Manuals / HP / Computer Equipment / Switch

HP 445946-001 manual

Models: 445946-001

1 198

Download 198 pages 26.86 Kb

Page 108

Basic IP routing

Take a closer look at the HP 10GbE switch in the following configuration example: Figure 15 Switch-based routing topology

The switch connects the Gigabit Ethernet and Fast Ethernet trunks from various switched subnets throughout one building. Common servers are placed on another subnet attached to the switch. Primary and backup routers are attached to the switch on yet another subnet.

Without Layer 3 IP routing on the switch, cross-subnet communication is relayed to the default gateway (in this case, the router) for the next level of routing intelligence. The router fills in the necessary address information and sends the data back to the switch, which then relays the packet to the proper destination subnet using Layer 2 switching.

With Layer 3 IP routing in place on the switch, routing between different IP subnets can be accomplished entirely within the switch. This leaves the routers free to handle inbound and outbound traffic for this group of subnets.

108

Image 108

HP 445946-001 manual

Contents

HP 10Gb Ethernet BL-c Switch Part number First edition JuneLegal notices Contents Configuring Lacp 802.1x authentication processConfiguring port-based traffic control 802.1x port statesConfiguration guidelines Bridge priority Port priority Port path costAdding a Vlan to a Spanning Tree Group Creating a Vlan Edge port Link type100 105106 109131 Internal versus external routing 134141 155Configuring the switch for tracking 177 167173 175Accessing the switch Accessing the switchIntroduction Typeface or Meaning Example Symbol Additional referencesTypographical conventions Management NetworkConnecting through the console port Connecting through TelnetConnecting through Secure Shell Using the command line interfaces Configuring an IP interfaceUsing the Browser-based Interface Apply, verify, and save the configurationUsing Simple Network Management Protocol Default configurationFor more details, see Configuring Snmp trap hosts SnmpUser configuration Cfg/sys/ssnmp/snmpv3/usm x/auth md5shaView based configurations CLI user equivalentConfiguring Snmp trap hosts Configure a user with no authentication or passwordCLI oper equivalent SNMPv1 trap hostAccessing the switch Configure an entry in the notify table Sys/ssnmp/snmpv3/tparam x/unameSNMPv2 trap host configuration SNMPv3 trap host configurationSecure access to the switch Setting allowable source IP address rangesRadius authentication and authorization Configuring an IP address range for the management networkHow Radius authentication works Configuring Radius on the switch CLI example Apply and save the configurationConfiguring Radius on the switch BBI example Click SubmitRadius authentication features User accounts for Radius usersUser account Description and tasks performedTACACS+ authentication Accessing the switch User access levelsUser name/access User service type Value Radius attributes for user privilegesHow TACACS+ authentication works TACACS+ authentication featuresAuthorization User access level TACACS+ levelAccounting Configure the TACACS+ secret and second secret Configure custom privilege-level mapping optionalConfiguring TACACS+ authentication on the switch BBI example Secure Shell and Secure Copy Configuring SSH and SCP features CLI example Enabling or disabling SSHUsing SSH and SCP client commands Enter the following command to log in to the switchSwitch prompts you for the scpadmin password For exampleGenerating RSA host and server keys for SSH access SSH and SCP encryption of management messagesUser access control SSH/SCP integration with Radius and TACACS+ authenticationUser account Description Password Setting up user IDs Define the user name and passwordEnable the user ID Ports on the switch Ports and trunkingPorts and trunking Port number Port aliasBefore you configure trunks Built-in fault tolerancePorts and trunking Ethernet switch port names Port trunk groupsTrunk group configuration rules Cfg/port x/curPort trunking example Configuring trunk groups CLI example On Switch 1, configure trunk groups 5On Switch 2, configure trunk groups 4 Configuring trunk groups BBI example Click Submit Page Configurable Trunk Hash algorithm Actor Switch Partner SwitchLink Aggregation Control Protocol Page Configuring Lacp Define the admin key on portApply and verify the configuration Save your new configuration changesPort-based Network