HP Switch

HP ProCurve Switch Software
Management and Configuration Guide

2610 Switches
Software version R.11.40
September 2009
ProCurve
Switch2610Series
Switch2610-PWRSeries
September 2009
ManagementandConfiguration
Guide
Copyright2008Hewlett-PackardDevelopmentCompany,L.P.
Theinformationcontainedhereinissubjecttochangewithout
notice.
PublicationNumber
5991-8640
September2009
ApplicableProducts
ProCurveSwitch2610-24 (J9085A)
ProCurveSwitch2610-48 (J9088A)
ProCurveSwitch2610-24-PWR (J9087A)
ProCurveSwitch2610-48-PWR (J9089A)
ProCurveSwitch2610-24/12-PWR (J9086A)
TrademarkCredits
Microsoft,Windows,andWindowsNTareUSregistered
trademarksofMicrosoftCorporation.
Disclaimer
HEWLETT-PACKARDCOMPANYMAKESNOWARRANTY
OFANYKINDWITHREGARDTOTHISMATERIAL,
INCLUDING,BUTNOTLIMITEDTO,THEIMPLIED
WARRANTIESOFMERCHANTABILITYANDFITNESS
FORAPARTICULARPURPOSE.Hewlett-Packardshallnot
beliableforerrorscontainedhereinorforincidentalor
consequentialdamagesinconnectionwiththefurnishing,
performance,oruseofthismaterial.
TheonlywarrantiesforHPproductsandservicesareset
forthintheexpresswarrantystatementsaccompanying
suchproductsandservices.Nothinghereinshouldbe
construedasconstitutinganadditionalwarranty.HPshall
notbeliablefortechnicaloreditorialerrorsoromissions
containedherein.
Hewlett-Packardassumesnoresponsibilityfortheuseor
reliabilityofitssoftwareonequipmentthatisnotfurnished
byHewlett-Packard.
Warranty
SeetheCustomerSupport/Warrantybookletincludedwith
theproduct.
Acopyofthespecificwarrantytermsapplicabletoyour
Hewlett-Packardproductsandreplacementpartscanbe
obtainedfromyourHPSalesandServiceOfficeor
authorizeddealer.
Hewlett-PackardCompany
8000FoothillsBoulevard,m/s5551
Roseville,California95747-5551
http://www.procurve.com
Contents
ProductDocumentation
PrintedPublications ................ ........................ xvii
ElectronicPublications ..................................... xvii
SoftwareFeatureIndex ......................................... xviii
1 GettingStarted
Contents....................................................... 1-1
Introduction ................................................... 1-2
Conventions ................................................... 1-2
FeatureDescriptionsbyModel ................................ 1-2
CommandSyntaxStatements ................................. 1-2
CommandPrompts .......................................... 1-3
ScreenSimulations.......................................... 1-3
PortIdentityExamples.............. ......................... 1-4
SourcesforMore Information .................................... 1-4
NeedOnlyaQuickStart? ........................................ 1-6
IPAddressing ............................................... 1-6
ToSetUp andInstalltheSwitch inYour Network ................ 1-6
2 SelectingaManagementInterface
Contents....................................................... 2-1
Overview ...................................................... 2-2
AdvantagesofUsingtheMenuInterface............................ 2-3
AdvantagesofUsingtheCLI ...................................... 2-4
AdvantagesofUsingtheWebBrowserInterface..................... 2-5
AdvantagesofUsingProCurveManagerorProCurveManagerPlus.... 2-6
CustomLoginBannersfortheConsole
andWebBrowserInterfaces ...................................... 2-8
iii
BannerOperationwithTelnet,Serial,orSSHv2Access........... 2-8
BannerOperationwith WebBrowserAccess .................... 2-8
ConfiguringandDisplayingaNon-DefaultBanner................ 2-9
ExampleofConfiguringandDisplayingaBanner ............... 2-10
OperatingNotes............................................ 2-12
3 UsingtheMenuInterface
Contents....................................................... 3-1
Overview ...................................................... 3-2
StartingandEndingaMenuSession....... ........................ 3-3
HowToStartaMenuInterfaceSession .... ..................... 3-4
HowToEndaMenuSessionandExitfromtheConsole: .......... 3-5
MainMenuFeatures............................................. 3-7
ScreenStructureandNavigation .................................. 3-9
RebootingtheSwitch ........................................... 3-12
MenuFeaturesList ............................................. 3-14
WhereToGoFromHere ........................................ 3-15
4 UsingtheCommandLineInterface(CLI)
Contents....................................................... 4-1
Overview ...................................................... 4-2
AccessingtheCLI ............................................... 4-2
UsingtheCLI................................................... 4-2
PrivilegeLevelsatLogon ..................................... 4-3
PrivilegeLevelOperation ..................................... 4-4
OperatorPrivileges ...................................... 4-4
ManagerPrivileges....................................... 4-5
HowToMoveBetweenLevels ................................ 4-7
ListingCommandsandCommandOptions ...................... 4-8
ListingCommandsAvailableatAnyPrivilegeLevel ........... 4-8
CommandOptionDisplays ............................... 4-10
DisplayingCLI"Help" ....................................... 4-11
iv
ConfigurationCommandsandtheContextConfigurationModes .. 4-13
CLIControlandEditing......................................... 4-16
5 UsingtheWebBrowserInterface
Contents....................................................... 5-1
Overview ...................................................... 5-2
GeneralFeatures ............................................... 5-3
StartingaWebBrowserInterfaceSessionwiththeSwitch............ 5-4
UsingaStandaloneWebBrowserinaPCorUNIXWorkstation .... 5-4
UsingProCurveManager(PCM)orProCurveManagerPlus(PCM+)5-5
TasksforYourFirstWebBrowserInterfaceSession ................. 5-7
ViewingtheFirstTime Install Window ........................ 5-7
CreatingUsernamesandPasswordsintheBrowserInterface ...... 5-8
UsingthePasswords .................................... 5-10
UsingtheUserNames ................................... 5-10
IfYouLoseaPassword .................................. 5-10
OnlineHelpfortheWebBrowserInterface .................... 5-11
Support/MgmtURLsFeature .................................... 5-12
SupportURL .............................................. 5-13
StatusReportingFeatures ....................................... 5-14
TheOverviewWindow ............... ....................... 5-14
ThePort Utilization andStatusDisplays ....................... 5-15
PortUtilization ......................................... 5-15
PortStatus............................................. 5-17
TheAlertLog .............................................. 5-18
SortingtheAlertLogEntries ............................. 5-18
AlertTypesandDetailedViews ........................... 5-19
TheStatusBar ............................................. 5-20
SettingFaultDetectionPolicy ................................ 5-21
v
6 SwitchMemoryandConfiguration
Contents....................................................... 6-1
UsingtheMenuandWebBrowserInterfacesToImplement
ViewingtheStartup-ConfigFileStatuswithMultiple
UsingtheClear+ResetButtonCombinationToReset
Overview ...................................................... 6-3
OverviewofConfigurationFileManagement ........................ 6-3
UsingtheCLIToImplementConfigurationChanges ................. 6-6
ConfigurationChanges .......................................... 6-9
ConfigurationChangesUsingtheMenuInterface ................ 6-9
UsingSaveandCancelintheMenuInterface ............... 6-10
RebootingfromtheMenuInterface ....................... 6-11
ConfigurationChangesUsingtheWebBrowserInterface ........ 6-12
UsingPrimaryandSecondaryFlashImageOptions................. 6-13
DisplayingtheCurrentFlashImageData ...................... 6-13
SwitchSoftwareDownloads................................. 6-15
LocalSwitchSoftwareReplacementandRemoval .............. 6-16
RebootingtheSwitch .. ... .................................. 6-18
OperatingNotes............................................ 6-22
MultipleConfigurationFiles ..................................... 6-23
GeneralOperation . ......................................... 6-24
ListingandDisplayingStartup-ConfigFiles..................... 6-26
ConfigurationEnabled .................................. 6-26
DisplayingtheContentofASpecificStartup-ConfigFile...... 6-27
ChangingorOverridingtheRebootConfigurationPolicy ......... 6-27
ManagingStartup-Config FilesintheSwitch ................... 6-30
RenaminganExistingStartup-ConfigFile .................. 6-30
CreatingaNewStartup-ConfigFile ........................ 6-30
ErasingaStartup-ConfigFile ............................. 6-33
theSwitch to ItsDefaultConfiguration .................... 6-34
vi
TransferringStartup-ConfigFilesToorFromaRemoteServer.... 6-35
Xmodem:CopyingaConfigurationFiletoa
Xmodem:CopyingaConfigurationfromaSerially
TFTP:CopyingaConfigurationFiletoaRemoteHost........ 6-35
TFTP:CopyingaConfigurationFilefromaRemoteHost ..... 6-36
SeriallyConnectedHost ................................. 6-36
ConnectedHost ........................................ 6-37
AutomaticConfigurationUpdatewithDHCPOption66.............. 6-37
CLICommand ............................................. 6-37
PossibleScenariosforUpdatingtheConfigurationFile .......... 6-38
OperatingNotes............................................ 6-39
LogMessages .............................................. 6-39
7 InterfaceAccessandSystemInformation
Contents....................................................... 7-1
Overview ...................................................... 7-2
InterfaceAccess:Console/SerialLink,Web,andTelnet ............... 7-3
Menu:Modifying the InterfaceAccess .......................... 7-4
CLI:ModifyingtheInterface Access ............................ 7-5
DenyingInterfaceAccessby
TerminatingRemote ManagementSessions ......................... 7-9
SystemInformation ............................................ 7-10
Menu:ViewingandConfiguringSystemInformation............. 7-11
CLI:ViewingandConfiguringSystemInformation .............. 7-12
Web:ConfiguringSystemParameters ......................... 7-15
8 ConfiguringIPAddressing
Contents....................................................... 8-1
Overview ...................................................... 8-2
IPConfiguration ................................................ 8-3
JustWantaQuickStartwith IPAddressing? .................... 8-4
IPAddressingwithMultipleVLANs............................ 8-4
IPAddressinginaStackingEnvironment ....................... 8-5
Menu:ConfiguringIPAddress,Gateway,andTime-To-Live(TTL) .. 8-5
vii
CLI:ConfiguringIPAddress,Gateway,andTime-To-Live(TTL) .... 8-7
Web:ConfiguringIPAddressing .............................. 8-11
HowIPAddressingAffectsSwitch Operation................... 8-11
DHCP/BootpOperation.................................. 8-12
NetworkPreparationsforConfiguringDHCP/Bootp ......... 8-15
IPPreserve:RetainingVLAN-1IPAddressingAcross
ConfigurationFileDownloads................................... 8-16
OperatingRulesforIPPreserve .............................. 8-16
9 TimeProtocols
Contents....................................................... 9-1
Overview:SelectingaTime
SynchronizationProtocolorTurningOff
Overview ...................................................... 9-2
TimePTimeSynchronization ... ............................... 9-2
SNTPTimeSynchronization .................................. 9-2
TimeProtocolOperation ......................................... 9-3
GeneralStepsforRunningaTimeProtocolontheSwitch ......... 9-3
DisablingTimeSynchronization ............................... 9-4
SNTP:Viewing,Selecting,andConfiguring ......................... 9-4
Menu:ViewingandConfiguringSNTP . . ... ..................... 9-5
CLI:ViewingandConfiguringSNTP ... . ... ..................... 9-8
ViewingtheCurrentSNTPConfiguration.................... 9-8
Configuring(EnablingorDisabling)theSNTPMode .......... 9-9
TimeP:Viewing,Selecting,andConfiguring ........................ 9-14
Menu:ViewingandConfiguringTimeP . ... .................... 9-15
CLI:ViewingandConfiguringTimeP .. . ....................... 9-16
ViewingtheCurrentTimePConfiguration .................. 9-17
Configuring(EnablingorDisabling)theTimePMode ........ 9-18
SNTPUnicastTimePollingwithMultipleSNTPServers............. 9-21
AddressPrioritization ............... ........................ 9-21
Addingand DeletingSNTPServerAddresses ................... 9-22
viii
MenuInterfaceOperationwithMultipleSNTPServerAddresses
Configured................................................ 9-23
SNTPMessagesintheEventLog ................................. 9-23
10 PortStatusandBasicConfiguration
Contents...................................................... 10-1
Overview ..................................................... 10-3
ViewingPortStatusandConfiguringPortParameters ............... 10-3
Menu:ViewingPortStatusandConfiguringPortParameters ..... 10-6
CLI:ViewingPortStatusandConfiguringPortParameters ....... 10-8
UsingtheCLIToViewPortStatus ........................ 10-8
DisplayingSpanningTreeConfigurationDetails ............ 10-10
DisplayingLoopProtectionStatus ....................... 10-10
UsingtheCLIToConfigurePorts ........................ 10-11
UsingtheCLIToConfigureaBroadcastLimit.............. 10-12
ConfiguringAuto-MDIX................................. 10-13
ManualAuto-MDIXOverride ............................ 10-14
ViewingTransceiverStatus ............................. 10-16
Web:ViewingPortStatusandConfiguringPortParameters ..... 10-18
JumboFrames................................................ 10-18
Terminology .............................................. 10-19
OperatingRules ........................................... 10-19
ConfiguringJumboFrameOperation ......................... 10-20
Overview ............................................. 10-20
ViewingtheCurrentJumboConfiguration ................. 10-21
EnablingorDisablingJumboTrafficonaVLAN ............ 10-23
OperatingNotesforJumboTraffic-Handling .................. 10-23
Troubleshooting .......................................... 10-25
QoSPassthroughMode ........................................ 10-26
GeneralOperation..................................... 10-26
PriorityMappingWithandWithoutQoSPassthroughMode .. 10-27
HowtoEnableorDisableQoSPassthroughMode .......... 10-27
ConfiguringPort-BasedPriorityforIncomingPackets.............. 10-29
TheRoleof802.1QVLANTagging ........................... 10-29
ix
11
OutboundPortQueuesandPacketPrioritySettings ............ 10-30
OperatingRulesforPort-BasedPriority ...................... 10-31
ConfiguringandViewingPort-BasedPriority .................. 10-32
MessagesRelatedtoPrioritization........................... 10-33
TroubleshootingPrioritization .............................. 10-33
UsingFriendly(Optional)PortNames ........................... 10-34
ConfiguringandOperatingRulesforFriendlyPortNames....... 10-34
ConfiguringFriendlyPortNames ............................ 10-35
DisplayingFriendlyPortNameswithOtherPortData .......... 10-36
ConfiguringTransceiversandModulesThatHavent
BeenInserted ............................................. 10-39
Uni-DirectionalLink Detection(UDLD).......................... 10-40
ConfiguringUDLD......................................... 10-41
EnablingUDLD........................................ 10-42
ChangingtheKeepaliveInterval ......................... 10-43
ChangingtheKeepaliveRetries .......................... 10-43
ConfiguringUDLDforTaggedPorts ...................... 10-43
ViewingUDLDInformation ................................. 10-44
ConfigurationWarningsandEventLogMessages .............. 10-47
PowerOverEthernet(PoE)Operation
Contents...................................................... 11-1
Overview ..................................................... 11-2
ConfigurationOptions ...................................... 11-2
RelatedPublications ........................................ 11-3
Terminology ............................................... 11-3
PowerAvailability andProvisioning ...... ........................ 11-4
PoweredDevice(PD)Support ............................... 11-4
PowerPriority............................................. 11-5
ConfiguringPoEOperation ...................................... 11-7
CyclingPoweronaPort ..................................... 11-8
PoEforPre-802.3af-standardPDs............................. 11-9
ViewingPoEConfigurationandStatus........................... 11-11
DisplayingtheSwitchsGlobalPoEPowerStatus .............. 11-11
x
DisplayinganOverviewofPoEStatusonAllPorts ............. 11-12
DisplayingthePoEStatusonSpecificPorts ................... 11-13
PlanningandImplementingaPoEConfiguration .................. 11-14
AssigningPoEPortstoVLANs .............................. 11-14
ApplyingSecurityFeaturestoPoEConfigurations ............. 11-14
PoEEventLogMessages....................................... 11-15
12 PortTrunking
Contents...................................................... 12-1
Overview ..................................................... 12-2
PortStatusandConfiguration . .................................. 12-2
PortConnectionsandConfiguration .......................... 12-3
LinkConnections ....................................... 12-3
PortTrunkOptionsandOperation ............................ 12-3
TrunkConfigurationMethods .. .............................. 12-4
Menu:ViewingandConfiguringaStaticTrunkGroup............ 12-8
CLI:ViewingandConfiguringaStaticorDynamic
PortTrunkGroup ......................................... 12-10
UsingtheCLIToViewPortTrunks ....................... 12-10
UsingtheCLIToConfigureaStaticorDynamicTrunkGroup 12-12
Web:ViewingExisting PortTrunkGroups .................... 12-15
TrunkGroupOperationUsingLACP ......................... 12-15
DefaultPortOperation ................................. 12-18
LACPNotesandRestrictions ............................ 12-19
TrunkGroupOperationUsingtheTrunkOption.............. 12-21
HowtheSwitchListsTrunkData ............................ 12-21
OutboundTrafficDistributionAcrossTrunkedLinks ........... 12-22
13 ConfiguringforNetworkManagementApplications
Contents...................................................... 13-1
UsingSNMPToolsToManagetheSwitch ......................... 13-3
Overview.................................................. 13-3
SNMPManagementFeatures................................. 13-4
ConfiguringforSNMP Accessto theSwitch .................... 13-4
xi
ConfiguringforSNMPVersion3AccesstotheSwitch ........... 13-5
SNMPVersion3Commands ................................. 13-6
SNMPv3Enable ........................................ 13-7
SNMPVersion3Users ...................................... 13-8
GroupAccessLevels ................................... 13-11
SNMPCommunities ....................................... 13-12
Menu:ViewingandConfiguringnon-SNMP
version3Communities................................. 13-14
CLI:ViewingandConfiguringSNMPCommunityNames .... 13-15
SNMPNotificationandTraps ............................... 13-17
TrapFeatures ......................................... 13-20
ConfiguringTrapReceivers ................................. 13-21
EnablingandConfiguringSNMPInform .................. 13-22
SendingEventLogMessagesasTraps .................... 13-24
UsingtheCLIToEnableAuthenticationTraps ............. 13-24
AdvancedManagement:RMON.............................. 13-25
ViewingsFlowConfigurationandStatus ...................... 13-25
LLDP(Link-LayerDiscoveryProtocol) ..... ...................... 13-28
LLDPTerminology ........................................ 13-29
GeneralLLDPOperation .. ................................. 13-31
LLDP-MED ........................................... 13-31
PacketBoundariesinaNetworkTopology . ................... 13-31
LLDPConfigurationOptions .......... ...................... 13-31
OptionsforReadingLLDPInformationCollectedbytheSwitch .. 13-34
LLDPandLLDP-MEDStandardsCompatibility ................ 13-34
LLDPOperatingRules ..................................... 13-35
ConfiguringLLDPOperation ................................ 13-36
ViewingtheCurrentLLDPConfiguration .................. 13-36
ConfiguringGlobalLLDPPacketControls ................. 13-38
ConfiguringSNMPNotificationSupport................... 13-41
ConfiguringPer-PortLLDPTransmitandReceiveModes .... 13-43
ConfiguringLLDPPer-PortAdvertisementContent ......... 13-43
ConfiguringSupportforPortSpeedandDuplex
Advertisements........................................ 13-45
xii
LLDP-MED(Media-Endpoint-Discovery) ..................... 13-46
AdvertisingDeviceCapability,NetworkPolicy,PoEStatus
DisplayingSwitchInformationAvailableforOutbound
LLDP-MEDTopologyChangeNotification................. 13-49
LLDP-MEDFastStartControl ........................... 13-51
andLocationData ..................................... 13-51
ConfiguringLocationDataforLLDP-MEDDevices ......... 13-56
DisplayingAdvertisementData ........ ...................... 13-61
Advertisements........................................ 13-62
DisplayingLLDPStatistics.............................. 13-66
LLDPOperatingNotes ..................................... 13-70
LLDPandCDPDataManagement ........................... 13-71
LLDPandCDPNeighborData ........................... 13-71
CDPOperationandCommands .......................... 13-73
A FileTransfers
Contents...................................................... A-1
Overview ..................................................... A-2
DownloadingSwitchSoftware ................................... A-2
General SwitchSoftwareDownload Rules ..................... A-3
UsingTFTPToDownloadSwitchSoftwarefromaServer ........ A-3
Menu:TFTPDownloadfromaServertoPrimaryFlash....... A-4
CLI:TFTPDownloadfromaServertoPrimary
orSecondaryFlash ..................................... A-6
UsingSecureCopyandSFTP
UsingXmodemtoDownloadSwitchSoftwareFromaPCorUNIX
................................ A-7
HowItWorks.......................................... A-8
TheSCP/SFTPProcess.................................. A-9
CommandOptions ...................................... A-9
Authentication ........................................ A-10
SCP/SFTPOperatingNotes ............................. A-10
Workstation.............................................. A-11
Menu:XmodemDownload to PrimaryFlash ............... A-12
CLI:XmodemDownloadfromaPCorUnixWorkstation
toPrimaryorSecondaryFlash........................... A-13
xiii
Switch-to-SwitchDownload .......... ...................... A-14
Menu:Switch-to-SwitchDownloadtoPrimaryFlash ........ A-14
CLI:Switch-To-SwitchDownloads ....................... A-15
UsingProCurveManagerPlustoUpdateSwitchSoftware ....... A-16
TroubleshootingTFTPDownloads .............................. A-17
TransferringSwitchConfigurations .............................. A-18
CopyingDiagnosticDatatoaRemoteHost,PC,orUnixWorkstation . A-21
CopyingCommandOutputtoaDestinationDevice......... A-21
CopyingEventLogOutputtoaDestinationDevice ......... A-22
CopyingCrashDataContenttoaDestinationDevice ....... A-22
CopyingCrashLogDataContenttoaDestinationDevice .... A-23
B MonitoringandAnalyzingSwitchOperation
Contents...................................................... B-1
Overview ..................................................... B-3
StatusandCountersData ....................................... B-4
MenuAccessToStatusandCounters ..... .................... B-5
GeneralSystemInformation ................................. B-6
MenuAccess ........................................... B-6
CLIAccess............................................. B-6
SwitchManagementAddressInformation...................... B-7
MenuAccess ........................................... B-7
CLIAccess............................................. B-7
ModuleInformation ........................................ B-8
Menu:DisplayingPortStatus ............................. B-8
CLIAccess............................................. B-8
PortStatus................................................ B-9
CLIAccess............................................. B-9
WebAccess ............................................ B-9
ViewingPortandTrunkGroupStatisticsandFlowControlStatus B-10
MenuAccesstoPort andTrunkStatistics................. B-11
CLIAccessToPortandTrunkGroupStatistics ............ B-12
WebBrowserAccessToViewPortandTrunkGroupStatisticsB-12
xiv
ViewingtheSwitchsMACAddressTables.................... B-12
MenuAccesstotheMACAddressViewsandSearches ...... B-13
CLIAccessforMACAddressViewsandSearches .......... B-15
SpanningTreeProtocol(STP)Information. ................... B-16
MenuAccesstoSTPData ............................... B-16
CLIAccesstoSTPData................................. B-18
LoopProtection ........................................... B-19
ConfiguringLoopProtection ............................ B-20
InternetGroupManagementProtocol(IGMP)Status ........... B-21
VLANInformation ......................................... B-22
WebBrowserInterfaceStatusInformation .................... B-24
PortandStaticTrunkMonitoringFeatures . ...................... B-25
Menu:ConfiguringPortandStaticTrunkMonitoring ........... B-26
CLI:ConfiguringPortandStaticTrunkMonitoring ............. B-28
Web:ConfiguringPortMonitoring ........................... B-30
C Troubleshooting
Contents...................................................... C-1
Overview ..................................................... C-3
TroubleshootingApproaches .................................... C-3
BrowserorTelnetAccessProblems.............................. C-5
UnusualNetworkActivity ....................................... C-7
GeneralProblems.......................................... C-7
PrioritizationProblems ..................................... C-8
IGMP-RelatedProblems ..................................... C-8
LACP-RelatedProblems ..................................... C-9
Port-BasedAccessControl(802.1X)-RelatedProblems .......... C-9
Radius-RelatedProblems ................................... C-13
Spanning-TreeProtocol(STP)andFast-UplinkProblems ....... C-14
SSH-RelatedProblems..................................... C-15
Stacking-RelatedProblems ........... ...................... C-16
TACACS-RelatedProblems................................. C-16
TimeP,SNTP,orGatewayProblems ......................... C-18
VLAN-RelatedProblems .............. ...................... C-18
xv
UsingLoggingToIdentifyProblemSources....................... C-21
EventLogOperation ... .................................... C-21
Menu:EnteringandNavigatingintheEventLog ........... C-23
CLI:.................................................. C-24
DebugandSyslogOperation ................................ C-25
DebugTypes .......................................... C-26
ConfiguringtheSwitchToSendDebugMessagestoOne
orMoreSyslogDServers................................ C-27
DiagnosticTools .................... .......................... C-32
PortAuto-Negotiation...................................... C-32
PingandLinkTests ........................................ C-33
Web:ExecutingPingorLinkTests....................... C-34
CLI:PingorLinkTests ........... ...................... C-35
DisplayingtheConfigurationFile ............................ C-37
CLI:ViewingtheConfigurationFile ...................... C-37
Web: ViewingtheConfigurationFile ...................... C-37
ListingSwitchConfigurationandOperationDetails
forHelpinTroubleshooting ............................. C-38
CLIAdministrativeandTroubleshootingCommands ........... C-40
TracerouteCommand ...................................... C-40
RestoringtheFactory-DefaultConfiguration ...................... C-44
UsingtheCLI ......................................... C-44
UsingtheClear/ResetButtons ........................... C-44
RestoringaFlashImage ....................................... C-45
D MACAddressManagement
Contents...................................................... D-1
Overview ..................................................... D-2
DeterminingMAC AddressesintheSwitch ........................ D-2
Menu:ViewingtheSwitchs MACAddresses.................... D-3
CLI:ViewingthePort andVLANMACAddresses................ D-4
ViewingtheMACAddressesofConnectedDevices ................. D-6
xvi
E DaylightSavingsTimeonProCurveSwitches
ConfiguringDaylightSavingsTime ............................... E-1
Index
xvii
xviii
Not e ForthelatestversionofallProCurveswitchdocumentation,includingrelease
notescoveringrecentlyaddedfeatures,visittheProCurveNetworking
websiteatwww.procurve.com.ClickonSupport,andthenclickon
Manuals.
PrintedPublications
Thetwopublicationslistedbelowareprintedandshippedwithyourswitch.
ThelatestversionofeachisalsoavailableinPDFformatontheProCurveWeb
site,asdescribedintheNoteatthetopofthispage.
ReadMeFirstProvidessoftwareupdateinformation,productnotes,
andotherinformation.
InstallationandGettingStartedGuideExplainshowtopreparefor
andperformthephysicalinstallationandconnecttheswitchtoyour
network.
ElectronicPublications
ThelatestversionofeachofthepublicationslistedbelowisavailableinPDF
formatontheProCurveWebsite,asdescribedintheNoteatthetopofthis
page.
ManagementandConfigurationGuideDescribeshowtoconfigure,
manage,andmonitorbasicswitchoperation.
AdvancedTrafficManagementGuideExplainshowtoconfigure
trafficmanagementfeatures,suchasspanningtree,VLANs,andIP
routing.
AccessSecurityGuideExplainshowtoconfigureaccesssecurity
featuresanduserauthenticationontheswitch.
ReleaseNotesDescribenewfeatures,fixes,andenhancementsthat
becomeavailablebetweenrevisionsoftheaboveguides.
xvii
SoftwareFeatureIndex
Forthesoftwaremanualsetsupportingyourswitchmodel,thefollowing
featureindexindicateswhichmanualtoconsultforinformationonagiven
softwarefeature.(Notethatsomesoftwarefeaturesarenotsupportedonall
switchmodels.)
Feature Managementand
Configuration
AdvancedTraffic
Management
AccessSecurity
Guide
802.1QVLANTagging - X -
802.1XPort-BasedPriority X - -
ACLs - - X
AAAAuthentication - - X
AuthorizedIPManagers - - X
Auto-MDIXConfiguration X - -
BootP X - -
ConfigFile X - -
ConsoleAccess X - -
CopyCommand X - -
Debug X - -
DHCPConfiguration - X -
DHCP/BootpOperation X - -
DHCPOption82 - X -
DiagnosticTools X - -
DownloadingSoftware X - -
EventLog X - -
FactoryDefaultSettings X - -
FileManagement X - -
xviii
Configuration
AdvancedTraffic
Management
AccessSecurity
Guide
FileTransfers X - -
FriendlyPortNames X
GVRP - X -
IGMP - X -
InterfaceAccess(Telnet,Console/Serial,Web) X - -
JumboPackets X - -
IPAddressing X - -
IPRouting - X -
LACP X - -
Link X - -
LLDP X - -
LLDP-MED X - -
LoopProtection - -
MACAddressManagement X - -
MACLockdown - - X
MACLockout - - X
MAC-basedAuthentication - - X
MonitoringandAnalysis X - -
MulticastFiltering - X -
MultipleConfigurationFiles X - -
NetworkManagementApplications(LLDP,SNMP) X - -
Passwords - - X
Ping X - -
PortConfiguration X - -
PortSecurity - - X
PortStatus X - -
xix
Configuration
AdvancedTraffic
Management
AccessSecurity
Guide
PortTrunking(LACP) X - -
Port-BasedAccessControl - - X
Port-BasedPriority(802.1Q) X - -
PoweroverEthernet(PoE) X - -
QualityofService(QoS) - X -
RADIUSACLs - - X
RADIUSAuthenticationandAccounting - - X
Routing - X -
SecureCopy X - -
sFlow X
SFTP X - -
SNMP X - -
SoftwareDownloads(SCP/SFTP,TFTP,Xmodem) X - -
Source-PortFilters - - X
SpanningTree(STP,RSTP,MSTP) - X -
SSH(SecureShell)Encryption - - X
SSL(SecureSocketLayer) - - X
StackManagement(Stacking) - X -
Syslog X - -
SystemInformation X - -
TACACS+Authentication - - X
TelnetAccess X - -
TFTP X - -
TimeProtocols(TimeP,SNTP) X - -
Traffic/SecurityFilters - - X
Troubleshooting X - -
xx
Configuration
AdvancedTraffic
Management
AccessSecurity
Guide
Uni-DirectionalLinkDetection(UDLD) X - -
VLANs - X -
Web-basedAuthentication - - X
Xmodem X - -
xxi
xxii
1
GettingStarted
Contents
Introduction ................................................... 1-2
Conventions ................................................... 1-2
FeatureDescriptionsbyModel ................................ 1-2
CommandSyntaxStatements ................................. 1-2
CommandPrompts .......................................... 1-3
ScreenSimulations.......................................... 1-3
PortIdentityExamples.............. ......................... 1-4
SourcesforMore Information .................................... 1-4
NeedOnlyaQuickStart? ........................................ 1-6
IPAddressing ............................................... 1-6
ToSetUp andInstalltheSwitch inYour Network ................ 1-6
1-1
GettingStarted
Introduction
Introduction
ThisManagementandConfigurationGuideisintendedtosupportthe
followingswitches:
ProCurveSeries2610
ProCurveSeries2610-PWR
Thisguidedescribeshowtousethecommandlineinterface(CLI),menu
interface,andwebbrowserinterfacetoconfigure,manage,andmonitor
switchoperation.Atroubleshootingchapterisalsoincluded.
Foranoverviewofotherproductdocumentationfortheaboveswitches,refer
toProductDocumentationonpagexvii.
YoucandownloadacopyfromtheProCurvewebsite,www.procurve.com.
Conventions
Thisguideusesthefollowingconventionsforcommandsyntaxanddisplayed
information.
FeatureDescriptionsbyModel
Incaseswhereasoftwarefeatureisnotavailableinalloftheswitchmodels
coveredbythisguide,thesectionheadingspecificallyindicateswhichproduct
orproductseriesofferthefeature.
Forexample(theswitchmodelishighlightedhereinbolditalics):
QoSontheSeries2610Switches.
CommandSyntaxStatements
Syntax:aaaport-accessauthenticator<port-list>
[control<authorized|auto|unauthorized>]
Verticalbars(|)separatealternative,mutuallyexclusiveelements.
1-2

GettingStarted
Conventions
Squarebrackets([])indicateoptionalelements.
Braces(<>)encloserequiredelements.
Braceswithinsquarebrackets([<>])indicatearequiredelement
withinanoptionalchoice.
BoldfaceindicatesuseofaCLIcommand,partofaCLIcommand
syntax,orotherdisplayedelementingeneraltext.Forexample:
UsethecopytftpcommandtodownloadthekeyfromaTFTPserver.
Italicsindicatevariablesforwhichyoumustsupplyavaluewhen
executingthecommand.Forexample,inthiscommandsyntax,<port-
list>indicatesthatyoumustprovideoneormoreportnumbers:
Syntax:aaaport-accessauthenticator<port-list>
CommandPrompts
Inthedefaultconfiguration,yourswitchdisplaysthefollowingCLIprompt:
ProCurveSwitch2610#
Tosimplifyrecognition,thisguideusesProCurvetorepresentcommand
promptsforallmodels.Forexample:
ProCurve#
(YoucanusethehostnamecommandtochangethetextintheCLIprompt.)
ScreenSimulations
Figurescontainingsimulatedscreentextandcommandoutputlooklikethis:
Pr oCur ve> show ver si on
I mage st amp: / sw/ code/ bui l d/ i nf o
Nov 2 2007 13 43: 14
R. 01. XX
430
Pr oCur ve>
Figure1-1.ExampleofaFigureshowingaSimulatedScreen
Insomecases,briefcommand-outputsequencesappearoutsideofa
numberedfigure.Forexample:
1-3
GettingStarted
SourcesforMoreInformation
ProCurve(config)#ipdefault-gateway18.28.152.1/24
ProCurve(config)#vlan1ipaddress18.28.36.152/24
ProCurve(config)#vlan1ipigmp
PortIdentityExamples
Thisguidedescribessoftwareapplicabletobothchassis-basedandstackable
ProCurveswitches.Whereportidentitiesareneededinanexample,thisguide
usesthechassis-basedportidentitysystem,suchasA1,B3-B5,C7,etc.
However,unlessotherwisenoted,suchexamplesapplyequallytothe
stackableswitches,whichforportidentitiestypicallyuseonlynumbers,such
as1,3-5,15,etc.
Foradditionalinformationaboutswitchoperationandfeaturesnotcovered
inthisguide,consultthefollowingsources:
Forinformationonwhichproductmanualtoconsultonagiven
softwarefeature,refertoProductDocumentationonpagexvii.
Not e ForthelatestversionofallProCurveswitchdocumentation,including
releasenotescoveringrecentlyaddedfeatures,visittheProCurve
Networkingwebsiteatwww.procurve.com.ClickonTechnicalsupport,and
thenclickonProductmanuals.
Forinformationonspecificparametersinthemenuinterface,refer
totheonlinehelpprovidedintheinterface.Forexample:
1-4
GettingStarted
OnlineHelp
forMenu
Figure1-2.GettingHelpintheMenuInterface
ForinformationonaspecificcommandintheCLI,typethecommand
namefollowedbyhelp.Forexample:
Figure1-3. GettingHelpintheCLI
ForinformationonspecificfeaturesintheWebbrowserinterface,
usetheonlinehelp.ForinformationonHelpoptions,seeOnlineHelp
fortheWebBrowserInterfaceonpage5-1.
ForfurtherinformationonProCurveNetworkingswitchtechnology,
visittheProCurvewebsiteat:
www.procurve.com
1-5
GettingStarted
NeedOnlyaQuickStart?
NeedOnlyaQuickStart?
IPAddressing
IfyoujustwanttogivetheswitchanIPaddresssothatitcancommunicate
onyournetwork,orifyouarenotusingmultipleVLANs,ProCurve
recommendsthatyouusetheSwitchSetupscreentoquicklyconfigureIP
addressing.Todoso,dooneofthefollowing:
EntersetupattheCLIManagerlevelprompt.
ProCurve#setup
IntheMainMenuoftheMenuinterface,select
8.RunSetup
FormoreonusingtheSwitchSetupscreen,seetheInstallationandGetting
StartedGuideyoureceivedwiththeswitch.
ToSetUpandInstalltheSwitchinYourNetwork
I mpor t ant ! UsetheInstallationandGettingStartedGuideshippedwithyourswitchfor
thefollowing:
Notes,cautions,andwarningsrelatedtoinstallingandusingthe
switchanditsrelatedmodules
Instructionsforphysicallyinstallingtheswitchinyournetwork
QuicklyassigninganIPaddressandsubnetmask,settingaManager
password,and(optionally)configuringotherbasicfeatures.
InterpretingLEDbehavior.
ForthelatestversionoftheInstallationandGettingStartedGuideandother
documentationforyourswitch,visittheProCurvewebsite.(RefertoProduct
Documentationonpagexviiofthisguideforfurtherdetails.)
1-6
2
SelectingaManagementInterface
Contents
Overview ...................................................... 2-2
AdvantagesofUsingtheMenuInterface............................ 2-3
AdvantagesofUsingtheCLI ...................................... 2-4
AdvantagesofUsingtheWebBrowserInterface..................... 2-5
AdvantagesofUsingProCurveManagerorProCurveManagerPlus.... 2-6
andWebBrowserInterfaces ...................................... 2-8
BannerOperationwithTelnet,Serial,orSSHv2Access........... 2-8
BannerOperationwith WebBrowserAccess .................... 2-8
ConfiguringandDisplayingaNon-DefaultBanner................ 2-9
ExampleofConfiguringandDisplayingaBanner ............... 2-10
OperatingNotes............................................ 2-12
2-1
Overview
Overview
Managementinterfacesenableyoutoreconfiguretheswitchandtomonitor
switchstatusandperformance.Interfacetypesinclude:
Menuinterfaceamenu-driveninterfaceofferingasubsetofswitch
commandsthroughthebuilt-inVT-100/ANSIconsolepage2-3
CLIacommandlineinterfaceofferingthefullsetofswitchcommands
throughtheVT-100/ANSIconsolebuiltintotheswitchpage2-4
Webbrowserinterface--aswitchinterfaceofferingstatusinformation
andasubsetofswitchcommandsthroughastandardwebbrowser(such
asNetscapeNavigatororMicrosoftInternetExplorer)page2-5
ProCurveManager(PCM)awindows-basednetworkmanagement
solutionincludedin-boxwithallmanageableProCurvedevices.Features
includeautomaticdevicediscovery,networkstatussummary,topology
andmapping,anddevicemanagement.
ProCurveManagerPlus(PCM+)acompletewindows-based
networkmanagementsolutionthatprovidesboththebasicfeatures
offeredwithPCM,aswellasmoreadvancedmanagementfeatures,
includingin-depthtrafficanalysis,groupandpolicymanagement,config-
urationmanagement,devicesoftwareupdates,andadvancedVLAN
management.(ProCurveincludesacopyofPCM+in-boxfora30-day
trial.)
Thismanualdescribeshowtousethemenuinterface(chapter3),theCLI
(chapter4),thewebbrowserinterface(chapter5),andhowtousethese
interfacestoconfigureandmonitortheswitch.
ForinformationonhowtoaccessthewebbrowserinterfaceHelp,referto
OnlineHelpfortheWebBrowserInterfaceonpage5-11.
TouseProCurveManagerorProCurveManagerPlus,refertotheGetting
StartedGuideandtheAdministratorsGuide,whichareavailableelectron-
icallywiththesoftwarefortheseapplications.Formoreinformation,visitthe
ProCurvewebsiteatwww.procurve.com.
2-2
AdvantagesofUsingtheMenuInterface
AdvantagesofUsingtheMenuInterface
Figure2-1. ExampleoftheConsoleInterfaceDisplay
Providesquick,easymanagementaccesstoamenu-drivensubsetof
switchconfigurationandperformancefeatures:
IPaddressing SpanningTree
VLANsandGVRP Systeminformation
PortSecurity Passwords
PortandStaticTrunk SNMPcommunities
Group
Timeprotocols
StackManagement
Themenuinterfacealsoprovidesaccessfor:
Setupscreen Switchandportstatisticand
EventLogdisplay
counterdisplays
Switchandport
Reboots
statusdisplays Softwaredownloads
Offersout-of-bandaccess(throughtheRS-232connection)tothe
switch,sonetworkbottlenecks,crashes,lackofconfiguredorcorrectIP
address,andnetworkdowntimedonotsloworpreventaccess
EnablesTelnet(in-band)accesstothemenufunctionality.
2-3
AdvantagesofUsingtheCLI
Allowsfasternavigation,avoidingdelaysthatoccurwithslower
displayofgraphicalobjectsoverawebbrowserinterface.
Providesmoresecurity;configurationinformationandpasswordsare
notseenonthenetwork.
AdvantagesofUsingtheCLI
ProCurve> OperatorLevel
ProCurve# ManagerLevel
ProCurve(config)# GlobalConfigurationLevel
ProCurve(<context>)# ContextConfigurationLevels(port,VLAN)
Figure2-2. CommandPromptExamples
Providesaccesstothecompletesetoftheswitchconfiguration,perfor-
mance,anddiagnosticfeatures.
Offersout-of-bandaccess(throughtheRS-232connection)orTelnet(in-
band)access.
Enablesquick,detailedsystemconfigurationandmanagementaccessto
systemoperatorsandadministratorsexperiencedincommandprompt
interfaces.
Provideshelpateachlevelfordeterminingavailableoptionsandvari-
ables.
CLIUsage
ForinformationonhowtousetheCLI,refertochapter3.UsingtheMenu
Interface.
Toperformspecificprocedures(suchasconfiguringIPaddressingor
VLANs),usetheContentslistingatthefrontofthemanualtolocatethe
informationyouneed.
Formonitoringandanalyzingswitchoperation,refertoappendixB.
ForinformationonindividualCLIcommands,refertotheIndexortothe
onlineHelpprovidedintheCLIinterface.
2-4
AdvantagesofUsingtheWebBrowserInterface
AdvantagesofUsingtheWebBrowser
Interface
Figure2-3. ExampleoftheWebBrowserInterface
Easyaccesstotheswitchfromanywhereonthenetwork
Familiarbrowserinterface--locationsofwindowobjectsconsistent
withcommonlyusedbrowsers,usesmouseclickingfornavigation,no
terminalsetup
Manyfeatureshavealltheirfieldsinonescreensoyoucanviewall
valuesatonce
Morevisualcues,usingcolors,statusbars,deviceicons,andother
graphicalobjectsinsteadofrelyingsolelyonalphanumericvalues
Displayofacceptablerangesofvaluesavailableinconfigurationlist
boxes
2-5
AdvantagesofUsingProCurveManagerorProCurveManagerPlus
AdvantagesofUsingProCurveManager
orProCurveManagerPlus
YoucanoperateProCurveManagerandProCurveManagerPlus(PCMand
PCM+)fromaPConthenetworktomonitortraffic,manageyourhubsand
switches,andproactivelyrecommendnetworkchangestoincreasenetwork
uptimeandoptimizeperformance.Easytoinstallanduse,PCMandPCM+are
theanswerstoyourmanagementchallenges.
PCMandPCM+enablegreatercontrol,uptime,andperformanceinyour
network:
FeaturesandbenefitsofProCurveManager:
NetworkStatusSummary:Uponboot-up,anetworkstatusscreen
displayshigh-levelinformationonnetworkdevices,endnodes,
events,andtrafficlevels.Fromhere,userscanresearchanyoneof
theseareastogetmoredetails.
AlertsandTroubleshooting:Aneventssummaryscreendisplays
alertstotheuserandcategorizesthembyseverity,makingiteasier
totrackwherebottlenecksandissuesexistinthenetwork.Alerts
presentdetailedinformationontheproblem,evendowntothespe-
cificport.
AutomaticDeviceDiscovery:Thisfeatureiscustomizedforfast
discoveryofallProCurvemanageablenetworkdevices.Theusercan
definewhichIPsubnetstodiscover.
TopologyandMapping:Thisfeatureautomaticallycreatesamapof
discoverednetworkdevices.Mapsarecolor-codedtoreflectdevice
statusandcanbeviewedatmultiplelevels(physicalview,subnet
view,orVLANview).
DeviceManagement:Manydevice-focusedtaskscanbeperformed
directlybythesoftware,ortheusercanaccessweb-browserand
command-lineinterfaceswiththeclickofabuttontomanageindivid-
ualdevicesfrominsidethetool.
FeaturesandbenefitsofProCurveManagerPlus:
AlloftheFeaturesofProCurveManager:Refertotheabove
listing.
In-DepthTrafficAnalysis:Anintegrated,low-overheadtrafficmon-
itorinterfaceshowsdetailedinformationontrafficthroughoutthe
network.UsingenhancedtrafficanalysisprotocolssuchasExtended
2-6
AdvantagesofUsingProCurveManagerorProCurveManagerPlus
RMONandsFlow,userscanmonitoroveralltrafficlevels,segments
withthehighesttraffic,oreventhetopuserswithinanetwork
segment.
GroupandPolicyManagement:Changesinconfigurationare
trackedandlogged,andarchivedconfigurationscanbeappliedtoone
ormanydevices.Configurationscanbecomparedovertimeor
betweentwodevices,withthedifferenceshighlightedforusers.
AdvancedVLANManagement:Anew,easy-to-useVLANmanage-
mentinterfaceallowsuserstocreateandassignVLANsacrossthe
entirenetwork,withouthavingtoaccesseachnetworkdeviceindi-
vidually.
DeviceSoftwareUpdates:Thisfeatureautomaticallyobtainsnew
devicesoftwareimagesfromProCurveandupdatesdevices,allowing
userstodownloadthelatestversionorchoosethedesiredversion.
Updatescanbescheduledeasilyacrosslargegroupsofdevices,allat
user-specifiedtimes.
InvestmentProtection:Themodularsoftwarearchitectureof
ProCurveManagerPlusenablesProCurvetooffernetworkadminis-
tratorsadd-onsoftwaresolutionsthatcomplementtheirneeds.
2-7
CustomLoginBannersfortheConsoleandWebBrowserInterfaces
andWebBrowserInterfaces
Youcannowconfiguretheswitchtodisplayaloginbannerofupto640
characterswhenanoperatorinitiatesamanagementsessionwiththeswitch
throughanyofthefollowingmethods:
Telnet
serialconnection
SSHv2
Webbrowser
Thedefaultbannerdisplaysproductregistrationinformation;thecopyright
splashisnolongerdisplayed.
Ifabannerisconfigured,thebannerpageisdisplayedwhenyouaccessthe
Webuserinterface.Thedefaultproductregistrationinformationisnot
displayedasthereisalreadyaproductregistrationpromptdisplayedinthe
Webuserinterface.
BannerOperationwithTelnet,Serial,orSSHv2Access
Whenasystemoperatorbeginsaloginsession,theswitchdisplaysthebanner
abovethelocalpasswordpromptor,ifnopasswordisconfigured,abovethe
Pressanykeytocontinueprompt.Enteringacorrectpasswordor,ifnopassword
isconfigured,pressinganykeyclearsthebannerfromtheCLIanddisplays
theCLIprompt.(RefertoFigure2-5onpagepage2-10.)
BannerOperationwithWebBrowserAccess
WhenasystemoperatorusesaWebbrowsertoaccesstheswitch,thetextof
anon-defaultbannerconfiguredontheswitchappearsinadedicatedbanner
windowwithalinktotheWebagenthomepage.ClickingonToHomePage
clearsthebannerwindowandpromptstheuserforapassword(ifconfigured).
Followingentryofthecorrectusername/passwordinformation(orifno
username/passwordisrequired),theswitchthendisplayseithertheRegistra-
tionpageortheswitchshomepage.Notethatifthebannerfeatureisdisabled
2-8
oriftheswitchisusingthefactory-defaultbannershowninfigure2-5,then
thebannerpagedoesnotappearintheWebbrowserwhenanoperator
initiatesaloginsessionwiththeswitch.
ConfiguringandDisplayingaNon-DefaultBanner
YoucanenableordisablebanneroperationusingeithertheswitchsCLIor
anSNMPapplication.Thestepsinclude:
1. Enablenon-defaultbanneroperationanddefinetheendpointdelimiter
forthebanner.
2. Enterthedesiredbannertext,includinganyspecificlinebreaksyou
want.
3. Entertheendpointdelimiter.
Useshowbannermotdtodisplaythecurrentbannerstatus.
Syntax: bannermotd<delimiter>
nobannermotd
Thiscommanddefinesthesinglecharacterusedtotermi-
natethebannertextandenablesbannertextinput.You
canuseanycharacterexceptablankspaceasadelimiter.
Thenoformofthecommanddisablestheloginbanner
feature.
<banner-text-string>
Theswitchallowsupto640bannercharacters,including
blankspacesandCR-LF([Enter]).(Thetilde~andthe
delimiterdefinedbybannermotd<delimiter>arenot
allowedaspartofthebannertext.)Whileenteringbanner
text,youcanbackspacetoeditthecurrentline(thatis,a
linethathasnotbeenterminatedbyaCR-LF.)However,
terminatingalineinabannerbyenteringaCR-LF
preventsanyfurthereditingofthatline.Toeditalinein
abannerentryafterterminatingthelinewithaCR-LF
requiresenteringthedelimiterdescribedaboveandthen
re-configuringnewbannertext.
Thebannertextstringmustterminatewiththecharacter
definedbybannermotd<delimiter>.
2-9
ExampleofConfiguringandDisplayingaBanner
Supposeasystemoperatorwantedtoconfigurethefollowingbannermessage
onhercompanysswitches:
Thi s i s a pr i vat e syst emmai nt ai ned by t he
Al l i ed Wi dget Cor por at i on.
Unaut hor i zed use of t hi s syst emcan r esul t i n
ci vi l and cr i mi nal penal t i es!
Inthiscase,theoperatorwillusethe[Enter]keytocreatelinebreaks,blank
spacesforlinecentering,andthe%symboltoterminatethebannermessage.
Figure2-4. ExampleofConfiguringaLoginBanner
Toviewthecurrentbannerconfiguration,useeithertheshowbannermotdor
showrunningcommand.
Pr oCur ve( conf i g) # show banner mot d
Banner I nf or mat i on
Banner st at us: Enabl ed
Conf i gur ed Banner :
Thi s i s a pr i vat e syst emmai nt ai ned by t he
Al l i ed Wi dget Cor por at i on.
Unaut hor i zed use of t hi s syst emcan r esul t i n
ci vi l and cr i mi nal penal t i es!
Figure2-5. ExampleofshowbannermotdOutput
2-10
Pr oCur ve( conf i g) # show r unni ng
Runni ng conf i gur at i on:
; J 9137A Conf i gur at i on Edi t or ; Cr eat ed on r el ease #R. 14. XX
host name " Pr oCur ve Swi t ch"
consol e baud- r at e 9600
modul e 1 t ype J XXXXA
snmp- ser ver communi t y " publ i c" Oper at or
vl an 1
name " DEFAULT_VLAN"
unt agged 1- 5, 9- 24, Tr k2
i p addr ess 15. 255. 128. 86 255. 255. 248. 0
no unt agged 6
exi t
banner mot d Thi s i s a pr i vat e syst emmai nt ai ned by t he
Al l i ed Wi dget Cor por at i on. Showsthecurrentbanner
Unaut hor i zed use of t hi s syst emcan r esul t i n configuration.
ci vi l and cr i mi nal penal i t es!
Figure2-6. TheCurrentBannerAppearsintheSwitchsRunning-ConfigFile
ThenexttimesomeonelogsontotheswitchsmanagementCLI,thefollowing
appears:
Theloginscreendisplaysthe
configuredbanner.
Enteringacorrectpassword
clearsthebanneranddisplays
theCLIprompt.
Figure2-7. ExampleofCLIResultoftheLoginBannerConfiguration
IfsomeoneusesaWebbrowsertologintotheswitchinterface,thefollowing
messageappears:
2-11
Figure2-8. ExampleofWebBrowserInterfaceResultoftheLoginBanner
Configuration
OperatingNotes
Thedefaultbannerappearsonlywhentheswitchisinthefactory
defaultconfiguration.Usingnobannermotddeletesthecurrently
configuredbannertextandblocksdisplayofthedefaultbanner.The
defaultbannerisrestoredonlyiftheswitchisresettoitsfactory-
defaultconfiguration.
Theswitchsupportsonebanneratanytime.Configuringanew
bannerreplacesanyformerbannerconfiguredontheswitch.
Iftheswitchisconfiguredwithsshversion1orsshversion1-or-2,
configuringthebannersetstheSSHconfigurationtosshversion2
anddisplaysthefollowingmessageintheCLI:
War ni ng: SSH ver si on has been set t o v2.
Ifabannerisconfigured,theswitchdoesnotallowconfigurationwith
sshversion1orsshversion1-or-2.Attemptingtodosoproducesthe
followingerrormessageintheCLI:
Banner has t o be di sabl ed f i r st .
Ifabannerisenabledontheswitch,theWebbrowserinterface
displaysthefollowinglinktothebannerpage:
Noticetoallusers
2-12
3
UsingtheMenuInterface
Contents
Overview ...................................................... 3-2
StartingandEndingaMenuSession....... ........................ 3-3
HowToStartaMenuInterfaceSession .... ..................... 3-4
HowToEndaMenuSessionandExitfromtheConsole: .......... 3-5
MainMenuFeatures............................................. 3-7
ScreenStructureandNavigation .................................. 3-9
RebootingtheSwitch ........................................... 3-12
MenuFeaturesList ............................................. 3-14
WhereToGoFromHere ........................................ 3-15
3-1
Overview
Overview
Thischapterdescribesthefollowing:
OverviewoftheMenuInterface
StartingandendingaMenusession(page3-3))
TheMainMenu(page3-7))
Screenstructureandnavigation(page3-9))
Rebootingtheswitch(page3-12))
Themenuinterfaceoperatesthroughtheswitchconsoletoprovideyouwith
asubsetofswitchcommandsinaneasy-to-usemenuformatenablingyouto:
Performaquickconfigurationofbasicparameters,suchastheIPaddress-
ingneededtoprovidemanagementaccessthroughyournetwork
Configurethesefeatures:
ManagerandOperatorpass- Anetworkmonitoringport
words
StackManagement
Systemparameters
SpanningTreeoperation
IPaddressing
SNMPcommunitynames
Timeprotocol
IPauthorizedmanagers
Ports
VLANs(VirtualLANs)and
Trunkgroups GVRP
Viewstatus,counters,andEventLoginformation
Updateswitchsoftware
Reboottheswitch
Foradetailedlistofmenufeatures,seetheMenuFeaturesListonpage3-14).
PrivilegeLevelsandPasswordSecurity.ProCurvestronglyrecom-
mendsthatyouconfigureaManagerpasswordtohelppreventunauthorized
accesstoyournetwork.AManagerpasswordgrantsfullread-writeaccessto
theswitch.AnOperatorpassword,ifconfigured,grantsaccesstostatusand
counter,EventLog,andtheOperatorlevelintheCLI.Afteryouconfigure
passwordsontheswitchandlogoffoftheinterface,accesstothemenu
interface(andtheCLIandwebbrowserinterface)willrequireentryofeither
theManagerorOperatorpassword.(IftheswitchhasonlyaManagerpass-
word,thensomeonewithoutapasswordcanstillgainread-onlyaccess.)
3-2
StartingandEndingaMenuSession
Not e IftheswitchhasneitheraManagernoranOperatorpassword,anyone
havingaccesstotheconsoleinterfacecanoperatetheconsolewithfull
managerprivileges.Also,ifyouconfigureonlyanOperatorpassword,
enteringtheOperatorpasswordenablesfullmanagerprivileges.
Formoreinformationonpasswords,seethechapteronlocalpasswordsin
theAccessSecurityGuideforyourswitch.
Themenuinterfacedisplaysthecurrentrunning-configparameterset-
tings.Youcanusethemenuinterfacetosaveconfigurationchangesmade
intheCLIonlyiftheCLIchangesareintherunningconfigwhenyousave
changesmadeinthemenuinterface.(Formoreonhowswitchmemory
managesconfigurationchanges,seeChapter6,SwitchMemoryand
Configuration.)
Aconfigurationchangemadethroughanyswitchinterfaceoverwrites
earlierchangesmadethroughanyotherinterface.
TheMenuInterfaceandtheCLI(CommandLineInterface)bothusethe
switchconsole.ToenterthemenufromtheCLI,usethemenucommand.
ToentertheCLIfromtheMenuinterface,selectCommandLine(CLI)option.)
Youcanaccessthemenuinterfaceusinganyofthefollowing:
Adirectserialconnectiontotheswitchsconsoleport,asdescribedinthe
installationguideyoureceivedwiththeswitch
ATelnetconnectiontotheswitchconsolefromanetworkedPCorthe
switchswebbrowserinterface.TelnetrequiresthatanIPaddressand
subnetmaskcompatiblewithyournetworkhavealreadybeenconfigured
ontheswitch.
ThestackCommander,iftheswitchisastackmember
Not e Thissectionassumesthateitheraterminaldeviceisalreadyconfiguredand
connectedtotheswitch(seetheInstallationandGettingStartedGuide
shippedwithyourswitch)orthatyouhavealreadyconfiguredanIPaddress
ontheswitch(requiredforTelnetaccess).
3-3
HowToStartaMenuInterfaceSession
Initsfactorydefaultconfiguration,theswitchconsolestartswiththeCLI
prompt.TousethemenuinterfacewithManagerprivileges,gototheManager
levelpromptandenterthemenucommand.
1. Useoneofthesemethodstoconnecttotheswitch:
APCterminalemulatororterminal
Telnet
(YoucanalsousethestackCommanderiftheswitchisastackmember).
2. Dooneofthefollowing:
IfyouareusingTelnet,gotostep3.
IfyouareusingaPCterminalemulatororaterminal,press[Enter]one
ormoretimesuntilapromptappears.
3. Whentheswitchscreenappears,dooneofthefollowing:
Ifapasswordhasbeenconfigured,thepasswordpromptappears.
Password:_
TypetheManagerpasswordandpress[Enter].EnteringtheManager
passwordgivesyoumanager-levelaccesstotheswitch.(Enteringthe
Operatorpasswordgivesyouoperator-levelaccesstotheswitch.
Refertothechapteronlocalmanagerandoperatorusernamesand
passwordsintheAccessSecurityGuideforyourswitch.)
Ifnopasswordhasbeenconfigured,theCLIpromptappears.Goto
thenextstep.
4. WhentheCLIpromptappears,displaytheMenuinterfacebyenteringthe
menucommand.Forexample:
ProCurve#menu [Enter]
resultsin:
3-4
Figure3-1. TheMainMenuwithManagerPrivileges
ForadescriptionofMainMenufeatures,seeMainMenuFeaturesonpage
3-7).
Not e ToconfiguretheswitchtostartwiththemenuinterfaceinsteadoftheCLI,go
totheManagerlevelpromptintheCLI,enterthesetupcommand,andinthe
resultingdisplay,changetheLogonDefaultparametertoMenu.Formore
information,seetheInstallationandGettingStartedGuideyoureceived
withtheswitch.
HowToEndaMenuSessionandExitfromtheConsole:
Themethodforendingamenusessionandexitingfromtheconsoledepends
onwhether,duringthesession,youmadeanychangestotheswitchconfigu-
rationthatrequireaswitchreboottoactivate.(Mostchangesviathemenu
interfaceneedonlyaSave,anddonotrequireaswitchreboot.)Configuration
changesneedingarebootaremarkedwithanasterisk(*)nexttotheconfig-
urediteminthemenuandalsonexttotheSwitchConfigurationiteminthe
MainMenu.
3-5
Asteriskindicatesa
configurationchange
thatrequiresareboot
toactivate.
Figure3-2. AnAsteriskIndicatesaConfigurationChangeRequiringaReboot
1. Inthecurrentsession,ifyouhavenotmadeconfigurationchangesthat
requireaswitchreboottoactivate,returntotheMainMenuandpress[0]
(zero)tologout.Thenjustexitfromtheterminalprogram,turnoffthe
terminal,orquittheTelnetsession.
2. Ifyouhavemadeconfigurationchangesthatrequireaswitchreboot
thatis,ifanasterisk(*)appearsnexttoaconfigureditemornexttoSwitch
ConfigurationintheMainMenu:
a. ReturntotheMainMenu.
b. Press[6]toselectRebootSwitchandfollowtheinstructionsonthe
rebootscreen.
Rebootingtheswitchterminatesthemenusession,and,ifyouareusing
Telnet,disconnectstheTelnetsession.
(SeeRebootingToActivateConfigurationChangesonpage3-13).)
3. Exitfromtheterminalprogram,turnofftheterminal,orclosetheTelnet
applicationprogram.
3-6
MainMenuFeatures
MainMenuFeatures
Figure3-3. TheMainMenuViewwithManagerPrivileges
TheMainMenugivesyouaccesstotheseMenuinterfacefeatures:
StatusandCounters: Providesaccesstodisplayscreensshowing
switchinformation,portstatusandcounters,portandVLANaddress
tables,andspanningtreeinformation.(SeeAppendixB,Monitoringand
AnalyzingSwitchOperation.)
SwitchConfiguration: Providesaccesstoconfigurationscreensfor
displayingandchangingthecurrentconfigurationsettings.(SeetheCon-
tentslistingatthefrontofthismanual.)Foralistingoffeaturesand
parametersconfigurablethroughthemenuinterface,seetheMenuFea-
turesListonpage3-14).
ConsolePasswords:Providesaccesstothescreenusedtosetorchange
Manager-levelandOperator-levelpasswords,andtodeleteManagerand
Operatorpasswordprotection.(Seethelocalpasswordchapterinthe
AccessSecurityGuideshippedwithyourswitch.)
EventLog: Enablesyoutoreadprogressanderrormessagesthatare
usefulforcheckingandtroubleshootingswitchoperation.(SeeUsing
LoggingToIdentifyProblemSourcesonpageC-21.)
3-7
MainMenuFeatures
CommandLine(CLI):SelectstheCommandLineInterfaceatthesame
level(ManagerorOperator)thatyouareaccessingintheMenuinterface.
(Seechapter4,UsingtheCommandLineInterface(CLI).)
RebootSwitch: Performsawarmrebootoftheswitch,whichclears
mosttemporaryerrorconditions,resetsthenetworkactivitycountersto
zero,andresetsthesystemup-timetozero.Arebootisrequiredtoactivate
achangeintheVLANSupportparameter.(SeeRebootingfromtheMenu
Interfaceonpage6-11.)
DownloadOS:Enablesyoutodownloadanewsoftwareversiontothe
switch.(SeeAppendixA,FileTransfers.)
RunSetup:DisplaystheSwitchSetupscreenforquicklyconfiguring
basicswitchparameterssuchasIPaddressing,defaultgateway,logon
defaultinterface,spanningtree,andothers.(SeetheInstallationand
GettingStartedguideshippedwithyourswitch.)
Stacking:EnablesyoutouseasingleIPaddressandstandardnetwork
cablingtomanageagroupofupto16switchesinthesamesubnet
(broadcastdomain).Seethechapteronstackmanagementinthe
AdvancedTrafficManagementGuide.
Logout:ClosestheMenuinterfaceandconsolesession,anddisconnects
Telnetaccesstotheswitch.(SeeHowtoEndaMenuSessionandExit
fromtheConsoleonpage3-5).)
3-8
ScreenStructureandNavigation
Menuinterfacescreensincludethesethreeelements:
Parameterfieldsand/orread-onlyinformationsuchasstatistics
Navigationandconfigurationactions,suchasSave,Edit,andCancel
Helplinetodescribenavigationoptions,individualparameters,andread-
onlydata
Forexample,inthefollowingSystemInformationscreen:
Helpline
describingthe
selectedaction
orselected
parameterfield
Parameterfields
Helpdescribingeachofthe
itemsintheparameterfields
Navigationinstructions
Actionsline
Screentitleidentifies
thelocationwithinthe
menustructure
Figure3-4. ElementsoftheScreenStructure
FormsDesign.Theconfigurationscreens,inparticular,operatesimilarly
toanumberofPCapplicationsthatuseformsfordataentry.Whenyoufirst
enterthesescreens,youseethecurrentconfigurationfortheitemyouhave
selected.Tochangetheconfiguration,thebasicoperationisto:
1. Press[E]toselecttheEditaction.
2. Navigatethroughthescreenmakingallthenecessaryconfiguration
changes.(Seetable3-1onpage3-10.)
3. Press[Enter]toreturntotheActionsline.Fromthereyoucansavethe
configurationchangesorcancelthechanges.Cancelreturnstheconfigu-
rationtothevaluesyousawwhenyoufirstenteredthescreen.
3-9
Table3-1. HowToNavigateintheMenuInterface
Task: Actions:
Executeanaction
fromtheActions>
listatthebottomof
thescreen:
Useeitherofthefollowingmethods:
Usethearrowkeys([<]or[>])tohighlighttheactionyouwantto
execute,thenpress[Enter].
Pressthekeycorrespondingtothecapitalletterintheaction
name.Forexample,inaconfigurationmenu,press[E]toselect
Editandbegineditingparametervalues.
Reconfigure(edit)a
parametersettingora
field:
1. Selectaconfigurationitem,suchasSystemName.(Seefigure
2-4.)
2. Press[E](forEditontheActionsline).
3. Use[Tab]orthearrowkeys([<],[>],[^],or[v])tohighlightthe
itemorfield.
Iftheparameterhaspreconfiguredvalues,eitherusethe
Spacebartoselectanewoptionortypethefirstpartofyour
selectionandtherestoftheselectionappearsautomatically.
(ThehelplineinstructsyoutoSelectavalue.)
Iftherearenopreconfiguredvalues,typeinavalue(theHelp
lineinstructsyoutoEnteravalue).
5. Ifyouwanttochangeanotherparametervalue,returntostep3.
6. Ifyouarefinishededitingparametersinthedisplayedscreen,
press[Enter]toreturntotheActionslineanddooneofthe
following:
Tosaveandactivateconfigurationchanges,press[S](forthe
Saveaction).Thissavesthechangesinthestartup
configurationandalsoimplementsthechangeinthe
currentlyrunningconfiguration.(SeeChapter6,Switch
MemoryandConfiguration.)
Toexitfromthescreenwithoutsavinganychangesthatyou
havemade(orifyouhavenotmadechanges),press[C](for
theCancelaction).
Note: Inthemenuinterface,executingSaveactivatesmost
parameterchangesandsavestheminthestartupconfiguration
(orflash)memory,anditisthereforenotnecessarytorebootthe
switchaftermakingthesechanges.Butifanasteriskappears
nexttoanymenuitemyoureconfigure,theswitchwillnot
activateorsavethechangeforthatitemuntilyourebootthe
switch.Inthiscase,rebootingshouldbedoneafteryouhave
madealldesiredchangesandthenreturnedtotheMainMenu.
7. Whenyoufinisheditingparameters,returntotheMainMenu.
8. Ifnecessary,reboottheswitchbyhighlightingRebootSwitchin
theMainMenuandpressing[Enter].(SeetheNote,above.)
Exitfromaread-only Press[B](fortheBackaction).
screen.
3-10
TogetHelponindividualparameterdescriptions.Inmostscreens
thereisaHelpoptionintheActionsline.Wheneveranyoftheitemsinthe
Actionslineishighlighted,press[H],andaseparatehelpscreenisdisplayed.
Forexample:
Pressing[H]orhighlightingHelpand
pressing[Enter]displaysHelpforthe
parameterslistedintheupperpartof
thescreen
Highlightonanyitem
intheActionsline
indicatesthatthe
Actionslineisactive.
TheHelplineprovides
abriefdescriptorof
thehighlightedAction
itemorparameter.
Figure3-5. ExampleShowingHowToDisplayHelp
TogetHelpontheactionsordatafieldsineachscreen:Usethearrow
keys([<],[>],[^],or[v])toselectanactionordatafield.Thehelplineunder
theActionsitemsdescribesthecurrentlyselectedactionordatafield.
Forguidanceonhowtonavigateinascreen:Seetheinstructionsprovided
atthebottomofthescreen,orrefertoScreenStructureandNavigationon
page3-9).)
3-11
RebootingtheSwitch
RebootingtheSwitch
Rebootingtheswitchfromthemenuinterface
Terminatesallcurrentsessionsandperformsaresetoftheoperating
system
Activatesanymenuinterfaceconfigurationchangesthatrequireareboot
Resetsstatisticalcounterstozero
(Notethatstatisticalcounterscanberesettozerowithoutrebootingthe
switch.)
ToReboottheswitch,usetheRebootSwitchoptionintheMainMenu.(Note
thattheRebootSwitchoptionisnotavailableifyoulogoninOperatormode;
thatis,ifyouenteranOperatorpasswordinsteadofamanagerpasswordat
thepasswordprompt.)
RebootSwitchoption
Figure3-6. TheRebootSwitchOptionintheMainMenu
3-12
RebootingtheSwitch
RebootingToActivateConfigurationChanges. Configurationchanges
formostparametersinthemenuinterfacebecomeeffectiveassoonasyou
savethem.However,youmustreboottheswitchinordertoimplementa
changeintheMaximumVLANstosupportparameter.(Toaccessthisparameter,go
totheMainMenuandselect:
2.SwitchConfiguration
8.VLANMenu
1.VLANSupport.)
Ifyoumakeconfigurationchangesinthemenuinterfacethatrequireareboot,
theswitchdisplaysanasterisk(*)nexttothemenuiteminwhichthechange
hasbeenmade.Forexample,ifyouchangeandsavethevaluefortheMaximum
VLANstosupportparameter,anasteriskappearsnexttotheVLANSupportentryin
theVLANMenuscreen(below),andalsonexttotheSwitchConfiguration...entry
intheMainMenu,asshowninfigure3-2onpage3-6):
Reminderto
reboottheswitch
toactivate
configuration
changes.
Asteriskindicates
aconfiguration
changethat
requiresareboot
inordertotake
effect.
Figure3-7. IndicationofaConfigurationChangeRequiringaReboot
Toactivatechangesindicatedbytheasterisk,gototheMainMenuandselect
theRebootSwitchoption.
Not e ExecutingthewritememorycommandintheCLIdoesnotaffectpending
configurationchangesindicatedbyanasteriskinthemenuinterface.Thatis,
onlyarebootfromthemenuinterfaceorabootorreloadcommandfromthe
CLIwillactivateapendingconfigurationchangeindicatedbyanasterisk.
3-13
MenuFeaturesList
MenuFeaturesList
StatusandCounters
GeneralSystemInformation
SwitchManagementAddressInformation
PortStatus
PortCounters
AddressTable
PortAddressTable
SpanningTreeInformation
SwitchConfiguration
SystemInformation
Port/TrunkSettings
NetworkMonitoringPort
SpanningTreeOperation
IPConfiguration
SNMPCommunityNames
IPauthorizedManagers
VLANMenu
ConsolePasswords
EventLog
CommandLine(CLI)
RebootSwitch
DownloadOS
RunSetup
Stacking
StackingStatus(ThisSwitch)
StackingStatus(All)
StackConfiguration
StackManagement(AvailableinStackCommanderOnly)
StackAccess(AvailableinStackCommanderOnly)
Logout
3-14
WhereToGoFromHere
WhereToGoFromHere
Thischapterprovidesanoverviewofthemenuinterfaceandhowtouseit.
Thefollowingtableindicateswheretoturnfordetailedinformationonhow
tousetheindividualfeaturesavailablethroughthemenuinterface.
Option: Turnto:
TousetheRunSetupoption RefertotheInstallation and Getting Started Guide
shippedwiththeswitch.
TousetheProCurveStackManager Seethechapteronstackmanagementinthe
Advanced Traffic Management Guide.
Toviewandmonitorswitchstatusand AppendixB,MonitoringandAnalyzingSwitch
counters Operation
Tolearnhowtoconfigureanduse RefertotheAccess Security Guideforyour
passwordsandothersecurityfeatures switch.
TolearnhowtousetheEventLog UsingLoggingToIdentifyProblemSourceson
pageC-21
TolearnhowtheCLIoperates Chapter4,UsingtheCommandLineInterface
(CLI)
Todownloadsoftware(theOS) AppendixA,FileTransfers
Foradescriptionofhowswitch SwitchMemoryandConfigurationonpage6-1
memoryhandlesconfiguration
changes
Forinformationonotherswitch SeetheTableofContentsatthefrontofthis
featuresandhowtoconfigurethem manual.
3-15
WhereToGoFromHere
3-16
4
UsingtheCommandLineInterface(CLI)
Contents
Overview ...................................................... 4-2
AccessingtheCLI ............................................... 4-2
UsingtheCLI................................................... 4-2
PrivilegeLevelsatLogon ..................................... 4-3
PrivilegeLevelOperation ..................................... 4-4
OperatorPrivileges ...................................... 4-4
ManagerPrivileges....................................... 4-5
HowToMoveBetweenLevels ................................ 4-7
ListingCommandsandCommandOptions ...................... 4-8
ListingCommandsAvailableatAnyPrivilegeLevel ........... 4-8
CommandOptionDisplays ............................... 4-10
DisplayingCLI"Help" ....................................... 4-11
ConfigurationCommandsandtheContextConfigurationModes .. 4-13
CLIControlandEditing......................................... 4-16
4-1
Overview
Overview
TheCLIisatext-basedcommandinterfaceforconfiguringandmonitoringthe
switch.TheCLIgivesyouaccesstotheswitchsfullsetofcommandswhile
providingthesamepasswordprotectionthatisusedinthewebbrowser
interfaceandthemenuinterface.
AccessingtheCLI
Likethemenuinterface,theCLIisaccessedthroughtheswitchconsole,and,
intheswitchsfactorydefaultstate,isthedefaultinterfacewhenyoustarta
consolesession.Youcanaccesstheconsoleout-of-bandbydirectly
connectingaterminaldevicetotheswitch,orin-bandbyusingTelneteither
fromaterminaldeviceorthroughthewebbrowserinterface.
Also,ifyouareusingthemenuinterface,youcanaccesstheCLIbyselecting
theCommandLine(CLI)optionintheMainMenu.
UsingtheCLI
TheCLIofferstheseprivilegelevelstohelpprotecttheswitchfromunautho-
rizedaccess:
1. Operator
2. Manager
3. GlobalConfiguration
4. ContextConfiguration
Not e CLIcommandsarenotcase-sensitive.
WhenyouusetheCLItomakeaconfigurationchange,theswitchwritesthe
changetotheRunning-Configfileinvolatilememory.Thisallowsyoutotest
yourconfigurationchangesbeforemakingthempermanent.Tomakechanges
permanent,youmustusethewritememorycommandtosavethemtothe
4-2
UsingtheCLI
StartupConfigfileinnon-volatilememory.Ifyoureboottheswitchwithout
firstusingwritememory,allchangesmadesincethelastrebootorwritememory
(whicheverislater)willbelost.Formoreonswitchmemoryandsaving
configurationchanges,seeChapter6,SwitchMemoryandConfiguration.
PrivilegeLevelsatLogon
PrivilegelevelscontrolthetypeofaccesstotheCLI.Toimplementthis
control,youmustsetatleastaManagerpassword.WithoutaManager
passwordconfigured,anyonehavingserialport,Telnet,orwebbrowser
accesstotheswitchcanreachallCLIlevels.(Formoreonsettingpasswords,
refertothelocalmanagerandoperatorpasswordchapterintheAccess
SecurityGuideforyourswitch.)
WhenyouusetheCLItologontotheswitch,andpasswordsareset,youwill
bepromptedtoenterapassword.Forexample:
PasswordPrompt
Figure4-1. ExampleofCLILog-OnScreenwithPassword(s)Set
Intheabovecase,youwillentertheCLIatthelevelcorrespondingtothe
passwordyouprovide(operatorormanager).
IfnopasswordsaresetwhenyoulogontotheCLI,youwillenteratthe
Managerlevel.Forexample:
ProCurve#_
4-3
UsingtheCLI
Ca u t i o n ProCurvestronglyrecommendsthatyouconfigureaManagerpassword.If
aManagerpasswordisnotconfigured,thentheManagerlevelisnotpassword-
protected,andanyonehavingin-bandorout-of-bandaccesstotheswitchmay
beabletoreachtheManagerlevelandcompromiseswitchandnetwork
security.NotethatconfiguringonlyanOperatorpassworddoesnotprevent
accesstotheManagerlevelbyintruderswhohavetheOperatorpassword.
PressingtheClearbuttononthefrontoftheswitchremovespassword
protection.Forthisreason,itisrecommendedthatyouprotecttheswitch
fromphysicalaccessbyunauthorizedpersons.Ifyouareconcernedabout
switchsecurityandoperation,youshouldinstalltheswitchinasecure
location,suchasalockedwiringcloset.
PrivilegeLevelOperation
2.ManagerLevel
3.GlobalConfiguration
OperatorPrivileges
ManagerPrivileges
1.OperatorLevel
4.ContextConfigurationLevel
Figure4-2. AccessSequenceforPrivilegeLevels
OperatorPrivileges
AttheOperatorlevelyoucanexaminethecurrentconfigurationandmove
betweeninterfaceswithoutbeingabletochangetheconfiguration. A">"
characterdelimitstheOperator-levelprompt.Forexample:
ProCurve>_ ExampleoftheOperatorprompt.
WhenusingenabletomovetotheManagerlevel,theswitchpromptsyoufor
theManagerpasswordifonehasalreadybeenconfigured.
4-4
UsingtheCLI
ManagerPrivileges
Managerprivilegesgiveyouthreeadditionallevelsofaccess:Manager,Global
Configuration,andContextConfiguration.(Seefigure.)A"#"character
delimitsanyManagerprompt.Forexample:
ProCurve#_ ExampleoftheManagerprompt.
Managerlevel:ProvidesallOperatorlevelprivilegesplustheabilityto
performsystem-levelactionsthatdonotrequiresavingchangestothe
systemconfigurationfile.ThepromptfortheManagerlevelcontainsonly
thesystemnameandthe"#"delimiter,asshownabove.Toselectthis
level,entertheenablecommandattheOperatorlevelpromptandenter
theManagerpassword,whenprompted.Forexample:
ProCurve>enable EnterenableattheOperatorprompt.
ProCurve#_ TheManagerprompt.
GlobalConfigurationlevel:ProvidesallOperatorandManagerlevel
privileges,andenablesyoutomakeconfigurationchangestoanyofthe
switchssoftwarefeatures.ThepromptfortheGlobalConfigurationlevel
includesthesystemnameand"(config)". Toselectthislevel,enterthe
configcommandattheManagerprompt.Forexample:
ProCurve#_ EnterconfigattheManagerprompt.
ProCurve(config)#_TheGlobalConfigprompt.)
ContextConfigurationlevel:ProvidesallOperatorandManager
privileges,andenablesyoutomakeconfigurationchangesinaspecific
context,suchasoneormoreportsoraVLAN.ThepromptfortheContext
Configurationlevelincludesthesystemnameandtheselectedcontext.
Forexample:
ProCurve(eth-1)#
ProCurve(vlan-10)#
TheContextlevelisuseful,forexample,ifyouwanttoexecuteseveral
commandsdirectedatthesameportorVLAN,orifyouwanttoshorten
thecommandstringsforaspecificcontextarea.Toselectthislevel,enter
thespecificcontextattheGlobalConfigurationlevelprompt.For
example,toselectthecontextlevelforanexistingVLANwiththeVLAN
IDof10,youwouldenterthefollowingcommandandseetheindicated
result:
ProCurve(config)#vlan10
ProCurve(vlan-10)#
4-5
UsingtheCLI
ChangingInterfaces. IfyouchangefromtheCLItothemenuinterface,or
thereverse,youwillremainatthesameprivilegelevel.Forexample,entering
themenucommandfromtheOperatorleveloftheCLItakesyoutothe
Operatorprivilegelevelinthemenuinterface.
Table4-1. PrivilegeLevelHierarchy
Privilege
Level
ExampleofPromptandPermittedOperations
OperatorPrivilege
Operator ProCurve> show<command > Viewstatusandconfiguration
Level setup
information.
ping<argument > Performconnectivitytests.
link-test< argument>
enable MovefromtheOperatorleveltothe
Managerlevel.
menu MovefromtheCLIinterfacetothemenu
interface.
logout ExitfromtheCLIinterfaceandterminate
theconsolesession.
exit Terminatethecurrentsession(sameas
logout).
ManagerPrivilege
Manager ProCurve# Performsystem-levelactionssuchassystemcontrol,monitoring,
Level anddiagnosticcommands,plusanyoftheOperator-level
commands.Foralistofavailablecommands,enter?atthe
prompt.
Global ProCurve(config)# Executeconfigurationcommands,plusallOperatorandManager
Configuration commands.Foralistofavailablecommands,enter?atthe
Level prompt.
Context ProCurve(eth-5)# Executecontext-specificconfigurationcommands,suchasa
Configuration
ProCurve(vlan-100)# particularVLANorswitchport.Thisisusefulforshorteningthe
Level
commandstringsyoutype,andforenteringaseriesofcommands
forthesamecontext.Foralistofavailablecommands,enter?at
theprompt.
4-6
UsingtheCLI
HowToMoveBetweenLevels
ChangeinLevels ExampleofPrompt,Command,andResult
Operatorlevel
to
Managerlevel
Managerlevel
to
Globalconfiguration
level
Globalconfiguration
level
to a
Contextconfiguration
level
level
to another
level
Movefromanylevel
totheprecedinglevel
Movefromanylevel
totheManagerlevel
ProCurve>enable
Password:_
Afteryouenterenable,thePassword
promptappears.Afteryouenterthe
Managerpassword,thesystemprompt
appearswiththe#symbol:
ProCurve#_
ProCurve#config
ProCurve(config)#
ProCurve(vlan-10)#
ProCurve(vlan-10)#interfacee3
ProCurve(int-3)#
TheCLIaccepts"e"astheabbreviated
formof"ethernet".
ProCurve(int-3)#exit
ProCurve(config)#exit
ProCurve#exit
ProCurve>
ProCurve(int-3)#end
ProCurve#
or
ProCurve(config)#end
ProCurve#
MovingBetweentheCLIandtheMenuInterface.Whenmoving
betweeninterfaces,theswitchretainsthecurrentprivilegelevel(Manageror
Operator).Thatis,ifyouareattheOperatorlevelinthemenuandselectthe
CommandLineInterface(CLI)optionfromtheMainMenu,theCLIprompt
appearsattheOperatorlevel.
ChangingParameterSettings.Regardlessofwhichinterfaceisused(CLI,
menuinterface,orwebbrowserinterface),themostrecentlyconfigured
versionofaparametersettingoverridesanyearliersettingsforthatparameter.
4-7
UsingtheCLI
Forexample,ifyouusethemenuinterfacetoconfigureanIPaddressofX
forVLAN1andlaterusetheCLItoconfigureadifferentIPaddressofYfor
VLAN1,thenYreplacesXastheIPaddressforVLAN1intherunning-
configfile.IfyousubsequentlyexecutewritememoryintheCLI,thenthe
switchalsostoresYastheIPaddressforVLAN1inthestartup-configfile.
(Formoreonthestartup-configandrunningconfigfiles,seeChapter6,
SwitchMemoryandConfiguration.)
ListingCommandsandCommandOptions
Atanyprivilegelevelyoucan:
Listallofthecommandsavailableatthatlevel
Listtheoptionsforaspecificcommand
ListingCommandsAvailableatAnyPrivilegeLevel
Atagivenprivilegelevelyoucanlistandexecutethecommandsthatlevel
offers,plusallofthecommandsavailableatprecedinglevels.Forexample,
attheOperatorlevel, youcanlistandexecuteonlytheOperatorlevel
commands.However,attheManagerlevel,youcanlistandexecutethe
commandsavailableatboththeOperatorandManagerlevels.
Type"?"ToListAvailableCommands.1.Typingthe?symbolliststhe
commandsyoucanexecuteatthecurrentprivilegelevel.Forexample,
typing?attheOperatorlevelproducesthislisting:
Figure4-3. ExampleoftheOperatorLevelCommandListing
4-8
UsingtheCLI
Typing?attheManagerlevelproducesthislisting:
When--MORE--appears,usetheSpacebar
or[Return]tolistadditionalcommands.
Figure4-4. ExampleoftheManager-LevelCommandListing
When --MORE-- appears,therearemorecommandsinthelisting.Tolistthe
nextsetofcommands,presstheSpacebar.Tolisttheremainingcommands
one-by-one,repeatedlypress[Enter].
Typing?attheGlobalConfigurationlevelortheContextConfigurationlevel
producessimilarresults.Inaparticularcontextlevel,thefirstblockof
commandinthelistingarethecommandsthataremostrelevanttothecurrent
context.
Use[Tab] ToSearchfororCompleteaCommandWord.Youcanuse
[Tab]tohelpyoufindCLIcommandsortoquicklycompletethecurrentword
inacommand.Todoso,typeoneormoreconsecutivecharactersina
commandandthenpress[Tab](withnospacesallowed).Forexample,atthe
GlobalConfigurationlevel,ifyoupress[Tab]immediatelyaftertyping"t",the
CLIdisplaystheavailablecommandoptionsthatbeginwith"t".Forexample:
ProCurve(config)#t[Tab]
telnet-server
time
trunk
4-9
UsingtheCLI
telnet
terminal
ProCurve(config)#t
Asmentionedabove,ifyoutypepartofacommandwordandpress[Tab],the
CLIcompletesthecurrentword(ifyouhavetypedenoughofthewordforthe
CLItodistinguishitfromotherpossibilities),includinghyphenatedexten-
sions.Forexample:
ProCurve(config)#port[Tab]
ProCurve(config)#port-security_
Pressing[Tab]afteracompletedcommandwordliststhefurtheroptionsfor
thatcommand.
ProCurve(config)#stack[Tab]
commander<commander-str>
join<mac-addr>
auto-join
transmission-interval<integer>
<cr>
ProCurve(config)#stack
CommandOptionDisplays
ConventionsforCommandOptionDisplays.WhenyouusetheCLIto
listoptionsforaparticularcommand,youwillseeoneormoreofthefollowing
conventionstohelpyouinterpretthecommanddata:
Braces(<>)indicatearequiredchoice.
Squarebrackets([])indicateoptionalelements.
Verticalbars(|)separatealternative,mutuallyexclusiveoptionsina
command.
4-10
UsingtheCLI
ListingCommandOptions.YoucanusetheCLItoremindyouofthe
optionsavailableforacommandbyenteringcommandkeywordsfollowed
by?.Forexample,supposeyouwanttoseethecommandoptionsforconfig-
uringportC5:
Thisexampledisplaysthecommandoptions
forconfiguringtheswitchsconsolesettings.
Figure4-5. ExampleofHowToListtheOptionsforaSpecificCommand
DisplayingCLI"Help"
CLIHelpprovidestwotypesofcontext-sensitiveinformation:
Commandlistwithabriefsummaryofeachcommandspurpose
Detailedinformationonhowtouseindividualcommands
DisplayingCommand-ListHelp.Youcandisplayalistingofcommand
Helpsummariesforallcommandsavailableatthecurrentprivilegelevel.That
is,whenyouareattheOperatorlevel,youcandisplaytheHelpsummaries
onlyforOperator-Levelcommands.AttheManagerlevel,youcandisplaythe
HelpsummariesforboththeOperator andManagerlevels,andsoon.
Syntax: help
Forexample,tolisttheOperator-Levelcommandswiththeirpurposes:
4-11
UsingtheCLI
Figure4-6. ExampleofContext-SensitiveCommand-ListHelp
DisplayingHelpforanIndividualCommand.YoucandisplayHelpfor
anycommandthatisavailableatthecurrentcontextlevelbyenteringenough
ofthecommandstringtoidentifythecommand,alongwithhelp.
Syntax: <command-string>help
Forexample,tolist theHelpfortheinterfacecommandintheGlobal
Configurationprivilegelevel:
Figure4-7. ExampleofHowToDisplayHelpforaSpecificCommand
AsimilaractionliststheHelpshowingadditionalparameteroptionsfora
givencommand.ThefollowingexampleillustrateshowtolisttheHelpforan
interfacecommandactingonaspecificport:
4-12
UsingtheCLI
Figure4-8. ExampleofHelpforaSpecificInstanceofaCommand
Notethattryingtolistthehelpforanindividualcommandfromaprivilege
levelthatdoesnotincludethatcommandresultsinanerrormessage.For
example,tryingtolistthehelpfortheinterfacecommandwhileattheglobal
configurationlevelproducesthisresult:
ProCurve#interfacehelp
Invalidinput:interface
ConfigurationCommandsandtheContext
ConfigurationModes
Youcanexecuteanyconfigurationcommandintheglobalconfigurationmode
orinselectedcontextmodes.However,usingacontextmodeenablesyouto
executecontext-specificcommandsfaster,withshortercommandstrings.
Theconfigurationoptionsincludeinterface(portortrunkgroup)andVLAN
contextmodes:
PortorTrunk-GroupContext.Includesport-ortrunk-specific
commandsthatapplyonlytotheselectedport(s)ortrunkgroup,plusthe
globalconfiguration,Manager,andOperatorcommands.Thepromptforthis
modeincludestheidentityoftheselectedport(s):
ProCurve(config)#interfaceec3-c6Commandexecutedat
configurationlevelfor
ProCurve(config)#interfaceetrk1
enteringport ortrk1static
trunk-groupcontext.
ProCurve(eth-C5-C8)# Resultingpromptshowing
ProCurve(eth-Trk1)#
portorstatictrunk
contexts.
4-13
UsingtheCLI
ProCurve(eth-C5-C8)#? Liststhecommandsyou
canuseintheportorstatic
ProCurve(eth-C5-C8)#?
trunkcontext,plusthe
Manager,Operator,and
contextcommandsyoucan
executeatthislevel.
Intheportcontext,thefirstblockofcommandsinthe"?"
listingshowthecontext-specificcommandsthatwillaffect
onlyportsC3-C6.
TheremainingcommandsinthelistingareManager,
Operator,andcontextcommands.
Figure4-9. Context-SpecificCommandsAffectingPortContext
4-14
UsingtheCLI
VLANContext. IncludesVLAN-specificcommandsthatapplyonlytothe
selectedVLAN,plusManagerandOperatorcommands.Thepromptforthis
modeincludestheVLANIDoftheselectedVLAN.Forexample,ifyouhad
alreadyconfiguredaVLANwithanIDof100intheswitch:
ProCurve(config)#vlan100 Commandexecutedatconfigura-
tionleveltoenterVLAN100
context.
ProCurve(vlan-100)# ResultingpromptshowingVLAN
100context.
ProCurve(vlan-100)#? Listscommandsyoucanuseinthe
VLANcontext,plusManager,Oper-
ator,andcontextcommandsyou
canexecuteatthislevel.
IntheVLAN
context,the
firstblockof
commandsin
the"?"listing
showthe
commandsthat
willaffectonly
vlan-100.
Theremaining
commandsin
thelistingare
Manager,
Operator,and
context
commands.
Figure4-10. Context-SpecificCommandsAffectingVLANContext
4-15
CLIControlandEditing
CLIControlandEditing
Keystrokes Function
[Ctrl][A] Jumpstothefirstcharacterofthecommandline.
[Ctrl][B]or[<] Movesthecursorbackonecharacter.
[Ctrl][C] Terminatesataskanddisplaysthecommandprompt.
[Ctrl][D] Deletesthecharacteratthecursor.
[Ctrl][E] Jumpstotheendofthecurrentcommandline.
[Ctrl][F]or[>] Movesthecursorforwardonecharacter.
[Ctrl][K] Deletesfromthecursortotheendofthecommandline.
[Ctrl][L]or[Ctrl][R] Repeatscurrentcommandlineonanewline.
[Ctrl][N]or[v] Entersthenextcommandlineinthehistorybuffer.
[Ctrl][P]or[^] Entersthepreviouscommandlineinthehistorybuffer.
[Ctrl][U]or[Ctrl][X] Deletesfromthecursortothebeginningofthecommandline.
[Ctrl][W] Deletesthelastwordtyped.
[Esc][B] Movesthecursorbackwardoneword.
[Esc][D] Deletesfromthecursortotheendoftheword.
[Esc][F] Movesthecursorforwardoneword.
[Delete]or Deletesthefirstcharactertotheleftofthecursorinthecommand
[Backspace]
line.
4-16
5
UsingtheWebBrowserInterface
Contents
Overview ...................................................... 5-2
GeneralFeatures ............................................... 5-3
StartingaWebBrowserInterfaceSessionwiththeSwitch............ 5-4
UsingaStandaloneWebBrowserinaPCorUNIXWorkstation .... 5-4
UsingProCurveManager(PCM)orProCurveManagerPlus(PCM+)5-5
TasksforYourFirstWebBrowserInterfaceSession ................. 5-7
ViewingtheFirstTime Install Window ........................ 5-7
CreatingUsernamesandPasswordsintheBrowserInterface ...... 5-8
UsingthePasswords .................................... 5-10
UsingtheUserNames ................................... 5-10
IfYouLoseaPassword .................................. 5-10
OnlineHelpfortheWebBrowserInterface .................... 5-11
Support/MgmtURLsFeature .................................... 5-12
SupportURL .............................................. 5-13
StatusReportingFeatures ....................................... 5-14
TheOverviewWindow ............... ....................... 5-14
ThePort Utilization andStatusDisplays ....................... 5-15
PortUtilization ......................................... 5-15
PortStatus............................................. 5-17
TheAlertLog .............................................. 5-18
SortingtheAlertLogEntries ............................. 5-18
AlertTypesandDetailedViews ........................... 5-19
TheStatusBar ............................................. 5-20
SettingFaultDetectionPolicy ................................ 5-21
5-1
Overview
Overview
TheWebbrowserinterfacebuiltintotheswitchletsyoueasilyaccessthe
switchfromabrowser-basedPConyournetwork.Thisletsyoudothe
following:
OptimizeyournetworkuptimebyusingtheAlertLogandotherdiagnostic
tools
Makeconfigurationchangestotheswitch
Maintainsecuritybyconfiguringusernamesandpasswords
Thischaptercoversthefollowing:
Generalfeatures(page5-3).
Startingawebbrowserinterfacesession(page5-4)
Tasksforyourfirstwebbrowserinterfacesession(page5-7):
Creatingusernamesandpasswordsinthewebbrowserinterface
(page5-8)
SelectingthefaultdetectionconfigurationfortheAlertLogoperation
(page5-21)
Gettingaccesstoonlinehelpforthewebbrowserinterface(page
5-11)
Descriptionofthewebbrowserinterface:
Overviewwindowandtabs(page5-14)
PortUtilizationandStatusdisplays(page5-15)
AlertLogandAlerttypes(page5-18)
SettingtheFaultDetectionPolicy(page5-21)
Not e Ifyouwantsecuritybeyondthatachievedwithusernamesandpasswords,
youcandisableaccesstothewebbrowserinterface.Thisisdonebyeither
executingnoweb-managementattheCommandPromptorchangingtheWeb
AgentEnabledparametersettingtoNo(page7-3).
5-2
GeneralFeatures
GeneralFeatures
Theswitchincludesthesewebbrowserinterfacefeatures:
SwitchConfiguration:
Ports
VLANsandPrimaryVLAN
Faultdetection
Portmonitoring(mirroring)
Systeminformation
Enable/DisableMulticastFiltering(IGMP)andSpanningTree
IP
Stacking
SupportandmanagementURLs
SwitchSecurity:Usernamesandpasswords
SwitchDiagnostics:
Ping/LinkTest
Devicereset
Configurationreport
Switchstatus
Portutilization
Portcounters
Portstatus
Alertlog
Switchsysteminformationlisting
5-3
StartingaWebBrowserInterfaceSessionwiththeSwitch
StartingaWebBrowserInterface
SessionwiththeSwitch
Youcanstartawebbrowsersessioninthefollowingways:
UsingastandalonewebbrowseronanetworkconnectionfromaPCor
UNIXworkstation:
Directlyconnectedtoyournetwork
Connectedthroughremoteaccesstoyournetwork
UsingamanagementstationrunningProCurveManageronyournetwork
UsingaStandaloneWebBrowserinaPCorUNIX
Workstation
Thisprocedureassumesthatyouareusingacompatiblewebbrowser(see
thesoftwareReleaseNotesformoreinformation)andthattheswitchis
configuredwithanIPaddressaccessiblefromyourPCorworkstation.(For
moreonassigninganIPaddress,refertoIPConfigurationonpage8-3.)
1. EnsurethattheJava
TM
appletsareenabledforyourbrowser.Formore
informationonthistopic,refertoyourbrowsersonlineHelp.
2. Usethewebbrowsertoaccesstheswitch.Ifyournetworkincludesa
DomainNameServer(DNS),yourswitchsIPaddressmayhaveaname
associatedwithit(forexample,switch5308)thatyoucantypeinthe
LocationorAddressfieldinsteadoftheIPaddress.UsingDNSnames
typicallyimprovesbrowserperformance.Contactyournetworkadminis-
tratortoenquireaboutDNSnamesassociatedwithyourProCurveswitch.
TypetheIPaddress(orDNSname)oftheswitchinthebrowserLocation
orAddress(URL)fieldandpress[Enter].(Itisnotnecessarytoinclude
http://.)
switch5308 [Enter] (exampleofaDNS-typename)
10.11.12.195 [Enter] (exampleofanIPaddress)
5-4
UsingProCurveManager(PCM)orProCurveManager
Plus(PCM+)
ProCurveManagerandProCurveManagerPlusaredesignedforinstallation
onanetworkmanagementworkstation.Forthisreason,thesystemrequire-
mentsaredifferentfromthesystemrequirementsforaccessingtheswitchs
webbrowserinterfacefromanon-managementPCorworkstation.For
ProCurvePCMandPCM+requirements,refertotheinformationprovided
withthesoftware.
Thisprocedureassumesthat:
YouhaveinstalledtherecommendedwebbrowseronaPCorworkstation
thatservesasyournetworkmanagementstation.
ThenetworkeddeviceyouwanttoaccesshasbeenassignedanIPaddress
and(optionally)aDNSname,andhasbeendiscoveredbyPCMorPCM+.
(FormoreonassigninganIPaddress,refertoIPConfigurationonpage
8-3.)
ToestablishawebbrowsersessionwithProCurvePCMorPCM+running,do
thefollowingonthenetworkmanagementstation:
1. MakesuretheJava
TM
appletsareenabledforyourwebbrowser.Ifthey
arenot,refertothewebbrowseronlineHelpforspecificinformationon
enablingtheJavaapplets.
2. IntheInterconnectedDeviceslistingunderNetworkManagerHome(inthe
PCM/PCM+sidebar),right-clickonthemodelnumberofthedeviceyou
wanttoaccess.
3. ThewebbrowserinterfaceautomaticallystartswiththeStatusOverview
windowdisplayedfortheselecteddevice,asshowninfigure5-1.
Not e IftheRegistrationwindowappears,clickontheStatustab.
5-5
First-Time
InstallAlert
Alert
Log
Figure5-1. ExampleofStatusOverviewScreen
Not e Theabovescreenappearssomewhatdifferentiftheswitchisconfiguredasa
stackCommander.Foranexample,seefigure2-3onpage2-5.
5-6
TasksforYourFirstWebBrowserInterfaceSession
TasksforYourFirstWebBrowser
InterfaceSession
Thefirsttimeyouaccessthewebbrowserinterface,therearethreetasksthat
youshouldperform:
ReviewtheFirstTimeInstallwindow
SetManagerandOperatorpasswords
Setaccesstothewebbrowserinterfaceonlinehelp
ViewingtheFirstTimeInstallWindow
Whenyouaccesstheswitchswebbrowserinterfaceforthefirsttime,the
AlertlogcontainsaFirstTimeInstallalert,asshowninfigure5-2.Thisgives
youinformationaboutfirsttimeinstallations,andprovidesanimmediate
opportunitytosetpasswordsforsecurityandtospecifyaFaultDetection
policy,whichdeterminesthetypesofmessagesthatwillbedisplayedinthe
AlertLog.
DoubleclickonFirstTimeInstallintheAlertlog(figure5-1onpage5-6).The
webbrowserinterfacethendisplaystheFirstTimeInstallwindow,below.
Figure5-2.First-TimeInstallWindow
5-7
Thiswindowisthelaunchingpointforthebasicconfigurationyouneedto
performtosetwebbrowserinterfacepasswordstomaintainsecurityand
FaultDetectionpolicy,whichdeterminesthetypesofmessagesthatwillbe
displayedintheAlertLog.
Tosetwebbrowserinterfacepasswords,clickonsecureaccesstothedevice
todisplaytheDevicePasswordsscreen,andthengotothenextpage.(You
canalsoaccessthepasswordscreenbyclickingontheSecuritytab.)
TosetFaultDetectionpolicy,clickonselectthefaultdetectionconfigurationin
thesecondbulletinthewindowandgotothesection,SettingFaultDetection
Policyonpage5-21.(Youcanalsoaccessthepasswordscreenbyclickingon
theConfigurationtab,andthen[FaultDetection]button.)
CreatingUsernamesandPasswordsintheBrowser
Interface
Youmaywanttocreatebothausernameandpasswordtocreateaccess
securityforyourswitch.Therearetwolevelsofaccesstotheinterfacethat
canbecontrolledbysettingusernamesandpasswords:
Operator.AnOperator-levelusernameandpasswordallowsread-only
accesstomostofthewebbrowserinterface,butpreventsaccesstothe
Securitywindow.
Manager.AManager-levelusernameandpasswordallowsfullread/
writeaccesstothewebbrowserinterface.
5-8
Figure5-3. TheDevicePasswordsWindow
Tosetthepasswords:
1. AccesstheDevicePasswordsscreenbyoneofthefollowingmethods:
IftheAlertLogincludesaFirstTimeInstallevententry,double
clickonthisevent,then,intheresultingdisplay,clickonthe
secureaccesstothedevicelink.
SelecttheSecuritytab.
2. ClickintheappropriateboxintheDevicePasswordswindowandenter
usernamesandpasswords.Youwillberequiredtorepeatthepassword
stringsintheconfirmationboxes.
Boththeusernamesandpasswordscanbeupto16printableASCII
characters.
3. Clickon[ApplyChanges]toactivatetheusernamesandpasswords.
Not e Passwordsyouassigninthewebbrowserinterfacewilloverwriteprevious
passwordsassignedineitherthewebbrowserinterface,theCommand
Prompt,ortheswitchconsole.Thatis,themostrecentlyassignedpasswords
aretheswitchspasswords,regardlessofwhichinterfacewasusedtoassign
thestring.
5-9
UsingthePasswords
Figure5-4. ExampleofthePasswordWindowintheWebBrowserInterface
Themanagerandoperatorpasswordsareusedtocontrolaccesstoallswitch
interfaces.Onceset,youwillbepromptedtosupplythepasswordeverytime
youtrytoaccesstheswitchthroughanyofitsinterfaces.Thepasswordyou
enterdeterminesthecapabilityyouhaveduringthatsession:
Enteringthemanagerpasswordgivesyoufullread/writecapabilities
Enteringtheoperatorpasswordgivesyoureadandlimitedwritecapabil-
ities.
UsingtheUserNames
Ifyoualsosetusernamesinthewebbrowserinterfacescreen,youmust
supplythecorrectusernameforwebbrowserinterfaceaccess.Ifausername
hasnotbeenset,thenleavetheUserNamefieldinthepasswordwindow
blank.
NotethattheCommandPromptandswitchconsoleinterfacesuseonlythe
password,anddonotpromptyoufortheUserName.
IfYouLoseaPassword
Ifyoulosethepasswords,youcanclearthembypressingtheClearbuttonon
thefrontoftheswitch.Thisactiondeletesallpasswordandusername
protectionfromalloftheswitchsinterfaces.
TheClearbuttonisprovidedforyourconvenience,butitspresencemeans
thatifyouareconcernedwiththesecurityoftheswitchconfigurationand
operation,youshouldmakesuretheswitchisinstalledinasecurelocation,
suchasalockedwiringcloset.(Formoreinformation,refertoFrontPanel
SecurityinthechaptertitledConfiguringUsernameandPasswordSecu-
rityintheAccessSecurityGuideforyourswitch.)
5-10
OnlineHelpfortheWebBrowserInterface
OnlineHelpisavailableforthewebbrowserinterface.Youcanuseitby
clickingonthequestionmarkbuttonintheupperrightcornerofanyofthe
webbrowserinterfacescreens.
TheHelpButton
Figure5-5. TheHelpButton
Context-sensitivehelpisprovidedforthescreenyouareon.Helpcanbe
downloadedontoanylocalserverfrom:
www.hp.com/rnd/device_help/download.htm
Instructionsareincludedinthewebpage.
5-11
Support/MgmtURLsFeature
TheSupport/MgmtURLswindowenablesyoutochangetheWorldWideWeb
UniversalResourceLocator(URL)fortwofunctions:
SupportURLasupportinformationsiteforyourswitch
ManagementServerURLThewebsiteforwebbrowseronlineHelp.
Thedefaultis:
www.hp.com/rnd/device_help
3.Enteroneofthefollowing(orusethedefaultsetting):
TheURLforthesupportinformationsourceyouwantthe
switchtoaccesswhenyouclickonthewebbrowserinterface
Supporttab.ThedefaultistheURLfortheProCurve
Networkinghomepage.
TheURLofaPCM(ProCurveNetworkManager)workstation
orotherserverfortheonlineHelpfilesforthiswebbrowser
interface.
1.ClickHere
2.ClickHere
4.ClickonApplyChanges
Figure5-6. TheDefaultSupport/MgmtURLsWindow
5-12
SupportURL
ThisisthesitethattheswitchaccesseswhenyouclickontheSupporttabon
thewebbrowserinterface.ThedefaultURLis:
www.procurve.com
whichisthewebsiteforProCurvesnetworkingproducts.
Clickonthe[Support]buttononthatpageandyoucangettosupportinforma-
tionregardingyourswitch,includingwhitepapers,operatingsystem(OS)
updates,andmore.
YoucouldinsteadentertheURLforalocalsitethatyouuseforentering
reportsaboutnetworkperformance,orwhateverotherfunctionyouwould
liketobeabletoeasilyaccessbyclickingonthe[Support]tab.
5-13
StatusReportingFeatures
Browserelementscoveredinthissectioninclude:
TheOverviewwindow(below)
Portutilizationandstatus(page5-15)
TheAlertlog(page5-18)
TheStatusbar(page5-20)
TheOverviewWindow
TheOverviewWindowisthehomescreenforanyentryintothewebbrowser
interface.Thefollowingfigureidentifiesthevariouspartsofthescreen.
AlertLog
ControlBar
PortUtiliza-
tionGraphs
(page5-15)
ActiveTab
AlertLog
(page5-18)
PortStatus
Indicators
(page5-17)
ButtonBar
TabBar
StatusBar
(page5-20)
ActiveButton
Figure5-7. TheStatusOverviewWindow
5-14
PolicyManagementandConfiguration. ProCurvePCMcanperform
network-widepolicymanagementandconfigurationofyourswitch.Formore
information,refertothedocumentationprovidedwiththePCMsoftware.
ThePortUtilizationandStatusDisplays
ThePortUtilizationandStatusdisplaysshowanoverviewofthestatusofthe
switchandtheamountofnetworkactivityoneachport.Thefollowingfigure
showsasamplereadingofthePortUtilizationandPortStatus.
PortStatusIndicators
PortUtilizationBarGraphs BandwidthDisplayControl
Legend
Figure5-8. TheGraphsArea
PortUtilization
ThePortUtilizationbargraphsshowthenetworktrafficontheportwitha
breakdownofthepackettypesthathavebeendetected(unicastpackets,non-
unicastpackets,anderrorpackets).TheLegendidentifiestraffictypesand
theirassociatedcolorsonthebargraph:
%UnicastRx&AllTx:Thisisallunicasttrafficreceivedandall
transmittedtrafficofanytype.Thisindicator(abluecoloronmany
systems)cansignifyeithertransmittedorreceivedtraffic.
%Non-UnicastPktsRx:Allmulticastandbroadcasttrafficreceivedby
theport.Thisindicator(agoldcoloronmanysystems)enablesyouto
knowat-a-glancethesourceofanynon-unicasttrafficthatiscausing
highutilizationoftheswitch.Forexample,ifoneportisreceivingheavy
broadcastormulticasttraffic,allportswillbecomehighlyutilized.By
color-codingthereceivedbroadcastandmulticastutilization,thebar
graphquicklyandeasilyidentifiestheoffendingport.Thismakesitfaster
andeasiertodiscovertheexactsourceoftheheavytrafficbecauseyou
donthavetoexamineportcounterdatafromseveralports.
5-15
%ErrorPktsRx:Allerrorpacketsreceivedbytheport.(Thisindicator
isareddishcoloronmanysystems.)Althougherrorsreceivedonaport
arenotpropagatedtotherestofthenetwork,aconsistentlyhighnumber
oferrorsonaspecificportmayindicateaproblemonthedeviceor
networksegmentconnectedtotheindicatedport.
MaximumActivityIndicator:Asthebarsinthegraphareachange
heighttoreflectthelevelofnetworkactivityonthecorrespondingport,
theyleaveanoutlinetoidentifythemaximumactivitylevelthathasbeen
observedontheport.
UtilizationGuideline. Anetworkutilizationof40%isconsideredthe
maximumthatatypicalEthernet-typenetworkcanexperiencebeforeencoun-
teringperformancedifficulties.Ifyouobserveutilizationthatisconsistently
higherthan40%onanyport,clickonthePortCountersbuttontogetadetailed
setofcountersfortheport.
TochangetheamountofbandwidththePortUtilizationbargraph
shows. Clickonthebandwidthdisplaycontrolbuttonintheupperleftcorner
ofthegraph.(Thebuttonshowsthecurrentscalesetting,suchas40%.)Inthe
resultingmenu,selectthebandwidthscaleyouwantthegraphtoshow(3%,
10%,25%,40%,75%,or100%),asshowninfigurefigure5-9.
Notethatwhenviewingactivityonagigabitport,youmaywanttoselecta
lowervalue(suchas3%or10%).Thisisbecausethebandwidthutilizationof
currentnetworkapplicationsongigabitlinksistypicallyminimal,andmay
notappearonthegraphifthescaleissettoshowhighbandwidthutilization.
Figure5-9. ChangingtheGraphAreaScale
Todisplayvaluesforeachgraphbar. Holdthemousecursoroveranyof
thebarsinthegraph,andapop-updisplayisactivatedshowingtheport
identificationandnumericalvaluesforeachofthesectionsofthebar,as
showninfigure5-10(next).
5-16
Figure5-10. DisplayofNumericalValuesfortheBar
PortStatus
PortStatusIndicators
Legend
Figure5-11. ThePortStatusIndicatorsandLegend
ThePortStatusindicatorsshowasymbolforeachportthatindicatesthe
generalstatusoftheport.Therearefourpossiblestatuses:
PortConnectedtheportisenabledandisproperlyconnectedtoan
activenetworkdevice.
PortNotConnectedtheportisenabledbutisnotconnectedtoan
activenetworkdevice.Acablemaynotbeconnectedtotheport,orthe
deviceattheotherendmaybepoweredofforinoperable,orthecableor
connecteddevicecouldbefaulty.
PortDisabledtheporthasbeenconfiguredasdisabledthroughthe
webbrowserinterface,theswitchconsole,orSNMPnetworkmanage-
ment.
PortFault-Disabledafaultconditionhasoccurredontheportthat
hascausedittobeauto-disabled.NotethatthePortFault-Disabled
symbolwillbedisplayedinthelegendonlyifoneormoreoftheportsis
inthatstatus.SeeappendixB,MonitoringandAnalyzingSwitchOpera-
tionformoreinformation.
5-17
TheAlertLog
ThewebbrowserinterfaceAlertLog,showninthelowerhalfofthescreen,
showsalistofnetworkoccurrences,oralerts,thatweredetectedbythe
switch.TypicalalertsareBroadcastStorm,indicatinganexcessivenumberof
broadcastsreceivedonaport,andProblemCable,indicatingafaultycable.For
moreinformationonalerts,seeAlertTypesandDetailedViewsonpage5-19
Figure5-12.ExampleoftheAlertLog
Eachalerthasthefollowingfieldsofinformation:
StatusThelevelofseverityoftheeventgenerated.Severitylevelscan
beInformation,Normal,Warning,andCritical.Ifthealertisnew(hasnot
yetbeenacknowledged),theNewsymbolisalsointheStatuscolumn.
AlertThespecificeventidentification.
Date/TimeThedateandtimetheeventwasreceivedbytheweb
browserinterface.Thisvalueisshownintheformat:DD-MM-YY
HH:MM:SSAM/PM,forexample,16-Sep-997:58:44AM.
DescriptionAshortnarrativestatementthatdescribestheevent.For
example,ExcessiveCRC/Alignmenterrorsonport:8.
SortingtheAlertLogEntries
Thealertsaresorted,bydefault,bytheDate/Timefieldwiththemostrecent
alertlistedatthetopofthelist.Thesecondmostrecentalertisdisplayed
belowthetopalertandsoon.Ifalertsoccurredatthesametime,the
simultaneousalertsaresortedbyorderinwhichtheyappearintheMIB.
Thealertfieldthatisbeingusedtosortthealertlogisindicatedbywhich
columnheadingisinbold.Youcansortbyanyoftheothercolumnsbyclicking
onthecolumnheading.TheAlertandDescriptioncolumnsaresortedalpha-
betically,whiletheStatuscolumnissortedbyseveritytype,withmorecritical
severityindicatorsappearingabovelesscriticalindicators.
5-18
AlertTypesandDetailedViews
Thewebbrowserinterfacegeneratesthefollowingalerttypes:
AutoPartition Highcollisionordroprate
BackupTransition LossofLink
Excessivebroadcasts Mis-ConfiguredSQE
ExcessiveCRC/alignmenterrors NetworkLoop
Excessivejabbering PolarityReversal
Excessivelatecollisions SecurityViolation
FirstTimeInstall Stuck10BaseTPort
Full-DuplexMismatch Toomanyundersized(runt)/giant
Half-DuplexMismatch
packets
TransceiverHotSwap
Not e Whentroubleshootingthesourcesofalerts,itmaybehelpfultocheckthe
switchsPortStatusandPortCounterwindowsandtheEventLoginthe
consoleinterface.
BydoubleclickingonAlertEntries,thewebbrowserinterfacedisplaysa
DetailVieworseparatewindowdetailinginformationabouttheevents.The
DetailViewcontainsadescriptionoftheproblemandapossiblesolution.It
alsoprovidesfourmanagementbuttons:
AcknowledgeEventremovestheNewsymbolfromthelogentry
DeleteEventremovesthealertfromtheAlertLog
CancelButtonclosesthedetailviewwithnochangetothestatusof
thealertandreturnsyoutotheOverviewscreen.
AsampleDetailViewdescribinganExcessiveCRC/AlignmentErroralertis
shownhere.
5-19
Figure5-13.ExampleofAlertLogDetailView
TheStatusBar
TheStatusBarisdisplayedintheupperleftcornerofthewebbrowser
interfacescreen.Figure5-14showsanexpandedviewofthestatusbar.
StatusIndicator
MostCriticalAlertDescription
ProductName
Figure5-14. ExampleoftheStatusBar
TheStatusbarconsistsoffourobjects:
StatusIndicator.Indicates,byicon,theseverityofthemostcriticalalert
inthecurrentdisplayoftheAlertLog.Thisindicatorcanbeoneofthree
shapesandcolorsasshowninthefollowingtable.
5-20
Table5-1.StatusIndicatorKey
Color SwitchStatus StatusIndicatorShape
Blue NormalActivity;"Firsttimeinstallation"
informationavailableintheAlertlog.
Green NormalActivity
Yellow Warning
Red Critical
SystemName.Thenameyouhaveconfiguredfortheswitchbyusing
Identityscreen,systemnamecommand,ortheswitchconsoleSystem
Informationscreen.
MostCriticalAlertDescription.Abriefdescriptionoftheearliest,
unacknowledgedalertwiththecurrenthighestseverityintheAlertLog,
appearingintherightportionoftheStatusBar.Ininstanceswhere
multiplecriticalalertshavethesameseveritylevel,onlytheearliest
unacknowledgedalertisdeployedintheStatusbar.
ProductName.Theproductnameoftheswitchtowhichyouare
connectedinthecurrentwebbrowserinterfacesession.
SettingFaultDetectionPolicy
OneofthepowerfulfeaturesinthewebbrowserinterfaceistheFault
Detectionfacility.Foryourswitch,thisfeaturecontrolsthetypesofalerts
reportedtotheAlertLogbasedontheirlevelofseverity.
SetthispolicyintheFaultDetectionwindow(figure5-15).
5-21
Figure5-15.TheFaultDetectionWindow
TheFaultDetectionscreencontainsalistboxforsettingfaultdetectionand
responsepolicy.Yousetthesensitivitylevelatwhichanetworkproblem
shouldgenerateanalertandsendittotheAlertLog.
ToprovidethemostinformationonnetworkproblemsintheAlertLog,the
recommendedsensitivitylevelforLogNetworkProblemsisHighSensitivity.The
FaultDetectionsettingsare:
HighSensitivity.Thispolicydirectstheswitchtosendallalertstothe
AlertLog.Thissettingismosteffectiveonnetworksthathavenoneor
fewproblems.
MediumSensitivity.Thispolicydirectstheswitchtosendalertsrelated
tonetworkproblemstotheAlertLog.Ifyouwanttobenotifiedof
problemswhichcauseanoticeableslowdownonthenetwork,usethis
setting.
LowSensitivity.Thispolicydirectstheswitchtosendonlythemost
severealertstotheAlertLog.Thispolicyismosteffectiveonanetwork
thatnormallyhasalotofproblemsandyouwanttobeinformedofonly
themostsevereones.
5-22
Never. DisablestheAlertLogandtransmissionofalerts(traps)tothe
managementserver(incaseswhereanetworkmanagementtoolsuchas
ProCurveManagerisinuse).Usethisoptionwhenyoudontwanttouse
theAlertLog.
TheFaultDetectionWindowalsocontainsthreeChangeControlButtons:
ApplyChanges.Thisbuttonstoresthesettingsyouhaveselectedforall
futuresessionswiththewebbrowserinterfaceuntilyoudecidetochange
them.
ClearChanges.Thisbuttonremovesyoursettingsandreturnsthe
settingsforthelistboxtothelevelitwasatinthelastsaveddetection-
settingsession.
ResettoDefaultSettings.Thisbuttonrevertsthepolicysettingto
MediumSensitivityforLogNetworkProblems.
5-23
5-24
6
SwitchMemoryandConfiguration
Contents
Overview ...................................................... 6-3
UsingtheMenuandWebBrowserInterfacesToImplement
OverviewofConfigurationFileManagement ........................ 6-3
UsingtheCLIToImplementConfigurationChanges ................. 6-6
ConfigurationChanges .......................................... 6-9
ConfigurationChangesUsingtheMenuInterface ................ 6-9
UsingSaveandCancelintheMenuInterface ............... 6-10
RebootingfromtheMenuInterface ....................... 6-11
ConfigurationChangesUsingtheWebBrowserInterface ........ 6-12
UsingPrimaryandSecondaryFlashImageOptions................. 6-13
DisplayingtheCurrentFlashImageData ...................... 6-13
SwitchSoftwareDownloads................................. 6-15
LocalSwitchSoftwareReplacementandRemoval .............. 6-16
RebootingtheSwitch .. ... .................................. 6-18
OperatingNotes............................................ 6-22
MultipleConfigurationFiles ..................................... 6-23
GeneralOperation . ......................................... 6-24
ListingandDisplayingStartup-ConfigFiles..................... 6-26
ConfigurationEnabled .................................. 6-26
DisplayingtheContentofASpecificStartup-ConfigFile...... 6-27
ChangingorOverridingtheRebootConfigurationPolicy ......... 6-27
6-1
Contents
ManagingStartup-Config FilesintheSwitch ................... 6-30
RenaminganExistingStartup-ConfigFile .................. 6-30
CreatingaNewStartup-ConfigFile ........................ 6-30
ErasingaStartup-ConfigFile ............................. 6-33
theSwitch to ItsDefaultConfiguration .................... 6-34
TransferringStartup-ConfigFilesToorFromaRemoteServer.... 6-35
TFTP:CopyingaConfigurationFiletoaRemoteHost........ 6-35
TFTP:CopyingaConfigurationFilefromaRemoteHost ..... 6-36
SeriallyConnectedHost ................................. 6-36
ConnectedHost ........................................ 6-37
AutomaticConfigurationUpdatewithDHCPOption66.............. 6-37
CLICommand ............................................. 6-37
PossibleScenariosforUpdatingtheConfigurationFile .......... 6-38
OperatingNotes............................................ 6-39
LogMessages .............................................. 6-39
6-2
Overview
Overview
Thischapterdescribes:
Howswitchmemorymanagesconfigurationchanges
HowtheCLIimplementsconfigurationchanges
Howthemenuinterfaceandwebbrowserinterfaceimplementconfigu-
rationchanges
Howtheswitchprovidessoftwareoptionsthroughprimary/secondary
flashimageoptions
Howtousetheswitchsprimaryandsecondaryflashoptions,including
displayingflashinformation,bootingorrestartingtheswitch,andother
topics
OverviewofConfigurationFile
Management
Theswitchmaintainstwoconfigurationfiles,therunning-configfileandthe
startup-configfile.
Volatile Memory
Running-ConfigFile
(Controls switch operation. When the switch reboots,
the contents of this file are erased and replaced by the
contents of the startup-config file.)
Flash (Non-Volatile) Memory
Startup-ConfigFile
(Preserves the most recently saved configuration
through any subsequent reboot.)
CLIconfiguration
changesarewrittento
thisfile.TousetheCLIto
savethelatestversionof
thisfiletothestartup-
configfile,youmust
executethewrite
memorycommand.
Menuinterfaceconfigu-
rationchangesaresimul-
taneouslywrittentoboth
ofthesefiles.
Figure6-1. ConceptualIllustrationofSwitchMemoryOperation
6-3
OverviewofConfigurationFileManagement
RunningConfigFile:Existsinvolatilememoryandcontrolsswitch
operation.IfnoconfigurationchangeshavebeenmadeintheCLIsince
theswitchwaslastbooted,therunning-configfileisidenticaltothe
startup-configfile.
Startup-configFile:Existsinflash(non-volatile)memoryandisused
topreservethemostrecently-savedconfigurationasthe"permanent"
configuration.
Rebootingtheswitchreplacesthecurrentrunning-configfilewithanew
running-configfilethatisanexactcopyofthecurrentstartup-configfile.
Not e Anyofthefollowingactionsrebootstheswitch:
ExecutingthebootorthereloadcommandintheCLI
ExecutingtheRebootcommandinthemenuinterface
PressingtheResetbuttononthefrontoftheswitch
Removing,thenrestoringpowertotheswitch
Formoreonrebootsandtheswitchsdual-flashimages,seeUsingPrimary
andSecondaryFlashImageOptionsonpage6-13.
OptionsforSavingaNewConfiguration. Makingoneormorechanges
totherunning-configfilecreatesanewoperatingconfiguration.Savinganew
configurationmeanstooverwrite(replace)thecurrentstartup-configfilewith
thecurrentrunning-configfile.Thismeansthatiftheswitchsubsequently
rebootsforanyreason,itwillresumeoperationusingthenewconfiguration
insteadoftheconfigurationpreviouslydefinedinthestartup-configfile.There
arethreewaystosaveanewconfiguration:
IntheCLI:Usethewritememorycommand.Thisoverwritesthecurrent
startup-configfilewiththecontentsofthecurrentrunning-configfile.
Inthemenuinterface:UsetheSavecommand.Thisoverwritesboththe
running-configfileandthestartup-configfilewiththechangesyouhave
specifiedinthemenuinterfacescreen.
Inthewebbrowserinterface:UsetheApplyChangesbuttonorother
appropriatebutton.Thisoverwritesboththerunning-configfileandthe
startup-configfilewiththechangesyouhavespecifiedinthewebbrowser
interfacewindow.
NotethatusingtheCLIinsteadofthemenuorwebbrowserinterfacegives
youtheoptionofchangingtherunningconfigurationwithoutaffectingthe
startupconfiguration.Thisallowsyoutotestthechangewithoutmakingit
6-4
OverviewofConfigurationFileManagement
permanent.Whenyouaresatisfiedthatthechangeissatisfactory,youcan
makeitpermanentbyexecutingthewritememorycommand. Forexample,
supposeyouusethefollowingcommandtodisableport5:
ProCurve(config)#interfaceethernet5disable
Theabovecommanddisablesport5intherunning-configfile,butnotinthe
startup-configfile.Port5remainsdisabledonlyuntiltheswitchreboots.If
youwantport5toremaindisabledthroughthenextreboot,usewritememory
tosavethecurrentrunning-configfiletothestartup-configfileinflash
memory.
ProCurve(config)#writememory
IfyouusetheCLItomakeaconfigurationchangeandthenchangefromthe
CLItotheMenuinterfacewithoutfirstusingwritememorytosavethechange
tothestartup-configfile,thentheswitchpromptsyoutosavethechange.For
example,ifyouusetheCLItocreateVLAN20,andthenselectthemenu
interface,VLAN20isconfiguredintherunning-configfile,butnotinthe
startup-configfile.Inthiscaseyouwillsee:
ProCurve(config)#menu
Doyouwanttosavecurrentconfiguration[y/n]?
Ifyoutype[Y],theswitchoverwritesthestartup-configfilewiththerunning-
configfile,andyourconfigurationchange(s)willbepreservedacrossreboots.
Ifyoutype[N],yourconfigurationchange(s)willremainonlyintherunning-
configfile.Inthiscase,ifyoudonotsubsequentlysavetherunning-configfile,
yourunsavedconfigurationchangeswillbelostiftheswitchrebootsforany
reason.
StoringandRetrievingConfigurationFiles.Youcanstoreorretrievea
backupcopyofthestartup-configfileonanotherdevice.Formoreinforma-
tion,seeappendixA,FileTransfers.
6-5
UsingtheCLIToImplementConfigurationChanges
UsingtheCLIToImplement
ConfigurationChanges
TheCLIoffersthesecapabilities:
Accesstothefullsetofswitchconfigurationfeatures
Theoptionoftestingconfigurationchangesbeforemakingthemperma-
nent
HowToUsetheCLIToViewtheCurrentConfigurationFiles. Use
showcommandstoviewtheconfigurationforindividualfeatures,suchasport
statusorSpanningTreeProtocol.However,tovieweithertheentirestartup-
configfileortheentirerunning-configfile,usethefollowingcommands:
showconfigDisplaysalistingofthecurrentstartup-configfile.
showrunning-configDisplaysalistingofthecurrentrunning-configfile.
writeterminalDisplaysalistingofthecurrentrunning-configfile.
showconfigstatusComparesthestartup-configfiletotherunning-
configfileandlistsoneofthefollowingresults:
Ifthetwoconfigurationsarethesameyouwillsee:
Runningconfigurationisthesameasthestartup
configuration.
Ifthetwoconfigurationsaredifferent,youwillsee:
Runningconfigurationhasbeenchangedandneeds
tobesaved.
Not e Showconfig,showrunning-config,andwriteterminalcommandsdisplaythe
configurationsettingsthatdifferfromtheswitchsfactory-defaultconfigura-
tion.
HowToUsetheCLIToReconfigureSwitchFeatures.Usethisproce-
duretopermanentlychangetheswitchconfiguration(thatis,toenterachange
inthestartup-configfile).
1. UsetheappropriateCLIcommandstoreconfigurethedesiredswitch
parameters.Thisupdatestheselectedparametersintherunning-config
file.
2. Usetheappropriateshowcommandstoverifythatyouhavecorrectly
madethedesiredchanges.
6-6
3. Observetheswitchsperformancewiththenewparametersettingsto
verifytheeffectofyourchanges.
4. Whenyouaresatisfiedthatyouhavethecorrectparametersettings,use
thewritememorycommandtocopythechangestothestartup-configfile.
Syntax: writememory
Forexample,thedefaultportmodesettingisauto.Supposethatyournetwork
usesCat3wiringandyouwanttoconnecttheswitchtoanotherautosensing
devicecapableof100Mbpsoperation.Because100MbpsoverCat3wiring
canintroducetransmissionproblems,therecommendedportmodeisauto-10,
whichallowstheporttonegotiatefull-orhalf-duplex,butrestrictsspeedto
10Mbps.ThefollowingcommandconfiguresportA5toauto-10modeinthe
running-configfile,allowingyoutoobserveperformanceonthelinkwithout
makingthemodechangepermanent.
ProCurve(config)#interfaceea5speed-duplexauto-10
Afteryouaresatisfiedthatthelinkisoperatingproperly,youcansavethe
changetotheswitchspermanentconfiguration(thestartup-configfile)by
executingthefollowingcommand:
Thenewmode(auto-10)onportA5isnowsavedinthestartup-configfile,and
thestartup-configandrunning-configfilesareidentical.Ifyousubsequently
reboottheswitch,theauto-10modeconfigurationonportA5willremain
becauseitisincludedinthestartup-configfile.
HowToCancelChangesYouHaveMadetotheRunning-ConfigFile.
IfyouusetheCLItochangeparametersettingsintherunning-configfile,and
thendecidethatyoudontwantthosechangestoremain,youcanuseeither
ofthefollowingmethodstoremovethem:
Manuallyentertheearliervaluesyouhadforthechangedsettings.(This
isrecommendedifyouwanttorestoreasmallnumberofparameter
settingstotheirpreviousboot-upvalues.)
Updatetherunning-configfiletomatchthestartup-configfilebyreboot-
ingtheswitch.(Thisisrecommendedifyouwanttorestorealarger
numberofparametersettingstotheirpreviousboot-upvalues.)
IfyouusetheCLItochangeaparametersetting,andthenexecutetheboot
commandwithoutfirstexecutingthewritememorycommandtosavethe
change,theswitchpromptsyoutospecifywhethertosavethechangesinthe
currentrunning-configfile.Forexample:
6-7
ProCurve(config)#interfacee1disable
Disablesport1intherunningconfiguration,whichcausesport1toblockalltraffic.
ProCurve(config)#boot
Devicewillberebooted,doyouwanttocontinue[y/n]?y
Doyouwanttosavecurrentconfiguration[y/n]?
Press[Y]tocontinuetherebootingprocess.
Youwillthenseethisprompt.
Figure6-2.BootPromptforanUnsavedConfiguration
Theabovepromptmeansthatoneormoreparametersettingsintherunning-
configfiledifferfromtheircounterpartsinthestartup-configfileandyouneed
tochoosewhichconfigfiletoretainandwhichtodiscard.
Ifyouwanttoupdatethestartup-configfiletomatchtherunning-config
file,press[Y]for"yes".(Thismeansthatthechangesyouenteredinthe
running-configfilewillbesavedinthestartup-configfile.)
Ifyouwanttodiscardthechangesyoumadetotherunning-configfileso
thatitwillmatchthestartup-configfile,thenpress[N]for"no".(Thismeans
thattheswitchwilldiscardthechangesyouenteredintherunning-config
fileandwillupdatetherunning-configfiletomatchthestartup-config
file.)
Not e IfyouusetheCLItomakeachangetotherunning-configfile,youshould
eitherusethewritememorycommandorselectthesaveoptionallowedduring
areboot(figure6-2,above)tosavethechangetothestartup-configfile.That
is,ifyouusetheCLItochangeaparametersetting,butthenreboottheswitch
fromeithertheCLIorthemenuinterfacewithoutfirstexecutingthewrite
memorycommandintheCLI,thecurrentstartup-configfilewillreplacethe
running-configfile,andanychangesintherunning-configfilewillbelost.
UsingtheSavecommandinthemenuinterfacedoesnotsaveachangemade
totherunningconfigbytheCLIunlessyouhavealsomadeaconfiguration
changeinthemenuinterface.Also,themenuinterfacedisplaysthecurrent
running-configvalues.Thus,whereaparametersettingisaccessiblefromboth
theCLIandthemenuinterface,ifyouchangethesettingintheCLI,thenew
valuewillappearinthemenuinterfacedisplayforthatparameter.However,
asindicatedabove,unlessyoualsomakeaconfigurationchangeinthe
menuinterface,onlythewritememorycommandintheCLIwillactually
savethechangetothestartup-configfile.
6-8
UsingtheMenuandWebBrowserInterfacesToImplementConfigurationChanges
HowToResetthestartup-configandrunning-configFilestothe
Factory-DefaultConfiguration. Thiscommandrebootstheswitch,
replacingthecontentsofthecurrentstartup-configandrunning-configfiles
withthefactory-defaultstartupconfiguration.
Syntax: erasestartup-config
Forexample:
ProCurve(config)#erasestartup-config
Configurationwillbedeletedanddevicerebooted,continue[y/n]?
Figure6-3.ResettingtotheFactory-DefaultConfiguration
Press[Y]toreplacethecurrentconfigurationwiththefactorydefaultconfig-
urationandreboottheswitch.Press[N]toretainthecurrentconfigurationand
preventareboot.
UsingtheMenuandWebBrowser
InterfacesToImplement
ConfigurationChanges
Themenuandwebbrowserinterfacesoffertheseadvantages:
Quick,easymenuorwindowaccesstoasubsetofswitchconfiguration
features(SeetheMenuFeaturesListonpage3-14andthewebbrowser
GeneralFeatureslistonpage.)
Viewingseveralrelatedconfigurationparametersinthesamescreen,with
theirdefaultandcurrentsettings
Immediatelychangingboththerunning-configfileandthestartup-config
filewithasinglecommand
ConfigurationChangesUsingtheMenuInterface
Youcanusethemenuinterfacetosimultaneouslysaveandimplementasubset
ofswitchconfigurationchangeswithouthavingtoreboottheswitch.Thatis,
whenyousaveaconfigurationchangeinthemenuinterface,yousimultane-
ouslychangeboththerunning-configfileandthestartup-configfile.
6-9
Not e TheonlyexceptiontothisoperationaretwoVLAN-relatedparameterchanges
thatrequirearebootdescribedunderRebootingToActivateConfiguration
Changesonpage6-12.
UsingSaveandCancelintheMenuInterface
Foranyconfigurationscreeninthemenuinterface,theSavecommand:
1. Implementsthechangesintherunning-configfile.
2. Savesyourchangestothestartup-configfile.
Ifyoudecidenottosaveandimplementthechangesinthescreen,select
Canceltodiscardthemandcontinueswitchoperationwiththecurrentoper-
ation.Forexample,supposeyouhavemadethechangesshownbelowinthe
SystemInformationscreen:
Tosaveand
implementthe
changesforall
parametersinthis
screen,pressthe
[Enter]key,then
press[S](forSave).
Tocancelall
changes, pressthe
[Enter]key,then
press[C](forCancel)
Figure6-4. ExampleofPendingConfigurationChangesthatCanBeSavedor
Cancelled
6-10
Not e IfyoureconfigureaparameterintheCLIandthengotothemenuinterface
withoutexecutingawritememorycommand,thosechangesarestoredonlyin
therunningconfiguration.Ifyouthenexecuteaswitchrebootcommandin
themenuinterface,theswitchdiscardstheconfigurationchangesmadewhile
usingtheCLI.ToensurethatchangesmadewhileusingtheCLIaresaved,
executewritememoryintheCLIbeforerebootingtheswitch.
RebootingfromtheMenuInterface
Terminatesthecurrentsessionandperformsaresetoftheoperating
system
Activatesanyconfigurationchangesthatrequireareboot
Resetsstatisticalcounterstozero
(Notethatstatisticalcounterscanberesettozerowithoutrebootingthe
switch.SeeDisplayingPortCountersonToDisplaythePortCounter
SummaryReportonpageB-12.)
ToReboottheswitch,usetheRebootSwitchoptionintheMainMenu.(Note
thattheRebootSwitchoptionisnotavailableifyoulogoninOperatormode,
thatis,ifyouenteranOperatorpasswordinsteadofamanagerpasswordat
thepasswordprompt.)
RebootSwitchoption
Figure6-5. TheRebootSwitchOptionintheMainMenu
6-11
RebootingToActivateConfigurationChanges. Configurationchanges
formostparametersbecomeeffectiveassoonasyousavethem.However,
youmustreboottheswitchinordertoimplementachangeintheMaximum
VLANstosupportparameter.
(Toaccesstheseparameters,gototheMainmenuandselect 2.Switch
Configuration,then8.VLANMenu,then1.VLANSupport.)
Ifconfigurationchangesrequiringareboothavebeenmade,theswitch
displaysanasterisk(*)nexttothemenuiteminwhichthechangehasbeen
made.Forexample,ifyouchangeandsaveparametervaluesfortheMaximum
VLANstosupportparameter,anasteriskappearsnexttotheVLANSupportentry
intheVLANMenuscreen,andalsonexttotheSwitchConfiguration... entry
intheMainmenu,asshowninfigure4-6:
Reminderto
reboottheswitch
toactivate
configuration
changes.
Asteriskindicates
aconfiguration
changethat
requiresareboot
inordertotake
effect.
Figure6-6. IndicationofaConfigurationChangeRequiringaReboot
ConfigurationChangesUsingtheWebBrowser
Interface
Youcanusethewebbrowserinterfacetosimultaneouslysaveandimplement
asubsetofswitchconfigurationchangeswithouthavingtoreboottheswitch.
Thatis,whenyousaveaconfigurationchange(inmostcases,byclickingon
ApplyChangesorApplySettings,yousimultaneouslychangeboththerunning-
configfileandthestartup-configfile.
6-12
UsingPrimaryandSecondaryFlashImageOptions
UsingPrimaryandSecondaryFlash
ImageOptions
Theswitchfeaturestwoflashmemorylocationsforstoringswitchsoftware
imagefiles:
PrimaryFlash:Thedefaultstorageforaswitchsoftwareimage.
SecondaryFlash:Theadditionalstorageforeitheraredundantoran
alternateswitchsoftwareimage.
WiththePrimary/Secondaryflashoptionyoucantestanewimageinyour
systemwithouthavingtoreplaceapreviouslyexistingimage.Youcanalso
usetheimageoptionsfortroubleshooting.Forexample,youcancopya
problemimageinto Secondaryflashforlateranalysisandplaceanother,
provenimageinPrimaryflashtorunyoursystem.Theswitchcanuseonly
oneimageatatime.
Thefollowingtasksinvolveprimary/secondaryflashoptions:
Displayingthecurrentflashimagedataanddeterminingwhichswitch
softwareversionsareavailable
Switchsoftwaredownloads
Replacingandremoving(erasing)alocalswitchsoftwareversion
Systembooting
DisplayingtheCurrentFlashImageData
Usethecommandsinthissectionto:
Determinewhetherthereareflashimagesinbothprimaryandsecondary
flash
Determinewhethertheimagesinprimaryandsecondaryflasharethe
same
Identifywhichswitchsoftwareversioniscurrentlyrunning
ViewingtheCurrentlyActiveFlashImageVersion.Thiscommand
identifiesthesoftwareversiononwhichtheswitchiscurrentlyrunning,and
whethertheactiveversionwasbootedfromtheprimaryorsecondaryflash
image.
Syntax: showversion
6-13

