Part number First edition June
HP 10Gb Ethernet BL-c Switch
 Legal notices
 Contents
 802.1x port states
Configuring Lacp
802.1x authentication process
Configuring port-based traffic control
 Edge port Link type
Configuration guidelines
Bridge priority Port priority Port path cost
Adding a Vlan to a Spanning Tree Group Creating a Vlan
 109
100
105
106
 155
131
Internal versus external routing 134
141
 175
Configuring the switch for tracking 177
167
173
 Accessing the switch
Accessing the switch
Introduction
 Management Network
Typeface or Meaning Example Symbol
Additional references
Typographical conventions
 Connecting through the console port
Connecting through Telnet
Connecting through Secure Shell
 Configuring an IP interface
Using the command line interfaces
 Apply, verify, and save the configuration
Using the Browser-based Interface
 Snmp
Using Simple Network Management Protocol
Default configuration
For more details, see Configuring Snmp trap hosts
 Cfg/sys/ssnmp/snmpv3/usm x/auth md5sha
User configuration
 CLI user equivalent
View based configurations
 SNMPv1 trap host
Configuring Snmp trap hosts
Configure a user with no authentication or password
CLI oper equivalent
 Sys/ssnmp/snmpv3/tparam x/uname
Accessing the switch Configure an entry in the notify table
 SNMPv3 trap host configuration
SNMPv2 trap host configuration
 Setting allowable source IP address ranges
Secure access to the switch
 Radius authentication and authorization
Configuring an IP address range for the management network
How Radius authentication works
 Apply and save the configuration
Configuring Radius on the switch CLI example
 Click Submit
Configuring Radius on the switch BBI example
 Description and tasks performed
Radius authentication features
User accounts for Radius users
User account
 Radius attributes for user privileges
TACACS+ authentication
Accessing the switch User access levels
User name/access User service type Value
 User access level TACACS+ level
How TACACS+ authentication works
TACACS+ authentication features
Authorization
 Accounting
 Configure custom privilege-level mapping optional
Configure the TACACS+ secret and second secret
 Configuring TACACS+ authentication on the switch BBI example
 Secure Shell and Secure Copy
 Enabling or disabling SSH
Configuring SSH and SCP features CLI example
 For example
Using SSH and SCP client commands
Enter the following command to log in to the switch
Switch prompts you for the scpadmin password
 SSH and SCP encryption of management messages
Generating RSA host and server keys for SSH access
 User access control
SSH/SCP integration with Radius and TACACS+ authentication
User account Description Password
 Setting up user IDs
Define the user name and password
Enable the user ID
 Port number Port alias
Ports on the switch
Ports and trunking
Ports and trunking
 Port trunk groups
Before you configure trunks
Built-in fault tolerance
Ports and trunking Ethernet switch port names
 Cfg/port x/cur
Trunk group configuration rules
 Port trunking example
 Configuring trunk groups CLI example
On Switch 1, configure trunk groups 5
On Switch 2, configure trunk groups 4
 Configuring trunk groups BBI example
 Click Submit
Page
 Configurable Trunk Hash algorithm
Actor Switch Partner Switch
Link Aggregation Control Protocol
Page
 Save your new configuration changes
Configuring Lacp
Define the admin key on port
Apply and verify the configuration
 Port-based Network Access and traffic control
Port-based Network Access and traffic control
Port-based Network Access control
Extensible authentication protocol over LAN
 EAPoL Message Exchange
802.1x authentication process
 802.1x port states
 Attribute Attribute Value
Supported Radius attributes
 Port-based traffic control
EAPoL configuration guidelines
 Configuring port-based traffic control
 Vlan numbers
VLANs
Overview
VLANs and port Vlan ID numbers
 Viewing VLANs
Viewing and configuring PVIDs
Port configuration
Pvid numbers
 Vlan tagging
 VLANs
 VLANs
 Vlan topologies and design considerations
VLANs and IP interfaces
 Vlan configuration rules
 Component Description
Multiple Vlans with tagging
 Configuring the example network
Configuring ports and VLANs on Switch 1 CLI example
VLANs Multiple VLANs with tagging
 # add Add port 18 to Vlan Current Ports for
 Configuring ports and VLANs on Switch 2 CLI example
 Configuring ports and VLANs on Switch 1 BBI example
 VLANs Enable the port and enable Vlan tagging
 Cfg/l2/fdb/static
FDB static entries
 Trunking support for FDB static entries
Configuring a static FDB entry
 Spanning Tree Protocol
Bridge Protocol Data Units
Spanning Tree Protocol
 Spanning Tree Group configuration guidelines
Default Spanning Tree configuration
Determining the path for forwarding BPDUs
 Adding and removing ports from STGs
Adding a Vlan to a Spanning Tree Group
Creating a Vlan
Rules for Vlan tagged ports
 Assigning cost to ports and trunk groups
Why do we need Multiple Spanning Trees?