Access and traffic control Port-based Network Access controlExtensible authentication protocol over LAN Port-based Network Access and traffic control802.1x authentication process EAPoL Message Exchange802.1x port states Supported Radius attributes Attribute Attribute ValueEAPoL configuration guidelines Port-based traffic controlConfiguring port-based traffic control VLANs OverviewVLANs and port Vlan ID numbers Vlan numbersViewing and configuring PVIDs Port configurationPvid numbers Viewing VLANsVlan tagging VLANs VLANs VLANs and IP interfaces Vlan topologies and design considerationsVlan configuration rules Multiple Vlans with tagging Component DescriptionConfiguring the example network Configuring ports and VLANs on Switch 1 CLI exampleVLANs Multiple VLANs with tagging # add Add port 18 to Vlan Current Ports for Configuring ports and VLANs on Switch 2 CLI example Configuring ports and VLANs on Switch 1 BBI example VLANs Enable the port and enable Vlan tagging FDB static entries Cfg/l2/fdb/staticConfiguring a static FDB entry Trunking support for FDB static entriesSpanning Tree Protocol Bridge Protocol Data UnitsSpanning Tree Protocol Spanning Tree Group configuration guidelines Default Spanning Tree configurationDetermining the path for forwarding BPDUs Adding a Vlan to a Spanning Tree Group Creating a VlanRules for Vlan tagged ports Adding and removing ports from STGsWhy do we need Multiple Spanning Trees? Switch element Belongs toMultiple Spanning Trees Assigning cost to ports and trunk groupsVlan participation in Spanning Tree Groups Two VLANs on separate instances of Spanning Tree ProtocolConfiguring Multiple Spanning Tree Groups Configuring Switch 1 CLI exampleConfiguring Switch 2 CLI example Configuring Switch 1 BBI example Page Configuring Port Fast Forwarding Configuration guidelinesConfiguring Fast Uplink Convergence Port Fast ForwardingRstp and Mstp Rapid Spanning Tree ProtocolPort state changes Rstp and MstpRstp configuration guidelines Rstp configuration examplePort type and link type Configuring Rapid Spanning Tree Protocol BBI example Rstp and Mstp Apply, verify, and save the configuration Multiple Spanning Tree ProtocolMstp region Common Internal Spanning TreeMstp configuration guidelines Mstp configuration exampleConfiguring Multiple Spanning Tree Protocol CLI example Assign VLANs to Spanning Tree GroupsConfiguring Multiple Spanning Tree Protocol BBI example Click Submit Page Apply, verify, and save the configuration Quality of Service Quality of ServiceUsing ACL filters Summary of packet classifiersNumber Protocol Name Quality of Service Well-known protocol types NumberApplication Well-krown TCP flag valuesSummary of ACL actions Understanding ACL precedencePrecedence Group ACLs Precedence Level Using ACL Groups ACL Metering and Re-marking Viewing ACL statisticsMetering Re-markingACL configuration examples Configure Access Control Lists CLI exampleConfigure Access Control Lists and Groups BBI example Click Submit Page Quality of Service Add the ACL to the port Using Dscp values to provide QoS Differentiated Services conceptsPer Hop Behavior Drop Precedence ClassUsing 802.1p priorities to provide QoS Service Level Default PHB 802.1p PriorityQoS levels Class selector priority classesPage 802.1p configuration CLI example 802.1p configuration BBI exampleConfigure a port’s default 802.1 priority Quality of Service Select a port 101 Quality of Service Set the 802.1p priority value 102103 Page Queuing and scheduling Basic IP routing IP routing benefitsRouting between IP subnets Basic IP routingPage Page Example of subnet routing Subnet Devices IP AddressesInterface Devices IP Interface Address Using VLANs to segregate broadcast domains Enable, apply, and verify the configurationDevices IP Interface Switch Port Add the switch ports to their respective VLANs 110111 Dynamic Host Configuration Protocol Dhcp relay agentDhcp relay agent configuration Routing updates Routing Information ProtocolDistance vector protocol StabilityRIPv2 in RIPv1 compatibility mode RIP FeaturesRIPv1 RIPv2Default AuthenticationMulticast MetricRIP configuration example Add VLANs for routing interfacesAdd IP interfaces to VLANs Cfg/l3/frwd/on before you turn RIP onIgmp Snooping Igmp SnoopingIGMPv3 FastLeaveConfiguring the range Configuring the actionIgmp Filtering Igmp Snooping configuration example Configuring Igmp Snooping CLI exampleEnable IGMPv3 Snooping optional Static multicast routerConfiguring Igmp Filtering CLI example Configuring a Static