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Forexample,iftheswitchisusingasoftwareversionofR.01.01storedin
Primaryflash,showversionproducesthefollowing:
Pr oCur ve( conf i g) # show ver si on
I mage st amp: / sw/ code/ bui l d/ i nf o ( s03)
Nov 01 2007 10: 50: 26
R. 01. 01
501
Boot I mage: Pr i mar y
Figure6-7. ExampleShowingtheIdentityoftheCurrentFlashImage
DeterminingWhethertheFlashImagesAreDifferentVersions. Ifthe
flashimagesizesinprimaryandsecondaryarethesame,theninalmostevery
case,theprimaryandsecondaryimagesareidentical.Thiscommandprovides
acomparisonofflashimagesizes,plusthebootROMversionandfromwhich
flashimagetheswitchbooted.Forexample,inthefollowingcase,theimages
aredifferentversionsoftheswitchsoftwareandtheswitchisrunningonthe
versionstoredinthesecondaryflashimage:
Pr oCur ve( conf i g) # show f l ash
I mage Si ze( Byt es) Dat e Ver si on Bui l d #
Theunequalcode
Pr i mar y I mage : 3961354 08/ 01/ 07 R. 11. 02 # 104
sizeanddiffering
Secondar y I mage : 3916654 07/ 06/ 07 R. 11. 01 # 1242
datesindicatetwo
Boot RomVer si on: R. 10. 03
differentversionsof
Cur r ent Boot : Pr i mar y
thesoftware.
Figure6-8. ExampleShowingDifferentFlashImageVersions
DeterminingWhichFlashImageVersionsAreInstalled.Theshowver-
sioncommanddisplayswhichsoftwareversiontheswitchiscurrentlyrunning
andwhetherthatversionbootedfromprimaryorsecondaryflash.Thus,ifthe
switchbootedfromprimaryflash,youwillseetheversionnumberofthe
softwareimagestoredinprimaryflash,andiftheswitchbootedfromsecond-
aryflash,youwillseetheversionnumberofthesoftwareversionstoredin
secondaryflash.Thus,byusingshowversion,thenrebootingtheswitchfrom
theoppositeflashimageandusingshowversionagain,youcandeterminethe
version(s)ofswitchsoftwareinbothflashsources.Forexample:
6-14
R. 11. XX
104
Boot I mage: Pr i mar y
Pr ocur ve( conf i g) # boot syst emf l ash secondar y
Devi ce wi l l be r eboot ed, do you want t o cont i nue [ y/ n] ? y
.
.
.
Pr oCur ve> show ver si on
I mage st amp: / sw/ code/ bui l d/ sw
Aug 1 2007 12: 08: 01
R. 11. XX
104
Boot I mage: Secondar y
Inthisexampleshow
versionindicatesthe
switchhasversion
R.11.XXinprimaryflash.
Afterthebootsystem
command,showversion
indicatesthatversion
R.11.XXisinsecondary
flash.
Pr oCur ve( conf i g) # show ver si on
I mage st amp: / sw/ code/ bui l d/ sw
Aug 1 2007 12: 06: 23
Figure6-9. DeterminingtheSoftwareVersioninPrimaryandSecondaryFlash
SwitchSoftwareDownloads
Thefollowingtableshowstheswitchsoptionsfordownloadingasoftware
versiontoflashandbootingtheswitchfromflash
Table6-1. Primary/SecondaryMemoryAccess
Action Menu CLI Web
Browser
SNMP
DownloadtoPrimary Yes Yes Yes Yes
DownloadtoSecondary No Yes No Yes
BootfromPrimary Yes Yes Yes Yes
BootfromSecondary No Yes No Yes
Thedifferentsoftwaredownloadoptionsinvolvedifferentcopycommands,
plusxmodem,andtftp.ThesetopicsarecoveredinAppendixA,FileTransfers.
DownloadInterruptions.Inmostcases,ifapowerfailureorothercause
interruptsaflashimagedownload,theswitchrebootswiththeimageprevi-
ouslystoredinprimaryflash.Intheunlikelyeventthattheprimaryimageis
corrupted,asaresultofaninterruption,theswitchwillrebootfromsecondary
6-15
flashandyoucaneithercopythesecondaryimageintoprimaryordownload
anotherimagetoprimaryfromanexternalsource.SeeAppendixA,File
Transfers.
LocalSwitchSoftwareReplacementandRemoval
Thissectiondescribescommandsforerasingasoftwareversionandcopying
anexistingsoftwareversionbetweenprimaryandsecondaryflash.
Not e Itisnotnecessarytoerasethecontentofaflashlocationbeforedownloading
anothersoftwarefile.Theprocessautomaticallyoverwritesthepreviousfile
withthenewfile.Ifyouwanttoremoveanunwantedsoftwareversionfrom
flash,ProCurverecommendsthatyoudosobyoverwritingitwiththesame
softwareversionthatyouareusingtooperatetheswitch,orwithanother
acceptablesoftwareversion.Tocopyasoftwarefilebetweentheprimaryand
secondaryflashlocations,seeCopyingaSwitchSoftwareImagefromOne
FlashLocationtoAnother,below.
Thelocalcommandsdescribedhereareforflashimagemanagementwithin
theswitch.Todownloadasoftwareimagefilefromanexternalsource,see
AppendixA,FileTransfers.
CopyingaSwitchSoftwareImagefromOneFlashLocationto
Another. Whenyoucopytheflashimagefromprimarytosecondaryorthe
reverse,theswitchoverwritesthefileinthedestinationlocationwithacopy
ofthefilefromthesourcelocation.Thismeansyoudonothavetoerasethe
currentimageatthedestinationlocationbeforecopyinginanewimage.
Ca u t i o n Verifythatthereisanacceptablesoftwareversioninthesourceflashlocation
fromwhichyouaregoingtocopy.Usetheshowflashcommandor,ifnecessary,
theprocedureunderDeterminingWhichFlashImageVersionsAreInstalled
onpage6-14toverifyanacceptablesoftwareversion.Attemptingtocopyfrom
asourceimagelocationthathasacorruptedflashimageoverwritestheimage
inthedestinationflashlocation.Inthiscase,theswitchwillnothaveavalid
flashimageineitherflashlocation,butwillcontinuerunningonatemporary
flashimageinRAM.Donotreboottheswitch.Instead,immediatelydownload
anothervalidflashimagetoprimaryorsecondaryflash.Otherwise,ifthe
switchisrebootedwithoutasoftwareimageineitherprimaryorsecondary
flash,thetemporaryflashimageinRAMwillbeclearedandtheswitchwillgo
down.Torecover,seeRestoringaFlashImageonpageC-45(intheTrouble-
shootingchapter).
6-16

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Syntax: copyflashflash<destinationflash>
where:destinationflash=primaryorsecondary:
Forexample,tocopytheimageinsecondaryflashtoprimaryflash:
1. Verifythatthereisavalidflashimageinthesecondaryflashlocation.The
followingfigureindicatesthatasoftwareimageispresentinsecondary
flash.(Ifyouareunsurewhethertheimageissecondaryflashisvalid,try
bootingfromitbeforeyouproceed,byusingbootsystemflashsecondary.)
Pr oCur ve( conf i g) # show f l ash
I mage Si ze( Byt es) Dat e Ver si on Bui l d #
Theunequalcode
size,differingdates,
anddiffering
Pr i mar y I mage : 3961354 08/ 01/ 07 R. 11. 02 # 104
versionnumbers
Secondar y I mage : 3916654 07/ 06/ 07 R. 11. 01 # 1242
indicatestwo
Boot RomVer si on: R. 10. 03
differentversionsof
Cur r ent Boot : Pr i mar y
thesoftware.
Figure6-10. ExampleIndicatingTwoDifferentSoftwareVersionsinPrimaryandSecondaryFlash
Executethecopycommandasfollows:
ProCurve(config)#copyflashflashprimary
ErasingtheContentsofPrimaryorSecondaryFlash. Thiscommand
deletesthesoftwareimagefilefromthespecifiedflashlocation.
Ca u t i o n - - No Beforeusingthiscommandinoneflashimagelocation(primaryorsecond-
Un do! ary),ensurethatyouhaveavalidsoftwarefileintheotherflashimagelocation
(secondaryorprimary).Iftheswitchhasonlyoneflashimageloaded(ineither
primaryorsecondaryflash)andyouerasethatimage,thentheswitchdoes
nothaveasoftwareimagestoredinflash.Inthiscase,ifyoudonotrebootor
powercycletheswitch,youcanrecoverbyusingxmodemortftptodownload
anothersoftwareimage.
Syntax: eraseflash<primary|secondary>
Forexample,toerasethesoftwareimageinprimaryflash,dothefollowing:
6-17
1. Firstverifythatausableflashimageexistsinsecondaryflash.Themost
reliablewaytoensurethisistoreboottheswitchfromtheflashimage
youwanttoretain.Forexample,ifyouareplanningtoerasetheprimary
image,thenfirstrebootfromthesecondaryimagetoverifythatthe
secondaryimageispresentandacceptableforyoursystem:
ProCurve#bootsystemflashsecondary
2. Thenerasethesoftwareimageintheselectedflash(inthiscase,primary):
Thepromptshowswhichflash
locationwillbeerased.
Figure6-11. ExampleofEraseFlashPrompt
3. Typeyattheprompttocompletetheflasherase.
4. Useshowflashtoverifyerasureoftheselectedsoftwareflashimage
The"0"here
showsthat
primaryflashhas
beenerased.
Figure6-12. ExampleofShowFlashListingAfterErasingPrimaryFlash
RebootingtheSwitch
Theswitchoffersrebootoptionsthroughthebootandreloadcommands,plus
theoptionsinherentinadual-flashimagesystem.Generally,usingboot
providesmorecomprehensiveself-testing;usingreloadgivesyouafaster
reboottime.
6-18
Table6-2. ComparingtheBootandReloadCommands
Actions IncludedIn
Boot?
IncludedInReload Note
Saveall Optional, Optionalwithreload Configchangessavedto
configuration
changessincethe
lastbootorreload
withprompt <cr>,whenprompt
displays.
Notsavedwithreload
at/aftercommands;No
promptisdisplayed.
thestartup-configfileif
yisselected(reload
command).
Performallsystem
self-tests
Yes No Thereloadcommand
providesafastersystem
reboot.
Choiceofprimaryor
secondaryflash
image
Yes NoUsesthecurrent
flashimage.
Performascheduled
reboot
No Yes Usethereloadcommand
withafter/atparameters
(seepage6-29fordetails).
BootingfromPrimaryFlash.Thiscommandalwaysbootstheswitchfrom
primaryflash,andexecutesthecompletesetofsubsystemself-tests.
Syntax: boot
Forexample,toboottheswitchfromprimaryflashwithpendingconfiguration
changesintherunning-configfile:
Figure6-13. ExampleofBootCommand(DefaultPrimaryFlash)
Intheaboveexample,typingeitherayornatthesecondpromptinitiatesthe
rebootoperation.Also,iftherearenopendingconfigurationchangesinthe
running-configfile,thentherebootcommenceswithoutthepausetodisplay
Bootfromprimaryflash.
BootingfromaSpecifiedFlash. Thisversionofthebootcommandgives
youtheoptionofspecifyingwhethertorebootfromprimaryorsecondary
flash,andistherequiredcommandforrebootingfromsecondaryflash.This
optionalsoexecutesthecompletesetofsubsystemself-tests.
6-19
Syntax: bootsystemflash<primary|secondary>
Forexample,toreboottheswitchfromsecondaryflashwhenthereareno
pendingconfigurationchangesintherunning-configfile:
Pr oCur ve( conf i g) # boot syst emf l ash secondar y
Devi ce wi l l be r eboot ed, do you want t o cont i nue [ y/ n] ? y
Do you want t o save cur r ent conf i gur at i on [ y/ n] ? n
Figure6-14. ExampleofBootCommandwithPrimary/SecondaryFlashOption
Intheaboveexample,typingeitherayornatthesecondpromptinitiatesthe
rebootoperation.Also,iftherearenopendingconfigurationchangesinthe
running-configfile,thentherebootcommenceswithoutthepausetodisplay
Bootfromsecondaryflash.
BootingfromtheCurrentSoftwareVersion.Reloadrebootstheswitch
fromtheflashimageonwhichtheswitchiscurrentlyrunning,andsavesto
thestartup-configfileanyconfigurationchangescurrentlyintherunning-
configfile.Becausereloadbypassessomesubsystemself-tests,theswitch
rebootsfasterthanifyouuseeitherofthebootcommandoptions.
Syntax:[no]reload[after<[dd:]hh:]mm>|at<hh:mm[:ss]>[<mm/dd[/[yy]yy]>]]
Enablesascheduledwarmrebootoftheswitch.Theswitchboots
upwiththesamestartupconfigfileandusingthesameflash
imageasbeforethereload.
Caution:Whenusingredundantmanagement,thereloadat/after
commandcausesaswitchoveratthescheduledtimetotheother
managementmodule,whichmaynotberunningthesamesoft-
wareimageorhavethesameconfigurations.
Parametersinclude:
after:Schedulesa warmrebootoftheswitchafteragiven
amountoftimehaspassed.
at:Schedulesawarmrebootoftheswitchatagiventime.
Thenoformofthecommandremovesapendingrebootrequest.
Formoredetailsandexamples,seebelow.
Forexample,ifyouchangethenumberofVLANstheswitchsupports,you
mustreboottheswitchinordertoimplementthechange.Reloadautomati-
callysavesyourconfigurationchangesandrebootstheswitchfromthesame
softwareimageyouhavebeenusing:
6-20
Figure6-15.UsingReloadwithPendingConfigurationChanges
ScheduledReload.Ifnoparametersareenteredafterthereloadcommand,
animmediaterebootisexecuted.Thereloadatandreloadaftercommand
informationisnotsavedacrossreboots.Iftheswitchisrebootedbeforea
scheduledreloadcommandisexecuted,thecommandiseffectivelycancelled.
Whenenteringareloadatorreloadaftercommand,apromptwillappearto
confirmthecommandbeforeitcanbeprocessedbytheswitch.Forthereload
atcommand,ifmm/dd/yyareleftblank,thecurrentdayisassumed.
Thescheduledreloadfeatureremovestherequirementtophysicallyreboot
theswitchatinconvenienttimes(forexample,at1:00inthemorning).Instead,
areloadat1:00mm/ddcommandcanbeexecuted(wheremm/ddisthedate
theswitchisscheduledtoreboot).
Not e Configurationchangesarenotsavedwithreloadatorreloadaftercommands.
Noprompttosaveconfigurationfilechangesisdisplayed.SeeTable6-2on
page6-19.
Examplesofscheduledreloadcommands:
Toscheduleareloadin15minutes:
Pr oCur ve# r el oad af t er 15
Toscheduleareloadin3hours:
Pr oCur ve# r el oad af t er 03: 00
Toscheduleareloadforthesametimethefollowingday:
Pr oCur ve# r el oad af t er 01: 00: 00
Toscheduleareloadforthesamedayat12:05:
Pr oCur ve# r el oad at 12: 05
Toscheduleareloadonsomefuturedate:
Pr oCur ve# r el oad at 12: 05 01/ 01/ 2008
Pr oCur ve( conf i g) # r el oad af t er 04: 14: 00
Rel oad schedul ed i n 4 days, 14 hour s, 0 mi nut es
Figure6-16. AnExampleofthereloadCommand
6-21
OperatingNotes
DefaultBootSource.Theswitchrebootsfromprimaryflashbydefault
unlessyouspecifythesecondaryflash.
BootAttemptsfromanEmptyFlashLocation.Inthiscase,theswitch
abortstheattemptanddisplays
Imagedoesnotexist
Operationaborted.
InteractionofPrimaryandSecondaryFlashImageswiththeCurrent
Configuration.Theswitchhasonestartup-configfile(page6-3),whichit
alwaysusesforreboots,regardlessofwhethertherebootisfromprimaryor
secondaryflash.Also,forrebootingpurposes,itisnotnecessaryforthe
softwareimageandthestartup-configfiletosupportidenticalsoftwarefea-
tures.Forexample,supposeyouhavejustdownloadedasoftwareupgrade
thatincludesnewfeaturesthatarenotsupportedinthesoftwareyouusedto
createthecurrentstartup-configfile.Inthiscase,thesoftwaresimplyassigns
factory-defaultvaluestotheparameterscontrollingthenewfeatures.Simi-
larly,Ifyoucreateastartup-configfilewhileusingaversionYoftheswitch
software,andthenreboottheswitchwithanearliersoftwareversionXthat
doesnotincludeallofthefeaturesfoundinY,thesoftwaresimplyignores
theparametersforanyfeaturesthatitdoesnotsupport.
6-22
MultipleConfigurationFiles
Action Page
ListingandDisplayingStartup-ConfigFiles 6-26
ChangingorOverridingtheRebootConfigurationPolicy 6-27
ManagingStartup-ConfigFiles
RenamingStartup-ConfigFiles 6-30
CopyingStartup-ConfigFiles 6-30
ErasingStartup-ConfigFiles 6-33
EffectofUsingtheClear+ResetButtons 6-34
CopyingStartup-ConfigFilestoorfromaRemoteServer 6-35
Theswitchescoveredinthisguideallowuptothreestartup-configfileswith
optionsforselectingwhichstartup-configfiletousefor:
Afixedrebootpolicyusingaspecificstartup-configfileforaspecificboot
path(primaryorsecondaryflash)
Overridingthecurrentrebootpolicyonaper-instancebasis
BootCommand
SecondaryBootPath
PrimaryBootPath
Startup-Config
Options:
File1
File2
File3
Running-Config
Figure6-17. OptionalRebootProcess
Whileyoucanstilluseremotestorageforstartup-configfiles,youcannow
maintainmultiplestartup-configfilesontheswitchandchoosewhichversion
touseforarebootpolicyoranindividualreboot.
Thischoiceofwhichconfigurationfiletouseforthestartup-configatreboot
providesthefollowingnewoptions:
Theswitchcanrebootwithdifferentconfigurationoptionswithouthaving
toexchangeoneconfigurationfileforanotherfromaremotestorage
location.
6-23

Transitionsfromonesoftwarereleasetoanothercanbeperformedwhile
maintainingaseparateconfigurationforthedifferentsoftwarerelease
versions.
Bysettingarebootpolicyusingaknowngoodconfigurationandthen
overridingthepolicyonaper-instancebasis,youcantestanewconfigu-
rationwiththeprovisionthatifanunattendedrebootoccurs,theswitch
willcomeupwiththeknown,goodconfigurationinsteadofrepeatinga
rebootwithamisconfiguration.
GeneralOperation
MultipleConfigurationStorageintheSwitch.Theswitchusesthree
memoryslots,withidentity(id)numbersof1,2,and3.
Pr oCur ve( conf i g) # show conf i g f i l es
Conf i gur at i on f i l es:
MemorySlots
forDifferent
Startup-Config
Files
i d | act pr i sec | name
- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 | | ol dconf i g
2 | * * * | wor ki ngConf i g
3 | |
Astartup-configfilestoredinamemoryslothasaunique,changeablefile
name.Youcanusethestartup-configinanyofthememoryslots.
BootOptions. Withmultiplestartup-configfilesintheswitchyoucanspec-
ifyapolicyfortheswitchtouseuponreboot.Theoptionsinclude:
Usethedesignatedstartup-configfilewitheitherorbothrebootpaths
(primaryorsecondaryflash)
Overridethecurrentrebootpolicyforonerebootinstancebyspecifying
abootpath(primaryorsecondaryflash)andthestartup-configfiletouse.
ChangingtheStartup-ConfigFile.Whentheswitchreboots,thestartup-
configfilesuppliestheconfigurationfortherunning-configfiletheswitchuses
tooperate.Makingchangestotherunning-configfileandthenexecutinga
write-memcommand(or,intheMenuinterface,theSavecommand)are
writtenbacktothestartup-configfileusedatthelastreboot.Forexample,
supposethatasystemadministratorperformsthefollowingonaswitchthat
hastwostartup-configfiles(workingConfigandbackupConfig):
6-24
1. ReboottheswitchthroughthePrimarybootpathusingthestartup-config
filenamedbackupConfig.
2. UsetheCLItomakeconfigurationchangesintherunning-configfile,and
thenexecutewritemem.
Theresultisthatthestartup-configfileusedtoreboottheswitchismodified
bytheactionsinstep2.
BootCommand
PrimaryBootPath
ActiveStartup-ConfigFile:
backupConfig
IdleStartup-ConfigFile:
workingConfig
GeneratedRunning-ConfigFile
UseCLIToChangeRunning-Config
ExecutewritememToSaveChangesto
SourceStartup-ConfigFile
Figure6-18. ExampleofRebootProcessandMakingChangestotheStartup-Config
File
CreatinganAlternateStartup-ConfigFile. Therearetwomethodsfor
creatinganewconfigurationfile:
Copyanexistingstartup-configfiletoanewfilename,thenrebootthe
switch,makethedesiredchangestotherunning-configfile,thenexecute
writememory.(Refertofigure6-18,above.)
Erasetheactivestartup-configfile.Thisgeneratesanew,defaultstartup-
configfilethatalwaysresultswhentheswitchautomaticallyrebootsafter
deletionofthecurrentlyactivestartup-configfile.(RefertoErasinga
Startup-ConfigFileonpage6-33.)
Thecommandsdescribedlaterinthissectionenableyoutoviewthecurrent
multipleconfigurationstatus,managemultiplestartup-configfiles,configure
rebootpolicies,andoverriderebootpoliciesonaper-instancebasis.
6-25
ListingandDisplayingStartup-ConfigFiles
Command Page
showconfigfiles Below
showconfig<filename> 6-27
ConfigurationEnabled
.
Syntax: showconfigfiles
Thiscommanddisplaystheavailablestartup-configfileson
theswitchandthecurrentuseofeachfile.
id:Identifiesthememoryslotforeachstartup-configfile
availableontheswitch.
act:Anasterisk(*)inthiscolumnindicatesthatthe
correspondingstartup-configfileiscurrentlyinuse.
pri:Anasterisk(*)inthiscolumnindicatesthatthe
correspondingstartup-configfileiscurrentlyassignedtothe
primarybootpath.
sec:Anasterisk(*)inthiscolumnindicatesthatthe
correspondingstartup-configfileiscurrentlyassignedtothe
secondarybootpath.
name:Showsthefilenameforeachlistedstartup-configfilein
theswitch.RefertoRenaminganExistingStartup-Config
Fileonpage6-30forthecommandyoucanusetochange
existingstartup-configfilenames.
Forexample,showconfigfilesdisplaysthefollowing:
6-26

- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 | | ol dconf i g
2 | * * * | wor ki ngConf i g
3 | |
Asthisexampleshows,youmustreconfigureeithertheprimaryorthesecondaryboot
pathifyouwanttoboottheswitchusingthestartup-configfileinanothermemoryslot.
(Youcanalsochangetheabovefilenames.RefertoRenaminganExistingStartup-Config
Fileonpage6-30.)
Figure6-19. ExampleofDisplayingtheCurrentMultipleConfigurationStatus
DisplayingtheContentofASpecificStartup-ConfigFile
WithMultipleConfigurationenabled,theswitchcanhaveuptothreestartup-
configfiles.Becausetheshowconfigcommandalwaysdisplaysthecontentof
thecurrentlyactivestartup-configfile,thecommandextensionshownbelow
isneededtoallowviewingthecontentsofanyotherstartup-configfilesstored
intheswitch.
Syntax: showconfig<filename>
Displaysthecontentofthespecifiedstartup-configfileinthe
samewaythattheshowconfigcommanddisplaysthecontent
ofthedefault(currentlyactive)startup-configfile.
ChangingorOverridingtheRebootConfiguration
Policy
Command Page
startup-default[primary|secondary]config<filename> Below
bootsystemflash<primary|secondary>config<filename> 6-29
Youcanboottheswitchusinganyavailablestartup-configfile.
6-27
ChangingtheRebootConfigurationPolicy. Foragivenreboot,the
switchautomaticallyrebootsfromthestartup-configfileassignedtotheflash
location(primaryorsecondary)beingusedforthecurrentreboot.Theswitch
copiestheexistingstartup-configfile(namedoldConfig)intomemoryslot2,
renamesthisfiletoworkingConfig,andassignsworkingConfigas:
Theactiveconfigurationfile
Theconfigurationfiletousewhenbootingfromeitherprimaryorsecond-
aryflash.
Inthiscase,theswitchisconfiguredtoautomaticallyusetheworkingConfig
fileinmemoryslot2forallreboots.(Refertofigure6-19onpagepage6-27.)
Youcanusethefollowingcommandtochangethecurrentpolicysothatthe
switchautomaticallybootsusingadifferentstartup-configfile.
Syntax: startup-default[primary|secondary]config<filename>
Specifiesabootconfigurationpolicyoption:
[primary|secondary]config<filename>:Designatesthe
startup-configfiletouseinarebootwiththesoftware
versionstoredinaspecificflashlocation.Usethisoption
tochangetherebootpolicyforeitherprimaryor
secondaryflash,orboth.
config<filename>:Designatesthestartup-configfiletouse
forallreboots,regardlessoftheflashversionused.Use
thisoptionwhenyouwanttoautomaticallyusethesame
startup-configfileforallreboots,regardlessoftheflash
sourceused.
Note:Tooverridethecurrentrebootconfigurationpolicyfor
asinglerebootinstance,usethebootsystemflashcommand
withtheoptionsdescribedunderOverridingtheDefault
RebootConfigurationPolicyonpage6-29.
Forexample,suppose:
SoftwarereleaseR.11.01isstoredinprimaryflashandalatersoftware
releaseisstoredinsecondaryflash.
Thesystemoperatorisusingmemoryslot1forareliable,minimal
configuration(namedminconfig)forthesoftwareversionintheprimary
flash,andslot2foramodifiedstartup-configfile(namednewconfig)that
includesuntestedchangesforimprovednetworkoperationwiththe
softwareversioninsecondaryflash.
Theoperatorwantstoensurethatincaseofaneedtorebootbypressingthe
Resetbutton,orifapowerfailureoccurs,theswitchwillautomaticallyreboot
withtheminimalstartup-configfileinmemoryslot1.Sincearebootdueto
6-28
pressingtheResetbuttonortoapowercyclealwaysusesthesoftwareversion
inprimaryflash,theoperatorneedstoconfiguretheswitchtoalwaysboot
fromprimaryflashwiththestartup-configfilenamedminconfig(inmemory
slot1).Also,whenevertheswitchbootsfromsecondaryflash,theoperator
alsowantsthestartup-confignamednewconfigtobeused.Thefollowingtwo
commandsconfigurethedesiredbehavior.
ProCurve(config)#startup-defaultpriconfigminconfig
ProCurve(config)#startup-defaultsecconfignewconfig.
OverridingtheDefaultRebootConfigurationPolicy.Thiscommand
providesamethodformanuallyrebootingwithaspecificstartup-configfile
otherthanthefilespecifiedinthedefaultrebootconfigurationpolicy.
Syntax: bootsystemflash<primary|secondary>config<filename>
Specifiesthenameofthestartup-configfiletoapplyforthe
immediatebootinstanceonly.Thiscommandoverridesthe
currentrebootpolicy.
UsingReloadToRebootFromtheCurrentFlashImageandStartup-
ConfigFile.
Syntax:[no]reload[after<[dd:]hh:]mm>|at<hh:mm[:ss]>[<mm/dd[/[yy]yy]>]]
Enablesascheduledwarmrebootoftheswitch.Theswitchboots
upwiththesamestartupconfigfileandusingthesameflash
imageasbeforethereload.
Caution:Whenusingredundantmanagement,thereloadat/after
commandcausesaswitchoveratthescheduledtimetotheother
managementmodule,whichmaynotberunningthesamesoft-
wareimageorhavethesameconfigurations.
Parametersinclude:
after:Schedulesa warmrebootoftheswitchafteragiven
amountoftimehaspassed.
at:Schedulesawarmrebootoftheswitchatagiventime.
Thenoformofthecommandremovesapendingrebootrequest.
Formoredetailsandexamples,seebelow.
6-29
ManagingStartup-ConfigFilesintheSwitch
Command Page
renameconfig<current-filename ><newname-str> 6-30
copyconfig<source-filename>config<dest-filename> 6-30
eraseconfig<filename>|startup-config 6-33
Erasestartup-configusingthefront-panelClear+ResetButtons 6-34
RenaminganExistingStartup-ConfigFile
Syntax: renameconfig<current-filename ><newname-str>
Thiscommandchangesthenameofanexistingstartup-
configfile.Afilenamecanincludeupto63,alphanumeric
characters.Blanksareallowedinafilenameenclosedin
quotes(or).(Filenamesarenotcase-sensitive.)
CreatingaNewStartup-ConfigFile
Theswitchallowsuptothreestartup-configfiles.Youcancreateanew
startup-configfileifthereisanemptymemoryslotorifyouwanttoreplace
onestartup-configfilewithanother.
6-30

Syntax: copyconfig<source-filename>config<target-filename>
Thiscommandmakesalocalcopyofanexistingstartup-
configfilebycopyingthecontentsofanexistingstartup-
configfileinonememoryslottoanewstartup-configfilein
another,emptymemoryslot.Thisenablesyoutouseasepa-
rateconfigurationfiletoexperimentwithconfiguration
changes,whilepreservingthesourcefileunchanged.Italso
simplifiesatransitionfromonesoftwareversiontoanother
byenablingyoutopreservethestartup-configfileforthe
earliersoftwareversionwhilecreatingaseparatestartup-
configfileforthelatersoftwareversion.Withtwosuch
versionsinplace,youcaneasilyreboottheswitchwiththe
correctstartup-configfileforeithersoftwareversion.
Ifthedestinationstartup-configfilealreadyexists,itis
overwrittenbythecontentofthesourcestartup-configfile.
Ifthedestinationstartup-configfiledoesnotalreadyexist,
itwillbecreatedinthefirstemptyconfigurationmemory
slotontheswitch.
Ifthedestinationstartup-configfiledoesnotalreadyexist,
buttherearenoemptyconfigurationmemoryslotsonthe
switch,thenanewstartup-configfileisnotcreatedand
instead,theCLIdisplaysthefollowingerrormessage:
Unabletocopyconfigurationto<target-filename>.
Forexample,supposebothprimaryandsecondaryflashmemorycontain
softwarereleaseR.11.01anduseastartup-configfilenamedconfig1:
- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 | * * * | conf i g1
2 | |
3 | |
Figure6-20. ExampleofUsingOneStartup-ConfigFileforBothPrimaryand
SecondaryFlash
6-31

Ifyouwantedtoexperimentwithconfigurationchangestothesoftware
versioninsecondaryflash,youcouldcreateandassignaseparatestartup-
configfileforthispurpose.
Pr oCur ve( conf i g) # copy conf i g conf i g1 conf i g conf i g2
Pr oCur ve( conf i g) # st ar t up- def aul t secondar y conf i g conf i g2
- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 |
2 |
* *
*
| conf i g1
| conf i g2
Thefirsttwocommandscopytheconfig1
startup-configfiletoconfig2,andthen
3 | | makeconfig2thedefaultstartup-config
fileforbootingfromsecondaryflash.
Figure6-21. ExampleofCreatingandAssigningaNewStartup-ConfigFile
Not e Youcanalsogenerateanewstartup-configfilebybootingtheswitchfroma
flashmemorylocationfromwhichyouhaveerasedthecurrentlyassigned
startup-configfile.RefertoErasingaStartup-ConfigFileinthenextsection.
6-32
ErasingaStartup-ConfigFile
Youcaneraseanyofthestartup-configfilesintheswitchsmemoryslots.In
somecases,erasingafilecausestheswitchtogenerateanew,default-
configurationfilefortheaffectedmemoryslot.
Syntax: erase<config<filename>>|startup-config>
config<filename>:Thisoptionerasesthespecifiedstartup-
configfile.Ifthespecifiedfileisnotthecurrentlyactive
startup-configfile,thenthefileissimplydeletedfromthe
memoryslotitoccupies.Ifthespecifiedfileisthecurrently
activestartup-configfile,thentheswitchcreatesanew,
defaultstartup-configfilewiththesamenameastheerased
file,andbootsusingthisfile.(Thisnewstartup-configfile
containsonlythedefaultconfigurationforthesoftware
versionusedinthereboot.)
Note:Whereafileisassignedtoeithertheprimaryorthe
secondaryflash,butisnotthecurrentlyactivestartup-
configfile,erasingthefiledoesnotremovetheflash
assignmentfromthememoryslotforthatfile.Thus,ifthe
switchbootsusingaflashlocationthatdoesnothavean
assignedstartup-config,thentheswitchcreatesanew,
defaultstartup-configfileandusesthisfileinthereboot.
(Thisnewstartup-configfilecontainsonlythedefault
configurationforthesoftwareversionusedinthereboot.)
Executingwritememoryaftertherebootcausesaswitch-
generatedfilenameofconfigxtoappearintheshowconfig
filesdisplayforthenewfile,wherexcorrespondstothe
memoryslotnumber.
startup-config:Thisoptionerasesthecurrentlyactivestartup-
configfileandrebootstheswitchfromthecurrentlyactive
flashmemorylocation.Theerasedstartup-configfileis
replacedwithanewstartup-configfile.Thenewfilehas
thesamefilenameastheerasedfile,butcontainsonlythe
defaultconfigurationforthesoftwareversionintheflash
location(primaryorsecondary)usedforthereboot.For
example,supposethelastrebootwasfromprimaryflash
usingaconfigurationfilenamedminconfig.Executing
erasestartup-configreplacesthecurrentcontentofminconfig
withadefaultconfigurationandrebootstheswitchfrom
primaryflash.
6-33

