Page 3 - Contents
Contents 3 Contents Accessing the switch Introduction ........................................................................................................................................... 9 Additional references .....................................................................................
Page 9 - Introduction
Accessing the switch 9 Accessing the switch Introduction This guide will help you plan, implement, and administer the switch software for the HP 10Gb Ethernet BL-c Switch. Where possible, each section provides feature overviews, usage examples, and configuration instructions. • “Accessing the switch...
Page 10 - Additional references; Typographical conventions; Management Network
Accessing the switch 10 Additional references Additional information about installing and configuring the switch is available in the following guides, which are available at http://www.hp.com/go/bladesystem/documentation . • HP 10Gb Ethernet BL-c Switch User Guide • HP 10Gb Ethernet BL-c Switch Comm...
Page 11 - Connecting through the console port; Connecting through Telnet; Connecting through Secure Shell
Accessing the switch 11 ○ Untagged ○ Port VLAN ID (PVID): 4095 • VLAN 4095—Management VLAN 4095 isolates management traffic within the HP 10GbE switch. VLAN 4095 contains only one member port (port 17). No other ports can be members of VLAN 4095. • Interface 250—Management interface 250 is associate...
Page 12 - Using the command line interfaces; Configuring an IP interface
Accessing the switch 12 Using the command line interfaces The command line interface (CLI) can be accessed via local terminal connection or a remote session using Telnet or SSH. The CLI is the most direct method for collecting switch information and performing switch configuration. The HP 10GbE swit...
Page 13 - Using the Browser-based Interface
Accessing the switch 13 The following example shows how to manually configure an IP address on the switch: 1. Configure an IP interface for the Telnet connection, using the sample IP address of 205.21.17.3. 2. The pending subnet mask address and broadcast address are automatically calculated. >&g...
Page 14 - Using Simple Network Management Protocol; Default configuration
Accessing the switch 14 Using Simple Network Management Protocol The switch software provides SNMP v1.0 and SNMP v3.0 support for access through any network management software, such as HP-OpenView. SNMP v1.0 To access the SNMP agent on the switch, the read and write community strings on the SNMP ma...
Page 15 - User configuration
Accessing the switch 15 User configuration Users can be configured to use the authentication/privacy options. The HP 10GbE switch supports two authentication algorithms: MD5 and SHA, as specified in the following command: /cfg/sys/ssnmp/snmpv3/usm <x>/auth md5|sha 1. To configure a user with n...
Page 16 - View based configurations; CLI user equivalent
Accessing the switch 16 View based configurations CLI user equivalent To configure an SNMP user equivalent to the CLI user , use the following configuration: /c/sys/ssnmp/snmpv3/usm 4 name "usr" (Configure the user) /c/sys/ssnmp/snmpv3/access 3 name "usrgrp" (Configure access group 3...
Page 17 - CLI oper equivalent; Configuring SNMP trap hosts; SNMPv1 trap host
Accessing the switch 17 CLI oper equivalent To configure an SNMP user equivalent to the CLI oper , use the following configuration: /c/sys/ssnmp/snmpv3/usm 5 name "oper" (Configure the oper) /c/sys/ssnmp/snmpv3/access 4 name "opergrp" (Configure access group 4) rview "oper" w...
Page 19 - SNMPv2 trap host configuration; SNMPv3 trap host configuration
Accessing the switch 19 SNMPv2 trap host configuration The SNMPv2 trap host configuration is similar to the SNMPv1 trap host configuration. Wherever you specify the model, specify snmpv2 instead of snmpv1 . c/sys/ssnmp/snmpv3/usm 10 (Configure user named “v2trap”) name "v2trap" /c/sys/ssnmp/...
Page 20 - Secure access to the switch; Setting allowable source IP address ranges
Accessing the switch 20 The following example shows how to configure a SNMPv3 user v3trap with authentication only: /c/sys/ssnmp/snmpv3/usm 11 (Configure user named “v3trap”) name "v3trap" auth md5 authpw v3trap /c/sys/ssnmp/snmpv3/access 11 (Define access group to view SNMPv3 traps) name &#...
Page 21 - Configuring an IP address range for the management network; RADIUS authentication and authorization; How RADIUS authentication works
Accessing the switch 21 Configuring an IP address range for the management network Configure the management network IP address and mask from the System Menu in the CLI. For example: >> Main# /cfg/sys/access/mgmt/add Enter Management Network Address: 192.192.192.0 Enter Management Network Mask:...
Page 22 - Configuring RADIUS on the switch (CLI example)
Accessing the switch 22 Configuring RADIUS on the switch (CLI example) To configure RADIUS on the switch, do the following: 1. Turn RADIUS authentication on, and then configure the Primary and Secondary RADIUS servers. For example: >> Main# /cfg/sys/radius (Select the RADIUS Server menu) >&...
Page 23 - Configuring RADIUS on the switch (BBI example)
Accessing the switch 23 Configuring RADIUS on the switch (BBI example) 1. Configure RADIUS parameters. a. Click the Configure context button. b. Open the System folder, and select Radius. c. Enter the IP address of the primary and secondary RADIUS servers, and enter the RADIUS secret for each server...
