 21 - Command Prompts; ProCurve; Screen Simulations; Figure 1-1. Example of a Figure Showing a Simulated Screen; Configuration and Operation Examples; ProCurve> show version
1-3 Getting Started Conventions Command Prompts In the default configuration, your switch displays a CLI prompt similar to the following example: ProCurve 8212zl# To simplify recognition, this guide uses ProCurve to represent command prompts for all switch models. For example: ProCurve# (You can use...
Page 22 - Sources for More Information
1-4 Getting Started Sources for More Information Sources for More Information This guide covers features related to IPv6 operation in software release K.13.01, and includes an IPv6 command index on page xi. For information about switch operation and features not covered in this guide, refer to the s...
Page 24 - Getting Documentation From the Web; Go to the ProCurve Networking web site at; Click on; Product; Click on the product for which you want to view or download a manual.; Online Help; Menu Interface; Figure 1-2. Online Help for Menu Interface
1-6 Getting Started Sources for More Information Getting Documentation From the Web To obtain the latest versions of documentation and release notes for your switch: 1. Go to the ProCurve Networking web site at www.procurve.com 2. Click on Technical support . 3. Click on Product manuals . 4. Click o...
Page 25 - Command Line Interface; help; Web Browser Interface; Figure 1-4. Button for Web Browser Interface Online Help
1-7 Getting Started Sources for More Information Command Line Interface If you need information on a specific command in the CLI, type the command name followed by help . For example: Figure 1-3. Example of CLI Help Web Browser Interface If you need information on specific features in the ProCurve W...
Page 26 - Use the ProCurve
1-8 Getting Started To Set Up and Install the Switch in Your Network To Set Up and Install the Switch in Your Network Use the ProCurve Installation and Getting Started Guide (shipped with the switch) for the following: ■ Notes, cautions, and warnings related to installing and using the switch and it...
Page 27 - Introduction to IPv6; Migrating to IPv6
2-1 2 Introduction to IPv6 Contents Migrating to IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3 IPv6 Propagation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4 Dual-Stack Operation . . . . . . . . . . . ...
Page 28 - IPv6 Scalability
2-2 Introduction to IPv6 Contents ICMP Rate-Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13 Ping6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13 Traceroute6 . . . . . . . . . . . . . . . ....
Page 29 - receiving IPv6 traffic addressed to the switch
2-3 Introduction to IPv6 Migrating to IPv6 Migrating to IPv6 To successfully migrate to IPv6 involves maintaining compatibility with the large installed base of IPv4 hosts and routers for the immediate future. To achieve this purpose, software release K.13.01 supports dual-stack (IPv4/IPv6) operatio...
Page 30 - IPv6 Propagation
2-4 Introduction to IPv6 Migrating to IPv6 IPv6 Propagation IPv6 is currently in the early stages of deployment worldwide, involving a phased-in migration led by the application of basic IPv6 functionality. In these applications, IPv6 traffic is switched among IPv6-capable devices on a given LAN, an...
Page 31 - Information Sources for Tunneling IPv6 Over IPv4; RFC 2893: “Transition Mechanisms for IPv6 Hosts and Routers”
2-5 Introduction to IPv6 Migrating to IPv6 Connecting to Devices Supporting IPv6 Over IPv4 Tunneling The switches covered by this guide can interoperate with IPv6/IPv4 devices capable of tunneling IPv6 traffic across an IPv4 infrastructure. Some examples include: ■ traffic between IPv6/IPv4 routers(...
Page 32 - Adding IPv6 Capability; switch configuration and management
2-6 Introduction to IPv6 Use Model Use Model Adding IPv6 Capability IPv6 was designed by the Internet Engineering Task Force (IETF) to improve on the scalability, security, ease of configuration, and network management capabilities of IPv4. IPv6 provides increased flexibility and connectivity for ex...
Page 33 - Configuration and Management; Management Features; IPv6 Addressing; The switch offers these IPv6 address configuration features:; SLAAC (Stateless Automatic Address Configuration); , which is prepended to the
2-7 Introduction to IPv6 Configuration and Management The next three sections outline the IPv6 features supported in software release K.13.01. Configuration and Management This section outlines the configurable management features supporting IPv6 operation on your ProCurve IPv6-ready switch. Managem...
Page 34 - accessible on a VLAN configured on the switch; Static Address Configuration
2-8 Introduction to IPv6 Configuration and Management and the interface identifier currently in use in the link-local address. Having a global unicast address and a connection to an IPv6- aware router enables IPv6 traffic on a VLAN to be routed to other VLANs supporting IPv6-aware devices. (Using so...
Page 35 - show ipv6; command displays the address as a; duplicate; Advertise anycast addresses that may be configured on the device.
2-9 Introduction to IPv6 Configuration and Management N o t e In IPv6 for the switches covered in this guide, the default route cannot be statically configured. Also, DHCPv6 does not include default route configura-tion.) Refer to “Default IPv6 Router” on page 4-28 and “View IPv6 Gateway, Route, and...
Page 36 - IPv6 Management Features; TFTPv6 Transfers
2-10 Introduction to IPv6 Configuration and Management IPv6 Management Features The switch's IPv6 management features support operation in an environment employing IPv6 servers and management stations.With a link to a properly configured IPv6 router, switch management extends to routed traffic solu-...
Page 37 - IP Preserve; configure and display IPv6 addressing; Configurable IPv6 Security
2-11 Introduction to IPv6 Configurable IPv6 Security IP Preserve IP Preserve operation preserves both the IPv4 and IPv6 addresses configured on VLAN 1 (the default VLAN) when a configuration file is downloaded to the switch using TFTP. Refer to “IP Preserve for IPv6” on page 5-23. Multicast Listener...
Page 38 - IPv6 only; IP Authorized Managers; Telnet, SSH, and other terminal emulation applications
2-12 Introduction to IPv6 Configurable IPv6 Security supported between the switch and IPv6 management stations when SSH on the switch is also configured for IPv6 operation. The switch now offers these SSHv2 connection types: ■ IPv6 only ■ IPv4 only ■ IPv4 or IPv6 The switch supports up to six inboun...
Page 39 - C a u t i o n; RFC 4864, “Local Network Protection for IPv6”.; Diagnostic and Troubleshooting; Traceroute6
2-13 Introduction to IPv6 Diagnostic and Troubleshooting C a u t i o n The Authorized IP Managers feature does not protect against unauthorized station access through a modem or direct connection to the Console (RS-232) port. Also, if an unauthorized station “spoofs” an authorized IP address, then t...
Page 40 - traceroute6; The neighbor discovery feature includes commands for:; Event Log
2-14 Introduction to IPv6 Diagnostic and Troubleshooting Domain Name System (DNS) Resolution This feature enables resolving a host name to an IPv6 address and the reverse, and takes on added importance over its IPv4 counterpart due to the extended length of IPv6 addresses. With DNS-compatible comman...