Figure6-22illustratesusingeraseconfig<filename>toremoveastartup-config
file.
- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 | * * | mi nconf i g
2 | * | conf i g2
3 | | conf i g3
Pr oCur ve( conf i g) # er ase conf i g conf i g3
- - - +- - - - - - - - - - - - - +- - - - - - - - - - - - - - - - - - - - -
1 | * * | mi nconf i g
2 | * | conf i g2
3 | |
Figure6-22. ExampleofErasingaNon-ActiveStartup-ConfigFile
Withthesamememoryconfigurationasisshowninthebottomportionof
figure6-22,executingerasestartup-configbootstheswitchfromprimaryflash,
resultinginanewfilenamedminconfiginthesamememoryslot.Thenewfile
containsthedefaultconfigurationforthesoftwareversioncurrentlyinpri-
maryflash.
theSwitchtoItsDefaultConfiguration
TheClear+ResetbuttoncombinationdescribedintheInstallationand
GettingStartedGuideproducesdifferentresults,dependingonwhichsoft-
warereleaseisstoredinprimaryflash.Thatis,whenyoupresstheClear+
Resetbuttoncombinationtheswitch:
Overwritesthecontentofthestartup-configfilecurrentlyinmemoryslot
1withthedefaultconfigurationforthesoftwareversioninprimaryflash,
andrenamesthisfiletoconfig1.
Erasesanyotherstartup-configfilescurrentlyinmemory.
Configuresthenewfileinmemoryslot1asthedefaultforbothprimary
andsecondaryflashlocations(regardlessofthesoftwareversioncur-
rentlyinsecondaryflash).
6-34

Bootstheswitchfromprimaryflashusingthenewstartup-configfile.
- - - +- - - - - - - - - - - - - +- - - - - - - - - - -
PressingClear+Reset:
1 | * * * | conf i g1
Replacesallstartup-configfileswithasingle
2 | |
filenamedconfig1thatcontainsthedefault
configurationforthesoftwareversionin
3 | |
primaryflash.
ResetstheActive,Primary,andSecondary
assignmentsasshownhere.
Figure6-23. ExampleofClear+ResetResult
TransferringStartup-ConfigFilesToorFromaRemote
Server
Command Page
copyconfig<src-file>tftp<ip-addr ><remote-file ><pc|unix> below
copytftpconfig<dest-file ><ip-addr ><remote-file ><pc|unix> below
copyconfig<src-file>xmodem<pc|unix> 6-36
copyxmodemconfig<dest-file><pc|unix> 6-37
TFTP:CopyingaConfigurationFiletoaRemoteHost
Syntax: copyconfig<src-file >tftp<ip-addr ><remote-file ><pc|unix>
Usethiscommandtouploadaconfigurationfilefromthe
switchtoaTFTPserver.
FormoreonusingTFTPtocopyafiletoaremoteserver,refer
toTFTP:CopyingaConfigurationFiletoaRemoteHoston
pageA-19.
Forexample,thefollowingcommandcopiesastartup-configfilenamedtest-
01fromtheswitchtoa(UNIX)TFTPserveratIPaddress10.10.28.14:
ProCurve(config)#copyconfigtest-01tftp10.10.28.14
test-01.txtunix
6-35
TFTP:CopyingaConfigurationFilefromaRemoteHost
Syntax: copytftpconfig<dest-file><ip-addr ><remote-file ><pc|unix>
Usethiscommandtodownloadaconfigurationfilefroma
TFTPservertotheswitch.
Note:Thiscommandrequiresanemptymemoryslotinthe
switch.Iftherearenoemptymemoryslots,theCLIdisplays
thefollowingmessage:
Unabletocopyconfigurationto"<filename>".
FormoreonusingTFTPtocopyafilefromaremotehost,
refertoTFTP:CopyingaConfigurationfromaRemoteHost
onpageA-18.
Forexample,thefollowingcommandcopiesastartup-configfilenamedtest-
01.txtfroma(UNIX)TFTPserveratIPaddress10.10.28.14tothefirstempty
memoryslotintheswitch:
ProCurve(config)#copytftpconfigtest-0110.10.28.14
test-01.txtunix
SeriallyConnectedHost
Syntax: copyconfig<filename>xmodem<pc|unix>
Usethiscommandtouploadaconfigurationfilefromthe
switchtoanXmodemhost.
FormoreonusingXmodemtocopyafiletoaserially
connectedhost,refertoXmodem:CopyingaConfiguration
FilefromtheSwitchtoaSeriallyConnectedPCorUnix
WorkstationonpageA-19.
6-36
AutomaticConfigurationUpdatewithDHCPOption66
ConnectedHost
Syntax: copyxmodemconfig<dest-file><pc|unix>
Usethiscommandtodownloadaconfigurationfilefroman
Xmodemhosttotheswitch.
FormoreonusingXmodemtocopyafilefromaserially
connectedhost,refertoXmodem:CopyingaConfiguration
FilefromaSeriallyConnectedPCorUnixWorkstationon
pageA-20.
AutomaticConfigurationUpdatewith
DHCPOption66
ProCurveswitchesareinitiallybootedupwiththefactory-shippedconfigura-
tionfile.Thisfeatureprovidesawaytoautomaticallydownloadadifferent
configurationfilefromaTFTPserverusingDHCPOption66.Theprerequisites
forthistofunctioncorrectlyare:
OneormoreDHCPserverswithOption66areenabled
OneormoreTFTPservershasthedesiredconfigurationfile.
Ca u t i o n Thisfeaturemustuseconfigurationfilesgeneratedontheswitchtofunction
correctly.Ifyouuseconfigurationfilesthatwerenotgeneratedontheswitch,
andthenenablethisfeature,theswitchmayrebootcontinuously.
CLICommand
ThecommandtoenabletheconfigurationupdateusingOption66is:
Syntax: [no]dhcpconfig-file-update
EnablesconfigurationfileupdateusingOption66.
Default:Enabled
6-37
Pr oCur ve( conf i g) # dhcp conf i g- f i l e- updat e
Figure6-24. ExampleofEnablingConfigurationFileUpdateUsingOption66
PossibleScenariosforUpdatingtheConfigurationFile
ThefollowingtableshowsvariousnetworkconfigurationsandhowOption66
ishandled.
Scenario Behavior
SingleServerservingMultipleVLANs EachDHCP-enabledVLANinterfaceinitiatesDHCPDISCOVER
message,receivesDHCPOFFERfromtheserver,andsend
DHCPREQUESTtoobtaintheofferedparameters.
IfmultipleinterfacessendDHCPREQUESTs,itspossiblethatmore
thanoneDHCPACKisreturnedwithavalidOption66.
Evaluatingandupdatingtheconfigurationfileoccursonlyonthe
primaryVLAN.
Option66isignoredbyanyinterfacesnotbelongingtotheprimary
VLAN.
MultipleServersservingaSingleVLAN EachDHCP-enabledVLANinterfaceinitiatesoneDHCPDISCOVER
andreceivesoneormoreDHCPOFFERmessages.
Eachinterfaceacceptsthebestoffer.
Option66isprocessedonlyfortheinterfacebelongingtotheprimary
VLAN.
MultipleServersservingMultipleVLANs EachDHSP-enabledVLANinterfaceinitiatesDHCPDISCOVERand
receivesoneormoreDHCPOFFERmessages.
Eachinterfaceacceptsthebestoffer.
VLAN.
Multi-homedServerservingMultipleVLANs Theswitchperceivesthemulti-homedserverasmultipleseparate
servers.
EachDHCP-enabledVLANinterfaceinitiatesDHCPDISCOVERand
receivesoneDHCPOFFERmessage.
Eachinterfaceacceptstheoffer.
VLAN.
6-38
OperatingNotes
ReplacingtheExistingConfigurationFile:AftertheDHCPclientdown-
loadstheconfigurationfile,theswitchcomparesthecontentsofthatfilewith
theexistingconfigurationfile.Ifthecontentisdifferent,thenewconfiguration
filereplacestheexistingfileandtheswitchreboots.
Option67andtheConfigurationFileName:Option67includesthename
oftheconfigurationfile.IftheDHCPACKcontainsthisoption,itoverridesthe
defaultnamefortheconfigurationfile(switch.cfg)
GlobalDHCPParameters:Globalparametersareprocessedonlyifreceived
ontheprimaryVLAN.
BestOffer:TheBestOfferisthebestDHCPorBootPoffersentbythe
DHCPserverinresponsetotheDHCPREQUESTsentbytheswitch.The
criteriaforselectingtheBestOfferare:
DHCPispreferredoverBootP
IftwoBootPoffersarereceived,thefirstoneisselected
FortwoDHCPoffers:
Theofferfromanauthoritativeserverisselected
Ifthereisnoauthoritativeserver,theofferwiththelongestlease
isselected
LogMessages
ThefiletransferisimplementedbytheexistingTFTPmodule.Thesystemlogs
thefollowingmessageifanincorrectIPaddressisreceivedforOption66:
InvalidIPaddress<ip-address>receivedforDHCPOption66
6-39
6-40
7
InterfaceAccessandSystemInformation
Contents
Overview ...................................................... 7-2
InterfaceAccess:Console/SerialLink,Web,andTelnet ............... 7-3
Menu:Modifying the InterfaceAccess .......................... 7-4
CLI:ModifyingtheInterface Access ............................ 7-5
TerminatingRemote ManagementSessions ......................... 7-9
SystemInformation ............................................ 7-10
Menu:ViewingandConfiguringSystemInformation............. 7-11
CLI:ViewingandConfiguringSystemInformation .............. 7-12
Web:ConfiguringSystemParameters ......................... 7-15
7-1
Overview
Overview
Thischapterdescribeshowto:
Viewandmodifytheconfigurationforswitchinterfaceaccess
UsetheCLIkillcommandtoterminatearemotesession
Viewandmodifyswitchsysteminformation
Forhelponhowtoactuallyusetheinterfacesbuiltintotheswitch,referto:
Chapter2,UsingtheMenuInterface
Chapter4,UsingtheCommandLineInterface(CLI)
Chapter5,UsingtheWebBrowserInterface
WhyConfigureInterfaceAccessandSystemInformation? Theinter-
faceaccessfeaturesintheswitchoperateproperlybydefault.However,you
canmodifyordisableaccessfeaturestosuityourparticularneeds.Similarly,
youcanchoosetoleavethesysteminformationparametersattheirdefault
settings.However,modifyingtheseparameterscanhelpyoutomoreeasily
distinguishonedevicefromanotherinyournetwork.
7-2
InterfaceAccess:Console/SerialLink,Web,andTelnet
InterfaceAccess:Console/SerialLink,
Web,andTelnet
InterfaceAccessFeatures
Feature Default Menu CLI Web
InactivityTime 0Minutes
(disabled)
page7-4 page7-6
InboundTelnetAccess Enabled page7-4 page7-5
OutboundTelnetAccess n/a page7-6
WebBrowserInterfaceAccess Enabled page7-4 page7-6
Terminaltype VT-100 page7-6
Event Logeventtypestolist All page7-6
(DisplayedEvents)
BaudRate SpeedSense page7-6
FlowControl XON/XOFF page7-6
Inmostcases,thedefaultconfigurationisacceptableforstandardoperation.
Not e Basicswitchsecurityisthroughpasswords.Youcangainadditionalsecurity
byusingthesecurityfeaturesdescribedintheAccessSecurityGuideforyour
switch.Youcanalsosimplyblockunauthorizedaccessviathewebbrowser
interfaceorTelnet(asdescribedinthissection)andinstalltheswitchina
lockedenvironment.
7-3
Menu:ModifyingtheInterfaceAccess
Themenuinterfaceenablesyoutomodifytheseparameters:
InactivityTime-out
InboundTelnetEnabled
WebAgentEnabled
ToAccesstheInterfaceAccessParameters:
1. FromtheMainMenu,Select...
2.SwitchConfiguration...
1.SystemInformation
InterfaceAccess
Parameters
Figure7-1.TheDefaultInterfaceAccessParametersAvailableintheMenuInterface
2. Press[E](forEdit).ThecursormovestotheSystemNamefield.
3. Usethearrowkeys([v],[^],[<],[>])tomovetotheparametersyouwant
tochange.
Refertotheonlinehelpprovidedwiththisscreenforfurtherinformation
onconfigurationoptionsforthesefeatures.
4. Whenyouhavefinishedmakingchangestotheaboveparameters,press
[Enter],thenpress[S](forSave).
7-4
CLI:ModifyingtheInterfaceAccess
InterfaceAccessCommandsUsedinThisSection
showconsole below
[no]telnet-server below
[no]web-management page7-6
console page7-6
localterminalmode page7-8
ListingtheCurrentConsole/SerialLinkConfiguration.Thefollowing
commandliststhecurrentinterfaceaccessparametersettings.
Syntax: showconsole
Thisexampleshowstheswitchsdefaultconsole/serialconfiguration.
InterfaceAccess
Enable/Disable
ConsoleControl
Options
EventLogEvent
TypesToList
Figure7-2.ListingofShowConsoleCommand
ReconfigureInboundTelnetAccess.Inthedefaultconfiguration,
inboundTelnetaccessisenabled.
Syntax: [no]telnet-server
TodisableinboundTelnetaccess:
Pr oCur ve( conf i g) # no t el net - ser ver
Tore-enableinboundTelnetaccess:
Pr oCur ve( conf i g) # t el net - ser ver
7-5
OutboundTelnettoAnotherDevice. Thisfeatureoperatesindepen-
dentlyofthetelnet-serverstatusandenablesyoutoTelnettoanotherdevice
thathasanIPaddress.
Syntax: telnet<ip-address>
Forexample:
ProCurve#telnet10.28.27.204
ReconfigureWebBrowserAccess.Inthedefaultconfiguration,web
browseraccessisenabled.
Syntax: [no]web-management
Todisablewebbrowseraccess:
ProCurve(config)#noweb-management
Tore-enablewebbrowseraccess:
ProCurve(config)#web-management
ReconfiguretheConsole/SerialLinkSettings.Youcanreconfigureone
ormoreconsoleparameterswithoneconsolecommand.
Syntax: console
[terminal<vt100|ansi>]
[screen-refresh<1|3|5|10|20|30|45|60>]
[baud-rate
<speed-sense|1200|2400| 4800|9600|19200|38400|57600>]
[flow-control<xon/xoff|none>]
[inactivity-timer<01510 15 20 30 60 120>]
[events<none|all|non-info|critical|debug]
Not e IfyouchangetheBaudRateorFlowControlsettingsfortheswitch,you
shouldmakethecorrespondingchangesinyourconsoleaccessdevice.Oth-
erwise,youmayloseconnectivitybetweentheswitchandyourterminal
emulatorduetodifferencesbetweentheterminalandswitchsettingsforthese
twoparameters.
Changestoconsoleparametersrequirethatyouperformawritememoryand
thenexecutebootbeforethenewconsoleconfigurationwilltakeeffect.To
enabletemporaryandnon-disruptivechangestotheterminalmodewithout
requiringareboot,usetheconsolelocalterminalcommand(seepage7-8).
7-6
Forexample,touseonecommandtoconfiguretheswitchwiththefollowing:
VT100operation
19,200baud
Noflowcontrol
10-minuteinactivitytime
Criticallogevents
youwouldusethefollowingcommandsequence:
TheswitchimplementstheEventLogchangeimmediately.Theswitchimplements
theotherconsolechangesafterexecutingwritememoryandreload.
Figure7-3.ExampleofExecutingtheConsoleCommandwithMultipleParameters
Youcanalsoexecuteaseriesofconsolecommandsandthensavethe
configurationandboottheswitch.Forexample:
Configure
the
individual
parameters.
Savethe
changes.
Bootthe
switch.
Figure7-4.ExampleofExecutingaSeriesofConsoleCommands
7-7
CLILocalTerminalMode. Toenabletemporaryandnon-disruptive
changestotheterminalmodewithoutforcingachangeintheswitchsterminal
modeconfiguration,usetheconsolelocal-terminalcommand.Thiscommand
dynamicallychangesonlytheconsolesessionfromwhichitisexecuted.
Unliketheconsoleterminalcommand,itdoesnotrequirewritememoryanda
reboot,anddoesnotpersistacrossareboot.
Syntax: consolelocal-terminal<vt100|none|ansi>
Dynamicallyconvertstheterminalmodeofaconsolesessiontothe
selectedmode.Executingconsolelocal-terminalaffectsonlytheconsole
sessionfromwhichitisexecuted.Rebootingtheswitchreturnsthe
terminalmodefortheaffectedconsolesessiontotheconfigured
terminalmode.Thiscommanddoesnotchangetheconfiguredconsole
terminalmodeconfiguration.(Tochangetheconfiguredterminal
mode,usetheconsoleterminal<vt100|none|ansi>command,which
requiresexecutionofwritememory,followedbyaswitchreboot,totake
effect.)
vt100
Wheninvokedinaconsolesession,changestheterminalmodeto
VT-100forthatconsolesession.Usethisoptionwhentheconfig-
uredterminalmodeiseithernone(scriptingmode)oransi,and
youwanttotemporarilyusetheVT-100mode.(VT-100isthe
defaultterminalmodeconfigurationsetting.)
none
raw(scriptingmode)forthatconsolesession.(Scriptingmode
eliminatesunwantedcontrolcharactersthatmayappearinsome
scriptinglanguages.)Usethisoptionwhentheconfigured
terminalmodeiseithervt100oransi,andyouwanttotemporarily
usethescriptingmode.
ansi
ANSIforthatconsolesession.Usethisoptionwhentheconfigured
terminalmodeiseithervt100(scriptingmode)ornone,andyou
wanttotemporarilyusetheANSImode.
7-8
DenyingInterfaceAccessbyTerminatingRemoteManagementSessions
TerminatingRemoteManagement
Sessions
Theswitchsupportsuptofourmanagementsessions.Youcanuseshowipssh
tolistthecurrentmanagementsessions,andkilltoterminateacurrently
runningremotesession.(KilldoesnotterminateaConsolesessiononthe
serialport,eitherthroughadirectconnectionorviaamodem.)
Syntax: kill[<session-number>]
Forexample,ifyouareusingtheswitchsserialportforaconsolesessionand
wanttoterminateacurrentlyactiveTelnetsession,youwoulddothefollow-
ing:
Session2isanactive
Telnetsession.
Thekill2command
terminatessession2.
Figure7-5.ExampleofUsingthe"Kill"CommandToTerminateaRemoteSession
7-9
SystemInformation
SystemInformation
SystemInformationFeatures
SystemName switch product
name
page
7-11
page
7-13
page
7-15
SystemContact n/a page
7-11
page
7-13
page
7-15
SystemLocation n/a page
7-11
page
7-13
page
7-15
MACAgeTime 300seconds page
7-11
page
7-14
TimeSyncMethod None SeeChapter9,TimeProtocols.

TimeZone 0 page
7-11
page
7-14
DaylightTimeRule None page

7-11
page
7-14
Time January1,1990at
00:00:00atlast
powerreset
page
7-14
Configuringsysteminformationisoptional,butrecommended.
SystemName:Usingauniquenamehelpsyoutoidentifyindividualdevices
instackingenvironmentsandwhereyouareusinganSNMPnetworkmanage-
menttoolsuchasProCurveManager.
SystemContactandLocation:Thisinformationishelpfulforidentifying
thepersonadministrativelyresponsiblefortheswitchandforidentifyingthe
locationsofindividualswitches.
MACAgeInterval:ThenumberofsecondsaMACaddresstheswitchhas
learnedremainsintheswitchsaddresstablebeforebeingagedout(deleted).
Agingoutoccurswhentherehasbeennotrafficfromthedevicebelongingto
thatMACaddressfortheconfiguredinterval.
TimeSyncMethod:Selectsthemethod(TimePorSNTP)theswitchwilluse
fortimesynchronization.Formoreonthistopic,refertoChapter9,Time
Protocols.
7-10
SystemInformation
TimeZone:Thenumberofminutesyourtimezonelocationistothe
West(-)orEast(+)ofCoordinatedUniversalTime(formerlyGMT).The
default0meansnotimezoneisconfigured.Forexample,Berlin,Germanyis
inthe+1zone,whileVancouver,Canadaisinthe-8zone.
DaylightTimeRule:Specifiesthedaylightsavingstimeruletoapplyforyour
location.ThedefaultisNone.(Formoreonthistopic,seeAppendixE,
DaylightSavingsTimeonProCurveSwitches.)
Time:UsedintheCLItospecifythetimeofday,thedate,andothersystem
parameters.
Menu:ViewingandConfiguringSystemInformation
Toaccessthesysteminformationparameters:
1. FromtheMainMenu,Select...
1.SystemInformation
SystemInformation
Figure7-6.TheSystemInformationConfigurationScreen(DefaultValues)
Not e Tohelpsimplifyadministration,itisrecommendedthatyouconfigure
SystemNametoacharacterstringthatismeaningfulwithinyoursystem.
7-11
SystemInformation
3. Refertotheonlinehelpprovidedwiththisscreenforfurtherinformation
[Enter],thenpress[S](forSave)andreturntotheMainMenu.
CLI:ViewingandConfiguringSystemInformation
SystemInformationCommandsUsedinThisSection
showsystem-information below
hostname below
snmp-server below
[contact][location]
mac-age-time page7-14
time
timezone page7-14
daylight-time-rule page7-14
date page7-14
time
ListingtheCurrentSystemInformation.Thiscommandliststhecurrent
systeminformationsettings.
Syntax: showsystem-information
Thisexampleshowstheswitchsdefaultconsoleconfiguration.
Figure7-7.ExampleofCLISystemInformationListing
7-12
SystemInformation
ConfigureaSystemName,Contact,andLocationfortheSwitch.To
helpdistinguishoneswitchfromanother,configureaplain-languageidentity
fortheswitch.
Syntax: hostname<name-string>
snmp-server[contact<system contact>][location<system location>]
Bothfieldsallowupto255characters.
Forexample,tonametheswitchBluewithExt-4474asthesystemcontact,
andNorth-Data-Roomasthelocation:
Newhostname,
contact,andlocation
datafromprevious
commands.
AdditionalSystem
Information
Figure7-8.SystemInformationListingAfterExecutingthePrecedingCommands
7-13
SystemInformation
ReconfiguretheAgeTimeforLearnedMACAddresses.Thiscom-
mandcorrespondstotheMACAgeIntervalinthemenuinterface,andis
expressedinseconds.
Syntax: mac-age-time<60 . . 999960>(seconds)
Forexample,toconfiguretheagetimetosevenminutes:
ProCurve(config)#mac-age-time420
ConfiguretheTimeZoneandDaylightTimeRule. Thesecommands:
Setthetimezoneyouwanttouse
Definethedaylighttimeruleforkeepingthecorrecttimewhendaylight-
saving-timeshiftsoccur.
Syntax: timetimezone<-720..840>
timedaylight-time-rule<none|alaska|continental-us-and-canada|
middle-europe-and-portugal|southern-hemisphere|western-europe|
user-defined>
Eastofthe0meridian,thesignis+.Westofthe0meridian,thesignis-.
Forexample,thetimezonesettingforBerlin,Germanyis+60(zone+1,or60
minutes),andthetimezonesettingforVancouver,Canadais-480(zone-8,or
-480minutes).ToconfigurethetimezoneanddaylighttimeruleforVancouver,
Canada:
ProCurve(config)#timetimezone-480daylight-time-rule
continental-us-and-canada
ConfiguretheTimeandDate.Theswitchusesthetimecommandtocon-
figureboththetimeofdayandthedate.Also,executingtimewithoutparam-
etersliststheswitchstimeofdayanddate.NotethattheCLIusesa24-hour
clockscheme;that is,hour(hh)valuesfrom1p.m.tomidnightareinputas
13-24,respectively.
Syntax: time[hh:mm[:ss]][mm/dd/[yy]yy]
Forexample,tosettheswitchto9:45a.m.onNovember17,2007:
ProCurve(config)#time9:4511/17/07
Not e Executingreloadorbootresetsthetimeanddatetotheirdefaultstartupvalues.
7-14
SystemInformation
Web:ConfiguringSystemParameters
Inthewebbrowserinterface,youcanenterthefollowingsysteminformation:
SystemName
SystemLocation
SystemContact
ForaccesstotheMACAgeIntervalandtheTimeparameters,usethemenu
interfaceortheCLI.
ConfigureSystemParametersintheWebBrowserInterface.
1. ClickontheConfigurationtab.
2. ClickonSystemInfo.
3. Enterthedatayouwantinthedisplayedfields.
4. ImplementyournewdatabyclickingonApplyChanges.
Toaccesstheweb-basedhelpprovidedfortheswitch,clickon[?]intheweb
browserscreen.
7-15
SystemInformation
7-16
8
ConfiguringIPAddressing
Contents
Overview ...................................................... 8-2
IPConfiguration ................................................ 8-3
JustWantaQuickStartwith IPAddressing? .................... 8-4
IPAddressingwithMultipleVLANs............................ 8-4
IPAddressinginaStackingEnvironment ....................... 8-5
Menu:ConfiguringIPAddress,Gateway,andTime-To-Live(TTL) .. 8-5
CLI:ConfiguringIPAddress,Gateway,andTime-To-Live(TTL) .... 8-7
Web:ConfiguringIPAddressing .............................. 8-11
HowIPAddressingAffectsSwitch Operation................... 8-11
DHCP/BootpOperation.................................. 8-12
NetworkPreparationsforConfiguringDHCP/Bootp ......... 8-15
IPPreserve:RetainingVLAN-1IPAddressingAcross
ConfigurationFileDownloads................................... 8-16
OperatingRulesforIPPreserve .............................. 8-16
8-1
Overview
Overview
YoucanconfigureIPaddressingthroughalloftheswitchsinterfaces.Youcan
also:
Easilyeditaswitchconfigurationfiletoallowdownloadingthefileto
multipleswitcheswithoutoverwritingeachswitchsuniquegatewayand
VLAN1IPaddressing.
AssignuptosevensecondaryIPaddressestoaVLAN(multinetting)
WhyConfigureIPAddressing?Initsfactorydefaultconfiguration,the
switchoperatesasamultiportlearningbridgewithnetworkconnectivity
providedbytheportsontheswitch.However,toenablespecificmanagement
accessandcontrolthroughyournetwork,youwillneedIPaddressing.Table
8-1onpage8-12showstheswitchfeaturesthatdependonIPaddressingto
operate.
8-2
IPConfiguration
IPConfiguration
IPConfigurationFeatures
IPAddressandSubnetMask DHCP/Bootp page8-5 page8-7 page8-11
MultipleIPAddressesonaVLAN n/a page8-9
DefaultGatewayAddress none page8-5 page8-7 page8-11
PacketTime-To-Live(TTL) 64seconds page8-5 page8-7 n/a
TimeServer(Timep) DHCP page8-5 page8-7 n/a
IPAddressandSubnetMask. ConfiguringtheswitchwithanIPaddress
expandsyourabilitytomanagetheswitchanduseitsfeatures.Bydefault,the
switchisconfiguredtoautomaticallyreceiveIPaddressingonthedefault
VLANfromaDHCP/Bootpserverthathasbeenconfiguredcorrectlywith
informationtosupporttheswitch.(RefertoDHCP/BootpOperationonpage
8-12forinformationonsettingupautomaticconfigurationfromaserver.)
However,ifyouarenotusingaDHCP/BootpservertoconfigureIPaddressing,
usethemenuinterfaceortheCLItomanuallyconfiguretheinitialIPvalues.
Afteryouhavenetworkaccesstoadevice,youcanusethewebbrowser
interfacetomodifytheinitialIPconfigurationifneeded.
ForinformationonhowIPaddressingaffectsswitchperformance,referto
HowIPAddressingAffectsSwitchOperationonpage8-11.
Multinetting:AssigningMultipleIPAddressestoaVLAN. Foragiven
VLANyoucanassignoneprimaryIPaddressanduptosevensecondaryIP
addresses.Thisallowsyoutocombinetwoormoresubnetsonthesame
VLAN,whichenablesdevicesinthecombinedsubnetstocommunicate
normallythroughthenetworkwithoutneedingtoreconfiguretheIPaddress-
inginanyofthecombinedsubnets.
DefaultGatewayOperation.Thedefaultgatewayisrequiredwhena
routerisneededfortaskssuchasreachingoff-subnetdestinationsorforward-
ingtrafficacrossmultipleVLANs.ThegatewayvalueistheIPaddressofthe
next-hopgatewaynodefortheswitch,whichisusediftherequesteddestina-
tionaddressisnotonalocalsubnet/VLAN. Iftheswitchdoesnothavea
manually-configureddefaultgatewayandDHCP/Bootpisconfiguredonthe
primaryVLAN,thenthedefaultgatewayvalueprovidedbytheDHCPorBootp
serverwillbeused.Iftheswitchhasamanuallyconfigureddefaultgateway,
8-3
IPConfiguration
Not es
thentheswitchusesthisgateway,evenifadifferentgatewayisreceivedvia
DHCPorBootpontheprimaryVLAN.(ThisisalsotrueforTimePandanon-
defaultTime-To-Live.)SeeNotesonpage8-4andrefertothechapteron
VirtualLANsintheAdvancedTrafficManagementGuide.
PacketTime-To-Live(TTL).Thisparameterspecifieshowlonginsec-
ondsanoutgoingpacketshouldexistinthenetwork.Inmostcases,thedefault
setting(64seconds)isadequate.
JustWantaQuickStartwithIPAddressing?
IfyoujustwanttogivetheswitchanIPaddresssothatitcancommunicate
onyournetwork,orifyouarenotusingVLANs,ProCurverecommendsthat
youusetheSwitchSetupscreentoquicklyconfigureIPaddressing.Todoso,
dooneofthefollowing:
EntersetupattheCLIManagerlevelprompt.
ProCurve#setup
Select8.RunSetupintheMainMenuofthemenuinterface.
FormoreonusingtheSwitchSetupscreen,seetheInstallationandGetting
StartedGuideyoureceivedwiththeswitch.
IPAddressingwithMultipleVLANs
Inthefactory-defaultconfiguration,theswitchhasone,permanentdefault
VLAN(namedDEFAULT_VLAN)thatincludesallportsontheswitch.Thus,
whenonlythedefaultVLANexistsintheswitch,ifyouassignanIPaddress
andsubnetmasktotheswitch,youareactuallyassigningtheIPaddressing
totheDEFAULT_VLAN.
IfmultipleVLANsareconfigured,theneachVLANcanhaveitsownIP
address.ThisisbecauseeachVLANoperatesasaseparatebroadcast
domainandrequiresauniqueIPaddressandsubnetmask.Adefault
gateway(IP)addressfortheswitchisoptional,butrecommended.
Inthefactory-defaultconfiguration,thedefaultVLAN(named
DEFAULT_VLAN)istheswitchsprimaryVLAN.Theswitchusesthe
primaryVLANforlearningthedefaultgatewayaddress,(packet)Time-
To-Live(TTL),andTimepviaDHCPorBootp.(OtherVLANscanalsouse
DHCPorBootPtoacquireIPaddressing.However,theswitchsgateway,
TTL,andTimePvalueswillbeacquiredthroughtheprimaryVLANonly.)
FormoreonVLANs,seetheAdvancedTrafficManagementGuide.
8-4
IPConfiguration
TheIPaddressingusedintheswitchshouldbecompatiblewithyour
network.Thatis,theIPaddressmustbeuniqueandthesubnetmaskmust
beappropriateforyourIPnetwork.
IfyouchangetheIPaddressthrougheitherTelnetaccessortheweb
browserinterface,theconnectiontotheswitchwillbelost.Youcan
reconnectbyeitherrestartingTelnetwiththenewIPaddressorentering
thenewaddressastheURLinyourwebbrowser.
IPAddressinginaStackingEnvironment
IfyouareinstallingtheswitchintoanProCurvestackmanagementenviron-
ment,enteringanIPaddressmaynotberequired.Seethechapteronstack
managementintheAdvancedTrafficManagementGuide.
Menu:ConfiguringIPAddress,Gateway,andTime-To-
Live(TTL)
Dooneofthefollowing:
TomanuallyenteranIPaddress,subnetmask,settheIPConfigparameter
toManualandthenmanuallyentertheIPaddressandsubnetmaskvalues
youwantfortheswitch.
TouseDHCPorBootp,usethemenuinterfacetoensurethattheIPConfig
parameterissettoDHCP/Bootp,thenrefertoDHCP/BootpOperationon
page8-12.
ToConfigureIPAddressing.
1. FromtheMainMenu,Select.
5.IPConfiguration
Not e IfmultipleVLANsareconfigured,ascreenshowingallVLANsappearsinstead
ofthefollowingscreen.
8-5
IPConfiguration
Fordescriptionsofthese
parameters,seethe
onlineHelpforthis
screen.
BeforeusingtheDHCP/
Bootpoption,referto
DHCP/Bootp
Operationonpage8-12.
Figure8-1. ExampleoftheIPServiceConfigurationScreenwithoutMultiple
VLANsConfigured
2. Press[E](forEdit).
3. Iftheswitchneedstoaccessarouter,forexample,toreachoff-subnet
destinations,selecttheDefaultGatewayfieldandentertheIPaddressof
thegatewayrouter.
4. IfyouneedtochangethepacketTime-To-Live(TTL)setting,selectDefault
TTLandtypeinavaluebetween2and255(seconds).
5. ToconfigureIPaddressing,selectIPConfiganddooneofthefollowing:
IfyouwanttohavetheswitchretrieveitsIPconfigurationfroma
DHCPorBootpserver,attheIPConfigfield,keepthevalueasDHCP/
Bootpandgotostep8.
IfyouwanttomanuallyconfiguretheIPinformation,usetheSpace
bartoselectManualandusethe[Tab]keytomovetotheotherIP
configurationfields.
6. SelecttheIPAddress fieldandentertheIPaddressfortheswitch.
7. Selectthe SubnetMask fieldandenterthesubnetmaskfortheIPaddress.
8. Press[Enter],then[S](for Save).
8-6
IPConfiguration
CLI:ConfiguringIPAddress,Gateway,andTime-To-
Live(TTL)
IPCommandsUsedinThisSection
showip page8-7
vlan<vlan-id>ip page8-8
address
ipdefault-gateway page8-11
ipttl page8-11
ViewingtheCurrentIPConfiguration. Thefollowingcommanddisplays
theIPaddressingforeachVLANconfiguredintheswitch.Ifonlythe
DEFAULT_VLANexists,thenitsIPconfigurationappliestoallportsinthe
switch.WheremultipleVLANsareconfigured,theIPaddressingislistedper
VLAN.Thedisplayincludesswitch-widepackettime-to-live,and(ifconfig-
ured)theswitchsdefaultgatewayandTimepconfiguration.
Syntax: showip
Forexample,inthefactory-defaultconfiguration(noIPaddressingassigned),
theswitchsIPaddressingappearsas:
Figure8-2.ExampleoftheSwitchsDefaultIPAddressing
WithmultipleVLANsandsomeotherfeaturesconfigured,showipprovides
additionalinformation:
8-7
IPConfiguration
Figure8-3.ExampleofShowIPListingwithNon-DefaultIPAddressingConfigured
ConfigureanIPAddressandSubnetMask.Thefollowingcommand
includesboththeIPaddressandthesubnetmask.Youmusteitherincludethe
IDoftheVLANforwhichyouareconfiguringIPaddressingorgotothe
contextconfigurationlevelforthatVLAN.(IfyouarenotusingVLANsonthe
switchthatis,iftheonlyVLANisthedefaultVLANthentheVLANIDis
always1.)
Not e ThedefaultIPaddresssettingfortheDEFAULT_VLANisDHCP/Bootp.On
additionalVLANsyoucreate,thedefaultIPaddresssettingisDisabled.
Syntax: vlan<vlan-id>ipaddress<ip-address/mask-length>
or
vlan<vlan-id>ipaddress<ip-address> <mask-bits>
or
vlan<vlan-id> ipaddressdhcp-bootp
ThisexampleconfiguresIPaddressingonthedefaultVLANwiththesubnet
maskspecifiedinmaskbits.
ProCurve(config)#vlan1ipaddress10.28.227.103/255.255.255.0
ThisexampleconfiguresthesameIPaddressingastheprecedingexample,
butspecifiesthesubnetmaskbymasklength.
ProCurve(config)#vlan1ipaddress10.28.227.103/24
8-8
IPConfiguration
ConfigureMultipleIPAddressesonaVLAN(Multinetting).Youcan
configureoneprimaryIPaddressperVLANanduptosevensecondaryIP
addressesforthesameVLAN.Thatis,theswitchenablesyoutoassignupto
eightnetworkstoaVLAN.
EachIPaddressonaVLANmustbeforaseparatesubnet.
TheswitchassignsthefirstIPaddressmanuallyconfiguredonaVLANas
theprimaryIPaddress.TheswitchthenassignsanysubsequentIP
addresses(forothersubnets)manuallyconfiguredontheVLANassec-
ondaryaddresses.
IftheprimaryIPaddressonaVLANisconfiguredforDHCP-Bootp,the
switchdoesnotacceptsecondaryIPaddressesonthatVLAN.(DHCP
operatesonlytoprovideprimaryIPaddressing,andisnotusedfor
providingsecondaryIPaddressing.)
Theswitchallowsupto512secondarysubnetaddressassignmentsto
VLANs.
Syntax: [no]vlan<vlan-id>ipaddress<ip-address/mask-length>
[no]vlan<vlan-id>ipaddress<ip-address> <mask-bits>
Forexample,ifyouwantedtomultinetVLAN_20(VID=20)withitsprimary
IPaddressandtwosecondaryIPaddressesshownbelow,youwouldperform
stepssimilartothefollowing.(Forthisexample,assumethattheprimaryIP
addressingisalreadyconfigured.)
Status VID IPAddress SubnetMask
Primary 20 10.25.33.101 255.255.240.0
Secondary 20 10.26.33.101 255.255.240.0
Secondary 20 10.27.33.101 255.255.240.0
1.GotoVLAN20.
2.Configuretwosecondary
IPaddressesonVLAN
20.
3.DisplayIPaddressing.
Note:AVLANssecondaryIP
entriesarelistedbelowthe
VLANsnameandprimaryIP
address.
Inashowiplisting,thefirstIP
addresslistedforaVLANisalways
thatVLANsprimaryIPaddress.
Figure8-4.ExampleofConfiguringandDisplayingaMultinettedVLAN
8-9
IPConfiguration
IfyouthenwantedtomultinetthedefaultVLAN,youwoulddothefollowing:
ThesecondaryIP
addressesinaVLAN
arelisted
immediatelyafterthe
primaryIPaddress
fortheVLAN.
Figure8-5.ExampleofMultinettingontheDefaultVLAN
Not e TheInternet(IP)ServicescreenintheMenuinterface(figure8-1onpage8-6)
displaysonlytheprimaryIPaddressforeachVLAN.YoumustusetheCLI
showipcommandtodisplaythefullIPaddresslistingformultinettedVLANs.
RemovingorReplacingIPAddressesinaSubnettedVLAN.To
removeanIPaddressfromasubnettedVLAN,usethenoformoftheIP
addresscommandshownonpage8-9.Generally,toreplaceoneIPaddress
withanother,youshouldfirstremovetheaddressyouwanttoreplace,and
thenenterthenewaddress.However,inasubnettedVLAN,ifyouremovethe
primaryIPaddressfromaVLAN,thenextsequentialsecondaryIPaddress
becomestheprimaryaddress.Ifyoulaterre-entertheformerprimaryIP
address,theswitchconfiguresitasasecondaryaddress.Thus,ifyouneedto
changetheprimaryIPaddressinasubnettedVLAN,youmustremovethe
secondaryIPaddressesconfiguredforthatVLANbeforeyoureplacethe
primaryaddress.
8-10
IPConfiguration
ConfiguretheOptionalDefaultGateway. UsingtheGlobalconfigura-
tionlevel,youcanassignonedefaultgatewaytotheswitch.
Syntax: ipdefault-gateway<ip-address>
Forexample:
ProCurve(config)#ipdefault-gateway10.28.227.115
Note TheswitchusestheIPdefaultgatewayonlywhileoperatingasaLayer2
device.Whileroutingisenabledontheswitch,theIPdefaultgatewayisnot
used.Thus,toavoidlossofTelnetaccesstooff-subnetmanagementstations,
youshouldusetheiproutecommandtoconfigureastatic(default)route
beforeenablingrouting.Refertochapter16,IPRoutingFeatures,formore
information.
ConfigureTime-To-Live(TTL).UsethiscommandattheGlobalconfig
prompttosetthetimethatapacketoutboundfromtheswitchcanexiston
thenetwork.Thedefaultsettingis64seconds.
Syntax: ipttl<number-of-seconds>
ProCurve(config)#ipttl60
IntheCLI,youcanexecutethiscommandonlyfromtheglobalconfiguration
level.TheTTLrangeis2-255seconds.
Web:ConfiguringIPAddressing
YoucanusethewebbrowserinterfacetoaccessIPaddressingonlyifthe
switchalreadyhasanIPaddressthatisreachablethroughyournetwork.
2. Clickon[IPConfiguration].
3. Ifyouneedfurtherinformationonusingthewebbrowserinterface,click
on[?]toaccesstheweb-basedhelpavailablefortheSwitch2512/2524.
HowIPAddressingAffectsSwitchOperation
WithoutanIPaddressandsubnetmaskcompatiblewithyournetwork,the
switchcanbemanagedonlythroughadirectterminaldeviceconnectionto
theConsoleRS-232port.Youcanusedirect-connectconsoleaccesstotake
advantageoffeaturesthatdonotdependonIPaddressing.However,torealize
thefullperformancecapabilitiesProCurveproactivenetworkingoffers
8-11
IPConfiguration
throughtheswitch,configuretheswitchwithanIPaddressandsubnetmask
compatiblewithyournetwork.Thefollowingtableliststhegeneralfeatures
availablewithandwithoutanetwork-compatibleIPaddressconfigured.
Table8-1. FeaturesAvailableWithandWithoutIPAddressingontheSwitch
FeaturesAvailableWithoutanIPAddress AdditionalFeaturesAvailablewithanIPAddressand
SubnetMask
Direct-connectaccesstotheCLIandthemenuinterface.
StackingCandidateorStackMember
DHCPorBootpsupportforautomaticIPaddress
configuration,andDHCPsupportforautomaticTimep
serverIPaddressconfiguration
SpanningTreeProtocol
Portsettingsandporttrunking
Console-basedstatusandcountersinformationfor
monitoringswitchoperationanddiagnosingproblems
throughtheCLIormenuinterface.
VLANsandGVRP
Serialdownloadsofoperatingsystem(OS)updatesand
configurationfiles(Xmodem)
Linktest
Portmonitoring
Passwordauthentication
QualityofService
AuthorizedIPmanager
Webbrowserinterfaceaccess,withconfiguration,
security,anddiagnostictools,plustheAlertLogfor
discoveringproblemsdetectedintheswitchalongwith
suggestedsolutions
SNMPnetworkmanagementaccesssuchasProCurve
Managernetworkconfiguration,monitoring,problem-
findingandreporting,analysis,andrecommendationsfor
changestoincreasecontrolanduptime
TACACS+,RADIUS,SSH,SSL,and802.1Xauthentication
MultinettingonVLANs
StackingCommander*
TelnetaccesstotheCLIorthemenuinterface
IGMP
Timepserverconfiguration
TFTPdownloadofconfigurationsandOSupdates
IProuting
Pingtest
*AlthoughaCommandercanoperatewithoutanIPaddress,doingsomakesitunavailableforin-bandaccessinanIP
network.
DHCP/BootpOperation
Overview.DHCP/BootpisusedtoprovideconfigurationdatafromaDHCP
orBootpservertotheswitch.ThisdatacanbetheIPaddress,subnetmask,
defaultgateway,TimepServeraddress,andTFTPserveraddress.IfaTFTP
serveraddressisprovided,thisallowstheswitchtoTFTPapreviouslysaved
configurationfilefromtheTFTPservertotheswitch.WitheitherDHCPor
Bootp,theserversmustbeconfiguredpriortotheswitchbeingconnectedto
thenetwork.
Not e ForinformationonconfiguringDHCPrelay,includingsettingupaDHCP
helperandDHCPOption82ontheswitch,refertotherelevantsectioninthe
IProutingchapteroftheAdvancedTrafficManagementGuide.
8-12
IPConfiguration
TheDHCP/BootpProcess.WhenevertheIPConfigparameterintheswitch
orinanindividualVLANintheswitchisconfiguredtoDHCP/Bootp(the
default),orwhentheswitchisrebootedwiththisconfiguration:
1. DHCP/Bootprequestsareautomaticallybroadcastonthelocalnetwork.
(TheswitchsendsonetypeofrequesttowhicheitheraDHCPorBootp
servercanrespond.)
2. WhenaDHCPorBootpserverreceivestherequest,itreplieswitha
previouslyconfiguredIPaddressandsubnetmaskfortheswitch.The
switchalsoreceivesanIPGatewayaddressiftheserverhasbeenconfig-
uredtoprovideone.InthecaseofBootp,theservermustfirstbe
configuredwithanentrythathastheMACaddressoftheswitch.(To
determinetheswitchsMACaddress,seeAppendixD,"MACAddress
Management".Theswitchproperlyhandlesrepliesfromeithertypeof
server.Ifmultiplerepliesarereturned,theswitchwillusethefirstreply.)
Not e Ifyoumanuallyconfigureagatewayontheswitch,itwillignoreanygateway
addressreceivedviaDHCPorBootp.
IftheswitchisinitiallyconfiguredforDHCP/Bootpoperation(thedefault),
orifitisrebootedwiththisconfiguration,itimmediatelybeginssending
requestpacketsonthenetwork.Iftheswitchdoesnotreceiveareplytoits
DHCP/Bootprequests,itcontinuestoperiodicallysendrequestpackets,but
withdecreasingfrequency.Thus,ifaDHCPorBootpserverisnotavailable
oraccessibletotheswitchwhenDHCP/Bootpisfirstconfigured,theswitch
maynotimmediatelyreceivethedesiredconfiguration.Afterverifyingthat
theserverhasbecomeaccessibletotheswitch,reboottheswitchtore-start
theprocessimmediately.
DHCPOperation. DependingonhowtheDHCPserverisconfigured,the
switchmayreceiveanipaddressthatistemporarilyleased.Periodicallythe
switchmayberequiredtorenewitsleaseoftheIPconfiguration.Thus,theIP
addressingprovidedbytheservermaybedifferenteachtimetheswitch
rebootsorrenewsitsconfigurationfromtheserver.However,youcanfixthe
addressassignmentfortheswitchbydoingeitherofthefollowing:
Configuretheservertoissueaninfinitelease.
UsingtheswitchsMACaddressasanidentifier,configuretheserverwith
aReservationsothatitwillalwaysassignthesameIPaddresstothe
switch.(ForMACaddressinformation,refertoAppendixD,"MAC
AddressManagement".)
Formoreinformationoneitheroftheseprocedures,refertothedocumenta-
tionprovidedwiththeDHCPserver.
8-13
IPConfiguration
BootpOperation.WhenaBootpserverreceivesarequestitsearchesits
BootpdatabaseforarecordentrythatmatchestheMACaddressintheBootp
requestfromtheswitch.Ifamatchisfound,theconfigurationdatainthe
associateddatabaserecordisreturnedtotheswitch.FormanyUnixsystems,
theBootpdatabaseiscontainedinthe/etc/bootptabfile.IncontrasttoDHCP
operation,Bootpconfigurationsarealwaysthesameforaspecificreceiving
device.Thatis,theBootpserverrepliestoarequestwithaconfiguration
previouslystoredintheserveranddesignatedfortherequestingdevice.
BootpDatabaseRecordEntries.AminimalentryintheBootptablefile
/etc/bootptabtoupdateanIPaddressandsubnetmasktotheswitchoraVLAN
configuredintheswitchwouldbesimilartothisentry:
j 2610swi t ch: \
ht =et her : \
ha=0030c1123456: \
i p=10. 66. 77. 88: \
sm=255. 255. 248. 0: \
gw=10. 66. 77. 1: \
hn: \
vm=r f c1048
AnentryintheBootptablefile/ et c/ boot pt ab totelltheswitchorVLAN
wheretoobtainaconfigurationfiledownloadwouldbesimilartothisentry:
j 2610swi t ch: \
ht =et her : \
ha=0030c1123456: \
i p=10. 66. 77. 88: \
sm=255. 255. 248. 0: \
gw=10. 66. 77. 1: \
l g=10. 22. 33. 44: \
T144=swi t ch. cf g: \
vm=r f c1048
where:
j2610switch isauser-definedsymbolicnametohelpyoufindthecorrectsectionofthe
bootptabfile.IfyouhavemultipleswitchesthatwillbeusingBootptogettheir
IPconfiguration,youshoulduseauniquesymbolicnameforeachswitch.
ht isthehardwaretype.Fortheswitchescoveredinthisguide,setthistoether
(forEthernet).This tag must precede the ha tag.
ha isthehardwareaddress.Usetheswitch's(orVLAN's)12-digitMACaddress.
ip istheIPaddresstobeassignedtotheswitch(orVLAN).
sm isthesubnetmaskofthesubnetinwhichtheswitch(orVLAN)isinstalled.
gw istheIPaddressofthedefaultgateway.
8-14
IPConfiguration
lg TFTPserveraddress(sourceoffinalconfigurationfile)
T144 isthevendor-specifictagidentifyingtheconfigurationfiletodownload.
vm isarequiredentrythatspecifiestheBootpreportformat.Fortheswitches
describedinthisguide,setthisparametertorfc1048.
Not e TheaboveBootptableentryisasamplethatwillworkfortheswitchwhen
theappropriateaddressesandfilenamesareused.
NetworkPreparationsforConfiguringDHCP/Bootp
Initsdefaultconfiguration,theswitchisconfiguredforDHCP/Bootpopera-
tion.However,theDHCP/BootpfeaturewillnotacquireIPaddressingforthe
switchunlessthefollowingtaskshavealreadybeencompleted:
ForBootpoperation:
ABootpdatabaserecordhasalreadybeenenteredintoanappropriate
Bootpserver.
Thenecessarynetworkconnectionsareinplace
TheBootpserverisaccessiblefromtheswitch
ForDHCPoperation:
ADHCPscopehasbeenconfiguredontheappropriateDHCPserver.
Thenecessarynetworkconnectionsareinplace
ADHCPserverisaccessiblefromtheswitch
Not e DesignatingaprimaryVLANotherthanthedefaultVLANaffectstheswitchs
useofinformationreceivedviaDHCP/Bootp.Formoreonthistopic,seethe
chapteronVirtualLANsintheAdvancedTrafficManagementGuide.
AfteryoureconfigureorreboottheswitchwithDHCP/Bootpenabledina
networkprovidingDHCP/Bootpservice,theswitchdoesthefollowing:
ReceivesanIPaddressandsubnetmaskand,ifconfiguredintheserver,
agatewayIPaddressandtheaddressofaTimepserver.
IftheDHCP/Bootpreplyprovidesinformationfordownloadingaconfig-
urationfile,theswitchusesTFTPtodownloadthefilefromthedesignated
source,thenrebootsitself.(ThisassumesthattheswitchorVLANhas
connectivitytotheTFTPfileserverspecifiedinthereply,thattheconfig-
urationfileiscorrectlynamed,andthattheconfigurationfileexistsinthe
TFTPdirectory.)
8-15
IPPreserve:RetainingVLAN-1IPAddressingAcrossConfigurationFileDownloads
IPPreserve:RetainingVLAN-1IP
AddressingAcross
ConfigurationFileDownloads
IPPreserveenablesyoutocopyaconfigurationfiletomultipleswitchesthat
usethesameoperating-systemsoftwarewhileretainingtheindividualIP
addressandsubnetmaskonVLAN1ineachswitch,andtheGatewayIP
addressassignedtotheswitch.Thisenablesyoutodistributethesame
configurationfiletomultipleswitcheswithoutoverwritingtheirindividualIP
addresses.
OperatingRulesforIPPreserve
Whenippreserveisenteredasthelastlineinaconfigurationfilestoredona
TFTPserver:
IftheswitchscurrentIPaddressforVLAN1wasnotconfiguredbyDHCP/
Bootp,IPPreserveretainstheswitchscurrentIPaddress,subnetmask,
andIPgatewayaddresswhentheswitchdownloadsthefileandreboots.
Theswitchadoptsallotherconfigurationparametersintheconfiguration
fileintothestartup-configfile.
IftheswitchscurrentIPaddressingforVLAN1isfromaDHCPserver,
IPPreserveissuspended.Inthiscase,whateverIPaddressingtheconfig-
urationfilespecifiesisimplementedwhentheswitchdownloadsthefile
andreboots.IfthefileincludesDHCP/BootpastheIPaddressingsource
forVLAN1,theswitchwillconfigureitselfaccordinglyanduseDHCP/
Bootp.Ifinstead,thefileincludesadedicatedIPaddressandsubnetmask
forVLAN1andaspecificgatewayIPaddress,thentheswitchwill
implementthesesettingsinthestartup-configfile.
Theippreservestatementdoesnotappearinshowconfiglistings.Toverify
IPPreserveinaconfigurationfile,openthefileinatexteditorandview
thelastline.ForanexampleofimplementingIPPreserveinaconfigura-
tionfile,seefigure8-6,below.
TosetupIPPreserve,entertheippreservestatementattheendofaconfigu-
rationfile.(NotethatyoudonotexecuteIPPreservebyenteringacommand
fromtheCLI).
8-16
Entering"ippreserve"inthelastlineofaconfiguration
fileimplementsIPPreservewhenthefileis
downloadedtotheswitchandtheswitchreboots.
Figure8-6.ExampleofImplementingIPPreserveinaSwitchConfigurationFile
Forexample,considerFigure8-7:
Switch4
VLAN1:DHCP
Switch3
VLAN1:
10.31.22.103
Switch1
VLAN1:
10.31.22.101
DHCP
Server
Switch2
VLAN1:
10.31.22.102
config. IP
Address
Switches1through3copyandimplementtheconfig.txtfile
fromtheTFTPserver(figure8-8),butretaintheircurrentIP
Switch4alsocopiesandimplementsthe
config.txtfilefromtheTFTPserver(figure8-8),
butacquiresnewIPaddressingfromtheDHCP
TFTP
Server
Management
Station
Figure8-7.ExampleofIPPreserveOperationwithMultipleSwitchesUsingtheSameOSSoftware
Ifyouapplythefollowingconfigurationfiletofigure8-7,switches1-3will
retaintheirmanuallyassignedIPaddressingandswitch4willbeconfigured
toacquireitsIPaddressingfromaDHCPserver.
8-17
Usingfigure8-7,above,switches1-3ignorethese
entriesbecausethefileimplementsIPPreserveand
theircurrentIPaddressingwasnotacquiredthrough
DHCP/Bootp.
Switch4ignoresIPPreserveandimplementsthe
DHCP/BootpaddressingandIPGatewayspecifiedin
thisfile(becauseitslastIPaddressingwasacquired
fromaDHCP/Bootpserver). IPPreserveCommand
Figure8-8.ConfigurationFileinTFTPServer,withDHCP/BootpSpecifiedastheIPAddressingSource
Ifyouapplythisconfigurationfiletofigure8-7,switches1-3willstillretain
theirmanuallyassignedIPaddressing.However,switch4willbeconfigured
withtheIPaddressingincludedinthefile.
8-18
Becauseswitch4(figure8-7)received
itsmostrecentIPaddressingfroma
DHCP/Bootpserver,theswitch
ignorestheippreservecommandand
implementstheIPaddressing
includedinthisfile.
Figure8-9.ConfigurationFileinTFTPServer,withDedicatedIPAddressingInsteadofDHCP/Bootp
TosummarizetheIPPreserveeffectonIPaddressing:
IftheswitchreceiveditsmostrecentVLAN1IPaddressingfromaDHCP/
Bootpserver,itignorestheIPPreservecommandwhenitdownloadsthe
configurationfile,andimplementswhateverIPaddressinginstructions
areintheconfigurationfile.
IftheswitchdidnotreceiveitsmostrecentVLAN1IPaddressingfroma
DHCP/Bootpserver,itretainsitscurrentIPaddressingwhenitdownloads
theconfigurationfile.
ThecontentofthedownloadedconfigurationfiledeterminestheIP
addressesandsubnetmasksforotherVLANs.
8-19
8-20
9
TimeProtocols
Contents
Overview ...................................................... 9-2
TimePTimeSynchronization ... ............................... 9-2
SNTPTimeSynchronization .................................. 9-2
TimeProtocolOperation ......................................... 9-3
GeneralStepsforRunningaTimeProtocolontheSwitch ......... 9-3
DisablingTimeSynchronization ............................... 9-4
SNTP:Viewing,Selecting,andConfiguring ......................... 9-4
Menu:ViewingandConfiguringSNTP . . ... ..................... 9-5
CLI:ViewingandConfiguringSNTP ... . ... ..................... 9-8
ViewingtheCurrentSNTPConfiguration.................... 9-8
Configuring(EnablingorDisabling)theSNTPMode .......... 9-9
TimeP:Viewing,Selecting,andConfiguring ........................ 9-14
Menu:ViewingandConfiguringTimeP . ... .................... 9-15
CLI:ViewingandConfiguringTimeP .. . ....................... 9-16
ViewingtheCurrentTimePConfiguration .................. 9-17
Configuring(EnablingorDisabling)theTimePMode ........ 9-18
SNTPUnicastTimePollingwithMultipleSNTPServers............. 9-21
AddressPrioritization ............... ........................ 9-21
Addingand DeletingSNTPServerAddresses ................... 9-22
Configured................................................ 9-23
SNTPMessagesintheEventLog ................................. 9-23
9-1
TimeProtocols
Overview
Overview
Thischapterdescribes:
SNTPTimeProtocolOperation
TimepTimeProtocolOperation
Usingtimesynchronizationensuresauniformtimeamonginteroperating
devices.Thishelpsyoutomanageandtroubleshootswitchoperationby
attachingmeaningfultimedatatoeventanderrormessages.
TheswitchoffersTimePandSNTP(SimpleNetworkTimeProtocol)anda
timesynccommandforchangingthetimeprotocolselection(orturningoff
timeprotocoloperation).
Not es
Althoughyoucancreateandsaveconfigurationsforbothtimeproto-
colswithoutconflicts,theswitchallowsonlyoneactivetimeprotocol
atanytime.
Inthefactory-defaultconfiguration,thetimesynchronizationoption
issettoTimeP,withtheTimePmodeitselfsettoDisabled.
TimePTimeSynchronization
YoucaneithermanuallyassigntheswitchtouseaTimePserveroruseDHCP
toassigntheTimePserver.Ineithercase,theswitchcangetitstimesynchro-
nizationupdatesfromonlyone,designatedTimepserver.Thisoption
enhancessecuritybyspecifyingwhichtimeservertouse.
SNTPTimeSynchronization
SNTPprovidestwooperatingmodes:
BroadcastMode:Theswitchacquirestimeupdatesbyacceptingthe
timevaluefromthefirstSNTPtimebroadcastdetected.(Inthiscase,
theSNTPservermustbeconfiguredtobroadcasttimeupdatestothe
networkbroadcastaddress.Refertothedocumentationprovided
withyourSNTPserverapplication.)Oncetheswitchdetectsapartic-
9-2
TimeProtocols
Overview:SelectingaTimeSynchronizationProtocolorTurningOffTimeProtocolOperation
ularserver,itignorestimebroadcastsfromotherSNTPserversunless
theconfigurablePollIntervalexpiresthreeconsecutivetimeswithout
anupdatereceivedfromthefirst-detectedserver.
Not e TouseBroadcastmode,theswitchandtheSNTPservermustbeinthesame
subnet.
UnicastMode:Theswitchrequestsatimeupdatefromtheconfig-
uredSNTPserver.(Youcanconfigureoneserverusingthemenu
interface,oruptothreeserversusingtheCLIsntpserver command.)
ThisoptionprovidesincreasedsecurityovertheBroadcastmodeby
specifyingwhichtimeservertouseinsteadofusingthefirstone
detectedthroughabroadcast.
TimeProtocolOperation
GeneralStepsforRunningaTimeProtocolontheSwitch
1. Selectthetimesynchronizationprotocol:SNTPorTimeP(thedefault).
2. Enabletheprotocol.Thechoicesare:
SNTP:Broadcast orUnicast
TimeP: DHCP orManual
3. Configuretheremainingparametersforthetimeprotocolyouselected.
Theswitchretainstheparametersettingsforbothtimeprotocolsevenif
youchangefromoneprotocoltotheother.Thus,ifyouselectatime
protocol,theswitchusestheparametersyoulastconfiguredforthe
selectedprotocol.
Notethatsimplyselectingatimesynchronizationprotocoldoesnotenable
thatprotocolontheswitchunlessyoualsoenabletheprotocolitself(step2,
above).Forexample,inthefactory-defaultconfiguration,TimePisthe
selectedtimesynchronizationmethod.However,becauseTimePisdisabled
inthefactory-defaultconfiguration,notimesynchronizationprotocolis
running.
9-3
TimeProtocols
SNTP:Viewing,Selecting,andConfiguring
DisablingTimeSynchronization
Youcanuseeitherofthefollowingmethodstodisabletimesynchronization
withoutchangingtheTimeporSNTPconfiguration:
IntheSystemInformationscreenoftheMenuinterface,settheTime
SynchMethodparametertoNone,thenpress[Enter],then[S](forSave).
IntheGlobalconfigleveloftheCLI,executenotimesync.
SNTP:Viewing,Selecting,and
Configuring
SNTPFeature Default Menu CLI Web
viewtheSNTPtimesynchronizationconfiguration n/a page9-5 page9-8
selectSNTPasthetimesynchronizationmethod timep page9-6 page9-9ff.
disabletimesynchronization timep page9-6 page9-12
enabletheSNTPmode(Broadcast,Unicast,orDisabled) disabled
broadcast n/a page9-6 page9-9
unicast n/a page9-6 page9-10
none/disabled n/a page9-6 page9-13
configureanSNTPserveraddress(forUnicastmodeonly) none page9-6 page9-10ff.
changetheSNTPserverversion(forUnicastmodeonly) 3 page9-7 page9-12
changetheSNTPpollinterval 720seconds page9-7 page9-12
9-4
TimeProtocols
Table9-1.SNTPParameters
SNTPParameter Operation
TimeSync
Method
UsedtoselecteitherSNTP,TIMEP,orNoneasthetimesynchronizationmethod.
SNTPMode
Disabled TheDefault.SNTPdoesnotoperate,evenifspecifiedbytheMenuinterfaceTimeSyncMethod
parameterortheCLItimesynccommand.
Unicast DirectstheswitchtopollaspecificserverforSNTPtimesynchronization.Requiresatleastoneserver
address.
Broadcast DirectstheswitchtoacquireitstimesynchronizationfromdatabroadcastbyanySNTPservertothe
networkbroadcastaddress.Theswitchusesthefirstserverdetectedandignoresanyothers.
However,ifthePollIntervalexpiresthreetimeswithouttheswitchdetectingatimeupdatefromthe
originalserver,ittheswitchacceptsabroadcasttimeupdatefromthenextserveritdetects.
PollInterval
(seconds)
InUnicastMode:SpecifieshowoftentheswitchpollsthedesignatedSNTPserverforatimeupdate.
InBroadcastMode:Specifieshowoftentheswitchpollsthenetworkbroadcastaddressforatime
update.
ServerAddress UsedonlywhentheSNTPModeissettoUnicast.SpecifiestheIPaddressoftheSNTPserverthat
theswitchaccessesfortimesynchronizationupdates.Youcanconfigureuptothreeservers;one
usingthemenuorCLI,andtwomoreusingtheCLI.SeeSNTPUnicastTimePollingwithMultiple
SNTPServersonpage9-21.
ServerVersion Default:3;range:1-7.SpecifiestheSNTPsoftwareversiontouse,andisassignedonaper-server
basis.Theversionsettingisbackwards-compatible.Forexample,usingversion3meansthatthe
switchacceptsversions1through3.
Menu:ViewingandConfiguringSNTP
ToView,Enable,andModifySNTPTimeProtocol:
1. FromtheMainMenu,select:
1.SystemInformation
9-5
TimeProtocols
TimeProtocolSelectionParameter
TIMEP
SNTP
None
Figure9-1. TheSystemInformationScreen(DefaultValues)
3. Use[v]tomovethecursortotheTimeSyncMethodfield.
4. UsetheSpacebartoselectSNTP,thenpress[v]oncetodisplayandmove
totheSNTPModefield.
UsetheSpacebartoselecttheBroadcastmode,thenpress[v]to
movethecursortothePollIntervalfield,andgotostep6.(For
Broadcastmodedetails,seeSNTPOperatingModeson
page9-2.)
UsetheSpacebartoselecttheUnicastmode,thendothe
following:
i. Press[>]tomovethecursortotheServerAddressfield.
9-6
TimeProtocols
ii. EntertheIPaddressoftheSNTPserveryouwanttheswitchto
usefortimesynchronization.
Note:ThisstepreplacesanypreviouslyconfiguredserverIP
address.Ifyou
willbeusingbackupSNTPservers(requiresuseoftheCLI),then
see
SNTPUnicastTimePollingwithMultipleSNTPServersonpage
9-21.
iii. Press[v]tomovethecursortotheServerVersionfield.Enterthe
valuethatmatchestheSNTPserverversionrunningonthedevice
youspecifiedintheprecedingstep(stepii).Ifyouareunsure
whichversiontouse,ProCurverecommendsleavingthisvalue
atthedefaultsettingof3andtestingSNTPoperationtodetermine
whetheranychangeisnecessary.
Note:UsingthemenutoentertheIPaddressforanSNTPserver
whentheswitchalreadyhasoneormoreSNTPserversconfig-
uredcausestheswitchtodeletetheprimarySNTPserverfrom
theserverlistandtoselectanewprimarySNTPserverfromthe
IPaddress(es)intheupdatedlist.Formoreonthistopic,see
SNTPUnicastTimePollingwithMultipleSNTPServersonpage
9-21.
iv. Press[>]tomovethecursortothePollIntervalfield,thengotostep
6.
6. InthePollIntervalfield,enterthetimeinsecondsthatyouwantforaPoll
Interval.(ForPollIntervaloperation,seetable9-1,SNTPParameters,
onpage9-5.)
7. Press[Enter]toreturntotheActionsline,then[S](forSave)toenterthe
newtimeprotocolconfigurationinboththestartup-configandrunning-
configfiles.
9-7
TimeProtocols
CLI:ViewingandConfiguringSNTP
CLICommandsDescribedinthisSection
showsntp page9-8
[no]timesync pages9-9andff.,9-12
sntpbroadcast page9-9
sntpunicast page9-10
sntpserver pages9-10andff.
ProtocolVersion page9-12
poll-interval page9-12
nosntp page9-13
ThissectiondescribeshowtousetheCLItoview,enable,andconfigureSNTP
parameters.
ViewingtheCurrentSNTPConfiguration
Thiscommandlistsboththetimesynchronizationmethod(TimeP,SNTP,or
None)andtheSNTPconfiguration,evenifSNTPisnottheselectedtime
protocol.
Syntax: showsntp
Forexample,ifyouconfiguredtheswitchwithSNTPasthetimesynchroni-
zationmethod,thenenabledSNTPinbroadcastmodewiththedefaultpoll
interval,showsntpliststhefollowing:
Figure9-2.ExampleofSNTPConfigurationWhenSNTPIstheSelectedTime
SynchronizationMethod
Inthefactory-defaultconfiguration(whereTimePistheselectedtime
synchronizationmethod),showsntpstillliststheSNTPconfigurationeven
thoughitisnotcurrentlyinuse.Forexample:
9-8
TimeProtocols
Eventhough,inthisexample,TimePisthe
currenttimesynchronousmethod,the
switchmaintainstheSNTPconfiguration.
Figure9-3. ExampleofSNTPConfigurationWhenSNTPIsNottheSelectedTimeSynchronizationMethod
Configuring(EnablingorDisabling)theSNTPMode
EnablingtheSNTPmodemeanstoconfigureitforeitherbroadcastorunicast
mode.RememberthattorunSNTPastheswitchstimesynchronization
protocol,youmustalsoselectSNTPasthetimesynchronizationmethodby
usingtheCLItimesynccommand(ortheMenuinterfaceTimeSyncMethod
parameter).
Syntax: timesyncsntp
SelectsSNTPasthetimeprotocol.
sntp<broadcast|unicast>
EnablestheSNTPmode(belowandpage9-10).
sntpserver<ip-addr>
Requiredonlyforunicastmode(page9-10).
sntppoll-interval <30..720>
EnablingtheSNTPmodealsoenablestheSNTPpollinterval
(default:720seconds;page9-12).
EnablingSNTPinBroadcastMode.BecausetheswitchprovidesanSNTP
pollinginterval(default:720seconds),youneedonlythesetwocommands
forminimalSNTPbroadcastconfiguration:
SelectsSNTPasthetimesynchronizationmethod.
sntpbroadcast
ConfiguresBroadcastastheSNTPmode.
Forexample,suppose:
Timesynchronizationisinthefactory-defaultconfiguration(TimeP
isthecurrentlyselectedtimesynchronizationmethod).
Youwantto:
1. Viewthecurrenttimesynchronization.
9-9
TimeProtocols
2. SelectSNTPasthetimesynchronizationmode.
3. EnableSNTPforBroadcastmode.
4. ViewtheSNTPconfigurationagaintoverifytheconfiguration.
Thecommandsandoutputwouldappearasfollows:
showsntpdisplaystheSNTPconfigurationandalsoshowsthat
TimePisthecurrentlyactivetimesynchronizationmode.
1
2
3
showsntpagaindisplaystheSNTPconfigurationandshowsthat
SNTPisnowthecurrentlyactivetimesynchronizationmodeandis
configuredforbroadcastoperation.
4
4
Figure9-4. ExampleofEnablingSNTPOperationinBroadcastMode
EnablingSNTPinUnicastMode.Likebroadcastmode,configuringSNTP
forunicastmodeenablesSNTP.However,forUnicastoperation,youmust
alsospecifytheIPaddressofatleastoneSNTPserver.Theswitchallowsup
tothreeunicastservers.YoucanusetheMenuinterfaceortheCLItoconfigure
oneserverortoreplaceanexistingUnicastserverwithanother.Toadda
secondorthirdserver,youmustusetheCLI.FormoreonSNTPoperation
withmultipleservers,seeSNTPUnicastTimePollingwithMultipleSNTP
Serversonpage9-21.
SelectsSNTPasthetimesynchronizationmethod.
sntpunicast
ConfigurestheSNTPmodeforUnicastoperation.
sntpserver<ip-addr>[version]
SpecifiestheSNTPserver.Thedefaultserverversionis3.
nosntpserver<ip-addr>
DeletesthespecifiedSNTPserver.
9-10
TimeProtocols
Not e DeletinganSNTPserverwhenonlyoneisconfigureddisablesSNTPunicast
operation.
Forexample,toselectSNTPandconfigureitwithunicastmodeandanSNTP
serverat10.28.227.141withthedefaultserverversion(3)anddefaultpoll
interval(720seconds):
ProCurve(config)#timesyncsntp
SelectsSNTP.
ProCurve(config)#sntpunicast
ActivatesSNTPinUnicastmode.
ProCurve(config)#sntpserver10.28.227.141
SpecifiestheSNTPserverandacceptsthecurrentSNTPserver
version(default:3).
.
Inthisexample,thePollIntervalandtheProtocol
Versionappearattheirdefaultsettings.
Note:ProtocolVersionappearsonlywhenthereisan
IPaddressconfiguredforanSNTPserver.
Figure9-5. ExampleofConfiguringSNTPforUnicastOperation
IftheSNTPserveryouspecifyusesSNTPversion4orlater,usethesntpserver
commandtospecifythecorrectversionnumber.Forexample,supposeyou
learnedthatSNTPversion4wasinuseontheserveryouspecifiedabove(IP
address10.28.227.141).Youwouldusethefollowingcommandstodeletethe
serverIPaddressandthenre-enteritwiththecorrectversionnumberforthat
server:
9-11
TimeProtocols
DeletesunicastSNTPserverentry.
Re-enterstheunicastserverwithanon-
defaultprotocolversion.
showsntpdisplaystheresult.
Figure9-6. ExampleofSpecifyingtheSNTPProtocolVersionNumber
ChangingtheSNTPPollInterval.
Syntax: sntppoll-interval<30..720>
Specifieshowlongtheswitchwaitsbetweentimepolling
intervals.Thedefaultis720secondsandtherangeis30to
720seconds.(Thisparameterisseparatefromthepoll
intervalparameterusedforTimepoperation.)
Forexample,tochangethepollintervalto300seconds:
ProCurve(config)#sntppoll-interval300
DisablingTimeSynchronizationWithoutChangingtheSNTP
Configuration.Therecommendedmethodfordisablingtimesynchroniza-
tionistousethetimesynccommandtoavoidchangingtheswitchsSNTP
configuration.
Syntax: notimesync
Haltstimesynchronizationwithoutchangingtheswitchs
SNTPconfiguration
Forexample,supposeSNTPisrunningastheswitchstimesynchronization
protocol,withBroadcastastheSNTPmodeandthefactory-defaultpolling
interval.Youwouldhalttimesynchronizationwiththiscommand:
ProCurve(config)#notimesync
IfyouthenviewedtheSNTPconfiguration,youwouldseethefollowing:
9-12
TimeProtocols
Figure9-7.ExampleofSNTPwithTimeSychronizationDisabled
DisablingtheSNTPMode.IfyouwanttopreventSNTPfrombeingused
evenifselectedbytimesync(ortheMenuinterfacesTimeSyncMethodparam-
eter),configuretheSNTPmodeasdisabled.
Syntax: nosntp
DisablesSNTPbychangingtheSNTPmode
configurationtoDisabled.
Forexample,iftheswitchisrunningSNTPinUnicastmodewithanSNTP
serverat10.28.227.141andaserverversionof3(thedefault),nosntpchanges
theSNTPconfigurationasshownbelow,anddisablestimesynchronization
ontheswitch.
EventhoughtheTimeSyncModeissettoSntp,
timesynchronizationisdisabledbecauseno
sntphasdisabledtheSNTPModeparameter.
Figure9-8. ExampleofDisablingTimeSynchronizationbyDisablingtheSNTPMode
9-13
TimeProtocols
TimeP:Viewing,Selecting,andConfiguring
TimeP:Viewing,Selecting,and
Configuring
TimePFeature Default Menu CLI Web
viewtheTimeptimesynchronization
configuration
n/a page9-15 page9-17
selectTimepasthetimesynchronization TIMEP page9-13 pages9-18
method ff.
disabletimesynchronization timep page9-15 page9-20
enabletheTimepmode Disabled
DHCP page9-15 page9-18
manual page9-16 page9-19
none/disabled page9-15 page9-21
changetheSNTPpollinterval 720seconds page9-16 page9-20
Table9-2.TimepParameters
SNTPParameter Operation
TimeSync UsedtoselecteitherTIMEP(thedefault),SNTP,orNoneasthetimesynchronizationmethod.
Method
TimepMode
Disabled TheDefault.Timepdoesnotoperate,evenifspecifiedbytheMenuinterfaceTimeSyncMethod
parameterortheCLItimesynccommand.
DHCP WhenTimepisselectedasthetimesynchronizationmethod,theswitchattemptstoacquireaTimep
serverIPaddressviaDHCP.Iftheswitchreceivesaserveraddress,itpollstheserverforupdates
accordingtotheTimeppollinterval.IftheswitchdoesnotreceiveaTimepserverIPaddress,itcannot
performtimesynchronizationupdates.
Manual WhenTimepisselectedasthetimesynchronizationmethod,theswitchattemptstopollthespecified
serverforupdatesaccordingtotheTimeppollinterval.Iftheswitchfailstoreceiveupdatesfromthe
server,timesynchronizationupdatesdonotoccur.
Server UsedonlywhentheTimePModeissettoManual.SpecifiestheIPaddressoftheTimePserverthat
Address theswitchaccessesfortimesynchronizationupdates.Youcanconfigureoneserver.
PollInterval Default:720minutes.SpecifiestheintervaltheswitchwaitsbetweenattemptstopolltheTimePserver
(minutes)
forupdates.
9-14
TimeProtocols
Menu:ViewingandConfiguringTimeP
ToView,Enable,andModifytheTimePProtocol:
1.SystemInformation
TimeProtocolSelectionParameter
TIMEP(thedefault)
SNTP
None
Figure9-9. TheSystemInformationScreen(DefaultValues)
3. Use[v]tomovethecursortotheTimeSyncMethodfield.
4. IfTIMEP isnotalreadyselected,usetheSpacebartoselectTIMEP,then
press[v]oncetodisplayandmovetotheTimePModefield.
UsetheSpacebartoselecttheDHCPmode,thenpress[v]tomove
thecursortothePollInterval field,andgotostep6.
9-15
TimeProtocols
UsetheSpacebartoselecttheManualmode.
i. Press[>]tomovethecursortotheServerAddressfield.
ii. EntertheIPaddressoftheTimePserveryouwanttheswitchto
usefortimesynchronization.
Note:ThisstepreplacesanypreviouslyconfiguredTimePserver
IPaddress.
iii. Press[>]tomovethecursortothePollIntervalfield,thengotostep
6.
6. InthePollIntervalfield,enterthetimeinminutesthatyouwantforaTimeP
PollInterval.
Press[Enter]toreturntotheActionsline,then[S](forSave)toenterthenew
timeprotocolconfigurationinboththestartup-configandrunning-config
files.
CLI:ViewingandConfiguringTimeP
CLICommandsDescribedinthisSection
showtimep page9-17
[no]timesync page9-18ff.,9-20
iptimep
dhcp page9-18
manual page9-19
server<ip-addr> page9-19
interval page9-20
noiptimep page9-21
9-16
TimeProtocols
ThissectiondescribeshowtousetheCLItoview,enable,andconfigureTimeP
parameters.
ViewingtheCurrentTimePConfiguration
Thiscommandlistsboththetimesynchronizationmethod(TimeP,SNTP,or
None)andtheTimePconfiguration,evenifSNTPisnottheselectedtime
protocol.
Syntax: showtimep
Forexample,ifyouconfiguretheswitchwithTimePasthetimesynchroniza-
tionmethod,thenenableTimePinDHCPmodewiththedefaultpollinterval,
showtimepliststhefollowing:
Figure9-10. ExampleofTimePConfigurationWhenTimePIstheSelectedTime
SynchronizationMethod
IfSNTPistheselectedtimesynchronizationmethod),showtimepstillliststhe
TimePconfigurationeventhoughitisnotcurrentlyinuse:
Eventhough,inthisexample,SNTPisthe
currenttimesynchronizationmethod, the
switchmaintainstheTimeP
configuration.
Figure9-11. ExampleofSNTPConfigurationWhenSNTPIsNottheSelectedTimeSynchronization
Method
9-17
TimeProtocols
Configuring(EnablingorDisabling)theTimePMode
EnablingtheTimePmodemeanstoconfigureitforeitherbroadcastorunicast
mode.RememberthattorunTimePastheswitchstimesynchronization
protocol,youmustalsoselectTimePasthetimesynchronizationmethodby
usingtheCLItimesynccommand(ortheMenuinterfaceTimeSyncMethod
parameter).
Syntax: timesynctimep
SelectsTimePasthetimeprotocol.
iptimep<dhcp|manual>
EnablestheselectedTimePmode.
noiptimep
DisablestheTimePmode.
notimesync
Disablesthetimeprotocol.
EnablingTimePinDHCPMode.BecausetheswitchprovidesaTimeP
pollinginterval(default:720minutes),youneedonlythesetwocommandsfor
aminimalTimePDHCPconfiguration:
SelectsTimePasthetimesynchronizationmethod.
iptimepdhcp
ConfiguresDHCPastheTimePmode.
Forexample,suppose:
TimesynchronizationisconfiguredforSNTP.
Youwantto:
1. Viewthecurrenttimesynchronization.
2. SelectTimePasthetimesynchronizationmode.
3. EnableTimePforDHCPmode.
4. ViewtheTimePconfiguration.
9-18
TimeProtocols
Thecommandsandoutputwouldappearasfollows:
1
2
3
4
showtimepdisplaystheTimePconfigurationandalsoshows
thatSNTPisthecurrentlyactivetimesynchronizationmode.
showtimepagaindisplaystheTimePconfigurationandshowsthatTimePis
nowthecurrentlyactivetimesynchronizationmode.
Figure9-12. ExampleofEnablingTimePOperationinDHCPMode
EnablingTimepinManualMode.LikeDHCPmode,configuringTimePfor
ManualmodeenablesTimeP.However,formanualoperation,youmustalso
specifytheIPaddressoftheTimePserver.(TheswitchallowsonlyoneTimeP
server.)ToenabletheTimePprotocol:
SelectsTimep.
iptimepmanual<ip-addr>
ActivatesTimePinManualmodewithaspecifiedTimeP
server.
noiptimep
DisablesTimeP.
Not e TochangefromoneTimePservertoanother,youmust(1)usethenoiptimep
commandtodisableTimePmode,andthenreconfigureTimePinManual
modewiththenewserverIPaddress.
Forexample,toselectTimePandconfigureitformanualoperationusinga
TimePserveraddressof10.28.227.141andthedefaultpollinterval(720
minutes,assumingtheTimePpollintervalisalreadysettothedefault):
ProCurve(config)#timesynctimep
SelectsTimeP.
ProCurve(config)#iptimepmanual10.28.227.141
ActivatesTimePinManualmode.
9-19
TimeProtocols
Figure9-13. ExampleofConfiguringTimepforManualOperation
ChangingtheTimePPollInterval.Thiscommandletsyouspecifyhow
longtheswitchwaitsbetweentimepollingintervals.Thedefaultis720
minutesandtherangeis1to9999minutes.(Thisparameterisseparatefrom
thepollintervalparameterusedforSNTPoperation.)
Syntax: iptimepdhcpinterval<1..9999>
iptimepmanualinterval<1..9999>
Forexample,tochangethepollintervalto60minutes:
ProCurve(config)#iptimepinterval60
DisablingTimeSynchronizationWithoutChangingtheTimeP
Configuration.Therecommendedmethodfordisablingtimesynchroniza-
tionistousethetimesynccommand.Thishaltstimesynchronizationwithout
changingyourTimePconfiguration.
Syntax: notimesync
Forexample,supposeTimePisrunningastheswitchstimesynchronization
protocol,withDHCPastheTimePmode,andthefactory-defaultpolling
interval.Youwouldhalttimesynchronizationwiththiscommand:
ProCurve(config)#notimesync
IfyouthenviewedtheTimePconfiguration,youwouldseethefollowing:
Figure9-14.ExampleofTimePwithTimeSychronizationDisabled
9-20
TimeProtocols
SNTPUnicastTimePollingwithMultipleSNTPServers
DisablingtheTimePMode.DisablingtheTimePmodemeanstoconfigure
itasdisabled.(DisablingTimePpreventstheswitchfromusingitasthetime
synchronizationprotocol,evenifitistheselectedTimeSyncMethodoption.)
Syntax: noiptimep
DisablesTimePbychangingtheTimePmode
configurationtoDisabled.
Forexample,iftheswitchisrunningTimePinDHCPmode,noiptimepchanges
theTimePconfigurationasshownbelow,anddisablestimesynchronization
ontheswitch.
EventhoughtheTimeSyncModeissettoTimep,
timesynchronizationisdisabledbecausenoip
timephasdisabledtheTimePModeparameter.
Figure9-15.ExampleofDisablingTimeSynchronizationbyDisablingtheTimeP
ModeParameter
SNTPUnicastTimePollingwithMultiple
SNTPServers
WhenrunningSNTPunicasttimepollingasthetimesynchronizationmethod,
theswitchrequestsatimeupdatefromtheserveryouconfiguredwitheither
theServerAddressparameterinthemenuinterface,ortheprimaryserverin
alistofuptothreeSNTPserversconfiguredusingtheCLI.Iftheswitchdoes
notreceivearesponsefromtheprimaryserverafterthreeconsecutivepolling
intervals,theswitchtriesthenextserver(ifany)inthelist.Iftheswitchtries
allserversinthelistwithoutsuccess,itsendsanerrormessagetotheEvent
LogandreschedulestotrytheaddresslistagainaftertheconfiguredPollInterval
timehasexpired.
AddressPrioritization
IfyouusetheCLItoconfiguremultipleSNTPservers,theswitchprioritizes
themaccordingtothedecimalvaluesoftheirIPaddresses.Thatis,theswitch
comparesthedecimalvalueoftheoctetsintheaddressesandordersthem
9-21
TimeProtocols
SNTPUnicastTimePollingwithMultipleSNTPServers
accordingly,withthelowestdecimalvalueassignedastheprimaryaddress,
thesecond-lowestdecimalvalueassignedasthenextaddress,andthethird-
lowestdecimalvalueasthelastaddress.Ifthefirstoctetisthesamebetween
twooftheaddresses,thesecondoctetiscompared,andsoon.Forexample:
SNTPServer
IPAddress
ServerRankingAccordingto
DecimalValueofIPAddress
10.28.227.141 Primary
10.28.227.153 Secondary
10.29.227.100 Tertiary
AddingandDeletingSNTPServerAddresses
AddingAddresses.Asmentionedearlier,youcanconfigureoneSNTP
serveraddressusingeithertheMenuinterfaceortheCLI.Toconfigurea
secondandthirdaddress,youmustusetheCLI.Forexample,supposeyou
havealreadyconfiguredtheprimaryaddressintheabovetable
(10.28.227.141).Toconfiguretheremainingtwoaddresses,youwoulddothe
following:
PrioritizedlistofSNTP
ServerIPAddresses
Figure9-16. ExampleofSNTPServerAddressPrioritization
Not e IftherearealreadythreeSNTPserveraddressesconfiguredontheswitch,
andyouwanttousetheCLItoreplaceoneoftheexistingaddresseswitha
newone,youmustdeletetheunwantedaddressbeforeyouconfigurethenew
one.
9-22
TimeProtocols
SNTPMessagesintheEventLog
DeletingAddresses.Todeleteanaddress,youmustusetheCLI.Ifthereare
multipleaddressesandyoudeleteoneofthem,theswitchre-ordersthe
addresspriority.(SeeAddressPrioritizationonpage9-21.)
Syntax: nosntpserver<ip-addr>
Forexample,todeletetheprimaryaddressintheaboveexample(and
automaticallyconvertthesecondaryaddresstoprimary):
ProCurve(config)#nosntpserver10.28.227.141
Configured
WhenyouusetheMenuinterfacetoconfigureanSNTPserverIPaddress,the
newaddresswritesoverthecurrentprimaryaddress,ifoneisconfigured.If
therearemultipleaddressesconfigured,theswitchre-orderstheaddresses
accordingtothecriteriadescribedunderAddressPrioritizationonpage9-
21.Forexample,supposetheswitchalreadyhasthefollowingthreeSNTP
serverIPaddressesconfigured.
10.28.227.141(primary)
10.28.227.153(secondary)
10.29.227.100(tertiary)
IfyouusetheMenuinterfacetoadd10.28.227.160, thenewprioritizedlistwill
be:
NewAddressList AddressStatus
10.28.227.153 NewPrimary(Theformerprimary,10.28.227.141wasdeletedwhen
youusedthemenutoadd10.28.227.160.)
10.28.227.160 NewSecondary
10.29.227.100 SameTertiary (Thisaddressstillhasthehighestdecimalvalue.)
IfanSNTPtimechangeofmorethanthreesecondsoccurs,theswitchsevent
logrecordsthechange.SNTPtimechangesoflessthanthreesecondsdonot
appearintheEventLog.
9-23
TimeProtocols
9-24
10
PortStatusandBasicConfiguration
Contents
Overview ..................................................... 10-3
ViewingPortStatusandConfiguringPortParameters ............... 10-3
Menu:ViewingPortStatusandConfiguringPortParameters ..... 10-6
CLI:ViewingPortStatusandConfiguringPortParameters ....... 10-8
UsingtheCLIToViewPortStatus ........................ 10-8
DisplayingSpanningTreeConfigurationDetails ............ 10-10
DisplayingLoopProtectionStatus ....................... 10-10
UsingtheCLIToConfigurePorts ........................ 10-11
UsingtheCLIToConfigureaBroadcastLimit.............. 10-12
ConfiguringAuto-MDIX................................. 10-13
ManualAuto-MDIXOverride ............................ 10-14
ViewingTransceiverStatus ............................. 10-16
Web:ViewingPortStatusandConfiguringPortParameters ..... 10-18
JumboFrames................................................ 10-18
Terminology .............................................. 10-19
OperatingRules ........................................... 10-19
ConfiguringJumboFrameOperation ......................... 10-20
Overview ............................................. 10-20
ViewingtheCurrentJumboConfiguration ................. 10-21
EnablingorDisablingJumboTrafficonaVLAN ............ 10-23
OperatingNotesforJumboTraffic-Handling .................. 10-23
Troubleshooting .......................................... 10-25
QoSPassthroughMode ........................................ 10-26
GeneralOperation..................................... 10-26
PriorityMappingWithandWithoutQoSPassthroughMode .. 10-27
HowtoEnableorDisableQoSPassthroughMode .......... 10-27
ConfiguringPort-BasedPriorityforIncomingPackets.............. 10-29
10-1
Contents
TheRoleof802.1QVLANTagging ........................... 10-29
OutboundPortQueuesandPacketPrioritySettings ............ 10-30
OperatingRulesforPort-BasedPriority ...................... 10-31
ConfiguringandViewingPort-BasedPriority .................. 10-32
MessagesRelatedtoPrioritization........................... 10-33
TroubleshootingPrioritization .............................. 10-33
UsingFriendly(Optional)PortNames ........................... 10-34
ConfiguringandOperatingRulesforFriendlyPortNames....... 10-34
ConfiguringFriendlyPortNames ............................ 10-35
DisplayingFriendlyPortNameswithOtherPortData .......... 10-36
ConfiguringTransceiversandModulesThatHavent
BeenInserted ............................................. 10-39
Uni-DirectionalLink Detection(UDLD).......................... 10-40
ConfiguringUDLD......................................... 10-41
EnablingUDLD........................................ 10-42
ChangingtheKeepaliveInterval ......................... 10-43
ChangingtheKeepaliveRetries .......................... 10-43
ConfiguringUDLDforTaggedPorts ...................... 10-43
ViewingUDLDInformation ................................. 10-44
ConfigurationWarningsandEventLogMessages .............. 10-47
10-2
Overview
Overview
NoteOnConnecting
Transceiversto
Fixed-Configuration
Devices
Thischapterdescribeshowtoviewthecurrentportconfigurationandhow
toconfigureportstonon-defaultsettings,including
Enable/Disable
Mode(speedandduplex)
FlowControl
BroadcastLimit
Auto-MDIX
JumboPackets
QoSPass-ThroughMode
UsingFriendly(Optional)PortNames
ViewingPortStatusandConfiguringPort
Parameters
PortStatusandConfigurationFeatures
viewingportstatus n/a page10-6 page10-8 page10-18
configuringports SeeTable10-1 page10-7 page10-11 page10-18
onpages10-4
and10-5.
Iftheswitcheitherfailstoshowalinkbetweenaninstalledtransceiverand
anotherdevice,ordemonstrateserrorsorotherunexpectedbehavioronthe
link,checktheportconfigurationonbothdevicesforaspeedand/orduplex
(mode)mismatch.Tocheckthemodesettingforaportontheswitch,use
eitherthePortStatusscreeninthemenuinterface(page10-6)orshow
interfacesbriefintheCLI(page10-8).
10-3
ViewingPortStatusandConfiguringPortParameters
Table10-1. StatusandParametersforEachPortType
Statusor
Parameter
Description
Enabled Yes(default):Theportisreadyforanetworkconnection.
No:Theportwillnotoperate,evenifproperlyconnectedinanetwork.Usethissetting,forexample,ifthe
portneedstobeshutdownfordiagnosticpurposesorwhileyouaremakingtopologychanges.
Status
(read-only)
Up:Theportsensesalinkbeat.
Down:Theportisnotenabled,hasnocablesconnected,orisexperiencinganetworkerror.For
troubleshootinginformation,seetheinstallationmanualyoureceivedwiththeswitch.Seealsochapter11,
Troubleshooting(inthismanual).
Mode Theportsspeedandduplex(datatransferoperation)setting.
10/100Base-Tports:
Auto(default):Sensesspeedandnegotiateswiththeportattheotherendofthelinkfordatatransfer
operation(half-duplexorfull-duplex).
Note:Ensurethatthedeviceattachedtotheportisconfiguredforthesamesettingthatyouselect
here.IfAutoisused,thedevicetowhichtheportconnectsmustoperateincompliancewiththe
IEEE802.3uAutoNegotiationstandardfor100Base-Tnetworks.Iftheotherdevicedoesnotcomply
withthe802.3ustandard,orisnotsettoAuto,thentheportconfigurationontheswitchmustbe
manuallysettomatchtheportconfigurationontheotherdevice.
ToseewhattheswitchnegotiatesfortheAutosetting,usetheCLIshowinterfacescommandorthe
3.PortStatusoptionunder1.StatusandCountersinthemenuinterface.
Auto-10:Allowstheporttonegotiatebetweenhalf-duplex(HDx)andfull-duplex(FDx)whilekeeping
speedat10Mbps.Alsonegotiatesflowcontrol(enabledordisabled).ProCurverecommendsAuto-10
forlinksbetween10/100autosensingportsconnectedwithCat3cabling.(Cat5cablingisrequiredfor
100Mbpslinks.).
10HDx:10Mbps,Half-Duplex
10FDx:10Mbps,Full-Duplex
100FXports:
100FDx(default):100Mbps,Full-Duplex
10-4
Statusor
Parameter
Description
Mode 10/100/1000Base-T:
(Continued)
Auto-10:Allowstheporttonegotiatebetweenhalf-duplex(HDx)andfull-duplex(FDx)whilekeeping
speedat10Mbps.Alsonegotiatesflowcontrol(enabledordisabled).ProCurverecommendsAuto-10
forlinksbetween10/100autosensingportsconnectedwithCat3cabling.(Cat5cablingisrequiredfor
100Mbpslinks.).
Auto(default):Sensesspeedandnegotiateswiththeportattheotherendofthelinkforportoperation
(MDI-XorMDI).ToseewhattheswitchnegotiatesfortheAutosetting,usetheCLIshowinterfaces
briefcommandorthe3.PortStatusoptionunder1.StatusandCountersinthemenuinterface.
Auto-100:Uses100Mbpsandnegotiateswiththeportattheotherendofthelinkforotherportoperation
features.
Auto-1000:Uses1000Mbpsandnegotiateswiththeportattheotherendofthelinkforotherport
operationfeatures.
100Hdx:Uses100Mbps,half-duplex.
100Fdx:Uses100Mbps,Full-Duplex
PortModeNotes:Ensurethatthedeviceattachedtotheportisconfiguredforthesamesettingthatyou
selecthere.IfusingAuto,thedevicetowhichtheportconnectsmustalsobeusingAutoandoperate
incompliancewiththeIEEE802.3abAutoNegotiationstandardfor1000Base-Tnetworks.
Gigabitfiber-opticports(Gigabit-SX,Gigabit-LX,andGigabit-LH):
1000FDx:1000Mbps(1Gbps),FullDuplexonly
Auto(default):Theportoperatesat1000FDxandauto-negotiatesflowcontrolwiththedeviceconnected
totheport.
Auto-MDIX TheswitchsupportsAuto-MDIXon10Mb,100Mb,and1GbT/TX(copper)ports.(Fiberportsand10-gigabit
portsdonotusethisfeature.)
Auto-MDIX:Configurestheportforautomaticdetectionofthecabletype(straight-throughor
crossover).
MDI:ConfigurestheportforconnectingtoaPCorotherMDIdevicewithacrossovercable.
MDIX:Configurestheportforconnectingtoaswitch,hub,orotherMDI-Xdevicewithastraight-through
cable.
FlowControl Disabled(default):Theportdoesnotgenerateflowcontrolpackets,anddropsanyflowcontrolpackets
itreceives.
Enabled:Theportuses802.3xLinkLayerFlowControl,generatesflowcontrolpackets,andprocesses
receivedflowcontrolpackets.
WiththeportmodesettoAuto(thedefault)andFlowControlenabled,theswitchnegotiatesFlowControl
ontheindicatedport.IftheportmodeisnotsettoAuto,orifFlowControlisdisabledontheport,thenFlow
Controlisnotused.
10-5
Statusor
Parameter
Description
Group MenuInterface:Specifiesthestatictrunkgroup,ifany,towhichaportbelongs.
(menu)
or
CLI:AppearsintheshowlacpcommandoutputtoshowtheLACPtrunk,ifany,towhichaportbelongs.
TrunkGroup
Note:AnLACPtrunkrequiresafull-duplexlink.Inmostcases,ProCurverecommendsthatyouleave
(CLI)
theportModesettingatAuto(thedefault).RefertoTrunkGroupOperationUsingLACPonpage12-15.
Formoreonporttrunking,seeChapter12,PortTrunking.
Type ThisparameterappearsintheCLIshowtrunklistingand,foraportinatrunkgroup,specifiesthetypeof
trunkgroup.ThedefaultTypeispassiveLACP,whichcanbedisplayedbyusingtheCLIshowlacpcommand.
Formoreonporttrunking,seePortTrunkingonpageChapter12,PortTrunking.
Broadcast
Limit
Specifiesthepercentageofthetheoreticalmaximumnetworkbandwidththatcanbeusedforbroadcast
andmulticasttraffic.Anybroadcastormulticasttrafficexceedingthatlimitwillbedropped.Zero(0)means
thefeatureisdisabled.
Menu:ViewingPortStatusandConfiguringPort
Parameters
Fromthemenuinterface,youcanconfigureandviewallportparameter
settingsandviewallportstatusindicators.
UsingtheMenuToViewPortStatus. Themenuinterfacedisplaysthe
statusforportsand(if configured)atrunkgroup.
FromtheMainMenu,select:
StatusandCounters...
PortStatus
10-6