Page 25 - RADIUS attributes for user privileges; TACACS+ authentication
Accessing the switch 25 Table 2 User access levels User account Description and tasks performed Administrator Administrators are the only ones that can make permanent changes to the switch configuration—changes that are persistent across a reboot/reset of the switch. Administrators can access switch...
Page 27 - Accounting
Accessing the switch 27 Alternate mapping between TACACS+ privilege levels and HP 10GbE switch management access levels is shown in the table below. Use the command /cfg/sys/tacacs/cmap ena to use the alternate TACACS+ privilege levels. Table 5 Alternate TACACS+ privilege levels User access level TA...
Page 30 - Secure Shell and Secure Copy
Accessing the switch 30 e. Configure custom privilege-level mapping (optional). Click Submit to accept each mapping change. 2. Apply, verify, and save the configuration. Secure Shell and Secure Copy Secure Shell (SSH) and Secure Copy (SCP) use secure tunnels to encrypt and secure messages between a ...
Page 31 - Configuring SSH and SCP features (CLI example)
Accessing the switch 31 The switch implementation of SSH is based on version 1.5 and version 2.0, and supports SSH clients from version 1.0 through version 2.0. Client software can use SSH version 1 or version 2. The following SSH clients are supported: • SSH 3.0.1 for Linux (freeware) • SecureCRT® ...
Page 32 - Using SSH and SCP client commands
Accessing the switch 32 Configuring the SCP administrator password To configure the scpadmin (SCP administrator) password, first connect to the switch via the RS-232 management console. For security reasons, the scpadmin password can be configured only when connected directly to the switch console. ...
Page 33 - SSH and SCP encryption of management messages
Accessing the switch 33 Applying and saving configuration Enter the apply and save commands after the command above ( scp ad4.cfg 205.178.15.157:putcfg ), or use the following commands. You will be prompted for a password. >> # scp <local_filename> <user>@<switch IP addr>:put...
Page 34 - SSH/SCP integration with RADIUS and TACACS+ authentication; User access control
Accessing the switch 34 A value of 0 denotes that RSA server key autogeneration is disabled. When greater than 0, the switch will auto generate the RSA server key every specified interval; however, RSA server key generation is skipped if the switch is busy doing other key or cipher generation when t...
Page 35 - Setting up user IDs
Accessing the switch 35 Setting up user IDs The administrator can configure up to 10 user accounts. To configure an end-user account, perform the following steps: 1. Select a user ID to define. >> # /cfg/sys/access/user/uid 1 2. Define the user name and password. >> User ID 1 # name jane...
Page 36 - Ports and trunking; Ports on the switch
Ports and trunking 36 Ports and trunking Introduction The first part of this chapter describes the different types of ports used on the switch. This information is useful in understanding other applications described in this guide, from the context of the embedded switch/server environment. For spec...
Page 37 - Port trunk groups; Statistical load distribution; Before you configure trunks
Ports and trunking 37 Table 7 Ethernet switch port names Port number Port alias 13 Downlink13 14 Downlink14 15 Downlink15 16 Downlink16 17 Mgmt 18 Uplink1 19 Uplink2 20 Uplink3 21 Uplink4 Port trunk groups When using port trunk groups between two switches, you can create an aggregate link operating ...
Page 38 - Trunk group configuration rules
Ports and trunking 38 1. Read the configuration rules provided in the “Trunk group configuration rules” section. 2. Determine which switch ports (up to six) are to become trunk members (the specific ports making up the trunk). 3. Ensure that the chosen switch ports are set to enabled, using the foll...
Page 39 - Port trunking example
Ports and trunking 39 Port trunking example In this example, the 10 Gigabit uplink ports on each switch are configured into a total of four trunk groups: two on each switch. NOTE: The actual mapping of switch ports to NIC interfaces is dependant on the operating system software, the type of server b...
Page 46 - Configuring LACP
Ports and trunking 46 Configuring LACP Use the following procedure to configure LACP for port 20 and port 21 to participate in link aggregation. 1. Set the LACP mode on port 20. >> # /cfg/l2/lacp/port 20 (Select port 20) >> LACP port 20# mode active (Set port 20 to LACP active mode) 2. D...
Page 47 - Port-based Network Access and traffic control; Port-based Network Access control; Extensible authentication protocol over LAN
Port-based Network Access and traffic control 47 Port-based Network Access and traffic control Port-based Network Access control Port-based Network Access control provides a means of authenticating and authorizing devices attached to a LAN port that has point-to-point connection characteristics. It ...
Page 48 - x authentication process; EAPoL Message Exchange
Port-based Network Access and traffic control 48 802.1x authentication process The clients and authenticators communicate using Extensible Authentication Protocol (EAP), which was originally designed to run over PPP, and for which the IEEE 802.1x Standard has defined an encapsulation method over Eth...