Page 41 - SNMP; Dual stack operation (IPv4 and IPv6 addresses on the same VLAN).
2-15 Introduction to IPv6 IPv6 Scalability SNMP When IPv6 is enabled on a VLAN interface, you can manage the switch from a network management station configured with an IPv6 address. Refer to “SNMP Management for IPv6” on page 5-20. Loopback Address Like the IPv4 loopback address, the IPv6 loopback ...
Page 45 - Address Format
3-3 IPv6 Addressing Introduction Introduction IPv6 supports multiple addresses on an interface, and uses them in a manner comparable to subnetting an IPv4 VLAN. For example, where the switch is configured with multiple VLANs and each is connected to an IPv6 router, each VLAN will have a single link-...
Page 46 - Network Prefix; A shorter way to show this address is to remove the leading zeros:
3-4 IPv6 Addressing IPv6 Address Structure and Format An IPv6 address includes a network prefix and an interface identifier. Network Prefix The network prefix (high-order bits) in an IPv6 address begins with a well-known, fixed prefix for defining the address type. Some examples of well-known, fixed...
Page 47 - IPv6 Addressing Options; IPv6 Address Sources; stateless IPv6 autoconfiguration on VLAN interfaces includes:; General IPv6 Address Types; Stateless Address Autoconfiguration .; This method does not require the
3-5 IPv6 Addressing IPv6 Addressing Options IPv6 Addressing Options IPv6 Address Sources IPv6 addressing sources provide a flexible methodology for assigning addresses to VLAN interfaces on the switch. Options include: ■ stateless IPv6 autoconfiguration on VLAN interfaces includes: • link-local unic...
Page 48 - Stateful Address Autoconfiguration.
3-6 IPv6 Addressing IPv6 Addressing Options Stateful Address Autoconfiguration. This method allows use of a DHCPv6 server to automatically configure IPv6 addressing on a host in a manner similar to stateful IP addressing with a DHCPv4 server. For software release K.13.01, a DHCPv6 server can provide...
Page 49 - Stateless Address Autoconfiguration (SLAAC); Applications
3-7 IPv6 Addressing IPv6 Address Sources IPv6 Address Sources IPv6 addressing sources provide a flexible methodology for assigning addresses to VLAN interfaces on the switch. Options include: ■ stateless IPv6 autoconfiguration on VLAN interfaces includes: • link-local unicast addresses • global unic...
Page 50 - To implement stateful address configuration:; DHCPv6 relay may not currently be available in some IPv6 routers.
3-8 IPv6 Addressing IPv6 Address Sources servers. These lifetimes cannot be reset using control from the switch console or SNMP methods. Refer to “Preferred and Valid Address Lifetimes” on page 3-25. Stateful (DHCPv6) Address Configuration Stateful addresses are defined by a system administrator or ...
Page 51 - write memory; ) remain across a reboot and are permanent, unless statically
3-9 IPv6 Addressing IPv6 Address Sources Static Address Configuration Generally, static address configuration should be used when you want specific, non-default addressing to be assigned to a VLAN interface. For IPv6, DHCP use is indicated for conditions such as the following: ■ address conventions ...
Page 52 - Address Types and Scope; Address Types; IPv6 uses these IP address types:; A single address of this type can be assigned to multiple
3-10 IPv6 Addressing Address Types and Scope Address Types and Scope Address Types IPv6 uses these IP address types: ■ Unicast: Identifies a specific IPv6 interface. Traffic having a unicast destination address is intended for a single interface. Like IPv4 addresses, unicast addresses can be assigne...
Page 53 - Address Scope; Global Unicast Address.; Applies to a unique IPv6 routable address on the; Unique Local Unicast.; Applies to a routable, globally unique address; Unicast Address Prefixes; This well-known 64-bit fixed prefix is for
3-11 IPv6 Addressing Address Types and Scope Address Scope The address scope determines the area (topology) in which a given IPv6 address is used. This section provides an overview of IPv6 address types. For more information, refer to the chapter titled “IPv6 Addressing”. Link-Local Address. Limited...
Page 54 - In binary notation, the fixed prefix for link-local prefixes is:; Routable Global Unicast Prefix.; This well-known fixed prefix is defined
3-12 IPv6 Addressing Address Types and Scope In binary notation, the fixed prefix for link-local prefixes is: 1111 1110 10 = fe80/10 For more on link-local addresses, refer to “Link-Local Unicast Address” on page 3-13. Routable Global Unicast Prefix. This well-known 3-bit fixed-prefix indi- cates a ...
Page 55 - Other Prefix Types.; There are other designated global unicast prefixes; Link-Local Unicast Address; Autoconfiguring Link-Local Unicast Addresses
3-13 IPv6 Addressing Link-Local Unicast Address Other Prefix Types. There are other designated global unicast prefixes such as those for the following address types: ■ RFC 4380: “Teredo: Tunneling IPv6 over UDP” ■ RFC 3056: “Connection of IPv6 Domains via IPv4 Clouds” ■ RFC 4214: “Intra-Site Automat...
Page 56 - ipv6 address dhcp full; ipv6 enable
3-14 IPv6 Addressing Link-Local Unicast Address Because all VLANs configured on the switch use the same MAC address, all automatically generated link-local addresses on the switch will have the same link-local address. However, since the scope of a link-local address includes only the VLAN on which ...
Page 57 - RFC 2373: “IP Version 6 Addressing Architecture”; Statically Configuring Link-Local Addresses; MAC Address
3-15 IPv6 Addressing Link-Local Unicast Address The EUI method of generating a link-local address is automatically imple-mented on the switches covered by this guide when IPv6 is enabled on a VLAN interface. If automatically generated link-local addresses are not suitable for the addressing scheme y...
Page 58 - Global Unicast Address; Router Advertisements.; With autoconfiguration enabled, if the switch; If IPv6 Is Not Already Enabled.; Enabling address autoconfiguration on a
3-16 IPv6 Addressing Global Unicast Address Global Unicast Address A global unicast address is required for unicast traffic to be routed across VLANs within an organization as well as across the public internet. To support subnetting, a VLAN can be configured with multiple global unicast addresses. ...
Page 59 - IPv6 is not enabled on VLAN 1.; IPv6 Already Enabled.; Enabling address autoconfiguration on a VLAN; Static Configuration of a Global Unicast Address
3-17 IPv6 Addressing Global Unicast Address ■ generate a link-local address on the VLAN as described in the preceeding section (page 3-13). ■ transmit a router solicitation on the VLAN, and to listen for advertise-ments from any IPv6 routers on the VLAN. For each unique router advertisement (RA) the...
Page 60 - Prefixes in Routable IPv6 Addresses; or
3-18 IPv6 Addressing Global Unicast Address Prefixes in Routable IPv6 Addresses In routable IPv6 addresses, the prefix uniquely identifies an entity and a unicast subnet within that entity, and is defined by a length value specifying the number of leftmost contiguous (high-order) bits comprising the...
