HP Switch 6208M-SX Manual de usuario

advanced configuration and management guide www.hp.com/go/hpprocurve hp procurve routing switches 9304m, 9308m, and 6308m-sx and the hp procurve switc

ENABLE ROUTE REDISTRIBUTION ...8-28 DISABLE OR RE

Rate Limiting NOTE: The deny option is not applicable to rate limiting. Always specify permit when configuring an ACL for use in a rate limiting rul

Advanced Configuration and Management Guide NOTE: The bits appear in this order in the IP precedence field and the software reads them from right to

Rate Limiting CLI Syntax Syntax: [no] rate-limit input | output [access-group <num>] <average-rate> <normal-burst-size> <excess-b

Advanced Configuration and Management Guide • 4 – flash override precedence • 5 – critical precedence • 6 – internetwork control precedence • 7 –

Rate Limiting 187500 conform-action set-prec-transmit 5 exceed-action drop The following rule applies to traffic that matches ACL 103. Like the previ

Advanced Configuration and Management Guide Disabling Rate Limiting Exemption for Control Packets By default, the device does not apply Adaptive Rate

Chapter 5 Configuring Spanning Tree Protocol (STP) The Spanning Tree Protocol (STP) eliminates Layer 2 loops in networks, by selectively blocking some

Installation and Getting Started Guide STP Parameters and Defaults Table 5.1 lists the default STP bridge parameters. The bridge parameters affect th

Configuring Spanning Tree Protocol (STP) Enabling or Disabling the Spanning Tree Protocol (STP) You can enable or disable STP on the following levels:

Installation and Getting Started Guide Changing STP Bridge and Port Parameters Table 5.1 on page 5-2 and Table 5.2 on page 5-2 list the default STP pa

Advanced Configuration and Management Guide CONFIGURING GLOBAL PARAMETERS ...

Configuring Spanning Tree Protocol (STP) 5. Modify the bridge STP parameters to the values desired. 6. Click Apply to save the changes to the device

Installation and Getting Started Guide 2. Click on the plus sign next to Configure in the tree view to display the configuration options. 3. Select

Configuring Spanning Tree Protocol (STP) Displaying STP Information You can display the following STP information: • All the global and interface STP

Installation and Getting Started Guide The show span command shows the following information. Table 5.3: CLI Display of STP Information This Field...

Configuring Spanning Tree Protocol (STP) Table 5.3: CLI Display of STP Information (Continued) State The port’s STP state. The state can be one of t

Installation and Getting Started Guide Table 5.4: Web Management Display of STP Information This Field... Displays... STP Bridge Parameters (global p

Configuring Spanning Tree Protocol (STP) Table 5.4: Web Management Display of STP Information (Continued) State The port’s STP state. The state can

Installation and Getting Started Guide STP configured to ON, priority is level0, flow control enabled mirror disabled, monitor disabled Not member of

Configuring Spanning Tree Protocol (STP) Maximum PORT-VLAN entries: 16 legend: [S=Slot] PORT-VLAN 1, Name DEFAULT-VLAN, Priority level0, Spanning tree

Installation and Getting Started Guide In addition, Fast Port Span enhances overall network performance in the following ways: • Fast Port Span reduc

CHANGING THE KEEP ALIVE TIME AND HOLD TIME ...10-23 ENABLING FAST EXTERNAL FA

Configuring Spanning Tree Protocol (STP) 4. Select the Save link at the bottom of the panel. Select Yes when prompted to save the configuration chan

Installation and Getting Started Guide Fast Uplink Span group on the device. All Fast Uplink Span ports are members of the same Fast Uplink Span grou

Configuring Spanning Tree Protocol (STP) To remove a Fast Uplink Span group or to remove individual ports from a group, use “no” in front of the appro

Installation and Getting Started Guide • Maximum Age – The interval a bridge will wait for receipt of a hello packet before initiating a topology cha

Configuring Spanning Tree Protocol (STP) To verify that single STP is in effect, enter the following command at any level of the CLI: HP9300(config) s

Installation and Getting Started Guide Untagged Ports: (S4) 17 18 19 20 21 22 23 24 Untagged Ports: (S6) 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

Configuring Spanning Tree Protocol (STP) When PVST is enabled on an HP port, that port sends BPDUs in PVST format instead of HP’s spanning tree format

Installation and Getting Started Guide Displaying PVST Information To display PVST information, use the following CLI method. USING THE CLI To display

Chapter 6 Configuring IP This chapter describes the Internet Protocol (IP) parameters on HP ProCurve routing switches and switches and how to configur

Installation and Getting Started Guide Overview The HP Procurve HP 6208M-SX switch and HP 9304M, HP 9308M, and HP 6308M-SX routing switches support In

Advanced Configuration and Management Guide DYNAMICALLY REQUESTING A ROUTE REFRESH FROM A BGP4 NEIGHBOR ...10-114 C

Configuring IP The HP 6208M-SX Switch You can configure an IP address on the HP 6208M-SX for management access to the switch. IP address is required

Installation and Getting Started Guide address and TCP or UDP port listed in the session table entry and sending the packet to a queue on the outgoing

Configuring IP Here is an example of a static ARP entry: Index IP Address MAC Address Port 1 207.95.6.111 0800.093b.d210 1/1 Each entry lists th

Installation and Getting Started Guide To display the IP route table, see the following: • “Displaying the IP Route Table” on page 6-90 – routing swit

Configuring IP The switch or routing switch selects the session table instead of the IP forwarding table for fast-path forwarding for the following fe

Installation and Getting Started Guide For configuration information, see the following: • Virtual Router Redundancy Protocol Extended (VRRPE) – see

Configuring IP Basic IP Parameters and Defaults – Routing Switches IP is enabled by default. The following IP-based protocols are all disabled by def

Installation and Getting Started Guide IP Global Parameters – Routing Switches Table 6.1 lists the IP global parameters for routing switches. Table 6.

Configuring IP Table 6.1: IP Global Parameters – routing switches (Continued) Directed broadcast forwarding A directed broadcast is a packet containin

Installation and Getting Started Guide Table 6.1: IP Global Parameters – routing switches (Continued) Domain name for Domain Name Server (DNS) resolve

CONFIGURATION EXAMPLES ...12-30 VRRP

Configuring IP Table 6.1: IP Global Parameters – routing switches (Continued) Origination of default routes You can enable a router to originate defau

Installation and Getting Started Guide IP Interface Parameters – Routing Switches Table 6.2 lists the interface-level IP parameters for routing switch

Configuring IP Table 6.2: IP Interface Parameters – routing switches (Continued) UDP broadcast forwarding The router can forward UDP broadcast packets

Installation and Getting Started Guide Basic IP Parameters and Defaults – HP 6208M-SX IP is enabled by default. The following tables list the switch

Configuring IP Table 6.3: IP Global Parameters – switch (Continued) Domain name for Domain Name Server (DNS) resolver A domain name (example: amaynes

Installation and Getting Started Guide Configuring IP Parameters – Routing Switches The following sections describe how to configure IP parameters. S

Configuring IP USING THE WEB MANAGEMENT INTERFACE To assign an IP address and mask to a router interface: 1. Log on to the device using a valid user

Installation and Getting Started Guide HP9300(config-lbif-1)# ip address 10.0.0.1/24 Syntax: interface loopback <num> The <num> value can

Configuring IP For more information about VLANs and how to configure them, see “Configuring VLANs” on page 16-1. USING THE CLI To add a virtual interf

Installation and Getting Started Guide HP9300(config)# ip dns domain-name newyork.com HP9300(config)# ip dns server-address 209.157.22.199 205.96.7.15

Advanced Configuration and Management Guide DISPLAYING THE IPX FORWARDING CACHE ...

Configuring IP USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-only or read-write access. T

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write

Configuring IP Changing the Router ID In most configurations, a routing switch has multiple IP addresses, usually configured on different interfaces.