Switch element Belongs to
Multiple Spanning Trees
 Two VLANs on separate instances of Spanning Tree Protocol
Vlan participation in Spanning Tree Groups
 Configuring Multiple Spanning Tree Groups
Configuring Switch 1 CLI example
Configuring Switch 2 CLI example
 Configuring Switch 1 BBI example
Page
 Port Fast Forwarding
Configuring Port Fast Forwarding
Configuration guidelines
Configuring Fast Uplink Convergence
 Rstp and Mstp
Rstp and Mstp
Rapid Spanning Tree Protocol
Port state changes
 Rstp configuration guidelines
Rstp configuration example
Port type and link type
 Configuring Rapid Spanning Tree Protocol BBI example
 Common Internal Spanning Tree
Rstp and Mstp Apply, verify, and save the configuration
Multiple Spanning Tree Protocol
Mstp region
 Assign VLANs to Spanning Tree Groups
Mstp configuration guidelines
Mstp configuration example
Configuring Multiple Spanning Tree Protocol CLI example
 Configuring Multiple Spanning Tree Protocol BBI example
 Click Submit
Page
 Apply, verify, and save the configuration
 Quality of Service
Quality of Service
 Using ACL filters
Summary of packet classifiers
Number Protocol Name
 Well-krown TCP flag values
Quality of Service Well-known protocol types
Number
Application
 Summary of ACL actions
Understanding ACL precedence
Precedence Group ACLs Precedence Level
 Using ACL Groups
 Re-marking
ACL Metering and Re-marking
Viewing ACL statistics
Metering
 Configure Access Control Lists CLI example
ACL configuration examples
 Configure Access Control Lists and Groups BBI example
 Click Submit
Page
 Quality of Service Add the ACL to the port
 Drop Precedence Class
Using Dscp values to provide QoS
Differentiated Services concepts
Per Hop Behavior
 Class selector priority classes
Using 802.1p priorities to provide QoS
Service Level Default PHB 802.1p Priority
QoS levels
Page
 802.1p configuration CLI example
802.1p configuration BBI example
Configure a port’s default 802.1 priority
 Quality of Service Select a port 101
 102
Quality of Service Set the 802.1p priority value
 103
Page
 Queuing and scheduling
 Basic IP routing
Basic IP routing
IP routing benefits
Routing between IP subnets
Page
Page
 Example of subnet routing
Subnet Devices IP Addresses
Interface Devices IP Interface Address
 Add the switch ports to their respective VLANs 110
Using VLANs to segregate broadcast domains
Enable, apply, and verify the configuration
Devices IP Interface Switch Port
 111
 Dhcp relay agent
Dynamic Host Configuration Protocol
 Dhcp relay agent configuration
 Stability
Routing updates
Routing Information Protocol
Distance vector protocol
 RIPv2
RIPv2 in RIPv1 compatibility mode
RIP Features
RIPv1
 Metric
Default
Authentication
Multicast
 Cfg/l3/frwd/on before you turn RIP on
RIP configuration example
Add VLANs for routing interfaces
Add IP interfaces to VLANs
 Igmp Snooping
Igmp Snooping
 FastLeave
IGMPv3
 Configuring the range
Configuring the action
Igmp Filtering
 Static multicast router
Igmp Snooping configuration example
Configuring Igmp Snooping CLI example
Enable IGMPv3 Snooping optional
 Define an Igmp Filter
Configuring Igmp Filtering CLI example
Configuring a Static Mrouter CLI example
Enable Igmp Filtering on the switch
 Configuring Igmp Snooping BBI example
 Apply, verify, and save the configuration 124
Igmp Snooping Enable Igmp Snooping
 Configuring Igmp Filtering BBI example
 Igmp Snooping Define the Igmp Filter
Select Layer 3 Igmp Igmp Filters Add Filter
126
Page
 Apply, verify, and save the configuration 128
 Configure Static Mrouter Click the Configure context button
Configuring a Static Multicast Router BBI example
 Apply, verify, and save the configuration Igmp Snooping 130
 Types of Ospf areas
Ospf overview
 Ospf area types
Types of Ospf routing devices
 Neighbors and adjacencies
Link-State Database
Shortest Path First Tree
 Ospf implementation in HP 10GbE switch software