Page 61 - Unique Local Unicast IPv6 Address; the well-known prefix “fd”
3-19 IPv6 Addressing Unique Local Unicast IPv6 Address Unique Local Unicast IPv6 Address A unique local unicast address is an address that falls within a specific range, but is used only as a global unicast address within an organization. Traffic having a source address within the defined range shou...
Page 62 - Anycast Addresses; time servers; anycast
3-20 IPv6 Addressing Anycast Addresses Anycast Addresses Network size, traffic loads and the potential for network changes make it desirable to build in redundancy for some network services to provide increased service reliability. Anycast addressing provides this capability for applications where i...
Page 63 - Multicast Application to IPv6 Addressing; Overview of the Multicast Operation in IPv6; solicited node multicast group
3-21 IPv6 Addressing Multicast Application to IPv6 Addressing For related information, refer to: ■ RFC 4291: “IP Version 6 Addressing Archetecture” ■ RFC 2526: “Reserved IPv6 Subnet Anycast Addresses” Multicast Application to IPv6 Addressing Multicast is used to reduce traffic for applications that ...
Page 64 - When MLD is enabled on an interface, you can use; IPv6 Multicast Address Format; For related information, refer to RFC 4291.; Multicast Group Identification; multicast identifier:; address as multicast.; Bit ID
3-22 IPv6 Addressing Multicast Application to IPv6 Addressing For information on Multicast Listener Discovery (MLD) refer to the chapter titled “Multicast Listener Discovery (MLD) Snooping”. When MLD is enabled on an interface, you can use show ipv6 mld [ vlan < vid >] to list the active multi...
Page 65 - Solicited-Node Multicast Address Format; Bit
3-23 IPv6 Addressing Multicast Application to IPv6 Addressing ■ multicast scope: Bits 13-16 set boundaries on multicast traffic distribu- tion, such as the interface defined by the link-local unicast address of an area, or the network boundaries of an organization. Because IPv6 uses multicast techno...
Page 66 - then the corresponding solicited-node multicast address is; Loopback Address
3-24 IPv6 Addressing Loopback Address fe90::215:60ff:fe7a:adc0 then the corresponding solicited-node multicast address is ff02:0:0:0:0:1:ff7a:adc0 For related information, refer to: ■ RFC 2375: IPv6 Multicast Address Assignments ■ RFC 3306: Unicast-Prefix-based IPv6 Multicast Addresses ■ RFC 3956: E...
Page 67 - The Unspecified Address; Preferred and Valid Address Lifetimes; valid; Figure 3-1. Valid and Preferred Lifetimes; When the preferred lifetime expires, the address becomes
3-25 IPv6 Addressing The Unspecified Address The Unspecified Address The “unspecified” address is defined as 0.0.0.0.0.0.0.0 (::/128, or just ::). It can be used, for example, as a temporary source address in multicast traffic sent by an interface that has not yet acquired its own address. The unspe...
Page 68 - N o t e s; Related Information
3-26 IPv6 Addressing IPv6 Address Deprecation N o t e s Preferred and valid lifetimes on a VLAN interface are determined by the router advertisements received on the interface. These values are not affected by the lease time assigned to an address by a DHCPv6 server. That is, lease expiration on a D...
Page 69 - IPv6 Addressing Configuration
4-1 4 IPv6 Addressing Configuration Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 General Configuration Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 Configuring IPv6 Addressing . . . . ...
Page 70 - View IPv6 Gateway, Route, and Router Neighbors
4-2 IPv6 Addressing Configuration Contents Router Solicitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-27 Default IPv6 Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-28 Router Redirection . . . . . . . . . . . . ....
Page 71 - This chapter provides the following:; show; commands; Feature
4-3 IPv6 Addressing Configuration Introduction Introduction In the default configuration, IPv6 operation is disabled on the switch. This section describes the general steps and individual commands for enabling IPv6 operation. This chapter provides the following: ■ general steps for IPv6 configuratio...
Page 72 - General Configuration Steps; In the default configuration, IPv6 is disabled on all VLANs.
4-4 IPv6 Addressing Configuration General Configuration Steps General Configuration Steps The IPv6 configuration on switches running software release K.13.01 includes global and per-VLAN settings. This section provides an overview of the general configuration steps for enabling IPv6 on a given VLAN ...
Page 73 - Configuring IPv6 Addressing
4-5 IPv6 Addressing Configuration Configuring IPv6 Addressing 4. If needed, statically configure IPv6 unicast addressing on the VLAN interface as needed. This can include any of the following: • statically replacing the automatically generated link-local address • statically adding global unicast, u...
Page 74 - show run; (Lists IPv6 addresses for all VLANs configured on the switch.); preferred; Disabled
4-6 IPv6 Addressing Configuration Enabling IPv6 with an Automatically Configured Link-Local Address Enabling IPv6 with an Automatically Configured Link-Local Address This command enables automatical configuration of a link-local address . To view the current IPv6 Enable setting and any statically co...
Page 76 - Operating Notes; — Continued from the previous page. —; autoconfig
4-8 IPv6 Addressing Configuration Enabling Automatic Configuration of a Global Unicast Address and a Default Router Identity on a VLAN To view the current IPv6 autoconfiguration settings per-VLAN, use show run . To view all currently configured IPv6 unicast addresses, use the following: ■ show ipv6 ...
Page 77 - Enabling DHCPv6; A DHCPv6 server does not assign link-local
4-9 IPv6 Addressing Configuration Enabling DHCPv6 Enabling DHCPv6 Enabling the DHCPv6 option on a VLAN allows the switch to obtain a global unicast address and an NTP (network time protocol) server assignment for a Timep server. (If a DHCPv6 server is not needed to provide a global unicast address t...
Page 78 - To view the current IPv6 DHCPv6 settings per-VLAN, use
4-10 IPv6 Addressing Configuration Enabling DHCPv6 To view the current IPv6 DHCPv6 settings per-VLAN, use show run . To view all currently configured IPv6 unicast addresses, use the following: ■ show ipv6 (Lists IPv6 addresses for all VLANs configured on the switch.) ■ show ipv6 vlan < vid > (...
Page 79 - For related information refer to:
4-11 IPv6 Addressing Configuration Configuring a Static IPv6 Address on a VLAN ■ DHCPv6 and statically configured global unicast or anycast addresses are mutually exclusive on a given VLAN. That is, configuring DHCPv6 on a VLAN erases any static global unicast or anycast addresses previously configu...
Page 80 - Statically Configuring a Link-Local Unicast Address; comprise this value in a link-local address:; form of the static IPv6 address
4-12 IPv6 Addressing Configuration Configuring a Static IPv6 Address on a VLAN Statically Configuring a Link-Local Unicast Address Syntax: [no] ipv6 address fe80::< device-identifier > link-local ■ If IPv6 is not already enabled on the VLAN, this command enables IPv6 and configures a static li...