Inthisexample,
portsA7andA8
havepreviously
beenconfigured
asatrunkgroup.
Pr oCur ve Swi t ch 11- Sept - 2007 8: 46: 35
==========================- CONSOLE - MANAGER MODE - ============================
St at us and Count er s - Por t St at us
I nt r usi on MDI Fl ow Bcast
Por t Type Al er t Enabl ed St at us Mode Mode Ct r l Li mi t
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 10/ 100TX No Yes Up 10FDx MDI of f 0
2 10/ 100TX No Yes Up 10FDx MDI of f 10
3 10/ 100TX No Yes Down 10FDx MDI of f 0
6 10/ 100TX No Yes Down 10FDx MDI X of f 0
10 10/ 100TX No Yes Down 10FDx MDI X of f 0
Act i ons- > Back I nt r usi on l og Hel p
Ret ur n t o pr evi ous scr een.
Use up/ down ar r ow keys t o scr ol l t o ot her ent r i es, l ef t / r i ght ar r ow keys t o
change act i on sel ect i on, and <Ent er > t o execut e act i on.
Figure10-1.ExampleofthePortStatusScreen
UsingtheMenuToConfigurePorts.
Not e Themenuinterfaceusesthesamescreenforconfiguringbothindividualports
andporttrunkgroups.Forinformationonporttrunkgroups,seeChapter12,
PortTrunking.
1. FromtheMainMenu,Select:
2.Port/TrunkSettings
10-7
Figure10-2.ExampleofPort/TrunkSettingswithaTrunkGroupConfigured
2. Press[E](forEdit).ThecursormovestotheEnabledfieldforthefirstport.
3. Refertotheonlinehelpprovidedwiththisscreenforfurtherinformation
[Enter],thenpress[S](forSave).
CLI:ViewingPortStatusandConfiguringPort
Parameters
PortStatusandConfigurationCommands
showinterfacesbrief below
showinterfacesconfig page10-9
interface page10-11
showspanningtree page10-10
showtechtransceivers page10-16
FromtheCLI,youcanconfigureandviewallportparametersettingsandview
allportstatusindicators.
UsingtheCLIToViewPortStatus
Usethefollowingcommandstodisplayportstatusandconfiguration:
showinterfacesbrief:Liststhefullstatusandconfigurationforallports
ontheswitch.
10-8

showinterfaceconfig:Listsasubsetofthedatashownbytheshow
interfacescommand(above);thatis,onlytheenabled/disabled,mode,and
flowcontrolstatusforallportsontheswitch.
Syntax: showinterfaces[brief|config]
Thesetwocommandsdisplaytheinformationlistedin
table10-2,below.
Table10-2. Comparingthe"ShowInterfacesCommandOptions*
Feature ShowInterfacesBrief ShowInterfacesConfig
PortNumberandType Yes Yes
EnabledY/N Yes Yes
FlowControl Yes Yes
StatusUp/Down Yes No
Mode(Operating) Yes No
IntrusionAlert Yes No
Mode(Configured) Yes Yes
MDIXMode Operating Configured
*Thereisalsotheshowinterfaces[[e]<port-number>]option,whichdisplays
portstatistics.RefertoViewingPortandTrunkGroupStatisticsandFlow
ControlStatusonpageB-10.
Thefigure10-3showsanexampleoftheoutputoftheshowinterfacebrief
command.
Pr oCur ve( conf i g) # show i nt er f aces br i ef
St at us and Count er s - Por t St at us CurrentOperatingMode
| I nt r usi on MDI Fl ow Bcast
Por t Type | Al er t Enabl ed St at us Mode Mode Ct r l Li mi t
- - - - - - - - - - - - - - + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 10/ 100TX | No Yes Up 10FDx MDI of f 0
2 10/ 100TX | No Yes Down 10FDx MDI of f 0
4 10/ 100TX | No Yes Down 10FDx MDI X of f 0
5 10/ 100TX | No Yes Down 10FDx MDI X of f 0
Figure10-3.ExampleShowInterfaceBriefCommandListing
10-9

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
DisplayingSpanningTreeConfigurationDetails
Toviewdetailedstatisticsonspanningtreeoperationfordifferentports,use
theshowspanning-treecommand.
Syntax: showspanning-tree <port-list> detail
Lists802.1Dand802.1wportoperatingstatisticsforallports,
orthosespecified.
Youcanalsousethiscommandtoviewspanningtreeparametersonastatic
trunk(seepage12-7).Forinformationonhowtoconfigurespanningtree,see
thechapteronSpanning-TreeOperationintheAdvancedTrafficManage-
mentGuide.
DisplayingLoopProtectionStatus
Todisplayinformationaboutportswithloopprotectionenabled,enterthe
showloop-protectcommand.
Syntax:showloop-protect<port-list>
Displaystheloopprotectionstatus.Ifnoportsarespecified,the
informationisdisplayedonlyfortheportsthathaveloopprotec-
tionenabled.
Forexample:
Pr oCur ve( conf i g) # show l oop- pr ot ect 1- 4
St at us and Count er s - Loop Pr ot ect i on I nf or mat i on
Tr ansmi t I nt er val ( sec) : 5
Por t Di sabl e Ti mer ( sec) : 5
Loop Det ect ed Tr ap : Enabl ed
Loop Loop Loop Ti me Rx Por t
Por t Pr ot ect i on Det ect ed Count Si nce Last Loop Act i on St at us
1 Yes No 0 send- di sabl e Up
Figure10-4. ExampleofShowLoop-ProtectDisplay
10-10
UsingtheCLIToConfigurePorts
Youcanconfigureoneormoreofthefollowingportparameters.Fordetails
oneachoption,seeTable10-1onpage10-4.
Syntax: [no]interface<[ethernet]port-list>
disable|enable
speed-duplex
<10-half|100-half|10-full|100-full|1000-full|auto|
auto-10|auto-100|auto-1000>
flow-control
Notethatintheabovesyntaxyoucansubstituteanintforinterfaceandan
eforethernet;thatisinte<port-list>.
Forexample,toconfigureportsC1throughC3andportC6for100Mbpsfull-
duplex,youwouldenterthesecommands:
ProCurve(config)#intec1-c3,c6speed-duplex100-full
Similarly,toconfigureasingleportwiththesettingsintheabovecommand,
youcouldeitherenterthesamecommandwithonlytheoneportidentified,
orgotothecontextlevelforthatportandthenenterthecommand.For
example,toenterthecontextlevelforportC6andthenconfigurethatport
for100FDx:
ProCurve(config)#intec6
ProCurve(eth-C6)#speed-duplex100-full
IfportC8wasdisabled,andyouwantedtoenableitandconfigureitfor
100FDxwithflow-controlactive,youcoulddosowitheitherofthefollowing
commandsets.
ThesecommandsenableandconfigureportC8fromtheconfiglevel:
ProCurve(config)#intec8enable
ProCurve(config)#intec8speed-duplex100-full
ProCurve(config)#intec8flow-control
ThesecommandsselectthecontextlevelforportC8andthenapplyall
oftheconfigurationcommandstoportC8:
ProCurve(config)#intec8
ProCurve(eth-C8)#enable
ProCurve(eth-C8)#speed-duplex100-full
ProCurve(eth-C8)#flow-control
10-11
UsingtheCLIToConfigureaBroadcastLimit
Theswitchescoveredinthisguideuseasinglebroadcast-limitsettingforall
portsontheswitch.Thiscommandoperatesattheglobalconfigurationlevel
toconfigureoneglobalinstanceofthebroadcastlimitforallportsonthe
switch.Toimplementthecommandyoumustalsoexecutewrite-memoryand
reboottheswitch.
Not e Youmustexecutewritememoryandreboottheswitchtoimplementthenew
broadcast-limitsetting.Eventhoughthebroadcast-limitsettingappearsinthe
showrunningoutputand(afterwritememory)inthestartup-configoutput,the
switchdoesnotimplementthenewsettinguntilrebooted.
Syntax:broadcast-limit<0..99>
Configuresthetheoreticalmaximumbandwidthpercentagethat
canbeusedontheswitchportsforincomingbroadcasts.The
switchdropsanybroadcastormulticasttrafficexceedingthat
limit.Zero(0)disablesthefeature.
Forexample,toconfigureabroadcastlimitof20%forallportsontheswitch:
Pr oCur ve( conf i g) # i nt 5- 6 br oadcast - l i mi t 20
Command wi l l t ake ef f ect af t er savi ng conf i gur at i on and r eboot
Pr oCur ve( conf i g) # wr i t e memor y
Pr oCur ve( conf i g) # boot
Figure10-5.ExampleofConfiguringaGlobalBroadcastLimit
Todisplaythecurrentbroadcastlimitsetting,useeithershowconfigorshow
running:
10-12
Displaysthestartup-config
file.Thebroadcastlimit
settingappearshereif
configuredandsavedto
thestartup-configfilebya
writememorycommand.
Youmustreboottheswitch
toimplementthenew
setting.
Figure10-6.ExampleofDisplayingaBroadcast-LimitSetting
Usingshowrunningdisplaysasimilaroutputfortherunning-configfile.Refer
totheNoteonpage10-12.
ConfiguringAuto-MDIX
Copperportsontheswitchcanautomaticallydetectthetypeofcableconfig-
uration(MDIorMDI-X)onaconnecteddeviceandadjusttooperateappro-
priately.
Thismeansyoucanuseastraight-throughtwisted-paircableoracross-
overtwisted-paircableforanyoftheconnectionstheportmakesthe
necessaryadjustmentstoaccommodateeitheroneforcorrectoperation.The
followingporttypesonyourswitchsupporttheIEEE802.3abstandard,which
includestheAutoMDI/MDI-Xfeature:
10/100-TXports
10/100/1000-Tports
Usingtheaboveports:
Ifyouconnectacopperportusingastraight-throughcabletoaporton
anotherswitchorhubthatusesMDI-Xports,theswitchportautomati-
callyoperatesasanMDIport.
Ifyouconnectacopperportusingastraight-throughcabletoaporton
anendnode,suchasaserverorPC,thatusesMDIports,theswitchport
automaticallyoperatesasanMDI-Xport.
10-13
Auto-MDIXwasdevelopedforauto-negotiatingdevices,andwassharedwith
theIEEEforthedevelopmentoftheIEEE802.3abstandard.Auto-MDIXand
theIEEE802.3abAutoMDI/MID-Xfeaturearecompletelycompatible.Addi-
tionally,Auto-MDIXsupportsoperationinforcedspeedandduplexmodes.
IfyouwantmoreinformationonthissubjectpleaserefertotheIEEE802.3ab
StandardReference.
FormoreinformationonMDI-X,refertotheappendixtitledSwitchPortsand
NetworkCablesintheInstallationandGettingStartedGuideforyour
switch.
ManualAuto-MDIXOverride
IfyourequirecontrolovertheMDI/MDI-Xfeatureyoucansettheswitchto
eitheroftwonon-defaultmodes:
ManualMDI
ManualMDI-X
Table10-1showsthecablingrequirementsfortheMDI/MDI-Xsettings.
Table10-1. CableTypesforAutoandManualMDI/MDI-XSettings
MDI/MDI-XDeviceType
Setting PCorOtherMDIDeviceType Switch,Hub,orOtherMDI-XDevice
ManualMDI CrossoverCable Straight-ThroughCable
ManualMDI-X Straight-ThroughCable CrossoverCable
Auto-MDI-X
(TheDefault)
EitherCrossoverorStraight-ThroughCable
TheAuto-MDIXfeaturesapplyonlytocopperportswitchesusingtwisted-pair
copperEthernetcables.
Syntax: interface<port-list>mdix-mode<automdix|mdi|mdix>
automdixistheautomatic,defaultsetting.Thisconfiguresthe
portforautomaticdetectionofthecable(eitherstraight-through
orcrossover).
mdiisthemanualmodesettingthatconfigurestheportfor
connectingtoeitheraPCorotherMDIdevicewithacrossover
cable,ortoaswitch,hub,orotherMDI-Xdevicewithastraight-
throughcable.
10-14
mdixisthemanualmodesettingthatconfigurestheportfor
connectingtoeitheraswitch,hub,orotherMDI-Xdevicewith
acrossovercable,ortoaPCorotherMDIdevicewithastraight-
throughcable.
Syntax: showinterfacesconfig
Liststhecurrentper-portAuto/MDI/MDI-Xconfiguration.
Syntax: showinterfacesbrief
Whereaportislinkedtoanotherdevice,thiscommandlists
theMDImodetheportiscurrentlyusing.Inthecaseofports
configuredforAuto(auto-mdix),theMDImodeappearsas
eitherMDIorMDIX,dependinguponwhichoptiontheporthas
negotiatedwiththedeviceontheotherendofthelink.Inthe
caseofportsconfiguredforMDIorMDIX,themodelistedin
thisdisplaymatchestheconfiguredsetting.Ifthelinkto
anotherdevicewasup,buthasgonedown,thiscommand
showsthelastoperatingMDImodetheportwasusing.Ifa
portonagivenswitchhasnotdetectedalinktoanotherdevice
sincethelastreboot,thiscommandliststheMDImodeto
whichtheportiscurrentlyconfigured.
Forexample,showinterfacesconfigdisplaysthefollowingdatawhenport1is
configuredforauto-mdix,port2isconfiguredformdi,andport3isconfigured
formdix.
Per-PortMDI
Configuration
Figure10-7.ExampleofDisplayingtheCurrentMDIConfiguration
10-15
Per-PortMDI
OperatingMode
Figure10-8.ExampleofDisplayingtheCurrentMDIOperatingMode
Not e PortResponsetoSwitchSoftwareUpdates
1. Copperportsinauto-negotiationstilldefaulttoauto-mdixmode.
2. Copperportsinforcedspeed/duplexdefaulttomdixmode.
Thedefaultisauto-mdix.Iftheswitchisresettothefactorydefaults,these
portsareconfiguredasauto-mdix.UsethefollowingCLIcommandtochange
thesettingforindividualports:
interface<port-list>mdix-mode<automdix|mdi|mdix>
ViewingTransceiverStatus
Theshowtechtransceiverscommandallowsyouto:
Remotelyidentifytransceivertypeandrevisionnumberwithouthaving
tophysicallyremoveaninstalledtransceiverfromitsslot.
Displayreal-timestatusinformationaboutallinstalledtransceivers,
includingnon-operationaltransceivers.
10-16

Figure10-9showssampleoutputfromtheshowtechtransceiverscommand.
Pr oCur ve# show t ech t r anscei ver s
Tr anscei ver Techni cal I nf or mat i on:
Por t # | Type | Pr od # | Ser i al # | Par t #
- - - - - - - +- - - - - - - - - - - +- - - - - - - - +- - - - - - - - - - - - - - - - - - +- - - - - - - - - -
21 | 1000SX | J 4858B | CN605MP23K |
22 | 1000LX | J 4859C | H117E7X | 2157- 2345
23 | ?? | ?? | non oper at i onal |
25 | 10GbE- CX4 | J 8440A | US509RU079 |
26 | 10GbE- CX4 | J 8440A | US540RU002 |
27 | 10GbE- LR | J 8437B | PPA02- 2904: 0017 | 2157- 2345
28 | 10GbE- SR | J 8436B | 01591602 | 2158- 1000
29 | 10GbE- ER | J 8438A | PPA03- 2905: 0001 |
The f ol l owi ng t r anscei ver s may not f unct i on cor r ect l y:
Por t # Message
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Por t 23 Sel f t est f ai l ur e.
Figure10-9. ExampleofShowTechTransceiversCommand
OperatingNotes:
Thefollowinginformationisdisplayedforeachinstalledtransceiver:
Portnumberonwhichtransceiverisinstalled.
Typeoftransceiver.
ProductnumberIncludesrevisionletter,suchasA,B,orC.Ifno
revisionletterfollowsaproductnumber,thismeansthatnorevision
isavailableforthetransceiver.
PartnumberAllowsyoutodeterminethemanufacturerforaspec-
ifiedtransceiverandrevisionnumber.
Foranon-ProCurveinstalledtransceiver(seeline23Figure10-9),no
transceivertype,productnumber,orpartinformationisdisplayed.Inthe
SerialNumberfield,non-operationalisdisplayedinsteadofaserialnum-
ber.
Thefollowingerrormessagesmaybedisplayedforanon-operational
transceiver:
Unsuppor t ed Tr anscei ver . ( Sel f Test Er r #060)
Check: www. hp. com/ r nd/ devi ce_hel p/ 2_i nf or mf or
mor e i nf o.
10-17
JumboFrames
Thi s swi t ch onl y suppor t s r evi si on B and above
t r anscei ver s. Check: www. hp. com/ r nd/ devi ce_hel p/
2_i nf or mf or mor e i nf o.
Sel f t est f ai l ur e.
Tr anscei ver t ype not suppor t ed i n t hi s por t .
Tr anscei ver t ype not suppor t ed i n t hi s sof t war e
ver si on.
Not a Pr oCur ve Tr anscei ver . Pl ease go t o:
www. hp. com/ r nd/ devi ce_hel p/ 2_i nf or mf or mor e i nf o.
Web:ViewingPortStatusandConfiguringPort
Parameters
Inthewebbrowserinterface:
2. ClickonPortConfiguration.
3. SelecttheportsyouwanttomodifyandclickonModifySelectedPorts.
4. Afteryoumakethedesiredchanges,clickonApplySettings.
Notethatthewebbrowserinterfacedisplaysanexistingporttrunkgroup.
However,toconfigureaporttrunkgroup,youmustusetheCLIorthemenu
interface.Formoreonthistopic,seeChapter12,PortTrunking.
JumboFrames
displayVLANjumbostatus n/a 10-21
configurejumboVLANs Disabled 10-23
TheMaximumTransmissionUnit(MTU)isthemaximumsizeIPframethe
switchcanreceiveforLayer2framesinboundonaport.Theswitchdropsany
inboundframeslargerthantheMTUallowedontheport.Onportsoperating
at10Mbpsor100Mbps,theMTUisfixedat1522bytes.However,ports
operatingat1Gbpsor10Gbpsspeedsacceptforwardframesofupto9220
bytes(includingfourbytesforaVLANtag)whenconfiguredforjumbotraffic.
10-18
JumboFrames
Youcanenableinboundjumboframesonaper-VLANbasis.Thatis,onaVLAN
configuredforjumbotraffic,allportsbelongingtothatVLANandoperating
at1Gbpsor10Gbpsallowinboundjumboframesofupto9220bytes.
(Regardlessofthemodeconfiguredonagivenjumbo-enabledport,iftheport
isoperatingatonly10Mbpsor100Mbps,onlyframesthatdonotexceed1522
bytesareallowedinboundonthatport.)
Terminology
JumboFrame:AnIPframeexceeding1522bytesinsize.Themaximum
Jumboframesizeis9220bytes.(Thissizeincludes4bytesfortheVLAN
tag.)
JumboVLAN:AVLANconfiguredtoallowinboundjumbotraffic.Allports
belongingtoajumboandoperatingat1Gbpsorhighercanreceivejumbo
framesfromexternaldevices.
MTU(MaximumTransmissionUnit):Thisisthemaximum-sizeIPframe
theswitchcanreceiveforLayer2framesinboundonaport.Theswitch
allowsjumboframesofupto9220bytes.
StandardMTU:AnIPframeof1522bytesinsize.(Thissizeincludes4bytes
fortheVLANtag.)
OperatingRules
RequiredPortSpeed:Allowsinboundandoutboundjumboframeson
portsoperatingatspeedsof1gigabitorhigher.Atlowerportspeeds,only
standard(1522-byteorsmaller)framesareallowed,regardlessofthe
jumboconfiguration.
FlowControl:Disableflowcontrol(thedefaultsetting)onanyportsor
trunksthroughwhichyouwanttotransmitorreceivejumboframes.
Leavingflowcontrolenabledonaportcancauseahighrateofjumbo
dropstooccurontheport.
GVRPOperation:AVLANenabledforjumbotrafficcannotbeusedto
createadynamicVLAN.Aportbelongingtoastaticallyconfigured,jumbo-
enabledVLANcannotjoinadynamicVLAN.
PortAddsandMoves:IfyouaddaporttoaVLANthatisalready
configuredforjumbotraffic,theswitchenablesthatporttoreceivejumbo
traffic.Ifyouremoveaportfromajumbo-enabledVLAN,theswitch
10-19
JumboFrames
disablesjumbotrafficcapabilityontheportonlyiftheportisnotcurrently
amemberofanotherjumbo-enabledVLAN.Thissameoperationapplies
toporttrunks.
JumboTrafficSources:Aportbelongingtoajumbo-enabledVLANcan
receiveinboundjumboframesthroughanyVLANtowhichitbelongs,
includingnon-jumboVLANs.Forexample,ifVLAN10(withoutjumbos
enabled)andVLAN20(withjumbosenabled)arebothconfiguredona
switch,andport1belongstobothVLANs,thenport1canreceivejumbo
trafficfromdevicesoneitherVLAN.Foramethodtoallowonlysome
portsinaVLANtoreceivejumbotraffic,refertoOperatingNotesfor
JumboTraffic-Handlingonpage10-23.
ConfiguringJumboFrameOperation
Command Page
showvlans 10-21
showvlansports<port-list> 10-22
showvlans<vid> 10-23
jumbo 10-23
Overview
1. DeterminetheVLANmembershipoftheportsortrunksthroughwhich
youwanttheswitchtoacceptinboundjumbotraffic.Foroperationwith
GVRPenabled,refertotheGVRPtopicunderOperatingRules,above.
2. Ensurethattheportsthroughwhichyouwanttheswitchtoreceivejumbo
framesareoperatingatleastatgigabitspeed.(ChecktheModefieldinthe
outputfortheshowinterfacesbrief<port-list>command.)
3. UsethejumbocommandtoenablejumboframesononeormoreVLANs
staticallyconfiguredintheswitch.(Allportsbelongingtoajumbo-
enabledVLANcanreceivejumboframes.
4. Executewritememorytosaveyourconfigurationchangestothestartup-
configfile.
10-20
JumboFrames
ViewingtheCurrentJumboConfiguration
Syntax: showvlans
ListsthestaticVLANsconfiguredontheswitchandincludes
aJumbocolumntoindicatewhichVLANsareconfiguredto
supportinboundjumbotraffic.Allportsbelongingtoa
jumbo-enabledVLANcanreceivejumbotraffic.(Formore
informationrefertoOperatingNotesforJumboTraffic-
Handlingonpage10-23.)Seefigure10-10,below.
Figure10-10. ExampleListingofStaticVLANsToShowJumboStatusPerVLAN
Indicateswhichstatic
VLANsareconfiguredto
enablejumbopackets.
Syntax: showvlansports<port-list>
ListsthestaticVLANstowhichthespecifiedport(s)belong,
includingtheJumbocolumntoindicatewhichVLANsare
configuredtosupportjumbotraffic.Enteringonlyoneport
in< port-list >resultsinalistofallVLANstowhichthatport
belongs.Enteringmultipleportsin< port-list > resultsina
supersetlistthatincludestheVLANmembershipsofallports
inthelist,eventhoughtheindividualportsinthelistmay
belongtodifferentsubsetsofthecompleteVLANlisting.For
example,ifport1belongstoVLAN1,port2belongstoVLAN
10,andport3belongstoVLAN15,thenexecutingthis
commandwitha<port-list >of1-3resultsinalistingofall
threeVLANs,eventhoughnoneoftheportsbelongtoallthree
VLANS.(Refertofigure10-11.)
10-21
JumboFrames
Indicateswhichstatic
VLANsareconfiguredto
enablejumbopackets.
Figure10-11. ExampleofListingtheVLANMembershipsforaRangeofPorts
Syntax: showvlans<vid>
Thiscommandshowsportmembershipandjumbo
configurationforthespecified<vid>.
ListstheportsbelongingtoVLAN
100andwhethertheVLANis
enabledforjumbopackettraffic.
Figure10-12.ExampleofListingthePortMembershipandJumboStatusfora
VLAN
10-22
JumboFrames
EnablingorDisablingJumboTrafficonaVLAN
Syntax: vlan<vid>jumbo
[no]vlan< vid > jumbo
ConfiguresthespecifiedVLANtoallowjumboframesonall
portsontheswitchthatbelongtothatVLAN.IftheVLANis
notalreadyconfiguredontheswitch,vlan<vid>jumboalso
createstheVLAN.Notethataportbelongingtoonejumbo
VLANcanreceivejumboframesthroughanyotherVLAN
staticallyconfiguredontheswitch,regardlessofwhetherthe
otherVLANisenabledforjumboframes.The[no]formofthe
commanddisablesinboundjumbotrafficonallportsinthe
specifiedVLANthatdonotalsobelongtoanotherVLANthat
isenabledforjumbotraffic.InaVLANcontext,thecommand
formsarejumboandnojumbo.(Default:Jumbosdisabledon
thespecifiedVLAN.)
OperatingNotesforJumboTraffic-Handling
ProCurvedoesnotrecommendconfiguringavoiceVLANtoacceptjumbo
frames.VoiceVLANframesaretypicallysmall,andallowingavoiceVLAN
toacceptjumboframetrafficcandegradethevoicetransmissionperfor-
mance.
Youcanconfigurethedefault,primary,and/or(ifconfigured)themanage-
mentVLANtoacceptjumboframesonallportsbelongingtotheVLAN.
WhentheswitchappliesthedefaultMTU(1522-bytes)toaVLAN,allports
intheVLANcanreceiveincomingframesofupto1522bytesinlength.
WhentheswitchappliesthejumboMTU(9220bytes)toaVLAN,allports
inthatVLANcanreceiveincomingframesofupto9220bytesinlength.
AportreceivingframesexceedingtheapplicableMTUdropssuchframes,
causingtheswitchtogenerateanEventLogmessageandincrementthe
GiantRxcounter(displayedbyshowinterfaces<port-list>).
Theswitchdoesnotallowflowcontrolandjumboframecapabilitytoco-
existonaport.Attemptingtoconfigurebothonthesameportgenerates
anerrormessageintheCLIandsendsasimilarmessagetotheEventLog.
ThedefaultMTUis1522bytes(including4bytesfortheVLANtag).The
jumboMTUis9220bytes(including4bytesfortheVLANtag).
Whenaportisnotamemberofanyjumbo-enabledVLAN,itdropsall
jumbotraffic.Iftheportisreceivingexcessiveinboundjumbotraffic,
theportgeneratesanEventLogmessagetonotifyyouofthiscondition.
10-23
JumboFrames
ThissameconditiongeneratesaFault-FindermessageintheAlertlogof
theswitchswebbrowserinterface,andalsoincrementstheswitchs
GiantRxcounter.
IfyoudonotwantallportsinagivenVLANtoacceptjumboframes,you
canconsidercreatingoneormorejumboVLANswithamembership
comprisedofonlytheportsyouwanttoreceivejumbotraffic.Becausea
portbelongingtoonejumbo-enabledVLANcanreceivejumboframes
throughanyVLANtowhichitbelongs,thismethodenablesyoutoinclude
bothjumbo-enabledandnon-jumboportswithinthesameVLAN.For
example,supposeyouwantedtoallowinboundjumboframesonlyon
ports6,7,12,and13.However,theseportsarespreadacrossVLAN100
andVLAN200,andalsosharetheseVLANswithotherportsyouwant
excludedfromjumbotraffic.AsolutionistocreateathirdVLANwiththe
solepurposeofenablingjumbotrafficonthedesiredports,whileleaving
theotherportsontheswitchdisabledforjumbotraffic.Thatis:
VLAN100 VLAN200 VLAN300
Ports 6-10 11-15 6,7,12,and13
Jumbo- No No Yes
Enabled?
IftherearesecurityconcernswithgroupingtheportsasshownforVLAN
300,youcaneitherusesource-portfilteringtoblockunwantedtraffic
pathsorcreateseparatejumboVLANs,oneforports6and7,andanother
forports12and13.
OutboundJumboTraffic.Anyportoperatingat1Gbpsorhighercan
transmitoutboundjumboframesthroughanyVLAN,regardlessofthe
jumboconfiguration.TheVLANisnotrequiredtobejumbo-enabled,and
theportisnotrequiredtobelongtoanyother,jumboenabledVLANs.This
canoccurinsituationswhereanon-jumboVLANincludessomeportsthat
donotbelongtoanother,jumbo-enabledVLANandsomeportsthatdo
belongtoanother,jumbo-enabledVLAN.Inthiscase,portscapableof
receivingjumboframescanforwardthemtotheportsintheVLANthat
donothavejumbocapability.
10-24
JumboFrames
Jumbo-EnabledVLAN
VLAN10
Non-JumboVLAN
VLAN20
Port3belongstobothVLAN10andVLAN20.
Jumbopacketsreceivedinboundonport3canbe
forwardedouttheNon-Jumboports4,5,and6.
1 5 2 3 4 6
Figure10-13.ForwardingJumboframesThroughNon-JumboPorts
Jumboframescanalsobeforwardedoutnon-jumboportswhenthejumbo
framesreceivedinboundonajumbo-enabledVLANareroutedtoanother,
non-jumboVLANforoutboundtransmissiononportsthathavenomem-
bershipsinother,jumbo-capableVLANs.Whereeitheroftheabove
scenariosisapossibility,thedownstreamdevicemustbeconfiguredto
acceptthejumbotraffic.Otherwise,thistrafficwillbedroppedbythe
downstreamdevice.
Troubleshooting
AVLANisconfiguredtoallowjumboframes,butoneormoreports
dropsallinboundjumboframes. Theportmaynotbeoperatingat1giga-
bitorhigher.Regardlessofaportsconfiguration,ifitisactuallyoperatingat
aspeedlowerthan1gigabit,itdropsinboundjumboframes.Forexample,if
aportisconfiguredforAutomode(speed-duplexauto),buthasnegotiateda
100Mbpsspeedwiththedeviceattheotherendofthelink,thentheport
cannotreceiveinboundjumboframes.Todeterminetheactualoperating
speedofoneormoreports,viewtheModefieldintheoutputforthefollowing
command:
showinterfacesbrief<port-list>
Anon-jumboportisgeneratingExcessiveundersize/giantframes
messagesintheEventLog. Theswitchcantransmitoutboundjumbotraf-
ficonanyport,regardlessofwhethertheportbelongstoajumboVLAN.In
thiscase,anotherportinthesameVLANmaybejumbo-enabledthrough
membershipinadifferent,jumbo-enabledVLAN,andmaybeforwarding
jumboframesreceivedonthejumboVLANtonon-jumboports.Referto
OutboundJumboTrafficonpage10-24.
10-25
QoSPassthroughMode
QoSPassthroughMode
QoSPassthroughmodeisdesignedtoenhancetheperformanceofline-rate
traffictransfersthroughtheswitch.Thisfeatureshouldonlybeusedin
environmentswhereQualityofService(QoS)isnotofmajorimportance,but
wherelosslessdatatransfersarekey.Thiscommanddisablesanydiscrimina-
tionofQoSqueuesfortraffic,consolidatingframebuffermemorytoprovide
line-rateflowswithnolossofdata.
GeneralOperation
Theportbufferingdesignfortheswitchhasbeenoptimizedforgigabit-to-
gigabittrafficflows.Forthisreason,someflowsfromGigabit-to-100Baseor
even100Base-to-10Basemaynotperformaswellaswouldbeexpected.The
QoSPassthroughmodeenhancementcanprovideasignificantperformance
improvementforhigh-bandwidthtrafficflowsthroughtheswitch,particularly
whenrunningtrafficflowsfrom1000Basetoeither100Baseor10Basecon-
nections.
QoSPass-Throughmodeissettooptimizedbydefault.Ifithasbeensetto
typical,youcanre-enableittooptimizedusingtheCLIcommand
qos-passthrough-mode(intheconfigcontext)followedbywritememoryand
rebootingtheswitch.
QoSPassthroughmode,whensettooptimized,resultsinthefollowing
generalchangestoswitchoperation:
Alterstheswitch'sdefaultoutboundpriorityqueueschemefromfour
queues(low,normal,medium,andhigh),totwoqueues(normal&high).
Optimizesoutboundportbuffersforatwo-queuescheme.
Allpacketsreceivedwithan802.1pprioritytagof0to5(low,normal,or
mediumpriorities),ortaggedbytheswitch'sQOSfeature,willbeserviced
bythe(nowlarger)normalpriorityqueue.
Allpacketsreceivedwithan802.1pprioritytagof6or7(highpriority),
ortaggedbytheswitch'sQoSfeature,willbeservicedbythehigh
priorityqueue.
Highprioritypacketssourcedbytheswitchitself,suchasSpanningTree
frames,willbeservicedinthehighpriorityqueue.
Any802.1ptaggingonareceivedpacket,oranytagaddedtoareceived
packetbytheswitchviaitsQoSconfiguration,willbepreservedasitis
transmittedfromtheswitch.
10-26
QoSPassthroughMode
Note Asstatedearlier,useofthisQoS-Passthrough-Modefeaturegenerallyassumes
thatQoStaggedframesarenotbeingsentthroughtheswitch.Thereceiptof
priority6or7packetsmayinfactsufferpacketdropsdependingonthetraffic
loadofnon-priority6or7packets.
PriorityMappingWithandWithoutQoSPassthroughMode
Theswitchsupports802.1pVLANtagging,whichisusedinconjunctionwith
theoutboundportpriorityqueuestoprioritizeoutboundtraffic.
An802.1QVLANtaggedpacketcarriesan802.1pprioritysetting(0-7).Ifthe
switchreceivesataggedpacket,itisplacedintotheappropriatequeuebased
ontheframe's802.1pprioritysetting.Themappingwith/withoutQoS
PassthroughModeisasfollows:
802.1pPriority
Setting
PrioritizationQueuePlacement
DefaultQoS
Setting
QoSPassthrough
Mode
1 1(low) 2(normal)
2 1(low) 2(normal)
0or
Unspecified
2(normal) 2(normal)
3 2(normal) 2(normal)
4 3(medium) 2(normal)
5 3(medium) 2(normal)
6 4(high) 4(high)
7 4(high) 4(high)
HowtoEnableorDisableQoSPassthroughMode
QoSPass-ThroughModeissettooptimizedbydefault.
10-27
QoSPassthroughMode
Syntax: [no]qos-passthrough-mode[optimized|typical]
writememory
reload
TheabovecommandsequencesetsQoSpass-throughmodeto
optimized.ThenoformofthecommandsequencesetsQoS
pass-throughmodetotypical.Default:Optimized
optimized:Consistsoftwoqueues;asmallerqueueforprotocol
packetsandalargerqueueforallothertraffic.
typical:Consistsoffourqueuesconsistingofalargequeuefor
normaltrafficandsmallqueuesforprotocolandlowpriority
traffic.
Forexample:
ProCurve(config)#noqos-passthrough-mode
Commandwilltakeeffectaftersavingconfigurationand
reboot
ProCurve(config)#reload
Thiscommandcanbeenabledanddisabledonlyfromtheswitch'sCLI.QoS
PassthroughModecannotbeenabledordisabledthrougheithertheswitch's
menuorWebbrowserinterfaces.
Whenenabled,thisfeatureaddsqos-passthrough-modetotheswitchsstartup-
configfile.Forexample,inanotherwisedefaultconfiguration,executingshow
configliststhestartup-configfile(withQoSPassthroughModesettotypical)
asfollows:
Pr oCur ve( conf i g) # show conf i g
St ar t up conf i gur at i on:
host name " Pr oCur ve Swi t ch 2610- 24"
snmp- ser ver cont act " Geor ge"
IndicatesQoSPass-Through
i p def aul t - gat eway 15. 255. 152. 1
modesettotypical.
qos- passt hr ough- mode
snmp- ser ver communi t y " publ i c" Unr est r i ct ed
vl an 1
unt agged 1- 28
i p addr ess dhcp- boot p
exi t
Figure10-14.ExampleoftheStartup-ConfigFileListingwhenQoSPass-ThroughMode=Typical
10-28
ConfiguringPort-BasedPriorityforIncomingPackets
ConfiguringPort-BasedPriorityfor
IncomingPackets
Assigningapriorityleveltotrafficonthebasis
ofincomingport
Disabled n/a page10-32 n/a
Whennetworkcongestionoccurs,itisimportanttomovetrafficonthebasis
ofrelativeimportance.However,withoutprioritization:
Trafficfromlessimportantsourcescanconsumebandwidthandslow
downorhaltdeliveryofmoreimportanttraffic.
Mosttrafficfromallportsisforwardedasnormalpriority,andcompetes
forbandwidthwithallothernormal-prioritytraffic,regardlessofits
relativeimportance.
TrafficreceivedintaggedVLANpacketscarriesaspecific802.1pprioritylevel
(0-7)thattheswitchrecognizesandusestoassignpacketpriorityatthe
outboundport.Withthedefaultport-basedpriority,theswitchhandlestraffic
receivedinuntaggedpacketsasNormal(prioritylevel=0).
Youcanassignaprioritylevelto:
Inbound,untaggedVLANpackets
Inbound,taggedVLANpacketshavingaprioritylevelof0(zero)
(Theswitchdoesnotaltertheexistingprioritylevelofinbound,taggedVLAN
packetscarryingaprioritylevelof1-7.)
Thus,forexample,high-prioritytaggedVLANtrafficreceivedonaportretains
itspriorityintheswitch.However,youhavetheoptionofconfiguringtheport
toassignapriorityleveltountaggedtrafficand0-prioritytaggedtrafficthe
portreceives.
TheRoleof802.1QVLANTagging
An802.1Q-taggedVLANpacketcarriesthepacketsVLANassignmentandthe
802.1pprioritysetting(0-7).(Bycontrast,anuntaggedpacketdoesnothave
ataganddoesnotcarryaprioritysetting.)Generally,theswitchpreserves
andusesapacketsprioritysettingtodeterminewhichoutboundqueuethe
packetbelongsinontheoutboundport.Iftheoutboundportisatagged
memberoftheVLAN,thepacketcarriesitsprioritysettingtothenext,
10-29
downstreamdevice.Iftheoutboundportisnotconfiguredasataggedmember
oftheVLAN,thenthetagisstrippedfromthepacket,whichthenexitsfrom
theswitchwithoutaprioritysetting.
OutboundPortQueuesandPacketPrioritySettings
PortsontheProCurveswitcheshavethefollowingoutboundportqueue
structure:
SwitchModel Outbound
PortQueues
Switch6108 4
Series5300xlSwitch 4
Series4100glSwitch 3
Series3400clSwitch
Series2600,2600-PWRSwitch 4
Series2610,2610-PWRSwitch 4
Series2800Switch 4
Series2500Switch 2
Switches1600M/2400M/2424M/4000M/8000M 2
Asshownbelow,theseportqueuesmaptotheeightprioritysettingsspecified
inthe802.1pstandard.
Table10-3. MappingPrioritySettingstoDeviceQueues
802.1pPrioritySettingsUsed
InTaggedVLANPackets
Switcheswith
3Outbound
QueueAssignmentinDownstreamDevices
With:
PortQueues
4Queues 8Queues 2Queues
1(low)
2(low)
Low
Low
Low
Low
Low Low
0(normalpriority)
3
Normal
Normal
Normal
Normal
4
5
High
High
Medium
Medium
High
High
6
7(highpriority)
High
High
High
High
10-30
Forexample,supposeyouhaveconfiguredportA10toassignaprioritylevel
of1(low):
AnuntaggedpacketcomingintotheswitchonportA10andleavingthe
switchthroughanyotherportconfiguredasataggedVLANmember
wouldleavetheswitchasataggedpacketwithaprioritylevelof1.
Ataggedpacketwithan802.1pprioritysettingof0(zero)comingintothe
switchonportA10andleavingtheswitchthroughanyotherportconfig-
uredasataggedVLANmemberwouldleavetheswitchasataggedpacket
withaprioritylevelof1.
Ataggedpacketwithan802.1pprioritysetting(1-7)comingintothe
switchonportA10andleavingtheswitchthroughanyotherportconfig-
uredasataggedVLANmemberwouldkeepitsoriginalprioritysetting
(regardlessoftheport-basedprioritysettingonportA10).
Not e Forapackettocarryagiven802.1pprioritylevelfromend-to-endinanetwork,
theVLANforthepacketmustbeconfiguredastaggedonallswitch-to-switch
links.Otherwisethetagisremovedandthe802.1ppriorityislostasthepacket
movesfromoneswitchtothenext.
OperatingRulesforPort-BasedPriority
Theserulesapplytotheoperationofport-basedpriorityontheswitch.
Intheswitchsdefaultconfiguration,port-basedpriorityisconfiguredas
0(zero)forinboundtrafficonallports.
Onagivenport,whenport-basedpriorityisconfiguredas0-7,aninbound,
untaggedpacketadoptsthespecifiedpriorityandissenttothecorre-
spondingoutboundqueueontheoutboundport.(Seetable10-3,Mapping
PrioritySettingstoDeviceQueues,onpage10-30.)Iftheoutboundport
isataggedmemberoftheapplicableVLAN,thenthepacketcarriesatag
withthatprioritysettingtothenextdownstreamdevice.
Onagivenport,whenport-basedpriorityisconfiguredas0-7,aninbound,
taggedpacketwithapriorityof0(zero)adoptsthespecifiedpriorityand
issenttothecorrespondingoutboundqueueontheoutboundport.(See
table10-3,MappingPrioritySettingstoDeviceQueues,onpage10-30.)
IftheoutboundportisataggedmemberoftheapplicableVLAN,thenthe
packetcarriesatagwiththatprioritysettingtothenextdownstream
device.
10-31
Onagivenport,aninbound,taggedpacketreceivedontheportwitha
presetpriorityof1- 7initstagkeepsthatpriorityandisassignedan
outboundqueueonthebasisofthatpriority(regardlessoftheport-based
priorityconfiguredontheport).(Refertotable10-3,MappingPriority
SettingstoDeviceQueuesonpage10-30.)
Ifapacketleavestheswitchthroughanoutboundportconfiguredasan
untaggedmemberofthepacketsVLAN,thenthepacketleavestheswitch
withoutaVLANtagandthuswithoutan802.1pprioritysetting.
Trunkedportsdonotallownon-default(1-7)port-basedprioritysettings.
Ifyouconfigureanon-defaultport-basedpriorityvalueonaportandthen
addtheporttoaporttrunk,thentheport-basedpriorityforthatportis
returnedtothedefault0.
ConfiguringandViewingPort-BasedPriority
Thiscommandenablesordisablesport-basedpriorityonaper-portbasis.You
caneitherenterthecommandontheinterfacecontextlevelorincludethe
interfaceinthecommand.
Syntax: interface<port#>qospriority<1..7>
Configuresanon-defaultport-based802.1ppriorityfor
incoming,untaggedpacketsortaggedpacketsarrivingwith
a"0"priorityonthedesignatedports,asdescribedunder
"OperatingRulesforPort-BasedPriority",above.
interface<port#>qospriority0
Returnsaport-basedprioritysettingtothedefault0for
untaggedpacketsreceivedonthedesignatedport(s).Inthis
statetheswitchhandlestheuntaggedpacketswithNormal
priority.(Refertotable10-3onpage10-30.)
showrunning-config
Listsanynon-default(1-7)port-basedprioritysettingsin
therunning-configfileonaper-portbasis.Ifthepriorityis
settothe(default)"0",thesettingisnotincludedintheshow
configlisting.
showconfig
Listsanynon-default(1-7)port-basedprioritysettingsin
thestartup-configfileonaper-portbasis.Ifthepriorityisset
tothe(default)"0",thesettingisnotincludedintheshow
configlisting.
10-32
Forexample,supposeyouwantedtoconfigureportsA10-A12ontheswitch
toprioritizealluntagged,inboundVLANtrafficasLow(prioritylevel=1;
refertotable10-3onpage10-30).
PortsA9-A12arenowconfiguredto
assignaprioritylevelof"1"(Low)to
untagged,incomingtraffic.(Any
inbound,taggedtrafficretainsits
prioritylevelwhiletransiting the
switch.)
Configuresport-based
priorityonportsA9-A12
to"1"(Low)andsaves
theconfiguration
changestothestartup-
configfile.
Figure10-15.ExampleofConfiguringNon-DefaultPrioritizationonUntagged,InboundTraffic
MessagesRelatedtoPrioritization
Message Meaning
<priority-level>:Unabletocreate. Theport(s)onwhichyouaretryingtoconfigureaqos
prioritymaybelongtoaporttrunk.Trunkedportscannotbe
configuredforqospriority.
TroubleshootingPrioritization
RefertoPrioritizationProblemsonpageC-8intheTroubleshootingchap-
ter.
10-33
ConfigureFriendlyPortNames StandardPort
Numbering
n/a page35 n/a
DisplayFriendlyPortNames n/a n/a page36 n/a
Thisfeatureenablesyoutoassignalphanumericportnamesofyourchoosing
toaugmentautomaticallyassignednumericportnames.Thismeansyoucan
configuremeaningfulportnamestomakeiteasiertoidentifythesourceof
informationlistedbysomeShowcommands.(Notethatthisfeatureaugments
portnumbering,butdoesnotreplaceit.)
ConfiguringandOperatingRulesforFriendlyPort
Names
Ateithertheglobalorcontextconfigurationlevelyoucanassignaunique
nametoanyportontheswitch.Youcanalsoassignthesamenameto
multipleports.
Thefriendlyportnamesyouconfigureappearintheoutputoftheshow
name[port-list],showconfig,andshowinterface<port-number>commands.
TheydonotappearintheoutputofothershowcommandsorinMenu
interfacescreens.(SeeDisplayingFriendlyPortNameswithOtherPort
Dataonpage10-36.)
FriendlyportnamesarenotasubstituteforportnumbersinCLIcom-
mandsorMenudisplays.
Trunkingportstogetherdoesnotaffectfriendlynamingfortheindividual
ports.(Ifyouwantthesamenameforallportsinatrunk,youmust
individuallyassignthenametoeachport.)
Afriendlyportnamecanhaveupto64contiguousalphanumericcharac-
ters.
Blankspaceswithinfriendlyportnamesarenotallowed,andifused,
causeaninvalidinputerror.(Theswitchinterpretsablankspaceasaname
terminator.)
Inaportlisting,notassignedindicatesthattheportdoesnothaveaname
assignmentotherthanitsfixedportnumber.
10-34
Toretainfriendlyportnamesacrossreboots,youmustsavethecurrent
running-configurationtothestartup-configfileafterenteringthefriendly
portnames.(IntheCLI,usethewritememorycommand.)
ConfiguringFriendlyPortNames
Syntax: interface<port-list>name<port-name-string>
Assignsaportnametoport-list.
nointerface<port-list>name
Deletestheportnamefromport-list.
ConfiguringaSinglePortName.Supposethatyouhaveconnectedport
A3ontheswitchtoBillSmithsworkstation,andwanttoassignBillsname
andworkstationIPaddress(10.25.101.73)asaportnameforportA3:
Figure10-16.ExampleofConfiguringaFriendlyPortName
ConfiguringtheSameNameforMultiplePorts.Supposethatyouwant
touseportsA5throughA8asatrunkedlinktoaserverusedbyadrafting
group.InthiscaseyoumightconfigureportsA5throughA8withthename
Draft-Server:Trunk.
10-35
Figure10-17.ExampleofConfiguringOneFriendlyPortNameonMultiplePorts
DisplayingFriendlyPortNameswithOtherPortData
Youcandisplayfriendlyportnamedatainthefollowingcombinations:
showname:Displaysalistingofportnumberswiththeircorresponding
friendlyportnamesandalsoquicklyshowsyouwhichportsdonothave
friendlynameassignments.(shownamedatacomesfromtherunning-
configfile.)
showinterface<port-number>:Displaysthefriendlyportname,ifany,along
withthetrafficstatisticsforthatport.(Thefriendlyportnamedatacomes
fromtherunning-configfile.)
showconfig:Includesfriendlyportnamesintheper-portdataofthe
resultingconfigurationlisting.(showconfigdatacomesfromthestartup-
configfile.)
ToListAllPortsorSelectedPortswithTheirFriendlyPortNames.
Thiscommandlistsnamesassignedtoaspecificport.
Syntax: showname[port-list]
Liststhefriendlyportnamewithitscorrespondingport
numberandporttype.Theshownamecommandalonelists
thisdataforallportsontheswitch.
10-36
Forexample:
Friendlyportnames
assignedinprevious
examples.
PortsWithout
"Friendly"Name
Figure10-18.ExampleofFriendlyPortNameDataforAllPortsontheSwitch
PortWithouta"Friendly"
Name
Friendlyportnames
assignedinprevious
examples.
Figure10-19.ExampleofFriendlyPortNameDataforSpecificPortsontheSwitch
IncludingFriendlyPortNamesinPer-PortStatisticsListings. A
friendlyportnameconfiguredtoaportisautomaticallyincludedwhenyou
displaytheportsstatisticsoutput.
Syntax: showinterface<port-number>
Includesthefriendlyportnamewiththeportstraffic
statisticslisting.
Forexample,ifyouconfigureportA1withthenameOConnor_10.25.101.43,
theshowinterfaceoutputforthisportappearssimilartothefollowing:
10-37
FriendlyPort
Name
Figure10-20.ExampleofaFriendlyPortNameinaPer-PortStatisticsListing
Foragivenport,ifafriendlyportnamedoesnotexistintherunning-config
file,theNamelineintheabovecommandoutputappearsas:
Name : notassigned
ToSearchtheConfigurationforPortswithFriendlyPortNames.
Thisoptiontellsyouwhichfriendlyportnameshavebeensavedtothestartup-
configfile.(showconfigdoesnotincludeportsthathaveonlydefaultsettings
inthestartup-configfile.)
Syntax: showconfig
Includesfriendlyportnamesinalistingofallinterfaces
(ports)configuredwithnon-defaultsettings.Excludes
portsthathaveneitherafriendlyportnamenoranyother
non-defaultconfigurationsettings.
10-38
Forexample,ifyouconfigureportA1withafriendlyportname:
Thiscommandsequence
savesthefriendlyportname
forportA1inthestartup-
configfile,butdoesnotdoso
forthenameenteredforport
A2.
Inthiscase,showconfiglists
onlyportA1.Executingwrite
memafterenteringthenamefor
portA2,andthenexecuting
showconfigagainwouldresult
inalistingthatincludesboth
Listingincludesfriendly
portnameforportA1
only.
Figure10-21.ExampleListingoftheStartup-ConfigFilewithaFriendlyPortNameConfigured(andSaved)
ConfiguringTransceiversThatHaventBeenInserted
Previously,aporthadtobevalidandverifiedfortheswitchtoallowittobe
configured.Transceiversareremovableportsandconsideredinvalidwhen
notpresentintheswitch,sotheycannotbeconfiguredunlesstheyarealready
intheswitch.Forswitchescoveredinthisguide,theverificationforallowable
portconfigurationsperformedbytheCLIisremovedandconfigurationof
transceiversisallowedeveniftheyarenotyetinsertedintheswitch.
10-39
Uni-DirectionalLinkDetection(UDLD)
Uni-directionalLinkDetection(UDLD)monitorsalinkbetweentwoProCurve
switchesandblockstheportsonbothendsofthelinkifthelinkfailsatany
pointbetweenthetwodevices.Thisfeatureisparticularlyusefulfordetecting
failuresinfiberlinksandtrunks.Figure10-22showsanexample.
Scenario1(NoUDLD):WithoutUDLD,theswitchports
remainenableddespitethelinkfailure.Trafficcontinuesto
beload-balancedtotheportsconnectedtothefailedlink.
Scenario2(UDLD-enabled):WhenUDLDisenabled,the
featureblockstheportsconnectedtothefailedlink.
Fiber
ProCurve
Switch
LinkFailure
ThirdParty
Switch
ProCurve
Switch
Trunk
ThirdParty
Switch
ProCurve
Switch
ThirdParty
Switch
Figure10-22. UDLDExample
Inthisexample,eachProCurveswitchloadbalancestrafficacrosstwoports
inatrunkgroup.WithouttheUDLDfeature,alinkfailureonalinkthatisnot
directlyattachedtooneoftheProCurveswitchesremainsundetected.Asa
result,eachswitchcontinuetosendtrafficontheportsconnectedtothefailed
link.WhenUDLDisenabledonthetrunkportsoneachProCurveswitch,the
switchesdetectthefailedlink,blocktheportsconnectedtothefailedlink,
andusetheremainingportsinthetrunkgrouptoforwardthetraffic.
Similarly,UDLDiseffectiveformonitoringfiberopticlinksthatusetwouni-
directionfiberstotransmitandreceivepackets.WithoutUDLD,ifafiber
breaksinonedirection,afiberportmayassumethelinkisstillgood(because
theotherdirectionisoperatingnormally)andcontinuetosendtrafficonthe
10-40
connectedports.UDLD-enabledports;however,willpreventtrafficfrom
beingsentacrossabadlinkbyblockingtheportsintheeventthateitherthe
individualtransmitterorreceiverforthatconnectionfails.
PortsenabledforUDLDexchangehealth-checkpacketsonceeveryfive
seconds(thelink-keepaliveinterval).Ifaportdoesnotreceiveahealth-check
packetfromtheportattheotherendofthelinkwithinthekeepaliveinterval,
theportwaitsforfourmoreintervals.Iftheportstilldoesnotreceiveahealth-
checkpacketafterwaitingforfiveintervals,theportconcludesthatthelink
hasfailedandblockstheUDLD-enabledport.
WhenaportisblockedbyUDLD,theeventisrecordedintheswitchlogor
viaanSNMPtrap(ifconfigured);andotherportblockingprotocols,like
spanningtreeormeshing,willnotusethebadlinktoloadbalancepackets.
Theportwillremainblockeduntilthelinkisunplugged,disabled,orfixed.
TheportcanalsobeunblockedbydisablingUDLDontheport.
ConfiguringUDLD
WhenconfiguringUDLD,keepthefollowingconsiderationsinmind:
UDLDisconfiguredonaper-portbasisandmustbeenabledatboth
endsofthelink.SeethenotebelowforalistofProCurveswitches
thatsupportUDLD.
ToconfigureUDLDonatrunkgroup,youmustconfigurethefeature
oneachportofthegroupindividually.ConfiguringUDLDonatrunk
groupsprimaryportenablesthefeatureonthatportonly.
Dynamictrunkingisnotsupported.Ifyouwanttoconfigureatrunk
groupthatcontainsportsonwhichUDLDisenabled,youmust
removetheUDLDconfigurationfromtheports.Afteryoucreatethe
trunkgroup,youcanre-addtheUDLDconfiguration.
Not e UDLDinteroperateswiththefollowingProCurveswitchseries:2600,2800,
3400,3500,4200,5300,5400,6200,6400,8212,and9300.Consulttherelease
notesandcurrentmanualsforrequiredsoftwareversions.
10-41
ThefollowingcommandsallowyoutoconfigureUDLDviatheCLI.
Syntax:[no]interface<port-list>link-keepalive
EnablesUDLDonaportorrangeofports.
Todisablethefeature,enterthenoformofthecommand.
Default:UDLDdisabled
Syntax:link-keepaliveinterval<interval>
DeterminesthetimeintervaltosendUDLDcontrolpackets.The
<interval>parameterspecifieshowoftentheportssendaUDLD
packet.Youcanspecifyfrom10100,in100msincrements,
where10is1second,11is1.1seconds,andsoon.
Default:50(5seconds)
Syntax:link-keepaliveretries<num>
DeterminesthemaximumnumberofretriestosendUDLD
controlpackets.The<num>parameterspecifiesthemaximum
numberoftimestheportwilltrythehealthcheck.Youcanspecify
avaluefrom310.
Default:5
Syntax:[no]interface<port-list>link-keepalivevlan<vid>
AssignsaVLANIDtoaUDLD-enabledportforsendingoftagged
UDLDcontrolpackets.Underdefaultsettings,untaggedUDLD
packetscanstillbetransmittedandreceivedontaggedonly
portshowever,awarningmessagewillbelogged.
ThenoformofthecommanddisablesUDLDonthespecified
port(s).
Default:UDLDpacketsareuntagged;taggedonlyportswill
transmitandreceiveuntaggedUDLDcontrolpackets
EnablingUDLD
UDLDisenabledonaperportbasis.Forexample,toenableUDLDonport
a1,enter:
Pr oCur ve( conf i g) #i nt er f ace al l i nk- keepal i ve
Toenablethefeatureonatrunkgroup,entertheappropriateportrange.For
example:
Pr oCur ve( conf i g) #i nt er f ace al - a4 l i nk- keepal i ve
10-42
Not e WhenatleastoneportisUDLD-enabled,theswitchwillforwardoutUDLD
packetsthatarriveonnon-UDLD-configuredportsoutofallothernon-UDLD-
configuredportsinthesamevlan.Thatis,UDLDcontrolpacketswillpass
throughaportthatisnotconfiguredforUDLD.However,UDLDpacketswill
bedroppedonanyblockedportsthatarenotconfiguredforUDLD.
ChangingtheKeepaliveInterval
Bydefault,portsenabledforUDLDsendalinkhealth-checkpacketonceevery
5seconds.Youcanchangetheintervaltoavaluefrom10100deciseconds,
where10is1second,11is1.1seconds,andsoon.Forexample,tochangethe
packetintervaltosevenseconds,enterthefollowingcommandattheglobal
configurationlevel:
Pr oCur ve( conf i g) # l i nk- keepal i ve i nt er val 70
ChangingtheKeepaliveRetries
Bydefault,aportwaitsfivesecondstoreceiveahealth-checkreplypacket
fromtheportattheotherendofthelink.Iftheportdoesnotreceiveareply,
theporttriesfourmoretimesbysendinguptofourmorehealth-check
packets.Iftheportstilldoesnotreceiveareplyafterthemaximumnumber
ofretries,theportgoesdown.
Youcanchangethemaximumnumberofkeepaliveattemptstoavaluefrom
310.Forexample,tochangethemaximumnumberofattemptsto4,enter
thefollowingcommandattheglobalconfigurationlevel:
Pr oCur ve( conf i g) # l i nk- keepal i ve r et r i es 4
ConfiguringUDLDforTaggedPorts
ThedefaultimplementationofUDLDsendstheUDLDcontrolpackets
untagged,evenacrosstaggedports.IfanuntaggedUDLDpacketisreceived
byanon-ProCurveswitch,thatswitchmayrejectthepacket.Toavoidsuch
anoccurrence,youcanconfigureportstosendoutUDLDcontrolpacketsthat
aretaggedwithaspecifiedVLAN.
ToenableportstoreceiveandsendUDLDcontrolpacketstaggedwitha
specificVLANID,enteracommandsuchasthefollowingattheinterface
configurationlevel:
Pr oCur ve( conf i g) #i nt er f ace l l i nk- keepal i ve vl an 22
10-43
Not es YoumustconfigurethesameVLANsthatwillbeusedforUDLDon
alldevicesacrossthenetwork;otherwise,theUDLDlinkcannotbe
maintained.
IfaVLANIDisnotspecified,thenUDLDcontrolpacketsaresentout
oftheportasuntaggedpackets.
Tore-assignaVLANID,re-enterthecommandwiththenewVLANID
number.Thenewcommandwilloverwritethepreviouscommand
setting.
WhenconfiguringUDLDfortaggedports,youmayreceiveawarning
messageifthereareanyinconsistencieswiththeportsVLANconfig-
uration(seepage47forpotentialproblems).
ViewingUDLDInformation
ThefollowingshowcommandsallowyoutodisplayUDLDconfigurationand
statusviatheCLI.
Syntax:showlink-keepalive
Displaysalltheportsthatareenabledforlink-keepalive.
Syntax:showlink-keepalivestatistics
DisplaysdetailedstatisticsfortheUDLD-enabledportsonthe
switch.
Syntax:clearlink-keepalivestatistics
ClearsUDLDstatistics.Thiscommandclearsthepacketssent,
packetsreceived,andtransitionscountersintheshowlink-
keepalivestatisticsdisplay.
10-44

unt agged
TodisplaysummaryinformationonallUDLD-enabledports,entertheshow
link-keepalivecommand.Forexample:
Pr oCur ve( conf i g) # show l i nk- keepal i ve
Tot al l i nk- keepal i ve enabl ed por t s: 4
Port5hasbeendisabledby
theSystemAdministrator.
Keepal i ve Ret r i es: 3 Keepal i ve I nt er val : 1 sec
Por t Enabl ed Physi cal Keepal i ve Adj acent UDLD
St at us St at us Swi t ch VLAN
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 Yes up up 00d9d- f 9b700 200
2 Yes up up 01560- 7b1600
3 Yes down of f - l i ne
4 Yes up f ai l ur e
5 No down of f - l i ne
Port4isconnected,butisblocked
duetoalink-keepalivefailure
Port1is UDLD-enabled,and
taggedforaspecificVLAN.
Port3is UDLD-enabled,but
hasnophysicalconnection.
Figure10-23.ExampleofShowLink-KeepaliveCommand
10-45

TodisplaydetailedUDLDinformationforspecificports,entertheshowlink-
keepalivestatisticscommand.Forexample:
Ports1and2areUDLD-enabledandshow
thenumberofhealthcheckpacketssent
andreceivedoneachport.
Pr oCur ve( conf i g) # show l i nk- keepal i ve st at i st i cs
Por t :
Por t :
Por t Bl ocki ng: no Li nk- vl an: 200
Por t : 3
1
Cur r ent St at e: up Nei ghbor MAC Addr : 0000a1- b1c1d1
Udl d Packet s Sent : 1000 Nei ghbor Por t : 5
Udl d Packet s Recei ved: 1000 St at e Tr ansi t i ons: 2
2
Cur r ent St at e: up Nei ghbor MAC Addr : 000102- 030405
Udl d Packet s Sent : 500 Nei ghbor Por t : 6
Cur r ent St at e: of f l i ne Nei ghbor MAC Addr : n/ a
Udl d Packet s Sent : 0 Nei ghbor Por t : n/ a
Por t : 4
Cur r ent St at e: f ai l ur e Nei ghbor MAC Addr : n/ a
Udl d Packet s Sent : 128 Nei ghbor Por t : n/ a
Por t Bl ocki ng: yes Li nk- vl an: 1
Port4isshownasblocked
duetoalink-keepalivefailure
Figure10-24.ExampleofShowLink-KeepaliveStatisticsCommand
ToclearUDLDstatistics,enterthefollowingcommand:
Pr oCur ve# cl ear l i nk- keepal i ve st at i st i cs
Thiscommandclearsthepacketssent,packetsreceived,andtransitions
countersintheshowlinkkeepalivestatisticsdisplay(seeFigure10-24foran
example).
10-46
ConfigurationWarningsandEventLogMessages
WarningMessages.Thefollowingtableshowsthewarningmessagesthat
maybeissuedandtheirpossiblecauses,whenUDLDisconfiguredfortagged
ports.
Table10-1. WarningMessagescausedbyconfiguringUDLDforTaggedPorts
CLICommandExample WarningMessage PossibleProblem
l i nk- keepal i ve 6 Possi bl e conf i gur at i on
l i nk- keepal i ve 7
vl an 4
no vl an 22 t agged
20
pr obl emdet ect ed on por t
6. UDLD VLAN
conf i gur at i on does not
mat ch t he por t ' s VLAN
conf i gur at i on.
Possi bl e conf i gur at i on
7. UDLD VLAN
conf i gur at i on.
Possi bl e conf i gur at i on
18. UDLD VLAN
conf i gur at i on.
YouhaveattemptedtoenableUDLDonaportthatis
ataggedonlyport,butdidnotspecifyaconfiguration
fortaggedUDLDcontrolpackets.Inthisexample,the
switchwillsendandreceivetheUDLDcontrol
packetsuntaggeddespiteissuingthiswarning.
YouhaveattemptedtoconfiguretaggedUDLD
packetsonaportthatdoesnotbelongtothespecified
VLAN.Inthisexample,ifport7belongstoVLAN1and
22,buttheusertriestoconfigureUDLDonport7to
sendtaggedpacketsinVLAN4,theconfigurationwill
beaccepted.TheUDLDcontrolpacketswillbesent
taggedinVLAN4,whichmayresultintheportbeing
blockedbyUDLDiftheuserdoesnotconfigureVLAN
4onthisport.
YouhaveattemptedtoremoveaVLANonportthatis
configuredfortaggedUDLDpacketsonthatVLAN.In
thisexample,ifport18,19,and20aretransmittingand
receivingtaggedUDLDpacketsforVlan22,butthe
usertriestoremoveVlan22onport20,the
configurationwillbeaccepted.Inthiscase,theUDLD
packetswillstillbesentonVlan20,whichmayresult
intheportbeingblockedbyUDLDiftheusersdonot
changetheUDLDconfigurationonthisport.
Note:IfyouareconfiguringtheswitchviaSNMPwiththesameproblematicVLANconfigurationchoices,theabove
warningmessageswillalsobeloggedintheswitchseventlog.
EventLogMessages.Thefollowingtableshowstheeventlogmessagesthat
maybegeneratedonceUDLDhasbeenenabledonaport.
Table10-2. UDLDEventLogMessages
Message Event
I 01/ 01/ 06 04: 25: 05 por t s: por t 4 i s AUDLD-enabledporthasbeenblockedduetopartofthelink
deact i vat ed due t o l i nk f ai l ur e.
havingfailed.
I 01/ 01/ 06 06: 00: 43 por t s: por t 4 i s AfailedlinkhasbeenrepairedandtheUDLD-enabledport isno
up, l i nk st at us i s good.
longerblocked.
10-47
10-48
11
Contents
Overview ..................................................... 11-2
ConfigurationOptions ...................................... 11-2
RelatedPublications ........................................ 11-3
Terminology ............................................... 11-3
PowerAvailability andProvisioning ...... ........................ 11-4
PoweredDevice(PD)Support ............................... 11-4
PowerPriority............................................. 11-5
ConfiguringPoEOperation ...................................... 11-7
CyclingPoweronaPort ..................................... 11-8
PoEforPre-802.3af-standardPDs............................. 11-9
ViewingPoEConfigurationandStatus........................... 11-11
DisplayingtheSwitchsGlobalPoEPowerStatus .............. 11-11
DisplayinganOverviewofPoEStatusonAllPorts ............. 11-12
DisplayingthePoEStatusonSpecificPorts ................... 11-13
PlanningandImplementingaPoEConfiguration .................. 11-14
AssigningPoEPortstoVLANs .............................. 11-14
ApplyingSecurityFeaturestoPoEConfigurations ............. 11-14
PoEEventLogMessages....................................... 11-15
11-1
Overview
Overview
PowerOverEthernet(PoE)technologyallowsIPtelephones,wirelessLAN
accesspoints,andotherpowereddevices(PDs)toreceivepowerandtransfer
dataoverexistingLANcabling.
ThePoEfeaturedescribedinthischapteroperatesonthefollowingswitches
(referredtocollectivelyastheSeries2610-PWRswitches):
ProCurveSwitch2610-24-PWR(J9087A)
ProCurveSwitch2610--48-PWR(J9089A)
ProCurveSwitch2610-24/12-PWR(J9086A)
Theswitchesprovisiontheir10/100Base-TXportswithpowerforPoE
applicationscompatiblewiththeIEEE802.3afstandard.ThePoEportson
yourswitchsupportbothstandardnetworkinglinksandPoElinks.Thus,you
canconnecteitheranon-PoEdeviceorapowereddevice(PD)toa
PoE-enabledportwithoutreconfiguringtheport.
ConfigurationOptions
Inthedefaultconfiguration,all10/100Base-TXportsontheProCurveswitches
2610-24-PWRand2610-48-PWRsupportPoEoperation.TheProCurveSwitch
2610-24/12-PWRsupportsPoEoperationon12ports.Usingthecommands
describedinthischapter,youcan:
ConfigureapowerthresholdforSNMPandEventLogreportingof
PoEconsumptionontheswitch.
Configureper-portpriorityforallocatingpowerincasetheswitch
becomesoversubscribedandmustdroppowerforsome
lower-priorityportstosupportthedemandonother,higher-priority
ports.
Disableorre-enableper-portPoEoperationonsomeportstohelp
controlpowerusageandavoidoversubscribingPoEontheswitch.
MonitorPoEstatusandperformanceontheswitch.
SeeConfiguringPoEOperationonpage11-7forfurtherdetails.
11-2
Overview
RelatedPublications
ThischapterintroducesgeneralPoEoperation,PoEconfigurationand
monitoringcommands,andeventlogmessagesrelatedtoPoEoperationon
theProCurveSeries2610-PWRswitches.Thefollowingtwomanualsprovide
furtherinformation:
Forinformationoninstallation,refertotheProCurveSeries2610
SwitchesInstallationandReferenceGuideprovidedwiththeswitch.
TohelpyouplanandimplementaPoEsysteminyournetwork,refer
tothePoEPlanningandImplementationGuide,whichisavailable
fromtheProCurvewebsiteatwww.procurve.com.(ClickonTechnical
support,thenProductmanuals.)
Terminology
ThefollowingPoEtermsandconceptsareusedinthismanual.
Term UseinthisManual
activePoEport APoE-enabledportconnectedtoaPDrequestingpower.
priorityclass ReferstothetypeofpowerprioritizationwheretheswitchusesLow(thedefault),High,and
Criticalpriorityassignmentstodeterminewhichgroupsofportswillreceivepower.Notethat
powerpriorityrulesapplyonlyifPoEprovisioningontheswitchbecomesoversubscribed.
EPS ExternalPowerSupply;forexample,aProCurve600RPS/EPSoraProCurve610EPS.AnEPS
deviceprovidespowertoprovisionPoEportsonaswitch.SeealsoRPSbelow.
MPS MaintenancePowerSignature;thesignalaPDsendstotheswitchtoindicatethatthePDis
connectedandrequirespower.RefertoFigure11-4onpage14.
PD PoweredDevice.Adevicethatreceivespowerthroughadirectconnectiontoa10/100
Base-TXPoERJ-45portontheswitch.ExamplesofPDsincludeVoice-over-IP(VoIP)
telephones,wirelessaccesspoints,andremotevideocameras.
port-number
priority
Referstothetypeofpowerprioritizationwhere,withinapriorityclass,theswitchassigns
thehighestprioritytothelowest-numberedport,thesecond-highestprioritytothesecond
lowest-numberedport,andso-on.NotethatpowerpriorityrulesapplyonlyifPoEprovisioning
ontheswitchbecomesoversubscribed.
RPS RedundantPowerSupply;forexample,aProCurve600RPS/EPS.AnRPSdeviceprovides
powertoaswitchiftheswitchsinternalpowersupplyfails.RPSpowerdoesnotprovision
PoEportsonaswitchwhoseinternalpowersupplyhasfailed.SeealsoEPSabove.
11-3
PowerAvailabilityandProvisioning
PoweredDevice(PD)Support
Theswitchmusthaveaminimumof15.4wattsofunusedPoEpoweravailable
whenyouconnectan802.3af-compliantPD,regardlessofhowmuchpower
thePDactuallyuses.
NotethatonceaPDconnectstoaportandbeginsoperating,theportretains
onlyenoughPoEpowertosupportthePDsoperation.Unneededpower
becomesavailableforsupportingotherPDconnections.Thus,while15.4
wattsmustbeavailablefortheswitchtobeginsupplyingpowertoaportwith
aPDconnected,15.4wattsperportisnotcontinuallyrequirediftheconnected
PDrequireslesspower.
Forexample,with20wattsofPoEpowerremainingavailableontheswitch,
youcanconnectonenewPDwithoutlosingpowertoanycurrentlyconnected
PDs.IfthatPDdrawsonly3watts,then17wattsremainavailableandyoucan
connectatleastonemorePDwithoutinterruptingpowertoanyotherdevices.
IfthenextPDyouconnectdraws5watts,thenonly12wattsremainunused.
Withonly12wattsavailable,ifyouconnectyetanotherPD,thelowest-priority
portwilllosePoEpoweruntiltheswitchonceagainhas15.4ormorewatts
available.(Forinformationonpowerpriority,refertoPowerPriorityon
page11-5.)
DisconnectingaPDfromaportcausestheswitchtostopprovidingPoEpower
tothatportandmakesthepoweravailabletootherportsconfiguredforPoE
operation.IfthePoEdemandbecomesgreaterthantheavailablepower,the
switchtransferspowerfromlower-priorityportstohigher-priorityports.
(PortsnotcurrentlyprovidingpowertoPDsarenotaffected.)
Not e 15.4wattsofavailablepowerisrequiredfortheswitchtobegindelivering
powertoaport,suchaswhenanewlyconnectedPDisdetectedorwhen
powerisreleasedfromhigherpriorityports.Dependingonpowerdemands,
lower-priorityportsonaswitchwithhighPoEpowerdemandmay
occasionallylosepowerduetothedemandsofhigher-priorityports.(Refer
toPowerPriorityforfurtherdetails.)
Incertaincasesupto17Wofpowermaybereservedbytheswitch.
11-4
PowerPriority
InthedefaultconfigurationPoEpowerpriorityisdeterminedbyportnumber,
withthelowestnumberedporthavingthehighestpriority.
WhenDoestheSwitchPrioritizePowerAllocations?Iftheswitchcan
providepowerforallexistingPDdemands,itdoesnotuseitspowerpriority
settingstoallocatepower.However,ifthePDpowerdemandoversubscribes
theavailablepower,thentheswitchprioritizesthepowerallocationtothe
portsthatpresentaPDpowerdemand.Thiscausestheswitchtoremove
powerfromoneormorelower-priorityportstomeetthepowerdemandon
other,higher-priorityports.(Thisoperationoccurs,regardlessoftheorderin
whichPDsconnecttotheswitchsPoE-configuredports.)
HowDoestheSwitchPrioritizePowerAllocations?Theswitch
simultaneouslyusestwoprioritymethods:
ThepriorityclassmethodenablesportPoEpriorityclassassign-
mentsofLow(thedefault),High,andCritical.
Theport-numberprioritymethodgivesalower-numberedport
priorityoverahigher-numberedportwithinthesameconfigured
priorityclass.
TheportsconfiguredwiththehighestpriorityofeitherbankwillreceivePoE
power,regardlessofposition.Thereisalsoanoptiontoprovisionportswith
additionalpowerbyaddinganexternalpowersupply.Formoreinformation
onusingexternalpowersupplieswithPoE-capableswitches,refertothePoE
PlanningandImplementationGuide.
Table11-1providesexamplesofhowPoEprioritysettingsimpactoperation.
Table11-1. ExampleofPoEPriorityOperationontheProCurve2510-48-PWR
Port Priority
Setting
ConfigurationCommand
1
andResultingOperation
25-48 Critical Thispriorityclassalwaysreceivespower.IfthereisnotenoughpowertoprovisionPDson
alloftheportsconfiguredforthisclass,thennopowergoestoportsconfiguredforHighand
Lowpriority.IfthereisenoughpowertoprovisionPDsononlysomeoftheCriticalports,
thenpowerisallocatedtotheCriticalportsinascendingorder,beginningwiththelowest-
numberedportintheclass,which,inthiscase,isport25.Forthisexample,theCLIcommand
tosetportstoCriticalis:
ProCurve(config)#interfacee25-48powercritical
11-5
Port Priority
Setting
ConfigurationCommand
1
andResultingOperation
9-12 High ThispriorityclassreceivespoweronlyifallPDsonportswithaCriticalprioritysettingare
receivingfullpower.IfthereisnotenoughpowertoprovisionPDsonallportswithaHigh
priority,thennopowergoestoportswithaLowpriority.Ifthereisenoughpowertoprovision
PDsononlysomeoftheHighports,thenpowerisallocatedtotheHighportsinascending
order,beginning,inthisexample,withport9,untilallavailablepowerisinuse.Forthis
example,theCLIcommandtosetportstoHighis:
ProCurve(config)#interfacee9-12powerhigh
1-8 Low ThispriorityclassreceivespoweronlyifallPDsonportswithHighandCriticalpriority
settingsarereceivingpower.IfthereisenoughpowertoprovisionPDsononlysomeLow
priorityports,thenpowerisallocatedtotheportsinascendingorder,beginningwiththe
lowest-numberedportintheclass(port1,inthiscase),untilallavailablepowerisinuse.For
thisexample,theCLIcommandtosetportstoLow
2
is:
ProCurve(config)#interfacee1-8powerlow
13-24 - n/a - Forthisexample,PoEisdisabledontheseports.TheCLIcommandforthissettingis:
ProCurve(config)#nointerfacee13-24power
1
ForalistingofPoEconfigurationcommands,withdescriptions,refertoConfiguringPoEOperationonpage11-7.
2
InthedefaultPoEconfiguration,theportsarealreadysettothelowpriority.Inthiscase,thecommandisnotnecessary.
11-6
ConfiguringPoEOperation
Bydefault,PoEsupportisenabledontheswitchs10/100Base-TXports,with
thepowerprioritysettoLowandthepowerthresholdsetto80(%).The
followingcommandsallowyoutoadjustthesesettings.
Syntax:powerthreshold<1-99>
Thepowerthresholdisaconfigurablepercentageofthetotal
PoEpoweravailableontheswitch.WhenPoEconsumption
exceedsthethreshold,theswitchautomaticallygeneratesan
SNMPtrapandalsosendsamessagetotheEventLog.For
example,ifthepowerthresholdissetto80%(thedefault),and
anincreasingPoEpowerdemandcrossesthisthreshold,the
switchsendsanSNMPtrapandgeneratesthisEventLog
message:
PoEusagehasexceededthresholdof80%.
Iftheswitchisconfiguredfordebuglogging,italsosendsthe
samemessagetotheconfigureddebugdestination(s).
Theswitchautomaticallyinvokesthepowerthresholdatthe
globalconfigurationlevelwithadefaultsettingof80%.You
canconfigurethepowerthresholdtoavalueintherangeof
1%to99%.
IfanincreasingPoEpowerload(1)exceedstheconfigured
powerthreshold(whichtriggersthelogmessageandSNMP
trap),andthen(2)laterbeginsdecreasinganddropsbelow
thethresholdagain,theswitchgeneratesanotherSNMPtrap,
plusamessagetotheEventLogandanyconfiguredDebug
destinations.Tocontinuetheaboveexample:
PoEusageisbelowconfiguredthreshold
of80%.
(RefertoPoEEventLogMessagesonpage11-15.)
Syntax:[no]interface[e]<port-list>power
Re-enablesPoEoperationon<port-list >andrestoresthe
prioritysettingineffectwhenPoEwasdisabledon
<port-list >.The[no]formofthecommanddisablesPoE
operationon<port-list >.(Default:All10/100Base-TXportson
theswitchenabledforPoEoperationatLowpriority.)
11-7
Syntax:interface[e]<port-list>power[critical|high|low]
ReconfiguresthePoEprioritylevelon<port-list>.Foragiven
level,theswitchautomaticallyprioritizesportsbyport
number(inascendingorder).Ifthereisnotenoughpower
availabletoprovisionallactivePoEportsatagivenpriority
level,thenthelowest-numberedportatthatlevelwillbe
provisionedfirst,andsoon.Theswitchinvokesconfigured
PoEprioritiesonlywhenitcannotprovisionallactivePoE
ports.
Critical:SpecifiesthehighestpriorityPoEsupportfor <port-
list>.TheswitchprovisionsactivePoEportsatthislevel
beforePDsconnectedtoanyotherports.
High:SpecifiesthesecondhighestpriorityPoEsupportfor
<port-list>.TheswitchprovisionsactivePoEportsatthis
levelbeforePDsconnectedtoLow-priorityports.
Low(thedefault):SpecifiesthelowestpriorityPoEsupport
for<port-list>.TheswitchprovisionsactivePoEportsat
thislevelonlyifthereispoweravailableafterprovisioning
anyactivePoEportsatthehigherprioritylevels.
CyclingPoweronaPort
SimplydisablingaPoEportdoesnotaffectpowerdeliverythroughthatport.
TocyclethepoweronaPDreceivingpowerfromaPoEportontheswitch,
disable,thenre-enablethepowertothatport.
Forexample,tocyclethepoweronaPoEdeviceconnectedtoport1ona
switchcoveredinthisguide:
ProCurve(config)#nointerface1power
ProCurve(config)#interface1power
11-8
PoEforPre-802.3af-standardPDs
Bydefault,allProCurvePoEswitchessupport802.3af-standardPDs.In
addition,theswitchescoveredinthisguidehavetheabilitytosupplypower
topre-802.3af-standarddevices,suchaslegacy(non-standard)IPphones.
Not e Whentheswitchisinlegacydetectionmode,thedetectionsignaturerangeis
expandedbeyondtheIEEEspecification.Thisallowsnon-compliantdevices
tobepowered.
ForacurrentlistingofPDssupportedbythisfeature,visittheProCurve
Networkingwebsiteatwww.procurve.com.ClickonTechnicalsupport,
andthenonFAQs,andthenselecttheswitchmodel.
Howtoenable/disablePoEforpre-802.3af-standardpowereddevices.
PoEforpre-802.3af-standardpowereddevicesisdisabledbydefault.
Syntax: [no]powerpre-std-detect
TheabovecommandenablesPoEforpre-802.3af-standard
powereddevices.Thenoformofthecommandsequence
disablesPoEforpre-802.3af-standardpowereddevices.
(Default:Disabled)
Toenablethisfeature,youwouldenter:
ProCurve(config)#powerpre-std-detect
PoEforpre-802.3af-standardpowereddevicescanbeenabledordisabledonly
fromtheswitch'sCLI.Thisfeaturecannotbeenabledordisabledthrough
eithertheswitch'smenuorwebbrowserinterfaces.
11-9
Executingtheshowpower-managementcommandliststhesystempower
statusasfollows:
Pr oCur ve( conf i g) # show power - management
Pr e- st andar d Det ect : On
Maxi mumPower : 406 W Oper at i onal St at us : On
Power I n Use : 75 W+/ - 6 W Usage Thr eshol d ( %) : 80
St at us and Count er s - Syst emPower St at us
IndicatesPoEsupportfor
pre-802.3af-standard
powereddevicesisenabled
Figure11-1.PoESupportforPre-802.3af-standardPoweredDevicesEnabled
Forinformationonthemeaningofotherpowerstatusparameters,referto
ViewingPoEConfigurationandStatusonpage11-11.
11-10
ViewingPoEConfigurationandStatus
DisplayingtheSwitchsGlobalPoEPowerStatus
Syntax:showpower-management
DisplaystheswitchsglobalPoEpowerstatus,including:
MaxPower:ListsthemaximumPoEwattageavailableto
provisionactivePoEportsontheswitch.
PowerInUse: ListstheamountofPoEpowerpresentlyinuse.
OperationalStatus:IndicateswhetherPoEpowerisavailable
ontheswitch.(Default:On;showsOffifPoEpowerisnot
available.ShowsFaultyifinternalorexternalPoEpoweris
oversubscribedorfaulty.)
UsageThreshold(%): Liststheconfiguredpercentageof
availablePoEpowerprovisioningtheswitchmustexceedto
generateausagenoticeintheformofanEventLogmessage
andanSNMPtrap.Ifthiseventisfollowedbyadropinpower
provisioningbelowthethreshold,theswitchgenerates
anotherSNMPtrapandEventLogmessage.EventLog
messagesarealsosenttoanyoptionallyconfigureddebug
destinations.(Default:80%)
Pre-standardDetect:ShowswhetherPoEfor
pre-802.3af-standardpowereddevicesisenabledonthe
switch.(Default:Off;showsOnwhenPoEfor
pre-802.3af-standardpowereddeviceshasbeenenabled.)
Forexample,inthedefaultPoEconfiguration,whentheswitchisrunning
withseveralportssupportingPDloads,showpower-managementdisplaysdata
similartothefollowing:
Pr oCur ve( conf i g) # show power - management
St at us and Count er s - Syst emPower St at us
Pr e- st andar d Det ect : Of f
Maxi mumPower : 406 W Oper at i onal St at us : On
Power I n Use : 75 W+/ - 6 W Usage Thr eshol d ( %) : 80
Figure11-2.ExampleofShowPower-ManagementOutput
11-11
DisplayinganOverviewofPoEStatusonAllPorts
Syntax:showpower-managementbrief
Displaysthefollowingportpowerstatus:
Port:ListsallPoE-capableportsontheswitch.
PowerEnable:ShowsYes forportsonwhichPoEisenabled
(thedefault)andNoforportsonwhichPoEisdisabled.
Priority:Liststhepowerpriority(Low,High,andCritical)
configuredonportsenabledforPoE.(Formoreonthistopic,
refertothecommanddescriptiononpage11-8.)
ConfiguredType:ListsthetypeofPDconnectedtoeachport
(asconfiguredbytheuseronthePDdevice).Forexample:
Telephone,Webcam,Wireless,Other.
DetectionStatus:
Searching:TheportistryingtodetectaPDconnection.
Delivering:TheportisdeliveringpowertoaPD.
Disabled:PoEsupportisdisabledontheport.Tore-enable,
refertoConfiguringPoEOperationonpage11-7.
Fault:TheswitchdetectsaproblemwiththeconnectedPD.
PowerClass:Showsthe802.3afpowerclassofthePDdetected
ontheindicatedport(asconfiguredbytheuseronthePD
device).Classesinclude:
0:0.44wto12.95w 3:6.49wto12.95w
1:0.44wto3.84w 4:reserved
2:3.84wto6.49w
Forexample,showmanagement-briefdisplaysthisoutput:
Ports1through4are
deliveringpower.
Theremainingports
areavailableto
supplypower,but
currentlydonot
detectaconnected
PD.
Figure11-3.ExampleofShowManagement-BriefOutput
11-12
DisplayingthePoEStatusonSpecificPorts
Syntax:showpower-management<port-list>
DisplaysthefollowingPoEstatusandstatistics(sincethelast
reboot)foreachportin<port-list>:
PowerEnable:ShowsYesforportsenabledtosupportPoE(the
default)andNoforportsonwhichPoEisdisabled.
Priority:Liststhepowerpriority(Low,High,andCritical)
configuredonportsenabledforPoE.(Formoreonthistopic,
refertothepowercommanddescriptionunderConfiguring
PoEOperationonpage11-7.)
DetectionStatus:
Searching:TheportisavailabletosupportaPDconnection.
Delivering:TheportisdeliveringpowertoaPD.
Disabled:PoEsupportisdisabledontheport.Tore-enable
PoEsupport,refertoConfiguringPoEOperationon
page11-7.
Fault:TheswitchdetectsaproblemwiththeconnectedPD.
OverCurrentCnt:ShowsthenumberoftimesaconnectedPD
hasattemptedtodrawmorethan15.4watts.Each
occurrencegeneratesanEventLogmessage.
PowerDeniedCnt:ShowsthenumberoftimesPDsrequesting
powerontheporthavebeendeniedduetoinsufficientpower
available.EachoccurrencegeneratesanEventLogmessage.
Voltage:Thetotalvoltage,indV,beingdeliveredtoPDs.
Power:Thetotalpower,inmW,beingdeliveredtoPDs.
ConfiguredType:ShowsthetypeofPDdetectedontheport.
PowerClass: ShowsthepowerclassofthePDdetectedonthe
indicatedport.Classesinclude:
0:0.44wto12.95w 3:6.49wto12.95w
1:0.44wto3.84w 4:reserved
2:3.84wto6.49w
MPSAbsentCnt: Thisvalueshowsthenumberoftimesa
detectedPDhasnolongerrequestedpowerfromtheport.
EachoccurrencegeneratesanEventLogmessage.(MPS
referstotheMaintenancePowerSignature.Referto
Terminologyonpage11-3.)
ShortCnt:Showsthenumberoftimestheswitchprovided
insufficientcurrenttoaconnectedPD.
Current:Thetotalcurrent,inmA,beingdeliveredtoPDs.
11-13