Installation and Getting Started Guide Specifying a Single Source Interface for Telnet, TACACS/TACACS+, or RADIUS Packets When the routing switch orig

Configuring IP HP9300(config)# ip tacacs source-interface ve 1 The commands in this example configure virtual interface 1, assign IP address 10.0.0.3/

Installation and Getting Started Guide address for the IP address. The ARP cache maps IP addresses to MAC addresses. The cache also lists the port a

Configuring IP 5. Enter a value from 0 – 240 into the ARP Age field. 6. Click the Apply button to save the change to the device’s running-config fil

Installation and Getting Started Guide To display the ARP cache and static ARP table, see the following: • To display the ARP table, see “Displaying

Configuring IP 10. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-config

Installation and Getting Started Guide 4. Enter the new value for the cache size. The value you enter specifies the maximum number of entries the ca

802.1P TAGGING ...16-5 SPA

Configuring IP NOTE: A less common type, the all-sub-nets broadcast, goes to all directly-attached sub-nets. Forwarding for this broadcast type also

Installation and Getting Started Guide USING THE CLI To disable forwarding of IP source-routed packets, enter the following command: HP9300(config)# n

Configuring IP You can selectively disable the following types of Internet Control Message Protocol (ICMP) messages: • Echo messages (ping messages)

Installation and Getting Started Guide Syntax: [no] ip icmp unreachable [network | host | protocol | administration | fragmentation-needed | port | so

Configuring IP sources to the same destination, the routing switch places the route in the IP route table. • OSPF – See RIP, but substitute “OSPF” fo

Installation and Getting Started Guide • Path redundancy – When you add multiple static IP routes for the same destination, but give the routes diffe

Configuring IP HP9300(config)# ip route 192.128.2.69 255.255.255.0 ethernet 4/1 The command in the example above configures a static IP route for dest

Installation and Getting Started Guide 4. Click on the General link to display the IP configuration panel. 5. Click the Static Route link. • If the

Configuring IP To display the maximum value for your device, enter the show default values command. The maximum number of static IP routes the system

Installation and Getting Started Guide The following commands configure static IP routes to the same destination, but with different metrics. The rou

Advanced Configuration and Management Guide DISPLAYING SYSTEM-WIDE VLAN INFORMATION ...

Configuring IP NOTE: If you specify 16, RIP considers the metric to be infinite and thus also considers the route to be unreachable. 10. Optionally

Installation and Getting Started Guide Two static routes to 192.168.7.0/24: --Standard static route through gateway 192.168.6.157, with metric 1 --Nul

Configuring IP Two static routes to 192.168.7.0/24: --Interface-based route through port 1/1, with metric 1. --Standard static route through gateway 1

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write

Configuring IP When the software uses the default network route, it also uses the default network route’s next hop gateway as the gateway of last reso

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE You cannot configure a default network route using the Web management interf

Configuring IP Here are the default administrative distances on the HP routing switch: • Directly connected – 0 (this value is not configurable) • S

Installation and Getting Started Guide The load sharing state for all the route sources is based on the state of IP load sharing. Since IP load shari

Configuring IP Response to Path State Changes If one of the load-balanced paths to a cached destination becomes unavailable, or the IP route table rec

Installation and Getting Started Guide H6 192.168.2.155 H5 192.168.2.193 H4 192.168.2.175 H9 H3 192.168.1.218 H2 192.168.1.170 H1 192.168.7.1 H8H7 IP

QUALITY-OF-SERVICE POLICIES ... C-5 LAYER 3 PO

Configuring IP H6 192.168.2.155 H5 192.168.2.193 H4 192.168.2.175 H9 H3 192.168.1.218 H2 192.168.1.170 H1 192.168.7.1 H8H7 IP Forwarding Cache Host-Ba

Installation and Getting Started Guide Figure 6.7 shows an example of IP load sharing cache entries for network-based IP load sharing. The network in

Configuring IP M = A number from 1 to the maximum number of load-sharing paths. This value increases by 1 until it reaches the maximum, then reverts

Installation and Getting Started Guide Table 6.7: Path Selection for Network-Based IP Load Sharing (Continued) 5 3 3 2 4 2 5 2 6 2 7 2 8 2 6 3

Configuring IP6 - 57As shown in Table 6.7, the results of the network-based IP load sharing algorithm provide evenly-distributed load sharing. Figure

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write

Configuring IP NOTE: The host-based load sharing for the destination takes effect only if the IP route table contains an entry that exactly matches t

Installation and Getting Started Guide NOTE: If the setting for the maximum number of paths is lower than the actual number of equal-cost paths, the

Configuring IP NOTE: To place a change to the high-performance mode into effect, you must reload the software after saving the change to the startup-

Installation and Getting Started Guide HP9300(config)# show ip dr-aggregate Syntax: show ip dr-aggregate [<ip-addr>] If you specify an IP addres

Advanced Configuration and Management Guide xviii

Configuring IP NOTE: You can configure IRDP parameters only an individual port basis. To do so, IRDP must be disabled globally and enabled only on i

Installation and Getting Started Guide 7. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration chang

Configuring IP • The entry number – the entry’s sequence number in the RARP table. • The MAC address of the boot client. • The IP address you want

Installation and Getting Started Guide 6. Click the Apply button to save the change to the device’s running-config file. 7. Select the Save link at

Configuring IP 7. Enter the IP address. 8. Click the Add button to save the change to the device’s running-config file. 9. Select the Save link at

Installation and Getting Started Guide NOTE: If you disable forwarding for a UDP application, forwarding of client requests received as broadcasts to

Configuring IP USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The System con

Installation and Getting Started Guide 5. Select the port (and slot if applicable) on behalf of which the UDP helper packets will be forwarded. 6. E

Configuring IP BootP/DHCP Forwarding Parameters The following parameters control the routing switch’s forwarding of BootP/DHCP requests: • Helper add

Installation and Getting Started Guide Changing the Maximum Number of Hops to a BootP Relay Server Each BootP/DHCP request includes a field Hop Count

Book 2: Advanced Configuration and Management Guide for the HP ProCurve Routing Switches 9304M, 9308M, 6308M-SX and the HP ProCurve Switch 6208M-SX (S

Chapter 1 Getting Started Introduction This guide describes how to install, configure, and monitor the following devices: • HP ProCurve Routing Switc

Configuring IP Configuring IP Parameters – HP 6208M-SX The following sections describe how to configure IP parameters on the HP 6208M-SX. NOTE: This

Installation and Getting Started Guide 5. Enter the IP address in the IP address field. 6. Enter the sub-net mask in the Subnet Mask field. 7. Ente

Configuring IP 5. Click the Apply button to save the change to the device’s running-config file. 6. Select the Save link at the bottom of the dialog

Installation and Getting Started Guide 2. Click on the plus sign next to Command in the tree view to list the command options. 3. Select the Trace R

Configuring IP Step 3: DHCP Server generates IP addresses for Hosts 1,2,3 and 4. All IP address are assigned Server DHCP Server 207.95.7.6 Router 192

Installation and Getting Started Guide DHCP Server 207.95.7.6 Server Step 3: Router Host 1 200.95.6.x Host 2 192.95.5.x Sub-net 1 Sub-net 2 Hub HP Swi

Configuring IP Step 4: DHCP Server extracts the gateway address from each packet and assigns IP addresses for each host within the appropriate range.

Installation and Getting Started Guide Syntax: dhcp-gateway-list <num> <ip-addr> USING THE WEB MANAGEMENT INTERFACE 1. Log on to the devi

Configuring IP In addition to the information described below, you can display the following IP information. This information is described in other p

Installation and Getting Started Guide This display shows the following information. Table 6.8: CLI Display of Global IP Configuration Information – r

Installation and Getting Started Guide Terminology The following table defines basic product terms used in this guide. Product Terms Term Definition

Configuring IP Table 6.8: CLI Display of Global IP Configuration Information – routing switch (Continued) This Field... Displays... Policies Index T

Installation and Getting Started Guide Loopback 1 1.2.3.4 YES NVRAM down down Syntax: show ip interface [ethernet <portnum>] | [loopback &l

Configuring IP This display shows the following information. Table 6.10: Web Display of IP Interface Information This Field... Displays... Port # Th

Installation and Getting Started Guide The <mask> parameter lets you specify a mask for the mac-address <xxxx.xxxx.xxxx> parameter, to dis

Configuring IP Table 6.12: Web Display of ARP Cache – routing switch This Field... Displays... Node The IP address of the device. MAC Address The M

Installation and Getting Started Guide NOTE: The <ip-mask> parameter and <mask> parameter perform different operations. The <ip-mask&

Configuring IP The show ip cache command displays the following information. Table 6.14: CLI Display of IP Forwarding Cache – routing switch This Fiel

Installation and Getting Started Guide This display shows the following information. Table 6.15: Web Display of IP Forwarding Cache Information – rout

Configuring IP Start index: 1 B:BGP D:Connected R:RIP S:Static O:OSPF *:Candidate default Destination NetMask Gateway Port Cost Type 1.1.0.0

Installation and Getting Started Guide 53 209.159.39.0 255.255.255.0 207.95.6.101 1/1 1 S 54 209.159.40.0 255.255.255.0 207.95.6.101 1/1 1 S 55 209.15

Getting Started method for electronically searching either individual chapters or an entire manual for specific topics. For a brief description of the

Configuring IP Clearing IP Routes If needed, you can clear the entire route table or specific individual routes. procedures. USING THE CLI To clear al

Installation and Getting Started Guide TCP Statistics 0 active opens, 0 passive opens, 0 failed attempts 0 active resets, 0 passive resets, 0 input er

Configuring IP Table 6.17: CLI Display of IP Traffic Statistics – routing switch (Continued) parameter The number of Parameter Problem messages sent