Page 81 - Statically Configuring A Global Unicast Address
4-13 IPv6 Addressing Configuration Configuring a Static IPv6 Address on a VLAN Statically Configuring A Global Unicast Address To view the currently configured static IPv6 addresses per-VLAN, use show run . To view all currently configured IPv6 unicast addresses, use the following: ■ show ipv6 (List...
Page 82 - Statically Configuring An Anycast Address; keyword to; output. For more information on using anycast addresses, refer to
4-14 IPv6 Addressing Configuration Configuring a Static IPv6 Address on a VLAN Operating Notes ■ With IPv6 enabled, the switch determines the default IPv6 router for the VLAN from the router advertisements it receives. (Refer to “Router Access and Default Router Selection” on page 4-27.) ■ If DHCPv6...
Page 84 - “View the Current IPv6 Addressing Configuration” on page 4-21; Disabling IPv6 on a VLAN
4-16 IPv6 Addressing Configuration Disabling IPv6 on a VLAN Duplicate Address Detection (DAD) for Statically Configured Addresses Statically configured IPv6 addresses are designated as permanent. If DAD determines that a statically configured address duplicates a previously config-ured and reachable...
Page 86 - DAD Operation
4-18 IPv6 Addressing Configuration Duplicate Address Detection (DAD) N o t e : Neighbor and router solicitations must originate on the same VLAN as the receiving device. To support this operation, IPv6 is designed to discard any incoming neighbor or router solicitation that does not have a value of ...
Page 87 - command, and is not; Configuring DAD; The number of consecutive neighbor solicitation
4-19 IPv6 Addressing Configuration Duplicate Address Detection (DAD) that includes its link-local address. If the newly configured address is from a static or DHCPv6 source and is found to be a duplicate, it is labelled as duplicate in the “Address Status” field of the show ipv6 command, and is not ...
Page 90 - show ipv6 vlan
4-22 IPv6 Addressing Configuration View the Current IPv6 Addressing Configuration For example, figure 4-1 shows the output on a switch having IPv6 enabled on one VLAN. Address Origin: ■ Autoconfig: The address was configured using stateless address autoconfiguration (SLAAC). In this case, the device...
Page 91 - Figure 4-1. Example of Show IPv6 Command Output; (Refer to “Router Access and Default; attempts 0; disables neighbor discovery.
4-23 IPv6 Addressing Configuration View the Current IPv6 Addressing Configuration Figure 4-1. Example of Show IPv6 Command Output ProCurve(config)# show ipv6 Internet (IPv6) Service IPv6 Routing : Disabled Default Gateway : 10.0.9.80 ND DAD : Enabled DAD Attempts : 3 Vlan Name : DEFAULT_VLAN IPv6 St...
Page 92 - Address
4-24 IPv6 Addressing Configuration View the Current IPv6 Addressing Configuration ■ DAD Attempts: Indicates the number of neighbor solicita- tions the switch transmits per-address for duplicate (IPv6) address detection. Implemented when a new address is configured or when an interface with config-ur...
Page 95 - Router Advertisements; learning the hop limit for traffic leaving the VLAN interface; Router Solicitations
4-27 IPv6 Addressing Configuration Router Access and Default Router Selection Router Access and Default Router Selection Routing traffic between destinations on different VLANs configured on the switch or to a destination on an off-switch VLAN is done by placing the switch on the same VLAN interface...
Page 96 - Default IPv6 Router; For related information:
4-28 IPv6 Addressing Configuration Router Access and Default Router Selection N o t e If the switch does not receive a router advertisement after sending the router solicitations, as described above, then no further router solicitations are sent on that VLAN unless a new IPv6 setting is configured, ...
Page 97 - Viewing Gateway and IPv6 Route Information
4-29 IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors View IPv6 Gateway, Route, and Router Neighbors Use these commands to view the switch's current routing table content and connectivity to routers per VLAN. This includes information received in router advertisements fro...
Page 98 - Figure 4-4. Example of Show IPv6 Route Output; Viewing IPv6 Router Information
4-30 IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors Figure 4-4. Example of Show IPv6 Route Output Viewing IPv6 Router Information ProCurve(config)# show ipv6 route IPv6 Route Entries Dest : ::/0 Type : static Gateway : fe80::213:c4ff:fedd:14b0%vlan10 Dist. : 40 Metric :...
Page 99 - Figure 4-5. Example of Show IPv6 Routers Output; Indicates whether the entry source is on the same; Interface
4-31 IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors For example, figure 4-5 indicates that the switch is receiving router advertise-ments from a single router that exists on VLAN 10. Figure 4-5. Example of Show IPv6 Routers Output MTU: This is the Maximum Transmission U...
Page 100 - Address Lifetimes; Preferred Lifetime; Valid Lifetime
4-32 IPv6 Addressing Configuration Address Lifetimes Address Lifetimes Every configured IPv6 unicast and anycast address has a lifetime setting that determines how long the address can be used before it must be refreshed or replaced. Some addresses are set as “permanent” and do not expire. Others ha...
Page 101 - IPv6 Unicast Addresses Lifetimes
4-33 IPv6 Addressing Configuration Address Lifetimes Table 4-1. IPv6 Unicast Addresses Lifetimes A new, preferred address used as a replacement for a deprecated address can be acquired from a manual, DHCPv6, or autoconfiguration source. Address Source Lifetime Criteria Link-Local Permanent Staticall...
Page 104 - Management
5-2 IPv6 Management Features Introduction Introduction This chapter focuses on the IPv6 application of management features in software release K.13.01 that support both IPv6 and IPv4 operation. For additional information on these features, refer to the current Management and Configuration Guide for ...
Page 105 - Viewing the Neighbor Cache; dynamic; INCOM
5-3 IPv6 Management Features Viewing and Clearing the IPv6 Neighbors Cache Viewing the Neighbor Cache Neighbor discovery occurs when there is communication between IPv6 devices on a VLAN. The Neighbor Cache retains data for a given neighbor until the entry times out. For more on this topic, refer to...
Page 106 - Figure 5-1. Example of Neighbor Cache Without Specifying a VLAN; — Continued from previous page. —
5-4 IPv6 Management Features Viewing and Clearing the IPv6 Neighbors Cache Figure 5-1. Example of Neighbor Cache Without Specifying a VLAN Figure 5-2. Example of Neighbor Cache Content for a Specific VLAN — Continued from previous page. — • STALE : A timeout has occurred for reachability of the neig...
Page 107 - Clearing the Neighbor Cache; command output may become too cluttered to efficiently read.; Figure 5-3. Example of Clearing the IPv6 Neighbors Cache; clear ipv6 neighbors
5-5 IPv6 Management Features Viewing and Clearing the IPv6 Neighbors Cache Clearing the Neighbor Cache When there is an event such as a topology change or an address change, the neighbor cache may have too many entries to allow efficient use. Also, if an unauthorized client is answering DAD or norma...