PlanningandImplementingaPoEConfiguration
Forexample,ifyouwantedtoviewthePoEstatusofport5,youwoulduse
showpower-management5todisplaythedata:
Pr oCur ve( conf i g) # show power - management 5
St at us and Count er s - Por t Power St at us f or por t 5
Power Enabl e : Yes
Pr i or i t y : Low Conf i gur ed Type :
Det ect i on St at us : Del i ver i ng Power Cl ass : 0
Over Cur r ent Cnt : 0 MPS Absent Cnt : 2
Power Deni ed Cnt : 0 Shor t Cnt : 0
Vol t age : 545 dV Cur r ent : 13 mA
Power : 711 mW
Figure11-4.ExampleofShowPower-ManagementOutput
PlanningandImplementingaPoE
Configuration
ThissectionprovidesanoverviewofsomeconsiderationsforplanningaPoE
application.Foradditionalinformation,refertotheProCurvePoEPlanning
andImplementationGuide.
AssigningPoEPortstoVLANs
IfyournetworkincludesVLANs,youmaywanttoassignvariousPoE-
configuredportstospecificVLANs.Forexample,ifyouareusingPoE
telephonesinyournetwork,youmaywanttoassignportsusedfortelephone
accesstoaVLANreservedfortelephonetraffic.
ApplyingSecurityFeaturestoPoEConfigurations
Youcanutilizesecurityfeaturesbuiltintotheswitchtocontroldeviceoruser
accesstothenetworkthroughPoEportsinthesamewayasnon-PoEports.
11-14
PoEEventLogMessages
MACAddressSecurity:UsingPortSecurity,youcanconfigureeach
switchportwithauniquelistofuptoeightMACaddressesfordevices
thatareauthorizedtoaccessthenetworkthroughthatport.Formore
information,refertothechaptertitledConfiguringandMonitoring
PortSecurityintheAccessSecurityGuideforyourswitch.
Username/PasswordSecurity:Ifyouareconnectingadevicethat
allowsyoutoenterausernameandpasswordthatisforwardedtoa
networkedserverforauthentication,thenyoucanalsoconfigurethe
followingsecurityfeatures:
TACACS+
RADIUSAuthenticationandAccounting
802.1XAuthentication
Formoreinformation,refertotheAccessSecurityGuideforyourswitch.
PoEEventLogMessages
PoEoperationgeneratestheseEventLogmessages.Youcanalsoconfigure
theswitchtosendthesemessagestoaconfigureddebugdestination(terminal
deviceorSyslogserver).
I1MM/DD/YY HH:MM:SSchassis:
Messageheader,withseverity,date,systemtime,andsystem
moduletype.FormoreinformationonEventLogoperation,refer
totheTroubleshootingappendixintheManagementand
ConfigurationGuideforyourswitch.
ExtPowerSupplyconnected,supplying<actual-power>Wof
<avail-power >Wmax.
TheswitchdetectedanEPS(ExternalPowerSupply)andbegan
receivingthewattageindicatedby<actual-power>.The<avail-
power>fieldindicatesthemaximumpower(wattage)the
detectedEPSiscapableofdelivering
ExtPowerSupplydisconnected
Theswitchhaslostcontactwithanexternalpowersupply.
11-15
PoEEventLogMessages
POEusageisbelowconfiguredthresholdof <1-99>%
<slot-#>POEusageisbelowconfiguredthresholdof<1-99>%
IndicatesthatPOEusageintheswitchorindicatedslot(ifthe
switchincludesmoduleslots)hasdecreasedbelowthethreshold
specifiedbythelastexecutionoftheglobalpowerthreshold<1- 99>
command.Thismessageoccursif,afterthelastreboot,thePoE
demandontheswitchexceededthepowerthresholdandthenlater
droppedbelowthethresholdvalue.
Port<port-#>applyingpowertoPD.
APoEdeviceisconnectedtotheportandreceivingpower.
Port<port-#>PDdetected.
TheswitchhasdetectedaPoEdeviceconnectedtotheport.
W MM/DD/YY HH:MM:SSchassis:
Messageheader,withseverity,date,systemtime,andsystem
moduletype.FormoreinformationonEventLogoperation,refer
totheTroubleshootingappendixintheManagementand
ExtPowerSupplyconnectedbutnotresponding.
Theswitchdetectsanexternalpowersupply,butisnotreceiving
powerfromthedevice.
ExtPowerSupplyfailure:<fault-type>Failures:
Indicatesanexternalpowersupplyfailurewhere <fault-type>is
oneofthefollowing:
OverCurrentfault:TheProCurve600RPS/EPSorProCurve
610EPSreportedafaultcondition.ContactyourProCurve
supportrepresentative.
Fanfault:Afaninanexternalpowersupplyhasfailed.
Temperaturefault:Theoperatingtemperatureinanexternal
powersupplyhasexceededthenormaloperatingrange.
50Vfault:TheProCurve600RPS/EPSorProCurve610EPS
reportedafaultcondition.ContactyourProCurvesupport
representative.
12Vfault:TheProCurve600RPS/EPSorProCurve610EPS
reportedafaultcondition.ContactyourProCurvesupport
representative.
11-16
PoEEventLogMessages
POEusagehasexceededthresholdof<1-99>%
<slot-#>POEusagehasexceededthresholdof<1-99>%
IndicatesthatPOEusageintheswitchorindicatedslot(ifthe
switchincludesmoduleslots)hasexceededtheconfigured
thresholdfortheswitch,asspecifiedbythelastexecutionofthe
powerthreshold<1-99>command.(Notethattheswitchalso
generatesanSNMPtrapforthisevent.)
Port<port-#>PDDeniedpowerduetoinsufficientpower
allocation.
ThereisinsufficientpoweravailabletopowerthePDonthe
indicatedportandtheportdoesnothavesufficientPoEpriority
totakepowerfromanotheractivePoEport.
Port< port-# >PDInvalidSignatureindication.
Theswitchhasdetectedanon802.3af-compliantload.
Port<port-#>PDMPSAbsentindication.
Theswitchnolongerdetectsadeviceon<port-#>.Thedevice
mayhavebeendisconnected,powereddown,orstopped
functioning.
Port<port-# >PDOtherFaultindication.
ThereisaproblemwiththePDconnectedtotheport.
Port<port-# >PDOverCurrentindication.
ThePDconnectedto<port-# >hasrequestedmorethan15.4watts
ofpower.Thismayindicateashort-circuitorotherproblemin
thePD.
11-17
PoEEventLogMessages
11-18
12
PortTrunking
Contents
Overview ..................................................... 12-2
PortStatusandConfiguration . .................................. 12-2
PortConnectionsandConfiguration .......................... 12-3
LinkConnections ....................................... 12-3
PortTrunkOptionsandOperation ............................ 12-3
TrunkConfigurationMethods .. .............................. 12-4
Menu:ViewingandConfiguringaStaticTrunkGroup............ 12-8
PortTrunkGroup ......................................... 12-10
UsingtheCLIToViewPortTrunks ....................... 12-10
UsingtheCLIToConfigureaStaticorDynamicTrunkGroup 12-12
Web:ViewingExisting PortTrunkGroups .................... 12-15
TrunkGroupOperationUsingLACP ......................... 12-15
DefaultPortOperation ................................. 12-18
LACPNotesandRestrictions ............................ 12-19
TrunkGroupOperationUsingtheTrunkOption.............. 12-21
HowtheSwitchListsTrunkData ............................ 12-21
OutboundTrafficDistributionAcrossTrunkedLinks ........... 12-22
12-1
PortTrunking
Overview
Overview
Thischapterdescribescreatingandmodifyingporttrunkgroups.This
includesnon-protocoltrunksandLACP(802.3ad)trunks.
PortStatusandConfiguration
viewingporttrunks n/a page12-8 page12-10 page12-15
configuringastatictrunk none page12-8 page12-13
group
configuringadynamicLACP LACPpassive page12-14
trunkgroup
Porttrunkingallowsyoutoassignphysicallinkstoonelogicallink(trunk)
thatfunctionsasasingle,higher-speedlinkprovidingdramaticallyincreased
bandwidth.Thiscapabilityappliestoconnectionsbetweenbackbonedevices
aswellastoconnectionsinothernetworkareaswheretrafficbottlenecks
exist.
PortTrunkingSupport ProCurve Switch
2610-24
ProCurveSwitch
2610-48
Portspertrunk(maximum) 8 8
Trunksperswitch(maximum) 12 24
Atrunkgroupisasetofportsconfiguredasmembersofthesameporttrunk.
Notethattheportsinatrunkgroupdonothavetobeconsecutive.For
example:
12-2
PortTrunking
Themultiplephysicallinksinatrunkbehaveasonelogicallink
Switch1:
Portsc1-c4
configured
asaport
trunkgroup.
portc1
portc2
portc3
portc4
portc5
portc6
portc7
...
portn
porta1
porta2
porta3
porta4
porta5
porta6
porta7
...
portn
Switch2:
Portsa2and
a4-a6are
configuredas
aporttrunk
group
Figure12-1.ConceptualExampleofPortTrunking
PortConnectionsandConfiguration
Allporttrunklinksmustbepoint-to-pointconnectionsbetweentheswitch
andarouter,server,workstation,oranotherswitchconfiguredforport
trunking.Nointervening,non-trunkingdevicesareallowed.Itisimportantto
notethatportsonbothendsofaporttrunkgroupmusthavethesamemode
(speedandduplex)andflowcontrolsettings.
Not e LinkConnections
Theswitchdoesnotsupporttrunkingthroughanintermediate,non-trunking
devicesuchasahub,orusingmorethanonemediatypeinaporttrunkgroup.
Similarly,alllinksinthesametrunkgroupmusthavethesamespeed,duplex,
andflowcontrol.
Ca u t i o n Toavoidbroadcaststormsorloopsinyournetworkwhileconfiguringa
trunk,firstdisableordisconnectallportsyouwanttoaddtoorremovefrom
thetrunk.Afteryouconfigurethetrunk,enableorre-connecttheports.
PortTrunkOptionsandOperation
Theswitchofferstheseoptionsforporttrunking:
LACP(IEEE802.3adpage12-15)
Trunk(non-protocolpage12-21)
TheProCurve2610-24switchsupportstwelvetrunkgroupsofuptoeightports
each.TheProCurve2610-48supportstwenty-fourtrunkgroupsofuptoeight
portseach.(UsingtheLinkAggregationControlProtocolLACPoption,
youcanincludestandbytrunkedportsinadditiontothemaximumoffour
activelytrunkingports.)
12-3
PortTrunking
L ACP No t e LACPoperationrequiresfull-duplex(FDx)links.Formostinstallations,
ProCurverecommendsthatyouleavetheportModesettingsatAuto(the
default).LACPalsooperateswithAuto-10,Auto-100,andAuto-1000(ifnegotia-
tionselectsFDx);10FDx,100FDx,and1000FDxsettings.
FaultTolerance: Ifalinkinaporttrunkfails,theswitchredistributes
trafficoriginallydestinedforthatlinktotheremaininglinksinthetrunk.The
trunkremainsoperableaslongasthereisatleastonelinkinoperation.Ifa
linkisrestored,thatlinkisautomaticallyincludedinthetrafficdistribution
again.TheLACPoptionalsooffersastandbylinkcapability,whichenables
youtokeeplinksinreserveforserviceifoneormoreoftheoriginalactive
linksfails.SeeTrunkGroupOperationUsingLACPonpage12-15.)
TrunkConfigurationMethods
DynamicLACPTrunk:Theswitchautomaticallynegotiatestrunkedlinks
betweenLACP-configuredportsonseparatedevices,andoffersonedynamic
trunkoptionLACP.ToconfiguretheswitchtoinitiateadynamicLACPtrunk
withanotherdevice,usetheinterfaceethernetcommandintheCLItosetthe
defaultLACPoptiontoActiveontheportsyouwanttouseforthetrunk.For
example,thefollowingcommandconfiguresportsC1-C4toLACPactive:
ProCurve(config)intc1-c4lacpactive
Notethattheaboveexampleworksiftheportsarenotalreadyoperatingina
trunk.TochangetheLACPoptiononportsalreadyoperatingasatrunk,you
mustfirstdisablethetrunkedportsthatyouwanttoreconfigure.Forexample,
ifportsC1-C4wereLACP-activeandoperatinginatrunkwithanotherdevice,
youwoulddothefollowingtochangethemtoLACP-passive:
1. Gototheportcontextforportsc1- c4anddisabletheseports.
ProCurve(config)#interfacec1-c4
ProCurve(eth-c1-c4)#_
ProCurve(eth-c1-c4)#disable
2. ChangeallfourportstoLACP-passiveandre-enabletheports.
ProCurve(eth-c1-c4)#lacppassive
ProCurve(eth-c1-c4)#enable
Not e Ifyouchangetheporttrunkconfigurationonalink,ensurethattheporttrunk
configurationontheotherendofthelinkmatchesthenewconfiguration.
StaticTrunk:TheswitchusesthelinksyouconfigurewiththePort/Trunk
SettingsscreeninthemenuinterfaceorthetrunkcommandintheCLItocreate
astaticporttrunk.TheswitchoffersLACPandTrunkstatictrunks.
12-4
PortTrunking
Table12-1. TrunkTypesUsedinStaticandDynamicTrunkGroups
TrunkingMethod LACP Trunk
Dynamic Yes No
Static Yes Yes
Table12-2.TrunkConfigurationProtocols
Protocol TrunkingOptions
LACP ProvidesdynamicandstaticLACPtrunkingoptions.
(802.3ad)
DynamicLACPUsetheswitch-negotiateddynamicLACPtrunkwhen:
TheportontheotherendofthetrunklinkisconfiguredforActiveorPassiveLACP.
Youwanttoachievefault-toleranceforhigh-availabilityapplicationswhereyouwantuptoaneight-
linktrunkwithoneormorestandbylinksavailableincaseanactivelinkgoesdown.(Bothendsofthe
linkmustbedynamicLACP.)
StaticLACPUsethemanuallyconfiguredstaticLACPtrunkwhen:
TheportontheotherendofthetrunklinkisconfiguredforastaticLACPtrunk
Youwanttoconfigurenon-defaultspanningtree(STP)orIGMPparametersonanLACPtrunkgroup.
YouwantanLACPtrunkgrouptooperateinaVLANotherthanthedefaultVLANandGVRPisdisabled.
(RefertoVLANsandDynamicLACPonpage12-20.)
YouwanttouseamonitorportontheswitchtomonitoranLACPtrunk.
SeeTrunkGroupOperationUsingLACPonpage12-15.
Trunk Providesmanuallyconfigured,static-onlytrunkingto:
(non- MostProCurveswitchesandroutingswitchesnotrunningthe802.3adLACPprotocol.
protocol)
WindowsNTandHP-UXworkstationsandservers
UsetheTrunkoptionwhen:
Thedevicetowhichyouwanttocreateatrunklinkisusinganon-802.3adtrunkingprotocol
Youareunsurewhichtypeoftrunktouse,orthedevicetowhichyouwanttocreateatrunklinkis
usinganunknowntrunkingprotocol.
Youwanttouseamonitorportontheswitchtomonitortrafficonatrunk.
RefertoTrunkGroupOperationUsingtheTrunkOptiononpage12-21.
12-5
PortTrunking
Table12-3. GeneralOperatingRulesforPortTrunks
Media:Allportsonbothendsofatrunkgroupmusthavethesamemediatypeandmode(speedandduplex).Theswitch
blocksanytrunkedlinksthatdonotconformtothisrule.(Fortheswitchescoveredinthisguide,ProCurverecommends
leavingtheportModesettingatAutoor,innetworksusingCat3cabling,Auto-10.)
PortConfiguration:ThedefaultportconfigurationisAuto,whichenablesaporttosensespeedandnegotiateduplex
withanAuto-enabledportonanotherdevice.ProCurverecommendsthatyouusetheAutosettingforallportsyouplan
tousefortrunking.Otherwise,youmustmanuallyensurethatthemodesettingforeachportinatrunkiscompatiblewith
theotherportsinthetrunk.
RecommendedPortModeSettingforLACP
Allofthefollowingoperateonaper-portbasis,regardlessoftrunkmembership:
Enable/Disable
Flowcontrol(FlowCtrl)
LACPisafull-duplexprotocol.SeeTrunkGroupOperationUsingLACPonpage12-15.
TrunkConfiguration:Allportsinthesametrunkgroupmustbethesametrunktype(LACPorTrunk).AllLACPportsinthe
sametrunkgroupmustbeeitherallstaticLACPoralldynamicLACP.
AtrunkappearsasasingleportlabeledDyn1(foranLACPdynamictrunk)orTrk1(forastatictrunkofanytype:
LACPorTrunk)onvariousmenuandCLIscreens.Foralistingofwhichscreensshowwhichtrunktypes,seeHowthe
SwitchListsTrunkDataonpage12-21.
ForSTPorVLANoperation,configurationforallportsinatrunkisdoneatthetrunklevel.(Youcannotseparatelyconfigure
individualportswithinatrunkforSTPorVLANoperation.)
TrafficDistribution:AlloftheswitchtrunkprotocolsusetheSA/DA(SourceAddress/DestinationAddress)methodof
distributingtrafficacrossthetrunkedlinks.SeeOutboundTrafficDistributionAcrossTrunkedLinksonpage12-22.
12-6
PortTrunking
SpanningTree:SpanningTreeoperatesasaglobalsettingontheswitch(oneinstanceofSpanningTreeperswitch).
However,youcanadjustSpanningTreeparametersonaper-portbasis.AstatictrunkofanytypeappearsintheSpanning
Treeconfigurationdisplay,andyoucanconfigureSpanningTreeparametersforastatictrunkinthesamewaythatyou
wouldconfigureSpanningTreeparametersonanon-trunkedport.(Notethattheswitchliststhetrunkbynamesuch
asTrk1anddoesnotlisttheindividualportsinthetrunk.)Forexample,ifportsC1andC2areconfiguredasastatic
trunknamedTrk1,theyarelistedintheSpanningTreedisplayasTrk1anddonotappearasindividualportsintheSpanning
Treedisplays.
Inthisexampleshowing
partoftheshowspanning-
treelisting,portsC1andC2
aremembersofTRK1and
donotappearasindividual
portsintheport
configurationpartofthe
listing.
WhenSpanningTreeforwardsonatrunk,allportsinthetrunkwillbeforwarding.Conversely,whenSpanningTreeblocks
atrunk,allportsinthetrunkareblocked.
Note:AdynamicLACPtrunkoperatesonlywiththedefaultSpanningTreesettingsanddoesnotappearintheSpanning
Treeconfigurationdisplayorshowipigmplisting.
Ifyouremoveaportfromastatictrunk,theportretainsthesameSpanningTreesettingsthatwereconfiguredforthetrunk.
IPMulticastProtocol(IGMP):AstatictrunkofanytypeappearsintheIGMPconfigurationdisplay,andyoucanconfigure
IGMPforastatictrunkinthesamewaythatyouwouldconfigureIGMPonanon-trunkedport.(Notethattheswitchlists
thetrunkbynamesuchasTrk1anddoesnotlisttheindividualportsinthetrunk.)Also,creatinganewtrunk
automaticallyplacesthetrunkinIGMPAutostatusifIGMPisenabledforthedefaultVLAN. AdynamicLACPtrunk
operatesonlywiththedefaultIGMPsettingsanddoesnotappearintheIGMPconfigurationdisplayorshowipigmp
listing.
VLANs:CreatinganewtrunkautomaticallyplacesthetrunkintheDEFAULT_VLAN,regardlessofwhethertheportsin
thetrunkwereinanotherVLAN.Similarly,removingaportfromatrunkgroupautomaticallyplacestheportinthedefault
VLAN.YoucanconfigureastatictrunkinthesamewaythatyouconfigureaportformembershipinanyVLAN.
Note:ForadynamictrunktooperateinaVLANotherthanthedefaultVLAN(DEFAULT_VLAN),GVRPmustbeenabled.
SeeTrunkGroupOperationUsingLACPonpage12-15.
PortSecurity:Trunkgroups(andtheirindividualports)cannotbeconfiguredforportsecurity,andtheswitchexcludes
trunkedportsfromtheshowport-securitylisting.Ifyouconfigurenon-defaultportsecuritysettingsforaport,then
subsequentlytrytoplacetheportinatrunk,youwillseethefollowingmessageandthecommandwillnotbeexecuted:
<port-list >Command cannot operate over a logical port.
MonitorPort:
Note:Atrunkcannotbeamonitorport.AmonitorportcanmonitorastatictrunkbutcannotmonitoradynamicLACP
trunk.
12-7
PortTrunking
Menu:ViewingandConfiguringaStaticTrunkGroup
Important Configureporttrunkingbeforeyouconnectthetrunkedlinkstoanother
switch,routingswitch,orserver.Otherwise,abroadcaststormcouldoccur.
(Ifyouneedtoconnecttheportsbeforeconfiguringthemfortrunking,you
cantemporarilydisabletheportsuntilthetrunkisconfigured.SeeUsingthe
CLIToConfigurePortsonpage10-11.)
ToViewand/orConfigureStaticPortTrunking:Thisprocedureuses
thePort/TrunkSettingsscreentoconfigureastaticporttrunkgrouponthe
switch.
1. FollowtheproceduresintheImportantnoteabove.
2.Port/TrunkSettings
3. Press[E](forEdit)andthenusethearrowkeystoaccesstheporttrunk
parameters.
Thesetwocolumnsindicate
statictrunkstatus.
(FordynamicLACPtrunk
status,usetheCLIshowlacp
commandpage12-12.)
Figure12-2.ExampleoftheMenuScreenforConfiguringaPortTrunkGroup
4. IntheGroupcolumn,movethecursortotheportyouwanttoconfigure.
5. UsetheSpacebartochooseatrunkgroup(Trk1,Trk2...)trunkgroup
assignmentfortheselectedport.
12-8
PortTrunking
Allportsinatrunkmusthavethesamemediatypeandmode(such
as10/100TXsetto100FDx,or100FXsetto100FDx).Theflowcontrol
settingsmustalsobethesameforallportsinagiventrunk.Toverify
thesesettings,seeViewingPortStatusandConfiguringPortParam-
etersonpage10-3.
Youcanconfigurethetrunkgroupwithupto8portspertrunk.If
multipleVLANsareconfigured,allportswithinatrunkwillbe
assignedtothesameVLANorsetofVLANs.(Withthe802.1QVLAN
capabilitybuiltintotheswitch,morethanoneVLANcanbeassigned
toatrunk.SeethechapterPort-BasedVirtualLANs(VLANs)and
GVRPintheAdvancedTrafficManagementGuide.)
(Toreturnaporttoanon-trunkstatus,keeppressingtheSpacebar
untilablankappearsinthehighlightedGroupvalueforthatport.)
Figure12-3.ExampleoftheConfigurationforaTwo-PortTrunkGroup
6. MovethecursortotheTypecolumnfortheselectedportandusethe
Spacebartoselectthetrunktype:
LACP
Trunk(thedefaulttypeifyoudonotspecifyatype)
Allportsinthesametrunkgrouponthesameswitchmusthavethesame
Type(LACPorTrunk).
7. Whenyouarefinishedassigningportstothetrunkgroup,press[Enter],
then[S](forSave)andreturntotheMainMenu.(Itisnotnecessaryto
reboottheswitch.)
DuringtheSaveprocess,trafficontheportsconfiguredfortrunkingwill
bedelayedforseveralseconds.IftheSpanningTreeProtocolisenabled,
thedelaymaybeupto30seconds.
12-9
PortTrunking
8. Connectthetrunkedportsontheswitchtothecorrespondingportson
theoppositedevice.Ifyoupreviouslydisabledanyofthetrunkedports
ontheswitch,enablethemnow.(SeeViewingPortStatusandConfigur-
ingPortParametersonpage10-3.)
ChecktheEventLog(UsingLoggingToIdentifyProblemSourcesonpage
C-21)toverifythatthetrunkedportsareoperatingproperly.
PortTrunkGroup
TrunkStatusandConfigurationCommands
showtrunks below
showlacp page12-12
trunk page12-13
interfacelacp page12-14
UsingtheCLIToViewPortTrunks
Youcanlistthetrunktypeandgroupforallportsontheswitchorforselected
ports.YoucanalsolistLACP-onlystatusinformationforLACP-configured
ports.
ListingStaticTrunkTypeandGroupforAllPortsorSelectedPorts.
Syntax: showtrunks[<port-list>]
Omittingthe<port-list>parameterresultsinastatictrunkdatalistingforall
LANportsintheswitch.Forexample,inaswitchwhereportsA4andA5
belongtoTrunk1andportsA7andA8belongtoTrunk2,youhavetheoptions
showninfigures12-4and12-5fordisplayingportdataforportsbelongingto
statictrunks.
12-10
PortTrunking
Usingaportlistspecifies,forswitchportsinastatictrunkgroup,onlythe
portsyouwanttoview.Inthiscase,thecommandspecifiesportsA5through
A7.However,becauseportA6isnotinastatictrunkgroup,itdoesnotappear
intheresultinglisting:
PortA5appearswithanexampleofanamethatyoucanoptionallyassignusingthe
FriendlyPortNamesfeature.(SeeUsingFriendly(Optional)PortNamesonpage10-34.)
PortA6doesnotappearinthislistingbecause
itisnotassignedtoastatictrunk.
Figure12-4.ExampleListingSpecificPortsBelongingtoStaticTrunks
Theshowtrunks<port-list>commandintheaboveexampleincludesaport
list,andthusshowstrunkgroupinformationonlyforspecificportsthathave
membershipinastatictrunk.Infigure12-5,thecommanddoesnotincludea
portlist,sotheswitchlistsallportshavingstatictrunkmembership.
Figure12-5.ExampleofaShowTrunkListingWithoutSpecifyingPorts
12-11
PortTrunking
ListingStaticLACPandDynamicLACPTrunkData.Thiscommand
listsdataforonlytheLACP-configuredports.
Syntax: showlacp
Inthefollowingexample,portsA1andA2havebeenpreviouslyconfigured
forastaticLACPtrunk.(FormoreonActive,seetable12-5onpage12-18.)
Figure12-6. ExampleofaShowLACPListing
DynamicLACPStandbyLinks.DynamicLACPtrunkingenablesyouto
configurestandbylinksforatrunkbyincludingmorethanthemaximum
numberofallowedportsinadynamicLACPtrunkconfiguration.Whenthe
maximumnumberofallowedports(trunklinks)areup,theremaininglink(s)
willbeheldinstandbystatus.IfatrunkedlinkthatisUpfails,itwillbe
replacedbyastandbylink,whichmaintainsyourintendedbandwidthforthe
trunk.(SeealsotheStandbyentryunderPortStatusintable12-5,"LACP
PortStatusData",onpage12-18.)
UsingtheCLIToConfigureaStaticorDynamicTrunkGroup
I mp o r t a n t Configureporttrunkingbeforeyouconnectthetrunkedlinksbetween
switches.Otherwise,abroadcaststormcouldoccur.(Ifyouneedtoconnect
theportsbeforeconfiguringthemfortrunking,youcantemporarilydisable
theportsuntilthetrunkisconfigured.SeeUsingtheCLIToConfigurePorts
onpage10-11.)
12-12
PortTrunking
Onthe2610-24switchyoucanconfigureuptotwelveporttrunkgroupshaving
uptoeightlinkseach(withadditionalstandbylinksifyoureusingdynamic
LACP).Onthe2610-48switchyoucanconfigureuptotwenty-fourporttrunk
groupshavinguptoeightlinkseach.Youcanconfiguretrunkgrouptypesas
follows:
TrunkType TrunkGroupMembership
TrkX(Static) DynX(Dynamic)
LACP Yes Yes
Trunk Yes No
Not e TrunksconfiguredasFEC(FastEthernetChannel)arenotsupported.To
configureporttrunkgroups,usestaticorLACPtrunks.Forreleasenotes
describingthelatestsoftwareupdates,visittheProCurveNetworkingwebsite
atwww.procurve.com.ClickonTechnicalsupport,andthenclickon
Productmanuals.
Thefollowingexamplesshowhowtocreatedifferenttypesoftrunkgroups.
ConfiguringaStaticTrunkorStaticLACPTrunkGroup.
Forthe2610-24switch:
Syntax: trunk<port-list><trk1...trk12><trunk|lacp>
Forthe2610-48switch:
Syntax: trunk<port-list><trk1...trk24><trunk|lacp>
ThefollowingexampleusesportsC4-C6tocreateanon-protocolstatictrunk
groupwiththegroupnameofTrk2.
ProCurve(config)#trunkc4-c6trk2trunk
RemovingPortsfromaStaticTrunkGroup.Thiscommandremoves
oneormoreportsfromanexistingTrkxtrunkgroup.
Ca u t i o n Removingaportfromatrunkcanresultinaloopandcauseabroadcaststorm.
WhenyouremoveaportfromatrunkwhereSTPisnotinuse,ProCurve
recommendsthatyoufirstdisabletheportordisconnectthelinkonthatport.
Syntax: notrunk<port-list>
ThisexampleremovesportsC4andC5fromanexistingtrunkgroup.
12-13
PortTrunking
ProCurve(config)#notrunkc4-c5
EnablingaDynamicLACPTrunkGroup.Inthedefaultportconfigura-
tion,allportsontheswitcharesettoLACPPassive.However,toenablethe
switchtoautomaticallyformatrunkgroupthatisdynamiconbothendsof
thelink,theportsononeendofasetoflinksmustbeLACPActive.Theports
ontheotherendcanbeeitherLACPActiveorLACPPassive.Thiscommand
enablestheswitchtoautomaticallyestablishadynamicLACPtrunkgroup
whenthedeviceportsontheotherendofthelinkareconfiguredforLACP
Passive.
SwitchA
withportsset
toLACP
passive(the
default).
SwitchB
withportsset
toLACP
passive(the
default).
DynamicLACPtrunkcannotautomaticallyformbecauseboth
endsofthelinksareLACPpassive.
(InthiscaseSTPblockingisneededtopreventaloop.
SwitchA
withportsset
toLACP
active.
SwitchB
withportsset
toLACP
passive(the
default).
DynamicLACPtrunkautomaticallyformsbecauseboth
endsofthelinksareLACPandatleastoneendisLACP
active.(STPisnotneeded,andtheclearadvantagesare
increasedbandwidthandfault-tolerance.)
Figure12-7.ExampleofCriteriaforAutomaticallyFormingaDynamicLACPTrunk
Syntax: interface<port-list>lacpactive
ThisexampleusesportsC4andC5toenableadynamicLACPtrunkgroup.
ProCurve(config)#interfacec4-c5lacpactive
RemovingPortsfromaDynamicLACPTrunkGroup. Toremoveaport
fromdynamicLACPtrunkoperation,youmustturnoffLACPontheport.(On
aportinanoperating,dynamicLACPtrunk,youcannotchangebetweenLACP
ActiveandLACPpassivewithoutfirstremovingLACPoperationfromthe
port.)
12-14
PortTrunking
Ca u t i o n UnlessSTPisrunningonyournetwork,removingaportfromatrunkcan
resultinaloop.Tohelppreventabroadcaststormwhenyouremoveaport
fromatrunkwhereSTPisnotinuse,ProCurverecommendsthatyoufirst
disabletheportordisconnectthelinkonthatport.
Syntax: nointerface<port-list>lacp
Inthisexample,portC6belongstoanoperating,dynamicLACPtrunk.To
removeportC6fromthedynamictrunkandreturnittopassiveLACP,you
woulddothefollowing:
ProCurve>(config)#nointerfacec6lacp
ProCurve>(config)#interfacec6lacppassive
Notethatintheaboveexample,iftheportontheotherendofthelinkis
configuredforactiveLACPorstaticLACP,thetrunkedlinkwillbere-
establishedalmostimmediately.
Web:ViewingExistingPortTrunkGroups
Whilethewebbrowserinterfacedoesnotenableyoutoconfigureaporttrunk
group,itdoesprovideaviewofanexistingtrunkgroup.
Toviewanyporttrunkgroups:
ClickontheStatustab.
ClickonPortStatus.
TrunkGroupOperationUsingLACP
TheswitchcanautomaticallyconfigureadynamicLACPtrunkgrouporyou
canmanuallyconfigureastaticLACPtrunkgroup.
Not e LACPrequiresfull-duplex(FDx)linksofthesamemediatype(10/100Base-T,
100FX,etc.)andthesamespeed,andenforcesspeedandduplexconformance
acrossatrunkgroup.
12-15
PortTrunking
LACPtrunkstatuscommandsinclude:
TrunkDisplayMethod StaticLACPTrunk DynamicLACPTrunk
CLIshowlacpcommand Includedinlisting. Includedinlisting.
CLIshowtrunkcommand Includedinlisting. Notincluded.
Port/TrunkSettingsscreeninmenuinterface Includedinlisting. Notincluded
Thus,todisplayalistingofdynamicLACPtrunkports,youmustusetheshow
lacpcommand.
Not e DynamicLACPtrunksoperateonlyinthedefaultVLAN(unlessGVRPis
enabledandForbidisusedtopreventthetrunkedportsfromjoiningthedefault
VLAN).Thus,ifanLACPdynamictrunkformsusingportsthatarenotinthe
defaultVLAN,thetrunkwillautomaticallymovetothedefaultVLANunless
GVRPoperationisconfiguredtopreventthisfromoccurring.Insomecases,
thiscancreateatrafficloopinyournetwork.Formoreonthistopic,referto
VLANsandDynamicLACPonpage12-20.
Inmostcases,trunksconfiguredforLACPoperateasdescribedintable12-4
onthenextpage.
12-16
PortTrunking
Table12-4. LACPTrunkTypes
LACPPortTrunk
Configuration
Operation
DynamicLACP Thisoptionautomaticallyestablishesan802.3ad-complianttrunkgroup,withLACPfortheportType
parameterandDynXfortheportGroupname,whereXisanautomaticallyassignedvaluefrom1to12
(ProCurve2610-24)or1-24(ProCurve2610-48),dependingonhowmanydynamicandstatictrunksare
currentlyontheswitch.(TheProCurveSwitch2610-24allowamaximumoftwelvetrunkgroupsinany
combinationofstaticanddynamictrunks;theProCurveswitch2610-48allowsamaximumoftwenty-
fourtrunkgroupsinanycombinationofstaticanddynamictrunks.)
Underthefollowingconditions,theswitchautomaticallyestablishesadynamicLACPporttrunkgroup
andassignsaportGroupname:
Theportsonbothendsofalinkhavecompatiblemodesettings(speedandduplex).
TheportononeendofalinkmustbeconfiguredforLACPActiveandtheportontheotherendof
thesamelinkmustbeconfiguredforeitherLACPPassive(thedefault)orLACPActive.Forexample:
Switch1 Switch2
PortX:
LACPEnable:Active
Active-to-Active
PortA:
LACPEnable:Active
PortY:
LACPEnable:Active
Active-to-Passive
PortB:
LACPEnable:Passive
EitheroftheabovelinkconfigurationsallowadynamicLACPtrunklink.
StandbyLinks:Amaximumofeightoperatinglinksareallowedinthetrunk,but,withdynamicLACP,
youcanconfigureoneormorebackuplinksthattheswitchautomaticallyactivatesifaprimarylink
fails.ToconfigurealinkasastandbyforanexistingdynamicLACPtrunk,ensurethattheportsinthe
standbylinkareconfiguredthesameaseitheroftheaboveexamples.
DisplayingDynamicLACPTrunkData:TolisttheconfigurationandstatusforadynamicLACPtrunk,
usetheCLIshowlacpcommand.
Note:Thedynamictrunkisautomaticallycreatedbytheswitch,andisnotlistedinthestatictrunk
listingsavailableinthemenuinterfaceorintheCLIshowtrunklisting.
StaticLACP Thetrunkoperatesifthetrunkgroupontheoppositedeviceisrunningoneofthefollowingtrunking
protocols:
ActiveLACP
PassiveLACP
Trunk
ThisoptionusesLACPfortheportTypeparameterandTrkXfortheportGroupparameter,whereX
isanautomaticallyassignedvaluefrom1to12(ProCurve2610-24)or1-24(ProCurve2610-48)depending
onhowmanystatictrunksarecurrentlyoperatingontheswitch.(Theswitchallowsthemaximum
numberoftrunkgroupsinanycombinationofstaticanddynamictrunks.)
DisplayingStaticLACPTrunkData:TolisttheconfigurationandstatusforastaticLACPtrunk,usethe
CLIshowlacpcommand.TolistastaticLACPtrunkwithitsassignedports,usetheCLIshowtrunk
commandordisplaythemenuinterfacePort/TrunkSettingsscreen.
StaticLACPdoesnotallowstandbyports.
12-17
PortTrunking
DefaultPortOperation
Inthedefaultconfiguration,allportsareconfiguredforpassiveLACP.How-
ever,ifLACPisnotconfigured,theportwillnottrytodetectatrunk
configurationandwilloperateasastandard,untrunkedport.
Not e PassiveandactiveLACPportwillpauseandlistenforLACPpacketsoncea
linkisestablished.Oncethispauseiscompletethentheport,ifatrunkisnot
detected,willbeplacedinforwardingmode.Someend-nodeapplicationshave
beenfoundtobesensitivetothispauseandmayrequireLACPtobedisabled
ontheport.
Thefollowingtabledescribestheelementsofper-portLACPoperation.To
displaythisdataforaparticularswitch,executethefollowingcommandin
theCLI:
ProCurve>showlacp
Table12-5. LACPPortStatusData
StatusName Meaning
PortNumb ShowsthephysicalportnumberforeachportconfiguredforLACPoperation(C1,C2,C3...).Unlisted
portnumbersindicatethatthemissingportsareassignedtoastaticTrunkgrouporarenotconfigured
foranytrunking.
LACPEnabled Active:TheportautomaticallysendsLACPprotocolpackets.
Passive:TheportdoesnotautomaticallysendLACPprotocolpackets,andrespondsonlyifitreceives
LACPprotocolpacketsfromtheoppositedevice.
AlinkhavingeithertwoactiveLACPportsoroneactiveportandonepassiveportcanperformdynamic
LACPtrunking.AlinkhavingtwopassiveLACPportswillnotperformLACPtrunkingbecausebothports
arewaitingforanLACPprotocolpacketfromtheoppositedevice.
Note:Inthedefaultswitchconfiguration,allportsareconfiguredforpassiveLACPoperation.
TrunkGroup TrkX:ThisporthasbeenmanuallyconfiguredintoastaticLACPtrunk.
TrunkGroupSameasPortNumber:TheportisconfiguredforLACP,butisnotamemberofaporttrunk.
PortStatus Up:TheporthasanactiveLACPlinkandisnotblockedorinStandbymode.
Down:Theportisenabled,butanLACPlinkisnotestablished.Thiscanindicate,forexample,aportthat
isnotconnectedtothenetworkoraspeedmismatchbetweenapairoflinkedports.
Disabled:Theportcannotcarrytraffic.
Blocked:LACP,orSTPhasblockedtheport.(TheportisnotinLACPStandbymode.)Thismaybedue
toatrunknegotiation(verybrief)oraconfigurationerrorsuchasdifferingportspeedsonthesamelink
orattemptingtoconnecttheswitchtomorethanthemaximumnumberofsupportedtrunks.
Standby:TheportisconfiguredfordynamicLACPtrunkingtoanotherdevice,butthemaximumnumber
ofportsfortheDynamictrunktothatdevicehasalreadybeenreachedoneithertheswitchitselforthe
otherdevice.Thisportwillremaininreserve,orstandbyunlessLACPdetectsthatanother,activelink
inthetrunkhasbecomedisabled,blocked,ordown.Inthiscase,LACPautomaticallyassignsaStandby
port,ifavailable,toreplacethefailedport.
12-18
PortTrunking
LACPPartner Yes:LACPisenabledonbothendsofthelink.
StatusName Meaning
No:LACPisenabledontheswitch,buteitherLACPisnotenabledorthelinkhasnotbeendetectedon
theoppositedevice.
LACPStatus Success:LACPisenabledontheport,detectsandsynchronizeswithadeviceontheotherendofthe
link,andcanmovetrafficacrossthelink.
Failure:LACPisenabledonaportanddetectsadeviceontheotherendofthelink,butisnotableto
synchronizewiththisdevice,andthereforenotabletosendLACPpacketsacrossthelink.Thiscanbe
caused,forexample,byaninterveningdeviceonthelink(suchasahub),abadhardwareconnection,
oriftheLACPoperationontheoppositedevicedoesnotcomplywiththeIEEE802.3adstandard.
LACPNotesandRestrictions
802.1X(Port-BasedAccessControl)ConfiguredonaPort.Tomain-
tainsecurity,LACPisnotallowedonportsconfiguredfor802.1Xauthentica-
toroperation.IfyouconfigureportsecurityonaportonwhichLACP(active
orpassive)isconfigured,theswitchremovestheLACPconfiguration,displays
anoticethatLACPisdisabledontheport(s),andenables802.1Xonthatport.
ProCurve(config)#aaaport-accessauthenticatoreb1
LACPhasbeendisabledon802.1Xport(s).
TheswitchwillnotallowyoutoconfigureLACPonaportonwhichport
access(802.1X)isenabled.Forexample:
ProCurve(config)#intb1lacppassive
Errorconfiguringport<port-number>:LACPand802.1Xcannotberun
together.
TorestoreLACPtotheport,youmustfirstremovetheports802.1Xconfigu-
rationandthenre-enableLACPactiveorpassiveontheport.
PortSecurityConfiguredonaPort.Tomaintainsecurity,LACPisnot
allowedonportsconfiguredforportsecurity.Ifyouconfigureportsecurity
onaportonwhichLACP(activeorpassive)isconfigured,theswitchremoves
theLACPconfiguration,displaysanoticethatLACPisdisabledontheport(s),
andenablesportsecurityonthatport.Forexample:
ProCurve(config)#port-securitya17learn-modestaticaddress-limit2
LACPhasbeendisabledonsecuredport(s).
TheswitchwillnotallowyoutoconfigureLACPonaportonwhichport
securityisenabled.Forexample:
12-19
PortTrunking
ProCurve(config)#inta17lacppassive
ErrorconfiguringportA17:LACPandportsecuritycannotberuntogether.
TorestoreLACPtotheport,youmustremoveportsecurityandre-enable
LACPactiveorpassive.
ChangingTrunkingMethods.Toconvertatrunkfromstatictodynamic,
youmustfirsteliminatethestatictrunk.
StaticLACPTrunks.WhereaportisconfiguredforLACP(Activeor
Passive),butdoesnotbelongtoanexistingtrunkgroup,youcanaddthatport
toastatictrunk.DoingsodisablesdynamicLACPonthatport,whichmeans
youmustmanuallyconfigurebothendsofthetrunk.
DynamicLACPTrunks. YoucanconfigureaportforLACP-activeorLACP-
passive,butonadynamicLACPtrunkyoucannotconfiguretheotheroptions
thatyoucanonstatictrunks.Ifyouwanttomanuallyconfigureatrunk,use
thetrunkcommand.(RefertoUsingtheCLIToConfigureaStaticorDynamic
TrunkGrouponpage12-12.)
VLANsandDynamicLACP. AdynamicLACPtrunkoperatesonlyinthe
defaultVLAN(unlessyouhaveenabledGVRPontheswitchanduseForbidto
preventtheportsfromjoiningthedefaultVLAN).
IfyouwanttouseLACPforatrunkonanon-defaultVLANandGVRPis
disabled,configurethetrunkasastatictrunk.
IfthereareportsthatyoudonotwantonthedefaultVLAN,ensurethat
theycannotbecomedynamicLACPtrunkmembers.Otherwiseatraffic
loopcanunexpectedlyoccur.Forexample:
VLAN-1
(Default
VLAN)
VLAN-2
VLAN-1
(Default
VLAN)
VLAN-2
VLAN-1
(Default
VLAN)
VLAN-2
VLAN-1
(Default
VLAN)
VLAN-2
IftheportsinVLAN2areconfiguredtoallowadynamictrunk(andGVRPisdisabled),addinga
secondlinkinVLAN2automaticallyformsadynamicLACPtrunkandmovesthetrunktoVLAN-1
(thedefaultVLAN),whichcreatesatrafficloopinVLAN1betweenthetwoswitchesand
eliminatesthelinkinVLAN2betweenthetwoswitches.
Figure12-8.ADynamicLACPTrunkForminginaVLANCanCauseaTrafficLoop
12-20
PortTrunking
EasycontrolmethodsincludeeitherdisablingLACPontheselectedportsor
configuringthemtooperateinstaticLACPtrunks.
STPandIGMP. Ifspanningtree(STP)and/orIGMPisenabledintheswitch,
adynamicLACPtrunkoperatesonlywiththedefaultsettingsforthese
featuresanddoesnotappearintheportlistingsforthesefeatures.
Half-Duplexand/orDifferentPortSpeedsNotAllowedinLACP
Trunks.TheportsonbothsidesofanLACPtrunkmustbeconfiguredfor
thesamespeedandforfull-duplex(FDx).The802.3adLACPstandardspeci-
fiesafull-duplex(FDx)requirementforLACPtrunking.
AportconfiguredasLACPpassiveandnotassignedtoaporttrunkcanbe
configuredtohalf-duplex(HDx).However,inanyofthefollowingcases,a
portcannotbereconfiguredtoanHDxsetting:
IfaportissettoLACPActive,youcannotconfigureittoHDx.
IfaportisalreadyamemberofastaticordynamicLACPtrunk,youcannot
configureittoHDx.
IfaportisalreadysettoHDx,theswitchdoesnotallowyoutoconfigure
itforastaticordynamicLACPtrunk.
Dynamic/StaticLACPInteroperation:Aportconfiguredfordynamic
LACPcanproperlyinteroperatewithaportconfiguredforstatic(TrkX)LACP,
butanyportsconfiguredasstandbyLACPlinkswillbeignored.
TrunkGroupOperationUsingtheTrunkOption
Thismethodcreatesatrunkgroupthatoperatesindependentlyofspecific
trunkingprotocolsanddoesnotuseaprotocolexchangewiththedeviceon
theotherendofthetrunk.Withthischoice,theswitchsimplyusestheSA/DA
methodofdistributingoutboundtrafficacrossthetrunkedportswithout
regardforhowthattrafficishandledbythedeviceattheotherendofthe
trunkedlinks.Similarly,theswitchhandlesincomingtrafficfromthetrunked
linksasifitwerefromatrunkedsource.
UsetheTrunkoptionwhenyouaretryingtoestablishatrunkgroupbetween
theswitchandanotherdevice,buttheotherdevicestrunkingoperationfails
tointeroperateproperlywithLACPtrunkingconfiguredontheswitchitself.
HowtheSwitchListsTrunkData
StaticTrunkGroup:Appearsinthemenuinterfaceandtheoutputfromthe
CLIshowtrunkandshowinterfacescommands.
12-21
PortTrunking
DynamicLACPTrunkGroup:AppearsintheoutputfromtheCLIshowlacp
command.
InterfaceOption DynamicLACP
TrunkGroup
StaticLACP
TrunkGroup
StaticNon-Protocol
TrunkGroup
MenuInterface No Yes Yes
CLI:
showtrunk No Yes Yes
showinterfaces No Yes Yes
showlacp Yes Yes No
showspanning-tree No Yes Yes
showigmp No Yes Yes
showconfig No Yes Yes
OutboundTrafficDistributionAcrossTrunkedLinks
Bothtrunkgroupoptions(LACPandTrunk)usesource-destinationaddress
pairs(SA/DA)fordistributingoutboundtrafficovertrunkedlinks.
SA/DA(sourceaddress/destinationaddress)causestheswitchtodistribute
outboundtraffictothelinkswithinthetrunkgrouponthebasisofsource/
destinationaddresspairs.Thatis,theswitchsendstrafficfromthesame
sourceaddresstothesamedestinationaddressthroughthesametrunkedlink,
andsendstrafficfromthesamesourceaddresstoadifferentdestination
addressthroughadifferentlink,dependingontherotationofpathassign-
mentsamongthelinksinthetrunk.Likewise,theswitchdistributestrafficfor
thesamedestinationaddressbutfromdifferentsourceaddressesthrough
differentlinks.Becausetheamountoftrafficcomingfromorgoingtovarious
nodesinanetworkcanvarywidely,itispossibleforonelinkinatrunkgroup
tobefullyutilizedwhileothersinthesametrunkhaveunusedbandwidth
capacityeventhoughtheaddressassignmentsareevenlydistributedacross
thelinksinatrunk.Inactualnetworkingenvironments,thisisrarelya
problem.However,ifitbecomesaproblem,youcanusetheProCurveMan-
agerPlusnetworkmanagementsoftwaretoquicklyandeasilyidentifythe
sourcesofheavytraffic(toptalkers)andmakeadjustmentstoimprove
performance.
12-22
PortTrunking
Broadcasts,multicasts,andfloodsfromdifferentsourceaddressesaredis-
tributedevenlyacrossthelinks.Aslinksareaddedordeleted,theswitch
redistributestrafficacrossthetrunkgroup.Forexample,infigure12-9show-
ingathree-porttrunk,trafficcouldbeassignedasshownintable12-6.
C1
Switch Switch
A W
C Y
B X
D Z
3
2 C
C
Figure12-9.ExampleofPort-TrunkedNetwork
Table12-6. ExampleofLinkAssignmentsinaTrunkGroup(SA/DADistribution)
Source: Destination: Link:
NodeA NodeW 1
NodeB NodeX 2
NodeC NodeY 3
NodeD NodeZ 1
NodeA NodeY 2
NodeB NodeW 3
12-23
PortTrunking
12-24
13
ConfiguringforNetworkManagement
Applications
Contents
UsingSNMPToolsToManagetheSwitch ......................... 13-3
Overview.................................................. 13-3
SNMPManagementFeatures................................. 13-4
ConfiguringforSNMP Accessto theSwitch .................... 13-4
ConfiguringforSNMPVersion3AccesstotheSwitch ........... 13-5
SNMPVersion3Commands ................................. 13-6
SNMPv3Enable ........................................ 13-7
SNMPVersion3Users ...................................... 13-8
GroupAccessLevels ................................... 13-11
SNMPCommunities ....................................... 13-12
version3Communities................................. 13-14
CLI:ViewingandConfiguringSNMPCommunityNames .... 13-15
SNMPNotificationandTraps ............................... 13-17
TrapFeatures ......................................... 13-20
ConfiguringTrapReceivers ................................. 13-21
EnablingandConfiguringSNMPInform .................. 13-22
SendingEventLogMessagesasTraps .................... 13-24
UsingtheCLIToEnableAuthenticationTraps ............. 13-24
AdvancedManagement:RMON.............................. 13-25
ViewingsFlowConfigurationandStatus ...................... 13-25
LLDP(Link-LayerDiscoveryProtocol) ..... ...................... 13-28
LLDPTerminology ........................................ 13-29
GeneralLLDPOperation .. ................................. 13-31
LLDP-MED ........................................... 13-31
PacketBoundariesinaNetworkTopology . ................... 13-31
LLDPConfigurationOptions .......... ...................... 13-31
13-1
ConfiguringforNetworkManagementApplications
Contents
OptionsforReadingLLDPInformationCollectedbytheSwitch .. 13-34
LLDPandLLDP-MEDStandardsCompatibility ................ 13-34
LLDPOperatingRules ..................................... 13-35
ConfiguringLLDPOperation ................................ 13-36
ViewingtheCurrentLLDPConfiguration .................. 13-36
ConfiguringGlobalLLDPPacketControls ................. 13-38
ConfiguringSNMPNotificationSupport................... 13-41
ConfiguringPer-PortLLDPTransmitandReceiveModes .... 13-43
ConfiguringLLDPPer-PortAdvertisementContent ......... 13-43
Advertisements........................................ 13-45
LLDP-MED(Media-Endpoint-Discovery) ..................... 13-46
LLDP-MEDTopologyChangeNotification................. 13-49
LLDP-MEDFastStartControl ........................... 13-51
andLocationData ..................................... 13-51
ConfiguringLocationDataforLLDP-MEDDevices ......... 13-56
DisplayingAdvertisementData ........ ...................... 13-61
Advertisements........................................ 13-62
DisplayingLLDPStatistics.............................. 13-66
LLDPOperatingNotes ..................................... 13-70
LLDPandCDPNeighborData ........................... 13-71
CDPOperationandCommands .......................... 13-73
13-2
UsingSNMPToolsToManagetheSwitch
Overview
YoucanmanagetheswitchviaSNMPfromanetworkmanagementstation
runninganapplicationsuchasProCurveManager(PCM)orProCurve
ManagerPlus(PCM+).FormoreonPCMandPCM+,visittheProCurveweb
siteat:
www.procurve.com
Clickonproductsindexinthesidebar,thenclickontheappropriatelink
appearingundertheNetworkManagementheading.
Thissectionincludes:
AnoverviewofSNMPmanagementfortheswitch
Configuringtheswitchesfor:
SNMPCommunities(page13-12)
TrapReceiversandAuthenticationTraps(page13-17)
InformationonadvancedmanagementthroughRMONSupport(page
13-25)
ToimplementSNMPmanagement,theswitchmusthaveanIPaddress,
configuredeithermanuallyordynamically(usingDHCPorBootp).Ifmultiple
VLANsareconfigured,eachVLANinterfaceshouldhaveitsownIPaddress.
ForDHCPusewithmultipleVLANs,seethechapteronVLANsinthe
AdvancedTrafficManagementGuide.
Not e IfyouusetheswitchsAuthorizedIPManagersandManagementVLAN
features,ensurethattheSNMPmanagementstationand/orthechoiceof
switchportusedforSNMPaccesstotheswitcharecompatiblewiththeaccess
controlsenforcedbythesefeatures.Otherwise,SNMPaccesstotheswitch
willbeblocked.FormoreonAuthorizedIPManagers,refertotheAccess
SecurityGuideontheDocumentationCD-ROMshippedwithyourswitch.
(Forthelatestversionofthisguide,visittheProCurvewebsite.)For
informationontheManagementVLANfeature,seethechapteronVLANsin
theAdvancedTrafficManagementGuide.
13-3
SNMPManagementFeatures
SNMPmanagementfeaturesontheswitchinclude:
SNMPversion1,version2corversion3overIP
SecurityviaconfigurationofSNMPcommunities(page13-4)
SecurityviaauthenticationandprivacyforSNMPVersion3access
EventreportingviaSNMP
Version1traps
RMON
ProCurveManager/Plussupport
FlowsamplingusingeitherEASEorsFlow
StandardMIBs,suchastheBridgeMIB(RFC1493),EthernetMAUMIB
(RFC1515),andothers
TheswitchSNMPagentalsousescertainvariablesthatareincludedina
Hewlett-PackardproprietaryMIB(ManagementInformationBase)file.To
ensurethatyouhavethelatestversioninthedatabaseofyourSNMPnetwork
managementtool,youcancopytheMIBfilefromtheProCurveNetworking
websiteat:
www.procurve.com
Clickonsoftware,thenMIBs.
ConfiguringforSNMPAccesstotheSwitch
SNMPaccessrequiresanIPaddressandsubnetmaskconfiguredonthe
switch.Formanagedswitches,ProCurverecommendspermanentIP
addressing.(RefertoIPConfigurationonpage8-3.)
OnceanIPaddresshasbeenconfigured,themainstepsforconfiguringSNMP
version1andversion2caccessmanagementfeaturesare:
1. ConfiguretheappropriateSNMPcommunities.(RefertoSNMPCommu-
nitiesonpage13-12.)
2. Configuretheappropriatetrapreceivers.(RefertoSNMPNotification
andTrapsonpage13-17.)
Insomenetworks,authorizedIPmanageraddressesarenotused.Inthiscase,
allmanagementstationsusingthecorrectcommunitynamemayaccessthe
switchwiththeViewandAccesslevelsthathavebeensetforthatcommunity.
13-4
Ifyouwanttorestrictaccesstooneormorespecificnodes,youcanusethe
switchsIPAuthorizedManagerfeature.(RefertotheAccessSecurityGuide
foryourswitch.)
Ca u t i o n ThepubliccommunityexistsbydefaultandisusedbyProCurvesnetwork
managementapplications.Deletingthepubliccommunitydisablesmany
networkmanagementfunctions(suchasauto-discovery,trafficmonitoring,
SNMPtrapgeneration,andthresholdsetting).Ifsecurityfornetwork
managementisaconcern,itisrecommendedthatyouchangethewriteaccess
forthepubliccommunitytoRestricted.
ConfiguringforSNMPVersion3AccesstotheSwitch
SNMPversion3(SNMPv3)accessrequiresanIPaddressandsubnetmask
configuredontheswitch.(SeeIPConfigurationonpage8-3.)Ifyouareusing
DHCP/Bootptoconfiguretheswitch,ensurethattheDHCP/Bootpprocess
providestheIPaddress.(SeeDHCP/BootpOperationonpage8-12.)
OnceanIPaddresshasbeenconfigured,themainstepsforconfiguringSNMP
version3accessmanagementfeaturesare:
1. EnableSNMPv3foroperationontheswitch(RefertoSNMPVersion3
Commandsonpage13-6).
2. ConfiguretheappropriateSNMPusers.(RefertoSNMPVersion3Users
onpage13-8).
3. ConfiguretheappropriateSNMPcommunities.(RefertoSNMPCommu-
nitiesonpage13-12.)
4. Configuretheappropriatetrapreceivers.(RefertoSNMPNotification
andTrapsonpage13-17.)
Insomenetworks,authorizedIPmanageraddressesarenotused.Inthiscase,
allmanagementstationsusingthecorrectUserandcommunitynamemay
accesstheswitchwiththeViewandAccesslevelsthathavebeensetforthat
community.Ifyouwanttorestrictaccesstooneormorespecificnodes,you
canusetheswitchsIPAuthorizedManagerfeature.(RefertotheAccess
SecurityGuideforyourswitch.)
13-5
SNMPVersion3Commands
SNMPversion3(SNMPv3)addsnewcommandstotheCLIforconfiguring
SNMPv3functions.Youcan:
EnableSNMPv3withthesnmpv3enablecommand.Aninitialuserentry
willbegeneratedwithMD5authenticationandDESprivacy.
RestrictaccesstoonlySNMPv3agentswiththesnmpv3onlycommand.
RestrictwriteaccesstoonlySNMPv3agentswiththesnmpv3restricted-
accesscommand
Ca u t i o n Restrictingaccesstoonlyversion3messageswillmakethecommunitynamed
publicinaccessibletonetworkmanagementapplications(suchasauto-
discovery,trafficmonitoring,SNMPtrapgeneration,andthresholdsetting).
Syntax: [no]snmpv3enable
EnableanddisabletheswitchforaccessfromSNMPv3
agents.Thisincludesthecreationoftheinitialuserrecord.
[no]snmpv3only
EnablesordisablesrestrictionstoaccessfromonlySNMPv3
agents.Whenenabled,theswitchrejectsallnon-SNMPv3
messages.
[no]snmpv3restricted-access
Enablesordisablesrestrictionsfromallnon-SNMPv3agents
toreadonlyaccess.
showsnmpv3enable
DisplaystheoperatingstatusofSNMPv3.
showsnmpv3only
Displaysthestatusofmessagereceptionofnon-SNMPv3
messages.
showsnmpv3restricted-access
Displaysthestatusofwritemessagesofnon-SNMPv3
messages.
13-6
SNMPv3Enable
Thesnmpv3enablecommandstartsadialogthatperformsthreefunctions:
enablingtheswitchtoreceiveSNMPv3messages,configuringtheinitialusers,
and,optionally,torestrictnonversion-3messagestoreadonly.Figure13-1
showsandexampleofthisdialog.
Not e:
SNMP
V e r s i o n 3
I ni t i al Us er s
FormostSNMPv3managementsoftwaretobeabletocreatenewusers,they
musthaveaninitialuserrecordclone.Theserecordscanbedowngraded,
(givenfewerfeatures),butnotupgradedwithnewfeaturesadded.Forthis
reasonProCurverecommendsthatyoucreateaseconduserwithSHAand
DESatwhenyouenableSNMPv3
Enable
CreateinitialusermodelsforSNMPv3
managementapplications.
Setrestrictionon
non-SNMPv3messages.
Figure13-1.ExampleofSNMPversion3EnableCommand
13-7
SNMPVersion3Users
ThesecondsteptousingSNMPv3ontheswitchistoconfiguretheusersthat
youassigntodifferentgroups.Toestablishusersontheswitch:
a. AddtheuserstotheUsertable.Thisisdonewiththesnmpv3user
command.Toviewtheusersinthelistyouusetheshowsnmpv3user
command.
b. AssignuserstoSecurityGroupsbasedontheirsecuritymodel.
Ca u t i o n Whenstackingisenabled,SNMPv3providessecurityonlybetweenan
SNMPv3managementstationandthestackmanager.Communications
betweenthestackcommanderandstackmembersisnotsecure.
Syntax: [no]snmpv3useruser_name[auth<md5|sha><auth_pass>][priv
priv_pass]
AddorDeletesanuserentryforsnmpv3.Authorization
andPrivacyareoptional,buttouseprivacyyoumust
useauthorization.Whendeletingauseronlythe
user_nameisrequired
[auth<md5|sha><auth_pass>]
Withauthorizationyoucanselecteithermd5
authenticationorshaauthentication.Theauth_pass
mustbe6-32charactersinlengthandmustbeincluded
whenauthenticationisincluded.(Default:None)
[privpriv_pass]
WithprivacytheswitchonlysupportsDES(56-bit)
encryption.Theprivacypasswordpriv_passmustbe
6-32charactersinlengthandmustbeincludedwhen
privisincluded.(Default:None)
[no]snmpv3groupgroup_nameuseruser_namesec-model<ver1|ver2c
|ver3>
Thiscommandassignsorremovesausertoasecurity
groupforaccessrighttothewith.Todeleteaentryall
fieldsmustbeused.
groupgroup_name
Thisisthegroupprivilegesthatwillbeassignedtothe
user.FormoredetailsseeGroupAccessLevelson
page13-11.
13-8
[no]snmpv3groupgroup_nameuseruser_namesec-model<ver1|ver2c
|ver3>(Continued)
useruser_name
Thisistheusertobeaddedtotheaccessgroup.This
mustmatchtheusernameaddedwiththesnmpv3user
command.
sec-model<ver1|ver2c|ver3>
Thisdefineswhichsecuritymodeltousefortheadded
user.ASNMPv3accessGroupshouldonlyusethever3
securitymodel.
Toestablishauseryoumustfirstaddtheusernamestothelistofknownusers.
Addusernameswiththesnmpv3userCLIcommand.
AdduserNetworkAdminwithno
AuthenticationorPrivacy
AdduserNetworkMgrwith
authenticationandprivacy
Privacyisusedandthe
passwordissetprivpass
AuthenticationissettoMd5
andthepasswordisauthpass
Figure13-2.AddingandshowingUsersforSNMPv3
13-9
Thenyoumustsetthegroupaccessleveltotheuser.Thisisdonewiththe
snmpv3groupcommand.FormoredetailsontheMIBsaccessforagivegroup
seeGroupAccessLevelsonpage13-11.
AddNetworkAdminto
operatornoauthgroup
AddNetwrokMgrtomanagerprivgroup
Pre-assignedgroupsfor
accessbyVersion2cand
version1management
applications
Figure13-3. AssignUserstogroupforSNMPv3
Ca u t i o n Addingauserwithoutauthenticationand/orprivacytoagroupthatrequires
itwillcausetheusertonotbeabletoaccesstheswitch.Youshouldonlyadd
userstothegroupthatisappropriatefortheirsecurityparameters
13-10
GroupAccessLevels
Theswitchsupportseightpredefinedgroupaccesslevels.Therearefour
levelsforusewithversion3usersandfourareusedforaccessbyversion2c
orversion1managementapplications.
GroupName GroupAccessType GroupReadView GroupWriteView
managerpriv Ver3MusthaveAuthentication ManagerReadView ManagerWriteView
andPrivacy
managerauth Ver3MusthaveAuthentication ManagerReadView ManagerWriteView
operatorauth Ver3MusthaveAuthentication OperatorReadView DiscoveryView
operatornoauth Ver3NoAuthentication OperatorReadView DiscoveryView
commanagerrw Ver2corVer1 ManagerReadView ManagerWriteView
commanagerr Ver2corVer1 ManagerReadView DiscoveryView
comoperatorrw Ver2corVer1 OperatorReadView OperatorReadView
comoperatorr Ver2corVer1 OperatorReadView DiscoveryView
EachviewallowsyoutoviewormodifyadifferentsetofMIBs.
ManagerReadViewaccesstoallmanagedobjects
ManagerWriteViewaccesstoallmanagedobjectsexceptthefollow-
ing:vacmContextTable,vacmAccessTable,vacmViewTreeFamilyTable
OperatorReadViewnoaccesstoicfSecurityMIB,ProCurveIpTftp-
Mode,vacmContextTable,vacmAccessTable,vacmViewTreeFami-
lyTable,usmUserTable,snmpCommunityTable
DiscoveryViewAccesslimitedtosamplingProbeMIB.
Not e Allaccessgroupsandviewsarepredefinedontheswitch.Thereisnomethod
tomodifyoraddgroupsorviewstothosethatarepre-definedontheswitch.
13-11
SNMPCommunities
SNMPcommuitiesaresupportedbytheswitchtoallowmanagement
applicationthatuseversion2corversion1toaccesstheswitch.The
communitiesaremappedtoGroupAccessLevelsthatareusedforversion2c
orversion1support.FormoreinformationseeGroupAccessLevelsonpage
13-11.Thismappingwillhappenautomaticallybasedonthecommunities
accessprivileges,butspecialmappingscanbeaddedwiththesnmpv3
communitycommand.
Syntax: [no]snmpv3community
Thiscommandmapsorremovesamappingofa
communitynametoagroupaccesslevel.Toremovea
mappingyouonlyneedtheindex_name.
<index<index-name>>
Thisisanindexnumberortitleforthemapping.Thevaluesof
1-5arereservedandcannotbemapped.
<name<com-name>>
Thisisthecommunitynamethatisbeingmappedtoagroup
accesslevel
<sec-name<security-name>>
Thisisthegrouplevelthatthecommunityisbeingmapped.
FormoreinformationseeGroupAccessLevelsonpage
13-11.
<tag<tag-value>>
Thisisusedtospecifywhichtargetaddressmayhaveaccess
viathisindexreference.
13-12
Figure13-4showstheassigningoftheOperatorcommunityonMgrStation1
totheCommunityOperatorReadWritegroup.AnyotherOperatoronlyhasan
accesslevelofCommunityOperatorReadOnly.
Addmappingtoallowwriteaccessfor
Operator communityonMgrStation1
TwoOperatorAccessLevels
Figure13-4.AssigningaCommunitytoaGroupAccessLevel
Table13-1. SNMPCommunityFeatures
showSNMPcommunities n/a page
13-14
page
13-15
configureidentityinformation none page

13-16
configurecommunitynames
MIBviewforacommunityname
(operator,manager)
writeaccessfordefault
communityname
public
manager
unrestricted
page
13-14
page
13-16
UseSNMPcommunitiestorestrictaccesstotheswitchbySNMPmanagement
stationsbyadding,editing,ordeletingSNMPcommunities.Youcanconfigure
uptofiveSNMPcommunities,eachwitheitheranoperator-leveloramanager-
levelview,andeitherrestrictedorunrestrictedwriteaccess.
UsingSNMPrequiresthattheswitchhaveanIPaddressandsubnetmask
compatiblewithyournetwork.
13-13
Ca u t i o n Deletingorchangingthecommunitynamedpublicpreventsnetwork
managementapplications(suchasauto-discovery,trafficmonitoring,SNMP
trapgeneration,andthresholdsetting)fromoperatingintheswitch.
(ChangingordeletingthepublicnamealsogeneratesanEventLog
message.)Ifsecurityfornetworkmanagementisaconcern,itis
recommendedthatyouchangethewriteaccessforthepubliccommunity
toRestricted.
version3Communities
ToView,Edit,orAddSNMPCommunities:
6.SNMPCommunityNames
Note:Thisscreengives
anoverviewofthe
SNMPcommunities
thatarecurrently
configured.Allfieldsin
thisscreenareread-
only.
Figure13-5.TheSNMPCommunitiesScreen(DefaultValues)
2. Press[A](forAdd)todisplaythefollowingscreen:
AddandEditoptionsare
usedtomodifytheSNMP
options.Seefigure8-2.
13-14
Ifyouareaddinga
community,the
fieldsinthisscreen
areblank.
Ifyouareeditingan
existingcommunity,
thevaluesforthe
currentlyselected
Communityappear
inthefields.
Typethevalueforthisfield.
UsetheSpacebartoselect
valuesforotherfields
Figure13-6.TheSNMPAddorEditScreen
NeedHelp?Ifyouneedinformationontheoptionsineachfield,press
[Enter]tomovethecursortotheActionsline,thenselecttheHelpoption
ontheActionsline.WhenyouarefinishedwithHelp,press[E](forEdit)
toreturnthecursortotheparameterfields.
3. EnterthenameyouwantintheCommunityNamefield,andusetheSpace
bartoselecttheappropriatevalueineachoftheotherfields.(Usethe
[Tab]keytomovefromonefieldtothenext.)
4. Press[Enter],then[S](for Save).
CLI:ViewingandConfiguringSNMPCommunityNames
CommunityNameCommands Page
showsnmp-server[<community-string>] 13-15
[no]snmp-server 13-16
[community<community-str>] 13-16
[host<community-str><ip-addr>] 13-21
[<none|debug|all|not-info|critical>]
[enabletraps<authentication> 13-25
ListingCommunityNamesandValues.Thiscommandliststhedatafor
currentlyconfiguredSNMPcommunitynames(alongwithtrapreceiversand
thesettingforauthenticationtrapsseeSNMPNotificationandTrapson
page13-17).
Syntax: showsnmp-server[<community-string>]
13-15
Thisexampleliststhedataforallcommunitiesinaswitch;thatis,boththe
defaultProCurve"public"communitynameandanothercommunitynamed
"blue-team".
Default
Communityand
Settings
Non-Default
Communityand
Settings
TrapReceiver
Data(Seepage
13-17.)
Figure13-7.ExampleoftheSNMPCommunityListingwithTwoCommunities
Tolistthedataforonlyonecommunity,suchasthe"public"community,use
theabovecommandwiththecommunitynameincluded.Forexample:
ProCurve#showsnmp-serverpublic
ConfiguringCommunityNamesandValues.Thesnmp-servercommand
enablesyoutoaddSNMPcommunitieswitheitherdefaultorspecificaccess
attributes,andtodeletespecificcommunities.
Syntax: [no]snmp-servercommunity<community-name>
Configuresanewcommunityname.Ifyoudonotalso
specifyoperatorormanager,theswitchautomatically
assignsthecommunitytotheoperatorMIBview.Ifyou
donotspecifyrestrictedorunrestricted,theswitch
automaticallyassignsthecommunitytorestricted
(read-only)access.Theno formusesonlythe
<community-name>variableanddeletesthenamed
communityfromtheswitch.
[operator|manager]
Optionallyassignsanaccesslevel.Attheoperatorlevel
thecommunitycanaccessallMIBobjectsexceptthe
CONFIGMIB.Atthemanagerlevelthecommunitycan
accessallMIBobjects.
13-16
[restricted|unrestricted]
OptionallyassignsMIBaccesstype.Assigningthe
restrictedtypeallowsthecommunitytoreadMIB
variables,butnottosetthem.Assigningtheunrestricted
typeallowsthecommunitytoreadandsetMIB
variables.
Forexample,toaddthefollowingcommunities:
Community AccessLevel TypeofAccess
red-team manager
(AccesstoallMIBobjects.)
unrestricted
(read/write)
blue-team operator restricted
(AccesstoallMIBobjects (read-only)
excepttheCONFIGMIB.)
ProCurve(config)#snmp-servercommunityred-team
managerunrestricted
ProCurve(config)#snmp-servercommunityblue-team
operatorrestricted
Toeliminateapreviouslyconfiguredcommunitynamed"gold-team":
ProCurve(config)#nosnmp-servercommunitygold-team
SNMPNotificationandTraps
TheswitchescoveredinthisguidesupporttheSNMPv3notificationprocess.
Theyalsosupportversion1orversion2ctraps.Formoreinformationon
version1orversion2ctraps,seeTrapFeaturesonpage13-20.TheSNMPv3
notificationprocessallowsforthemessagespassedtobeauthenticatedand
encryptedifyouchoose.TosetupaSNMPv3notificationtherearethreesteps:
1. EstablishaNotificationwiththesnmpv3notifycommand.
2. PointthenotificationtoaAddresswiththesnmpv3targetaddresscom-
mand.
3. Establishaparameterrecordforthetargetaddresswiththesnmpv3
params command.
13-17
Syntax: [no]snmpv3notify<notify-name>[tagvalue<tag-name>]
Thisaddsordeletesanotificationrequest.Toremove
amappingyouonlyneedthenotify-name.
[no]snmpv3targetaddress<addr-name>params<parms-name>
<IP-Addr>
Addordeleteanaddresswherenotificationmessages
aresent.
filter<none|debug|all|not-info|critical>
Thisfiltermessagestorestricttypeofmessages
transmittedtoaddress.(Default:none)
udp-port<port>
ThisspecifiestheUDPporttouse.(Default:162)
port-mask<mask>
UsedtospecificarangeofUDPports.(Default:0)
addr-mask<mask>
Usedtospecifyarangeofaddresstotransitnotify
messages.(Default:0)
retries<value>
Numbertimestoretransmitamessagewhenno
responseisreviewed.(Default:3)
timeout<value>
Howlongtowaitforaresponseforthetarget.(Default:
1500)
[no]snmpv3targetaddress<addr-name>params<parms-name>
<IP-Addr>(Continued)
max-msg-size<size>
Themaximumnumberofbytesoflengthamessageto
thistargetcanbe.(Default:1472)
taglist<tag-params>
Setlistofvaluesusedtoselectthisentryfrom
snmpNotifyTable.
13-18
[no]snmpv3params<params-name>user<user-name>
Addordeleteauserparameterforusewithtarget
address.Theparams-namemustmatchtheparms-name
inthetargetaddresscommand.Theuser-nameshouldbe
aUserfromtheusertable.Formoreinformationon
usersseeSNMPVersion3Usersonpage13-8
Acompleteparamscommandmustalsohaveasec-model
andmsg-processingentry.
<sec-model<ver1|ver2c|ver3>>
Thisestablishedthesecuritymodeltouseformessages
passedtothetargetaddress.IFver3isusedthenthe
msg-processingmustalsobever3.
<msg-processing<ver1|ver2c|ver3>[noaut|auth|priv>
Establishthemsg-processingforalgorithmfor
messagespassedtothetargetaddress.Ifver3isused
andsec-modelisver3thenyoumustselectasecurity
serviceslevel(<noauth|auth|priv>)
tagvaluematchestaglistvalue.
paramsvaluematches
paramsname.
Bothver3meansyoumustselecta
securityservicelevel.
Figure13-8. ExampleofSNMPv3ConfigurationSession
13-19
TrapFeatures
snmp-serverhost(trapreceiver) public page
13-21
snmp-serverenable(authenticationtrap) none page
13-25
Atrapreceiverisamanagementstationdesignatedbytheswitchtoreceive
SNMPtrapssentfromtheswitch.Anauthenticationtrapisaspecialized
SNMPtrapsenttotrapreceiverswhenanunauthorizedmanagementstation
triestoaccesstheswitch.
Not e Fixedor"Well-Known"Traps:Theswitchautomaticallysendsfixedtraps
(suchas"coldStart","warmStart","linkDown",and"linkUp")totrapreceivers
usingthepubliccommunityname.Thesetrapscannotberedirectedtoother
communities.Thus,ifyouchangeordeletethedefaultpubliccommunity
name,thesetrapswillbelost.
Thresholds:Theswitchautomaticallysendsallmessagesresultingfrom
thresholdstothenetworkmanagementstation(s)thatsetthethresholds,
regardlessofthetrapreceiverconfiguration.
Inthedefaultconfiguration,therearenotrapreceiversconfigured,andthe
authenticationtrapfeatureisdisabled.FromtheCLIyoucanconfigureupto
tenSNMPtrapreceiverstoreceiveSNMPtrapsfromtheswitch.Asanoption,
youcanalsoconfiguretheswitchtosendEventLogmessagesastraps.CLI:
ConfiguringandDisplayingTrapReceivers
TrapReceiverCommands Page
showsnmp-server 13-21
snmp-serverhost 13-21
<ip-addr><community-name>
[none|all|non-info|critical|debug]
snmp-serverenabletrapsauthentication 13-21
13-20
UsingtheCLIToListCurrentSNMPTrapReceivers.
Thiscommandliststhecurrentlyconfiguredtrapreceiversandthesettingfor
authenticationtraps(alongwiththecurrentSNMPcommunitynamedata
seeSNMPCommunitiesonpage13-12).
Syntax: showsnmp-server
Displayscurrentcommunityandtrapreceiverdata.
Inthenextexample,theshowsnmp-servercommandshowsthattheswitch
hasbeenpreviouslyconfiguredtosendSNMPtrapstomanagementstations
belongingtothepublic,red-team,andblue-teamcommunities.
Exampleof
Community
NameData(See
page13-12.)
ExampleofTrap
ReceiverData
Authentication
TrapSetting
Figure13-9. ExampleofShowSNMP-ServerListing
ConfiguringTrapReceivers
Thiscommandspecifiestrapreceiversbycommunitymembership,
managementstationIPaddress,andthetypeofEventLogmessagestosend
tothetrapreceiver.
13-21
Not e Ifyouspecifyacommunitynamethatdoesnotexistthatis,hasnotyetbeen
configuredontheswitchtheswitchstillacceptsthetrapreceiver
assignment.However,notrapswillbesenttothattrapreceiveruntilthe
communitytowhichitbelongshasbeenconfiguredontheswitch.
Syntax: snmp-serverhost<community-string><ip-address>
UsingcommunitynameanddestinationIPaddress,
thiscommanddesignatesadestinationnetwork-
managementstationforreceivingSNMPeventlog
messagesfromtheswitch.Ifyoudonotspecifythe
eventlevel,thentheswitchdoesnotsendeventlog
messagesastraps.Youcanspecifyuptotentrap
receivers(networkmanagementstations).
Note:Inallcases,theswitchsendsanythreshold
trap(s)tothenetworkmanagementstation(s)that
explicitlysetthethreshold(s).
[<none|all|not-info|critical|debuginforms>]
OptionsforsendingswitchEventLogmessagestoa
trapreceiver.RefertoTable13-2,OptionsforSending
EventLogMessagesasTraps,onpage13-24.Thelevels
specifiedwiththeseoptionsapplyonlytoEventLog
messages,andnottothresholdtraps.
informs:Enablesordisablestheinformsoptionfor
SNMPandallowsyoutoconfigureoptionsforSNMP
informrequests.
retries:Maximumnumberoftimestoresendan
informrequest.Default:3
timeout:Numberofsecondstowaitforan
acknowledgementbeforeresendingtheinform
request.Default:15seconds
EnablingandConfiguringSNMPInform
Youcanusethesnmp-serverhostinformscommand(SNMPv2conly)tosend
informrequestswhencertaineventsoccur.WhenanSNMPManagerreceives
aninformrequest,itcansendanSNMPresponsebacktothesendingagent.
Thisletstheagentknowthattheinformrequestreacheditsdestination.
13-22