Page 50 - Supported RADIUS attributes
Port-based Network Access and traffic control 50 Supported RADIUS attributes The HP 10GbE switch 802.1x Authenticator relies on external RADIUS servers for authentication with EAP. The following table lists the RADIUS attributes that are supported as part of RADIUS-EAP authentication based on the gu...
Page 51 - EAPoL configuration guidelines; Port-based traffic control
Port-based Network Access and traffic control 51 EAPoL configuration guidelines When configuring EAPoL, consider the following guidelines: • The 802.1x port-based authentication is currently supported only in point-to-point configurations, that is, with a single supplicant connected to an 802.1x-ena...
Page 52 - Configuring port-based traffic control
Port-based Network Access and traffic control 52 Configuring port-based traffic control To configure a port for traffic control, perform the following steps: 1. Configure the traffic-control threshold and enable traffic control. Main# /cfg/port 2 >> Port 2# brate 150000 (Set broadcast threshol...
Page 53 - VLANs; Overview; VLAN numbers
VLANs 53 VLANs Introduction This chapter describes network design and topology considerations for using Virtual Local Area Networks (VLANs). VLANs are commonly used to split up groups of network users into manageable broadcast domains, to create logical segmentation of workgroups, and to enforce sec...
Page 54 - Viewing VLANs; PVID numbers; Port information
VLANs 54 Viewing VLANs The VLAN information menu ( /info/l2/vlan ) displays all configured VLANs and all member ports that have an active link state, for example: >> Layer 2# vlan VLAN Name Status Ports ---- -------------------------------- ------ ---------------------- 1 Default VLAN ena 1 4-...
Page 55 - VLAN tagging
VLANs 55 VLAN tagging The switch supports IEEE 802.1Q VLAN tagging, providing standards-based VLAN support for Ethernet systems. Tagging places the VLAN identifier in the frame header, allowing each port to belong to multiple VLANs. When you configure multiple VLANs on a port, you must also enable t...
Page 58 - VLANs and IP interfaces; VLAN topologies and design considerations
VLANs 58 Figure 7 802.1Q tagging (after 802.1Q tag assignment) NOTE: Using the /boot/conf factory command resets all ports to VLAN 1 (except management port 17) and all other settings to the factory defaults at the next reboot. VLANs and IP interfaces Carefully consider how you create VLANs within t...
Page 59 - VLAN configuration rules
VLANs 59 VLAN configuration rules VLANs operate according to specific configuration rules which must be considered when creating VLANs. For example: • HP recommends that all ports involved in trunking and Port Mirroring have the same VLAN configuration. If a port is on a trunk with a mirroring port,...
Page 60 - Multiple VLANS with tagging
VLANs 60 Multiple VLANS with tagging The following figure shows only those switch-port-to-server links that must be configured for the example. While not shown, all other server links remain set at their default settings. Figure 8 Multiple VLANs with VLAN tagging The features of this VLAN are descri...
Page 61 - Configuring the example network; Configuring ports and VLANs on Switch 1 (CLI example)
VLANs 61 Table 10 Multiple VLANs with tagging Component Description Blade Server #1 This high-use blade server needs to be accessed from all VLANs and IP subnets. The server has a VLAN-tagging adapter installed with VLAN tagging turned on. One adapter is attached to one of the switch's 10 Gbps ports...
Page 63 - Configuring ports and VLANs on Switch 2 (CLI example)
VLANs 63 Configuring ports and VLANs on Switch 2 (CLI example) To configure ports and VLANs on Switch 2, do the following: 1. On Switch 2, enable VLAN tagging on the necessary ports. Port 4 (connection to server 2) remains untagged, so it is not configured below. Main# /cfg/port 2 (Select port 2: co...
Page 64 - Configuring ports and VLANs on Switch 1 (BBI example)
VLANs 64 Configuring ports and VLANs on Switch 1 (BBI example) To configure ports and VLANs on Switch 1, do the following: 1. On the switch 1, enable VLAN tagging on the necessary ports. a. Click the Configure context button on the Toolbar. b. Open the Switch folder, and select Switch Ports (click t...
Page 66 - FDB static entries
VLANs 66 b. Enter the VLAN name, VLAN ID number, and enable the VLAN. To add ports, select each port in the Ports Available list and click Add. Since all ports are configured for VLAN 1 by default, configure only those ports that belong to VLAN 2. c. Click Submit. The external Layer 2 switches shoul...
Page 67 - Trunking support for FDB static entries; Configuring a static FDB entry
VLANs 67 FDB static entries are permanent, so the FDB Aging value does not apply to them. Static entries are manually added to the FDB, and manually deleted from the FDB. Incoming frames that contain the static entry as the source MAC can use only ports configured for the static entry. Trunking supp...
Page 68 - Spanning Tree Protocol
Spanning Tree Protocol 68 Spanning Tree Protocol Introduction When multiple paths exist on a network, Spanning Tree Protocol (STP) configures the network so that a switch uses only the most efficient path. The following topics are discussed in this chapter: • Overview • Bridge Protocol Data Units (B...