Configurable parameters
Internal versus external routing
 Defining areas
Assigning the area index
Area index set to an arbitrary value
 Using the area ID to assign the Ospf area number
Interface cost
Attaching an area to a network
 Default routes
Electing the designated router and backup
Summarizing routes
 Router ID
Virtual links
 Enable Ospf authentication for Area 2 on switch
 Assign MD5 key ID to Ospf virtual link on switches 2
Configure MD5 key ID for Area 0 on switches 1, 2,
Assign MD5 key ID to Ospf interfaces on switches 1, 2,
Enable Ospf MD5 authentication for Area 2 on switch
 Ospf configuration examples
Ospf features not supported in this release
Example 1 Simple Ospf domain CLI example
 Example 1 Simple Ospf domain BBI example
 Apply, verify, and save the configuration 143
 Ospf
 Click Submit
 Configure the Ospf area
Click Submit Select Add Ospf Area
146
 Ospf
 148
Click Submit Select Add Ospf Interface
 Apply, verify, and save the configuration 149
 Configuring Ospf for a virtual link on Switch a
Example 2 Virtual links
Define the backbone
 Attach the network interface to the transit area
Configuring Ospf for a virtual link on Switch B
Configure the virtual link
Switch B in step
 Example 3 Summarizing routes
Other Virtual Link Options
Define the transit area
 153
 Verifying Ospf configuration
 Remote monitoring
Rmon group 1-statistics
Remote monitoring
 Configuring Rmon Statistics CLI example
Configuring Rmon Statistics BBI example
View Rmon statistics for the port
 Remote monitoring Select a port 157
 Rmon group 2-history
Remote monitoring Enable Rmon on the port
 History MIB objects
Configure the Rmon History parameters
 Apply, verify, and save the configuration 160
Configure Rmon History BBI example
 Alarm MIB objects
Rmon group 3-alarms
 Configure the Rmon Alarm parameters to track Icmp messages
Configure Rmon Alarms BBI example
 Apply, verify, and save the configuration 163
 164
 Rmon group 9-events
Configuring Rmon Events CLI example
Remote monitoring Apply, verify, and save the configuration
Configure the Rmon Event parameters
 Apply, verify, and save the configuration 166
Configuring Rmon Events BBI example
 High availability
Uplink Failure Detection
High availability
 Spanning Tree Protocol with UFD
Failure Detection Pair
 Monitoring Uplink Failure Detection
Configuring Uplink Failure Detection
 Create a trunk group of uplink ports 18-21 to monitor
Configuring UFD on Switch 1 CLI example
Configuring UFD on Switch 2 CLI example
Turn UFD on
 Configuring Uplink Failure Detection BBI example
 Apply, verify, and save the configuration 172
 Virtual router MAC address
Vrrp overview
Vrrp components
Virtual router
 Virtual Interface Router
Master and backup virtual router
Vrrp operation
Selecting the master Vrrp router
 Active-Active redundancy
Failover methods
 HP 10GbE switch extensions to Vrrp
Tracking Vrrp router priority
Parameter
 Configuring the switch for tracking
Virtual router deployment considerations
Assigning Vrrp virtual router ID
 Configure ports
High availability configurations
Active-Active configuration
Task 1 Configure Switch a
 179
High availability Configure client and server interfaces
Turn on Vrrp and configure two Virtual Interface Routers
Turn off Spanning Tree Protocol globally
 Task 2 Configure Switch B
 Vrrp Virtual Router 1#
Task 1 Configure Switch a BBI example
 Click Submit
 183
 184
Page
 High availability Enable Vrrp processing
 187
Click Submit Select Add Virtual Router
 Click Submit
 High availability 189
 Apply, verify, and save the configuration 190
 Troubleshooting tools
Troubleshooting tools
Port Mirroring
 Select the ports that you want to mirror
Configuring Port Mirroring CLI example
Enable Port Mirroring
View the current configuration
 Configuring Port Mirroring BBI example
 Click Add Mirrored Port
 Other network troubleshooting techniques
Page
 Index
Index
197
 198