IfthesendingagentdoesnotreceiveanSNMPresponsebackfromtheSNMP
Managerwithinthetimeoutperiod,theinformrequestmayberesent,based
ontheretrycountvalue.
YoumustspecifyanIPaddressthatwillreceivethenotificationsandthe
communityname.
Not e Theretriesandtimeoutoptionsarenotusedwhenusingtraprequests.
Pr oCur ve Swi t ch# show snmp- ser ver
SNMP Communi t i es
Communi t y Name MI B Vi ew Wr i t e Access
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
publ i c Manager Unr est r i ct ed
Tr ap Recei ver s
Li nk- Change Tr aps Enabl ed on Por t s [ Al l ] : Al l
Send Aut hent i cat i on Tr aps [ No] : No
Addr ess Communi t y Event s Sent Not i f y Type Ret r y Ti meout
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
15. 28. 333. 456 guest Al l i nf or m 3 15
Excl uded MI Bs
Snmp Response Pdu Sour ce- I P I nf or mat i on
Sel ect i on Pol i cy : Def aul t r f c1517
Tr ap Pdu Sour ce- I P I nf or mat i on
Sel ect i on Pol i cy : Def aul t r f c1517
Figure13-10.ExampleShowingSNMPinformsOptionEnabled
13-23
SendingEventLogMessagesasTraps
UsethefollowingoptionstosendEventLogmessagesastraps.
Table13-2. OptionsforSendingEventLogMessagesasTraps
EventLevel Description
None(default) Sendnologmessages.
All Sendalllogmessages.
NotINFO Sendthelogmessagesthatarenotinformation-only.
Critical Sendcritical-levellogmessages.
Debug ReservedforProCurve-internaluse.
Forexample,toconfigureatrapreceiverinacommunitynamed"red-team"
withanIPaddressof10.28.227.130toreceiveonly"critical"logmessages:
ProCurve(config)#snmp-servertrap-receiver
red-team10.28.227.130critical
Not es ToreplaceonecommunitynamewithanotherforthesameIPaddress,you
mustusenosnmp-serverhost<community-name><ip-address>todeletethe
unwantedcommunityname.Otherwise, addinganewcommunitynamewith
anIPaddressalreadyinusewithanothercommunitynamesimplycreates
twoallowablecommunitynameentriesforthesamemanagementstation.
Ifyoudonotspecifytheeventlevel([<none|all|non-info|critical|debug>])
thentheswitchdoesnotsendeventlogmessagesastraps."Well-Known"traps
andthresholdtraps(ifconfigured)willstillbesent.
UsingtheCLIToEnableAuthenticationTraps
Not e Forthisfeaturetooperate,oneormoretrapreceiversmustbeconfiguredon
theswitch.SeeConfiguringTrapReceiversonpage13-21.
13-24
UsingtheCLIToEnableAuthenticationTraps.
Syntax: [no]snmp-serverenabletrapsauthentication
Enablesordisablessendinganauthenticationtraptothe
configuredtrapreceiver(s)ifanunauthorizedmanagement
stationattemptstoaccesstheswitch.
Forexample:
ProCurve(config)#snmp-serverenabletrapsauthentication
ChecktheEventLogintheconsoleinterfacetohelpdeterminewhythe
authenticationtrapwassent.(RefertoUsingLoggingToIdentifyProblem
SourcesonpageC-21.)
AdvancedManagement:RMON
TheswitchescoveredinthisguidesupportRMON(RemoteMonitoring)on
allconnectednetworksegments.Thisallowsfortroubleshootingand
optimizingyournetwork.ThefollowingRMONgroupsaresupported:
EthernetStatistics(exceptthenumbersofpacketsofdifferentframe
sizes)
Alarm
History(ofthesupportedEthernetstatistics)
Event
TheRMONagentautomaticallyrunsintheswitch.UsetheRMON
managementstationonyournetworktoenableordisablespecificRMON
trapsandevents.
ViewingsFlowConfigurationandStatus
ThefollowingsFlowcommandsallowyoutodisplaysFlowconfigurationand
statusviatheCLI.
Syntax:showsflowagent
DisplayssFlowagentinformation.Theagentaddressisnormally
theipaddressofthefirstvlanconfigured.
Syntax:showsflow<receiverinstance>destination
Displaysinformationaboutthemanagementstationtowhichthe
sFlowsampling-pollingdataissent.
13-25

Syntax:showsflow<receiverinstance>sampling-polling<port-list/range>
DisplaysstatusinformationaboutsFlowsamplingandpolling.
Theshowsflowagentcommanddisplaysread-onlyswitchagentinformation.
TheversioninformationshowsthesFlowversion,MIBsupportandsoftware
versions;theagentaddressistypicallytheipaddressofthefirstvlanconfig-
uredontheswitch.
Pr oCur ve# show sf l ow agent
Ver si on 1. 3; HP; K. 12. XX
Agent Addr ess 10. 0. 10. 228
Figure13-11.ExampleofViewingsFlowAgentInformation
Theshowsflow<instance>destinationcommandincludesinformationabout
themanagement-stationsdestinationaddress,receiverport,andowner.
Pr oCur ve# show sf l ow 2 dest i nat i on
Dest i nat i on I nst ance 2
sf l ow Enabl ed
Dat agr ams Sent 221
Dest i nat i on Addr ess 10. 0. 10. 41
Recei ver Por t 6343
Owner Admi ni st r at or , CLI - owned, I nst ance 2
Ti meout ( seconds) 99995530
Max Dat agr amSi ze 1400
Dat agr amVer si on Suppor t 5
Figure13-12.ExampleofViewingsFlowDestinationInformation
Notethefollowingdetails:
DestinationAddressremainsblankunlessithasbeenconfigured.
DatagramsSentshowsthenumberofdatagramssentbytheswitch
agenttothemanagementstationsincetheswitchagentwaslast
enabled.
13-26

Timeoutdisplaysthenumberofsecondsremainingbeforetheswitch
agentwillautomaticallydisablesFlow(thisissetbythemanagement
stationanddecrementswithtime).
MaxDatagramSizeshowsthecurrentlysetvalue(typicallya
defaultvalue,butthiscanalsobesetbythemanagementstation).
Theshowsflow<instance>sampling-polling[port-list]commanddisplaysinfor-
mationaboutsFlowsamplingandpollingontheswitch.Youcanspecifyalist
orrangeofportsforwhichtoviewsamplinginformation.
Pr oCur ve# show sf l ow 2 sampl i ng- pol l i ng A1- A4
Por t | Sampl i ng
+
- - -
Numberdenotesthesampling/pollinginstancetowhichthereceiveriscoupled.
Dr opped | Pol l i ng
| Enabl ed Rat e Header Sampl es | Enabl ed I nt er val
- - - - - + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
A1 Yes( 2) 40 128 1234567890 - - -
A2 - - - - - - - - - 0 Yes( 1) 60
A3 No( 1) 0 100 898703 No 30
A4 Yes( 3) 50 128 0 No( 3) 0
Figure13-13.ExampleofViewingsFlowSamplingandPollingInformation
Not e Thesamplingandpollinginstances(notedinparentheses)coupledtoa
specificreceiverinstanceareassigneddynamically,andsotheinstance
numbersmaynotalwaysmatch.Thekeythingtonoteiswhethersamplingor
pollingisenabledonaport,andthesamplingratesorpollingintervalsforthe
receiverinstanceconfiguredoneachport.
13-27
LLDP(Link-LayerDiscoveryProtocol)
TostandardizedevicediscoveryonallProCurveswitches,LLDPhasbeen
implementedwhileofferinglimitedread-onlysupportforCDPas
documentedinthismanual.Forcurrentinformationonyourswitchmodel,
consultthelatestReleaseNotes(availableontheProCurveNetworkingweb
site).IfLLDPhasnotyetbeenimplemented(orifyouarerunninganolder
versionofsoftware),consultapreviousversionoftheManagementand
ConfigurationGuidefordevicediscoverydetails.
Table13-3. LLDPandLLDP-MEDFeatures
ViewtheswitchsLLDPconfiguration n/a page13-36
EnableordisableLLDPontheswitch Enabled page13-31
Changethetransmitinterval(refresh-interval)for 30seconds page13-39
LLDPpackets
ChangetheholdtimemultiplierforLLDPPackets 4seconds page13-32
(holdtime-multiplierxrefresh-interval=time-to-live)
Changethedelayintervalbetweenadvertisements 2seconds page13-40
Changingthereinitializationdelayinterval 2seconds page13-41
ConfiguringSNMPnotificationsupport Disabled page13-32
Configuringtransmitandreceivemodes tx_rx page13-32
ConfiguringbasicLLDPper-portadvertisement Enabled page13-43
content
Configuringportspeedandduplexadvertisementsfor Enabled page13-44
optionalLLDPandmandatoryLLDP-MEDapplications
ConfiguringtopologychangenotificationforLLDP- Enable page13-49
MED
Changingthefast-startdurationforLLDP-MED 5sec page13-51
ConfiguringLLDP-MEDAdvertising Enabled page13-51
ConfiguringLLDP-MEDdevicelocationdata None page13-48
DisplayingAdvertisementDataandStatistics n/a page13-61
LLDP(LinkLayerDiscoveryProtocol):providesastandards-based
methodforenablingtheswitchescoveredinthisguidetoadvertisethemselves
toadjacentdevicesandtolearnaboutadjacentLLDPdevices.
13-28
LLDP-MED(LLDPMediaEndpointDiscovery):Providesanextensionto
LLDPandisdesignedtosupportVoIPdeployments.
Not e LLDP-MEDisanextensionforLLDP,andtheswitchrequiresthatLLDPbe
enabledasaprerequisitetoLLDP-MEDoperation.
AnSNMPutilitycanprogressivelydiscoverLLDPdevicesinanetworkby:
1. ReadingagivendevicesNeighborstable(intheManagementInformation
Base,orMIB)tolearnaboutother,neighboringLLDPdevices.
2. Usingtheinformationlearnedinstep1tofindandreadtheneighbor
devicesNeighborstablestolearnaboutadditionaldevices,andsoon.
Also,byusingshowcommandstoaccesstheswitchsneighbordatabasefor
informationcollectedbyanindividualswitch,systemadministratorscanlearn
aboutotherdevicesconnectedtotheswitch,includingdevicetype
(capability)andsomeconfigurationinformation.InVoIPdeploymentsusing
LLDP-MEDontheswitchescoveredinthisguide,additionalsupportuniqueto
VoIPapplicationsisalsoavailable.
LLDPTerminology
AdjacentDevice:RefertoNeighbororNeighborDevice.
Advertisement:SeeLLDPDU.
ActivePort:Aportlinkedtoanotheractivedevice(regardlessofwhether
STPisblockingthelink).
LLDP:LinkLayerDiscoveryProtocol.ProCurveswitchesarecompatible
withIEEE802.1AB-2005.
LLDP-Aware:AdevicethathasLLDPinitsoperatingcode,regardlessof
whetherLLDPisenabledordisabled.
LLDPDevice:Aswitch,server,router,orotherdevicerunningLLDP.
LLDPNeighbor:AnLLDPdevicethatiseitherdirectlyconnectedtoanother
LLDPdeviceorconnectedtothatdevicebyanother,non-LLDPLayer2device
(suchasahub)Notethatan802.1D-compliantswitchdoesnotforwardLLDP
datapacketsevenifitisnotLLDP-aware.
13-29
LLDPDU(LLDPDataUnit):LLDPdatapacketsaretransmittedonactive
linksandincludemultipleTLVscontainingglobalandper-portswitch
information.Inthisguide,LLDPDUsaretermedadvertisementsor
packets.
LLDP-MED(LinkLayerDiscoverProtocolMediaEndpoint
Discovery):TheTIAtelecommunicationsstandardproducedbyengineering
subcommitteeTR41.4,VoIPSystemsIPTelephonyinfrastructureand
EndpointstoaddressneedsrelatedtodeployingVoIPequipmentinIEEE802-
basedenvironments.ThisstandardwillbepublishedasANSI/TIA-1057.
MIB(ManagementInformationBase):Aninternaldatabasetheswitch
maintainsforconfigurationandperformanceinformation.
Neighbor:SeeLLDPNeighbor.
Non_LLDPDevice:AdevicethatisnotcapableofLLDPoperation.
TLV(Type-Length-Value):Adataunitthatincludesadatatypefield,adata
unitlengthfield(inbytes),andafieldcontainingtheactualdatatheunitis
designedtocarry(asanalphanumericstring,abitmap,orasubgroupof
information).SomeTLVsincludesubelementsthatoccurasseparatedata
pointsindisplaysofinformationmaintainedbytheswitchforLLDP
advertisements.(Thatis,someTLVsincludemultipledatapointsor
subelements.)
13-30
GeneralLLDPOperation
AnLLDPpacketcontainsdataaboutthetransmittingswitchandport.The
switchadvertisesitselftoadjacent(neighbor)devicesbytransmittingLLDP
datapacketsoutallportsonwhichoutboundLLDPisenabled,andreading
LLDPadvertisementsfromneighbordevicesonportsthatareinboundLLDP-
enabled.(LLDPisaone-wayprotocolanddoesnotincludeany
acknowledgementmechanism.) AnLLDP-enabledportreceivingLLDP
packetsinboundfromneighbordevicesstoresthepacketdatainaNeighbor
database(MIB).
LLDP-MED
ThiscapabilityisanextensiontoLLDPandisavailableontheswitches
coveredinthisguide.RefertoLLDP-MED(Media-Endpoint-Discovery)on
page13-46.
PacketBoundariesinaNetworkTopology
WheremultipleLLDPdevicesaredirectlyconnected,anoutboundLLDP
packettravelsonlytothenextLLDPdevice.AnLLDP-capabledevicedoes
notforwardLLDPpacketstoanyotherdevices,regardlessofwhether
theyareLLDP-capable.
AninterveninghuborrepeaterforwardstheLLDPpacketsitreceivesin
thesamemannerasanyothermulticastpacketsitreceives.Thus,two
LLDPswitchesjoinedbyahuborrepeaterhandleLLDPtrafficinthesame
waythattheywouldifdirectlyconnected.
Anyintervening802.1Ddevice,orLayer-3devicethatiseitherLLDP-
unawareorhasdisabledLLDPoperation,dropsthepacket.
LLDPConfigurationOptions
EnableorDisableLLDPontheSwitch.Inthedefaultconfiguration,
LLDPisgloballyenabledontheswitch.Topreventtransmissionorreceiptof
LLDPtraffic,youcandisableLLDPoperation(page13-38).
EnableorDisableLLDP-MED. Inthedefaultconfigurationforthe
switchescoveredinthisguide,LLDP-MEDisenabledbydefault.(Requiresthat
LLDPisalsoenabled.)
13-31
ChangetheFrequencyofLLDPPacketTransmissiontoNeighbor
Devices. Onaglobalbasis,youcanincreaseordecreasethefrequencyof
outboundLLDPadvertisements(page13-39).
ChangetheTime-To-LiveforLLDPPacketsSenttoNeighbors.Ona
globalbasis,youcanincreaseordecreasethetimethattheinformationinan
LLDPpacketoutboundfromtheswitchwillbemaintainedinaneighborLLDP
device(page13-39).
TransmitandReceiveMode. WithLLDPenabled,theswitchperiodically
transmitsanLLDPadvertisement(packet)outeachactiveportenabledfor
outboundLLDPtransmissions,andreceivesLLDPadvertisementsoneach
activeportenabledtoreceiveLLDPtraffic(page13-43).Per-Port
configurationoptionsincludefourmodes:
TransmitandReceive(tx_rx):Thisisthedefaultsettingonallports.It
enablesagivenporttobothtransmitandreceiveLLDPpackets,andto
storethedatafromreceived(inbound)LLDPpacketsintheswitchsMIB.
Transmitonly(txonly):ThissettingenablesaporttotransmitLLDP
packetsthatcanbereadbyLLDPneighbors.However,theportdrops
inboundLLDPpacketsfromLLDPneighborswithoutreadingthem.This
preventstheswitchfromlearningaboutLLDPneighborsonthatport.
Receiveonly(rxonly):ThissettingenablesaporttoreceiveandreadLLDP
packetsfromLLDPneighbors,andtostorethepacketdataintheswitchs
MIB.However,theportdoesnottransmitoutboundLLDPpackets.This
preventsLLDPneighborsfromlearningabouttheswitchthroughthat
port.
Disable(disable):ThissettingdisablesLLDPpackettransmissionsand
receptiononaport.Inthisstate,theswitchdoesnotusetheportforeither
learningaboutLLDPneighborsorinformingLLDPneighborsofitspres-
ence.
SNMPNotification.Youcanenabletheswitchtosendanotificationtoany
configuredSNMPtrapreceiver(s)whentheswitchdetectsaremoteLLDP
datachangeonanLLDP-enabledport(page13-41).
Per-Port(Outbound)DataOptions. Thefollowingtableliststhe
informationtheswitchcanincludeintheper-port,outboundLLDPpacketsit
generates.Inthedefaultconfiguration,alloutboundLLDPpacketsinclude
thisinformationintheTLVstransmittedtoneighbordevices.However,you
canconfigureLLDPadvertisementsonaper-portbasistoomitsomeofthis
information(page13-44).
13-32
Table13-14. Viewable
1
DataAvailableforLLDPAdvertisements
DataType Configuration
Options
Default Description
ChassisType
2,6
N/A AlwaysEnabled IndicatesthethetypeofidentifierusedforChassisID.
ChassisID
6
N/A AlwaysEnabled UsesbaseMACaddressoftheswitch.
PortType
3,6
N/A AlwaysEnabled UsesLocal,meaningassignedlocallybyLLDP.
PortId
6
N/A AlwaysEnabled Usesportnumberofthephysicalport.
RemoteManagement
Address
Type
4,6
N/A AlwaysEnabled Showsthenetworkaddresstype.
Address
4
Defaultor Usesadefaultaddressselectionmethodunlessanoptionaladdressis
Configured configured.SeeRemoteManagementAddress,below.
SystemName
6
Enable/Disable Enabled Usestheswitchsassignedname.
SystemDescription
6
Enable/Disable Enabled Includesswitchmodelnameandrunningsoftwareversion,
andROMversion.
PortDescription
6
Enable/Disable Enabled Usesthephysicalportidentifier.
Systemcapabilities Enable/Disable Enabled Identifiestheswitchsprimarycapabilities(bridge,router).
supported
5,6
Systemcapabilities Enable/Disable Enabled Identifiestheprimaryswitchfunctionsthatareenabled,
enabled
5,6
suchasrouting.
1
ThePacketTime-to-Livevalueisnotviewable,butisincludedinLLDPdatapackets.(RefertoChangingtheTime-to-
LiveforTransmittedAdvertisementsonpage13-39.)
2
SubelementoftheChassisIDTLV.
3
SubelementofthePortIDTLV.
4
SubelementoftheRemote-Management-AddressTLV.
5
SubelementoftheSystemCapabilityTLV.
6
Populatedwithdatacapturedinternallybytheswitch.Formoreonthesedatatypes,refertotheIEEE802.1AB-2005
Standard.
RemoteManagementAddress.TheswitchalwaysincludesanIPaddress
initsLLDPadvertisements.Thiscanbeeitheranaddressselectedbyadefault
process,oranaddressconfiguredforinclusioninadvertisements.RefertoIP
AddressAdvertisementsonpage13-35.
DebugLogging. YoucanenableLLDPdebugloggingtoaconfigureddebug
destination(Syslogserverand/oraterminaldevice)byexecutingthedebug
lldpcommand.(FormoreonDebugandSyslog,seeDebugandSyslog
OperationonpageC-25.)NotethattheswitchsEventLogdoesnotrecord
usualLLDPupdatemessages.
13-33
OptionsforReadingLLDPInformationCollectedbythe
Switch
YoucanextractLLDPinformationfromtheswitchtoidentifyadjacentLLDP
devices.Optionsinclude:
Usingtheswitchsshowlldpinfocommandoptionstodisplaydata
collectedonadjacentLLDPdevicesaswellasthelocaldatathe
switchistransmittingtoadjacentLLDPdevices(page13-36).
UsinganSNMPapplicationthatisdesignedtoquerytheNeighbors
MIBforLLDPdatatouseindevicediscoveryandtopologymapping.
(ThisincludesCDPdatatheswitchhasreadandmappedtotheLLDP
counterpart.)
UsingthewalkmibcommandtodisplayalistingoftheLLDPMIB
objects
LLDPandLLDP-MEDStandardsCompatibility
Theoperationcoveredbythissectioniscompatiblewiththesestandards:
IEEEP802.1AB
RFC2922(PTOPO,orPhysicalTopologyMIB)
RFC2737(EntityMIB)
RFC2863(InterfacesMIB)
ANSI/TIA-1057/D6(LLDP-MED;refertoLLDP-MED(Media-Endpoint-
Discovery)onpage13-46.)
13-34
LLDPOperatingRules
(ForadditionalinformationspecifictoLLDP-MEDoperation,refertoLLDP-
MED(Media-Endpoint-Discovery)onpage13-46.)
PortTrunking. LLDPmanagestrunkedportsindividually.Thatis,trunked
portsareconfiguredindividuallyforLLDPoperation,inthesamemanneras
non-trunkedports.Also,LLDPsendsseparateadvertisementsoneachportin
atrunk,andnotonaper-trunkbasis.Similarly,LLDPdatareceivedthrough
trunkedportsisstoredindividually,per-port.
IPAddressAdvertisements.Inthedefaultoperation,ifaportbelongsto
onlyonestaticVLAN,thentheportadvertisesthelowest-orderIPaddress
configuredonthatVLAN.IfaportbelongstomultipleVLANs,thentheport
advertisesthelowest-orderIPaddressconfiguredontheVLANwiththe
lowestVID.IfthequalifyingVLANdoesnothaveanIPaddress,theport
advertises127.0.0.1asitsIPaddress.Forexample,iftheportisamemberof
thedefaultVLAN(VID=1),andthereisanIPaddressconfiguredforthe
defaultVLAN,thentheportadvertisesthisIPaddress.Inthedefaultoperation,
theIPaddressthatLLDPusescanbeanaddressacquiredbyDHCPorBootp.
Youcanoverridethedefaultoperationbyconfiguringtheporttoadvertise
anyIPaddressthatismanuallyconfiguredontheswitch,eveniftheportdoes
notbelongtotheVLANconfiguredwiththeselectedIPaddress(page13-43).
(NotethatLLDPcannotbeconfiguredthroughtheCLItoadvertisean
addressesacquiredthroughDHCPorBootp.However,asmentionedabove,
inthedefaultLLDPconfiguration,ifthelowest-orderIPaddressontheVLAN
withthelowestVIDforagivenportisaDHCPorBootpaddress,thenthe
switchincludesthisaddressinitsLLDPadvertisementsunlessanother
addressisconfiguredforadvertisementsonthatport.)Also,althoughLLDP
allowsconfiguringmultipleremotemanagementaddressesonaport,onlythe
lowest-orderaddressconfiguredontheportwillbeincludedinoutbound
advertisements.AttemptingtousetheCLItoconfigureLLDPwithanIP
addressthatiseithernotconfiguredonaVLAN,orhasbeenacquiredbyDHCP
orBootpresultsinthefollowingerrormessage.
xxx.xxx.xxx.xxx:ThisIPaddressisnotconfiguredoris
aDHCPaddress.
Spanning-TreeBlocking.SpanningtreedoesnotpreventLLDPpacket
transmissionorreceiptonSTP-blockedlinks.
802.1xBlocking.Portsblockedby802.1xoperationdonotallow
transmissionorreceiptofLLDPpackets.
13-35
ConfiguringLLDPOperation
Inthedefaultconfiguration,LLDPisenabledandinbothtransmitandreceive
modeonallactiveports.TheLLDPconfigurationincludesglobalsettingsthat
applytoallactiveportsontheswitch,andper-portsettingsthataffectonly
theoperationofthespecifiedports.
ThecommandsinthissectionaffectbothLLDPandLLDP-MEDoperation.for
informationonoperationandconfigurationuniquetoLLDP-MED,referto
LLDP-MED(Media-Endpoint-Discovery)onpage13-46.
.
Command Page
showlldpconfig 13-36
[no]lldprun 13-38
lldprefresh-interval 13-39
lldpholdtime-multiplier 13-39
lldpTxDelay 13-40
lldpReinitDelay 13-41
lldpenable-notification 13-41
lldpnotificationinterval 13-42
lldpadmin-status<txonly|rxonly|tx_rx|disable> 13-43
lldpconfig<port-list>IpAddrEnable 13-43
lldpconfig<port-list >basicTlvEnable 13-44
lldpconfig<port-list >dot3TlvEnable<macphy_config> 13-46
ViewingtheCurrentLLDPConfiguration
DisplayingtheGlobalLLDP,PortAdmin,andSNMPNotification
Status. ThiscommanddisplaystheswitchsgeneralLLDPconfiguration
status,includingsomeper-portinformationaffectingadvertisementtraffic
andtrapnotifications
.
Syntax showlldpconfig
DisplaystheLLDPglobalconfiguration,LLDPportstatus,and
SNMPnotificationstatus. Forinformationonportadmin
status,refertoConfiguringPer-PortLLDPTransmitand
ReceiveModesonpage13-43.
13-36
Forexample,showlldpconfigproducesthefollowingdisplaywhentheswitch
isinthedefaultLLDPconfiguration:
Figure13-15.ExampleofViewingtheGeneralLLDPConfiguration
Note:Thisvaluecorresponds
tothelldprefresh-interval
command(page13-39).
DisplayingPortConfigurationDetails. Thiscommanddisplaystheport-
specificconfiguration,including.
Syntax showlldpconfig<port-list>
DisplaystheLLDPport-specificconfigurationforallportsin
<port-list>,includingwhichoptionalTLVsandanynon-default
IPaddressthatareincludedintheportsoutbound
advertisements.Forinformationonthenotificationsetting,
refertoConfiguringSNMPNotificationSupportonpage
13-41.Forinformationontheotherconfigurablesettings
displayedbythiscommand,refertoConfiguringPer-Port
LLDPTransmitandReceiveModesonpage13-43.
13-37
TheblankIpAddressfieldindicatesthatthe
defaultIPaddresswillbeadvertisedfromthis
port.(Refertopage13-43:Configuringa
RemoteManagementAddressforOutbound
LLDPAdvertisements
Figure13-16.ExampleofPer-PortConfigurationDisplay
ConfiguringGlobalLLDPPacketControls
ThecommandsinthissectionconfiguretheaspectsofLLDPoperationthat
applythesametoallportsintheswitch.
EnablingorDisablingLLDPOperationontheSwitch.EnablingLLDP
operation(thedefault)causestheswitchto:
Useactive,LLDP-enabledportstotransmitLLDPpacketsdescribingitself
to neighbordevices.
AddentriestoitsneighborstablebasedondatareadfromincomingLLDP
advertisements.
Syntax [no]lldprun
EnablesordisablesLLDPoperationontheswitch.Thenoform
ofthecommand,regardlessofindividualLLDPport
configurations,preventstheswitchfromtransmitting
outboundLLDPadvertisements,andcausestheswitchtodrop
allLLDPadvertisementsreceivedfromotherdevices.The
switchpreservesthecurrentLLDPconfigurationwhenLLDP
isdisabled.AfterLLDPisdisabled,theinformationinthe
LLDPneighborsdatabaseremainsuntilittimes-out.(Default:
Enabled)
Forexample,todisableLLDPontheswitch:
ProCurve(config)#nolldprun
13-38
ChangingtheTransmissionIntervalforLLDPPackets.Thisinterval
controlshowoftenactiveportsretransmitadvertisementstotheirneighbors.
Syntax lldprefresh-interval<5-32768>
Changestheintervalbetweenconsecutivetransmissionsof
LLDPadvertisementsonanygivenport.(Default:30seconds)
Note:Therefresh-intervalmustbegreaterthanorequalto
(4xdelay-interval).(Thedefaultdelay-intervalis2).For
example,withthedefaultdelay-interval,thelowestrefresh-
intervalyoucanuseis8seconds(4x2=8).Thus,ifyouwant
arefresh-intervalof5seconds,youmustfirstchangethedelay
intervalto1(thatis,4x1<5).Ifyouwanttochangethedelay-
interval,usethesetmibcommand.(Refertopage13-40.)
ChangingtheTime-to-LiveforTransmittedAdvertisements.The
Time-to-Livevalue(inseconds)forallLLDPadvertisementstransmittedfrom
aswitchiscontrolledbytheswitchthatgeneratestheadvertisement,and
determineshowlonganLLDPneighborretainstheadvertiseddatabefore
discardingit.TheTime-to-Livevalueistheresultofmultiplyingtherefresh-
intervalbytheholdtime-multiplierdescribedbelow.
Syntax lldpholdtime-multiplier<2-10>
ChangesthemultiplieranLLDPswitchusestocalculatethe
Time-to-LivefortheLLDPadvertisementsitgeneratesand
transmitstoLLDPneighbors.WhentheTime-to-Livefora
givenadvertisementexpirestheadvertiseddataisdeletedfrom
theneighborswitchsMIB.(Default:4;Range:2-10)
Forexample,iftherefresh-intervalontheswitchis15secondsandthe
holdtime-multiplierisatthedefault,theTime-to-Liveforadvertisements
transmittedfromtheswitchis60seconds(4x15).ToreducetheTime-to-Live,
youcouldlowertheholdtime-intervalto2,whichwouldresultinaTime-to-
Liveof30seconds.
ProCurve(config)#lldpholdtime-multiplier2
13-39
ChangingtheDelayIntervalBetweenAdvertisementsGeneratedby
ValueorStatusChangestotheLLDPMIB.Theswitchusesadelay-
intervalsettingtodelaytransmittingsuccessiveadvertisementsresulting
fromtheseLLDPMIBchanges.Ifaswitchissubjecttofrequentchangesto
itsLLDPMIB,lengtheningthisintervalcanreducethefrequencyofsuccessive
advertisements.Thedelay-intervalcanbechangedusingeitheranSNMP
networkmanagementapplicationortheCLIsetmibcommand.
Syntax setmiblldpTxDelay.0-i<1-8192>
Usessetmibtochangetheminimumtime(delay-interval)
anyLLDPportwilldelayadvertisingsuccessiveLLDP
advertisementsduetoachangeinLLDPMIBcontent.
(Default:2;Range:1-8192)
Note:TheLLDPrefresh-interval(transmitinterval)mustbe
greaterthanorequalto(4xdelay-interval). Theswitchdoes
notallowincreasingthedelayintervaltoavaluethat
conflictswiththisrelationship.Thatis,theswitchdisplays
Inconsistentvalueif(4xdelay-interval)exceedsthecurrent
transmitinterval,andthecommandfails.Dependingonthe
currentrefresh-intervalsetting,itmaybenecessaryto
increasetherefresh-intervalbeforeusingthiscommandto
increasethedelay-interval.
Forexample,tochangethedelay-intervalfrom2secondsto8secondswhen
therefresh-intervalisatthedefault30seconds,youmustfirstsettherefresh-
intervaltoaminimumof32seconds(32=4x8).
Attempttochangethetransmit-delay
intervalshowsthattherefresh-
intervalislessthan(4xdelay-interval).
Changestherefresh-intervalto32;thatis:
32=4x(desired transmit-delay interval)
Successfullychangesthetransmit-
delayintervalto8.
Figure13-17.ExampleofChangingtheTransmit-DelayInterval
13-40
ChangingtheReinitializationDelayInterval.Inthedefault
configuration,aportreceivingadisablecommandfollowedimmediatelybya
txonly,rxonly,ortx_rxcommanddelaysreinitializingfortwoseconds,during
whichtimeLLDPoperationremainsdisabled.Ifanactiveportissubjectedto
frequenttogglingbetweentheLLDPdisabledandenabledstates,LLDP
advertisementsaremorefrequentlytransmittedtotheneighbordevice.Also,
theneighbortableintheadjacentdevicewillchangemorefrequently,asit
deletes,thenreplacesLLDPdatafortheaffectedportwhich,inturn,generates
SNMPtraps(iftrapreceiversandSNMPnotificationareconfigured).Allof
thiscanunnecessarilyincreasenetworktraffic.Extendingthereinitialization-
delayintervaldelaystheportsabilitytoreinitializeandgenerateLLDPtraffic
followinganLLDPdisable/enablecycle.
Syntax setmiblldpReinitDelay.0-i<1-10>
Usessetmibtochangetheminimumtime(reinitialization
delayinterval)anLLDPportwillwaitbeforereinitializing
afterreceivinganLLDPdisablecommandfollowedcloselyby
atxonlyortx_rxcommand.Thedelayintervalcommences
withexecutionofthelldpadmin-status<port-list>disable
command.(Default:2seconds;Range:1-10seconds)
Forexample,thefollowingcommandchangesthereinitializationdelay
intervaltofiveseconds:
ProCurve(config)#setmiblldpreinitdelay.0-i5
ConfiguringSNMPNotificationSupport
YoucanenableSNMPtrapnotificationofLLDPdatachangesdetectedon
advertisementsreceivedfromneighbordevices,andcontroltheinterval
betweensuccessivenotificationsofdatachangesonthesameneighbor.
EnablingLLDPDataChangeNotificationforSNMPTrapReceivers.
Syntax [no]lldpenable-notification<port-list >
Enablesordisableseachportin<port-list >forsending
notificationtoconfiguredSNMPtrapreceiver(s)ifanLLDP
datachangeisdetectedinanadvertisementreceivedonthe
portfromanLLDPneighbor.(Default:Disabled)
Forinformationonconfiguringtrapreceiversintheswitch,
refertothechaptertitledConfiguringforNetwork
ManagementApplicationsintheManagementand
13-41
Forexample,thiscommandenablesSNMPnotificationonports1-5:
ProCurve(config)#lldpenable-notification1-5
ChangingtheMinimumIntervalforSuccessiveLLDPDataChange
NotificationsfortheSameNeighbor.
IfLLDPtrapnotificationisenabledonaport,arapidsuccessionofchanges
inLLDPinformationreceivedinadvertisementsfromoneormoreneighbors
cangenerateahighnumberoftraps.Toreducethiseffect,youcanglobally
changetheintervalbetweensuccessivenotificationsofneighbordatachange.
Syntax setmiblldpnotificationinterval.0-i<1-3600>
Globallychangestheintervalbetweensuccessivetraps
generatedbytheswitch.Ifmultipletrapsaregeneratedinthe
specifiedinterval,onlythefirsttrapwillbesent.The
remainingtrapswillbesuppressed.(Anetworkmanagement
applicationcanperiodicallychecktheswitchMIBtodetectany
missedchangenotificationtraps.RefertoIEEE802.1AB-2005
orlaterformoreinformation.)(Default:5seconds)
Forexample,thefollowingcommandlimitschangenotificationtrapsfroma
particularswitchtooneperminute.
ProCurve(config)#setmiblldpnotificationinterval.0-i60
lldpNotificationInterval.0=60
13-42
ConfiguringPer-PortLLDPTransmitandReceiveModes
ThesecommandscontrolLLDPadvertisementtrafficinboundandoutbound
onactiveports.
Syntax lldpadmin-status<port-list ><txonly|rxonly|tx_rx|disable>
WithLLDPenabledontheswitchinthedefaultLLDP
configuration,eachportisconfiguredtotransmitandreceive
LLDPpackets.Theseoptionsenableyoutocontrolwhichports
participateinLLDPtrafficandwhethertheparticipating
portsallowLLDPtrafficinonlyonedirectionorinboth
directions.
txonly:Configuresthespecifiedport(s)totransmitLLDPpack-
ets,butblockinboundLLDPpacketsfromneighbordevices.
rxonly:Configuresthespecifiedport(s)toreceiveLLDPpackets
fromneighbors,butblockoutboundpacketstoneighbors.
tx_rx:Configuresthespecifiedport(s)tobothtransmitand
receiveLLDPpackets.(Thisisthedefaultsetting.)
disable:DisablesLLDPpackettransmitandreceiveonthe
specifiedport(s).
ConfiguringLLDPPer-PortAdvertisementContent
InthedefaultLLDPconfiguration,outboundadvertisementsfromeachport
ontheswitchincludeboththemandatoryandtheoptionaldatalistedinthe
nexttwosubsections.
MandatoryData.AnactiveLLDPportontheswitchalwaysincludesthe
mandatorydatainitsoutboundadvertisements.LLDPcollectsthemandatory
data,and,exceptfortheRemoteManagementAddress,youcannotuseLLDP
commandstoconfiguretheactualdata.
ChassisType(TLVsubelement)
ChassisID(TLV)
PortType(TLVsubelement)
PortID(TLV)
RemoteManagementAddress(TLV;actualIPaddressisasubelementthat
canbeadefaultaddressoraconfiguredaddress)
ConfiguringaRemoteManagementAddressforOutboundLLDP
Advertisements.Thisisanoptionalcommandyoucanusetoincludea
specificIPaddressintheoutboundLLDPadvertisementsforspecificports.
13-43
Syntax [no]lldpconfig<port-list >ipAddrEnable<ip-address>
ReplacesthedefaultIPaddressfortheportwithanIP
addressyouspecify.ThiscanbeanyIPaddressconfigured
inastaticVLANontheswitch,eveniftheportdoesnot
belongtotheVLANconfiguredwiththeselectedIPaddress.
ThenoformofthecommanddeletesthespecifiedIP
address.IftherearenoIPaddressesconfiguredas
managementaddresses,thentheIPaddressselection
methodreturnstothedefaultoperation.(Default:Theport
advertisestheprimaryIPaddressofthelowest-numbered
VLAN(VID)towhichitbelongs.IfthereisnoIPaddress
configuredontheVLAN(s)towhichtheportbelongs,and
theportisnotconfiguredtoadvertiseanIPaddressfrom
anyother(static)VLANontheswitch,thentheport
advertisesanaddressof127.0.0.1.)
Note:ThiscommanddoesnotaccepteitherIPaddresses
acquiredthroughDHCPorBootp,orIPaddressesthatare
notconfiguredinastaticVLANontheswitch
Forexample,ifport3belongstoasubnettedVLANthatincludesasecondary
IPaddressof10.10.10.100andyouwantedport3tousethissecondaryaddress
inLLDPadvertisements,youwouldneedtoexecutethefollowingcommand:
ProCurve(config)#lldpconfig3ipAddrEnable10.10.10.100
OptionalData. Youcanconfigureanindividualportorgroupofportsto
excludeoneormoreofthesedatatypesfromoutboundLLDPadvertisements.
Notethatoptionaldatatypes,whenenabled,arepopulatedwithdatainternal
totheswitch;thatis,youcannotuseLLDPcommandstoconfiguretheiractual
content.
PortDescription(TLV)
SystemName(TLV)
SystemDescription(TLV)
SystemCapabilities(TLV)
SystemCapabilitiesSupported(TLVsubelement)
SystemCapabilitiesEnabled(TLVsubelement)
portspeedandduplex(TLVsubelement)
13-44
Syntax [no]lldpconfig<port-list >basicTlvEnable<TLV-Type>
port_descr
ForoutboundLLDPadvertisements,includesan
alphanumericstringdescribingtheport.
system_name
ForoutboundLLDPadvertisements,includesthesystems
assignedname.
system_descr
ForoutboundLLDPadvertisements,includesan
alphanumericstringdescribingthefullnameandversion
identificationforthesystemshardwaretype,software
version,andnetworkingapplication.
system_cap
Foroutboundadvertisements,includesabitmaskof
systemcapabilities(devicefunctions)thataresupported.
Alsoincludesinformationonwhetherthecapabilitiesare
enabled.
Forexample,ifyouwantedtoexcludethesystemnamefromtheoutbound
LLDPadvertisementsforallportsona2626switch,youwouldusethis
command:
ProCurve(config)#nolldpconfig1-26basicTlvEnable
system_name
Ifyoulaterdecidedtoreinstatethesystemnameonports1-5,youwoulduse
thiscommand:
ProCurve(config)#lldpconfig1-5basicTlvEnable
system_name
Advertisements
ThisfeatureisoptionalforLLDPoperation,butisrequiredforLLDP-MED
operation.
Portspeedandduplexadvertisementsaresupportedontheswitchescovered
inthisguidetoinformanLLDPendpointandtheswitchportofeachothers
portspeedandduplexconfigurationandcapabilities.Configuration
mismatchesbetweenaswitchportandanLLDPendpointcanresultin
13-45
excessivecollisionsandvoicequalitydegradation.LLDPenablesdiscoveryof
suchmismatchesbysupportingSNMPaccesstotheswitchMIBforcomparing
thecurrentswitchportandendpointsettings.(Changingacurrentdevice
configurationtoeliminateamismatchrequiresinterventionbythesystem
operator.)
Syntax: [no]lldpconfig<port-list >dot3TlvEnablemacphy_config
Foroutboundadvertisements,thisTLVincludesthe
(local)switchportscurrentspeedandduplexsettings,the
rangeofspeedandduplexsettingstheportsupports,and
themethodrequiredforreconfiguringthespeedand
duplexsettingsonthedevice(auto-negotiationduring
linkinitialization,ormanualconfiguration).
UsingSNMPtocomparelocalandremoteinformationcan
helpinlocatingconfigurationmismatches.
(Default:Enabled)
Note:ForLLDPoperation,thisTLVisoptional.For
LLDP-MEDoperation,thisTLVismandatory.
Asmentionedabove,anSNMPnetworkmanagementapplicationcanbeused
tocomparetheportspeedandduplexdataconfiguredintheswitchand
advertisedbytheLLDPendpoint.YoucanalsousetheCLItodisplaythis
information.FormoreonusingtheCLItodisplayportspeedandduplex
information,refertoDisplayingtheCurrentPortSpeedandDuplex
ConfigurationonaSwitchPortonpage13-63.
LLDP-MED(Media-Endpoint-Discovery)
LLDP-MED(ANSI/TIA-1057/D6)extendstheLLDP(IEEE802.1AB)industry
standardtosupportadvancedfeaturesonthenetworkedgeforVoiceOverIP
(VoIP)endpointdeviceswithspecializedcapabilitiesandLLDP-MED
standards-basedfunctionality.LLDP-MEDintheswitchesusesthestandard
LLDPcommandsdescribedearlierinthissection,withsomeextensions,and
alsointroducesnewcommandsuniquetoLLDP-MEDoperation.Theshow
commandsdescribedelsewhereinthissectionareapplicabletobothLLDP
andLLDP-MEDoperation.LLDP-MEDbenefitsinclude:
plug-and-playprovisioningforMED-capable,VoIPendpointdevices
simplified,vendor-independentmanagementenablingdifferentIP
telephonysystemstointeroperateononenetwork
automaticdeploymentofconvergencenetworkpolicies(voice
VLANs,Layer2/CoSpriority,andLayer3/QoSpriority)
13-46
IP Network
Infrastructure
(IEEE 802 LAN)
IP Network
Infrastructure
(IEEE 802 LAN)
IP Network
Infrastructure
(IEEE 802 LAN)
configurableendpointlocationdatatosupporttheEmergencyCall
Service(ECS)(suchasEnhanced911service,999,112)
detailedVoIPendpointdatainventoryreadableviaSNMPfromthe
switch
PoweroverEthernet(PoE)statusandtroubleshootingsupportvia
SNMP
supportforIPtelephonynetworktroubleshootingofcallquality
issuesviaSNMP
ThissectiondescribeshowtoconfigureanduseLLDP-MEDfeaturesinthe
switchestosupportVoIPnetworkedgedevices(MediaEndpointDevices)
suchas:
IPphones
voice/mediagateways
mediaservers
IPcommunicationscontrollers
otherVoIPdevicesorservers
IP Network
Infrastructure
(IEEE 802 LAN)
SwitchesProvidingNetwork
AccesstoLLDP-MEDEndpoints
LLDP-MEDClass1GenericEndpoints
SuchAsIPCallControlDevices
LLDP-MEDClass2MediaEndpointsSuchAs
MediaGateways,ConferenceBridges,and
otherDevicesSupportingIPMediaStreams
LLDP-MEDClass3End-UserIPCommunication
DevicesSuchAsVoIPTelephones
Figure13-18.ExampleofLLDP-MEDNetworkElements
13-47
LLDP-MEDEndpointSupport. LLDP-MEDontheswitchescoveredinthis
guideinteroperateswithdirectlyconnectedIPtelephony(endpoint)clients
havingthesefeaturesandservices:
abletoautonegotiatespeedandduplexconfigurationwiththeswitch
abletousethefollowingnetworkpolicyelementsconfiguredonthe
clientport
voiceVLAN ID
802.1p(Layer2)QoS
Diffservcodepoint(DSCP)(Layer3)QoS
discoverandadvertisedevicelocationdatalearnedfromtheswitch
supportemergencycallservice(ECSsuchasE911,999,and112)
advertisedeviceinformationforthedevicedatainventorycollected
bytheswitch,including:
hardwarerevision serialnumber assetID
firmwarerevision manufacturername
softwarerevision modelname
provideinformationonnetworkconnectivitycapabilities(for
example,amulti-portVoIPphonewithLayer2switchcapability)
supportthefaststartcapability
Not e LLDP-MEDontheswitchescoveredinthisguideisintendedforusewithVoIP
endpoints,andisnotdesignedtosupportlinksbetweennetwork
infrastructuredevices,suchasswitch-to-switchorswitch-to-routerlinks.
LLDP-MEDEndpointDeviceClasses. LLDP-MEDendpointdevicesare,
bydefinition,locatedatthenetworkedgeandcommunicateusingtheLLDP-
MEDframework.AnyLLDP-MEDendpointdevicebelongstooneofthe
followingthreeclasses:
Class1(GenericEndpointDevices):Thesedevicesofferthebasic
LLDPdiscoveryservices,networkpolicyadvertisement(VLANID,
Layer2/802.1ppriority,andLayer3/DSCPpriority),andPoEmanage-
ment.ThisclassincludessuchdevicesasIPcallcontrollersand
communication-relatedservers.
13-48
Class2(MediaEndpointDevices):ThesedevicesofferallClass1
featuresplusmediastreamingcapability,andincludesuchdevicesas
voice/mediagateways,conferencebridges,andmediaservers.
Class3(CommunicationDevices):ThesedevicesaretypicallyIP
phonesorend-userdevicesthatotherwisesupportIPmediaandoffer
allClass1andClass2features,pluslocationidentificationand
emergency911capability,Layer2switchsupport,anddeviceinfor-
mationmanagement.
LLDP-MEDOperationalSupport.Theswitchescoveredinthisguideoffer
twoconfigurableTLVssupportingMED-specificcapabilities:
medTlvEnable(forper-portenablingordisablingofLLDP-MEDopera-
tion)
medPortLocation(forconfiguringper-portlocationoremergencycall
data)
Not e LLDP-MEDoperationalsorequirestheportspeedandduplexTLV
(dot3TlvEnable;page13-46),whichisenabledinthedefaultconfiguration.
LLDP-MEDTopologyChangeNotification
ThisoptionalfeatureprovidesinformationanSNMPapplicationcanuseto
trackLLDP-MEDconnectsanddisconnects.
13-49
Syntax: lldptop-change-notify<port-list >
Topologychangenotification,whenenabledonanLLDP
port,causestheswitchtosendanSNMPtrapifitdetects
LLDP-MEDendpointconnectionordisconnectionactivity
ontheport,oranage-outoftheLLDP-MEDneighboronthe
port.Thetrapincludesthefollowinginformation:
theportnumber(internal)onwhichtheactivitywas
detected(Formoreininternalportnumbers,referto
DeterminingtheSwitchPortNumberIncludedin
TopologyChangeNotificationTrapsonpage13-70.)
theLLDP-MEDclassofthedevicedetectedontheport
(LLDP-MEDEndpointDeviceClassesonpage13-48.)
Theshowrunningcommandshowswhetherthetopology
changenotificationfeatureisenabledordisabled.For
example,ifportsA1-A10havetopologychangenotification
enabled,thefollowingentryappearsintheshowrunning
output:
l l dp t op- change- not i f y A1- A10
(Default:Disabled)
Note:Tosendtraps,thisfeaturerequiresaccesstoatleast
oneSNMPserver.Forinformationonconfiguringtraps,
refertoSNMPNotificationandTrapsonpage13-17.
Also,ifadetectedLLDP-MEDneighborbeginssending
advertisementswithoutLLDP-MEDTLVs,theswitchsends
atop-change-notifytrap.
Not e Topologychangenotificationsprovideonemethodformonitoringsystem
activity.However,becauseSNMPnormallyemploysUDP,whichdoesnot
guaranteedatagramdelivery,topologychangenotificationshouldnotbe
relieduponasthesolemethodformonitoringcriticalendpointdevice
connectivity.
13-50
LLDP-MEDFastStartControl
Syntax: lldpfast-start-count<1-10>
AnLLDP-MEDdeviceconnectingtoaswitchportmayuse
thedatacontainedintheMEDTLVsfromtheswitchto
configureitself.However,thelldprefresh-intervalsetting
(default:30seconds)fortransmittingadvertisementscan
causeanunacceptabledelayinMEDdeviceconfiguration.
TosupportrapidLLDP-MEDdeviceconfiguration,thelldp
fast-start-countcommandtemporarilyoverridestherefresh-
intervalsettingforthefast-start-countadvertisementinterval.
ThisresultsintheportinitiallyadvertisingLLDP-MEDat
afasterrateforalimitedtime.Thus,whentheswitchdetects
anewLLDP-MEDdeviceonaport,ittransmitsoneLLDP-
MEDadvertisementpersecondouttheportfortheduration
ofthefast-start-countinterval.Inmostcases,thedefault
settingshouldprovideanadequatefast-start-countinterval.
(Range:1-10seconds;Default:5seconds)
Note:Thisglobalcommandappliesonlytoportsonwhich
anewLLDP-MEDdeviceisdetected.Itdoesnotoverridethe
refresh-intervalsettingonportswherenon-MEDdevicesare
detected.
andLocationData
ThemedTlvEnableoptionontheswitchisenabledinthedefaultconfiguration
andsupportsthefollowingLLDP-MEDTLVs:
LLDP-MEDcapabilities:ThisTLVenablestheswitchtodetermine:
whetheraconnectedendpointdevicesupportsLLDP-MED
whichspecificLLDP-MEDTLVstheendpointsupports
thedeviceclass(1,2,or3)fortheconnectedendpoint
ThisTLValsoenablesanLLDP-MEDendpointtodiscoverwhatLLDP-
MEDTLVstheswitchportcurrentlysupports.
networkpolicyoperatingontheporttowhichtheendpointisconnected
(VLAN,Layer2QoS,Layer3QoS)
PoE(MEDPower-over-Ethernet)
physicallocationdatapage56
13-51
Not e LLDP-MEDoperationrequiresthemacphy_configTLVsubelementenabled
bydefaultthatisoptionalforIEEE802.1ABLLDPoperation.Refertothe
dot3TlvEnablemacphy_configcommandonpage13-46.
NetworkPolicyAdvertisements.Networkpolicyadvertisementsare
intendedforreal-timevoiceandvideoapplications,andincludetheseTLV
subelements:
Layer2(802.1p)QoS
Layer3DSCP(diffservcodepoint)QoS
VoiceVLANID(VID)
VLANOperatingRules.TheserulesaffectadvertisementsofVLANsin
networkpolicyTLVs:
TheVLANIDTLVsubelementappliesonlytoaVLANconfiguredforvoice
operation(vlan<vid>voice).
IftherearemultiplevoiceVLANsconfiguredonaport,LLDP-MED
advertisesthevoiceVLANhavingthelowestVID.
ThevoiceVLANportmembershipconfiguredontheswitchcanbetagged
oruntagged.However,iftheLLDP-MEDendpointexpectsataggedmem-
bershipwhentheswitchportisconfiguredforuntagged,orthereverse,
thenaconfigurationmismatchresults.(Typically,theendpointexpects
theswitchporttohaveataggedvoiceVLANmembership.)
IfagivenportdoesnotbelongtoavoiceVLAN,thentheswitchdoesnot
advertisetheVLANIDTLVthroughthisport.
PolicyElements. Thesepolicyelementsmaybestaticallyconfiguredonthe
switchordynamicallyimposedduringanauthenticatedsessionontheswitch
usingaRADIUSserverand802.1XorMACauthentication.(Web
authenticationdoesnotapplytoVoIPtelephonesandother
telecommunicationsdevicesthatarenotcapableofaccessingtheswitch
throughaWebbrowser.)TheQoSandvoiceVLANpolicyelementscanbe
staticallyconfiguredwiththefollowingCLIcommands:
vlan<vid >voice
vlan<vid><tagged|untagged><port-list>
int<port-list>qospriority<0-7>
vlan<vid>qosdscp<codepoint>
13-52
Not es Acodepointmusthavean802.1pprioritybeforeyoucanconfigureitforuse
inprioritizingpacketsbyVLAN-ID.IfacodepointyouwanttouseshowsNo
OverrideinthePrioritycolumnoftheDSCPpolicytable(displaywithshowqos-
dscpmap,thenuseqos-dscpmap<codepoint>priority<0-7>toconfigurea
prioritybeforeproceeding.Formoreonthistopic,refertothechaptertitled
QualityofService(QoS):ManagingBandwidthMoreEffectivelyinthe
AdvancedTrafficManagementGuideforyourswitch.
EnablingorDisablingmedTlvEnable.InthedefaultLLDP-MED
configuration,theTLVscontrolledbymedTlvEnableareenabled.
Syntax: [no]lldpconfig<port-list >medTlvEnable<medTlv>
EnablesordisablesadvertisementofthefollowingTLVs
onthespecifiedports:
devicecapabilityTLV
configurednetworkpolicyTLV
configuredlocationdataTLV(RefertoConfiguring
LocationDataforLLDP-MEDDevicesonpage
13-56.)
currentPoEstatusTLV
(Default:AlloftheaboveTLVsareenabled.)
Helpstolocateconfigurationmismatchesbyallowinguse
ofanSNMPapplicationtocomparetheLLDP-MEDcon-
figurationonaportwiththeLLDP-MEDTLVsadvertised
byaneighborconnectedtothatport.
capabilities
13-53
ThisTLVenablestheswitchtodetermine:
whichLLDP-MEDTLVsaconnectedendpointcan
discover
thedeviceclass(1,2,or3)fortheconnected
endpoint
ThisTLValsoenablesanLLDP-MEDendpointto
discoverwhatLLDP-MEDTLVstheswitchportcur-
rentlysupports.
(Default:enabled)
Note:ThisTLVcannotbedisabledunlessthe
network_policy,poe,andlocation_idTLVsarealready
disabled.
network-policy
ThisTLVenablestheswitchporttoadvertiseits
configurednetworkpolicies(voiceVLAN,Layer2QoS,
Layer3QoS),andallowsLLDP-MEDendpointdevicesto
auto-configurethevoicenetworkpolicyadvertisedbythe
switch.ThisalsoenablestheuseofSNMPapplicationsto
troubleshootstaticallyconfiguredendpointnetwork
policymismatches.
(Default:Enabled)
Notes:Networkpolicyisonlyadvertisedforportsthatare
configuredasmembersofthevoiceVLAN.Iftheport
belongstomorethanonevoiceVLAN,thenthevoice
VLANwiththelowest-numberedVIDisselectedasthe
VLANforvoicetraffic.Also,thisTLVcannotbeenabled
unlessthecapabilityTLVisalreadyenabled.
Formoreinformation,refertoNetworkPolicy
Advertisementsonpage13-52
location_id
ThisTLVenablestheswitchporttoadvertiseits
configuredlocationdata(ifany).Formoreon
configuringlocationdata,refertoConfiguringLocation
DataforLLDP-MEDDevices.
(Default:Enabled)
Note:Whendisabled,thisTLVcannotbeenabledunless
thecapabilityTLVisalreadyenabled.
13-54
poe
ThisTLVenablestheswitchporttoadvertiseitscurrent
PoE(PoweroverEthernet)stateandtoreadthePoE
requirementsadvertisedbytheLLDP-MEDendpoint
deviceconnectedtotheport.
(Default:Enabled)
Note:Whendisabled,thisTLVcannotbeenabledunless
thecapabilityTLVisalreadyenabled.
Formoreonthistopic,refertoPoEAdvertisements,
below.
PoEAdvertisements. TheseadvertisementsinformanLLDP-MED
endpointofthepower(PoE)configurationonswitchports.Similar
advertisementsfromanLLDP-MEDendpointinformtheswitchofthe
endpointspowerneedsandprovideinformationthatcanbeusedtoidentify
powerprioritymismatches.
Power-over-EthernetTLVsincludethefollowingpowerdata:
powertype:indicateswhetherthedeviceisapower-sourcingentity
(PSE)orapowereddevice(PD).AMED-capableVoIPtelephoneisaPD.
powersource:indicatesthesourceofpowerinusebythedevice.Power
sourcesforpowereddevices(PDs)includePSE,local(internal),andPSE/
local.TheswitchescoveredinthisguideadvertiseUnknown.
powerpriority:indicatesthepowerpriorityconfiguredontheswitch
(PSE)portorthepowerpriorityconfiguredontheMED-capableend-
point.
powervalue:indicatesthetotalpowerinwattsthataswitchport(PSE)
candeliverataparticulartime,orthetotalpowerinwattsthattheMED
endpoint(PD)requirestooperate.
TodisplaythecurrentpowerdataforanLLDP-MEDdeviceconnectedtoa
port,usethefollowingcommand:
showlldpinforemote-device<port-list>
Formoreonthiscommand,refertopage13-64.
13-55
TodisplaythecurrentPoEconfigurationontheswitch,usethefollowing
commands:
showpowerbrief<port-list>
showpower<port-list>
FormoreonPoEconfigurationandoperation,refertoChapter11,Power
OverEthernet(PoE)Operation.
ConfiguringLocationDataforLLDP-MEDDevices
Youcanconfigureaswitchporttoadvertiselocationdatafortheswitchitself,
thephysicalwall-jacklocationoftheendpoint(recommended),orthe
locationofaDHCPserversupportingtheswitchand/orendpoint.Youalso
havetheoptionofconfiguringthesedifferentaddresstypes:
civicaddress:physicaladdressdatasuchascity,streetnumber,and
buildinginformation
ELIN(EmergencyLocationIdentificationNumber):anemergency
numbertypicallyassignedtoMLTS(MultilineTelephoneSystemOpera-
tors)inNorthAmerica
coordinate-basedlocation:attitude,longitude,andaltitudeinforma-
tion(RequiresconfigurationviaanSNMPapplication.)
Syntax: [no]lldpconfig<port-list >medPortLocation< Address-Type>
Configureslocationoremergencycalldatatheswitchadvertises
perportinthelocation_idTLV.ThisTLVisforusebyLLDP-
MEDendpointsemployinglocation-basedapplications.
Note:TheswitchallowsonemedPortLocationentryper
port(withoutregardtotype).Configuringanew
medPortLocationentryofanytypeonaportreplaces
anypreviouslyconfiguredentryonthatport.
13-56
civic-addr<COUNTRY-STR><WHAT><CA-TYPE><CA-VALUE>...
[<CA-TYPE><CA-VALUE>]...[<CA-TYPE><CA-VALUE>]
Thiscommandenablesconfigurationofaphysical
addressonaswitchport,andallowsupto75characters
ofaddressinformation.
COUNTRY-STR:Atwo-charactercountrycode,asdefinedby
ISO3166.SomeexamplesincludeFR(France),DE
(Germany),andIN(India).Thisfieldisrequiredina
civic-addrcommand.(Foracompletelistofcountrycodes,
visitwww.iso.orgontheworldwideweb.)
WHAT:Asingle-digitnumberspecifyingthetypeofdevice
towhichthelocationdataapplies:
0:LocationofDHCPserver
1:Locationofswitch
2:LocationofLLDP-MEDendpoint(recommended
application)
Thisfieldisrequiredinacivic-addrcommand.
Continued
13-57
Continued
Type/ValuePairs(CA-TYPEandCA-VALUE):Thisisa
seriesofdatapairs,eachcomposedofalocationdata
typespecifierandthecorrespondinglocationdata
forthattype.Thatis,thefirstvalueinapairis
expectedtobethecivicaddresstypenumber(CA-
TYPE),andthesecondvalueinapairisexpectedto
bethecorrespondingcivicaddressdata(CA-VALUE).
Forexample,iftheCA-TYPEforcitynameis3,then
thetype/valuepairtodefinethecityofParisis3
Paris.Multipletype/valuepairscanbeenteredinany
order,althoughitisrecommendedthatmultiple
pairsbeenteredinascendingorderoftheCA-
TYPE.Whenanemergencycallisplacedfroma
properlyconfiguredclass3endpointdevicetoan
appropriatePSAP,thecountrycode,devicetype,and
type/valuepairsconfiguredontheswitchportare
includedinthetransmission.Thetypespecifiers
areusedbythePSAPtoidentifyandorganizethe
locationdatacomponentsinanunderstandable
formatforresponsepersonneltointerpret.Acivic-
addrcommandrequiresaminimumofonetype/
valuepair,buttypicallyincludesmultipletype/value
pairsasneededtoconfigureacompletesetofdata
describingagivenlocation.CA-TYPE:Thisisthefirst
entryinatype/valuepair,andisanumberdefining
thetypeofdatacontainedinthesecondentryinthe
type/valuepair(CA-VALUE).SomeexamplesofCA-TYPE
specifiersinclude:
3= city
6=street(name)
25=buildingname
(Range:0-255)
ForasamplelistingofCA-TYPEspecifiers,refertotable
13-4onpage13-60.
CA-VALUE:Thisisthesecondentryinatype/value
pair,andisanalphanumericstringcontaining
thelocationinformationcorrespondingtothe
immediatelyprecedingCA-TYPEentry.Strings
aredelimitedbyeitherblankspaces,single
quotes(...),ordoublequotes(...).Eachstring
shouldrepresentaspecificdatatypeinasetof
uniquetype/valuepairscomprisingthe
descriptionofalocation,andeachstringmust
beprecededbyaCA-TYPEnumberidentifyingthe
typeofdatainthestring.
13-58
Note:AswitchportallowsoneinstanceofanygivenCA-
TYPE.Forexample,ifatype/valuepairof6Atlantic(to
specifyAtlanticasastreetname)isconfiguredonport
A5andlateranothertype/valuepairof6Pacificis
configuredonthesameport,thenPacificreplacesAtlantic
inthecivicaddresslocationconfiguredforportA5.
elin-addr<emergency-number >
ThisfeatureisintendedforuseinEmergencyCallService
(ECS)applicationstosupportclass3LLDP-MEDVoIP
telephonesconnectedtoaswitchcoveredinthisguidein
amultilinetelephonesystem(MLTS)infrastructure.An
ELIN(EmergencyLocationIdentificationNumber)isa
validNorthAmericanNumberingPlan(NANP)format
telephonenumberassignedtoMLTSoperatorsinNorth
Americabytheappropriateauthority.TheELINisused
torouteemergency(E911)callstoaPublicSafety
AnsweringPoint(PSAP).
(Range:1-15numericcharacters)
ConfiguringCoordinate-BasedLocations. Latitude,longitude,and
altitudedatacanbeconfiguredperswitchportusinganSNMPmanagement
application.Formoreinformation,refertothedocumentationprovidedwith
theapplication.AfurthersourceofinformationonthistopicisRFC3825-
DynamicHostConfigurationProtocolOptionforCoordinate-based
LocationConfigurationInformation.
Not e EndpointuseofdatafromamedPortLocationTLVsentbytheswitchisdevice-
dependent.Refertothedocumentationprovidedwiththeendpointdevice.
13-59
Table13-4. SomeLocationCodesUsedinCA-TYPEFields*
LocationElement Code LocationElement Code
nationalsubdivision 1
regionalsubdivision 2
cityortownship 3
citysubdivision 4
street 6
streetsuffix 18
streetnumber 19
additionallocationdata 22
unitorapartment 26
floor 27
roomnumber 28
*Thecodeassignmentsinthistableareexamplesfromawork-in-progress(the
internetdrafttitledDynamicHostConfigurationProtocol(DHCPv4and
DHCPv6)OptionforCivicAddressesConfigurationInformationdraft-ietf-
geopriv-dhcp-civil-06datedMay30,2005.)Fortheactualcodestouse,
contactthePSAPorotherauthorityresponsibleforspecifyingthecivic
addressingdatastandardforyournetwork.
ExampleofaLocationConfiguration. Supposeasystemoperator
wantedtoconfigurethefollowinginformationasthecivicaddressfora
telephoneconnectedtohercompanysnetworkthroughportA2ofaswitch
atthefollowinglocation:
Description CA-Type CA-VALUE
nationalsubdivision 1 CA
city 3 Widgitville
street 6 Main
streetnumber 19 1433
unit 26 Suite4-N
floor 27 4
roomnumber 28 N4-3
13-60
Figure13-19showsthecommandsforconfiguringanddisplayingtheabove
data.
Figure13-19.ExampleofaCivicAddressConfiguration
DisplayingAdvertisementData
Command Page
showlldpinfolocal-device below
showlldpinforemote-device 13-64
showlldpinfostats 13-66
13-61
Advertisements
Thesecommandsdisplaythecurrentswitchinformationthatwillbeusedto
populateoutboundLLDPadvertisements.
Syntax showlldpinfolocal-device[port-list]
Withoutthe[port-list ]option,thiscommanddisplaystheglobal
switchinformationandtheper-portinformationcurrently
availableforpopulatingoutboundLLDPadvertisements.
Withthe[port-list]option,thiscommanddisplaysonlythe
followingport-specificinformationthatiscurrentlyavailable
foroutboundLLDPadvertisementsonthespecifiedports:
PortType
PortId
PortDesc
Note:Thiscommanddisplaystheinformationavailableon
theswitch.Usethelldpconfig<port-list>commandtochange
theselectionofinformationthatisincludedinactual
outboundadvertisements.InthedefaultLLDPconfiguration,
allinformationdisplayedbythiscommandistransmittedin
outboundadvertisements.
Forexample,inthedefaultconfiguration,theswitchinformationcurrently
availableforoutboundLLDPadvertisementsappearssimilartothedisplayin
figure13-20onpagepage13-63.
13-62
TheManagementAddressfielddisplaysonly
theLLDP-configurableIPaddressesonthe
switch.(Onlymanually-configuredIP
addressesareLLDP-configurable.)Ifthe
switchhasonlyanIPaddressfromaDHCPor
Bootpserver,thentheManagementAddress
fieldisempty(becausetherearenoLLDP-
configurableIPaddressesavailable).Formore
onthistopic,refertoRemoteManagement
Addressonpage13-33.
Figure13-20.ExampleofDisplayingtheGlobalandPer-PortInformationAvailableforOutbound
Advertisements
Figure13-21.ExampleoftheDefaultPer-PortInformationContentforPorts1and2
DisplayingtheCurrentPortSpeedandDuplexConfigurationona
SwitchPort.Portspeedandduplexinformationforaswitchportanda
connectedLLDP-MEDendpointcanbecomparedforconfiguration
mismatchesbyusinganSNMPapplication.YoucanalsousetheswitchCLI
todisplaythisinformation,ifnecessary.Thefollowingtwocommandsprovide
methodsfordisplayingspeedandduplexinformationforswitchports.For
13-63
informationondisplayingthecurrentlyconfiguredportspeedandduplexon
anLLDP-MEDendpoint,refertoDisplayingtheCurrentPortSpeedand
DuplexConfigurationonaSwitchPortonpage13-63.
Syntax: showinterfacesbrief<port-list>
IncludesportspeedandduplexconfigurationintheMode
columnoftheresultingdisplay.
DisplayingAdvertisementsCurrentlyintheNeighborsMIB.These
commandsdisplaythecontentoftheinboundLLDPadvertisementsreceived
fromotherLLDPdevices.Thesecommandscanalsodisplaythecontentof
inboundCDPadvertisements.(Formoreonhowtheswitcheshandledata
receivedinCDPadvertisements,refertoLLDPandCDPDataManagement
onpage13-71).
Syntax showlldpinforemote-device[port-list]
Withoutthe[port-list]option,thiscommandprovidesaglobal
listoftheindividualdevicesithasdetectedbyreadingLLDP
advertisements(andalsoCDPadvertisements).Discovered
devicesarelistedbytheinboundportonwhichtheywere
discovered.
Multipledeviceslistedforasingleportindicateseitherorboth
ofthefollowing:
AdiscovereddeviceistransmittingbothLLDPandCDP
packetswithdifferentchassisandportIDinformation.
Multipledevicesareconnectedtotheswitchthroughahub.
Discoveringthesamedeviceonmultipleportsindicatesthat
theremotedevicemaybeconnectedtotheswitchinoneofthe
followingways:
ThroughdifferentVLANSusingseparatelinks.(This
appliestoswitchesthatusethesameMACaddressforall
configuredVLANs.)
Throughdifferentlinksinthesametrunk.
ThroughdifferentlinksusingthesameVLAN.(Inthis
case,spanning-treeshouldbeinvokedtopreventanet-
worktopologyloop.NotethatLLDPpacketstravelonlinks
thatspanning-treeblocksforothertraffictypes.)
13-64
Withthe[port-list ]option,thiscommandprovidesalistingof
theLLDPdatathattheswitchhasdetectedinadvertisements
receivedonthespecifiedports.Ifneighbordataisreadfrom
CDPadvertisements,theswitchremapsthisinformationinto
theswitchsLLDPneighborsMIBinadditiontotheCDP
NeighborsMIB.
Fordescriptionsofthevarioustypesofinformationdisplayed
bythesecommands,refertoTable13-14onpage13-33.
Thedatashownforport3wastranslatedfroma
CDPadvertisementfroma5300xlswitchwith
LLDPdisabled.(Notallfieldsexpectedbythe
LLDPdevicearepopulatedwiththeCDPdata.)
Figure13-22.ExampleofaGlobalListingofDiscoveredDevices
13-65
Indicatesthepolicyconfiguredon
thetelephone.Aconfiguration
mismatchoccursifthesupporting
portisconfigureddifferently.
Figure13-23. ExampleofanLLDP-MEDListingofanAdvertisementReceivedFromanLLDP-MED(VoIP)
TelephoneSource
Not e WithbothLLDPand(read-only)CDPenabledonaswitchport,theportcan
readbothLLDPandCDPadvertisements,andstoresbothtypesofdatainits
neighbordatabase.(WhenreadingCDPadvertisements,theswitchonlystores
datathathasacorrespondingfieldintheLLDPneighbordatabase.)
DisplayingLLDPStatistics
LLDPstatisticsareavailableonbothaglobalandaper-portlevels.Rebooting
theswitchresetstheLLDPstatisticscounterstozero.Disablingthetransmit
and/orreceivecapabilityonaportfreezestherelatedportcountersattheir
currentvalues.
13-66
Syntax showlldpinfostats[port-list]
TheglobalLLDPstatisticscommanddisplaysanoverviewof
neighbordetectionactivityontheswitch,plusdataonthe
numberofframessent,received,anddiscardedper-port.The
per-portLLDPstatisticscommandenhancesthelistofper-port
statisticsprovidedbytheglobalstatisticscommandwithsome
additionalper-portLLDPstatistics.
GlobalLLDPCounters:
NeighborEntriesListLastUpdated:Showstheelapsedtimesince
aneighborwaslastaddedordeleted.
NewNeighborEntriesCount:ShowsthetotalofnewLLDP
neighborsdetectedsincethelastswitchreboot.Disconnecting,
thenreconnectinganeighborincrementsthiscounter.
NeighborEntriesDeletedCount:Showsthenumberofneighbor
deletionsfromtheMIBforAgeOutCountandforceddropsfor
allports.Forexample,iftheadminstatusforportona
neighbordevicechangesfromtx_rxortxonlytodisabledor
rxonly,thentheneighbordevicesendsashutdownpacketout
theportandceasestransmittingLLDPframesoutthatport.
Thedevicereceivingtheshutdownpacketdeletesall
informationabouttheneighborreceivedontheapplicable
inboundportandincrementsthecounter.
NeighborEntriesDroppedCount:ShowsthenumberofvalidLLDP
neighborstheswitchdetected,butcouldnotadd.Thiscan
occur,forexample,whenanewneighborisdetectedwhenthe
switchisalreadysupportingthemaximumnumberof
neighbors.RefertoNeighborMaximumonpage13-70.
NeighborEntriesAgeOutCount:ShowsthenumberofLLDP
neighborsdroppedonallportsduetoTime-to-Liveexpiring.
Continuedonthenextpage.
13-67
Continuedfromtheprecedingpage.
Per-PortLLDPCounters:
NumFramesRecvd:Showsthetotalnumberofvalid,inbound
LLDPadvertisementsreceivedfromanyneighbor(s)on<port-
list>.Wheremultipleneighborsareconnectedtoaportthrough
ahub,thisvalueisthetotalnumberofLLDPadvertisements
receivedfromallsources.
NumFramesSent:ShowsthetotalnumberofLLDP
advertisementssentfrom<port-list>.
NumFramesDiscarded:ShowsthetotalnumberofinboundLLDP
advertisementsdiscardedby<port-list>.Thiscanoccur,for
example,whenanewneighborisdetectedontheport,butthe
switchisalreadysupportingthemaximumnumberof
neighbors.RefertoNeighborMaximumonpage13-70.This
canalsobeanindicationofadvertisementformatting
problemsintheneighbordevice.
FramesInvalid:ShowsthetotalnumberofinvalidLLDP
advertisementsreceivedontheport.Aninvalidadvertisement
canbecausedbyheaderformattingproblemsintheneighbor
device.
TLVsUnrecognized: ShowsthetotalnumberofLLDPTLVs
receivedonaportwithatypevalueinthereservedrange.This
couldbecausedbyabasicmanagementTLVfromalaterLLDP
versionthantheonecurrentlyrunningontheswitch.
TLVsDiscarded:ShowsthetotalnumberofLLDPTLVsdiscarded
foranyreason.Inthiscase,theadvertisementcarryingthe
TLVmaybeaccepted,buttheindividualTLVwasnotusable.
NeighborAgeouts:ShowsthenumberofLLDPneighbors
droppedontheportduetoTime-to-Liveexpiring.
13-68
Countersshowingframes
sentonaportbutno
framesreceivedonthat
portindicatesanactive
linkwithadevicethat
eitherhasLLDPdisabled
onthelinkorisnotLLDP-
aware.
Figure13-24.ExampleofaGlobalLLDPStatisticsDisplay
Figure13-25. ExampleofaPer-PortLLDPStatisticsDisplay
13-69
LLDPOperatingNotes
NeighborMaximum. Theneighborstableintheswitchsupportsasmany
neighborsasthereareportsontheswitch.Theswitchcansupportmultiple
neighborsconnectedthroughahubonagivenport,butiftheswitchneighbor
maximumisreached,advertisementsfromadditionalneighborsonthesame
orotherportswillnotbestoredintheneighborstableunlesssomeexisting
neighborstime-outorareremoved.
LLDPPacketForwarding:IfCDPisgloballydisabledonaswitch,the
switchforwardsCDPpacketsreceivedfromaneighborCDPdeviceinstead
ofreadinganddroppingthem.However,an802.1D-compliantswitchdoesnot
forwardLLDPpackets,regardlessofwhetherLLDPisgloballyenabledor
disabledontheswitch.
OneIPAddressAdvertisementPer-Port:LLDPadvertisesonlyoneIP
addressper-port,evenifmultipleIPaddressesareconfiguredbylldpconfig
<port-list>ipAddrEnableonagivenport.
802.1QVLANInformation.LLDPpacketsdonotinclude802.1Qheader
information,andarealwayshandledasuntaggedpackets.
Effectof802.1XOperation.If802.1Xportsecurityisenabledonaport
andaconnecteddeviceisnotauthorized,LLDPpacketsarenottransmitted
orreceivedonthatport.AnyneighbordatastoredintheneighborMIBforthat
portpriortotheunauthorizeddeviceconnectionremainsintheMIBuntilit
agesout.Ifanunauthorizeddevicelaterbecomesauthorized,LLDPtransmit
andreceiveoperationresumes.
NeighborDataCanRemainintheNeighborDatabaseAfterthe
NeighborIsDisconnected.AfterdisconnectinganeighborLLDPdevice
fromtheswitch,theneighborcancontinuetoappearintheswitchsneighbor
databaseforanextendedperiodiftheneighborsholdtime-multiplierishigh;
especiallyiftherefresh-intervalislarge.RefertoChangingtheTime-to-Live
forTransmittedAdvertisementsonpage13-39.
MandatoryTLVs.AllmandatoryTLVsrequiredforLLDPoperationarealso
mandatoryforLLDP-MEDoperation.
DeterminingtheSwitchPortNumberIncludedinTopologyChange
NotificationTraps. Enablingtopologychangenotificationonaswitchport
andthenconnectingordisconnectinganLLDP-MEDendpointonthatport
causestheswitchtosendanSNMPtraptonotifythedesignatedmanagement
station(s).Theportnumberincludedinthetrapcorrespondstotheinternal
13-70
numbertheswitchmaintainsforthedesignatedport,andnottheports
external(slot/number)identity.Tomatchtheportsexternalslot/numberto
theinternalportnumberappearinginanSNMPtrap,usethewalkmibifDescr
command.
LLDPandCDPDataManagement
ThissectiondescribespointstonoteregardingLLDP(Link-LayerDiscovery
Protocol)andCDP(CiscoDiscoveryProtocol)datareceivedbytheswitch
fromotherdevices.LLDPoperationincludesbothtransmittingLLDPpackets
toneighbordevicesandreadingLLDPpacketsreceivedfromneighbor
devices.CDPoperationislimitedtoreadingincomingCDPpacketsfrom
neighbordevices.(ProCurveswitchesdonotgenerateCDPpackets.)
LLDPandCDPDataManagement
ThissectiondescribespointstonoteregardingLLDP(Link-LayerDiscovery
Protocol)andCDP(CiscoDiscoveryProtocol)datareceivedbytheswitch
fromotherdevices.LLDPoperationincludesbothtransmittingLLDPpackets
toneighbordevicesandreadingLLDPpacketsreceivedfromneighbor
devices.CDPoperationislimitedtoreadingincomingCDPpacketsfrom
neighbordevices.(ProCurveswitchesdonotgenerateCDPpackets.)
LLDPandCDPNeighborData
WithbothLLDPand(read-only)CDPenabledonaswitchport,theportcan
readbothLLDPandCDPadvertisements,andstoresthedatafrombothtypes
ofadvertisementsinitsneighbordatabase.(TheswitchonlystoresCDPdata
thathasacorrespondingfieldintheLLDPneighbordatabase.)Theneighbor
databaseitselfcanbereadbyeitherLLDPorCDPmethodsorbyusingthe
showlldpcommands.Takenoteofthefollowingrulesandconditions:
IftheswitchreceivesbothLLDPandCDPadvertisementsonthesame
portfromthesameneighbortheswitchstoresthisinformationastwo
separateentriesiftheadvertisementshavedifferenceschassisIDandport
IDinformation.
IfthechassisandportIDinformationarethesame,theswitchstoresthis
informationasasingleentry.Thatis,LLDPdataoverwritesthecorre-
spondingCDPdataintheneighbordatabaseifthechassisandportID
informationintheLLDPandCDPadvertisementsreceivedfromthesame
deviceisthesame.
DatareadfromaCDPpacketdoesnotsupportsomeLLDPfields,suchas
SystemDescr,SystemCapSupported,andChassisType.Forsuch
fields,LLDPassignsrelevantdefaultvalues.Also:
13-71
TheLLDPSystemDescrfieldmapstoCDPsVersionandPlat-
formfields.
TheswitchassignsChassisTypeandPortTypefieldsaslocalfor
boththeLLDPandtheCDPadvertisementsitreceives.
BothLLDPandCDPsupporttheSystemCapabilityTLV.However,
LLDPdifferentiatesbetweenwhatadeviceiscapableofsupporting
andwhatitisactuallysupporting,andseparatesthetwotypesof
informationintosubelementsoftheSystemCapabilityTLV.CDPhas
onlyasinglefieldforthisdata.Thus,whenCDPSystemCapability
dataismappedtoLLDP,thesamevalueappearsinbothLLDPSystem
Capabilityfields.
SystemNameandPortDescrarenotcommunicatedbyCDP,andthus
arenotincludedintheswitchsNeighborsdatabase.
Not e BecauseProCurveswitchesdonotgenerateCDPpackets,theyarenot
representedintheCDPdatacollectedbyanyneighbordevicesrunningCDP.
AswitchwithCDPdisabledforwardstheCDPpacketsitreceivesfromother
devices,butdoesnotstoretheCDPinformationfromthesepacketsinitsown
MIB.
LLDPdatatransmission/collectionandCDPdatacollectionarebothenabled
intheswitchsdefaultconfiguration.Inthisstate,anSNMPnetwork
managementapplicationdesignedtodiscoverdevicesrunningeitherCDPor
LLDPcanretrieveneighborinformationfromtheswitchregardlessofwhether
LLDPorCDPisusedtocollectthedevice-specificinformation.
ProtocolState Packet
Generation
InboundDataManagement InboundPacketForwarding
CDPEnabled
1
n/a StoreinboundCDPdata. Noforwardingofinbound
CDPpackets.
CDPDisabled n/a NostorageofCDPdatafrom FloodsinboundCDPpackets
neighbordevices. fromconnecteddevicesto
outboundports.
LLDPEnabled
1
Generatesand StoreinboundLLDPdata. Noforwardingofinbound
transmits LLDPpackets.
LLDPpackets
outallportson
theswitch.
13-72
LLDPDisabled Nopacket NostorageofLLDPdata Noforwardingofinbound
ProtocolState Packet
Generation
InboundDataManagement InboundPacketForwarding
generation. fromneighbordevices. LLDPpackets.
1
BothCDPdatacollectionandLLDPtransmit/receiveareenabledinthedefaultconfiguration.
IfaswitchreceivesCDPpacketsandLLDPpacketsfromthesameneighbordeviceonthe
sameport,itstoresanddisplaysthetwotypesofinformationseparatelyifthechassisand
portIDinformationinthetwotypesofadvertisementsisdifferent.Inthiscase,ifyouwant
touseonlyonetypeofdatafromaneighborsendingbothtypes,disabletheunwanted
protocoloneithertheneighbordeviceorontheswitch.However,ifthechassisandportID
informationinthetwotypesofadvertisementsisthesame,theLLDPinformationoverwrites
theCDPdataforthesameneighbordeviceonthesameport.
CDPOperationandCommands
BydefaulttheswitchescoveredbythisguidehaveCDPenabledoneachport.
Thisisaread-onlycapability,meaningthattheswitchcanreceiveandstore
informationaboutadjacentCDPdevicesbutdoesnotgenerateCDPpackets.
WhenaCDP-enabledswitchreceivesaCDPpacketfromanotherCDPdevice,
itentersthatdevicesdataintheCDPNeighborstable,alongwiththeport
numberwherethedatawasreceived(anddoesnotforwardthepacket).The
switchalsoperiodicallypurgesthetableofanyentriesthathaveexpired.(The
holdtimeforanydataentryintheswitchsCDPNeighborstableisconfigured
inthedevicetransmittingtheCDPpacket,andcannotbecontrolledinthe
switchreceivingthepacket.)AswitchreviewsthelistofCDPneighborentries
everythreeseconds,andpurgesanyexpiredentries.
Command Page
showcdp 13-74
showcdpneighbors[<port-list >detail] 13-74
[detail<port-list >]
[no]cdprun 13-75
[no]cdpenable<port-list> 13-76
Not e FordetailsonhowtouseanSNMPutilitytoretrieveinformationfromthe
switchsCDPNeighborstablemaintainedintheswitchsMIB(Management
InformationBase),refertothedocumentationprovidedwiththeparticular
SNMPutility.
13-73
ViewingtheSwitchsCurrentCDPConfiguration. CDPisshownas
enabled/disabledbothgloballyontheswitchandonaper-portbasis.
Syntax: showcdp
Liststheswitchsglobalandper-portCDPconfiguration.
ThefollowingexampleshowsthedefaultCDPconfiguration.
CDPEnable/DisableontheSwitch
Per-PortCDPEnable/Disable
Figure13-26.ExampleofShowCDPwiththeDefaultCDPConfiguration
ViewingtheSwitchsCurrentCDPNeighborsTable.Devicesarelisted
bytheportonwhichtheyweredetected.
Syntax: showcdpneighbors
ListstheneighboringCDPdevicestheswitchdetects,
withasubsetoftheinformationcollectedfromthe
devicesCDPpacket.
[[e]port-numb[detail]]
ListstheCDPdeviceconnectedtothespecifiedport.
(Allowsonlyoneportatatime.)Usingdetailprovides
alongerlistofdetailsontheCDPdevicetheswitch
detectsonthespecifiedport.
[detail[[e]port-num]]
ProvidesalistofthedetailsforalloftheCDPdevices
theswitchdetects.Usingport-numproducesalistof
detailsfortheselectedport.
13-74
Figure13-27liststwoCDPdevicesthattheswitchhasdetectedbyreceiving
theirCDPpackets.
Figure13-27. ExampleofCDPNeighborsTableListing
EnablingCDPOperation. EnablingCDPoperation(thedefault)onthe
switchcausestheswitchtoaddentriestoitsCDPNeighborstableforany
CDPpacketsitreceivesfromotherneighboringCDPdevices.
DisablingCDPOperation. DisablingCDPoperationclearstheswitchs
CDPNeighborstableandcausestheswitchtodropinboundCDPpackets
fromotherdeviceswithoutenteringthedataintheCDPNeighborstable.
Syntax: [no]cdprun
Enablesordisablesread-onlyCDPoperationontheswitch.
(Default:Enabled)
Forexample,todisableCDPread-onlyoperationontheswitch:
ProCurve(config)#nocdprun
WhenCDPisdisabled:
showcdpneighborsdisplaysanemptyCDPNeighborstable
showcdpdisplays
GlobalCDPinformation
EnableCDP[Yes]:No
13-75
EnablingorDisablingCDPOperationonIndividualPorts.Inthe
factory-defaultconfiguration,theswitchhasallportsenabledtoreceiveCDP
packets.DisablingCDPonaportcausesittodropinboundCDPpackets
withoutrecordingtheirdataintheCDPNeighborstable.
Syntax: [no]cdpenable<[e]port-list>
Forexample,todisableCDPonportA1:
ProCurve(config)#nocdpenablea1
13-76
A
FileTransfers
Contents
Overview ..................................................... A-2
DownloadingSwitchSoftware ................................... A-2
General SwitchSoftwareDownload Rules ..................... A-3
UsingTFTPToDownloadSwitchSoftwarefromaServer ........ A-3
Menu:TFTPDownloadfromaServertoPrimaryFlash....... A-4
orSecondaryFlash ..................................... A-6
UsingXmodemtoDownloadSwitchSoftwareFromaPCorUNIX
................................ A-7
HowItWorks.......................................... A-8
TheSCP/SFTPProcess.................................. A-9
CommandOptions ...................................... A-9
Authentication ........................................ A-10
SCP/SFTPOperatingNotes ............................. A-10
Workstation.............................................. A-11
Menu:XmodemDownload to PrimaryFlash ............... A-12
toPrimaryorSecondaryFlash........................... A-13
Switch-to-SwitchDownload .......... ...................... A-14
Menu:Switch-to-SwitchDownloadtoPrimaryFlash ........ A-14
CLI:Switch-To-SwitchDownloads ....................... A-15
UsingProCurveManagerPlustoUpdateSwitchSoftware ....... A-16
TroubleshootingTFTPDownloads .............................. A-17
TransferringSwitchConfigurations .............................. A-18
A-1
FileTransfers
Contents
CopyingDiagnosticDatatoaRemoteHost,PC,orUnixWorkstation . A-21
CopyingCommandOutputtoaDestinationDevice......... A-21
CopyingEventLogOutputtoaDestinationDevice ......... A-22
CopyingCrashDataContenttoaDestinationDevice ....... A-22
CopyingCrashLogDataContenttoaDestinationDevice .... A-23
A-2
FileTransfers
Overview
Overview
Youcandownloadnewswitchsoftwareanduploadordownloadswitch
configurationfiles.Thesefeaturesareusefulforacquiringperiodicswitch
softwareupgradesandforstoringorretrievingaswitchconfiguration.
Not e YoucanalsousetheWebAgenttouploadordownloadsoftware.
Thisappendixincludesthefollowinginformation:
Downloadingswitchsoftware(beginsbelow)
Transferringswitchconfigurations(beginsonpageA-18)
Forinformationonhowswitchmemoryoperates,includingprimaryand
secondaryflash,seeChapter6,SwitchMemoryandConfiguration.
Not e Intheswitchconsoleinterface,theswitchsoftwareisreferredtoastheOS,
forswitchoperatingsystem.
DownloadingSwitchSoftware
ProCurveNetworkingperiodicallyprovidesswitchsoftwareupdatesthrough
theProCurvewebsite(www.procurve.com).Formoreinformation,seethe
supportandwarrantybookletshippedwiththeswitch.Afteryouacquirea
newswitchsoftwarefile,youcanuseoneofthefollowingmethodsfor
downloadingtheswitchsoftwarecodetotheswitch:
SwitchSoftwareDownloadFeatures
Feature Default Menu CLI
TFTP n/a pageA-4 pageA-6
Xmodem n/a pageA-12 pageA-13
Switch-to-Switch n/a pageA-14 pageA-15
SoftwareUpdateManagerinProCurveManagerPlus Refertothedocumentation
providedwithProCurveManager
Plus.
A-3
FileTransfers
GeneralSwitchSoftwareDownloadRules
Aswitchsoftwareimagedownloadedthroughthemenuinterfacealways
goestoprimaryflash.
Afteraswitchsoftwaredownload,youmustreboottheswitchtoimple-
mentthenewlydownloadedcode.Untilarebootoccurs,theswitch
continuestorunonthesoftwareitwasusingbeforethedownloadstarted.
Not e Downloadingnewswitchsoftwaredoesnotchangethecurrentswitchcon-
figuration.Theswitchconfigurationiscontainedinseparatefilesthatcanalso
betransferred.RefertoTransferringSwitchConfigurationsonpageA-18.
Inmostcases,ifapowerfailureorothercauseinterruptsaflashimage
download,theswitchrebootswiththeimagepreviouslystoredinprimary
flash.Intheunlikelyeventthattheprimaryimageiscorrupted(whichmay
occurifadownloadisinterruptedbyapowerfailure),theswitchgoesinto
bootROMmode.Inthiscase,usethebootROMconsoletodownloadanew
switchsoftwareimagetoprimaryflash.RefertoRestoringaFlashImageon
pageC-45.
UsingTFTPToDownloadSwitchSoftwarefroma
Server
AnswitchsoftwarefilefortheswitchhasbeenstoredonaTFTPserver
accessibletotheswitch.(Theswitchsoftwarefileistypicallyavailable
fromtheProCurvewebsiteatwww.procurve.com.)
Theswitchisproperlyconnectedtoyournetworkandhasalreadybeen
configuredwithacompatibleIPaddressandsubnetmask.
TheTFTPserverisaccessibletotheswitchthroughIP.
Beforeyouusetheprocedure,dothefollowing:
ObtaintheIPaddressoftheTFTPserverinwhichtheswitchsoftwarefile
hasbeenstored.
IfVLANsareconfiguredontheswitch,determinethenameoftheVLAN
inwhichtheTFTPserverisoperating.
DeterminethenameoftheswitchsoftwarefilestoredintheTFTPserver
fortheswitch(forexample,G0721.swi).
A-4
FileTransfers
Not e IfyourTFTPserverisaUnixworkstation,ensurethatthecase(upperor
lower)thatyouspecifyforthefilenameisthesamecaseasthecharacters
intheswitchsoftwarefilenamesontheserver.
Menu:TFTPDownloadfromaServertoPrimaryFlash
Notethatthemenuinterfaceaccessesonlytheprimaryflash.
1. IntheconsoleMainMenu,selectDownloadOS todisplaythisscreen:
FigureA-1. ExampleoftheDownloadOSScreen(DefaultValues)
3. EnsurethattheMethodfieldissettoTFTP(thedefault).
4. IntheTFTPServerfield,typeintheIPaddressoftheTFTPserverinwhich
theswitchsoftwarefilehasbeenstored.
5. IntheRemoteFileNamefield,typethenameoftheswitchsoftwarefile.If
youareusingaUNIXsystem,rememberthatthefilenameiscase-sensi-
tive.
6. Press[Enter],then[X](foreXecute)tobegintheswitchsoftwaredownload.
Thefollowingscreenthenappears:
A-5
FileTransfers
ProgressBar
FigureA-2. ExampleoftheDownloadOSScreenDuringaDownload
Aprogressbarindicatestheprogressofthedownload.Whentheentire
switchsoftwarefilehasbeenreceived,allactivityontheswitchhaltsand
youwillsee ValidatingandwritingsystemsoftwaretoFLASH...
7. Aftertheprimaryflashmemoryhasbeenupdatedwiththenewswitch
software,youmustreboottheswitchtoimplementthenewlydownloaded
code.FromtheMainMenuandpress[6](forRebootSwitch).Youwillthen
seethisprompt:
Continuerebootofsystem? : No
PressthespacebaroncetochangeNotoYes,thenpress[Enter]tobegin
thereboot.
Not e Whenyouusethemenuinterfacetodownloadswitchsoftware,thenew
imageisalwaysstoredinprimaryflash.Also,usingtheRebootSwitch
optionintheMainMenualwaysrebootstheswitchfromprimaryflash.
RebootingtheswitchfromtheCLIgivesyoumoreoptions.Referto
RebootingtheSwitchonpage6-18.
8. Afteryoureboottheswitch,confirmthattheswitchsoftwaredownloaded
correctly:
a. FromtheMainMenu,select1.StatusandCounters,andfromtheStatus
andCountersmenu,select1.GeneralSystemInformation
b. Checkthe Firmwarerevision line.
c. FromtheCLI,usethecommandshowversionorshowflash.
A-6
FileTransfers
orSecondaryFlash
Thiscommandautomaticallydownloadsaswitchsoftwareimagetoprimary
orsecondaryflash.
Syntax: copytftpflash<ip-address ><remote-os-file >[<primary|secondary>]
Notethatifyoudonotspecifytheflashdestination,theXmodemdownload
defaultstoprimaryflash.
Forexample,todownloadaswitchsoftwarefilenamedG0502.swifroma
TFTPserverwiththeIPaddressof10.28.227.103toprimaryflash:
1. Executecopyasshownbelow:
Dynamiccountercontinuallydisplaysthe
numberofbytestransferred.
Thismessagemeansthattheimageyou
wanttouploadwillreplacetheimage
currentlyinprimaryflash.
FigureA-3. ExampleoftheCommandto DownloadSwitchSoftware
2. Whentheswitchfinishesdownloadingtheswitchsoftwarefilefromthe
server,itdisplaysthisprogressmessage:
ValidatingandWritingSystemSoftwaretoFLASH...
3. Whentheswitchisreadytoactivatethedownloadedsoftwareyouwill
seethismessage:
SystemsoftwarewrittentoFLASH.
Youwillneedtoreboottoactivate.
Atthispoint,usethebootcommandtoreboottheswitchandactivatethe
softwareyoujustdownloaded:
ProCurve#boot
(Formoreonthesecommands,refertoRebootingtheSwitchonpage
6-18.)
4. Toconfirmthattheswitchsoftwaredownloadedcorrectly,executeshow
systemandchecktheFirmwarerevisionline.
Ifyouneedinformationonprimary/secondaryflashmemoryandtheboot
commands,refertoUsingPrimaryandSecondaryFlashImageOptionson
page6-13.
A-7
FileTransfers
Forsomesituationsyoumaywanttouseasecuremethodtoissuecommands
orcopyfilestotheswitch.Byopeningasecure,encryptedSSHsessionyou
canthenuseathird-partysoftwareapplicationtotakeadvantageofSecure
Copy(SCP)andSecureftp(SFTP).SCPandSFTPprovideasecurealternative
toTFTPfortransferringinformationthatmaybesensitive(likeswitchcon-
figurationfiles)toandfromtheswitch.Essentiallyyouarecreatingasecure
SSHtunnelasawaytotransferfileswithSFTPandSCPchannels.
Tousethesecommandsyoumustinstallontheadministratorworkstationa
third-partyapplicationsoftwareclientthatsupportstheSFTPand/orSCP
functions.SomeexamplesofsoftwarethatsupportsSFTPandSCPare
PuTTY,OpenSSH,WinSCP,andSSHSecureShell.Mostofthesearefreeware
andmaybedownloadedwithoutcostorlicensingfromtheinternet.Thereare
differencesinthewaytheseclientswork,sobesureyoualsodownloadthe
documentation.
AsdescribedearlierinthischapteryoucanuseaTFTPclientontheadmin-
istratorworkstationtoupdatesoftwareimages.Thisisaplaintextmechanism
anditconnectstoastandaloneTFTPserveroranotherProCurveswitch
actingasaTFTPservertoobtainthesoftwareimagefile(s).UsingSCPand
SFTPallowsyoutomaintainyourswitcheswithgreatersecurity.Youcanalso
rolloutnewsoftwareimageswithautomatedscriptsthatmakeiteasierto
upgrademultipleswitchessimultaneouslyandsecurely.
SFTP(securefiletransferprotocol)isunrelatedtoFTP,althoughthereare
somefunctionalsimilarities.OnceyousetupanSFTPsessionthroughanSSH
tunnel,someofthecommandsarethesameasFTPcommands.Certain
commandsarenotallowedbytheSFTPserverontheswitch,suchasthose
thatcreatefilesorfolders.Ifyoutrytoissuecommandssuchascreateor
removeusingSFTPtheswitchserverreturnsanerrormessage.
YoucanuseSFTPjustasyouwouldTFTPtotransferfilestoandfromthe
switch,butwithSFTPyourfiletransfersareencryptedandrequireauthenti-
cation,sotheyaremoresecurethantheywouldbeusingTFTP.SFTPworks
onlywithSSHversion2(SSHv2).
A-8
FileTransfers
Not e SFTPoverSSHversion1(SSHv1)isnotsupported.Arequestfromeitherthe
clientortheswitch(orboth)usingSSHv1generatesanerrormessage.The
actualtextoftheerrormessagediffers,dependingontheclientsoftwarein
use.Someexamplesare:
Protocolmajorversionsdiffer:2vs.1
Connectionclosed
Protocolmajorversionsdiffer:1vs.2
Connectionclosed
Receiveddisconnectfrom<ip-addr>:/usr/local/
libexec/sftp-server:commandnotsupported
Connectionclosed
SCP(securecopy)isanimplementationoftheBSDrcp(BerkeleyUNIX
remotecopy)commandtunneledthroughanSSHconnection.
SCPisusedtocopyfilestoandfromtheswitchwhensecurityisrequired.
SCPworkswithbothSSHv1andSSHv2.Beawarethatthemostthird-party
softwareapplicationclientsthatsupportSCPuseSSHv1.
HowItWorks
ThegeneralprocessforusingSCPandSFTPinvolvesthreesteps:
1. OpenanSSHtunnelbetweenyourcomputerandtheswitchifyouhavent
alreadydoneso.(ThisstepassumesthatyouhavealreadysetupSSHon
theswitch.)
2. Executeipsshfiletransfertotelltheswitchthatyouwanttoenablesecure
filetransfer.
3. Useathird-partyclientapplicationforSCPandSFTPcommands.
A-9
FileTransfers
The SCP/SFTPProcess
TouseSCPandSFTP:
1. OpenanSSHsessionasyounormallywouldtoestablishasecure
encryptedtunnelbetweenyourcomputerandtheswitch.Formore
detaileddirectionsonhowtoopenanSSHsessionseethechaptertitled
ConfiguringSecureShell(SSH)intheAccessSecurityGuideforyour
switch.Pleasenotethatthisisaone-timeprocedurefornewswitchesor
connections.Ifyouhavealreadydoneitonceyoushouldnotneedtodo
itasecondtime.
2. Toenablesecurefiletransferontheswitch(onceyouhaveanSSHsession
establishedbetweentheswitchandyourcomputer),openaterminal
windowandtypeinthefollowingcommand:
ProCurve(config)#ipsshfiletransfer
CommandOptions
IfyouneedtoenableSSHv2(whichisrequiredforSFTP)enterthiscommand:
Pr oCur ve( conf i g) # i p ssh ver si on 2
Not e Asamatterofpolicy,administratorsshouldnotenabletheSSHv1-onlyorthe
SSHv1-or-v2advertisementmodes.SSHv1issupportedononlysomelegacy
switches(suchastheProCurveSeries2500switches).
ToconfirmthatSSHisenabledtypeinthecommand
Pr oCur ve( conf i g) # show i p ssh
3. OnceyouhaveconfirmedthatyouhaveenabledanSSHsession(withthe
showipsshcommand)youcanthenopenyourthird-partysoftwareclient
applicationtobeginusingtheSCPorSFTPcommandstosafelytransfer
filesorissuecommandstotheswitch.
Ifyouneedtodisablesecurefiletransfer:
Pr oCur ve( conf i g) # no i p ssh f i l et r ansf er
A-10
FileTransfers
Authentication
Switchmemoryallowsuptotenpublickeys.Thismeanstheauthentication
andencryptionkeysyouuseforyourthird-partyclientSCP/SFTPsoftware
candifferfromthekeysyouusefortheSSHsession,eventhoughbothSCP
andSFTPuseasecureSSHtunnel.
Not e SSHauthenticationthroughaTACACS+serveranduseofSCPorSFTP
throughanSSHtunnelaremutuallyexclusive.Thus,iftheswitchisconfigured
touseTACACS+forauthenticatingasecureTelnetSSHsessionontheswitch,
youcannotenableSCPorSFTP.Also,ifSCPorSFTPisenabledontheswitch,
youcannotenableTACACS+authenticationforasecureTelnetSSH.The
switchdisplaysamessagesimilartothefollowingifthereisanattemptto
configureeitheroptionwhentheotherisalreadyconfigured:
Toprovideusername/passwordauthenticationonaswitchprovidingSCPor
SFTPsupport,usetheswitchslocalusername/passwordfacility.Otherwise,
youcanusetheswitchslocalpublickeyforauthentication.
SomeclientssuchasPSCP(PuTTYSCP)automaticallycompareswitchhost
keysforyou.Otherclientsrequireyoutomanuallycopyandpastekeystothe
$HOME/.ssh/known_hostsfile.WhateverSCP/SFTPsoftwaretoolyouuse,after
installingtheclientsoftwareyoumustverifythattheswitchhostkeysare
availabletotheclient.
Becausethethird-partysoftwareutilitiesyoumayuseforSCP/SFTPvary,you
shouldrefertothedocumentationprovidedwiththeutilityyouselectbefore
performingthisprocess.
SCP/SFTPOperatingNotes
WhenanSFTPclientconnects,theswitchprovidesafilesystemdisplay-
ingallofitsavailablefilesandfolders.Nofileordirectorycreationis
permittedbytheuser.Filesmayonlybeuploadedordownloaded,accord-
ingtothepermissionsmask.Allofthenecessaryfilestheswitchwillneed
arealreadyinplaceontheswitch.Youdonotneedto(norcanyoucreate)
newfiles.
TheswitchsupportsoneSFTPsessionoroneSCPsessionatatime.
A-11