Page 69 - Determining the path for forwarding BPDUs; Bridge priority; Spanning Tree Group configuration guidelines; Default Spanning Tree configuration
Spanning Tree Protocol 69 Determining the path for forwarding BPDUs When determining which port to use for forwarding and which port to block, the switch uses information in the BPDU, including each bridge priority ID. A technique based on the lowest root cost is then computed to determine the most ...
Page 71 - Assigning cost to ports and trunk groups; Multiple Spanning Trees; Why do we need Multiple Spanning Trees?
Spanning Tree Protocol 71 The relationship between ports, trunk groups, VLANs, and spanning trees is shown in the following table. Table 11 Ports, trunk groups, and VLANs Switch element Belongs to Port Trunk group, or one or more VLANs Trunk group Only one VLAN VLAN (non-default) One Spanning Tree G...
Page 73 - Configuring Multiple Spanning Tree Groups
Spanning Tree Protocol 73 Configuring Multiple Spanning Tree Groups This section explains how to assign each VLAN to its own Spanning Tree Group on the switches 1 and 2. By default, Spanning Tree Groups 2-127 are empty, and Spanning Tree Group 1 contains all configured VLANs until individual VLANs a...
Page 76 - Port Fast Forwarding; Configuring Port Fast Forwarding; Fast Uplink Convergence; Configuration guidelines; Configuring Fast Uplink Convergence
Spanning Tree Protocol 76 Port Fast Forwarding Port Fast Forwarding permits a port that participates in Spanning Tree to bypass the Listening and Learning states and enter directly into the Forwarding state. While in the Forwarding state, the port listens to the BPDUs to learn if there is a loop and...
Page 77 - RSTP and MSTP; Port state changes
RSTP and MSTP 77 RSTP and MSTP Introduction Rapid Spanning Tree Protocol (IEEE 802.1w) enhances the Spanning Tree Protocol (IEEE 802.1d) to provide rapid convergence on Spanning Tree Group 1. Multiple Spanning Tree Protocol (IEEE 802.1s) extends the Rapid Spanning Tree Protocol to provide both rapid...
Page 78 - Port type and link type; Edge port; Link type; RSTP configuration guidelines; Configuring Rapid Spanning Tree (CLI example)
RSTP and MSTP 78 Port type and link type Spanning Tree Configuration includes the following parameters to support RSTP and MSTP: • Edge port • Link type Although these parameters are configured for Spanning Tree Groups 1-128 ( /cfg/l2/stp y/port x ), they only take effect when RSTP/MSTP is turned on...
Page 79 - Configuring Rapid Spanning Tree Protocol (BBI example)
RSTP and MSTP 79 Configuring Rapid Spanning Tree Protocol (BBI example) 1. Configure port and VLAN membership on the switch, as described in the “Configuring ports and VLANs (BBI example)” section in the “VLANs” chapter of this guide. 2. Configure RSTP general parameters. a. Click the Configure cont...
Page 80 - Multiple Spanning Tree Protocol; MSTP region; Common Internal Spanning Tree
RSTP and MSTP 80 3. Apply, verify, and save the configuration. Multiple Spanning Tree Protocol IEEE 802.1s Multiple Spanning Tree extends the IEEE 802.1w Rapid Spanning Tree Protocol through multiple Spanning Tree Groups. MSTP maintains up to 32 spanning-tree instances that correspond to STP Groups ...
Page 81 - Configuring Multiple Spanning Tree Protocol (CLI example)
RSTP and MSTP 81 MSTP configuration guidelines This section provides important information about configuring Multiple Spanning Tree Groups: • When you turn on MSTP, the switch automatically moves VLAN 1 to the Common Internal Spanning Tree (CIST). • Region Name and revision level must be configured....
Page 82 - Configuring Multiple Spanning Tree Protocol (BBI example)
RSTP and MSTP 82 Configuring Multiple Spanning Tree Protocol (BBI example) 1. Configure port and VLAN membership on the switch, as described in the “Configuring ports and VLANs (BBI example)” section in the “VLANs” chapter of this guide. 2. Configure MSTP general parameters. a. Click the Configure c...
Page 86 - Quality of Service
Quality of Service 86 Quality of Service Introduction Quality of Service features allow you to allocate network resources to mission-critical applications at the expense of applications that are less sensitive to such factors as time delays or network congestion. You can configure your network to pr...
Page 87 - Using ACL filters; Summary of packet classifiers
Quality of Service 87 The basic HP 10GbE switch QoS model works as follows: • Classify traffic: ○ Read 802.1p Priority. ○ Match ACL filter parameters. • Meter traffic: ○ Define bandwidth and burst parameters. ○ Select actions to perform on in-profile and out-of-profile traffic. • Perform actions: ○ ...
Page 89 - Summary of ACL actions; Understanding ACL precedence
Quality of Service 89 • Packet Format ○ Ethernet format (eth2, SNAP, LLC) ○ Ethernet tagging format • Egress port packets Note that the egress port ACL will not match a broadcast, multicast, unknown unicast, or Layer 3 packet. The egress port ACL will not match packets if the destination port is a t...