Installation and Getting Started Guide Table 6.17: CLI Display of IP Traffic Statistics – routing switch (Continued) out segments The number of TCP s

Configuring IP This display shows the following information. Table 6.18: Web Display of IP Traffic Statistics – routing switch This Field... Displays

Installation and Getting Started Guide Table 6.18: Web Display of IP Traffic Statistics – routing switch (Continued) Received Redirect The number of

Configuring IP Table 6.18: Web Display of IP Traffic Statistics – routing switch (Continued) Active Resets The number of TCP connections this device

Installation and Getting Started Guide Displaying IP Information – HP 6208M-SX You can display the following IP configuration information statistics o

Configuring IP USING THE WEB MANAGEMENT INTERFACE To display the management IP address and default gateway: 1. Log on to the device using a valid use

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE To display the ARP cache: 1. Log on to the device using a valid user name a

Installation and Getting Started Guide • BGP4 re-advertises BGP routes even when OSPF or RIP routes to the same destination have a lower cost • Redi

Configuring IP 1 current active tcbs, 4 tcbs allocated, 0 tcbs freed 0 tcbs protected 0 active opens, 0 passive opens, 0 failed attempts 0 active rese

Installation and Getting Started Guide Table 6.22: CLI Display of IP Traffic Statistics – switch (Continued) echo The number of Echo messages sent or

Configuring IP Table 6.22: CLI Display of IP Traffic Statistics – switch (Continued) out segments The number of TCP segments sent by the device. retr

Installation and Getting Started Guide Table 6.23: Web Display of IP Traffic Statistics – switch (Continued) Sent Errors This information is used by

Configuring IP Table 6.23: Web Display of IP Traffic Statistics – switch (Continued) This Field... Displays... UDP statistics Received The number of

Installation and Getting Started Guide 6 - 108

Chapter 7 Configuring RIP Routing Information Protocol (RIP) is an IP route exchange protocol that uses a distance vector (a number representing dista

Installation and Getting Started Guide Table 7.1: RIP Global Parameters Parameter Description Default See page... RIP state Routing Information Pr

Configuring RIP RIP Interface Parameters Table 7.2 lists the interface-level RIP parameters and their default values, and indicates where you can find

Installation and Getting Started Guide HP9300(config)# write memory Syntax: [no] router rip USING THE WEB MANAGEMENT INTERFACE 1. Log on to the devic

Getting Started • Super Aggregated VLANs • Support for simultaneous Telnet configuration by multiple users • New CLI command for displaying dynamic

Configuring RIP Configuring Metric Parameters By default, a routing switch port increases the cost of a RIP route that is learned on the port by one.

Installation and Getting Started Guide The software adds the offset value to the routing metric (cost) of the routes that match the ACL. If a route m

Configuring RIP Configuring Redistribution You can configure the routing switch to redistribute routes learned through Open Shortest Path First (OSPF)

Installation and Getting Started Guide 3. Click on the plus sign next to RIP in the tree view to expand the list of RIP option links. 4. Click on th

Configuring RIP HP9300(config-rip-router)# default-metric 10 This command assigns a RIP metric of 10 to each route that is redistributed into RIP. Syn

Installation and Getting Started Guide Changing the Update Interval for Route Advertisements The update interval specifies how often the routing switc

Configuring RIP USING THE WEB MANAGEMENT INTERFACE To enable learning of default RIP routes: 1. Log on to the device using a valid user name and pass

Installation and Getting Started Guide • If a RIP neighbor filter is already configured and you are adding a new filter, click on the Add Neighbor Fi

Configuring RIP USING THE CLI To enable poison reverse on an interface, enter commands such as the following: HP9300(config)# interface ethernet 1/1 H

Installation and Getting Started Guide NOTE: A route is defined by the destination’s IP address and network mask. NOTE: Once you define a RIP route

Installation and Getting Started Guide 1 - 6

Configuring RIP 5. Enter the filter ID. 6. Select either Permit or Deny as the action. 7. Enter an IP address and mask or the wildcard value, 0.0.0

Installation and Getting Started Guide 2. Click on the plus sign next to Configure in the tree view to expand the list of configuration options. 3.

Configuring RIP This display shows the following information. Table 7.3: CLI Display of RIP Filter Information This Field... Displays... Route filter

Installation and Getting Started Guide USING THE WEB MANAGEMENT INTERFACE To display RIP filter information: 1. Log on to the device using a valid us

Chapter 8 Configuring OSPF This chapter describes how to configure OSPF on HP routing switches using the CLI and Web management interface. To display

Advanced Configuration and Management Guide You can further limit the broadcast area of flooding by defining an area range. The area range allows you

Configuring OSPF Designated Router Election In a network with no designated router and no backup designated router, the neighboring router with the hi

Advanced Configuration and Management Guide When only one router on the network claims the DR role despite neighboring routers with higher priorities

Configuring OSPF8 - 5Figure 8.4 AS External LSA reductionNotice that both Router D and Router E have a route to the other routing domain through Route

Advanced Configuration and Management Guide Algorithm for AS External LSA Reduction Figure 8.4 shows an example in which the normal AS External LSA re

Chapter 2 Quality of Service (QoS) Software release 06.6.X provides the following enhancements to QoS on the HP 9304M, HP 9308M, and HP 6208M-SX routi

Configuring OSPF Since dynamic memory allocation is automatic and requires no configuration, the following CLI commands and equivalent Web management

Advanced Configuration and Management Guide • Disable or re-enable load sharing. • Enable or disable default-information-originate. • Modify Shorte

Configuring OSPF Note Regarding Disabling OSPF If you disable OSPF, the routing switch removes all the configuration information for the disabled prot

Advanced Configuration and Management Guide The <num> | <ip-addr> parameter specifies the area number, which can be a number or in IP addr

Configuring OSPF Assign a Totally Stubby Area By default, the routing switch sends summary LSAs (LSA type 3) into stub areas. You can further reduce

Advanced Configuration and Management Guide The HP implementation of NSSA is based on RFC 1587. Figure 8.5 shows an example of an OSPF network contain

Configuring OSPF Configuring an NSSA To configure an NSSA, use one of the following methods. USING THE CLI To configure OSPF area 1.1.1.1 as an NSSA,

Advanced Configuration and Management Guide 6. Enter the area ID in the Area ID field. The ID can be a number or an IP address. 7. Select NSSA by c

Configuring OSPF NOTE: If the device already has an OSPF area range, a table listing the ranges is displayed. Click the Modify button to the right o

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Advanced Configuration and Management Guide • You can classify packets and assign them to specific queues based on the following criteria: • Incomin

Configuring OSPF 5. Click on the Interface link. • If the device does not have any OSPF interfaces, the OSPF Interface configuration panel is displa

Advanced Configuration and Management Guide Modify Interface Defaults OSPF has interface parameters that you can configure. For simplicity, each of t

Configuring OSPF 11. Modify the default values of the following interface parameters as needed: hello interval, retransmit interval, transmit delay,

Advanced Configuration and Management Guide Block Flooding of Outbound LSAs on Specific OSPF Interfaces By default, the routing switch floods all outb

Configuring OSPF OSPF Area 2 HP9308C Router ID 209.157.22.1 HP9308A Router ID 10.0.0.1 OSPF Area 0 OSPF Area 1 “transit area” HP9308B Figure 8.6 Defi

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE To configure a virtual link: 1. Log on to the device using a valid use

Configuring OSPF 8. Enter the router ID of the neighbor router. 9. Modify the default settings of the following parameters if needed: hello interva

Advanced Configuration and Management Guide The MD5 method of authentication encrypts the authentication key you define. The authentication is includ

Configuring OSPF ASBR (Autonomous System Border Router) RIP Domain OSPF Domain Figure 8.7 Redistributing OSPF and static routes to RIP routes USING T

Advanced Configuration and Management Guide Syntax: deny | permit redistribute <filter-num> all | bgp | connected | rip | static [address <ip

Quality of Service (QoS) Queuing Methods In software release 06.6.X and higher, you can configure the device to use one of the following queuing metho

Configuring OSPF 6. Optionally, enter the IP address and mask if you want to filter the redistributed routes for a specific network range. 7. Option

Advanced Configuration and Management Guide Syntax: default-metric <value> The <value> can be from 1 – 16,777,215. The default is 10. USI

Configuring OSPF 5. Select the Enable radio button next to Redistribution. 6. Click the Apply button to apply the change to the device’s running-con

Advanced Configuration and Management Guide Disable or Re-enable Load Sharing HP routing switches can load share among up to eight equal-cost IP route

Configuring OSPF Configure External Route Summarization When the routing switch is an OSPF Autonomous System Boundary Router (ASBR), you can configure

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE You cannot configure OSPF route summarization using the Web management