FileTransfers
Allfileshaveread-writepermission.SeveralSFTPcommands,suchas
cr eat e orr emove,arenotallowedandreturnanerrormessage.The
switchdisplaysthefollowingfiles:
/
+- - - cf g
| r unni ngconf i g
| st ar t up- conf i g
+- - - l og
| cr ash- dat a
| cr ash- l og
| event l og
+- - - os
| pr i mar y
| secondar y
\ - - - ssh
+- - - mgr _keys
| aut hor i zed_keys
\ - - - oper _keys
aut hor i zed_keys
OnceyouhaveconfiguredyourswitchforsecurefiletransferswithSCPand
SFTP,filescanbecopiedtoorfromtheswitchinasecure(encrypted)
environmentandTFTPisnolongernecessary.
UsingXmodemtoDownloadSwitchSoftwareFroma
PCorUNIXWorkstation
TheswitchisconnectedviatheConsoleRS-232porttoaPCoperatingas
aterminal.(RefertotheInstallationandGettingStartedGuideyou
receivedwiththeswitchforinformationonconnectingaPCasaterminal
andrunningtheswitchconsoleinterface.)
TheswitchsoftwareisstoredonadiskdriveinthePC.
TheterminalemulatoryouareusingincludestheXmodembinarytransfer
feature.(Forexample,intheHyperTerminalapplicationincludedwith
WindowsNT,youwouldusetheSendFileoptionintheTransferdropdown
menu.)
A-12
FileTransfers
Menu:XmodemDownloadtoPrimaryFlash
Notethatthemenuinterfaceaccessesonlytheprimaryflash.
1. FromtheconsoleMainMenu,select
7.DownloadOS
3. UsetheSpacebartoselectXMODEMintheMethodfield.
Thefollowingmessagethenappears:
PressenterandtheninitiateXmodemtransfer
fromtheattachedcomputer.....
5. Press[Enter]andthenexecutetheterminalemulatorcommand(s)tobegin
Xmodembinarytransfer.Forexample,usingHyperTerminal:
a. ClickonTransfer,thenSendFile.
b. TypethefilepathandnameintheFilenamefield.
c. IntheProtocolfield,selectXmodem.
d. ClickontheSendbutton.
Thedownloadwillthencommence.Itcantakeseveralminutes,depend-
ingonthebaudratesetintheswitchandinyourterminalemulator.
6. Aftertheprimaryflashmemoryhasbeenupdatedwiththenewoperating
system,youmustreboottheswitchtoimplementthenewlydownloaded
software.ReturntotheMainMenuandpress[6](forRebootSwitch).You
willthenseethisprompt:
thereboot.
7. Toconfirmthattheswitchsoftwaredownloadedcorrectly:
a. FromtheMainMenu,select
1.StatusandCounters
1.GeneralSystemInformation
A-13
FileTransfers
toPrimaryorSecondaryFlash
UsingXmodemandaterminalemulator,youcandownloadaswitchsoftware
filetoeitherprimaryorsecondaryflash.
Syntax: copyxmodemflash[<primary|secondary>]
Notethatifyoudonotspecifytheflashdestination,theXmodemdownload
defaultstoprimaryflash.
Forexample,todownloadaswitchsoftwarefilenamedG0103.swifromaPC
(runningaterminalemulatorprogramsuchasHyperTerminal)toprimary
flash:
1. ExecutethefollowingcommandintheCLI:
FigureA-4. ExampleoftheCommandtoDownloadSwitchSoftwareUsing
Xmodem
2. ExecutetheterminalemulatorcommandstobegintheXmodemtransfer.
Forexample,usingHyperTerminal:
a. ClickonTransfer,thenSendFile.
b. TypethefilepathandnameintheFilenamefield.
c. IntheProtocolfield,selectXmodem.
d. ClickontheSendbutton.
Thedownloadcantakeseveralminutes,dependingonthebaudrateused
inthetransfer.
3. Whenthedownloadfinishes,youmustreboottheswitchtoimplement
thenewlydownloadedswitchsoftware.Todoso,useoneofthefollowing
commands:
bootsystemflash<primary|secondary>
Rebootstheswitchfromtheselectedflashmemory.
-or-
reload
Rebootstheswitchfromtheflashimagecurrentlyinuse.
6-18.)
A-14
FileTransfers
4. Toconfirmthattheoperatingsystemdownloadedcorrectly,usetheshow
system,showversion,orshowflashCLIcommands.
ChecktheFirmwarerevisionline.Itshouldshowtheswitchsoftware
versionthatyoudownloadedintheprecedingsteps.
Ifyouneedinformationonprimary/secondaryflashmemoryandtheboot
commands,refertoUsingPrimaryandSecondaryFlashImageOptionson
page6-13.
Switch-to-SwitchDownload
YoucanuseTFTPtotransferaswitchsoftwarefilebetweentwoProCurve
switchesthatusethesamesoftwarecodebase.Themenuinterfaceenables
youtotransferprimary-to-primaryorsecondary-to-primary.TheCLIenables
allcombinationsofflashlocationoptions.
Menu:Switch-to-SwitchDownloadtoPrimaryFlash
Usingthemenuinterface,youcandownloadswitchsoftwarefromeitherthe
primaryorsecondaryflashofoneswitchtotheprimaryflashofanother
switch.
1. FromtheswitchconsoleMainMenuintheswitchtoreceivethedown-
load,select7.DownloadOSscreen.
2. EnsurethattheMethodparameterissettoTFTP(thedefault).
3. IntheTFTPServerfield,entertheIPaddressoftheremoteswitchcontain-
ingtheswitchsoftwareyouwanttodownload.
4. FortheRemoteFileName,enteroneofthefollowing:
Todownloadtheswitchsoftwarefromtheprimaryflashofthesource
switch,typeflashor/os/primaryinlowercasecharacters.
Todownloadtheswitchsoftwarefromthesecondaryflashofthe
sourceswitch,type/os/secondary.
6. Aprogressbarindicatestheprogressofthedownload.Whentheentire
operatingsystemhasbeenreceived,allactivityontheswitchhaltsand
thefollowingmessagesappear:
ValidatingandwritingsystemsoftwaretoFLASH...
A-15
FileTransfers
7. Aftertheprimaryflashmemoryhasbeenupdatedwiththenewoperating
system,youmustreboottheswitchtoimplementthenewlydownloaded
software.FromtheMainMenu,press[6](forRebootSwitch).Youwillthen
seethisprompt:
thereboot.
8. Toconfirmthattheoperatingsystemdownloadedcorrectly:
a. FromtheMainMenu,select
StatusandCounters
CLI:Switch-To-SwitchDownloads
Youcandownloadaswitchsoftwarefilebetweentwoswitchesthatusethe
samecodebaseandwhichareconnectedonyourLAN.Todoso,useacopy
tftpcommandfromthedestinationswitch.TheoptionsforthisCLIfeature
include:
Copyfromprimaryflashinthesourcetoeitherprimaryorsecondaryin
thedestination.
Copyfromeitherprimaryorsecondaryflashinthesourcetoeither
primaryorsecondaryflashinthedestination.
DownloadingfromPrimaryOnly.Thiscommand(executedinthedestina-
tionswitch)downloadstheswitchsoftwarefromthesourceswitchsprimary
flashtoeithertheprimaryorsecondaryflashinthedestinationswitch.
Syntax: copytftpflash<ip-addr >flash[primary|secondary]
Ifyoudonotspecifyeitheraprimaryorsecondaryflashlocationforthe
destination,thedownloadautomaticallygoestoprimaryflash.
Forexample,todownloadswitchsoftwarefromprimaryflashinaswitchwith
anIPaddressof10.28.227.103totheprimaryflashinthedestinationswitch,
youwouldexecutethefollowingcommandinthedestinationswitchsCLI:
A-16
FileTransfers
RunningTotal
ofBytes
Downloaded
FigureA-5. Switch-To-Switch,fromPrimaryinSourcetoEitherFlashin
Destination
DownloadingfromEitherFlashintheSourceSwitchtoEitherFlash
intheDestinationSwitch.Thiscommand(executedinthedestination
switch)givesyouthemostoptionsfordownloadingbetweenswitches.
Syntax: copytftpflash<ip-addr ></os/primary>|</os/secondary>
[primary|secondary]
Ifyoudonotspecifyeitheraprimaryorsecondaryflashlocationforthe
destination,thedownloadautomaticallygoestoprimaryflash.
Forexample,todownloadswitchsoftwarefromsecondaryflashinaswitch
withanIPaddressof10.28.227.103tothesecondaryflashinthedestination
switch,youwouldexecutethefollowingcommandinthedestinationswitchs
CLI:
FigureA-6. Switch-to-Switch,fromEitherFlashinSourcetoEitherFlashin
Destination
UsingProCurveManagerPlustoUpdateSwitch
Software
ProCurveManagerPlusincludeasoftwareupdateutilityforupdatingon
ProCurveswitchproducts.Forfurtherinformation,refertotheGetting
StartedGuideandtheAdministratorsGuide,providedelectronicallywith
theapplication.
A-17
FileTransfers
TroubleshootingTFTPDownloads
TroubleshootingTFTPDownloads
Whenusingthemenuinterface,ifaTFTPdownloadfails,theDownloadOS
screenindicatesthefailure.
MessageIndicating
causeofTFTPDownload
Failure
FigureA-7. ExampleofMessageforDownloadFailure
Tofindmoreinformationonthecauseofadownloadfailure,examinethe
messagesintheswitchsEventLogbyexecutingthisCLIcommand:
ProCurve#showlogtftp
(FormoreontheEventLog,seeUsingLoggingToIdentifyProblemSources
onpageC-21.)
Someofthecausesofdownloadfailuresinclude:
IncorrectorunreachableaddressspecifiedfortheTFTPServerparameter.
Thismayincludenetworkproblems.
IncorrectVLAN.
IncorrectnamespecifiedfortheRemoteFileNameparameter,orthe
specifiedfilecannotbefoundontheTFTPserver.Thiscanalsooccurif
theTFTPserverisaUnixmachineandthecase(upperorlower)forthe
filenameontheserverdoesnotmatchthecaseforthefilenameentered
forthe RemoteFileName parameterintheDownloadOSscreen.
OneormoreoftheswitchsIPconfigurationparametersareincorrect.
A-18
FileTransfers
TransferringSwitchConfigurations
ForaUnixTFTPserver,thefilepermissionsfortheswitchsoftwarefile
donotallowthefiletobecopied.
Anotherconsolesession(througheitheradirectconnectiontoaterminal
deviceorthroughTelnet)wasalreadyrunningwhenyoustartedthe
sessioninwhichthedownloadwasattempted.
Not e Ifanerroroccursinwhichnormalswitchoperationcannotberestored,the
switchautomaticallyrebootsitself.Inthiscase,anappropriatemessageis
displayedaftertheswitchreboots.
TransferFeatures
useTFTPtocopyfromaremote n/a below
hosttoaconfigfile
useTFTPtocopyaconfigfiletoa n/a pageA-19
remotehost
useXmodemtocopya n/a pageA-19
configurationfromaserially
connectedhosttoaconfigfile
UseXmodemtocopyaconfigfile n/a pageA-20
toaseriallyconnectedhost
UsingtheCLIcommandsdescribedinthissection,youcancopyswitch
configurationstoandfromaswitch.
TFTP:CopyingaConfigurationfromaRemoteHost.
Syntax: copytftp<startup-config|running-config><ip-address ><remote-file >
Thiscommandcopiesaconfigurationfromaremotehosttothestartup-config
fileintheswitch.(RefertoChapter6,SwitchMemoryandConfigurationfor
informationonthestartup-configfile.)
Forexample,todownloadaconfigurationfilenamedsw2610intheconfigs
directoryondrive"d"inaremotehosthavinganIPaddressof10.28.227.105:
ProCurve#copytftpstartup-config10.28.227.105
d:\configs\sw2610
A-19
FileTransfers
TFTP:CopyingaConfigurationFiletoaRemoteHost.
Syntax: copy<startup-config|running-config>tftp<ip-addr ><remote-file >
Thiscommandcopiestheswitchsstartupconfiguration(startup-configfile)
toaremoteTFTPhost.
Forexample,touploadthecurrentstartupconfigurationtoafilenamed
sw2610intheconfigsdirectoryondrive"d"inaremotehosthavinganIP
addressof10.28.227.105:
ProCurve#copystartup-configtftp10.28.227.105
d:\configs\sw2610
Xmodem:CopyingaConfigurationFilefromtheSwitchtoaSerially
ConnectedPCorUnixWorkstation.Tousethismethod,theswitchmust
beconnectedviatheserialporttoaPCorUnixworkstationtowhichyou
wanttocopytheconfigurationfile.Youwillneedto:
Determineafilenametouse.
Knowthedirectorypathyouwillusetostorethetheconfigurationfile.
Syntax: copy<startup-config|running-config>xmodem<pc|unix>
Forexample,tocopyaconfigurationfiletoaPCseriallyconnectedtothe
switch:
1. DeterminethefilenameanddirectorylocationonthePC.
2. Executethefollowingcommand:
ProCurve#copystartup-configxmodempc
3. Afteryouseethefollowingprompt,press[Enter].
PressEnterandstartXMODEMonyourhost...
4. Executetheterminalemulatorcommandstobeginthefiletransfer.
A-20
FileTransfers
Xmodem:CopyingaConfigurationFilefromaSeriallyConnectedPC
orUnixWorkstation.Tousethismethod,theswitchmustbeconnectedvia
theserialporttoaPCorUnixworkstationonwhichisstoredtheconfiguration
fileyouwanttocopy.Tocompletethecopying,youwillneedtoknowthe
nameofthefiletocopyandthedriveanddirectorylocationofthefile.
Syntax: copyxmodemstartup-config<pc|unix >
Forexample,tocopyaconfigurationfilefromaPCseriallyconnectedtothe
switch:
1. Executethefollowingcommand:
2. Afteryouseetheaboveprompt,press[Enter].
3. Executetheterminalemulatorcommandstobeginthefiletransfer.
4. Whenthedownloadfinishes,youmustreboottheswitchtoimplement
thenewlydownloadedOS.Todoso,useoneofthefollowingcommands:
bootsystemflash<primary|secondary>
Rebootsfromtheselectedflash.
-or-
reload
Rebootsfromtheflashimagecurrentlyinuse.
6-18.)
A-21
FileTransfers
CopyingDiagnosticDatatoaRemoteHost,PC,orUnixWorkstation
CopyingDiagnosticDatatoaRemote
Host,PC,orUnixWorkstation
YoucanusetheCLItocopythefollowingtypesofswitchdatatoatextfilein
amanagementdevice:
CommandOutput:SendstheoutputofaswitchCLIcommandasafileon
thedestinationdevice.
EventLog:CopiestheswitchsEventLogintoafileonthedestination
device.
CrashData:OS-specificdatausefulfordeterminingthereasonfora
systemcrash.
CrashLog:Processor-Specificoperatingdatausefulfordeterminingthe
reasonforasystemcrash.
CopyingCommandOutputtoaDestinationDevice
ThiscommanddirectsthedisplayedoutputofaCLIcommandtoafileina
destinationdevice.
Syntax: copycommand-output<"cli-command">tftp<ip-address >
<filepath-filename >
copycommand-output<"cli-command">xmodem
Forexample,touseXmodemtocopytheoutputofshowconfigtoaserially
connectedPC:
Atthispoint,press
[Enter]andstartthe
Xmodemcommand
sequenceinyour
terminalemulator.
Indicatestheoperationisfinished.
FigureA-8. ExampleofSendingCommandOutputtoaFileonanAttachedPC
Notethatthecommandyouspecifymustbeenclosedindouble-quotemarks.
A-22
FileTransfers
CopyingEventLogOutputtoaDestinationDevice
ThiscommandusesTFTPorXmodemtocopytheEventLogcontenttoaPC
orUNIXworkstationonthenetwork.
Syntax: copyevent-logtftp<ip-address ><filepath and filename >
copyevent-logxmodem
Forexample,tocopytheeventlogtoaPCconnectedtotheswitch:
Atthispoint,press
[Enter]andstartthe
Xmodemcommand
sequenceinyour
terminalemulator.
FigureA-9. ExampleofSendingEventLogContenttoaFileonanAttachedPC
CopyingCrashDataContenttoaDestinationDevice
ThiscommandusesTFTPorXmodemtocopytheCrashDatacontenttoaPC
orUNIXworkstationonthenetwork.Youcancopyindividualslotinformation
orthemasterswitchinformation.Ifyoudonotspecifyeither,thecommand
defaultstothemasterdata.
Syntax: copycrash-data[<slot-id |master>]xmodem
copycrash-data[<slot-id|master>]tftp<ip-address > < filename >
where: slot-id =a- h,and retrievesthecrashlogorcrashdatafrom
theprocessoronthemoduleinthespecifiedslot.
master Retrievescrashlogorcrashdatafromtheswitchs
chassisprocessor.
Forexample,tocopytheswitchscrashdatatoafileinaPC:
Atthispoint,press
[Enter]andstartthe
Xmodemcommand
sequenceinyour
terminalemulator.
FigureA-10. ExampleofCopyingSwitchCrashDataContenttoaPC
A-23
FileTransfers
CopyingCrashLogDataContenttoaDestinationDevice
ThiscommandusesTFTPorXmodemtocopytheCrashLogcontenttoaPC
orUNIXworkstationonthenetwork.Youcancopyindividualslotinformation
orthemasterswitchinformation.Ifyoudonotspecifyeither,thecommand
defaultstothemasterdata.
Syntax: copycrash-log[<slot-id|master>]tftp<ip-address >
< filepath and filename >
copycrash-log[<slot-id|master>]xmodem
where: slot-id =a- h,and retrievesthecrashlogorcrashdatafrom
theprocessoronthemoduleinthespecifiedslot.
master Retrievescrashlogorcrashdatafromtheswitchs
chassisprocessor.
Forexample,tocopytheCrashLogforslotCtoafileinaPCconnectedto
theswitch:
Atthispoint,press
[Enter]andstartthe
Xmodemcommand
sequenceinyour
terminalemulator.
FigureA-11. ExampleofsendingaCrashLogforSlotCtoaFileonanAttachedPC
A-24
FileTransfers
A-25
FileTransfers
A-26
B
MonitoringandAnalyzingSwitchOperation
Contents
Overview ..................................................... B-3
StatusandCountersData ....................................... B-4
MenuAccessToStatusandCounters ..... .................... B-5
GeneralSystemInformation ................................. B-6
MenuAccess ........................................... B-6
CLIAccess............................................. B-6
SwitchManagementAddressInformation...................... B-7
MenuAccess ........................................... B-7
CLIAccess............................................. B-7
ModuleInformation ........................................ B-8
CLIAccess............................................. B-8
PortStatus................................................ B-9
CLIAccess............................................. B-9
WebAccess ............................................ B-9
ViewingPortandTrunkGroupStatisticsandFlowControlStatus B-10
MenuAccesstoPort andTrunkStatistics................. B-11
CLIAccessToPortandTrunkGroupStatistics ............ B-12
WebBrowserAccessToViewPortandTrunkGroupStatisticsB-12
ViewingtheSwitchsMACAddressTables.................... B-12
MenuAccesstotheMACAddressViewsandSearches ...... B-13
CLIAccessforMACAddressViewsandSearches .......... B-15
SpanningTreeProtocol(STP)Information. ................... B-16
MenuAccesstoSTPData ............................... B-16
CLIAccesstoSTPData................................. B-18
B-1
Contents
LoopProtection ........................................... B-19
ConfiguringLoopProtection ............................ B-20
InternetGroupManagementProtocol(IGMP)Status ........... B-21
VLANInformation ......................................... B-22
WebBrowserInterfaceStatusInformation .................... B-24
PortandStaticTrunkMonitoringFeatures . ...................... B-25
Menu:ConfiguringPortandStaticTrunkMonitoring ........... B-26
CLI:ConfiguringPortandStaticTrunkMonitoring ............. B-28
Web:ConfiguringPortMonitoring ........................... B-30
B-2
Overview
Overview
Theswitchhasseveralbuilt-intoolsformonitoring,analyzing,andtrouble-
shootingswitchandnetworkoperation:
Status:Includesoptionsfordisplayinggeneralswitchinformation,man-
agementaddressdata,portstatus,portandtrunkgroupstatistics,MAC
addressesdetectedoneachportorVLAN,andSTP,IGMP,andVLANdata
(pageB-4).
Counters:Displaydetailsoftrafficvolumeonindividualports(page
B-10).
EventLog:Listsswitchoperatingevents(UsingLoggingToIdentify
ProblemSourcesonpageC-21).
AlertLog:Listsnetworkoccurrencesdetectedbytheswitchinthe
Status|Overviewscreenofthewebbrowserinterface(page5-6).
Configurabletrapreceivers:UsesSNMPtoenablemanagementsta-
tionsonyournetworktoreceiveSNMPtrapsfromtheswitch(SNMP
NotificationandTrapsonpage13-17).
Portmonitoring(mirroring):Copyalltrafficfromthespecifiedports
toadesignatedmonitoringport(pageB-25).
Not e Linktestandpingtestanalysistoolsintroubleshootingsituationsare
describedinchapter18,Troubleshooting.SeepageC-33.
B-3
StatusandCountersData
Thissectiondescribesthestatusandcountersscreensavailablethroughthe
switchconsoleinterfaceand/orthewebbrowserinterface.
Not e YoucanaccessallconsolescreensfromthewebbrowserinterfaceviaTelnet
totheconsole.TelnetaccesstotheswitchisavailableintheDeviceView
windowundertheConfigurationtab.
StatusorCountersType Interface Purpose Page
MenuAccesstoStatusand Menu Accessmenuinterfaceforstatusandcounterdata. B-5
Counters
GeneralSystemInformation Menu,CLI Listsswitch-leveloperatinginformation. B-6
ManagementAddress Menu,CLI ListstheMACaddress,IPaddress,andIPXnetworknumberfor B-7
Information eachVLANor,ifnoVLANsareconfigured,fortheswitch.
ModuleInformation Menu,CLI Liststhemoduletypeanddescriptionforeachslotinwhicha B-8
moduleisinstalled.
PortStatus Menu,CLI, Displaystheoperationalstatusofeachport. B-9
Web
PortandTrunkStatistics Menu,CLI, Summarizesportactivityandlistsper-portflowcontrolstatus. B-10
andFlowControlStatus Web
VLANAddressTable Menu,CLI ListstheMACaddressesofnodestheswitchhasdetectedon B-12
specificVLANs,withthecorrespondingswitchport.
PortAddressTable Menu,CLI ListstheMACaddressesthattheswitchhaslearnedfromthe B-12
selectedport.
STPInformation Menu,CLI ListsSpanningTreeProtocoldatafortheswitchandforindividual B-16
ports.IfVLANsareconfigured,reportsonaper-VLANbasis.
IGMPStatus Menu,CLI ListsIGMPgroups,reports,queries,andportonwhichquerieris B-21
located.
VLANInformation Menu,CLI ForeachVLANconfiguredintheswitch,lists802.1QVLANIDand B-22
up/downstatus.
PortStatusOverviewand Web Showsportutilizationandcounters,andtheAlertLog. B-24
PortCounters
B-4
MenuAccessToStatusandCounters
BeginningattheMainMenu,displaytheStatusandCountersmenubyselect-
ing:
1.StatusandCounters
FigureB-1. TheStatusandCountersMenu
Eachoftheabovemenuitemsaccessestheread-onlyscreensdescribedon
thefollowingpages.Refertotheonlinehelpforadescriptionoftheentries
displayedinthesescreens.
B-5
MenuAccess
FromtheconsoleMainMenu,select:
1.StatusandCounters
1.GeneralSystemInformation
FigureB-2. ExampleofGeneralSwitchInformation
Thisscreendynamicallyindicateshowindividualswitchresourcesarebeing
used.SeetheonlineHelpfordetails.
CLIAccess
Syntax: showsystem-information
B-6
SwitchManagementAddressInformation
MenuAccess
1StatusandCounters...
2.SwitchManagementAddressInformation
FigureB-3. ExampleofManagementAddressInformationwithVLANsConfigured
Thisscreendisplaysaddressesthatareimportantformanagementofthe
switch.IfmultipleVLANsarenotconfigured,thisscreendisplaysasingleIP
addressfortheentireswitch.SeetheonlineHelpfordetails.
CLIAccess
Syntax: showmanagement
B-7
ModuleInformation
Usethisfeaturetodeterminewhichslotshavemodulesinstalledandwhich
type(s)ofmodulesareinstalled.
Menu:DisplayingPortStatus
1.StatusandCounters...
3.ModuleInformation
FigureB-4. ExampleofModuleInformationintheMenuInterface
CLIAccess
Syntax: showmodule
B-8
PortStatus
Thewebbrowserinterfaceandtheconsoleinterfaceshowthesameport
statusdata.
Menu:DisplayingPortStatus
4.PortStatus
FigureB-5. ExampleofPortStatusontheMenuInterface
CLIAccess
Syntax: showinterfacesbrief
WebAccess
1. ClickontheStatustab.
2. ClickonPortStatus.
B-9
ViewingPortandTrunkGroupStatisticsandFlow
ControlStatus
viewingportandtrunkstatisticsforall
ports,andflowcontrolstatus
n/a pageB-11 pageB-12 pageB-12
viewingadetailedsummaryfora n/a pageB-11 pageB-12 pageB-12
particularportortrunk
resettingcounters n/a pageB-11 pageB-12 pageB-12
Thesefeaturesenableyoutodeterminethetrafficpatternsforeachportsince
thelastrebootorresetoftheswitch.Youcandisplay:
AgeneralreportoftrafficonallLANportsandtrunkgroupsintheswitch,
alongwiththeper-portflowcontrolstatus(OnorOff).
Adetailedsummaryof trafficonaselectedportortrunkgroup.
Youcanalsoresetthecountersforaspecificport.
Themenuinterfaceandthewebbrowserinterfaceprovideadynamicdisplay
ofcounterssummarizingthetrafficoneachport.TheCLIletsyouseeastatic
snapshotofportortrunkgroupstatisticsataparticularmoment.
Asmentionedabove,rebootingorresettingtheswitchresetsthecountersto
zero.Youcanalsoresetthecounterstozeroforthecurrentsession.Thisis
usefulfortroubleshooting. SeetheNoteOnReset,below.
No t e o n Re s e t TheResetactionresetsthecounterdisplaytozeroforthecurrentsession,
butdoesnotaffectthecumulativevaluesintheactualhardwarecounters.(In
compliancewiththeSNMPstandard,thevaluesinthehardwarecountersare
notresettozerounlessyoureboottheswitch.)Thus,usingtheReset action
resetsthedisplayedcounterstozeroforthecurrentsessiononly.Exitingfrom
theconsolesessionandstartinganewsessionrestoresthecounterdisplays
totheaccumulatedvaluesinthehardwarecounters.
B-10
MenuAccesstoPortandTrunkStatistics
ToaccessthisscreenfromtheMainMenu,select:
4.PortCounters
FigureB-6. ExampleofPortCountersontheMenuInterface
Toviewdetailsaboutthetrafficonaparticularport,usethe[v]keytohighlight
thatportnumber,thenselectShowDetails.Forexample,selectingportA2
displaysascreensimilartofigureB-7,below.
FigureB-7. ExampleoftheDisplayforShowdetailsonaSelectedPort
ThisscreenalsoincludestheResetactionforthecurrentsession.(Seethe
NoteonResetonpageB-10.)
B-11
CLIAccessToPortandTrunkGroupStatistics
ToDisplaythePortCounterSummaryReport. Thiscommandprovides
anoverviewofportactivityforallportsontheswitch.
Syntax: showinterfaces
ToDisplayaDetailedTrafficSummaryforSpecificPorts. Thiscom-
mandprovidestrafficdetailsfortheport(s)youspecify.
Syntax: showinterfaces[ethernet]< port-list >
ToResetthePortCountersforaSpecificPort.Thiscommandresets
thecountersforthespecifiedportstozeroforthecurrentsession.(Seethe
NoteonResetonpageB-10.)
Syntax: clearstatistics<[ethernet]port-list >
ToResetthePortCountersforAllPorts. Thiscommandresetsthe
countersforallportstozeroforthecurrentsession.(SeetheNoteonReset
onpageB-10.)
Syntax: clearstatisticsall<[ethernet]>
WebBrowserAccessToViewPortandTrunkGroupStatistics
1. ClickontheStatustab.
2. ClickonPortCounters.
3. Toresetthecountersforaspecificport,clickanywhereintherowfor
thatport,thenclickonRefresh.
ViewingtheSwitchsMACAddressTables
viewingMACaddressesonall
portsonaspecificVLAN
n/a pageB-13 pageB-15
viewingMACaddressesona n/a pageB-14 pageB-16
specificport
searchingforaMACaddress n/a pageB-14 pageB-16
Thesefeatureshelpyoutoview:
B-12
TheMACaddressesthattheswitchhaslearnedfromnetworkdevices
attachedtotheswitch
TheportonwhicheachMACaddresswaslearned
MenuAccesstotheMACAddressViewsandSearches
Per-VLANMAC-AddressViewingandSearching. Thisfeatureletsyou
determinewhichswitchportonaselectedVLANisbeingusedtocommuni-
catewithaspecificdeviceonthenetwork.Theper-VLANlistingincludes:
TheMACaddressesthattheswitchhaslearnedfromnetworkdevices
attachedtotheswitch
TheportonwhicheachMACaddresswaslearned
1.StatusandCounters
5.VLANAddressTable
2. TheswitchthenpromptsyoutoselectaVLAN.
3. UsetheSpacebartoselecttheVLANyouwant,thenpress[Enter].The
switchthendisplaystheMACaddresstableforthatVLAN:
FigureB-8. ExampleoftheAddressTable
B-13
Topagethroughthelisting,useNextpageandPrevpage.
FindingthePortConnectionforaSpecificDeviceonaVLAN. This
featureusesadevicesMACaddressthatyouentertoidentifytheportused
bythatdevice.
1. ProceedingfromfigureB-8,press[S](forSearch),todisplaythefollowing
prompt:
EnterMACaddress:_
2. TypetheMACaddressyouwanttolocateandpress[Enter].Theaddress
andportnumberarehighlightediffound.Iftheswitchdoesnotfindthe
MACaddressonthecurrentlyselectedVLAN,itleavestheMACaddress
listingempty.
LocatedMAC
Addressand
Corresponding
PortNumber
FigureB-9. ExampleofMenuIndicatingLocatedMACAddress
3. Press[P](forPrevpage)toreturntothefulladdresstablelisting.
Port-LevelMACAddressViewingandSearching. Thisfeaturedisplays
andsearchesforMACaddressesonthespecifiedportinsteadofforallports
ontheswitch.
1.StatusandCounters
7.PortAddressTable
B-14
PromptforSelecting
thePortToSearch
FigureB-10.ListingMACAddressesforaSpecificPort
2. UsetheSpacebartoselecttheportyouwanttolistorsearchforMAC
addresses,thenpress[Enter]tolisttheMACaddressesdetectedonthat
port.
DeterminingWhetheraSpecificDeviceIsConnectedtotheSelected
Port. Proceedingfromstep2,above:
1. Press[S](forSearch),todisplaythefollowingprompt:
EnterMACaddress:_
2. TypetheMACaddressyouwanttolocateandpress[Enter].Theaddressis
highlightediffound.Iftheswitchdoesnotfindtheaddress,itleavesthe
MACaddresslistingempty.
3. Press[P](forPrevpage)toreturntothepreviousper-portlisting.
CLIAccessforMACAddressViewsandSearches
Syntax: showmac-address
[vlan< vlan-id >]
[ethernet]< port-list >]
[<mac-addr>]
ToListAllLearnedMACAddressesontheSwitch,withThePort
NumberonWhichEachMACAddressWasLearned.
ProCurve>showmac-address
B-15
ToListAllLearnedMACAddressesononeormoreports,withTheir
CorrespondingPortNumbers. Forexample,tolistthelearnedMAC
addressonportsA1throughA4andportA6:
ProCurve>showmac-addressa1-a4,a6
ToListAllLearnedMACAddressesonaVLAN,withTheirPort
Numbers. ThiscommandliststheMACaddressesassociatedwiththeports
foragivenVLAN.Forexample:
ProCurve>showmac-addressvlan100
Not e Theswitchoperateswithamultipleforwardingdatabasearchitecture.For
moreonthistopic,refertoDuplicateMACAddressesAcrossVLANsonpage
C-19
ToFindthePortOnWhichtheSwitchLearnedaSpecificMAC
Address. Forexample,tofindtheportonwhichtheswitchlearnsaMAC
addressof080009-21ae84:
FigureB-11.ListthePortonwhichtheSwitchDeletedaMACAddress
SpanningTreeProtocol(STP)Information
MenuAccesstoSTPData
8.SpanningTreeInformation
STPmustbeenabledontheswitchtodisplaythefollowingdata:
B-16
FigureB-12.ExampleofSpanningTreeInformation
Usethisscreentodeterminecurrentswitch-levelSTPparametersettingsand
statistics.
YoucanusetheShowportsactionatthebottomofthescreentodisplayport-
levelinformationandparametersettingsforeachportintheswitch(including
porttype,cost,priority,operatingstate,anddesignatedbridge)asshownin
figureB-13.
B-17
FigureB-13.ExampleofSTPPortInformation
CLIAccesstoSTPData
ThisoptionliststheSTPconfiguration,rootdata,andper-portdata(cost,
priority,state,anddesignatedbridge).
Syntax: showspanning-tree
ProCurve>showspanning-tree
B-18
LoopProtection
Incaseswherespanningtreecannotbeusedtopreventloopsattheedgeof
thenetwork,loopprotectionmayprovideasuitablealternative.Unlike
spanningtree,however,loopprotectionisnotacomprehensiveloopdetection
featureandshouldonlybeenabledonuntaggededgeports,thatis,portsthat
connecttounmanagedswitchesand/orclientsattheedgeofthenetwork.
Thecaseswhereloopprotectionmightbechosenaheadofspanningtreeto
detectandpreventloopsareasfollows:
Onportswithclientauthentication.Whenspanningtreeisenabled
onaswitchthatuse802.1X,Webauthentication,andMACauthentication,
loopsmaygoundetected.Forexample,spanningtreepacketsthatare
loopedbacktoanedgeportwillnotbeprocessedbecausetheyhavea
differentbroadcast/multicastMACaddressfromtheclient-authenticated
MACaddress.Toensurethatclient-authenticatededgeportsgetblocked
whenloopsoccur,youshouldenableloopprotectiononthoseports.
Onportsconnectedtounmanageddevices.Spanningtreecannot
detecttheformationofloopswherethereisanunmanageddeviceonthe
networkthatdoesnotprocessspanningtreepacketsandsimplydrops
them.Loopprotectionhasnosuchlimitation,andcanbeusedtoprevent
loopsonunmanagedswitches.
FigureB-14showsexampleswhereloopprotectioncanbeused.
Unmanagedswitch
(doesnotsupportSTP)
Loopprotectionenablededge
portsthatconnecttounmanaged
switchesand/orauthenticated
clients
Switch
STPDomain
Spanningtreeenabledports
Webauthenticationclients 802.1Xauthenticationclients
FigureB-14.ExamplesofLoopProtectionEnabledoutsideofSTPDomain
B-19
ConfiguringLoopProtection
Loopprotectionprovidesprotectionagainstloopsbytransmittingloop
protocolpacketsoutofportsonwhichloopprotectionhasbeenenabled.
Whentheswitchsendsoutaloopprotocolpacketandthenreceivesthesame
packetonaportthathasareceiver-actionofsend-disableconfigured,itshuts
downtheportfromwhichthepacketwassent.
Toenableloopprotection:
1. Entertheloop-protectcommandandspecifytheport(s)onwhichloop
protectionshouldbeenabled.Forexample:
Pr oCur ve( conf i g) # l oop- pr ot ect 1- 4
2. Specifyareceiver-actionofsend-disabletoshutdowntheportintheevent
ofaloop.Forexample:
Pr oCur ve( conf i g) #l oop- pr ot ect 1 r ecei ver - act i on send-
di sabl e
Syntax:[no]loop-protect<port-list>[receiver-action<send-disable|no-disable>]|
[transmit-interval<1-10>]|[disable-timer<0-604800>]|[traploop-detected]
Allowsyoutoconfigureper-portloopprotectionontheswitch.
[receiver-action<send-disable|no-disable>]
Setstheactiontobetakenwhenaloopisdetectedonthe
specifiedportorports.Theportthatreceivestheloopprotec-
tionpacketdetermineswhatactionistaken.Ifsend-disable
isconfigured,theportthattransmittedthepacketisdisabled.
Ifno-disableisconfigured,theportisnotdisabledwhena
loopisdetected.
Default:send-disable
[traploop-detected]
AllowsyoutoconfigureloopprotectiontrapsforSNMP
indicatingwhenaloophasbeendetectedonaport.
[disable-timer<0-604800>]
Howlong(inseconds)aportisdisabledwhenaloophasbeen
detected.Avalueofzerodisablestheautore-enablefunction.
Default:Timerisdisabled
[transmit-interval<1-10>]
Allowsyoutoconfigurethetimeinsecondsbetweenthe
transmissionofloopprotectionpackets.
Default:5seconds
B-20
Not es Thereceiver-actionoptioncanbeconfiguredonaper-portbasisandcan
onlybeenabledafterloopprotectionhasbeenenabledontheport.All
otherconfigurationoptions(disable-timer,traploop-detected,andtransmit
interval)areglobal.
ThetrapoptionreferstoaSNMPtrap.
Regardlessofhowthereceiver-actionandtrapoptionsareconfigured,all
detectedloopswillbeloggedintheswitchseventlog.
Thenoloop-protect<port>commandwillnotremoveareceive-action
configurationlinefromtherunningconfigurationunlessthisoptionisset
toreceive-actionsend-disable.
InternetGroupManagementProtocol(IGMP)Status
TheswitchusestheCLItodisplaythefollowingIGMPstatusonaper-VLAN
basis:
ShowCommand Output
showipigmp GlobalcommandlistingIGMPstatusforallVLANsconfigured
intheswitch:
VLANID(VID)andname
ActivegroupaddressesperVLAN
Numberofreportandquerypacketspergroup
QuerieraccessportperVLAN
showipigmp<vlan-id> Per-VLANcommandlistingaboveIGMPstatusforspecified
VLAN(VID)
showipigmpgroup<ip-addr> Liststheportscurrentlyparticipatinginthespecifiedgroup,
withporttype,Accesstype,AgeTimerdataandLeaveTimer
data.
Forexample,supposethatshowipigmplistedanIGMPgroupaddressof
224.0.1.22.Youcouldgetadditionaldataonthatgroupbyexecutingthe
following:
B-21
FigureB-15.ExampleofIGMPGroupData
VLANInformation
TheswitchusestheCLItodisplaythefollowingVLANstatus:
Syntax: showvlan
Lists:
MaximumnumberofVLANstosupport
ExistingVLANs
Status(staticordynamic)
PrimaryVLAN
Syntax: showvlan<vlan-id >
ForthespecifiedVLAN,lists:
Name,VID,andstatus(static/dynamic)
Per-Portmode(tagged,untagged,forbid,no/auto)
UnknownVLANsetting(Learn,Block,Disable)
Portstatus(up/down)
Forexample,supposethatyourswitchhasthefollowingVLANs:
Ports VLAN VID
1-12 DEFAULT_VLAN 1
1,2 VLAN-33 33
3,4 VLAN-44 44
ThenextthreefiguresshowhowyoucouldlistdataontheaboveVLANs.
B-22
ListingtheVLANID(VID)andStatusforALLVLANsintheSwitch.
FigureB-16.ExampleofVLANListingfortheEntireSwitch
ListingtheVLANID(VID)andStatusforSpecificPorts.
BecauseportsA1
andA2arenot
membersofVLAN-
44,itdoesnotappear
inthislisting.
FigureB-17.ExampleofVLANListingforSpecificPorts
ListingIndividualVLANStatus.
FigureB-18.ExampleofPortListingforanIndividualVLAN
B-23
WebBrowserInterfaceStatusInformation
ThehomescreenforthewebbrowserinterfaceistheStatusOverview
screen,asshownbelow.Asthetitleimplies,itprovidesanoverviewofthe
statusoftheswitch,includingsummarygraphsindicatingthenetworkutili-
zationoneachoftheswitchports,symbolicportstatusindicators,andthe
AlertLog,whichinformsyouofanyproblemsthatmayhaveoccurredonthe
switch.
Formoreinformationonthisscreen,seechapter5,UsingtheWebBrowser
Interface.
Port
Utilization
Graphs
PortStatus
Indicators
AlertLog
FigureB-19.ExampleofaWebBrowserInterfaceStatusOverviewScreen
B-24
PortandStaticTrunkMonitoringFeatures
PortandStaticTrunkMonitoring
Features
PortMonitoringFeatures
displaymonitoring
configuration
disabled pageB-26 pageB-28 pageB-30
configurethemonitorport(s) ports:none pageB-26 pageB-28 pageB-30
selectingorremovingports noneselected pageB-26 pageB-29 pageB-30
Youcandesignateaportformonitoringinbound(ingress)andoutbound
(egress)trafficofotherportsandofstatictrunksontheswitch.Theswitch
monitorsthenetworkactivitybycopyingallinboundandoutboundtrafficon
thespecifiedinterfacestothedesignatedmonitoringport,towhichanetwork
analyzercanbeattached.
Allswitchescoveredinthisguidesupportinboundandoutboundportmoni-
toringandrequirethatthemirrorportbewithinthesamegroupingasthe
monitoredports.
Not e Porttrunkscannotbeusedasamonitoringport.
Itispossible,whenmonitoringmultipleinterfacesinnetworkswithhigh
trafficlevels,tocopymoretraffictoamonitorportthanthelinkcansupport.
Inthiscase,somepacketsmaynotbecopiedtothemonitorport.
B-25
Menu:ConfiguringPortandStaticTrunkMonitoring
Thisproceduredescribesconfiguringtheswitchformonitoringwhenmoni-
toringisdisabled.(Ifmonitoringhasalreadybeenenabled,thescreenswill
appeardifferentlythanshowninthisprocedure.)
1. FromtheConsoleMainMenu,Select:
3.NetworkMonitoringPort
Enablemonitoring
bysettingthis
parametertoYes.
FigureB-20.TheDefaultNetworkMonitoringConfigurationScreen
2. IntheActionsmenu,press[E](forEdit).
3. Ifmonitoringiscurrentlydisabled(thedefault)thenenableitbypressing
theSpacebar(or[Y])toselectYes.
4. Pressthedownarrowkeytodisplayascreensimilartothefollowingand
movethecursortotheMonitoringPortparameter.
B-26
MovethecursortotheMonitoringPortparameter.
Portwheremonitoredtrafficexitstheswitch.
FigureB-21. HowToSelectaMonitoringPort
5. UsetheSpacebartoselecttheporttouseformonitoring.
6. Usethedownarrowkeytomovethecursortothe Actioncolumnforthe
individualportsandpositionthecursorataportyouwanttomonitor.
7. PresstheSpacebartoselectMonitorforeachportandtrunkthatyouwant
monitored.(Usethedownarrowkeytomovefromoneinterfacetothe
nextintheActioncolumn.)
8. Whenyoufinishselectingportstomonitor,press[Enter],thenpress[S](for
Save)tosaveyourchangesandexitfromthescreen.
9. ReturntotheMainMenu.
B-27
CLI:ConfiguringPortandStaticTrunkMonitoring
PortandStaticTrunkMonitoringCommandsUsedinThisSection
showmonitor below
mirror-port pageB-28
monitor pageB-29
Youmustusethefollowingconfigurationsequencetoconfigureportandstatic
trunkmonitoringintheCLI:
1. Assignamonitoring(mirror)port.
2. Designatetheport(s)andstatictrunk(s)tomonitor.
DisplayingtheMonitoringConfiguration. Thiscommandliststheport
assignedtoreceivemonitoredtrafficandtheportsand/ortrunksbeing
monitored.
Syntax: showmonitor
Forexample,ifyouassignportA6asthemonitoringportandconfigurethe
switchtomonitorportsA1-A3,showmonitordisplaysthefollowing:
Portreceivingmonitoredtraffic.
MonitoredPorts
FigureB-22.ExampleofMonitoredPortListing
ConfiguringtheMonitorPort. Thiscommandassignsorremovesamon-
itoringport,andmustbeexecutedfromtheglobalconfigurationlevel.Remov-
ingthemonitorportdisablesportmonitoringandresetsthemonitoring
parameterstotheirfactory-defaultsettings.
Syntax: [no]mirror-port[<port-num >]
Forexample,toassignportA6asthemonitoringport:
ProCurve(config)#mirror-porta6
B-28
Toturnoffmonitoring:
ProCurve(config)#nomirror-port
SelectingorRemovingPortsandStaticTrunksAsMonitoring
Sources. Afteryouconfigureamonitorportyoucanuseeithertheglobal
configurationlevelortheinterfacecontextleveltoselectportsandstatic
trunksasmonitoringsources.Youcanalsouseeitherleveltoremovemoni-
toringsources.
Syntax: [no]interfaceethernet<monitor-list >monitor
where:<monitor-list >includesportnumbersandstatictrunknamessuch
asa4, c7,b5-b8,andtrk1.
Elementsinthemonitorlistcanincludeportnumbersandstatictrunknames
atthesametime.
Forexample,withaportsuchasportA6configuredasthemonitoring(mirror)
port,youwoulduseeitherofthefollowingcommandstoselecttheseports
andstatictrunksformonitoring:
A1throughA3,andA5
Trunks1and2
Fromtheglobal
configlevel,
selectsports
andtrunksfor
monitoring
sources.
Selectstheinterfacecontextlevel,then
selectstheportsasmonitoringsources.
FigureB-23.ExamplesofSelectingPortsandStaticTrunksasMonitoringSources
Thesetwocommands
showhowtodisable
monitoringatthe
interfacecontextlevelfor
asingleportorallportsin
aninterfacecontextlevel.
Thesetwocommandsshowhowtodisablemonitoringat
theglobalconfiglevelforasingleportoragroupofports.
FigureB-24.ExamplesofRemovingPortsasMonitoringSources
B-29
Web:ConfiguringPortMonitoring
Toenableportmonitoring:
2. ClickonMonitorPort.
3. Tomonitoroneormoreports.
a. ClickontheradiobuttonforMonitorSelectedPorts.
b. Selecttheport(s)tomonitor.
4. ClickonApplyChanges.
Toremoveportmonitoring:
1. ClickontheMonitoringOffradiobutton.
2. ClickonApplyChanges.
Forweb-basedHelponhowtousethewebbrowserinterfacescreen,clickon
the[?]buttonprovidedonthewebbrowserscreen.
B-30
C
Troubleshooting
Contents
Overview ..................................................... C-3
TroubleshootingApproaches .................................... C-3
BrowserorTelnetAccessProblems.............................. C-5
UnusualNetworkActivity ....................................... C-7
GeneralProblems.......................................... C-7
PrioritizationProblems ..................................... C-8
IGMP-RelatedProblems ..................................... C-8
LACP-RelatedProblems ..................................... C-9
Port-BasedAccessControl(802.1X)-RelatedProblems .......... C-9
Radius-RelatedProblems ................................... C-13
Spanning-TreeProtocol(STP)andFast-UplinkProblems ....... C-14
SSH-RelatedProblems..................................... C-15
Stacking-RelatedProblems ........... ...................... C-16
TACACS-RelatedProblems................................. C-16
TimeP,SNTP,orGatewayProblems ......................... C-18
VLAN-RelatedProblems .............. ...................... C-18
UsingLoggingToIdentifyProblemSources....................... C-21
EventLogOperation ... .................................... C-21
Menu:EnteringandNavigatingintheEventLog ........... C-23
CLI:.................................................. C-24
DebugandSyslogOperation ................................ C-25
DebugTypes .......................................... C-26
orMoreSyslogDServers................................ C-27
DiagnosticTools .................... .......................... C-32
PortAuto-Negotiation...................................... C-32
C-1
Troubleshooting
Contents
PingandLinkTests ........................................ C-33
Web:ExecutingPingorLinkTests....................... C-34
CLI:PingorLinkTests ........... ...................... C-35
DisplayingtheConfigurationFile ............................ C-37
CLI:ViewingtheConfigurationFile ...................... C-37
Web: ViewingtheConfigurationFile ...................... C-37
forHelpinTroubleshooting ............................. C-38
CLIAdministrativeandTroubleshootingCommands ........... C-40
TracerouteCommand ...................................... C-40
RestoringtheFactory-DefaultConfiguration ...................... C-44
UsingtheCLI ......................................... C-44
UsingtheClear/ResetButtons ........................... C-44
RestoringaFlashImage ....................................... C-45
C-2
Troubleshooting
Overview
Overview
Thischapteraddressesperformance-relatednetworkproblemsthatcanbe
causedbytopology,switchconfiguration,andtheeffectsofotherdevicesor
theirconfigurationsonswitchoperation.(Forswitch-specificinformationon
hardwareproblemsindicatedbyLEDbehavior,cablingrequirements,and
otherpotentialhardware-relatedproblems,refertotheinstallationguideyou
receivedwiththeswitch.)
Not e ProCurveperiodicallyplacesswitchsoftwareupdatesontheProCurveweb
site.ProCurverecommendsthatyoucheckthiswebsiteforsoftwareupdates
thatmayhavefixedaproblemyouareexperiencing.
Forinformationonsupportandwarrantyprovisions,seetheSupportand
Warrantybookletshippedwiththeswitch.
TroubleshootingApproaches
Usetheseapproachestodiagnoseswitchproblems:
ChecktheProCurvewebsitethewebsitemayhavesoftwareupdates
orotherinformationtohelpsolveyourproblem:
www.procurve.com
ChecktheswitchLEDsTheLEDsontheswitchareafundamental
diagnostictool.Theyprovideindicationsofproperswitchoperationand
ofanyhardwarefaultsthatmayhaveoccurred:
EachswitchporthasaLinkLEDthatshouldlightwheneveranactive
networkdeviceisconnectedtotheport.
Problemswiththeswitchhardwareandsoftwareareindicatedby
flashingtheFaultandotherswitchLEDs.
SeetheInstallationGuideshippedwiththeswitchforadescription
oftheLEDbehaviorandinformationonusingtheLEDsfortrouble-
shooting.
Checkthenetworktopology/installationSeetheInstallationGuide
shippedwiththeswitchfortopologyinformation.
C-3
Troubleshooting
TroubleshootingApproaches
CheckthenetworkcablesCablingproblemsareafrequentcauseof
networkfaults.Checkthecablesfordamage,correcttype,andproper
connections.Youshouldalsouseacabletestertocheckyourcablesfor
compliancetotherelevantIEEE802.3specification.SeetheInstallation
Guideshippedwiththeswitchforcorrectcabletypesandconnectorpin-
outs.
Usethesoftwaretools:
WebBrowserInterfaceUsethePortUtilizationGraphandAlert
Loginthewebbrowserinterfaceincludedintheswitchtohelpisolate
problems.SeeChapter5,UsingtheWebBrowserInterfacefor
operatinginformation.Thesetoolsareavailablethroughtheweb
browserinterface:
PortUtilizationGraph
AlertLog
PortStatusandPortCountersscreens
Diagnostictools(Linktest,Pingtest,configurationfilebrowser)
SwitchConsoleForhelpinisolatingproblems,usetheeasy-to-
accessswitchconsolebuiltintotheswitchorTelnettotheswitch
console.Seechapter2,UsingtheMenuInterfaceandchapter3,
UsingtheCommandLineInterface(CLI)forconsoleoperation
information.Thesetoolsareavailablethroughtheswitchconsole:
StatusandCountersscreens
EventLog
Diagnosticstools(Linktest,Pingtest,configurationfilebrowser,
andadvancedusercommands)
ProCurveManager/ProCurveManager+UseProCurveMan-
agertohelpisolateproblemsandrecommendsolutions.
C-4
Troubleshooting
BrowserorTelnetAccessProblems
Cannotaccessthewebbrowserinterface:
AccessmaybedisabledbytheWebAgentEnabledparameterintheswitch
console.Checkthesettingonthisparameterbyselecting:
1.SystemInformation
TheswitchmaynothavethecorrectIPaddress,subnetmaskorgateway.
VerifybyconnectingaconsoletotheswitchsConsoleportandselecting:
5.IPConfiguration
Note:IfDHCP/Bootpisusedtoconfiguretheswitch,theIPaddressing
canbeverifiedbyselecting:
alsochecktheDHCP/BootpserverconfigurationtoverifycorrectIP
addressing.
IfyouareusingDHCPtoacquiretheIPaddressfortheswitch,theIP
addressleasetimemayhaveexpiredsothattheIPaddresshaschanged.
FormoreinformationonhowtoreserveanIPaddress,refertothe
documentationfortheDHCPapplicationthatyouareusing.
IfoneormoreIP-Authorizedmanagersareconfigured,theswitchallows
webbrowseraccessonlytoadevicehavinganauthorizedIPaddress.For
moreinformationonIPAuthorizedmanagers,seetheAccessSecurity
Guideforyourswitch.
Javaappletsmaynotberunningonthewebbrowser.Theyarerequired
fortheswitchwebbrowserinterfacetooperatecorrectly.Seetheonline
HelponyourwebbrowserforhowtoruntheJavaapplets.
C-5
Troubleshooting
CannotTelnetintotheswitchconsolefromastationonthenetwork:
TelnetaccessmaybedisabledbytheInboundTelnetEnabledparameterin
theSystemInformationscreenofthemenuinterface:
1.SystemInformation
TheswitchmaynothavethecorrectIPaddress,subnetmask,orgateway.
VerifybyconnectingaconsoletotheswitchsConsoleportandselecting:
5.IPConfiguration
Note:IfDHCP/Bootpisusedtoconfiguretheswitch,seetheNote,above.
IfyouareusingDHCPtoacquiretheIPaddressfortheswitch,theIP
addressleasetimemayhaveexpiredsothattheIPaddresshaschanged.
FormoreinformationonhowtoreserveanIPaddress,refertothe
documentationfortheDHCPapplicationthatyouareusing.
IfoneormoreIP-Authorizedmanagersareconfigured,theswitchallows
inboundtelnetaccessonlytoadevicehavinganauthorizedIPaddress.
FormoreinformationonIPAuthorizedmanagers,seetheAccessSecurity
Guideforyourswitch.
C-6
Troubleshooting
UnusualNetworkActivity
Networkactivitythatfailstomeetacceptednormsmayindicateahardware
problemwithoneormoreofthenetworkcomponents,possiblyincludingthe
switch.Suchproblemscanalsobecausedbyanetworklooporsimplytoo
muchtrafficforthenetworkasitiscurrentlydesignedandimplemented.
UnusualnetworkactivityisusuallyindicatedbytheLEDsonthefrontofthe
switchormeasuredwiththeswitchconsoleinterfaceorwithanetwork
managementtoolsuchastheProCurveManager.RefertotheInstallation
GuideyoureceivedwiththeswitchforinformationonusingLEDstoidentify
unusualnetworkactivity.
Atopologyloopcanalsocauseexcessivenetworkactivity.TheeventlogFFI
messagescanbeindicativeofthistypeofproblem.
GeneralProblems
Thenetworkrunsslow;processesfail;userscannotaccessserversor
otherdevices.Broadcaststormsmaybeoccurringinthenetwork.These
maybeduetoredundantlinksbetweennodes.
Ifyouareconfiguringaporttrunk,finishconfiguringtheportsinthe
trunkbeforeconnectingtherelatedcables.Otherwiseyoumayinad-
vertentlycreateanumberofredundantlinks(i.e.topologyloops)that
willcausebroadcaststorms.
TurnonSpanningTreeProtocoltoblockredundantlinks(i.e.topol-
ogyloops)
CheckforFFImessagesintheEventLog.
DuplicateIPAddresses. ThisisindicatedbythisEventLogmessage:
ip:InvalidARPsource:IPaddressonIPaddress
where:bothinstancesofIPaddressarethesameaddress,indicatingthe
switchsIPaddresshasbeenduplicatedsomewhereonthenetwork.
DuplicateIPAddressesinaDHCPNetwork.IfyouuseaDHCPserver
toassignIPaddressesinyournetworkandyoufindadevicewithavalidIP
addressthatdoesnotappeartocommunicateproperlywiththeserverorother
devices,aduplicateIPaddressmayhavebeenissuedbytheserver.Thiscan
occurifaclienthasnotreleasedaDHCP-assignedIPaddressafterthe
intendedexpirationtimeandtheserverleasestheaddresstoanotherdevice.
C-7
Troubleshooting
Thiscanalsohappen,forexample,iftheserverisfirstconfiguredtoissueIP
addresseswithanunlimitedduration,thenissubsequentlyconfiguredtoissue
IPaddressesthatwillexpireafteralimitedduration.Onesolutionisto
configurereservationsintheDHCPserverforspecificIPaddressestobe
assignedtodeviceshavingspecificMACaddresses.Formoreinformation,
refertothedocumentationfortheDHCPserver.
OneindicationofaduplicateIPaddressinaDHCPnetworkisthisEventLog
message:
ip:InvalidARPsource:IPaddressonIPaddress
where:bothinstancesofIPaddressarethesameaddress,indicatingthe
IPaddressthathasbeenduplicatedsomewhereonthenetwork.
TheSwitchHasBeenConfiguredforDHCP/BootpOperation,ButHas
NotReceivedaDHCPorBootpReply. Whentheswitchisfirstconfig-
uredforDHCP/Bootpoperation,orifitisrebootedwiththisconfiguration,it
immediatelybeginssendingrequestpacketsonthenetwork.Iftheswitchdoes
notreceiveareplytoitsDHCP/Bootprequests,itcontinuestoperiodically
sendrequestpackets,butwithdecreasingfrequency.Thus,ifaDHCPorBootp
serverisnotavailableoraccessibletotheswitchwhenDHCP/Bootpisfirst
configured,theswitchmaynotimmediatelyreceivethedesiredconfiguration.
Afterverifyingthattheserverhasbecomeaccessibletotheswitch,rebootthe
switchtore-starttheprocess.
PrioritizationProblems
Portsconfiguredfornon-defaultprioritization(level1-7)arenot
performingthespecifiedaction.Iftheportswereplacedinatrunkgroup
afterbeingconfiguredfornon-defaultprioritization,theprioritysettingwas
automaticallyresettozero(thedefault).Portsinatrunkgroupoperateonly
atthedefaultprioritysetting.
IGMP-RelatedProblems
IPMulticast(IGMP)TrafficThatIsDirectedByIGMPDoesNotReach
IGMPHostsoraMulticastRouterConnectedtoaPort.IGMPmust
beenabledontheswitchandtheaffectedportmustbeconfiguredforAuto
orForwardoperation.
C-8
Troubleshooting
IPMulticastTrafficFloodsOutAllPorts;IGMPDoesNotAppearTo
FilterTraffic. TheIGMPfeaturedoesnotoperateiftheswitchorVLAN
doesnothaveanIPaddressconfiguredmanuallyorobtainedthroughDHCP/
Bootp.ToverifywhetheranIPaddressisconfiguredfortheswitchorVLAN,
doeitherofthefollowing:
TryUsingtheWebBrowserInterface:Ifyoucanaccesstheweb
browserinterface,thenanIPaddressisconfigured.
TryToTelnettotheSwitchConsole:IfyoucanTelnettotheswitch,
thenanIPaddressisconfigured.
UsingtheSwitchConsoleInterface:FromtheMainMenu,checkthe
ManagementAddressInformationscreenbyclickingon
1.StatusandCounters
LACP-RelatedProblems
UnabletoenableLACPonaportwiththeinterface[e]<port-number>lacp
command.Inthiscase,theswitchdisplaysthefollowingmessage:
Operationisnotallowedforatrunkedport.
YoucannotenableLACPonaportwhileitisconfiguredasastaticTrunkport.
ToenableLACPonastatic-trunkedport:
firstusethenotrunk[e]<port-number>commandtodisablethestatictrunk
assignment,andthenexecuteinterface[e]<port-number>lacp.
Ca u t i o n Removingaportfromatrunkwithoutfirstdisablingtheportcancreatea
trafficloopthatcanslowdownorhaltyournetwork.Beforeremovingaport
fromatrunk,ProCurverecommendsthatyoueitherdisabletheportor
disconnectitfromtheLAN.
Port-BasedAccessControl(802.1X)-RelatedProblems
Not e Tolistthe802.1Xport-accessEventLogmessagesstoredontheswitch,use
showlog802.
SeealsoRadius-RelatedProblemsonpageC-13.
C-9
Troubleshooting
TheswitchdoesnotreceivearesponsetoRADIUSauthentication
requests. Inthiscase,theswitchwillattemptauthenticationusingthe
secondarymethodconfiguredforthetypeofaccessyouareusing(console,
Telnet,orSSH).
Therecanbeseveralreasonsfornotreceivingaresponsetoanauthentication
request.Dothefollowing:
UsepingtoensurethattheswitchhasaccesstotheconfiguredRADIUS
servers.
Verifythattheswitchisusingthecorrectencryptionkey(RADIUSsecret
key)foreachserver.
VerifythattheswitchhasthecorrectIPaddressforeachRADIUSserver.
Ensurethattheradius-servertimeoutperiodislongenoughfornetwork
conditions.
TheswitchdoesnotauthenticateaclienteventhoughtheRADIUS
serverisproperlyconfiguredandprovidingaresponsetothe
authenticationrequest. IftheRADIUSserverconfigurationforauthenti-
catingtheclientincludesaVLANassignment,ensurethattheVLANexistsas
astaticVLANontheswitch.SeeHow802.1XAuthenticationAffectsVLAN
OperationintheAccessSecurityGuideforyourswitch.
DuringRADIUS-authenticatedclientsessions,accesstoaVLANonthe
portusedfortheclientsessionsislost.IftheaffectedVLANisconfig-
uredasuntaggedontheport,itmaybetemporarilyblockedonthatportduring
an802.1Xsession.Thisisbecausetheswitchhastemporarilyassignedanother
VLANasuntaggedontheporttosupporttheclientaccess,asspecifiedinthe
responsefromtheRADIUSserver.SeeHow802.1XAuthenticationAffects
VLANOperationintheAccessSecurityGuideforyourswitch.
Theswitchappearstobeproperlyconfiguredasasupplicant,but
cannotgainaccesstotheintendedauthenticatorportontheswitch
towhichitisconnected.Ifaaaauthenticationport-accessisconfiguredfor
Local,ensurethatyouhaveenteredthelocallogin(operator-level)username
andpasswordoftheauthenticatorswitchintotheidentityandsecretparame-
tersofthesupplicantconfiguration.Ifinstead,youentertheenable(manager-
level)usernameandpassword,accesswillbedenied.
Thesupplicantstatisticslistingshowsmultipleportswiththesame
authenticatorMACaddress.Thelinktotheauthenticatormayhavebeen
movedfromoneporttoanotherwithoutthesupplicantstatisticshavingbeen
clearedfromthefirstport.RefertotheNoteonSupplicantStatisticsinthe
AccessSecurityGuideforyourswitch.
C-10
Troubleshooting
Theshowport-accessauthenticator<port-list>commandshowsoneormore
portsremainopenaftertheyhavebeenconfiguredwithcontrol
unauthorized. 802.1Xisnotactiveontheswitch.Afteryouexecuteaaaport-
accessauthenticatoractive,allportsconfiguredwithcontrolunauthorized
shouldbelistedasClosed.
PortA9showsanOpenstatuseven
thoughAccessControlissetto
Unauthorized(ForceAuth).Thisis
becausetheport-access
authenticatorhasnotyetbeen
activated.
FigureC-1. ExampleofaPortRemainingOpenAfterBeingConfiguredwithControlUnauthorized
RADIUSserverfailstorespondtoarequestforservice,eventhough
theserversIPaddressiscorrectlyconfiguredintheswitch.Use
showradiustoverifythattheencryptionkey(RADIUSsecretkey)theswitch
isusingiscorrectfortheserverbeingcontacted.Iftheswitchhasonlyaglobal
keyconfigured,theniteithermustmatchtheserverkeyoryoumustconfigure
aserver-specifickey.Iftheswitchalreadyhasaserver-specifickeyassigned
totheserversIPaddress,thenitoverridestheglobalkeyandmustmatchthe
serverkey.
C-11
Troubleshooting
GlobalRADIUSEncryptionKey
UniqueRADIUSEncryptionKeyfor
theRADIUSserverat10.33.18.119
FigureC-2. ExampleofHowToListtheGlobalandServer-SpecificRadius
EncryptionKeys
Also,ensurethattheswitchportusedtoaccesstheRADIUSserverisnot
blockedbyan802.1Xconfigurationonthatport.Forexample,showport-
accessauthenticator<port-list>givesyouthestatusforthespecifiedports.
Also,ensurethatotherfactors,suchasportsecurityorany802.1Xconfigura-
tionontheRADIUSserverarenotblockingthelink.
TheauthorizedMACaddressonaportthatisconfiguredforboth
802.1Xandportsecurityeitherchangesorisre-acquiredafter
executionofaaaport-accessauthenticator<port-list>initialize. Iftheportis
force-authorizedwithaaaport-accessauthenticator<port-list>controlauthorized
commandandportsecurityisenabledontheport,thenexecutinginitialize
causestheporttoclearthelearnedaddressandlearnanewaddressfromthe
firstpacketitreceivesafteryouexecuteinitialize.
Atrunkedportconfiguredfor802.1Xisblocked. Ifyouareusing
RADIUSauthenticationandtheRADIUSserverspecifiesaVLANfortheport,
theswitchallowsauthentication,butblockstheport.Toeliminatethisprob-
lem,eitherremovetheportfromthetrunkorreconfiguretheRADIUSserver
toavoidspecifyingaVLAN.
C-12
Troubleshooting
Radius-RelatedProblems
TheswitchdoesnotreceivearesponsetoRADIUSauthentication
requests. Inthiscase,theswitchwillattemptauthenticationusingthe
secondarymethodconfiguredforthetypeofaccessyouareusing(console,
Telnet,orSSH).
Therecanbeseveralreasonsfornotreceivingaresponsetoanauthentication
request.Dothefollowing:
UsepingtoensurethattheswitchhasaccesstotheconfiguredRADIUS
server.
Verifythattheswitchisusingthecorrectencryptionkeyforthedesig-
natedserver.
VerifythattheswitchhasthecorrectIPaddressfortheRADIUSserver.
Ensurethattheradius-servertimeoutperiodislongenoughfornetwork
conditions.
VerifythattheswitchisusingthesameUDPportnumberastheserver.
RADIUSserverfailstorespondtoarequestforservice,eventhough
theserversIPaddressiscorrectlyconfiguredintheswitch.Use
showradiustoverifythattheencryptionkeytheswitchisusingiscorrectfor
theserverbeingcontacted.Iftheswitchhasonlyaglobalkeyconfigured,then
iteithermustmatchtheserverkeyoryoumustconfigureaserver-specific
key.Iftheswitchalreadyhasaserver-specifickeyassignedtotheserversIP
address,thenitoverridestheglobalkeyandmustmatchtheserverkey.
GlobalRADIUSEncryptionKey
UniqueRADIUSEncryptionKey
fortheRADIUSserverat
10.33.18.119
FigureC-3. ExamplesofGlobalandUniqueEncryptionKeys
C-13
Troubleshooting
Spanning-TreeProtocol(STP)andFast-Uplink
Problems
Ca u t i o n IfyouenableSTP,itisrecommendedthatyouleavetheremainderoftheSTP
parametersettingsattheirdefaultvaluesuntilyouhavehadanopportunity
toevaluateSTPperformanceinyournetwork.BecauseincorrectSTPsettings
canadverselyaffectnetworkperformance,youshouldavoidmakingchanges
withouthavingastrongunderstandingofhowSTPoperates.Tolearnthe
detailsofSTPoperation,refertotheIEEE802.1Dstandard.
BroadcastStormsAppearingintheNetwork. Thiscanoccurwhen
therearephysicalloops(redundantlinks)inthetopology.Wherethisexists,
youshouldenableSTPonallbridgingdevicesinthetopologyinorderforthe
looptobedetected.
STPBlocksaLinkinaVLANEvenThoughThereAreNoRedundant
LinksinthatVLAN. In802.1Q-compliantdevicessuchastheswitchescov-
eredbythisguide,STPblocksredundantphysicallinkseveniftheyarein
separateVLANs.Asolutionistouseonlyone,multiple-VLAN(tagged)link
betweenthedevices.Also,ifportsareavailable,youcanimprovetheband-
widthinthissituationbyusingaporttrunk.SeethechapteronVLANsinthe
AdvancedTrafficManagementGuide..
Fast-UplinkTroubleshooting.Someoftheproblemsthatcanresultfrom
incorrectusageofFast-UplinkSTPincludetemporaryloopsandgeneration
ofduplicatepackets.
Problemsourcescaninclude:
Fast-UplinkisconfiguredonaswitchthatistheSTProotdevice.
EithertheHelloTimeortheMaxAgesetting(orboth)istoolongononeor
moreswitches.ReturntheHelloTimeandMaxAgesettingstotheirdefault
values(2secondsand20seconds,respectively,onaswitch).
Adownlinkportisconnectedtoaswitchthatisfurtheraway(inhop
count)fromtherootdevicethantheswitchportonwhichfast-uplinkSTP
isconfigured.
Twoedgeswitchesaredirectlylinkedtoeachotherwithafast-uplink
(Mode=Uplink)connection.
Fastuplinkisconfiguredonbothendsofalink.
AswitchservingasabackupSTProotswitchhasportsconfiguredfor
fast-uplinkSTPandhasbecometherootdeviceduetoafailureinthe
originalrootdevice.
C-14
Troubleshooting
SSH-RelatedProblems
Switchaccessrefusedtoaclient. Eventhoughyouhaveplacedthecli-
entspublickeyinatextfileandcopiedthefile(usingthecopytftppub-key-
filecommand)intotheswitch,theswitchrefusestoallowtheclienttohave
access.IfthesourceSSHclientisanSSHv2application,thepublickeymay
beinthePEMformat,whichtheswitch(SSHv1)doesnotinterpret.Checkthe
SSHclientapplicationforautilitythatcanconvertthePEM-formattedkey
intoanASCII-formattedkey.
ExecutingipsshdoesnotenableSSHontheswitch.Theswitchdoes
nothaveahostkey.Verifybyexecutingshowiphost-public-key.Ifyousee
themessage
sshcannotbeenableduntilahostkeyisconfigured
(use'crypto'command).
thenyouneedtogenerateanSSHkeypairfortheswitch.Todoso,execute
cryptokeygenerate.(Referto2.GeneratingtheSwitchsPublicandPrivate
KeyPairintheAccessSecurityGuideforyourswitch.)
Switchdoesnotdetectaclientspublickeythatdoesappearinthe
switchspublickeyfile(showipclient-public-key). Theclientspublickey
entryinthepublickeyfilemaybeprecededbyanotherentrythatdoesnot
terminatewithanewline(CR).Inthiscase,theswitchinterpretsthenext
sequentialkeyentryassimplyacommentattachedtotheprecedingkeyentry.
Whereapublickeyfilehasmorethanoneentry,ensurethatallentries
terminatewithanewline(CR).Whilethisisoptionalforthelastentryinthe
file,notaddinganewlinetothelastentrycreatesanerrorpotentialifyou
eitheraddanotherkeytothefileatalatertimeorchangetheorderofthekeys
inthefile.
Anattempttocopyaclientpublic-keyfileintotheswitchhasfailed
andtheswitchlistsoneofthefollowingmessages.
Downloadfailed:overlengthkeyinkeyfile.
Downloadfailed:toomanykeysinkeyfile.
Downloadfailed:oneormorekeysisnotavalidRSA
publickey.
C-15
Troubleshooting
Thepublickeyfileyouaretryingtodownloadhasoneofthefollowing
problems:
Akeyinthefileistoolong.Themaximumkeylengthis1024characters,
includingspaces.Thiscouldalsomeanthattwoormorekeysaremerged
togetherinsteadofbeingseparatedbya<CR><LF>.
Therearemorethantenpublickeysinthekeyfile.
Oneormorekeysinthefileiscorruptedorisnotavalidrsapublickey.
Clientceasestorespond(hangs)duringconnectionphase. The
switchdoesnotsupportdatacompressioninanSSHsession.Clientswilloften
havecompressionturnedonbydefault,butwilldisableitduringthenegotia-
tionphase.Aclientwhichdoesnotrecognizethecompression-requestFAIL-
UREresponsemayfailwhenattemptingtoconnect.Ensurethatcompression
isturnedoffbeforeattemptingaconnectiontopreventthisproblem.
Stacking-RelatedProblems
TheStackCommanderCannotLocateanyCandidates.Stackingoper-
atesontheprimaryVLAN,whichinthedefaultconfigurationisthe
DEFAULT_VLAN.However,ifanotherVLANhasbeenconfiguredasthe
primaryVLAN,andtheCommanderisnotontheprimaryVLAN,thenthe
CommanderwillnotdetectCandidatesontheprimaryVLAN.
TACACS-RelatedProblems
EventLog. WhentroubleshootingTACACS+operation,checktheswitchs
EventLogforindicationsofproblemareas.
AllUsersAreLockedOutofAccesstotheSwitch.Iftheswitchisfunc-
tioningproperly,butnousername/passwordpairsresultinconsoleorTelnet
accesstotheswitch,theproblemmaybeduetohowtheTACACS+server
and/ortheswitchareconfigured.Useoneofthefollowingmethodstorecover:
AccesstheTACACS+serverapplicationandadjustorremovethe
configurationparameterscontrollingaccesstotheswitch.
Iftheabovemethoddoesnotwork,tryeliminatingconfiguration
changesintheswitchthathavenotbeensavedtoflash(boot-up
configuration)bycausingtheswitchtorebootfromtheboot-up
configuration(whichincludesonlytheconfigurationchangesmade
priortothelastwritememorycommand.)Ifyoudidnotusewrite
C-16
Troubleshooting
memorytosavetheauthenticationconfigurationtoflash,then
pressingtheResetbuttonorcyclingthepowerrebootstheswitch
withtheboot-upconfiguration.
DisconnecttheswitchfromnetworkaccesstoanyTACACS+servers
andthenlogintotheswitchusingeitherTelnetordirectconsoleport
access.BecausetheswitchcannotaccessaTACACS+server,itwill
defaulttolocalauthentication.Youcanthenusetheswitchslocal
OperatororManagerusername/passwordpairtologon.
Asalastresort,usetheClear/Resetbuttoncombinationtoresetthe
switchtoitsfactorydefaultboot-upconfiguration.Takingthisstep
meansyouwillhavetoreconfiguretheswitchtoreturnittooperation
inyournetwork.
NoCommunicationBetweentheSwitchandtheTACACS+Server
Application.Iftheswitchcanaccesstheserverdevice(thatis,itcanping
theserver),thenaconfigurationerrormaybetheproblem.Somepossibilities
include:
TheserverIPaddressconfiguredwiththeswitchstacacs-serverhost
commandmaynotbecorrect.(Usetheswitchsshowtacacs-server
commandtolisttheTACACS+serverIPaddress.)
Theencryptionkeyconfiguredintheserverdoesnotmatchthe
encryptionkeyconfiguredintheswitch(byusingthetacacs-server
keycommand).Verifythekeyintheserverandcompareittothekey
configuredintheswitch.(Useshowtacacs-servertolisttheglobalkey.
Useshowconfigorshowconfigrunningtolistanyserver-specifickeys.)
TheaccessibleTACACS+serversarenotconfiguredtoprovide
servicetotheswitch.
AccessIsDeniedEvenThoughtheUsername/PasswordPairIs
Correct.Somereasonsfordenialincludethefollowingparameters
controlledbyyourTACACS+serverapplication:
Theaccounthasexpired.
Theaccessattemptisthroughaportthatisnotallowedforthe
account.
Thetimequotafortheaccounthasbeenexhausted.
Thetimecreditfortheaccounthasexpired.
C-17
Troubleshooting
Theaccessattemptisoutsideofthetimeframeallowedforthe
account.
Theallowednumberofconcurrentloginsfortheaccounthasbeen
exceeded
Formorehelp,refertothedocumentationprovidedwithyourTACACS+
serverapplication.
UnknownUsersAllowedtoLogintotheSwitch.YourTACACS+appli-
cationmaybeconfiguredtoallowaccesstounknownusersbyassigningthem
theprivilegesincludedinadefaultuserprofile.Refertothedocumentation
providedwithyourTACACS+serverapplication.
SystemAllowsFewerLoginAttemptsthanSpecifiedintheSwitch
Configuration.YourTACACS+serverapplicationmaybeconfiguredto
allowfewerloginattemptsthanyouhaveconfiguredintheswitchwiththe
aaaauthenticationnum-attemptscommand.
TimeP,SNTP,orGatewayProblems
TheSwitchCannotFindtheTimeServerortheConfiguredGateway.
TimeP,SNTP,andGatewayaccessarethroughtheprimaryVLAN,whichin
thedefaultconfigurationistheDEFAULT_VLAN.IftheprimaryVLANhas
beenmovedtoanotherVLAN,itmaybedisabledordoesnothaveports
assignedtoit.
VLAN-RelatedProblems
MonitorPort.WhenusingthemonitorportinamultipleVLANenviron-
ment,theswitchhandlesbroadcast,multicast,andunicasttrafficoutputfrom
themonitorportasfollows:
IfthemonitorportisconfiguredfortaggedVLANoperationonthesame
VLANasthetrafficfrommonitoredports,thetrafficoutputfromthe
monitorportcarriesthesameVLANtag.
IfthemonitorportisconfiguredforuntaggedVLANoperationonthesame
VLANasthetrafficfromthemonitoredports,thetrafficoutputfromthe
monitorportisuntagged.
IfthemonitorportisnotamemberofthesameVLANasthetrafficfrom
themonitoredports,trafficfromthemonitoredportsdoesnotgooutthe
monitorport.
C-18
Troubleshooting
NoneofthedevicesassignedtooneormoreVLANsonan802.1Q-
compliantswitcharebeingrecognized.IfmultipleVLANsarebeingused
onportsconnecting802.1Q-compliantdevices,inconsistentVLANIDsmay
havebeenassignedtooneormoreVLANs.ForagivenVLAN,thesameVLAN
IDmustbeusedonallconnected802.1Q-compliantdevices.
LinkConfiguredforMultipleVLANsDoesNotSupportTrafficforOne
orMoreVLANs. OneormoreVLANsmaynotbeproperlyconfiguredas
TaggedorUntagged.AVLANassignedtoaportconnectingtwo802.1Q-
compliantdevicesmustbeconfiguredthesameonbothports.Forexample,
VLAN_1andVLAN_2usethesamelinkbetweenswitchXandswitchY.
SwitchY SwitchX
LinksupportingVLAN_1
andVLAN_2
PortX-3 PortY-7
VLANPortAssignment VLANPortAssignment
Port VLAN_1 VLAN_2 Port VLAN_1 VLAN_2
X-3 UntaggedTagged Y-7 UntaggedTagged
FigureC-4. ExampleofCorrectVLANPortAssignmentsonaLink
1. IfVLAN_1(VID=1)isconfiguredasUntaggedonport3onswitchX,
thenitmustalsobeconfiguredasUntaggedonport7onswitchY.
MakesurethattheVLANID(VID)isthesameonbothswitches.
2. Similarly,ifVLAN_2(VID=2)isconfiguredasTaggedonthelinkporton
switchA,thenitmustalsobeconfiguredasTaggedonthelinkport
onswitchB.MakesurethattheVLANID(VID)isthesameonboth
switches.
DuplicateMACAddressesAcrossVLANs.Theswitchoperateswithmul-
tipleforwardingdatabases.Thus,duplicateMACaddressesoccurringon
differentVLANscanappearwhereadevicehavingoneMACaddressisa
memberofmorethanone802.1QVLAN,andtheswitchporttowhichthe
deviceislinkedisusingVLANs(insteadofSTPortrunking)toestablish
redundantlinkstoanotherswitch.Iftheotherdevicesendstrafficover
multipleVLANs,itsMACaddresswillconsistentlyappearinmultipleVLANs
ontheswitchporttowhichitislinked.
C-19
Troubleshooting
NotethatattemptingtocreateredundantpathsthroughtheuseofVLANswill
causeproblemswithsomeswitches.OnesymptomisthataduplicateMAC
addressappearsinthePortAddressTableofoneport,andthenlaterappears
onanotherport.Whiletheswitchhasmultipleforwardingdatabases,andthus
doesnothavethisproblem,someswitcheswithasingleforwardingdatabase
forallVLANsmayproducetheimpressionthataconnecteddeviceismoving
amongportsbecausepacketswiththesameMACaddressbutdifferentVLANs
arereceivedondifferentports.Youcanavoidthisproblembycreating
redundantpathsusingporttrunksorspanningtree.
Server
ProCurve
SwitchesCovered
bythisGuide
(Multiple
Forwarding
Database)
Switchwith
Single
Forwarding
Database
MACAddressA;VLAN1
MACAddressA;VLAN2
Problem:Thisswitchdetectscontinual
movesofMACaddressAbetweenports.
VLAN1
VLAN2
FigureC-5. ExampleofDuplicateMACAddress
C-20