Page 90 - Using ACL Groups
Quality of Service 90 Using ACL Groups Access Control Lists (ACLs) allow you to classify packets according to a particular content in the packet header, such as the source address, destination address, source port number, destination port number, and others. Packet classifiers identify flows for mor...
Page 91 - ACL Metering and Re-marking; Metering; Viewing ACL statistics
Quality of Service 91 ACL Metering and Re-marking You can define a profile for the aggregate traffic flowing through the HP 10GbE switch, by configuring a QoS meter (if desired), and assigning ACL Groups to ports. When you add ACL Groups to a port, make sure they are ordered correctly in terms of pr...
Page 92 - ACL configuration examples; Configure Access Control Lists (CLI example)
Quality of Service 92 ACL configuration examples Configure Access Control Lists (CLI example) The following configuration examples illustrate how to use Access Control Lists (ACLs) to block traffic. These basic configurations illustrate common principles of ACL filtering. NOTE: Each ACL filters traf...
Page 93 - Configure Access Control Lists and Groups (BBI example 1)
Quality of Service 93 • Example 3 Use this configuration to block traffic from a source that is destined for a specific egress port. >> Main# /cfg/acl/acl 1 (Define ACL 1) >> ACL 1# ethernet/smac 00:21:00:00:00:00 ff:ff:ff:ff:ff:ff >> Filtering Ethernet# .. >> ACL 1# action d...
Page 97 - Using DSCP values to provide QoS; Differentiated Services concepts
Quality of Service 97 Using DSCP values to provide QoS The six most significant bits in the TOS byte of the IP header are defined as DiffServ Code Points (DSCP). Packets are marked with a certain value depending on the type of treatment the packet must receive in the network device. DSCP is a measur...
Page 98 - QoS levels; Using 802.1p priorities to provide QoS
Quality of Service 98 • Class Selector (CS)—This PHB has eight priority classes, with CS7 representing the highest priority, and CS0 representing the lowest priority, as shown below. CS PHB is described in RFC 2474. Table 18 Class selector priority classes Priority Class Selector DSCP Highest CS7 56...
Page 105 - Queuing and scheduling
Quality of Service 105 d. Enter a value for the weight of the Class of Service queue. e. Click Submit. 4. Apply, verify, and save the configuration. Queuing and scheduling The switch can be configured with either two or eight output Class of Service queues (COSq), into which each packet is placed. E...
Page 106 - Basic IP routing; IP routing benefits
Basic IP routing 106 Basic IP routing This chapter provides configuration background and examples for using the HP 10GbE switch to perform IP routing functions. The following topics are addressed in this chapter: • IP Routing Benefits • Routing Between IP Subnets • Example of Subnet Routing • Defini...
Page 109 - Example of subnet routing
Basic IP routing 109 Example of subnet routing Prior to configuring, you must be connected to the switch Command Line Interface (CLI) as the administrator. NOTE: For details about accessing and using any of the menu commands described in this example, see the HP 10Gb Ethernet BL-c Switch Command Ref...
Page 110 - Using VLANs to segregate broadcast domains
Basic IP routing 110 8. Configuring the default gateways allows the switch to send outbound traffic to the routers: >> IP Interface 5# ../gw 1 (Select primary default gateway) >> Default gateway 1# addr 205.21.17.1(Assign IP address) >> Default gateway 1# ena (Enable primary defaul...
Page 112 - Dynamic Host Configuration Protocol; DHCP relay agent
Basic IP routing 112 Dynamic Host Configuration Protocol Dynamic Host Configuration Protocol (DHCP) is a transport protocol that provides a framework for automatically assigning IP addresses and configuration information to other IP hosts or clients in a large TCP/IP network. Without DHCP, the IP ad...
Page 114 - Routing Information Protocol; Distance vector protocol
Routing Information Protocol 114 Routing Information Protocol In a routed environment, routers communicate with one another to keep track of available routes. Routers can learn about available routes dynamically, using the Routing Information Protocol (RIP). HP 10GbE switch software supports RIP ver...
Page 115 - RIPv2 in RIPv1 compatibility mode; RIP Features; Poison; Triggered updates
Routing Information Protocol 115 RIPv1 RIP version 1 use broadcast User Datagram Protocol (UDP) data packets for the regular routing updates. The main disadvantage is that the routing updates do not carry subnet mask information. Hence, the router cannot determine whether the route is a subnet route...
Page 116 - Multicast; Default; Metric; Authentication
Routing Information Protocol 116 Multicast RIPv2 messages use IP multicast address (224.0.0.9) for periodic broadcasts. Multicast RIPv2 announcements are not processed by RIPv1 routers. IGMP is not needed since these are inter-router messages which are not forwarded. To configure RIPv2 in RIPv1-comp...
Page 117 - RIP configuration example
Routing Information Protocol 117 RIP configuration example NOTE: An interface RIP disabled uses all the default values of the RIP, no matter how the RIP parameters are configured for that interface. RIP sends out RIP regular updates to include an Up interface, but not a Down interface. 1. Add VLANs ...