Configuring OSPF Modify SPF Timers The routing switch uses the following timers when calculating the shortest path for OSPF routes: • SPF delay - Whe

Advanced Configuration and Management Guide 6. Click the Apply button to save the change to the device’s running-config file. 7. Select the Save lin

Configuring OSPF The pacing interval, which is the interval at which the routing switch refreshes an accumulated group of LSAs, is configurable to a r

Advanced Configuration and Management Guide • virtual-interface-receive-bad-packet-trap • interface-retransmit-packet-trap • virtual-interface-retr

Advanced Configuration and Management Guide Configuring the Queues Each of the four queues has the following configurable parameters: • The queue nam

Configuring OSPF 5. Select Disable next to RFC 1583. 6. Click the Apply button to save the change to the device’s running-config file. 7. Select th

Advanced Configuration and Management Guide The <num> indicates the number of OSPF routes allowed and can be from 4000 – 32000. The change take

Configuring OSPF 7. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-confi

Advanced Configuration and Management Guide Link State Database Approaching Overflow Trap: Enabled OSPF Area currently defined: Area-ID Area-Type Co

Configuring OSPF Table 8.2: CLI Display of OSPF Area Information (Continued) Type The area type, which can be one of the following: • nssa • normal

Advanced Configuration and Management Guide Table 8.3: CLI Display of OSPF Neighbor Information (Continued) Pri The OSPF priority of the neighbor. T

Configuring OSPF 3. Click on the plus sign next to OSPF in the tree view to expand the list of OSPF option links. 4. Click on the Neighbor link. Dis

Advanced Configuration and Management Guide Table 8.4: CLI Display of OSPF Route Information (Continued) Mask The network mask for the route. Path_Co

Configuring OSPF USING THE WEB MANAGEMENT INTERFACE You cannot display the OSPF route table using the Web management interface. Displaying OSPF Extern

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Copyright 2000 Hewlett-Packard Company All rights reserved. Reproduction, adaptation or translation without prior written permission is prohibited, ex

Quality of Service (QoS) Changing the Minimum Bandwidth Percentages of the Queues If you are using the weighted fair queuing mechanism instead of the

Configuring OSPF For example, to determine an external LSA’s index number, enter the following command: HP9300> show ip ospf external-link-state In

Advanced Configuration and Management Guide Displaying OSPF ABR and ASBR Information To display OSPF ABR and ASBR information for the routing switch,

Chapter 9 Configuring IP Multicast Protocols This chapter describes how to configure HP routing switches for Protocol Independent Multicast (PIM) and

Advanced Configuration and Management Guide Upstream: Represents the direction from which a router receives multicast data packets. An upstream route

Configuring IP Multicast Protocols USING THE WEB MANAGEMENT INTERFACE To modify the default value for the IGMP query interval: 1. Log on to the devic

Advanced Configuration and Management Guide Enabling Hardware Forwarding for all Fragments of IP Multicast Packets By default, an HP routing switch fo

Configuring IP Multicast Protocols For example, in Figure 9.1 the sender with address 207.95.5.1 is sending multicast packets to the group 229.225.0.1

Advanced Configuration and Management Guide Group Member Group Member Leaf Node (No Group Members) R5 R3 R4 R6 R1R2 Leaf Node Leaf Node Video Conferen

Configuring IP Multicast Protocols Configuring PIM NOTE: This section describes how to configure the “dense” mode of PIM, described in RFC 1075. See

Advanced Configuration and Management Guide 8. If you are configuring an IP Tunnel, enter the IP address of the destination interface, the end point

Advanced Configuration and Management Guide The following table shows one full queue cycle using the default bandwidth percentages. qosp3 bandwidth %

Configuring IP Multicast Protocols 5. Enter a value from 10 – 3600 into the Neighbor Router Timeout field. 6. Click the Apply button to save the cha

Advanced Configuration and Management Guide A prune state is maintained until the prune timer expires or a graft message is received for the forwardin

Configuring IP Multicast Protocols Modifying Inactivity Timer The routing switch deletes a forwarding entry if the entry is not used to send multicast

Advanced Configuration and Management Guide 8. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration

Configuring IP Multicast Protocols • BSR – The Bootstrap Router (BSR) distributes RP information to the other PIM Sparse routers within the domain.

Advanced Configuration and Management Guide • Configure the following interface parameters: • Configure an IP address on the interface • Enable PIM

Configuring IP Multicast Protocols Syntax: [no] ip pim-sparse The commands in this example add an IP interface to port 2/2, then enable PIM Sparse on

Advanced Configuration and Management Guide By default, this command configures the routing switch as a candidate RP for all group numbers beginning w

Configuring IP Multicast Protocols Changing the Shortest Path Tree (SPT) Threshold In a typical PIM Sparse domain, there may be two or more paths from

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE You cannot configure PIM Sparse parameters using the Web management int

Quality of Service (QoS) Figure 2.1 illustrates a cycle through the queues. q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q3 q2 q3 q3 q3 q3

Configuring IP Multicast Protocols This display shows the following information. This Field... Displays... Global PIM Sparse mode settings Hello inte

Advanced Configuration and Management Guide TTL Threshold Following the TTL threshold value, the interface state is listed. The interface state can

Configuring IP Multicast Protocols Next bootstrap message in 00:00:20 Next Candidate-RP-advertisement in 00:00:10 RP: 207.95.7.1 group prefixes: 224.0

Advanced Configuration and Management Guide RP Indicates the IP address of the Rendezvous Point (RP). Note: This field appears only if this routing

-------------------------------Configuring IP Multicast Protocols Candidate-RP-advertisement period Indicates how frequently the BSR sends candidate

Advanced Configuration and Management Guide This display shows the following information. This Field... Displays... RP Indicates the IP address of t

Configuring IP Multicast Protocols Displaying Multicast Neighbor Information To display information about the routing switch’s IP Multicast neighbors,

Advanced Configuration and Management Guide HP9300(config-pim-router)# show ip pim flowcache Source Group Parent CamFlags CamIndex Fid Flags 1 20

Configuring IP Multicast Protocols This display shows the following information. This Field... Displays... (<source>, <group>) The comma

Advanced Configuration and Management Guide prune ports Indicates the physical ports on which the routing switch has received a prune notification (i

Advanced Configuration and Management Guide USING THE CLI To change the minimum guaranteed bandwidth percentages of the queues, enter commands such as

Configuring IP Multicast Protocols RegStop The number of Register Stop messages sent or received on the interface. Assert The number of Assert messa

Advanced Configuration and Management Guide9 - 30Figure 9.4 PIM Sparse domains joined by MSDP routersIn this example, the source for PIM Sparse multic

Configuring IP Multicast Protocols PIM Sparse RPF tree to send the message to its peers within the tree. In Figure 9.4, the MSDP router floods the So

Advanced Configuration and Management Guide Configuring MSDP Peers Use the following CLI method to configure an MSDP peer. USING THE CLI To configure

Configuring IP Multicast Protocols MSDP Summary Information (Continued) KA In The number of MSDP Keepalive messages the MSDP router has received from

Advanced Configuration and Management Guide MSDP Peer Information This Field... Displays... Total number of MSDP peers The number of MSDP peers conf

1 2 3 4 5 6 7 Configuring IP Multicast Protocols MSDP Peer Information (Continued) Notification Message Error Code Received If the MSDP router receive

Advanced Configuration and Management Guide MSDP Peer Information (Continued) This Field... Displays... TCP Statistics TCP connection state The stat

Configuring IP Multicast Protocols MSDP Peer Information (Continued) ReTrans The number of sequence numbers that the MSDP router retransmitted becaus

Advanced Configuration and Management Guide MSDP Source Active Cache (Continued) RP The RP through which receivers can access the group traffic from

Quality of Service (QoS) USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The

Configuring IP Multicast Protocols DVMRP Overview HP routing switches provide multicast routing with the Distance Vector Multicast Routing Protocol (D

Advanced Configuration and Management Guide Figure 9.5 Downstream broadcast of IP multicast packets from source host 9 - 40 GroupMemberGroupMemberLea

Configuring IP Multicast Protocols Figure 9.6 Pruning leaf nodes from a multicast tree Grafts to a Multicast Tree A DVMRP router restores pruned bran

Advanced Configuration and Management Guide Configuring DVMRP Enabling DVMRP on the Routing Switch and Interface Suppose you want to initiate the use

Configuring IP Multicast Protocols 11. Click Enable or Disable next to Encapsulation to enable or disable the feature. 12. Click the Add button to s

Advanced Configuration and Management Guide 5. Enter a value from 40 – 8000 into the Neighbor Router Timeout field. 6. Click the Apply button to sav

Configuring IP Multicast Protocols HP9300(config-dvmrp-router)# route-discard-timeout 150 Syntax: route-discard-timeout <40-8000> USING THE WEB