Page 108 - Telnet6 Operation; for your; Outbound Telnet6 to Another Device
5-6 IPv6 Management Features Telnet6 Operation Telnet6 Operation This section describes Telnet operation for IPv6 on the switch. For IPv4 Telnet operation, refer to the Management and Configuration Guide for your switch. Outbound Telnet6 to Another Device For example, to Telnet to another IPv6 devic...
Page 109 - Viewing the Current Telnet Activity on a Switch
5-7 IPv6 Management Features Telnet6 Operation Viewing the Current Telnet Activity on a Switch For example, the following figure shows that the switch is running one outbound, IPv4 session and is being accessed by two inbound sessions. Figure 5-4. Example of Show Telnet Output with Three Sessions Ac...
Page 110 - Enabling or Disabling Inbound Telnet6 Access
5-8 IPv6 Management Features Telnet6 Operation Enabling or Disabling Inbound Telnet6 Access For example, to disable Telnet6 access to the switch, you would use this com-mand: ProCurve(config)# no telnet6-server Viewing the Current Inbound Telnet6 Configuration Figure 5-5. Show Console Output Showing...
Page 111 - SNTP and Timep; Configuring (Enabling or Disabling) the SNTP Mode; Management and Configuration
5-9 IPv6 Management Features SNTP and Timep SNTP and Timep Configuring (Enabling or Disabling) the SNTP Mode Software release K.13.01 enables configuration of a global unicast address for IPv6 SNTP time server. This section lists the SNTP and related commands, including an example of using an IPv6 a...
Page 112 - Configuring an IPv6 Address for an SNTP Server
5-10 IPv6 Management Features SNTP and Timep Configuring an IPv6 Address for an SNTP Server N o t e To use a global unicast IPv6 address to configure an IPv6 SNTP time server on the switch, the switch must be receiving advertisements from an IPv6 router on a VLAN configured on the switch. To use a l...
Page 113 - followed immediately (without spaces) by the VLAN identifier.; timep
5-11 IPv6 Management Features SNTP and Timep For example, to configure link-local and global unicast SNTP server addresses of: ■ fe80::215:60ff:fe7a:adc0 (on VLAN 10, configured on the switch) ■ 2001:db8::215:60ff:fe79:8980 as the priority “1” and “2” SNTP servers, respectively, using version 7, you...
Page 114 - show sntp; output for the preceeding; sntp server; command; show management; command can also be used to display SNTP; Configuring (Enabling or Disabling) the Timep Mode; Commands Affecting Timep
5-12 IPv6 Management Features SNTP and Timep For example, the show sntp output for the preceeding sntp server command example would appear as follows: Figure 5-6. Example of Show SNTP Output with Both an IPv6 and an IPv4 Server Address Configured Note that the show management command can also be use...
Page 115 - For example, to configure a link-local Timep server address of:; Note
5-13 IPv6 Management Features SNTP and Timep N o t e To use a global unicast IPv6 address to configure an IPv6 Timep server on the switch, the switch must be receiving advertisements from an IPv6 router on a VLAN configured on the switch. To use a link-local IPv6 address to configure an IPv6 Timep s...
Page 116 - show timep
5-14 IPv6 Management Features SNTP and Timep ProCurve(config)# ip timep manual fe80::215:60ff:fe7a:adc0%vlan10 N o t e In the preceeding example, using a link-local address requires that you specify the local scope for the address; VLAN 10 in this case. This is always indicated by %vlan followed imm...
Page 117 - TFTP File Transfers Over IPv6; TFTP File Transfers over IPv6; copy; copy
5-15 IPv6 Management Features TFTP File Transfers Over IPv6 TFTP File Transfers Over IPv6 TFTP File Transfers over IPv6 You can use TFTP copy commands over IPv6 to upload, or download files to and from a physically connected device or a remote TFTP server, including: ■ Switch software ■ Software ima...
Page 118 - Enabling TFTP for IPv6; U s a g e N o t e s; • Use TFTP client functionality to access IPv6-based TFTP
5-16 IPv6 Management Features TFTP File Transfers Over IPv6 Enabling TFTP for IPv6 TFTP for IPv6 is enabled by default on the switch. However, if it is disabled, you can re-enable it by specifying TFTP client or server functionality with the tftp6 < client | server > command. Enter the tftp6 &...
Page 119 - Using TFTP to Copy Files over IPv6; Use the TFTP; commands described in this section to:; match; filename
5-17 IPv6 Management Features TFTP File Transfers Over IPv6 Using TFTP to Copy Files over IPv6 Use the TFTP copy commands described in this section to: ■ Download specified files from a TFTP server to a switch on which TFTP client functionality is enabled. ■ Upload specified files from a switch, on ...
Page 120 - source
5-18 IPv6 Management Features TFTP File Transfers Over IPv6 . ■ flash < primary | secondary >: Copies a software file stored on a remote host to primary or secondary flash memory on the switch. To run a newly downloaded software image, enter the reload or boot system flash command. ■ pub-key-f...
Page 121 - Using Auto-TFTP for IPv6; boot system flash primary; reload
5-19 IPv6 Management Features TFTP File Transfers Over IPv6 Using Auto-TFTP for IPv6 The auto-TFTP for IPv6 feature automatically downloads a software image to a switch, on which TFTP client functionality is enabled, from a specified IPv6-based device at switch startup. You must reboot the switch to...
Page 122 - SNMP Management for IPv6; SNMP Features Supported
5-20 IPv6 Management Features SNMP Management for IPv6 SNMP Management for IPv6 As with SNMP for IPv4, you can manage a switch via SNMP from an IPv6-based network management station by using an application such as ProCurve Manager (PCM) or ProCurve Manager Plus (PCM+). (For more on PCM and PCM+, go ...
Page 123 - SNMP Configuration Commands Supported; SNMPv1 and V2c; IPv6 addresses are supported in SNMP; command output as shown in
5-21 IPv6 Management Features SNMP Management for IPv6 SNMP Configuration Commands Supported IPv6 addressing is supported in the following SNMP configuration commands: For more information on each SNMP configuration procedure, refer to the “Configuring for Network Management Applications” chapter in...
Page 124 - Figure 5-8. “show snmp-server” Command Output with IPv6 Address
5-22 IPv6 Management Features SNMP Management for IPv6 The show snmp-server command displays the current SNMP policy configuration, including SNMP communities, network security notifications, link-change traps, trap receivers (including the IPv4 or IPv6 address) that can receive SNMPv1 and SNMPv2c t...
Page 125 - show snmpv3 targetaddress; command displays the configuration (including; IP Preserve for IPv6; To configure IP Preserve, enter the; ip preserve; statement at the end of the
5-23 IPv6 Management Features IP Preserve for IPv6 The show snmpv3 targetaddress command displays the configuration (including the IPv4 or IPv6 address) of the SNMPv3 management stations to which notification messages are sent. Figure 5-9. “show snmpv3 targetaddress” Command Output with IPv6 Address...