Page 118 - IGMP Snooping
IGMP Snooping 118 IGMP Snooping Introduction IGMP Snooping allows the switch to forward multicast traffic only to those ports that request it. IGMP Snooping prevents multicast traffic from being flooded to all data ports. The switch learns which server hosts are interested in receiving multicast tra...
Page 119 - IGMPv3; FastLeave
IGMP Snooping 119 • The host can send an IGMPv2 Leave report to the switch, which sends a proxy Leave report to the Mrouter. The multicast path is terminated immediately. A maximum of 8 VLANs can be configured for IGMP Snooping. The switch can learn up to 16 multicast routers, and supports up to 1,0...
Page 120 - IGMP Filtering; Configuring the range
IGMP Snooping 120 IGMP Filtering With IGMP Filtering, you can allow or deny a port to send and receive multicast traffic to certain multicast groups. Unauthorized users are restricted from streaming multicast traffic across the network. If access to a multicast group is denied, IGMP Membership Repor...
Page 121 - Static multicast router; Configuring IGMP Snooping (CLI example)
IGMP Snooping 121 Static multicast router A static multicast router (Mrouter) can be configured for a particular port on a particular VLAN. A static Mrouter does not have to be learned through IGMP Snooping. You can configure static Mrouters on any switch port except the management port 17. The swit...
Page 122 - Configuring IGMP Filtering (CLI example); Configuring a Static Mrouter (CLI example)
IGMP Snooping 122 Configuring IGMP Filtering (CLI example) 1. Enable IGMP Filtering on the switch. >> /cfg/l3/igmp/igmpflt (Select IGMP Filtering menu) >> IGMP Filter# ena (Enable IGMP Filtering) Current status: disabled New status: enabled 2. Define an IGMP Filter. >> //cfg/l3/igm...
Page 123 - Configuring IGMP Snooping (BBI example)
IGMP Snooping 123 Configuring IGMP Snooping (BBI example) 1. Configure port and VLAN membership on the switch, as described in the “Configuring ports and VLANs (BBI example)” section in the “VLANs” chapter. 2. Configure IGMP Snooping. a. Click the Configure context button. b. Open the IGMP folder, a...
Page 125 - Configuring IGMP Filtering (BBI example)
IGMP Snooping 125 Configuring IGMP Filtering (BBI example) 1. Configure IGMP Snooping. 2. Enable IGMP Filtering. a. Click the Configure context button. b. Open the IGMP folder, and select IGMP Filters (click the underlined text, not the folder). c. Enable IGMP Filtering globally. d. Click Submit.
Page 129 - Configuring a Static Multicast Router (BBI example)
IGMP Snooping 129 Configuring a Static Multicast Router (BBI example) 1. Configure Static Mrouter. a. Click the Configure context button. b. Open the Switch folder and select Layer 3 > IGMP > IGMP Static Mrouter > Add Mrouter. c. Enter a port number, VLAN ID number, and IGMP version number....
Page 131 - OSPF; OSPF overview; Types of OSPF areas
OSPF 131 OSPF The HP 10GbE switch software supports the Open Shortest Path First (OSPF) routing protocol. The switch implementation conforms to the OSPF version 2 specifications detailed in Internet RFC 1583. The following sections discuss OSPF support for the HP 10GbE switch: • OSPF Overview: This ...
Page 132 - Types of OSPF routing devices
OSPF 132 Figure 17 OSPF area types Types of OSPF routing devices As shown in the figure, OSPF uses the following types of routing devices: • Internal Router (IR)—a router that has all of its interfaces within the same area. IRs maintain LSDBs identical to those of other routing devices within the lo...
Page 133 - Neighbors and adjacencies; Shortest Path First Tree
OSPF 133 Neighbors and adjacencies In areas with two or more routing devices, neighbors and adjacencies are formed. Neighbors are routing devices that maintain information about each others’ health. To establish neighbor relationships, routing devices periodically send hello packets on each of their...
Page 134 - Internal versus external routing; OSPF implementation in HP 10GbE switch software; Configurable parameters
OSPF 134 Internal versus external routing To ensure effective processing of network traffic, every routing device on your network needs to know how to send a packet (directly or indirectly) to any other location/destination in your network. This is referred to as internal routing and can be done wit...
Page 135 - Defining areas; Assigning the area index
OSPF 135 • Stub area metric—A stub area can be configured to send a numeric metric value such that all routes received via that stub area carry the configured metric to potentially influence routing decisions. • Default routes—Default routes with weight metrics can be manually injected into transit ...
Page 136 - Using the area ID to assign the OSPF area number; Attaching an area to a network; Interface cost
OSPF 136 Using the area ID to assign the OSPF area number The OSPF area number is defined in the areaid <IP address> option. The octet format is used in order to be compatible with two different systems of notation used by other OSPF network vendors. There are two valid ways to designate an ar...
Page 137 - Default routes
OSPF 137 Electing the designated router and backup In any area with more than two routing devices, a Designated Router (DR) is elected as the central contact for database exchanges among neighbors, and a Backup Designated Router (BDR) is elected in case the DR fails. DR and BDR elections are made th...