Advanced Configuration and Management Guide 3. Click on the plus sign next to DVMRP in the tree view to expand the list of DVMRP option links. 4. Cl

Configuring IP Multicast Protocols Modifying Trigger Interval The Trigger Interval defines how often trigger updates, which reflect changes in the net

Advanced Configuration and Management Guide Modifying the TTL The TTL defines the minimum value required in a packet in order for the packet to be for

Advanced Configuration and Management Guide 7. Select the Save link at the bottom of the dialog, then select Yes when prompted to save the configurat

Configuring IP Multicast Protocols 8. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to

Advanced Configuration and Management Guide 6. Select Enable next to Encapsulation. 7. Click the Add button to save the changes to the device’s runn

Configuring IP Multicast Protocols 4. Click on the Virtual Interface link to display the DVMRP Interface configuration panel. NOTE: If the device al

Advanced Configuration and Management Guide NOTE: In IP multicasting, a route is handled in terms of its source, rather than its destination. You can

Configuring IP Multicast Protocols PIM router D Server e3/19 Client e1/4 207.95.7.1 e1/5 207.95.8.10 e4/11 207.95.6.1 e3/11 PIM router CPIM router A e

Advanced Configuration and Management Guide Tracing the route for tree 209.157.23.188 0 207.95.7.2 0 207.95.7.2 Thresh 0 1 207.95.7.1 Thresh 0 2 2

Configuring IP Multicast Protocols Displaying Another Multicast Router’s Multicast Configuration The HP implementation of Mrinfo is based on the DVMRP

Advanced Configuration and Management Guide 9 - 56

Chapter 10 Configuring BGP4 This chapter provides details on how to configure Border Gateway Protocol version 4 (BGP4) on HP products using the CLI an

Advanced Configuration and Management Guide networks that share the same routing and administration characteristics. For example, a corporate intrane

Quality of Service (QoS) Assigning QoS Priorities to Traffic By default, traffic of the following categories is forwarded using the best-effort queue

Configuring BGP4 “AS_PATH”.) • Additional path attributes – A list of additional parameters that describe the route. The route origin and next hop ar

Advanced Configuration and Management Guide • INCOMPLETE is highest 7. If the routes have the same origin type, prefer the route with the lowest MED

Configuring BGP4 routing switch does not have a loopback interface, the default router ID is the lowest numbered IP address configured on the device.

Advanced Configuration and Management Guide Basic Configuration and Activation for BGP4 BGP4 is disabled by default. To enable BGP4 and place your HP

Configuring BGP4 HP9300(config-bgp-router)# no router bgp router bgp mode now disabled. All bgp config data will be lost when writing to flash! The W

Advanced Configuration and Management Guide • Optional – Define IP prefix lists. • Optional – Define neighbor distribute lists. • Optional – Define

Configuring BGP4 When Parameter Changes Take Effect Some parameter changes take effect immediately while others do not take full effect until the rout

Advanced Configuration and Management Guide Table 10.1: Maximum Memory Usage Platform Maximum Memory BGP4 Can Use Management module with 32 MB Note:

Configuring BGP4 12. Optionally enable automatic summarization of subnets at the classical IP boundaries (classes A, B, and C). 13. Optionally aggre

Advanced Configuration and Management Guide • Loopback interface 1, 9.9.9.9/24 • Loopback interface 2, 4.4.4.4/24 • Loopback interface 3, 1.1.1.1/2

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Configuring BGP4 USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The System c

Advanced Configuration and Management Guide 7. Click on Configure in the tree view to display the configuration options. 8. Click on IP to display t

Configuring BGP4 advertisement-interval <num> specifies the minimum delay (in seconds) between messages to the specified neighbor. The default

Advanced Configuration and Management Guide prefix-list <string> specifies an IP prefix list. You can use IP prefix lists to control routes to

Configuring BGP4 1. Enter the neighbor’s IP address in the IP Address field. 2. Enter a description in the Description field. 3. Select Enable next

Advanced Configuration and Management Guide 10. Select Enable next to Client To Client Reflection if this neighbor is a route-reflector client of the

Configuring BGP4 Adding a BGP4 Peer Group A peer group is a set of BGP4 neighbors that share common parameters. Peer groups provide the following ben

Advanced Configuration and Management Guide Configuration Rules The following rules apply to peer group configuration: • You must configure a peer gr

Configuring BGP4 • If you add a parameter to a peer group that already contains neighbors, the parameter value is applied to neighbors that do not al

Advanced Configuration and Management Guide Applying a Peer Group to a Neighbor After you configure a peer group, you can add neighbors to the group.

Quality of Service (QoS) USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The

Configuring BGP4 The <ip-addr> parameter specifies the IP address of the neighbor. USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device u

Advanced Configuration and Management Guide 3. Click on the plus sign next to BGP in the tree view to expand the list of BGP option links. 4. Click

Configuring BGP4 Changing the Maximum Number of Paths for BGP4 Load Sharing Load sharing enables the routing switch to balance traffic to a route acro

Advanced Configuration and Management Guide NOTE: The maximum number of BGP4 load sharing paths cannot be greater than the maximum number of IP load

Configuring BGP4 USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The System c

Advanced Configuration and Management Guide HP9300(config)# router bgp HP9300(config-bgp-router)# network 100.100.1.0/24 route-map set_net The first t

Configuring BGP4 7. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-confi

Advanced Configuration and Management Guide 5. Change the number in the Default Metric field. You can enter a number from 0 – 4294967295. 6. Click

Configuring BGP4 USING THE CLI To change the default administrative distances for EBGP, IBGP, and Local BGP, enter a command such as the following: HP

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Advanced Configuration and Management Guide Reassigning 802.1p Priorities to Different Queues Tagged priority applies to tagged packets that come in f

Configuring BGP4 NOTE: The auto summary feature summarizes only the routes that are redistributed from IGP into BGP4. NOTE: The auto summary feature

Advanced Configuration and Management Guide NOTE: Route reflection applies only among IBGP routers within the same AS. You cannot configure a cluste

Configuring BGP4 Software release 07.1.10 and higher handles the attributes as follows: • The routing switch adds the attributes only if it is a rout

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Configuring BGP4 Figure 10.4 shows an example of a BGP4 confederation. IBGP Sub-AS 64513 Router D AS 20 Router C This BGP4 router sees all traffic fro

Advanced Configuration and Management Guide USING THE CLI To configure four routing switches to be a member of confederation 10, consisting of two sub

Configuring BGP4 5. Enter the confederation ID in the Confederation ID field. The confederation ID must be different from the sub-AS numbers. You c

Advanced Configuration and Management Guide 3. Click on the plus sign next to BGP in the tree view to expand the list of BGP option links. 4. Click

Configuring BGP4 Modifying Redistribution Parameters By default, the router does not redistribute route information between BGP4 and the IP IGPs (RIP

Advanced Configuration and Management Guide 5. Select the source of the routes you want to redistribute into BGP4. You can select RIP, OSPF, Static,

Organization of Product Documentation Read Me First The “Read Me First” document includes software release information, a brief “Getting Started” sect

Quality of Service (QoS) 4. Click on the Bind link to display the QoS 802.1p to QoS Profile Binding configuration panel, as shown in the following fi

Configuring BGP4 The match internal | external1 | external2 parameter applies only to OSPF. This parameter specifies the types of OSPF routes to be r

Advanced Configuration and Management Guide Syntax: [no] bgp-redistribute-internal To disable redistribution of IBGP routes into RIP and OSPF, enter t

Configuring BGP4 209.157.22.26 0.0.0.255, then save the changes to the startup-config file, the value appears as 209.157.22.0/24 (if you have enabled

Advanced Configuration and Management Guide 12. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration

Configuring BGP4 • If BGP AS-path filters are already configured and you are adding a new one, click on the Add AS Path Filter link to display the BG

Advanced Configuration and Management Guide The <as-regular-expression> parameter specifies the AS path information you want to permit or deny t

Configuring BGP4 NOTE: You cannot apply the AS path ACLs to a neighbor using the Web management interface. You must use the CLI. The AS Path Filter

Advanced Configuration and Management Guide Table 10.2: BGP4 Special Characters for Regular Expressions (Continued) ^ A caret (when not used within b

Configuring BGP4 Table 10.2: BGP4 Special Characters for Regular Expressions (Continued) ( ) Parentheses allow you to create complex expressions. Fo

Advanced Configuration and Management Guide NOTE: If the filter is referred to by a route map’s match statement, the filter is applied in the order i

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Configuring BGP4 should not be advertised outside the sub-AS. This community type applies to confederations. • No Advertise – Filters for routes wit

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Configuring BGP4 Defining IP Prefix Lists An IP prefix list specifies a list of networks. When you apply an IP prefix list to a neighbor, the routing