Page 126 - command as described in “TFTP File Transfers over IPv6” on; command. Figure 5-11 shows an example in which
5-24 IPv6 Management Features IP Preserve for IPv6 Figure 5-10. Example of How to Enter IP Preserve in a Configuration File To download an IP Preserve configuration file to an IPv6-based switch, enter the TFTP copy command as described in “TFTP File Transfers over IPv6” on page 5-15 to copy the file...
Page 127 - Management and Config-
5-25 IPv6 Management Features IP Preserve for IPv6 Note that if a switch received its IPv6 address from a DHCP server, the “ip address” field under “vlan 1” would display: dhcp-bootp . Figure 5-11. Configuration File with Dedicated IP Addressing After Startup with IP Preserve For more information on...
Page 129 - IPv6 Management Security Features; IPv6 Management Security
6-1 6 IPv6 Management Security Features Contents IPv6 Management Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2 Authorized IP Managers for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3 Usage Notes . . . . . . . . . . . . . . . . . . . . . ...
Page 130 - Authorized IP Managers for IPv6
6-2 IPv6 Management Security Features IPv6 Management Security IPv6 Management Security This chapter describes management security features that are IPv6 counter-parts of IPv4 management security features on the switches covered by this guide. This chapter describes the following IPv6-enabled manage...
Page 131 - Usage Notes; addresses
6-3 IPv6 Management Security Features Authorized IP Managers for IPv6 Authorized IP Managers for IPv6 The Authorized IP Managers feature uses IP addresses and masks to deter-mine which stations (PCs or workstations) can access the switch through the network. This feature supports switch access throu...
Page 133 - Configuring Authorized IP Managers for Switch Access; managers; Configuring Single Station Access; ipv6 authorized-managers
6-5 IPv6 Management Security Features Authorized IP Managers for IPv6 Configuring Authorized IP Managers for Switch Access To configure one or more IPv6-based management stations to access the switch using the Authorized IP Managers feature, enter the ipv6 authorized- managers command Using a Mask t...
Page 134 - FFFF; Configuring Multiple Station Access; IPv6 Mask
6-6 IPv6 Management Security Features Authorized IP Managers for IPv6 N o t e s If you do not enter a value for the ipv6-mask parameter when you configure an authorized IPv6 address, the switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default mask (see “Configuring Authorize...
Page 135 - Figure 6-2. Hexadecimal Mask Values and Binary Equivalents; Hexadecimal Value in an IPv6 Mask
6-7 IPv6 Management Security Features Authorized IP Managers for IPv6 Conversely, in a mask, a “0” binary bit means that either the “on” or “off” setting of the corresponding IPv6 bit in an authorized address is valid and does not have to match the setting of the same bit in the specified IPv6 addre...
Page 139 - in the fourth block of the IPv6
6-11 IPv6 Management Security Features Authorized IP Managers for IPv6 Figure 6-7 shows the bits in the fourth block of the mask that determine the valid subnets in which authorized stations with an IPv6 device ID of 244:17FF:FEB6:D37D reside. FFF8 in the fourth block of the mask means that bits 3 -...
Page 140 - Displaying an Authorized IP Managers Configuration; Use the; show ipv6 authorized-managers; command to list the IPv6 stations; Figure 6-9. Example of “show ipv6 authorized-managers” Output; Mask
6-12 IPv6 Management Security Features Authorized IP Managers for IPv6 Displaying an Authorized IP Managers Configuration Use the show ipv6 authorized-managers command to list the IPv6 stations authorized to access the switch; for example: Figure 6-9. Example of “show ipv6 authorized-managers” Outpu...
Page 141 - Authorizing Manager Access.
6-13 IPv6 Management Security Features Authorized IP Managers for IPv6 Additional Examples of Authorized IPv6 Managers Configuration Authorizing Manager Access. The following IPv6 commands authorize manager-level access for one link-local station at a time. Note that when you enter a link-local IPv6...
Page 142 - manager; Deleting an Authorized IP Manager Entry.
6-14 IPv6 Management Security Features Authorized IP Managers for IPv6 The next IPv6 command authorizes operator-level access for sixty-four IPv6 stations: thirty-two stations in the subnets defined by 0x0006 and 0x0007 in the fourth block of an authorized IPv6 address: ProCurve(config)# ipv6 author...
Page 143 - Secure Shell for IPv6; Client public-key authentication; Configuring SSH for IPv6; ip ssh; command to reconfigure
6-15 IPv6 Management Security Features Secure Shell for IPv6 Secure Shell for IPv6 The Secure Shell (SSH) for IPv6 feature provides the same Telnet-like func-tions through encrypted, authenticated transactions as SSH for IPv4. SSH for IPv6 provides CLI (console) access and secure file transfer funct...
Page 144 - ” chapter in the; no ip ssh
6-16 IPv6 Management Security Features Secure Shell for IPv6 N o t e As with IPv4, the switch only supports SSH version 2. You cannot set up an SSH session with a client device running SSH version 1. For complete information on how to configure SSH for encrypted, authenti-cated transactions between ...
Page 145 - Displaying an SSH Configuration; command. Information on all current SSH
6-17 IPv6 Management Security Features Secure Shell for IPv6 Displaying an SSH Configuration To verify an SSH for IPv6 configuration and display all SSH sessions running on the switch, enter the show ip ssh command. Information on all current SSH sessions (IPv4 and IPv6) is displayed. ProCurve(confi...
Page 146 - Secure Copy and Secure FTP for IPv6; create; “File Transfers”; no ip ssh filetransfer; command to disable the switch’s
6-18 IPv6 Management Security Features Secure Copy and Secure FTP for IPv6 Secure Copy and Secure FTP for IPv6 You can take advantage of the Secure Copy (SCP) and Secure FTP (SFTP) client applications to provide a secure alternative to TFTP for transferring sensitive switch information, such as conf...
Page 147 - Multicast Listener Discovery (MLD) Snooping; Overview
7-1 7 Multicast Listener Discovery (MLD) Snooping Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2 Introduction to MLD Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-3 Configuring MLD . . . ....
Page 149 - Introduction to MLD Snooping; MLD host
7-3 Multicast Listener Discovery (MLD) Snooping Introduction to MLD Snooping Introduction to MLD Snooping There are several roles that network devices may play in an IPv6 multicast environment: ■ MLD host — a network node that uses MLD to “join” (subscribe to) one or more multicast groups ■ multicas...
Page 150 - Multicast communication can take place without MLD,
7-4 Multicast Listener Discovery (MLD) Snooping Introduction to MLD Snooping General operation. Multicast communication can take place without MLD, and by default MLD is disabled. In that case, if a switch receives a packet with a multicast destination address, it floods the packet to all ports in t...