Page 138 - Virtual links; Router ID
OSPF 138 In more complex OSPF areas with multiple ABRs or ASBRs (such as area 0 and area 2 in the figure), there are multiple routes leading from the area. In such areas, traffic for unrecognized destinations cannot tell which route leads upstream without further configuration. To resolve the situat...
Page 140 - Host routes for load balancing
OSPF 140 Use the following commands to configure MD5 authentication on the switches shown in the figure: 1. Enable OSPF MD5 authentication for Area 0 on switches 1, 2, and 3 >> # /cfg/l3/ospf/aindex 0/auth md5 2. Configure MD5 key ID for Area 0 on switches 1, 2, and 3. >> # /cfg/l3/ospf/...
Page 141 - OSPF features not supported in this release; OSPF configuration examples
OSPF 141 OSPF features not supported in this release The following OSPF features are not supported in this release: • Summarizing external routes • Filtering OSPF routes • Using OSPF to forward multicast routes • Configuring OSPF on non-broadcast multi-access networks (such as frame relay, X.25, and...
Page 150 - Example 2: Virtual links; Configuring OSPF for a virtual link on Switch A
OSPF 150 Example 2: Virtual links In the example shown in the following figure, area 2 is not physically connected to the backbone as is usually required. Instead, area 2 will be connected to the backbone via a virtual link through area 1. The virtual link must be configured at each endpoint. Figure...
Page 151 - Configuring OSPF for a virtual link on Switch B
OSPF 151 8. Attach the network interface to the backbone. >> OSPF Area (index) 1 # ../if 1 (Select OSPF menu for IP interface 1) >> OSPF Interface 1 # aindex 0 (Attach network to backbone index) >> OSPF Interface 1 # enable (Enable the backbone interface) 9. Attach the network inte...
Page 152 - Other Virtual Link Options; Example 3: Summarizing routes
OSPF 152 8. Define the transit area. >> OSPF Area (index) 0 # ../aindex 1 (Select menu for area index 1) >> OSPF Area (index) 1 # areaid 0.0.0.1(Set the area ID for OSPF area 1) >> OSPF Area (index) 1 # type transit (Define area as transit type) >> OSPF Area (index) 1 # enabl...
Page 154 - Verifying OSPF configuration
OSPF 154 7. Configure route summarization by specifying the starting address and mask of the range of addresses to be summarized. >> OSPF Interface 2 # ../range 1 (Select menu for summary range) >> OSPF Summary Range 1 # addr 36.128.192.0 (Set base IP address of summary range) >> O...
Page 155 - Remote monitoring; RMON group 1—statistics
Remote monitoring 155 Remote monitoring Introduction Remote Monitoring (RMON) allows network devices to exchange network monitoring data. RMON performs the following major functions: • Gathers cumulative statistics for Ethernet interfaces • Tracks a history of statistics for Ethernet interfaces • Cr...
Page 156 - Configuring RMON Statistics (CLI example); Configuring RMON Statistics (BBI example)
Remote monitoring 156 Configuring RMON Statistics (CLI example) 1. Enable RMON on each port where you wish to collect RMON statistics. >> /cfg/port 20/rmon (Select Port 20 RMON) >> Port 20 RMON# ena (Enable RMON) >> Port 20 RMON# apply (Make your changes active) >> Port 20 RM...
Page 158 - RMON group 2—history
Remote monitoring 158 3. Enable RMON on the port. 4. Click Submit. 5. Apply, verify, and save the configuration. RMON group 2—history The RMON History group allows you to sample and archive Ethernet statistics for a specific interface during a specific time interval. NOTE: RMON port statistics must ...
Page 159 - History MIB objects
Remote monitoring 159 Requested buckets ( /cfg/rmon/hist x/rbnum ) are the number of buckets, or data slots, requested by the user for each History Group. Granted buckets ( /info/rmon/hist x/gbnum ) are the number of buckets granted by the system, based on the amount of system memory available. The ...
Page 161 - RMON group 3—alarms; Alarm MIB objects
Remote monitoring 161 RMON group 3—alarms The RMON Alarm group allows you to define a set of thresholds used to determine network performance. When a configured threshold is crossed, an alarm is generated. For example, you can configure the switch to issue an alarm if more than 1,000 CRC errors occu...
Page 165 - RMON group 9—events
Remote monitoring 165 3. Apply, verify, and save the configuration. RMON group 9—events The RMON Event group allows you to define events that are triggered by alarms. An event can be a log message, an SNMP trap message, or both. When an alarm is generated, it triggers a corresponding event notificat...
Page 167 - High availability; Uplink Failure Detection
High availability 167 High availability Introduction Switches support high availability network topologies. This release provides information about Uplink Failure Detection and Virtual Router Redundancy Protocol (VRRP). Uplink Failure Detection Uplink Failure Detection (UFD) is designed to support N...
Page 168 - Failure Detection Pair; Spanning Tree Protocol with UFD
High availability 168 Figure 24 Uplink Failure Detection for switches Failure Detection Pair To use UFD, you must configure a Failure Detection Pair and then turn UFD on. A Failure Detection Pair consists of the following groups of ports: • Link to Monitor (LtM) The Link to Monitor group consists of...