I
I
Troubleshooting
UsingLoggingToIdentifyProblemSources
UsingLoggingToIdentifyProblem
Sources
EventLogOperation
TheEventLogrecordsoperatingeventsassingle-lineentrieslistedinchrono-
logicalorder,andservesasatoolforisolatingproblems.EachEventLogentry
iscomposedoffivefields:
Severity Date Time SystemModule EventMessage
08/05/01 10:52:32 ports: portA1enabled
FigureC-6. AnatomyofanEventLogMessage
Severityisoneofthefollowingcodes:
(information)indicatesroutineevents.
W (warning)indicatesthataservicehasbehavedunexpectedly.
C (critical)indicatesthatasevereswitcherrorhasoccurred.
D (debug)reservedforinternaldiagnosticinformation.
Dateisthedateinmm/dd/yyformatthattheentrywasplacedinthelog.
Timeisthetimeinhh:mm:ssformatthattheentrywasplacedinthelog.
SystemModuleistheinternalmodule(suchasportsforportmanager)that
generatedthelogentry.IfVLANsareconfigured,thenaVLANnamealso
appearsforaneventthatisspecifictoanindividualVLAN.TableC-1onpage
C-22liststheindividualmodules.
EventMessageisabriefdescriptionoftheoperatingevent.
Theeventlogholdsupto1000linesinchronologicalorder,fromtheoldestto
thenewest.Eachlineconsistsofonecompleteeventmessage.Oncethelog
hasreceived1000entries,itdiscardsthecurrentoldestlineeachtimeanew
lineisreceived.Theeventlogwindowcontains14logentrylinesandcanbe
positionedtoanylocationinthelog.
Theeventlogwillbeerasedifpowertotheswitchisinterrupted.
C-21
Troubleshooting
(TheeventlogisnoterasedbyusingtheRebootSwitchcommandintheMain
Menu.)
TableC-1.EventLogSystemModules
Module EventDescription Module EventDescription
addrMgr Addresstable mgr Consolemanagement
chassis switchhardware ports Changeinportstatus;statictrunks
bootp bootpaddressing snmp SNMPcommunications
console Consoleinterface stack Stacking
dhcp DHCPaddressing stp SpanningTree
download filetransfer sys,system Switchmanagement
FFI Find,Fix,andInform--availableinthe telnet Telnetactivity
consoleeventlogandwebbrowser
interfacealertlog
garp GARP/GVRP tcp Transmissioncontrol
igmp IPMulticast tftp FiletransferfornewOSorconfig.
ip IP-related timep Timeprotocol
ipx NovellNetware vlan VLANoperations
lacp DynamicLACPtrunks Xmodem Xmodemfiletransfer
C-22
Troubleshooting
Menu:EnteringandNavigatingintheEventLog
FromtheMainMenu,selectEventLog.
RangeofEventsintheLog
RangeofLogEventsDisplayed
LogStatusLine
FigureC-7. ExampleofanEventLogDisplay
Thelogstatuslineatthebottomofthedisplayidentifieswhereinthe
sequenceofeventmessagesthedisplayiscurrentlypositioned.
TodisplayvariousportionsoftheEventLog,eitherprecedingorfollowingthe
currentlyvisibleportion,useeithertheactionslistedatthebottomofthe
display(Nextpage,Prevpage,orEnd),orthekeysdescribedinthefollowing
table:
TableC-2. EventLogControlKeys
Key Action
[N] Advancethedisplaybyonepage(nextpage).
[P] Rollbackthedisplaybyonepage(previouspage).
[v] Advancedisplaybyoneevent(downoneline).
[^] Rollbackdisplaybyoneevent(uponeline).
[E] Advancetotheendofthelog.
[H] DisplayHelpfortheeventlog.
C-23
Troubleshooting
CLI:
UsingtheCLI,youcanlist
Eventsrecordedsincethelastbootoftheswitch
Alleventsrecorded
Evententriescontainingaspecifickeyword,eithersincethelastbootor
alleventsrecorded
Syntax: showlogging[-a][<search-text>]
ProCurve>showlogging
Listsrecordedlogmessagessincelastreboot.
ProCurve>showlogging-a
Listsallrecordedlogmessages,includingthosebeforethe
lastreboot.
ProCurve>showlogging-asystem
Listslogmessageswithsysteminthetextormodule
name.
ProCurve>showloggingsystem
Listsalllogmessagessincethelastrebootthathave
systeminthetextormodulename.
C-24
Troubleshooting
DebugandSyslogOperation
Youcandirectswitchdebug(Eventlog)messagestothesedestinations:
UptosixSyslogDservers
Onemanagement-accesssessionthrough:
Adirect-connectRS-232consoleCLIsession
ATelnetsession
AnSSHsession
FigureC-8. ExampleofDebugOutputtoaConsoleCLISession
Debugloggingrequiresaloggingdestination(SyslogDserverand/orasession
type),andinvolvesthelogginganddebugdestinationcommands.Actionsyou
canperformwithDebugandSyslogoperationinclude:
ConfiguretheswitchtosendEventLogmessagestooneormoreSyslogD
servers.Includedistheoptiontosendthemessagestotheuserlogfacility
(default)ontheconfiguredservers,ortoanotherlogfacility.
ConfiguretheswitchtosendEventLogmessagestothecurrentmanage-
ment-accesssession(serial-connectCLI,TelnetCLI,orSSH).
DisableallSyslogdebugloggingwhileretainingtheSyslogaddressesfrom
theswitchconfiguration.ThisallowsyoutoconfigureSyslogmessaging
andthendisableandre-enableitasneeded.
Displaythecurrentdebugconfiguration.IfSyslogloggingiscurrently
active,thisincludestheSyslogserverlist.
DisplaythecurrentSyslogserverlistwhenSyslogloggingisdisabled.
C-25
Troubleshooting
DebugTypes
Thissectiondescribesthetypesofdebugmessagestheswitchcansendto
configureddebugdestinations.
Syntax: [no]debug<debug-type>
all
Configurestheswitchtosendalldebugtypestotheconfig-
ureddebugdestination(s).(Default:Disabled)
event
ConfigurestheswitchtosendEventLogmessagestothe
configureddebugdestination(s).Note:Thishasnoeffect
oneventnotificationmessagestheswitchroutinelysends
totheEventLogitself.Also,thisdebugtypeisautomatically
enabledinthesecases:
IfthereiscurrentlynoSyslogserveraddressconfigured
andyouuselogging<ip-addr>toconfigureanaddress.
IfthereiscurrentlyatleastoneSyslogserveraddress
configuredandtheswitchisrebootedorreset.
(Default:Disabled)
dhcp-snooping
AssignsDHCPsnoopingdebugmessagestothedebugdes-
tination
lldp
AssignsLLDPdebugmessagestothedebugdestination.
C-26
Troubleshooting
orMoreSyslogDServers
UsetheloggingcommandtoconfiguretheswitchtosendSyslogmessagesto
aSyslogDserver,ortoremoveaSyslogDserverfromtheswitchconfiguration.
Syntax: [no]logging<syslog-ip-address|facility<facility-name>>
<syslog-ip-address>
IftherearenoSyslogDserversconfigured,logging
entersaSyslogDserverIPaddressandautomatically
enablesSyslogloggingtotheserver.Ifatleastone
SyslogDserverisalreadyconfiguredandSysloglogging
hasbeendisabled,youcanstilluselogging <syslog-ip-
addr>toaddanotherSyslogDserver,butSysloglogging
remainsdisableduntilyoure-enableitwiththedebug
destinationloggingcommand.WhileSyslogloggingis
enabled,theswitchattemptstosendSyslogmessagesto
allconfiguredSyslogDserveraddresses,andoperates
regardlessofwhethersessionloggingisalsoenabled.
ToconfiguremultipleSyslogDservers,repeatthecom-
mandonceforeachserverIPaddress.(Default:none;
Range:UptosixIPaddresses)
facility<facility-name>
SpecifiesthedestinationsubsystemtheSyslogD
server(s)mustuse.(AllSyslogDserversmustusethe
samesubsystem.)ProCurverecommendsthedefault
(user)subsystemunlessyourapplicationspecifically
requiresanothersubsystem.Optionsinclude:
user(thedefault)-Varioususer-levelmessages
kern-Kernelmessages
mail-Mailsystem
daemon-systemdaemons
auth-security/authorizationmessages
syslog-messagesgeneratedinternallybySyslog
lpr- lineprintersubsystem
news-netnewssubsystem
uucp-uucpsubsystem
cron-cron/atsubsystem
sys9-cron/atsubsystem
sys10throughsys14-Reservedforsystemuse
local0throughlocal7-Reservedforsystemuse
C-27
Troubleshooting
Forexample,onaswitchwheretherearenoSyslogDserversconfigured,you
woulddothefollowingtoconfigureSyslogDservers18.120.38.155and
18.120.43.125andautomaticallyenableSysloglogging(withuserasthedefault
loggingfacility):
Pr oCur ve( conf i g) # l oggi ng 18. 120. 38. 155
Pr oCur ve( conf i g) # l oggi ng 18. 120. 43. 125
Pr oCur ve( conf i g) # wr i t e mem
logging<syslog-ip-addr
>configurestheSyslog
server(s)touseand
enablesSyslogdebug
logging.(Inthiscase,
Syslogisautomatically
enabledbecausedebug host name " Pr oCur ve Swi t ch 2610- 24"
TheconfiguredSyslogserver
destinationlogginghas i p def aul t - gat eway 10. 0. 8. 1
IPaddressesappearinthe
notbeenpreviously
l oggi ng 18. 20. 38. 155 switchsconfigurationfile.
disabledwithotherSyslog
l oggi ng 18. 129. 43. 125
serversalready
snmp- ser ver communi t y " publ i c" Unr est r i ct ed
configuredintheswitch.
vl an 1
(RefertotheSyntaxbox
underConfiguringthe
SwitchToSendDebug
unt agged 1- 28
MessagestoOneorMore
i p addr ess dhcp- boot p
SyslogDServersonpage exi t
C-27.)
Pr oCur ve( conf i g) # show debug
Thiscommandshowsthat
Syslogloggingisenabledfor
Debug Loggi ng
thelistedIPaddresses.
Dest i nat i on:
Loggi ng - -
18. 120. 38. 155
DefaultLoggingFacility
18. 120. 43. 125
Faci l i t y = user
Enabl ed debug t ypes:
event
FigureC-9. ExampleofConfiguringandEnablingSyslogLogging
Touseanon-defaultloggingfacility,suchaslpr,inthesameoperationasin
figureC-9,youwouldusethiscommandset:
ProCurve(config)#logging18.120.38.155
ProCurve(config)#logging18.120.43.125
ProCurve(config)#loggingfacilitylpr
C-28
Troubleshooting
EnablingorDisablingLoggingtoManagementSessionsandSyslogD
Servers.Usethiscommandwhenyouwanttodoanyofthefollowing:
DisableSyslogloggingonallcurrentlyconfiguredSyslogDserverswith-
outremovingtheserversfromtheswitchconfiguration.
Re-enableSyslogloggingifitisdisabledandthereisatleastoneSyslogD
servercurrentlyconfiguredintheswitch.
Enableordisableloggingoutputtothecurrentmanagement-accessses-
sion.
Syntax: [no]debugdestination<logging|session>
logging
ThenoformofthecommanddisablesSysloglogging,
butretainsthecurrentlyconfiguredSyslogDserver
addressesintheswitchconfiguration.WhenSysloglog-
gingiscurrentlydisabledwithoneormoreSyslogD
serversconfigured,thiscommandenablesSysloglog-
gingontheswitch.Theshowconfigcommandoutput
includestheSyslogDserverIPaddressescurrentlycon-
figuredinthestartup-configfile.
session
Enablesanddisablesdebugloggingtothecurrentses-
sion.Thecurrentsessionisthesessionthatmost
recentlyexecuteddebugdestinationsessionontheswitch
(sincethelastreboot).Thismakesiteasytomove
sessionloggingfromonesessiontoanother.
Forexample,figureC-10showstheprocessforcheckingthecurrentSyslog
statusandthendisablingSysloglogging.
C-29
Troubleshooting
ShowsthatSyslog(Destination)loggingis
enabledandtransmittinglogmessagestoIP
address18.120.38.155.Alsoshowsthatthe
loggingfacilityissettouser(thedefault),and
thatsessionloggingisenabled.)
DisablesSysloglogging(butretainsthe
SyslogIPaddressintheswitch
configuration).DoesnotaffectSession
logging.
ShowsSyslog(Destination)loggingnow
disabled.Sessionloggingcontinuesto
operate.
FigureC-10.ExampleofDisablingSyslogOperation
ViewingDebug(SyslogandSession)Status.Usethesecommandsto
determinethecurrentdebugconfigurationandstatus:
Syntax: show<config|running>
Liststhecurrentstartup-configorrunning-configfile,with
anycurrentlyconfiguredIPaddressesforSyslogDservers.
host name Pr oCur ve swi t ch
i p def aul t - gat eway 18. 38. 222. 1
l oggi ng 18. 120. 38. 155
l oggi ng 18. 120. 43. 125
vl an 1
name DEFAULT- VLAN
snmp- ser ver communi t y publ i c Unr est r i ct ed
TheconfiguredSyslogserverIP
addressesappearintheswitchs
configurationfile,evenifSyslog
loggingisdisabled.
FigureC-11.ExampleofShowConfigOutputwithSyslogDServersConfigured
C-30
Troubleshooting
Syntax: showdebug
ListthecurrentdebugstatusforbothSyslogloggingand
Sessionlogging.
ShowsthatSyslogloggingisenabled
andsendingeventmessagestotheuser
facilityontheSyslogDserveratIP
address18.120.38.155.
Showsthatsessionloggingisoperating
throughanothersession.(Youcantake
controlofsessionloggingbyexecuting
debugdestinationsessioninthe
sessionyouarecurrentlyusing.)
FigureC-12.ExampleofShowDebugStatus
RebootingtheSwitchorpressingtheResetbuttonresetsthe
DebugConfiguration.
DebugOption EffectofaRebootorReset
logging(destination) IfanySyslogDserverIPaddressesareinthestartup-configfile,
theyaresavedacrossarebootandtheloggingdestination
optionremainsenabled.Otherwise,theloggingdestinationis
disabled.
Session(destination) Disabled.
All(eventtype) Disabled.
Event(eventtype) IfaSyslogserverisconfiguredinthestartup-configfile,resets
toenabled,regardlessofpriorsetting.DisabledifnoSyslog
serverisconfigured.
DebugcommandsdonotaffectmessageoutputtotheEventLog.
Asaseparateoption,invokingdebugwiththeeventoptioncausesthe
switchtosendEventLogmessagestowhateverdebugdestination(s)you
configure(sessionand/orlogging),aswellastotheEventLog.
EnsurethatyourSyslogserver(s)willacceptDebugmessages.All
Syslogmessagestheswitchgeneratescarrytheconfiguredfacility.All
Syslogmessagesresultingfromdebugoperationcarryadebugseverity.
IfyouconfiguretheswitchtotransmitdebugmessagestoaSyslogD
C-31
Troubleshooting
DiagnosticTools
server,ensurethattheserversSyslogapplicationisconfiguredtoaccept
thedebugseveritylevel.(ThedefaultconfigurationforsomeSyslog
applicationsignoresthedebugseveritylevel.)
AreboottemporarilysuspendsSysloglogging.Afterareboot,the
switchsuspendsconfiguredSyslogloggingfor30seconds.
DiagnosticTools
DiagnosticFeatures
PortAutonegotiation n/a n/a n/a n/a
PingTest n/a pageC-35 pageC-34
LinkTest n/a pageC-35 pageC-34
DisplayConfigFile n/a pageC-37 pageC-37
Admin.andTroubleshooting n/a pageC-40
Commands
Factory-DefaultConfig pageC-44 pageC-44
(Buttons)
PortStatus n/a pagesB-9 pagesB-9 pagesB-9
andB-10 andB-10 andB-10
PortAuto-Negotiation
WhenalinkLEDdoesnotlight(indicatinglossoflinkbetweentwodevices),
themostcommonreasonisafailureofportauto-negotiationbetweenthe
connectingports.IfalinkLEDfailstolightwhenyouconnecttheswitchtoa
portonanotherdevice,dothefollowing:
1. Ensurethattheswitchportandtheportontheattachedend-nodeare
bothsettoAutomode.
2. Iftheattachedend-nodedoesnothaveanAutomodesetting,thenyou
mustmanuallyconfiguretheswitchporttothesamesettingastheend-
nodeport.SeeChapter10,PortStatusandBasicConfiguration.
C-32
Troubleshooting
DiagnosticTools
PingandLinkTests
ThePingtestandtheLinktestarepoint-to-pointtestsbetweenyourswitch
andanotherIEEE802.3-compliantdeviceonyournetwork.Thesetestscan
tellyouwhethertheswitchiscommunicatingproperlywithanotherdevice.
Not e TorespondtoaPingtestoraLinktest,thedeviceyouaretryingtoreachmust
beIEEE802.3-compliant.
PingTest.Thisisatestofthepathbetweentheswitchandanotherdevice
onthesameoranotherIPnetworkthatcanrespondtoIPpackets(ICMPEcho
Requests).
LinkTest.Thisisatestoftheconnectionbetweentheswitchandadesig-
natednetworkdeviceonthesameLAN(orVLAN,ifconfigured).Duringthe
linktest,IEEE802.2testpacketsaresenttothedesignatednetworkdevice
inthesameVLANorbroadcastdomain.Theremotedevicemustbeableto
respondwithan802.2TestResponsePacket.
C-33
Troubleshooting
DiagnosticTools
Web:ExecutingPingorLinkTests
2.Clickhere.
1.Clickhere.
3.SelectPingTest(the
default)orLinkTest
4.ForaPingtest,enter
theIPaddressofthe
targetdevice.Fora
Linktest,enterthe
MACaddressofthe
target device.
5.Selectthenumberoftries(packets)andthetimeout
foreachtryfromthedrop-downmenus.
6.ClickonStarttobeginthetest.
FigureC-13.LinkandPingTestScreenontheWebBrowserInterface
SuccessesindicatesthenumberofPingorLinkpacketsthatsuccessfully
completedthemostrecenttest.
FailuresindicatesthenumberofPingorLinkpacketsthatwereunsuccessful
inthelasttest.Failuresindicateconnectivityornetworkperformanceprob-
lems(suchasoverloadedlinksordevices).
DestinationIP/MACAddressisthenetworkaddressofthetarget,ordestination,
devicetowhichyouwanttotestaconnectionwiththeswitch.AnIPaddress
isintheX.X.X.XformatwhereXisadecimalnumberbetween0and255.A
MACaddressismadeupof12hexadecimaldigits,forexample,0060b0-080400.
C-34
Troubleshooting
DiagnosticTools
NumberofPacketstoSendisthenumberoftimesyouwanttheswitchto
attempttotestaconnection.
TimeoutinSecondsisthenumberofsecondstoallowperattempttotesta
connectionbeforedeterminingthatthecurrentattempthasfailed.
TohaltaLinkorPingtestbeforeitconcludes,clickontheStopbutton.
Toresetthescreentoitsdefaultsettings,clickontheDefaultsbutton.
CLI:PingorLinkTests
PingTests. Youcanissuesingleormultiplepingtestswithvaryingrepeti-
tionsandtimeoutperiods.Thedefaultsandrangesare:
Repetitions:1(1-999)
Timeout:5seconds(1-256seconds)
Syntax: ping<ip-address>[repetitions<1-999>][timeout<1-256>]
Pingwith
Repetitions
andTimeout
BasicPing
Operation
PingFailure
Pingwith
Repetitions
FigureC-14.ExamplesofPingTests
Tohaltapingtestbeforeitconcludes,press[Ctrl] [C].
C-35
Troubleshooting
DiagnosticTools
LinkTests.Youcanissuesingleormultiplelinktestswithvaryingrepeti-
tionsandtimeoutperiods.Thedefaultsare:
Repetitions:1(1-999)
Timeout:5seconds(1-256seconds)
Syntax: link<mac-address>[repetitions<1-999>][timeout<1-256>]
[vlan<vlan-id>]
BasicLinkTest
LinkTestwith
Repetitions
LinkTestwith
Repetitionsand
Timeout
LinkTestOvera
SpecificVLAN
LinkTestOvera
SpecificVLAN;
TestFail
FigureC-15.ExampleofLinkTests
C-36
Troubleshooting
DiagnosticTools
DisplayingtheConfigurationFile
Thecompleteswitchconfigurationiscontainedinafilethatyoucanbrowse
fromeitherthewebbrowserinterfaceortheCLI.Itmaybeusefulinsome
troubleshootingscenariostoviewtheswitchconfiguration.
CLI:ViewingtheConfigurationFile
UsingtheCLI,youcandisplayeithertherunningconfigurationorthestartup
configuration.(Formoreonthesetopics,seeappendixC,SwitchMemory
andConfiguration.)
Syntax: writeterminal
Displaystherunning-configfile.
showrunning-config
Displaystherunning-configfile.
showconfig
Displaysthestartup-configfile.
Web:ViewingtheConfigurationFile
Todisplaytherunningconfiguration,throughthewebbrowserinterface:
1. ClickontheDiagnosticstab.
2. ClickonConfigurationReport
3. Usetheright-sidescrollbartoscrollthroughtheconfigurationlisting.
C-37
Troubleshooting
DiagnosticTools
forHelpinTroubleshooting
Theshowtechcommandoutputs,inasinglelisting,switchoperatingand
runningconfigurationdetailsfromseveralinternalswitchsources,including:
Imagestamp(softwareversiondata)
Runningconfiguration
EventLoglisting
BootHistory
Portsettings
Statusandcountersportstatus
IProutes
StatusandcountersVLANinformation
Transceivers
Instrumentation
GVRPsupport
Loadbalancing(trunkandLACP)
Stackingstatusthisswitch
Stackingstatusall
Syntax: showtech[all|buffers|instrumentation|route|statistics|transceivers]
Executingshowtechoutputsadatalistingtoyourterminalemulator.However,
usingyourterminalemulatorstextcapturefeatures,youcanalsosaveshow
techdatatoatextfileforviewing,printing,orsendingtoanassociate.For
example,ifyourterminalemulatoristheHyperterminalapplicationavailable
withMicrosoftWindowssoftware,youcancopytheshowtechoutputto
afileandthenuseeitherMicrosoftWordorNotepadtodisplaythedata.(In
thiscase,MicrosoftWordprovidesthedatainaneasier-to-readformat.)
ToCopyshowtechoutputtoaTextFile. Thisexampleusesthe
MicrosoftWindowsterminalemulator.Touseanotherterminalemulator
application,refertothedocumentationprovidedwiththatapplication.
C-38
Troubleshooting
DiagnosticTools
1. InHyperterminal,clickonTransfer|CaptureText...
FigureC-16.TheCaptureTextwindowoftheHypertextApplicationUsedwith
MicrosoftWindowsSoftware
2. IntheFilefield,enterthepathandfilenameunderwhichyouwanttostore
theshowtechoutput.
FigureC-17.ExampleofaPathandFilenameforCreatingaTextFilefromshow
techOutput
3. Click[Start]tocreateandopenthetextfile.
4. Executeshowtech:
ProCurve#showtech
a. Eachtimetheresultinglistinghaltsanddisplays-- MORE --,pressthe
Spacebartoresumethelisting.
b. WhentheCLIpromptappears,theshowtechlistingiscomplete.At
thispoint,clickonTransfer|CaptureText|StopinHyperTerminaltostop
copyingdataintothetextfilecreatedintheprecedingsteps.
Not e RemembertodotheabovesteptostopHyperTerminalfromcopyingintothe
textfile.Otherwise,thetextfileremainsopentoreceivingadditionaldata
fromtheHyperTerminalscreen.
5. Toaccessthefile,openitinMicrosoftWord,Notepad,orasimilartext
editor.
C-39
Troubleshooting
DiagnosticTools
CLIAdministrativeandTroubleshootingCommands
Thesecommandsprovideinformationorperformactionsthatyoumayfind
helpfulintroubleshootingoperatingproblemswiththeswitch.
Not e FormoreontheCLI,refertoUsingtheCommandLineInterface(CLI)on
page4-1.
Syntax: showversion
Showsthesoftwareversioncurrentlyrunningontheswitch
andtheflashimagefromwhichtheswitchbooted(primary
orsecondary).
showboot-history
Displaystheswitchshutdownhistory.
showhistory
Displaysthecurrentcommandhistory.
[no]page
Togglesthepagingmodefordisplaycommandsbetween
continuouslistingandper-pagelisting.
setup
DisplaystheSwitchSetupscreenfromthemenuinterface.
repeat
Repeatedlyexecutesthepreviouscommanduntilakeyis
pressed.
kill
Terminatesallotheractivesessions.
TracerouteCommand
Thetraceroutecommandenablesyoutotracetheroutefromtheswitchtoa
hostaddress.
Thiscommandoutputsinformationforeach(router)hopbetweentheswitch
andthedestinationaddress.Notethateverytimeyouexecutetraceroute,it
usesthesamedefaultsettingsunlessyouspecifyotherwiseforthatinstance
ofthecommand.
C-40
Troubleshooting
DiagnosticTools
Syntax: traceroute<ip-address>
ListstheIPaddressofeachhopintheroute,plusthetimeinmicroseconds
forthetraceroutepacketreplytotheswitchforeachhop.
Tohaltanongoingtraceroutesearch,pressthe[Ctrl] [C]keys.
[minttl<1-255>]
Forthecurrentinstanceoftraceroute,changestheminimum
numberofhopsallowedforeachprobepacketsentalongthe
route.Ifminttlisgreaterthantheactualnumberofhops,then
theoutputincludesonlythehopsatandabovetheminttl
threshold.(Thehopsbelowthethresholdarenotlisted.)If
minttlmatchestheactualnumberofhops,onlythathopis
shownintheoutput.Ifminttlislessthantheactualnumber
ofhops,thenallhopsarelisted.Foranyinstanceoftracer-
oute,ifyouwantaminttlvalueotherthanthedefault,you
mustspecifythatvalue.(Default:1)
[maxttl<1-255>]
Forthecurrentinstanceoftraceroute,changesthemaximum
numberofhopsallowedforeachprobepacketsentalongthe
route.Ifthedestinationaddressisfurtherfromtheswitch
thanmaxttlallows,thentracerouteliststheIPaddressesfor
allhopsitdetectsuptothemaxttllimit.Foranyinstanceof
traceroute,ifyouwantamaxttlvalueotherthanthedefault,
youmustspecifythatvalue.(Default:30)
[timeout<1-120>]
Forthecurrentinstanceoftraceroute,changesthetimeout
periodtheswitchwaitsforeachprobeofahopintheroute.
Foranyinstanceoftraceroute,ifyouwantatimeoutvalue
otherthanthedefault,youmustspecifythatvalue.(Default:
5seconds)
[probes<1-5>
Forthecurrentinstanceoftraceroute,changesthenumberof
queriestheswitchsendsforeachhopintheroute.Forany
instanceoftraceroute,ifyouwantaprobesvalueotherthan
thedefault,youmustspecifythatvalue.(Default:3)
ALowMaxttlCausesTracerouteToHaltBeforeReachingthe
DestinationAddress.Forexample,executingtraceroutewithitsdefault
valuesforadestinationIPaddressthatisfourhopsawayproducesaresult
similartothis:
C-41
Troubleshooting
DiagnosticTools
Intermediaterouterhops
withthetimetakenforthe
switchtoreceive
acknowledgementof
eachprobereachingeach
router.
DestinationIPAddress
FigureC-18.ExampleofaCompletedTracerouteEnquiry
Continuingfromthepreviousexample(figureC-18,above),executing
traceroutewithaninsufficientmaxttlfortheactualhopcountproducesan
outputsimilartothis:
Traceroutedoesnotreach
destinationIPaddress
becauseoflowmaxttl
setting.
Theasteriskindicatestherewasa
timeoutonthesecondprobetothethird
hop.
FigureC-19.ExampleofIncompleteTracerouteDuetoLowMaxttlSetting
IfANetworkConditionPreventsTraceroutefromReachingthe
Destination.CommonreasonsforTraceroutefailingtoreachadestination
include:
Timeouts(indicatedbyoneasteriskperprobe,perhop;refertofigure
C-19,above.)
Unreachablehosts
Unreachablenetworks
Interferencefromfirewalls
Hostsconfiguredtoavoidresponding
C-42
Troubleshooting
DiagnosticTools
Executingtraceroutewheretheroutebecomesblockedorotherwisefails
resultsinanoutputmarkedbytimeoutsforallprobesbeyondthelastdetected
hop.Forexamplewithamaximumhopcountof7(maxttl=7),wheretheroute
becomesblockedorotherwisefails,theoutputappearssimilartothis:
Athop3,thefirstand
thirdprobestimedout
butthesecondprobe
reachedtherouter.
Allfurtherprobes
withinthemaxttl
timed-outwithout
findingarouterorthe
destinationIP
address.
Anasteriskindicatesatimeout
withoutfindingthenexthop.
FigureC-20.ExampleofTracerouteFailingtoReachtheDestinationAddress
C-43
Troubleshooting
RestoringtheFactory-DefaultConfiguration
RestoringtheFactory-Default
Configuration
Aspartofyourtroubleshootingprocess,itmaybecomenecessarytoreturn
theswitchconfigurationtothefactorydefaultsettings.Thisprocessmomen-
tarilyinterruptstheswitchoperation,clearsanypasswords,clearstheconsole
eventlog,resetsthenetworkcounterstozero,performsacompleteselftest,
andrebootstheswitchintoitsfactorydefaultconfigurationincludingdeleting
anIPaddress.Therearetwomethodsforresettingtothefactory-default
configuration:
CLI
Clear/Resetbuttoncombination
Not e ProCurverecommendsthatyousaveyourconfigurationtoaTFTPserver
beforeresettingtheswitchtoitsfactory-defaultconfiguration.Youcanalso
saveyourconfigurationviaXmodem,toadirectlyconnectedPC.
UsingtheCLI
ThiscommandoperatesatanylevelexcepttheOperatorlevel.
Syntax: erasestartup-configuration
Deletesthestartup-configfileinflashsothattheswitchwill
rebootwithitsfactory-defaultconfiguration.
Not e Theerasestartup-configcommanddoesnotclearpasswords.
UsingtheClear/ResetButtons
Toexecutethefactorydefaultreset,performthesesteps:
1. Usingpointedobjects,simultaneouslypressboththeResetandClear
buttonsonthefrontoftheswitch.
2. ContinuetopresstheClearbuttonwhilereleasingtheResetbutton.
3. WhentheSelfTestLEDbeginstoflash,releasetheClearbutton.
Theswitchwillthencompleteitsselftestandbeginoperatingwiththe
configurationrestoredtothefactorydefaultsettings.
C-44
Troubleshooting
RestoringaFlashImage
Theswitchcanloseitsoperatingsystemifeithertheprimaryorsecondary
flashimagelocationisemptyorcontainsacorruptedOSfileandanoperator
usestheeraseflashcommandtoeraseagoodOSimagefilefromtheopposite
flashlocation.
ToRecoverfromanEmptyorCorruptedFlashState.Usetheswitchs
consoleserialporttoconnecttoaworkstationorlaptopcomputerthathas
thefollowing:
AterminalemulatorprogramwithXmodemcapability,suchastheHyper-
TerminalprogramincludedinWindowsPCsoftware.
AcopyofagoodOSimagefilefortheswitch.
Not e ThefollowingprocedurerequirestheuseofXmodem,andcopiesanOSimage
intoprimaryflashonly.
ThisprocedureassumesyouareusingHyperTerminalasyourterminalemu-
lator.Ifyouuseadifferentterminalemulator,youmayneedtoadaptthis
proceduretotheoperationofyourparticularemulator.
1. Starttheterminalemulatorprogram.
2. Ensurethattheterminalprogramisconfiguredasfollows:
Baudrate:9600 1stopbit
Noparity Noflowcontrol
8Bits
3. UsetheResetbuttontoresettheswitch.Thefollowingpromptshould
thenappearintheterminalemulator:
Enterhor?forhelp.
=>
C-45
Troubleshooting
4. SincetheOSfileislarge,youcanincreasethespeedofthedownloadby
changingtheswitchconsoleandterminalemulatorbaudratestoahigh
speed.Forexample:
a. Changetheswitchbaudrateto115,200Bps.
=>sp115200
b. Changetheterminalemulatorbaudratetomatchtheswitchspeed:
i. InHyperTerminal,selectCall|Disconnect.
ii. SelectFile|Properties.
iii. ClickonConfigure....
iv. Changethebaudrateto115200.
v. Clickon[OK].Inthenextwindow,clickon[OK]again.
vi. SelectCall|Connect
vii. Press[Enter]oneormoretimestodisplaythe=>prompt.
5. StarttheConsoleDownloadutilitybytypingdoatthe=>promptand
pressing[Enter]:
=>do
6. Youwillthenseethisprompt:
7. Attheaboveprompt:
a. Typey(forYes)
b. SelectTransfer|FileinHyperTerminal.
c. EntertheappropriatefilenameandpathfortheOSimage.
d. SelecttheXmodemprotocol(andnotthe1kXmodemprotocol).
e. Clickon[Send].
IfyouareusingHyperTerminal,youwillseeascreensimilartothe
followingtoindicatethatthedownloadisinprogress:
C-46
Troubleshooting
FigureC-21.ExampleofXmodemDownloadinProgress
8. Whenthedownloadcompletes,theswitchrebootsfromprimaryflash
usingtheOSimageyoudownloadedintheprecedingsteps,plusthemost
recentstartup-configfile.
C-47
Troubleshooting
C-48
D
MACAddressManagement
Contents
Overview ..................................................... D-2
DeterminingMAC AddressesintheSwitch ........................ D-2
Menu:ViewingtheSwitchs MACAddresses.................... D-3
CLI:ViewingthePort andVLANMACAddresses................ D-4
ViewingtheMACAddressesofConnectedDevices ................. D-6
D-1
Overview
Overview
TheswitchassignsMACaddressesintheseareas:
Formanagementfunctions:
OneBaseMACaddressassignedtothedefaultVLAN(VID=1)
AdditionalMACaddress(es)correspondingtoadditionalVLANsyou
configureintheswitch
Forinternalswitchoperations:OneMACaddressperport(SeeCLI:
ViewingthePortandVLANMACAddressesonpageD-4.)
MACaddressesareassignedatthefactory.Theswitchautomatically
implementstheseaddressesforVLANsandportsastheyareaddedtothe
switch.
Not e TheswitchsbaseMACaddressisalsoprintedonalabelaffixedtotheback
oftheswitch.
DeterminingMACAddressesinthe
Switch
MACAddressViewingMethods
viewswitchsbase(defaultvlan)MACaddress
andtheaddressingforanyaddedVLANs
n/a D-3 D-4
viewportMACaddresses(hexadecimalformat) n/a D-4
UsethemenuinterfacetoviewtheswitchsbaseMACaddressandthe
MACaddressassignedtoanynon-defaultVLANyouhaveconfiguredon
theswitch.
Not e TheswitchsbaseMACaddressisusedforthedefaultVLAN(VID=1)thatis
alwaysavailableontheswitch.
D-2
DeterminingMACAddressesintheSwitch
UsetheCLItoviewtheswitchsportMACaddressesinhexadecimal
format.
Menu:ViewingtheSwitchsMACAddresses
TheManagementAddressInformationscreenliststheMACaddressesfor:
Baseswitch(defaultVLAN;VID=1)
AnyadditionalVLANsconfiguredontheswitch.
Also,theBaseMACaddressappearsonalabelonthebackoftheswitch.
Not e TheBaseMACaddressisusedbythefirst(default)VLANintheswitch.This
isusuallytheVLANnamedDEFAULT_VLANunlessthenamehasbeen
changed(byusingtheVLANNamesscreen).Ontheswitchescoveredbythis
guide,theVID(VLANidentificationnumber)forthedefaultVLANisalways
"1",andcannotbechanged.
ToViewtheMACAddress(andIPAddress)assignmentsforVLANs
ConfiguredontheSwitch:
1. FromtheMainMenu,Select
1.StatusandCounters
IftheswitchhasonlythedefaultVLAN,thefollowingscreenappears.If
theswitchhasmultiplestaticVLANs,eachislistedwithitsaddressdata.
SwitchBase(orDefault
VLAN)MACaddress
CurrentIPAddress
AssignedtotheSwitch
FigureD-1.ExampleoftheManagementAddressInformationScreen
D-3
CLI:ViewingthePortandVLANMACAddresses
TheMACaddressassignedtoeachswitchportisusedinternallybysuch
featuresasFlowControlandtheSpanningTreeProtocol.Usingthewalkmib
commandtodeterminetheMACaddressassignmentsforindividualportscan
sometimesbeusefulwhendiagnosingswitchoperation.
Theswitchallots24MACaddressesperslot.Foragivenslot,ifathree-port
moduleisinstalled,thentheswitchusesthefirstthreeMACaddressesinthe
allotmentforslot1,andtheremaining21MACaddressesareunused.Ifasix-
portmoduleisinstalled,theswitchusesthefirstsixMACaddressesinthe
allotment,andso-on.TheswitchsbaseMACaddressisassignedtoVLAN
(VID)1andappearsinthewalkmiblistingaftertheMACaddressesforthe
ports.IfmultipleVLANsareconfigured,theMACaddressesassignedtothese
VLANsappearafterthebaseMACaddress.
TodisplaytheswitchsMACaddresses,usethewalkmibcommandatthe
commandprompt:
Not e ThisproceduredisplaystheMACaddressesforallportsandexistingVLANs
intheswitch,regardlessofwhichVLANyouselect.
1. IftheswitchisattheCLIOperatorlevel,usetheenablecommandtoenter
theManagerleveloftheCLI.
2. TypethefollowingcommandtodisplaytheMACaddressforeachporton
theswitch:
ProCurve#walkmib ifPhysAddress
(Theabovecommandisnotcase-sensitive.)
Forexample,withasix-portmoduleinslot1,athree-portmoduleinslot3,
andthreeVLANspresent:
D-4
ifPhysAddress.1-6:PortsA1-A6inSlot1
(Addresses7- 24inslot1and25- 48inslot2are
unused.)
ifPhysAddress.49- 51:PortsC1-C3inSlot3
(Addresses52-72inslot3areunused.)
ifPhysAddress.205BaseMACAddress(MAC
AddressfordefaultVLAN;
VID=1)
ifPhysAddress.226
&237MACAddressesfor
non-defaultVLANs.
FigureD-1.ExampleofPortMACAddressAssignments
D-5
ViewingtheMACAddressesofConnectedDevices
ViewingtheMACAddressesof
ConnectedDevices
Syntax: showmac-address[|mac-addr|
ListstheMACaddressesofthedevicestheswitchhasdetected,
alongwiththenumberofthespecificportonwhicheachMAC
addresswasdetected.
[port-list]
ListstheMACaddressesofthedevicestheswitchhasdetected,on
thespecifiedport(s).
[mac-addr]
ListstheportonwhichtheswitchdetectsthespecifiedMAC
address.ReturnsthefollowingmessageifthespecifiedMAC
addressisnotdetectedonanyportintheswitch:
MACaddress<mac-addr>notfound.
[vlan<vid>]
ListstheMACaddressesofthedevicestheswitchhasdetectedon
portsbelongingtothespecifiedVLAN,alongwiththenumberof
thespecificportonwhicheachMACaddresswasdetected.
D-6

TolisttheMACaddressesofdevicestheswitchhasdetected,usetheshow
mac-addresscommand.Forexample:
Pr oCur ve# show mac- addr ess
St at us and Count er s - Por t Addr ess Tabl e
MAC Addr ess Locat ed on Por t
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
0001e6- 09620c 11
0001e7- 61d4c0 12
0001e7- 6025c0 13
0001e7- 6d5a30 14
0001e7- 7932c0 15
0001e7- 7b4300 16
0001e7- cc24c0 17
000480- 376a70 18
FigureD-2.DisplayingMACAddressesDetectedbyaSwitch
D-7
D-8
E
DaylightSavingsTimeonProCurveSwitches
ConfiguringDaylightSavingsTime
ThisinformationappliestothefollowingProCurveswitches:
2512 2824 1600M ProCurve
2524 2848 2400M
AdvanceStack
2610 3400cl 2424M
Switches
2610-PWR 4108gl 4000M
ProCurve
AdvanceStackRouters
2626 4104gl 8000M
2650 6108 212M
2626-PWR 5304xl 224M
2650-PWR 5308xl
5400zl
8200zl
ProCurveswitchesprovideawaytoautomaticallyadjustthesystemclockfor
DaylightSavingsTime(DST)changes.Tousethisfeatureyoudefinethe
monthanddatetobeginandtoendthechangefromstandardtime.Inaddition
tothevalue"none"(notimechanges),therearefivepre-definedsettings,
named:
Alaska
CanadaandContinentalUS
MiddleEuropeandPortugal
SouthernHemisphere
WesternEurope
Thepre-definedsettingsfollowtheserules:
Alaska:
BeginDSTat2amonthesecondSundayinMarch.
EndDSTat2amonthefirstSundayinNovember.
E-1
CanadaandContinentalUS:
BeginDSTat2amonthesecondSundayinMarch.
EndDSTat2amonthefirstSundayinNovember.
MiddleEuropeandPortugal:
BeginDSTat2amthefirstSundayonorafterMarch25th.
EndDSTat2amthefirstSundayonorafterSeptember24th.
SouthernHemisphere:
BeginDSTat2amthefirstSundayonorafterOctober25th.
EndDSTat2amthefirstSundayonorafterMarch1st.
WesternEurope:
BeginDSTat2amthefirstSundayonorafterMarch23rd.
EndDSTat2amthefirstSundayonorafterOctober23rd.
Asixthoptionnamed"Userdefined"allowsyoutocustomizetheDSTconfig-
urationbyenteringthebeginningmonthanddateplustheendingmonthand
dateforthetimechange.Themenuinterfacescreenlookslikethis(allmonth/
dateentriesareattheirdefaultvalues):
SelectUser-definedandpress[v]to
displaytheremainingparameters.
FigureE-1. MenuInterfacewith"User-Defined"DaylightTimeRuleOption
E-2
Beforeconfiguringa"Userdefined"DaylightTimeRule,itisimportantto
understandhowtheswitchtreatstheentries.Theswitchknowswhichdates
areSundays,andusesanalgorithmtodetermineonwhichdatetochangethe
systemclock,giventheconfigured"Beginningday"and"Endingday":
IftheconfigureddayisaSunday,thetimechangesat2amonthatday.
IftheconfigureddayisnotaSunday,thetimechangesat2amonthefirst
Sundayaftertheconfiguredday.
Thisistrueforboththe"Beginningday"andthe"Endingday".
Withthatalgorithm,oneshouldusethevalue"1"torepresent"firstSundayof
themonth",andavalueequalto"numberofdaysinthemonthminus6"to
represent"lastSundayofthemonth".Thisallowsasingleconfigurationfor
everyyear,nomatterwhatdateistheappropriateSundaytochangetheclock.
E-3
E-4
Index
Symbols
=>promptC-45
Numerics
802.1x
LLDPblocked13-35
802.1Xeffect,LLDP13-70
802.3uautonegotiationstandard10-4
A
access
manager13-13
operator13-13
Actionsline3-9,3-10,3-11
locationonscreen3-9
addresstable,portB-13
address,networkmanager13-4,13-5
advertiselocation13-48
alertlog5-18
alerttypes5-19
disabling5-23
settingthesensitivitylevel5-22
sortingtheentries5-18
applicableproducts1-ii
asterisk3-10,3-13,6-26
asterisk,intracerouteC-42
authenticationtrap13-20,13-25
SeealsoSNMP.
authenticationtrap,configuring13-24
authorizedIPmanagers
SNMP,blocking13-3
autoMDI/MDI-Xconfiguration,display10-15
autoMDI/MDI-Xoperation10-15
autoMDI/MDI-Xportmode,display10-15
autonegotiation10-4,10-5
Auto-1012-4,12-6
auto-discovery13-5
autonegotiate13-48
B
bandwidth
displayingutilization5-15
banner2-8
configuring2-10
default2-8
non-default2-9
operation2-8
BestOffer6-39
boot
effectonconfiguration3-13
Seealsoreboot.
bootROMconsoleA-3
bootROMmodeC-45
Bootp
Bootptablefile8-14
Bootptabfile8-14
effectofnoreplyC-7
operation8-14
usingwithUnixsystems8-14
Bootp/DHCP,LLDP13-44
broadcastlimit10-6,10-12
broadcaststorm12-3,C-14
C
CDP13-71
configuration,viewing13-74
datacollection13-72
defaultCDPoperation13-72
disabled13-72
generaloperation13-73
mappingstoLLDPdatafields13-71
neighbordevices13-72
neighborstable13-74
onindividualports13-76
read-onlyoperation13-71,13-72
ClassofService
prioritysettingsmappedtodownstream
devices10-30
Clear+Resetbuttoncombination6-34
Clearbutton5-10
restoringfactorydefaultconfigurationC-44
CLI
contextlevel10-11
commandlineinterface
Index1
SeeCLI.
communities,SNMP13-14
viewingandconfiguringwiththeCLI13-15
viewingandconfiguringwiththemenu13-14
configuration3-7
Bootp8-14
comparingstartuptorunning6-6
console7-3
copyingA-18
DHCPOption666-37
DHCP,BestOffer6-39
downloadA-3
factorydefault6-9,8-2
fileupdatewithOption666-37
fileupdatingwithOption666-38
IP8-3
networkmonitoringB-25
Option676-39
permanent6-7
permanentchangedefined6-5
port10-1,12-1
porttrunkgroups10-1,12-1
quick3-8
reboottoactivate3-13
restoringfactorydefaultsC-44
savingfrommenuinterface3-10
seriallink7-3
SNMP13-4,13-5,13-12
SNMPcommunities13-14,13-15
startup3-10
system7-10
Telnetaccessconfiguration7-3
TFTPserver6-37
transferringA-18
trapreceivers13-20
updatingthefileusingOption666-38
viewing6-6
webbrowseraccess7-3
configurationfile
browsingfortroubleshootingC-37
multiple
configurationfile,multiple
applications6-23
asterisk6-26
backupConfig6-24
changepolicy6-27
Clear+Resetbuttoncombination6-34
copyfromtftphost6-36
copytotftphost6-35
createnewfile6-25,6-30,6-32
currentfileinuse6-26
defaultrebootfromprimary6-28
erasing6-33
memoryslot6-24,6-26,6-28
minconfig6-28,6-33
newconfig6-28
overriderebootpolicy6-27
policy,override6-29
powercycle6-28
primarybootpath6-26
rebootpolicyoptions6-24
rebootpolicy,override6-27
rebootprocess6-25
reload6-29
renameconfigfile6-30
reset6-28
running-configfile6-25
running-configfileoperation6-24
secondarybootpath6-26
showconfigfilecontent6-27
showmultiplefiles6-26
startup-config6-24
startup-configfile6-25
Unabletocopy6-31
workingConfig6-24
xmodemfromhost6-37
xmodemtohost6-36
consoleC-7
configuring7-3
endingasession3-5
features2-3
Mainmenu3-7
navigation3-9,3-10
operation3-10
startingasession3-4
statusandcountersaccess3-7
troubleshootingaccessproblemsC-5
contextlevel
globalconfig8-11
copy
multipleconfigfile,tftp6-35
copyright1-ii
CPUutilizationB-6
2Index
D
dateformatC-21
date,configure7-14
debugcommand
"debug"severityandSyslogserversC-31
eventC-26
eventlogC-31
syntaxC-26
debuglogging
configuration,viewingC-30
generaloperationC-25
session,notcurrentC-31
status,viewingC-30
SyslogconfigurationC-27
SyslogloggingdisabledC-27
Syslogserver,viewconfigurationC-30
Syslog,numberofserversC-25
TelnetsessionC-25
debuglogging,LLDP13-33
defaultgateway8-3
defaultsettings
configurationfilename,switch.cfg6-39
DHCPOption66,enabled6-37
defaulttrunktype12-9
DevicePasswordsWindow5-8
DHCP
addressproblemsC-7
BestOffer6-39
configuringDHCPrelay8-12
effectofnoreplyC-7
Option666-37
Option828-12
settingupaDHCPhelper8-12
DHCP/Bootp
operation8-12
process8-13
DHCP/Bootp,LLDP13-44
diagnosticstoolsC-32
browsingtheconfigurationfileC-37
pingandlinktestsC-33
disclaimer1-ii
DisplayingLoopProtectionStatus10-10
DNSname5-4
DomainNameServer5-4
download
switch-to-switchA-14
troubleshootingA-17
XmodemA-11
downloadOSA-14
download,TFTPA-3,A-4
downstreamdevice(QoS)
effectofprioritysettings10-30
duplexadvertisements13-45
duplexinformation,displaying13-63
duplicateMACaddress
SeeMACaddress
Dyn1
SeeLACP.
E
EmergencyLocationIdNumber13-56
endingaconsolesession3-5
eventlog3-7,C-21
navigationC-23
PoEmessages11-15
Seealsodebuglogging.
severitylevelC-21
UDLDwarningmessages10-47
useduringtroubleshootingC-21
withdebugC-31
excessivepackets10-25
F
factorydefaultconfiguration
restoring6-9,C-44
failure,OSdownloadA-17
faultdetection5-8
policy 5-8
settingthepolicy5-21
window5-21
faultdetectionpolicy5-21
fault-tolerance12-4
fiberoptics,monitoringlinks10-40
filter,source-port10-24
firmwareversionB-6
flashmemory3-10,6-3
flowcontrol10-5
jumbopackets10-19,10-23
flowcontrol,statusB-10
flowcontrol,terminal7-3
format,dateC-21
format,timeC-21
friendlyportnames
Seeportnames,friendly.
Index3
G
gateway8-3,8-5
gateway(IP)address8-4,8-6
giantpackets10-25
globalconfiglevel,CLI8-11
H
Help3-11
Helpline
locationonmenuscreen3-9
I
IEEE802.1dC-14
IEEE802.3ab10-5
IEEEP802.1AB/D913-34
IGMP
hostnotreceivingC-8
notworkingC-8
statisticsB-21
inactivitytimeout7-4
InboundTelnetEnabledparameterC-6
Inconsistentvalue13-40
informrequests13-22
invalidinput4-13
IP
CLIaccess8-7
configuration8-3
DHCP/Bootp8-3
duplicateaddressC-7
duplicateaddress,DHCPnetworkC-7
effectwhenaddressnotused8-11
gateway8-3
gateway(IP)address8-4
menuaccess8-5
multinetting8-9
multipleaddressesinVLAN8-9
stacking8-5
subnet8-9
subnetmask8-3,8-6
subnetting8-9
usingforwebbrowserinterface5-4
webaccess8-11
IPaddress
forSNMPmanagement13-3
multipleinaVLAN8-9
removingorreplacing8-10
IPpreserve
DHCPserver8-16
overview8-16
rules,operating8-16
summaryofeffect8-19
IPX
networknumberB-7
J
Java5-4
Javaapplets5-5
jumbopackets
configuration10-20
excessiveinbound10-23
flowcontrol10-19,10-23
GVRPoperation10-19
managementVLAN10-23
maximumsize10-18
MTU10-18
portaddsandmoves10-19
portspeed10-19
securityconcerns10-24
standardMTU10-19
throughnon-jumboports10-25
trafficsources10-20
troubleshooting10-25
VLANtag10-18
voiceVLAN10-23
K
killcommand7-9
L
LACP
802.1x,notallowed12-19
active12-14,12-17
CLIaccess12-10
defaultportoperation12-18
described12-5,12-15
Dyn112-6
dynamic12-17
enablingdynamictrunk12-14
full-duplexrequired10-6,12-4,12-15
IGMP12-20
nohalf-duplex12-21
4Index
operationnotallowedC-9
outboundtrafficdistribution12-22
overview12-4
passive12-14,12-17
removingportfromactivetrunk12-14
restrictions12-19
standbylink12-17
status,terms12-18
STP12-20
VLANs12-20
with802.1x12-19
withportsecurity12-19
learningbridge8-2
limit,broadcast10-12
linkfailures,detecting10-40
linkspeed,porttrunk12-3
linktest
descriptionC-33
fortroubleshootingC-33
link,serial7-3
LLDP
802.1D-compliantswitch13-70
802.1xblocking13-35
802.1Xeffect13-70
activeport13-29
advertisement13-29
advertisementcontent13-43
advertisementdata13-61
advertisement,mandatorydata13-43
advertisement,optionaldata13-44
advertisements,delayinterval13-40
CDPneighbordata
CDP
LLDP neighbor data 13-71
chassisID13-43
chassistype13-43
clearstatisticscounters13-66
comparisonwithCDPdatafields13-71
configurationoptions13-31
dataoptions13-32
datareadoptions13-34
dataunit13-30
debuglogging13-33
default13-72
defaultconfiguration13-36
DHCP/Bootpoperation13-35
disable,per-port13-43
displayneighbordata13-64
enable/disable,global13-38
features13-28
generaloperation13-31
globalcounters13-67
holdtimemultiplier13-39
hub,packet-forwarding13-31
IEEE802.1AB-200513-29
IEEEP802.1AB/D913-34
Inconsistentvalue13-40
informationoptions13-32
invalidframes13-68
IPaddressadvertisement13-35
IPaddresssubelement13-43
IPaddress,advertisement13-70
IPaddress,DHCP/Bootp13-44
IPaddress,options13-43
IPaddress,versionadvertised13-43
LLDP-aware13-29
LLDPDU13-30
mandatoryTLVs13-70
MIB13-31,13-34
neighbor13-29
neighbordataremaining13-70
neighbordata,displaying13-64
neighborstatistics13-67
neighbor,maximum13-70
operatingrules13-35
optionaldata,configuring13-45
packetboundaries13-31
packetdropped13-31
packettime-to-live13-33
packet-forwarding13-31
packetsnotforwarded13-29
per-portcounters13-68
portdescription13-44
portID13-43
portspeed13-45
porttrunks13-35
porttype13-43
refreshinterval13-39
reinitializationdelay13-41
remotemanagementaddress13-33
remotemanageraddress13-43
resetcounters13-66
rxonly13-43
setmib,delayinterval13-40
setmib,reinitdelay13-41
showadvertisementdata13-61
Index5
showcommands13-36,13-37
showoutboundadvertisement13-62
SNMPnotification13-32
spanning-treeblocking13-35
standardscompatibility13-34
statistics,displaying13-66
systemcapabilities13-44
systemdescription13-44
systemname13-44
terminology13-29
time-to-live13-32,13-39
TLV13-30
transmissionfrequency13-32
transmissioninterval,change13-39
transmit/receivemodes13-32
transmit/receivemodes,per-port13-43
trapnoticeinterval13-42
trapnotification13-41
trapreceiver,datachangenotice13-41
TTL13-32,13-33
txonly13-43
VLAN,untagged13-70
walkmib13-34
LLDPDU13-30
LLDP-MED
displayingspeed13-63
ELIN13-56
enableordisable13-31
endpointsupport13-48
faststartcontrol13-51
locationdata13-56
medTlvenable13-53
topologychangenotification13-49
VoiceoverIP13-46
loadbalancing
Seeporttrunk.
logicalport12-7
loopprotection
configuringB-19
send-disableB-19
show10-10
transmit-intervalB-20
trapB-20
loop,network12-3
lostpassword5-10
M
MACaddress8-14,B-6,D-2
duplicateC-14,C-19
learnedB-13
listingconnecteddevicesD-6
portD-2,D-3
switchD-2
VLAND-2
management
serverURL5-12
managementVLAN
SeeVLAN.
manageraccess13-13
managerpassword5-8,5-10
MDI/MDI-Xconfiguration,display10-15
MDI/MDI-Xportmode,display10-15
mediatype,porttrunk12-3
memory
flash3-10,6-3
startupconfiguration3-10
menuinterface
configurationchanges,saving3-10
MIB13-4
MIBfile,locationonwebsite13-4
MIBlisting13-4
MIB,HPproprietary13-4
MIB,standard13-4
mirroring
Seeportmonitoring.
monitoring
linksbetweenports10-40
monitoringtrafficB-25
multinetting8-9
multinetting,limit8-9
multipleconfigurationfile
Seeconfigurationfile,multiple.
multipleVLAN13-3
multi-portbridge8-2
N
navigation,consoleinterface3-9,3-10
navigation,eventlogC-23
networkmanagementfunctions13-5
networkmanageraddress13-4,13-5
networkmonitoring
trafficoverloadB-25
NetworkMonitoringPortscreenB-25
6Index
networkslowC-7
NotCurrentOne,debugsessionC-31
notices1-ii
O
operationnotallowed,LACPC-9
operatoraccess13-13
operatorpassword5-8,5-10
Option66,DHCP6-37
OS
versionA-5,A-12,A-15
OSdownload
failureindicationA-17
switch-to-switchdownloadA-14
troubleshootingA-17
usingTFTPA-3
out-of-band2-3
P
pass-throughmode,qos10-26
password5-8,5-10
creating5-8
delete3-7,5-10
ifyoulosethepassword5-10
lost5-10
manager5-8
operator5-8
set3-7
setting5-9
usingtoaccessbrowserandconsole5-10
pingtest
descriptionC-33
fortroubleshootingC-33
PoE
advertisements13-55
benefitofLLDP-MED13-47
CLIcommands11-7
configuring11-7
disablingaport11-8
eventlogmessages11-15
operationonProCurveswitches11-2
planningandimplementation11-14
portpriority11-5
powersupplies11-3
prestandarddetect11-11
pre-802.3af-standarddevices11-9
pre-std-detect11-9
priorityclass11-3
status13-51
supportinglegacydevices11-9
viewingpowerstatus11-11
port
addresstableB-13
autonegotiation10-4,10-5
blockedbyUDLD10-41
broadcastlimit10-12
CLIaccess10-8
configuringUDLD10-41
contextlevel10-11
controlconfiguration10-1,12-1
countersB-10
counters,resetB-10
enablingUDLD10-42
fiber-optic10-5
full-duplex,LACP10-6
MACaddressD-3,D-4
menuaccess10-6
queues
Seeport-basedpriority.
trafficpatternsB-10
transceiverstatus10-16
trunk
Seeporttrunk.
utilization5-15
webbrowserinterface5-15
webbrowseraccess10-18
portnames,friendly
configuring10-35
displaying10-36
summary10-34
portsecurity
trunkrestriction12-7
porttrunk12-2
caution12-3,12-8,12-15
CLIaccess12-10
defaulttrunktype12-9
enablingdynamicLACP12-14
enablingUDLD10-42
IGMP12-7
LACP10-6
LACP,fullduplexrequired12-4
linkrequirements12-3
logicalport12-7
mediarequirements12-6
Index7
mediatype12-3
menuaccesstostatictrunk12-8
monitorportrestrictions12-7
nonconsecutiveports12-2
portsecurityrestriction12-7
removingportfromstatictrunk12-13
requirements12-6
SA/DA12-22
SeealsoLACP.
spanningtreeprotocol12-7
statictrunk12-6
statictrunk,overview12-4
STP12-7
STPoperation12-6
trafficdistribution12-6
Trk112-6
trunk(non-protocol)option12-5
trunkoptiondescribed12-21
types12-5
UDLDconfiguration10-41
VLAN12-7
VLANoperation12-6
webbrowseraccess12-15
porttrunkgroup
interfaceaccess10-1,12-1
port,active13-29
port-basedaccesscontrol
eventlogC-9
LACPnotallowed12-19
troubleshootingC-9
port-basedpriority
802.1qVLANtagging10-29
configuring10-32
messages10-33
outboundportqueues10-30
overview10-29
priority/queuetable10-30
requirementforcontinuity10-31
rulesofoperation10-31
troubleshooting10-33
viewingconfiguration10-32
powerinterruption,effectoneventlogC-21
poweroverethernet
SeePoE.
pre-standarddetect11-11
ProCurveNetworking
supportURL5-13
prompt,=>C-45
publicSNMPcommunity13-5
publicationdata1-ii
Q
qospass-throughmode10-3,10-26
prioritymapping10-27
quickconfiguration3-8
quickstart1-6,8-4
R
reboot3-8,3-10,3-12
reboot,actionscausing6-4
reboot,effectonconfiguration3-13
reconfigure3-10
reload6-18,6-20,6-29
at/after6-20,6-21,6-29
comparingtoboot6-19
scheduled6-21
remotesession,terminate7-9
reset3-12,6-11
Resetbutton
resetportcountersB-10
resettingtheswitch
factorydefaultresetC-44
restrictedaccess13-14
restrictedwriteaccess13-13
RFC
SeeMIB.
RFC149313-4
RFC151513-4
RFCs
RFC273713-34
RFC286313-34
RFC292213-34
RMON13-4
router
gateway8-6
RS-232 2-3
running-config,viewing6-6
Seealsoconfiguration.
S
SCP/SFTP
sessionlimitA-10
8Index
securecopy
SeeSCP/SFTP.
secureFTP
SeeSCP/SFTP.
security5-10,7-3
SelfTestLED
behaviorduringfactorydefaultresetC-44
serialnumberB-6
session
See debuglogging.
setmib,delayinterval13-40
setmib,reinitdelay13-41
settingfaultdetectionpolicy5-21
setupscreen1-6,8-4
severitycode,eventlogC-21
sFlow
sampling-pollinginformation13-27
showcommands13-25
showtechC-38
showtechtransciever10-16
slownetworkC-7
SNMP13-3
CLIcommands13-13
communities13-4,13-5,13-12,13-13,13-14
configure13-4,13-5
IP13-3
notification,LLDP
SNMPnotification13-32
publiccommunity13-5,13-14
restrictedaccess13-14
thresholds13-20
traps10-41,13-4,13-20
traps,well-known13-20
SNMPcommunities
configuringwiththeCLI13-15
configuringwiththemenu13-14
SNMPtrap,LLDP13-41
snmp-server
inform13-22
SNMPv3
"public"communityaccesscaution13-6
access13-5
assigninguserstogroups13-8
communities13-12
enablecommand13-7
enabling13-6
groupaccesslevels13-11,13-12
groups13-10
networkmanagementproblemswithsnmpv3
only13-6
notification13-17
restricted-accessoption13-6
setup13-5
traps13-17
users13-5
SNTP9-3
broadcastmode9-2,9-9
broadcastmode,requirement9-3
configuration9-4
disabling9-11
enablinganddisabling9-9
menuinterfaceoperation9-23
operatingmodes9-2
pollinterval9-12
SeealsoTimeP.
selecting9-3
unicastmode9-3,9-10
unicasttimepolling9-21
unicast,addresspriority9-21
unicast,deletingaddresses9-23
unicast,replacingservers9-22
viewing9-4,9-8
softwareversionB-6
sortingalertlogentries5-18
source-portfilter10-24
spanningtree
configuration10-10
fast-uplink
troubleshootingC-14
globalinformationB-17
informationscreenB-17
problemsrelatedtoC-14
showtech,copyoutputC-38
statisticsB-17
usingwithporttrunking12-7
viewingportoperatingstatistics10-10
SSH
debugloggingC-25
TACACSexclusionA-10
troubleshootingC-15
standardMIB13-4
startingaconsolesession3-4
startup-config,viewing6-6
Seealsoconfiguration.
statistics3-7,B-4
Index9
statistics,clearcounters3-12,6-11
statusandcounters
accessfromconsole3-7
statusandcountersmenuB-5
statusoverviewscreen5-6
subnet8-9
subnetmask8-5,8-6
SeealsoIP.
subnetting8-9
support
changingdefaultURL5-13
URL5-12
URLWindow5-12
switchconsole
Seeconsole.
switchsetupmenu3-8
switchsoftware
SeeOS.
switch-to-switchdownloadA-14
Syslog
facility,userC-31
Seedebuglogging.
severity,"debug"C-31
systemconfigurationscreen7-10
SystemNameparameter7-11
T
TACACS
SSHexclusionA-10
Telnet3-4
terminatesession,killcommand7-9
Telnet,enable/disable7-4
Telnet,outbound7-6
Telnet,problemC-6
terminalaccess,loseconnectivity7-6
terminalmode,changingdynamically7-8
terminaltype 7-3
terminateremotesession7-9
TFTP
downloadA-4
OSdownloadA-3
thresholdsetting13-5
thresholds,SNMP13-20
timeformatC-21
timeprotocol
selecting9-3
timeserver8-3
time,configure7-14
TimeP8-4,8-5
assignmentmethods9-2
disabling9-20
enablinganddisabling9-18
pollinterval9-20
selecting9-3
viewingandconfiguring,menu9-15
viewing,CLI9-17
timesync,disabling9-20
Time-To-Live8-4,8-5
time-to-live,LLDP13-32
TLVs,mandatory13-70
traceroute
asteriskC-42
blockedrouteC-43
failsC-41
trafficmonitoring13-5,B-25
traffic,portB-10
transceiver
errormessages10-17
viewstatus10-16
transceiver,fiber-optic10-5
transceivers
configuringwhennotinserted10-39
notinserted10-39
trap5-23
authentication13-20
authenticationtrap13-25
CLIaccess13-20
eventlevels13-24
limit13-20
receiver13-20
SNMP13-20
trapnotification13-41
trapreceiver13-4,13-5
configuring13-20,13-21
troubleshooting
approachesC-3
browsingtheconfigurationfileC-37
consoleaccessproblemsC-5
diagnosingunusualnetworkactivityC-7
diagnosticstoolsC-32
fast-uplinkC-14
OSdownloadA-17
pingandlinktestsC-33
spanningtreeC-14
10Index
SSHC-15
switchwontreboot,shows=>promptC-45
unusualnetworkactivityC-7
usingtheeventlogC-21
webbrowseraccessproblemsC-5
trunk
Seeporttrunk.
TTL8-4,8-5
TTL,LLDP13-32
typesofalertlogentries5-19
U
UDLD
changingthekeepaliveinterval10-43
changingthekeepaliveretries10-43
configuration10-41
configuringfortaggedports10-43
enablingonaport10-42
operation10-41
overview10-40
supportedswitches10-41
viewingconfiguration10-44
viewingstatistics10-46
warningmessages10-47
unauthorizedaccess13-25
undersizepackets10-25
Uni-directionalLinkDetection
SeeUDLD.
UniversalResourceLocator
SeeURL.
Unix,Bootp8-14
unrestrictedwriteaccess13-13
unusualnetworkactivityC-7
uptimeB-6
URL
managementserver5-12
ProCurveNetworking5-13
support5-12,5-13
username,usingforbrowserorconsole
access5-8,5-10
users,SNMPv3
SeeSNMPv3.
usingthepasswords5-10
utilization,port5-15
V
version,OSA-5,A-12,A-15
view
transceiverstatus10-16
VLAN8-4,C-20,D-2
address13-3
Bootp8-14
configuringBootp8-14
configuringUDLDfortaggedports10-43
devicenotseenC-19
eventlogentriesC-21
linkblockedC-14
managementandjumbopackets10-23
managementVLAN,SNMPblock13-3
monitoringB-3
multinetting8-9
multiple13-3
multipleIPaddresses8-9
OSdownloadA-3
portconfigurationC-19
primary8-4
rebootrequired3-8
subnet8-9
supportenable/disable3-8
taggingbroadcast,multicast,andunicast
trafficC-18
VLANID4-15
SeealsoVLAN.
VoIP
LLDP-MEDsupport13-46
VT-100terminal7-3
W
walkmib13-34
warranty1-ii
webagent
advantages2-5
enabled5-2
webbrowseraccessconfiguration7-3
webbrowserenable/disable7-4
webbrowserinterface
accessparameters5-8
alertlog5-6,5-18
alertlogdetails5-19
bandwidthadjustment5-16
bargraphadjustment5-16
disableaccess5-2
Index11
enabling5-4
errorpackets5-15
faultdetectionpolicy5-8,5-21
faultdetectionwindow5-21
features2-5
first-timeinstall5-7
first-timetasks5-7
mainscreen5-14
overview5-14
Overviewwindow5-14
passwordlost5-10
password,setting5-9
portstatus5-17
portutilization5-15
portutilizationandstatusdisplays5-15
screenelements5-14
security5-2,5-8
standalone5-4
statusbar5-20
statusindicators5-21
statusoverviewscreen5-6
systemrequirements5-4
troubleshootingaccessproblemsC-5
writeaccess13-13
writememory,effectonmenuinterface3-13
X
XmodemOSdownloadA-11
12Index
ProCurve 5400zl Switches
Installation and Getting Startd Guide
Technology for better business outcomes
To learn more, visit www.hp.com/go/procurve/
Copyright 2009 Hewlett-Packard Development Company, L.P. The information
contained herein is subject to change without notice. The only warranties for HP products
and services are set forth in the express warranty statements accompanying such products
and services. Nothing herein should be construed as constituting an additional warranty.
HP will not be liable for technical or editorial errors or omissions contained herein.
5991-8640 September 2009

HP Switch

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

HP Switch

Transféré par

Droits d'auteur :

Formats disponibles

HP ProCurve Switch Software

Management and Configuration Guide

TimeSyncMethod None SeeChapter9,TimeProtocols.

DaylightTimeRule None page

configureidentityinformation none page

Vous aimerez peut-être aussi