Page 151 - Forwarding in MLD snooping.; When MLD snooping is active, a multicast; Listeners and joins.; The “snooping” part of MLD snooping arises because
7-5 Multicast Listener Discovery (MLD) Snooping Introduction to MLD Snooping Note that MLD snooping operates on a single VLAN (though there can be multiple VLANs, each running MLD snooping). Cross-VLAN traffic is handled by a multicast router. Forwarding in MLD snooping. When MLD snooping is active,...
Page 152 - A node acting as an MLD host can be disconnected from a multicast
7-6 Multicast Listener Discovery (MLD) Snooping Introduction to MLD Snooping A network node establishes itself as an MLD host by issuing a multicast “join” request (also called a multicast “report”) for a specific multicast address when it starts an application that listens to multicast traffic. The...
Page 153 - Fast leaves and forced fast leaves.; The fast leave and forced fast leave
7-7 Multicast Listener Discovery (MLD) Snooping Introduction to MLD Snooping Fast leaves and forced fast leaves. The fast leave and forced fast leave functions can help to prune unnecessary multicast traffic when an MLD host issues a leave request from a multicast address. Fast leave is enabled by d...
Page 154 - Configuring MLD; Enabling or Disabling MLD Snooping on a VLAN; For example, to enable MLD snooping on VLAN 8:
7-8 Multicast Listener Discovery (MLD) Snooping Configuring MLD Configuring MLD Several CLI commands are available for configuring MLD parameters on a switch. Enabling or Disabling MLD Snooping on a VLAN For example, to enable MLD snooping on VLAN 8: ProCurve# config ProCurve(config)# vlan 8 ProCurv...
Page 155 - Configuring Per-Port MLD Traffic Filters; Figure 7-3. Example of an MLD Configuration with Traffic Filters
7-9 Multicast Listener Discovery (MLD) Snooping Configuring MLD Configuring Per-Port MLD Traffic Filters For example: Figure 7-3. Example of an MLD Configuration with Traffic Filters Syntax: ipv6 mld [auto <port-list> | blocked <port-list> | forward <port-list> ] Note: This command...
Page 156 - Configuring the Querier; For example, to disable the switch from acting as querier on VLAN 8:; Configuring Fast Leave
7-10 Multicast Listener Discovery (MLD) Snooping Configuring MLD Configuring the Querier For example, to disable the switch from acting as querier on VLAN 8: ProCurve(vlan-8)# no ipv6 mld querier To enable the switch to act as querier on VLAN 8: ProCurve(vlan-8)# ipv6 mld querier Configuring Fast Le...
Page 157 - For example, to disable fast leave on ports in VLAN 8:; Configuring Forced Fast Leave; For example, to enable forced fast leave on ports in VLAN 8:
7-11 Multicast Listener Discovery (MLD) Snooping Configuring MLD For example, to disable fast leave on ports in VLAN 8: ProCurve(vlan-8)# no ipv6 mld fastleave a14-a15 To enable fast leave on ports in VLAN 8: ProCurve(vlan-8)# ipv6 mld fastleave a14-a15 Configuring Forced Fast Leave For example, to ...
Page 158 - Current MLD Status; show ipv6 mld; — VLAN ID
7-12 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration Displaying MLD Status and Configuration Current MLD Status For example, a switch with MLD snooping configured on VLANs 8 and 9 might show the following information: Figure 7-4. Example of Displaying the MLD Conf...
Page 161 - Current MLD Configuration; Figure 7-6. Example of a Global MLD Configuration; show ipv6 mld config
7-15 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration Current MLD Configuration For example, the general form of the command might look like this: Figure 7-6. Example of a Global MLD Configuration The following information, for all MLD-enabled VLANs, is shown: ■ Co...
Page 162 - The specific form of the command might look like this:; Figure 7-7. Example of an MLD Configuration for a Specific VLAN; VLAN ID and name
7-16 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration The specific form of the command might look like this: Figure 7-7. Example of an MLD Configuration for a Specific VLAN The following information is shown, if the specified VLAN is MLD-enabled: ■ VLAN ID and name...
Page 163 - Ports Currently Joined
7-17 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration Ports Currently Joined For example, the general form of the command is shown below. The specific form the the command is similar, except that it lists the port information for only the specified group. Figure 7-...
Page 164 - auto; Statistics; show ipv6 mld statistics
7-18 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration The following information is shown: ■ VLAN ID and name ■ port information for each IPv6 multicast group address in the VLAN (general group command) or for the specified IPv6 multicast group address (specific gro...
Page 165 - For example, the general form of the command:; Figure 7-9. Example of MLD Statistics for All VLANs Configured; Figure 7-10. Example of MLD Statistics for a Single VLAN
7-19 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration For example, the general form of the command: Figure 7-9. Example of MLD Statistics for All VLANs Configured And the specific form of the command: Figure 7-10. Example of MLD Statistics for a Single VLAN ProCurv...
Page 166 - Counters; Figure 7-11. Example of MLD Counters for a Single VLAN; show ipv6 mld vlan
7-20 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration Counters Figure 7-11. Example of MLD Counters for a Single VLAN Syntax: show ipv6 mld vlan <vid> counters Displays MLD counters for the specified VLAN vid — VLAN ID ProCurve# show ipv6 mld vlan 8 counters ...
Page 167 - The following information is shown:
7-21 Multicast Listener Discovery (MLD) Snooping Displaying MLD Status and Configuration The following information is shown: ■ VLAN number and name ■ For each VLAN: • number of general queries received • number of general queries sent • number of group-specific queries received • number of group-spe...
Page 169 - IPv6 Diagnostic and Troubleshooting
8-1 8 IPv6 Diagnostic and Troubleshooting Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 ICMP Rate-Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2 Ping for IPv6 (Ping6) ....
Page 170 - neighbor solicitations
8-2 IPv6 Diagnostic and Troubleshooting Introduction Introduction The IPv6 ICMP feature enables control over the error and informational message rate for IPv6 traffic, which can help mitigate the effects of a Denial-of-service attack. Ping6 enables verification of access to a specific IPv6 device, a...
Page 171 - no ipv6 icmp error-interval
8-3 IPv6 Diagnostic and Troubleshooting ICMP Rate-Limiting Controlling the frequency of ICMPv6 error messages can help to prevent DoS (Denial- of- Service) attacks. With IPv6 enabled on the switch, you can control the allowable frequency of these messages with ICMPv6 rate-limiting. For example, the ...
Page 174 - Traceroute for IPv6; Management and Configura-
8-6 IPv6 Diagnostic and Troubleshooting Traceroute for IPv6 Traceroute for IPv6 The traceroute6 command enables you to trace the route from a switch to a host device that is identified by an IPv6 address or IPv6 host name. In the command output, information on each (router) hop between the switch an...
Page 175 - hostname
8-7 IPv6 Diagnostic and Troubleshooting Traceroute for IPv6 Syntax: traceroute6 < ipv6-address | hostname > [minttl < 1-255 > [maxttl < 1-255 > [timeout < 1 - 60 >] [probes < 1-5 >]traceroute6 < link-local-address %vlan< vid > | hostname > [minttl < 1-255...