Page 169 - Monitoring Uplink Failure Detection; Configuring Uplink Failure Detection
High availability 169 Configuration guidelines This section provides important information about configuring UFD: • UFD is required only when uplink-path redundancy is not available on the blade switches. • Only one Failure Detection pair (one group of Links to Monitor and one group of Links to Disa...
Page 170 - Configuring UFD on Switch 1 (CLI example)
High availability 170 Configuring UFD on Switch 1 (CLI example) 1. Assign uplink ports (18-21) to be monitored for communication failure. >> Main# /cfg/ufd/fdp ena (Enable Failure Detection Pair) >> FDP# ltm (Select Link to Monitor menu) >> Failure Link to Monitor# addport 19 (Moni...
Page 171 - Configuring Uplink Failure Detection (BBI example)
High availability 171 Configuring Uplink Failure Detection (BBI example) 1. Configure Uplink Failure Detection. a. Click the Configure context button. b. Open the Switch folder, and select Uplink Failure Detection (click the underlined text, not the folder). c. Turn Uplink Failure Detection on, and ...
Page 173 - VRRP overview; VRRP components; Virtual router
High availability 173 VRRP overview In a high-availability network topology, no device can create a single point-of-failure for the network or force a single point-of-failure to any other part of the network. This means that your network will remain in service despite the failure of any single devic...
Page 174 - Master and backup virtual router; Virtual Interface Router; VRRP operation; Selecting the master VRRP router
High availability 174 Master and backup virtual router Within each virtual router, one VRRP router is selected to be the virtual router master. See “Selecting the Master VRRP Router” for an explanation of the selection process. NOTE: If the IP address owner is available, it will always become the vi...
Page 175 - Failover methods; Active-Active redundancy
High availability 175 A backup router can stop receiving advertisements for one of two reasons—the master can be down, or all communications links between the master and the backup can be down. If the master has failed, it is clearly desirable for the backup (or one of the backups, if there is more ...
Page 176 - HP 10GbE switch extensions to VRRP; Tracking VRRP router priority
High availability 176 Figure 26 Active-Active redundancy HP 10GbE switch extensions to VRRP This section describes VRRP enhancements that are implemented in switch software: Tracking VRRP router priority The HP 10GbE switch software supports a tracking function that dynamically modifies the priority...
Page 177 - Virtual router deployment considerations; Assigning VRRP virtual router ID
High availability 177 Virtual router deployment considerations Review the following issues described in this section to prevent network problems when deploying virtual routers: • Assigning VRRP Virtual Router ID • Configuring the Switch for Tracking Assigning VRRP virtual router ID During the softwa...
Page 178 - High availability configurations; Active-Active configuration; Task 1: Configure Switch A
High availability 178 High availability configurations The HP 10GbE switches offer flexibility in implementing redundant configurations. This section discusses the Active-Active configuration. Active-Active configuration The following figure shows an example configuration, where two switches are use...
Page 180 - Task 2: Configure Switch B
High availability 180 Task 2: Configure Switch B 1. Configure ports. /cfg/l2/vlan 10 (Select VLAN 10) >> VLAN 10# ena (Enable VLAN 10) >> VLAN 10# add 20 (Add port 20 to VLAN 10) >> VLAN 10# .. >> Layer 2# vlan 20 (Select VLAN 20) >> VLAN 20# ena (Enable VLAN 20) >&g...
Page 191 - Troubleshooting tools; Port Mirroring
Troubleshooting tools 191 Troubleshooting tools Introduction This appendix discusses some tools to help you use the Port Mirroring feature to troubleshoot common network problems on the switch. Port Mirroring The Port Mirroring feature on the switch is very useful for troubleshooting any connection-...
Page 192 - Configuring Port Mirroring (CLI example)
Troubleshooting tools 192 Ingress traffic is duplicated and sent to the mirrored port before processing, and egress traffic is duplicated and sent to the mirrored port after processing. Configuring Port Mirroring (CLI example) To configure Port Mirroring for the example shown in the preceding figure...
Page 193 - Configuring Port Mirroring (BBI example)
Troubleshooting tools 193 Configuring Port Mirroring (BBI example) 1. Configure Port Mirroring. a. Click the Configure context button. b. Open the Switch folder, and select Port-Based Port Mirroring (click the underlined text, not the folder). c. Click a port number to select a monitoring port.
Page 195 - Other network troubleshooting techniques; Console and Syslog messages; Ping; Trace route; Customer support tools
Troubleshooting tools 195 Other network troubleshooting techniques Other network troubleshooting techniques include the following. Console and Syslog messages When a switch experiences a problem, review the console and Syslog messages. The switch displays these informative messages when state change...
Page 197 - Index
Index 197 Index 8 802.1x port states, 49 A accessing the switch: defining source IP addresses, 20; RADIUS authentication, 21; security, 20; using the command line interface (CLI), 12 ACL Blocks and Groups, 90 ACL configuration examples, 92 ACL filters, 87 active-active redundancy, 175 allowable sour...