Advanced Configuration and Management Guide • If a prefix list ACL is already configured and you are adding a new one, click on the Add IP Prefix Li

Configuring BGP4 To apply the IP Prefix List to a neighbor, use the following procedure: 1. In the tree view, click on the plus sign next to BGP unde

Advanced Configuration and Management Guide NOTE: The command syntax shown above is new beginning with software release 06.6.X. However, the neighbo

Configuring BGP4 12. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-conf

Advanced Configuration and Management Guide For example, when you configure parameters for redistributing routes into RIP, one of the optional paramet

Configuring BGP4 5. Enter the name of the route map in the Route Map Name field. 6. Enter the sequence (instance) number in the Sequence field. The

Advanced Configuration and Management Guide NOTE: The filters must already be configured. The community <num> parameter specifies a community A

Quality of Service (QoS) 4. Enter or edit the MAC address, if needed. Specify the address in the following format: xx-xx-xx-xx-xx-xx. 5. Change the

Configuring BGP4 12. Optionally enter an IP address against which you want to compare the route updates’ next-hop attribute. Enter the address in the

Advanced Configuration and Management Guide 5. Enter the name of the route map in the Route Map Name field. 6. Enter the sequence (instance) number

Configuring BGP4 10. Select the type of ACL or filter you are adding as a match condition. You can select more than one ACL or filter type. In this

Advanced Configuration and Management Guide USING THE CLI To construct a route map that matches based on the next-hop router, enter commands such as t

Configuring BGP4 The metric [+ | - ]<num> | none parameter sets the MED (metric) value for the route. The default MED value is 0. You can set t

Advanced Configuration and Management Guide 16. Optionally enter a local preference in the Local Preference and also select the checkbox in front of

Configuring BGP4 8. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-confi

Advanced Configuration and Management Guide The <half-life> parameter specifies the number of minutes after which the route’s penalty becomes ha

Configuring BGP4 1 – 20000 minutes. The default is four times the half-life setting. Thus, if you use the default half-life of 15 minutes, the maximu

Advanced Configuration and Management Guide • If you are modifying an existing BGP address filter, click on the Modify button to the right of the row

Advanced Configuration and Management Guide The <operator> parameter applies only if you use the tcp or udp parameter above. Use the <operat

Configuring BGP4 14. Enter the name of the route map in the Route Map Name field. 15. Enter the sequence (instance) number in the Sequence field. T

Advanced Configuration and Management Guide 19. Click on the checkbox next to Address Filter to indicate that you are using an address filter as a ma

Configuring BGP4 23. Select the checkbox in the Dampening section to specify that this route map is setting dampening parameters. 24. Edit the value

Advanced Configuration and Management Guide Using a Route Map To Configure Route Flap Dampening for a Specific Neighbor You can use a route map to con

Configuring BGP4 NOTE: If the device already has route maps, a table listing the route maps is displayed. Click the Modify button to the right of th

Advanced Configuration and Management Guide 22. Select the neighbor IP address from the IP Address field’s pulldown menu. 23. Select the traffic dir

Configuring BGP4 6. Click the Apply button to implement the change. Displaying and Clearing Route Flap Dampening Statistics The software provides man

Advanced Configuration and Management Guide Table 10.3: Route Flap Dampening Statistics Network The destination network of the route. From The neigh

Configuring BGP4 NOTE: If you have a lot of IBGP neighbors, you can configure some IBGP routers as route reflectors. By doing so, you can reduce the

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Quality of Service (QoS) Figure 2.2 and Figure 2.3 show the CLI syntax for configuring a Layer 4 QoS policy on an HP routing switch. <num> prior

Configuring BGP4 The <num> indicates the number of route-attribute entries allowed on the router. See “Memory Considerations” on page 10-9 for

Advanced Configuration and Management Guide Displaying BGP4 Information You can display the following configuration information and statistics for the

Configuring BGP4 Table 10.4: BGP4 Summary Information (Continued) Maximum Number of Paths Supported for Load Sharing The maximum number of route paths

Advanced Configuration and Management Guide Table 10.4: BGP4 Summary Information (Continued) State The state of this router’s neighbor session with e

Configuring BGP4 Table 10.4: BGP4 Summary Information (Continued) RtSent The number of BGP4 routes that the routing switch has sent to the neighbor.

Advanced Configuration and Management Guide Displaying Summary Neighbor Information To display information for a neighbor, use the following CLI metho

Configuring BGP4 Table 10.5: BGP4 Route Summary Information for a Neighbor (Continued) NLRIs Received in Update Message The number of routes received

Advanced Configuration and Management Guide Table 10.5: BGP4 Route Summary Information for a Neighbor (Continued) Peer Out of Memory Count for Statis

Configuring BGP4 The TCP statistics at the end of the display show status for the TCP session with the neighbor. Most of the fields show information

Advanced Configuration and Management Guide Table 10.6: BGP4 Neighbor Information (Continued) EBGP/IBGP Whether the neighbor session is an IBGP sess

Advanced Configuration and Management Guide continued from previous page udp eq gt bootpc | bootps | lt dns | tftp | neq ntp | radius | radius-old | r

Configuring BGP4 Table 10.6: BGP4 Neighbor Information (Continued) Time The amount of time this session has been in its current state. KeepAlive Th

Advanced Configuration and Management Guide Table 10.6: BGP4 Neighbor Information (Continued) Last Connection Reset Reason The reason the previous s

Configuring BGP4 Table 10.6: BGP4 Neighbor Information (Continued) Last Connection Reset Reason (cont.) • Reasons specific to the HP implementation:

Advanced Configuration and Management Guide Table 10.6: BGP4 Neighbor Information (Continued) Notification Sent If the router receives a NOTIFICATIO

Configuring BGP4 Table 10.6: BGP4 Neighbor Information (Continued) TCP Connection state The state of the connection with the neighbor. The connecti

Advanced Configuration and Management Guide Table 10.6: BGP4 Neighbor Information (Continued) UnAckSeq The current acknowledged sequence number. IRc

Configuring BGP4 Peer Out of Memory Count for: Receiving Update Messages:0, Accepting Routes(NLRI):0 Attributes:0, Outbound Routes(RIB-out):0 This dis

Advanced Configuration and Management Guide Table 10.7: BGP4 Route Summary Information for a Neighbor (Continued) Routes Advertised The number of rou

Configuring BGP4 Displaying the Best Received Routes To display the routes received from a specific neighbor that are the “best” routes to their desti

Advanced Configuration and Management Guide Displaying Summary Route Information To display summary route information, use the following CLI method. U

Quality of Service (QoS) Figure 2.4 shows the CLI syntax for configuring a QoS policy on an HP switch. The value “<CR>” means “carriage return”

Configuring BGP4 USING THE CLI To view the BGP4 route table, enter the following command: To display all the BGP4 routes in the routing switch’s BGP4

Advanced Configuration and Management Guide Displaying the Best BGP4 Routes To display all the BGP4 routes in the routing switch’s BGP4 route table th

Configuring BGP4 For information about the fields in this display, see Table 10.9 on page 10-105. The fields in this display also appear in the show

Advanced Configuration and Management Guide Table 10.9: BGP4 Network Information (Continued) Weight The value that this router associates with routes

Configuring BGP4 Displaying Route Details Here is an example of the information displayed when you use the detail option. In this example, the inform

Advanced Configuration and Management Guide Table 10.10: BGP4 Network Information (Continued) Atomic Whether network information in this route has be

Configuring BGP4 Table 10.10: BGP4 Network Information (Continued) RIB_out The number of neighbors to which the route has been or will be advertised.