Page 176 - Figure 8-2. Examples of IPv6 Traceroute Probes
8-8 IPv6 Diagnostic and Troubleshooting Traceroute for IPv6 Figure 8-2. Examples of IPv6 Traceroute Probes ProCurve# traceroute6 2001:db8::10 traceroute to 2001:db8::10 1 hop min, 30 hops max, 5 sec. timeout, 3 probes 1 2001:db8::a:1c:e3:3 0 ms 0 ms 0 ms 2 2001:db8:0:7::5 7 ms 3 ms 0 ms 3 2001:db8::...
Page 177 - DNS Resolver for IPv6; dual-stack operation: IPv6 and IPv4 DNS resolution; ping; DNS Configuration
8-9 IPv6 Diagnostic and Troubleshooting DNS Resolver for IPv6 DNS Resolver for IPv6 The Domain Name System (DNS) resolver is designed for local network domains where it enables use of a host name or fully qualified domain name to support DNS-compatible commands from the switch. Beginning with soft-w...
Page 178 - the address
8-10 IPv6 Diagnostic and Troubleshooting DNS Resolver for IPv6 For example, suppose you want to configure the following on the switch: ■ the address 2001:db8::127:10 which identifies a DNS server in the domain named mygroup.procurve.net ■ a priority of 1 for the above server ■ the domain suffix mygr...
Page 179 - Management and; Viewing the Current Configuration; show ip dns; command to view the current DNS server configuration.; command to view both the current DNS server addresses
8-11 IPv6 Diagnostic and Troubleshooting DNS Resolver for IPv6 been configured as the domain name on the switch and the address of a DNS server residing in that domain is also configured on the switch. The commands for these steps are as follows: Figure 8-1. Example of Configuring for a Local DNS Se...
Page 180 - Debug/Syslog for IPv6; Syslog; Configuring Debug and Event Log Messaging; debug
8-12 IPv6 Diagnostic and Troubleshooting Debug/Syslog for IPv6 Debug/Syslog for IPv6 The Debug/System logging ( Syslog ) for IPv6 feature provides the same logging functions as the IPv4 version, allowing you to record IPv4 and IPv6 Event Log and debug messages on a remote device to troubleshoot swit...
Page 181 - Debug Command; acl; log; all; logging; ip
8-13 IPv6 Diagnostic and Troubleshooting Debug/Syslog for IPv6 Debug Command Syntax: [no] debug < debug-type > Configures the types of IPv4 and IPv6 messages that are sent to Syslog servers or other debug destinations, where < debug-type > is any of the following event types: acl When a ...
Page 182 - lldp
8-14 IPv6 Diagnostic and Troubleshooting Debug/Syslog for IPv6 Syntax:. [no] debug < debug-type > (Continued) ip [ ospf < adj | event | flood | lsa-generation | packet | retransmission | spf > ] Configures specified IPv4 OSPF message types to be sent to configured debug destinations: adj...
Page 183 - Configuring Debug Destinations
8-15 IPv6 Diagnostic and Troubleshooting Debug/Syslog for IPv6 Configuring Debug Destinations A Debug/Syslog destination device can be a Syslog server (up to six maximum) and/or a console session: ■ Use the debug destination < logging | session | buffer > command to enable (and disable) Syslog...
Page 184 - Logging Command
8-16 IPv6 Diagnostic and Troubleshooting Debug/Syslog for IPv6 Logging Command For complete information on how to configure a Syslog server and Debug/Syslog message reports, refer to the “Troubleshooting” appendix in the Man- agement and Configuration Guide . Syntax: [no] logging < syslog-ipv4-ad...
Page 185 - Terminology; Router Advertisement. Refer to “Router Advertisements” on page 4-27.
1 A Terminology DAD Duplicate Address Detection. Refer to “Duplicate Address Detection (DAD)” on page 4-18. Device Identifier The low-order bits in an IPv6 address that identify a specific device. For example, in the link-local address 2001:db8:a10:101:212:79ff:fe88:a100/64, the bits forming 212:79f...
Page 187 - Index – 1; Index; Symbols
Index – 1 Index Symbols … 4-7, 4-13 %vlan suffix … 5-6, 5-10, 5-13 A ACL debug messages … 8-13 address configuration DNS for IPv6 … 2-14duplicate unicast addresses … 3-6duplicate unicast addresses on an interface … 2-9, 4-18 IPv6 anycast address … 2-9IPv6 configuration using web browser … 2-11IPv6 g...
Page 188 - – Index
2 – Index crash data file TFTP upload on remote device … 5-18 crash log TFTP upload on remote device … 5-18 D DAD configuration … 4-19detecting duplicate unicast addresses … 3-6, 4-18 detecting duplicate unicast addresses on an interface … 2-9, 4-5, 4-8, 4-10, 4-12, 4-16 not supported on anycast add...
Page 189 - Index – 3
Index – 3 G gateway determining default IPv6 route … 2-8, 4-29 global unicast address autoconfiguration … 3-5, 3-11, 3-16, 4-7autoconfigured is mutually exclusive with DHCP server-asigned address … 4-7 default prefix … 3-18deprecation … 3-16, 4-32device identifier … 3-18leading 2 in prefix … 3-12man...
Page 190 - – Index
4 – Index single IPv6 link-local address on an interface … 3-13 SNMP support … 2-15, 5-20SNTP See SNTP server. SSHv2 … 2-11 See also SSH. static address configuration … 4-11supported switches … 1-2switching IPv4 and IPv6 traffic on same VLAN … 2-3 switching IPv6 traffic on same VLAN … 2-3switching t...
Page 191 - Index – 5
Index – 5 See MLD. N neighbor cache, view … 5-3 neighbor discovery for IPv6 nodes … 2-14IPv6 similar to IPv4 ARP … 2-9, 4-17 neighbor solicitations used in duplicate address detection … 4-19 neighbor, clear cache … 5-2 notifications displaying configuration … 5-22supported in IPv6 … 5-20 NTP server ...
Page 192 - – Index
6 – Index configuring SNMPv3 management station … 5-21 displaying SNMPv3 management station configuration … 5-23 displaying trap configuration … 5-22features supported for IPv6 … 5-20IPv6 support … 2-15remote monitoring (RMON) … 5-20SNMPv1 and v2c traps … 5-20SNMPv2c informs … 5-20SNMPv3 notificatio...
Page 193 - Index – 7
Index – 7 displaying configuration … 5-22supported in IPv6 … 5-20 troubleshooting configuring Syslog servers … 8-15IPv6 addresses in event log … 2-14ping6 … 2-13traceroute6 … 2-13using CLI session … 8-15using ICMPv6 … 2-13using IPv6 loopback address … 2-15using SNMP for IPv6 … 2-15using Syslog serve...
