Summary of the content on the page No. 1
HP 10Gb Ethernet BL-c Switch
Application Guide
Part number: 445946-001
First edition: June 2007
Summary of the content on the page No. 2
Legal notices © 2007 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change withouttice no . The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Microsoft®, Windows®, and Windows NT® are U.S. re gistere
Summary of the content on the page No. 3
Contents Contents Accessing the switch Introduction...........................................................................................................................................9 Additional references ...........................................................................................................................10 Typographical conventions....................................................................................................................10 Manage
Summary of the content on the page No. 4
Contents User access control..............................................................................................................................34 Setting up user IDs ..........................................................................................................................35 Ports and trunking Introduction.........................................................................................................................................36 Ports on the switc
Summary of the content on the page No. 5
Contents Introduction.........................................................................................................................................68 Overview............................................................................................................................................68 Bridge Protoco Data l Units ....................................................................................................................68 Determining the path fo r forward
Summary of the content on the page No. 6
Contents Using ACL Groups...............................................................................................................................90 ACL Metering and Re-marking...............................................................................................................91 Metering........................................................................................................................................91 Re-marking.......................................
Summary of the content on the page No. 7
Contents Configuring IGMP Snooping (CLI example).................................................................................121 Configuring IGMP Filtering (CLI example)....................................................................................122 Configuring a Static Mrou ter (CLI example).................................................................................122 Configuring IGMP Snooping (BBI example)................................................................
Summary of the content on the page No. 8
Contents High availability Introduction.......................................................................................................................................167 Uplink Failure Detection......................................................................................................................167 Failure Detection Pair.....................................................................................................................168 Spanning Tree Protocol w
Summary of the content on the page No. 9
Accessing the switch Accessing the switch Introduction This guide will help you plan, implement, and adminis ter the switch software for the HP 10Gb Ethernet BL-c Switch. Where possible, each section provides feature overviews, usage examples, and configuration instructions. • “Accessing the switch” describes how to configure an d view information and statistics on the switch over an IP network. This chapter also discusses different methods to manage the switch for remote administ
Summary of the content on the page No. 10
Accessing the switch Additional references Additional information about installing and configug the swit rin ch is available in the following guides, which are available at http://www.hp.com/go/bladesystem/documentation. • HP 10Gb Ethernet BLc- Switch User Guide • HP 10Gb Ethernet BLc- Switch Command Reference Guide • HP 10Gb Ethernet BLc- Switch ISCLI Reference Guide • HP 10Gb Ethernet BL-c Switch Brow ser-based Interface Reference Guide • HP 10Gb Ethernet BL-c Switch Quick Setup
Summary of the content on the page No. 11
Accessing the switch ○ Untagged ○ Port VLAN ID (PVID): 4095 • VLAN 4095—Management VLAN 4095 isolates magement traffic within the na HP 10GbE switch. VLAN 4095 contains only one member port (p ort 17). No other ports can be members of VLAN 4095. • Interface 250—Management interface 250 is assoatcied with VLAN 4095. No other interfaces can be associated with VLAN 4095. You can config ure the IP address of the management interface manually or through Dynamic Ho st Control Protocol
Summary of the content on the page No. 12
Accessing the switch Using the command line interfaces The command line interface (CLI) can be accessed via local terminal coecti nn on or a remote session using Telnet or SSH. The CLI is the most direct method for collecting switch information and performing switch configuration. The HP 10GbE switch provides two CLI modes: Th menu e -based AOS CLI, and the tree-based ISCLI. You can set the HP 10GbE switch to use either CLI mode. The Main Menu of the AOS CLI, with adminis trator p
Summary of the content on the page No. 13
Accessing the switch The following example shows how to manually configure an IP address on the switch: 1. Configure an IP interface for th e Telnet connection, using the sa mple IP address of 205.21.17.3. 2. The pending subnet mask address and broadc ast address are automatically calculated. >> # /cfg/l3/if 1 (Select IP interface 1) >> IP Interface 1# addr 205.21.17.3 (Assign IP address for the interface) Current IP address: 0.0.0.0 New pending IP address:
Summary of the content on the page No. 14
Accessing the switch Using Simple Network Management Protocol The switch software provides SNMP v1.0 and SN MP v3.0 support for access through any network management software, such as HP-OpenView. SNMP v1.0 To access the SNMP agent on the switch, the read and write community strings on the SNMP manager should be configured to match those on the switc Thh. e default read community string on the switch is public and the default write community string is private. The read and write
Summary of the content on the page No. 15
Accessing the switch User configuration Users can be configured to use th e authentication/privacy options. The HP 10GbE switch supports two authentication algorithms: MD5 and SHA, as specified in the following command: /cfg/sys/ssnmp/snmpv3/usm /auth md5|sha 1. To configure a user with name admin, authentication type MD5, authentication password of admin, and privacy option DES with privacy password of admin, use the following CLI commands: >> # /cfg/sys/ssnmp/snmpv3/usm 5 >>
Summary of the content on the page No. 16
Accessing the switch View based configurations CLI user equivalent To configure an SNMP user equivalent to the CLI user, use the following configuration: /c/sys/ssnmp/snmpv3/usm 4 name "usr" (Configure the user) /c/sys/ssnmp/snmpv3/access 3 name "usrgrp" (Configure access group 3) rview "usr" wview "usr" nview "usr" /c/sys/ssnmp/snmpv3/group 4 (Assign user to access group 3) uname usr gname usrg
Summary of the content on the page No. 17
Accessing the switch CLI oper equivalent To configure an SNMP user equivalent to the CLI oper, use the following configuration: /c/sys/ssnmp/snmpv3/usm 5 name "oper" (Configure the oper) /c/sys/ssnmp/snmpv3/access 4 name "opergrp" (Configure access group 4) rview "oper" wview "oper" nview "oper" /c/sys/ssnmp/snmpv3/group 4 (Assign oper to access group 4) uname oper gname opergrp /c/sys/ssnmp/snmp
Summary of the content on the page No. 18
Accessing the switch 3. Configure an entry in the notify table. /c/sys/ssnmp/snmpv3/notify 10 (Assign user to the notify table) name v1trap tag v1trap 4. Specify the IP address and other trap parameters in the Target Address( targetAddr) and Target Parameters (targetParam) tables. Use the following command to spec ify the user name used with this targetParam table: c/sys/ssnmp/snmpv3/tparam /uname /c/sys/ssnmp/snmpv3/taddr 10 (Define an IP address to send traps) name
Summary of the content on the page No. 19
Accessing the switch SNMPv2 trap host configuration The SNMPv2 trap host configuration is similar to the SNMPv1 trap host configuration. Wherever you specify the model, specify snmpv2 instead of snmpv1. c/sys/ssnmp/snmpv3/usm 10 (Configure user named “v2trap”) name "v2trap" /c/sys/ssnmp/snmpv3/access 10 (Define access group to view SNMPv2 traps) name "v2trap" model snmpv2 nview "iso" /c/sys/ssnmp/snmpv3/group 10 (Assign user to the access group
Summary of the content on the page No. 20
Accessing the switch The following example shows how to configure a SNMPv3 uv3trap ser with authentication only: /c/sys/ssnmp/snmpv3/usm 11 (Configure user named “v3trap”) name "v3trap" auth md5 authpw v3trap /c/sys/ssnmp/snmpv3/access 11 (Define access group to view SNMPv3 traps) name "v3trap" level authNoPriv nview "iso" /c/sys/ssnmp/snmpv3/group 11 (Assign user to the access group) uname v3trap gname v3t