Advanced Configuration and Management Guide Table 10.11: BGP4 Route-Attribute Entries Information (Continued) Next Hop The IP address of the next hop

Configuring BGP4 Displaying the Routes BGP4 Has Placed in the IP Route Table The IP route table indicates the routes it has received from BGP4 by list

Advanced Configuration and Management Guide Syntax: show ip bgp flap-statistics [regular-expression <regular-expression> | <address> <m

Advanced Configuration and Management Guide Routing Switch To assign a priority of 4 to all HTTP traffic on port 3/12 on an HP 9304M or HP 9308M routi

Configuring BGP4 Displaying the Active Route Map Configuration To view the device’s active route map configuration (contained in the running-config) w

Advanced Configuration and Management Guide peer group. The <as-num> parameter specifies all neighbors within the specified AS. The all parame

Configuring BGP4 • RFC 2842. This RFC specifies the Capability Advertisement, which a BGP4 router uses to dynamically negotiate a capability with a

Advanced Configuration and Management Guide This command applies its filters for outgoing routes to the routing switch’s BGP4 route table (Adj-RIB-Out

Configuring BGP4 • If you close a neighbor session, the routing switch and the neighbor clear all the routes they learned from each other. When the

Advanced Configuration and Management Guide To un-suppress a specific route, enter a command such as the following: HP9300# clear ip bgp damping 209.1

Configuring BGP4 3. Click on the Clear link to display the Clear panel. 4. Select one of the following: • BGP Neighbor Last Packet with Error – Cl

Advanced Configuration and Management Guide 10 - 120

Chapter 11 Network Address Translation You can configure an HP routing switch to perform standard Network Address Translation (NAT). NAT enables priv

Advanced Configuration and Management Guide 10.10.10.3Port 1/2 209.157.1.1 Outside NAT interface Internet 10.10.10.2 The device performs NAT for traff

Quality of Service (QoS) • ospf • tcp • udp In this example, enter tcp. 11. If you entered tcp or udp, you also can select one of the following co

Network Address Translation Port Address Translation Normally, NAT maps each private address that needs to be routed to the outside network to a uniqu

Advanced Configuration and Management Guide Maximum Number of Addresses If the routing switch cannot allocate an address because it has run out of add

Network Address Translation NOTE: You must configure inside NAT on one interface and outside NAT on another interface. The device performs NAT for t

Advanced Configuration and Management Guide These commands configure a standard ACL for the private sub-net 10.10.10.x/24, then enable inside NAT for

Network Address Translation Enabling NAT The NAT configuration does not take effect until you enable it on specific interfaces. You can enable NAT on

Advanced Configuration and Management Guide • Dynamic timeout – This age timer applies to all entries (static and dynamic) that do not use Port Addre

Network Address Translation --- 209.157.1.72 10.10.10.2 207.195.4.69 207.195.4.69 Syntax: show ip nat translation The show ip nat translation comma

Advanced Configuration and Management Guide Table 11.2: CLI Display of NAT Statistics This Field... Displays... Total translations The number of tra

Network Address Translation Table 11.2: CLI Display of NAT Statistics (Continued) Sess Lists session statistics. NAT uses the session table for mana

Advanced Configuration and Management Guide This command clears the inside NAT entry that maps private address 10.10.10.5 to Internet address 209.157.

Advanced Configuration and Management Guide 17. Click the checkbox next to In Filter, Out Filter, or next to both options to indicate the traffic dir

Network Address Translation NAT: tcp data src 10.10.100.18:1144 => trans 192.168.2.78:8012 dst 192.168.3.11:53 NAT: 192.168.2.78:8012 192.168.3.11:

Advanced Configuration and Management Guide Configuration Examples This section shows two complete configuration examples for NAT. The examples are b

Network Address Translation HP9300> en HP9300# configure terminal HP9300(config)# The following command configures an ACL to identify the range of

Advanced Configuration and Management Guide The following command saves all the configuration changes above to the routing switch’s startup-config fil

Network Address Translation • A Pool of public (Internet) address to use for translation of the private addresses • An association of the ACL for th

Advanced Configuration and Management Guide The following command configures a static default route to the Internet access router. The routing switch

Chapter 12 Configuring VRRP and VRRPE This chapter describes how to configure HP routing switches to configure the following router redundancy protoco

Advanced Configuration and Management Guide Overview The following sections describe VRRP and VRRPE. The protocols both provide redundant paths for I

Configuring VRRP and VRRPE Figure 12.2 shows the same example network shown in Figure 12.1, but with a VRRP virtual router configured on Router1 and R

Advanced Configuration and Management Guide When you configure a VRID, the software automatically assigns its MAC address. When a VRID becomes active

iv

Quality of Service (QoS) Assigning AppleTalk Sockets to Priority Queues By default, all AppleTalk sockets are in the best effort queue (qosp0). To as

Configuring VRRP and VRRPE If the Owner becomes unavailable, but then comes back online, the Owner again becomes the Master router. The Owner becomes

Advanced Configuration and Management Guide NOTE: The MD5 authentication type is not supported for VRRP. Independent Operation of VRRP alongside RIP,

Configuring VRRP and VRRPE The most important difference is that all VRRPE routers are Backups. There is no Owner router. VRRPE overcomes the limita

Advanced Configuration and Management Guide Comparison of VRRP, VRRPE, and SRP This section compares HP’s router redundancy protocols. VRRP VRRP is a

Configuring VRRP and VRRPE Master and Backups • VRRP – The “Owner” of the IP address of the VRID is the default Master and has the highest priority (

Advanced Configuration and Management Guide Table 12.1: VRRP and VRRPE Parameters (Continued) Virtual Router IP address This is the address you are ba

Configuring VRRP and VRRPE Table 12.1: VRRP and VRRPE Parameters (Continued) Backup priority A numeric value that determines a Backup’s preferability

Advanced Configuration and Management Guide Table 12.1: VRRP and VRRPE Parameters (Continued) Track priority A VRRP or VRRPE priority value assigned

Configuring VRRP and VRRPE Configuring Basic VRRPE Parameters To implement a simple VRRPE configuration using all the default values, enter commands s

Advanced Configuration and Management Guide NOTE: For VRRP, change the router type only if you have moved the real IP address from one router to anot

Advanced Configuration and Management Guide Configuring a Utilization List for an Uplink Port You can configure uplink utilization lists that display

Configuring VRRP and VRRPE VRRPE Syntax Syntax: ip vrrp-extended auth-type no-auth | simple-text-auth <auth-data> The parameter values are the s

Advanced Configuration and Management Guide NOTE: You cannot set the priority of a VRRP Owner. The Owner’s priority is always 255. VRRPE Syntax Synt

Configuring VRRP and VRRPE Router2(config-if-1/5)# ip vrrp vrid 1 Router2(config-if-1/5-vrid-1)# dead-interval 30 Syntax: dead-interval <value>

Advanced Configuration and Management Guide goes down, the software changes the VRRPE interface’s priority to 40. If another tracked interface goes d

Configuring VRRP and VRRPE Syntax: [no] owner priority | track-priority <num> The <num> parameter specifies the new priority and can be a

Advanced Configuration and Management Guide This example is for VRRP. Here is an example for VRRPE: HP9300(config-if-e1000-1/6-vrid-1)# show ip vrrp-

Configuring VRRP and VRRPE Table 12.2: CLI Display of VRRP or VRRPE Summary Information (Continued) Master addr The IP address of the router interfac

Advanced Configuration and Management Guide Here is an example for a VRRPE Backup. HP9300(config)# show ip vrrp-extended Total number of VRRP-Extended

Configuring VRRP and VRRPE Table 12.3: CLI Display of VRRP or VRRPE Detailed Information (Continued) state This routing switch’s VRRP or VRRPE state

Advanced Configuration and Management Guide Table 12.3: CLI Display of VRRP or VRRPE Detailed Information (Continued) dead-interval The configured va

Quality of Service (QoS) 4. Click on the Relative Utilization link at the top of the panel to display the Port Uplink Relative Utilization panel, as

Configuring VRRP and VRRPE Table 12.3: CLI Display of VRRP or VRRPE Detailed Information (Continued) track port The interfaces that the VRID’s interf

Advanced Configuration and Management Guide Table 12.4: Web Display of VRRP Detailed Information (Continued) Mode Indicates whether the routing switc

Configuring VRRP and VRRPE rxed vrrp port mismatch count = 0 rxed vrrp ip address mismatch count = 0 rxed vrrp hello interval mismatch count = 0 rxed

Advanced Configuration and Management Guide Table 12.5: CLI Display of VRRP or VRRPE Statistics (Continued) rxed vrrp hello interval mismatch count Th

Configuring VRRP and VRRPE Table 12.6: Web Display of VRRP Statistics (Continued) Authen Password Mismatch Error The number of VRRP packets received

Advanced Configuration and Management Guide Clearing VRRP or VRRPE Statistics Use the following methods to clear VRRP or VRRPE statistics. USING THE C

Configuring VRRP and VRRPE Configuring Router2 Using the CLI To configure Router2 in Figure 12.2 on page 12-3 after enabling VRRP, enter the following

Advanced Configuration and Management Guide • If the device does not have a VRRP virtual router configured, the VRRP configuration panel is displayed

Configuring VRRP and VRRPE 12. Enter or select the track interface or port: • If you want to use a virtual interface as a track port, enter the virt

Advanced Configuration and Management Guide 17. Select the Save link at the bottom of the dialog, then select Yes when prompted to save the configura

Advanced Configuration and Management Guide Displaying Utilization Percentages for an Uplink After you configure an uplink utilization list, you can d

Configuring VRRP and VRRPE Syntax: activate USING THE WEB MANAGEMENT INTERFACE You cannot configure VRRPE using the Web management interface. 12 - 35

Advanced Configuration and Management Guide 12 - 36

Chapter 13 Configuring SRP This chapter describes how to configure the HP 9304M, HP 9308M, and HP 6308M-SX routing switches to use the Standby Router

Advanced Configuration and Management Guide Overview of Standby Router Protocol (SRP) SRP allows alternate paths to be provided to a host. To provide