Mrouter CLI exampleEnable Igmp Filtering on the switch Define an Igmp FilterConfiguring Igmp Snooping BBI example Igmp Snooping Enable Igmp Snooping Apply, verify, and save the configuration 124Configuring Igmp Filtering BBI example Igmp Snooping Define the Igmp Filter Select Layer 3 Igmp Igmp Filters Add Filter126 Page Apply, verify, and save the configuration 128 Configuring a Static Multicast Router BBI example Configure Static Mrouter Click the Configure context buttonApply, verify, and save the configuration Igmp Snooping 130 Ospf overview Types of Ospf areasTypes of Ospf routing devices Ospf area typesNeighbors and adjacencies Link-State DatabaseShortest Path First Tree Ospf implementation in HP 10GbE switch software Configurable parametersInternal versus external routing Defining areas Assigning the area indexArea index set to an arbitrary value Using the area ID to assign the Ospf area number Interface costAttaching an area to a network Default routes Electing the designated router and backupSummarizing routes Virtual links Router IDEnable Ospf authentication for Area 2 on switch Configure MD5 key ID for Area 0 on switches 1, 2, Assign MD5 key ID to Ospf interfaces on switches 1, 2,Enable Ospf MD5 authentication for Area 2 on switch Assign MD5 key ID to Ospf virtual link on switches 2Ospf configuration examples Ospf features not supported in this releaseExample 1 Simple Ospf domain CLI example Example 1 Simple Ospf domain BBI example Apply, verify, and save the configuration 143 Ospf Click Submit Configure the Ospf area Click Submit Select Add Ospf Area146 Ospf Click Submit Select Add Ospf Interface 148Apply, verify, and save the configuration 149 Configuring Ospf for a virtual link on Switch a Example 2 Virtual linksDefine the backbone Configuring Ospf for a virtual link on Switch B Configure the virtual linkSwitch B in step Attach the network interface to the transit areaExample 3 Summarizing routes Other Virtual Link OptionsDefine the transit area 153 Verifying Ospf configuration Remote monitoring Rmon group 1-statisticsRemote monitoring Configuring Rmon Statistics CLI example Configuring Rmon Statistics BBI exampleView Rmon statistics for the port Remote monitoring Select a port 157 Remote monitoring Enable Rmon on the port Rmon group 2-historyConfigure the Rmon History parameters History MIB objectsConfigure Rmon History BBI example Apply, verify, and save the configuration 160Rmon group 3-alarms Alarm MIB objectsConfigure Rmon Alarms BBI example Configure the Rmon Alarm parameters to track Icmp messagesApply, verify, and save the configuration 163 164 Configuring Rmon Events CLI example Remote monitoring Apply, verify, and save the configurationConfigure the Rmon Event parameters Rmon group 9-eventsConfiguring Rmon Events BBI example Apply, verify, and save the configuration 166High availability Uplink Failure DetectionHigh availability Failure Detection Pair Spanning Tree Protocol with UFDConfiguring Uplink Failure Detection Monitoring Uplink Failure DetectionConfiguring UFD on Switch 1 CLI example Configuring UFD on Switch 2 CLI exampleTurn UFD on Create a trunk group of uplink ports 18-21 to monitorConfiguring Uplink Failure Detection BBI example Apply, verify, and save the configuration 172 Vrrp overview Vrrp componentsVirtual router Virtual router MAC addressMaster and backup virtual router Vrrp operationSelecting the master Vrrp router Virtual Interface RouterFailover methods Active-Active redundancyHP 10GbE switch extensions to Vrrp Tracking Vrrp router priorityParameter Configuring the switch for tracking Virtual router deployment considerationsAssigning Vrrp virtual router ID High availability configurations Active-Active configurationTask 1 Configure Switch a Configure portsHigh availability Configure client and server interfaces Turn on Vrrp and configure two Virtual Interface RoutersTurn off Spanning Tree Protocol globally 179Task 2 Configure Switch B Task 1 Configure Switch a BBI example Vrrp Virtual Router 1#Click Submit 183 184 Page High availability Enable Vrrp processing Click Submit Select Add Virtual Router 187Click Submit High availability 189 Apply, verify, and save the configuration 190 Troubleshooting tools Troubleshooting toolsPort Mirroring Configuring Port Mirroring CLI example Enable Port MirroringView the current configuration Select the ports that you want to mirrorConfiguring Port Mirroring BBI example Click Add Mirrored Port Other network troubleshooting techniques Page Index Index197 198