Configuring SRP SRP Support on Virtual Interfaces SRP is supported on both physical and virtual interfaces. Support on a virtual interface allows you

Advanced Configuration and Management Guide If a change in state (up or down) is detected by the track port, the priority of the SRP Group Interface w

Configuring SRP Figure 13.3 Failure of e1 and e3 links results in mixed active and standby links on router1 without the use of multiple track ports 1

Advanced Configuration and Management Guide Figure 13.4 Router2 becomes active router after links e1 and e3 fail with multiple track ports defined In

Configuring SRP Differences Between SRP and VRRP The Virtual Router Redundancy Protocol (VRRP) is a standards-based protocol that provides redundancy

Advanced Configuration and Management Guide Configuration Rules for SRP • Virtual interfaces cannot be assigned as track ports. • The keep-alive-tim

Quality of Service (QoS) USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The

Configuring SRP Assign Virtual Router IP Addresses In the examples in this section, SRP is used to provide a redundant path between Host 1 and Host 3

Advanced Configuration and Management Guide To establish the virtual IP address 192.55.4.1 for interface C defined by IP address 192.55.4.2 and Ethern

Configuring SRP EXAMPLE: To make Router 1 the active router, assign a preference value to interfaces A and C that is higher than the preference value

Advanced Configuration and Management Guide EXAMPLE: To define and assign the virtual router IP addresses for Router 1, shown in Figure 13.5, you woul

Configuring SRP 10. Select the track port by selecting a box next to the desired interface. For purposes of this example, you would select interface

Advanced Configuration and Management Guide Configuring SRP on Virtual Interfaces A virtual interface will by default remain active until all underlyi

Configuring SRP USING THE CLI To configure the IP sub-net VLAN with port membership of 1, 2, and 3, you would enter the following commands: HP9300(con

Advanced Configuration and Management Guide 13 - 16

Chapter 14 Configuring IPX This chapter describes how to configure the Internet Packet Exchange (IPX) protocol on the HP 9304M, HP 9308M, and HP 6308M

Installation and Getting Started Guide 6. Assign RIP, SAP, and Forward filter groups (optional). 7. Modify the maximum number of SAP and RIP Route e

Advanced Configuration and Management Guide 2 - 30

Configuring IPX 4. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-config

Installation and Getting Started Guide NOTE: Once you configure an interface with a network number and frame type, you can define filters and assign t

Configuring IPX 6. Enter the network number. 7. Select the frame type from the pull down menu. 8. Enable NetBIOS if desired. 9. Click the Add butt

Installation and Getting Started Guide 5. Enter a filter ID value from 1 – 32. 6. Select either Permit or Deny. 7. Enter the appropriate number for

Configuring IPX 14. Select the port or slot/port combination to which you are assigning the filter(s). 15. Check either or both of the In Filter and

Installation and Getting Started Guide • If you are modifying an existing IPX RIP filter, click on the Modify button to the right of the row describi

Configuring IPX Configuring IPX SAP Access Control Lists (ACLs) You can configure Access Control Lists (ACLs) for filtering Service Advertisement Prot

Installation and Getting Started Guide The [<network-mask>.<node-mask>] parameter lets you specify a comparison mask for the network and n

Configuring IPX The <service-type> [<server-name>] parameter lets you specify a service type and, optionally, a specific server. Use these

Installation and Getting Started Guide 4. Enter the new value for the table size. The value you enter specifies the maximum number of entries the ta

Chapter 3 Using Access Control Lists (ACLs) Access control lists (ACLs) enable you to permit or deny packets based on source and destination IP addres

Configuring IPX Modify the RIP Advertisement Packet Size The default IPX RIP packet size is 432 bytes, which allows 50 routes plus 32 bytes of header

Installation and Getting Started Guide Modify the RIP Advertisement Interval The IPX RIP advertisement interval specifies how often the routing switch

Configuring IPX USING THE WEB MANAGEMENT INTERFACE You cannot modify the SAP advertisement interval using the Web management interface. Modify the Age

Installation and Getting Started Guide Displaying IPX Configuration Information and Statistics You can use CLI commands and Web management options to

Configuring IPX Table 14.1: CLI Display of Global IPX Configuration Information (Continued) Maximum IPX SAP filters How many IPX service filters you

Installation and Getting Started Guide Syntax: show ipx interface [ethernet <portnum> | ve <num>] The ethernet <portnum> parameter l

Configuring IPX Table 14.2: CLI Display of IPX Interface Information (Continued) sap-interval The SAP advertisement interval. The IPX SAP advertisem

Installation and Getting Started Guide This display shows the following information. Table 14.3: CLI Display of IPX Forwarding Cache This Field... Di

Configuring IPX Syntax: show ipx route [<num(hex)>] The <num(hex)> parameter lets you specify an IPX network number. This display shows th

Installation and Getting Started Guide This display shows the following information. Table 14.5: CLI Display of IPX Server Table This Field... Displa

Installation and Getting Started Guide • “Displaying the Log Entries” on page 3-23 • “Policy-Based Routing (PBR)” on page 3-24 Usage Guidelines for Ac

Configuring IPX This display shows the following information. Table 14.6: CLI Display of IPX Traffic Statistics This Field... Displays... Port The p

Installation and Getting Started Guide Table 14.7: Web Display of IPX Traffic Statistics (Continued) Rcv Filter Packets The number of packets receive

Chapter 15 Configuring AppleTalk This chapter describes how to configure AppleTalk on HP 9304M, HP 9308M, and HP 6308M-SX routing switches using the C

Advanced Configuration and Management Guide Zones AppleTalk zones are logical groupings of AppleTalk nodes defined within and across multiple networks

Configuring AppleTalk Additionally, this feature helps eliminate unauthorized access to devices within restricted zones. As new devices are added to

Advanced Configuration and Management Guide Network Layer Support Datagram Delivery Protocol (DDP) DDP provides connectionless service between applica

Configuring AppleTalk USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. The Sys

Advanced Configuration and Management Guide Saving Configuration Changes to the Interface Once you have configured the cable range, network address, z

Configuring AppleTalk 8. Beginning in software release 06.x, the AppleTalk ARP age is a global parameter instead of an interface parameter. When you

Advanced Configuration and Management Guide Enable AppleTalk Routing on an Interface To enable AppleTalk on interface 1/5, use one of the following me

Using Access Control Lists (ACLs) • ACL entry – An ACL entry is a filter command associated with an ACL ID. The maximum number of ACL entries you ca

Configuring AppleTalk 8. Beginning in software release 06.x, the AppleTalk ARP age is a global parameter instead of an interface parameter. When you

Advanced Configuration and Management Guide Filtering AppleTalk Zones and Networks Defining Zone Filters Zone filtering allows you to define access fo

Configuring AppleTalk USING THE CLI HP9300(config)# interface e1/1 HP9300(config-if-1/1)# appletalk deny zone finance HP9300(config-if-1/1)# int e1/3

Advanced Configuration and Management Guide Define Additional Zone Filters When defining AppleTalk zone filters, you must define both deny and permit

Configuring AppleTalk 5. Select the interface for which the zone filter is to be defined from the port or slot/port pull down menu(s). In this examp

Advanced Configuration and Management Guide 3. Configure a physical interface on the routing switch that provides access to remote networks to suppor

Configuring AppleTalk To configure the defined AppleTalk VLAN virtual interface ve3, enter the following commands: HP9300(config-if-1/8)# int ve 3 HP9

Advanced Configuration and Management Guide USNG THE CLI HP9300(config)# vlan 2 by port HP9300(config-vlan-2)# untag e1/3 to 1/4 HP9300(config-vlan-2

Configuring AppleTalk • AppleTalk RTMP update interval • AppleTalk ZIP query interval The following sections describe these parameters and show how

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Installation and Getting Started Guide NOTE: The following sections describe how to configure ACLs using the HP device’s CLI. You also can create an

Configuring AppleTalk USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-write access. 2. Clic

Advanced Configuration and Management Guide USING THE WEB MANAGEMENT INTERFACE 1. Log on to the device using a valid user name and password for read-

Configuring AppleTalk Clearing AppleTalk Information USING THE CLI When using the CLI, you can clear AppleTalk data by entering the following CLI comm

Advanced Configuration and Management Guide 15 - 22

Chapter 16 Configuring VLANs This chapter describes how to configure Virtual LANs (VLANs) on the HP 9304M, HP 9308M, and HP 6308M-SX routing switches

Advanced Configuration and Management Guide16 - 2 When a device receives a packet on a port that is a member of a VLAN, the device forwards the packet

Configuring VLANs16 - 3Layer 2 traffic is bridged within a port-based VLAN and Layer 2 broadcasts are sent to all the ports within the VLAN.Layer 3 Pr

Advanced Configuration and Management Guide For example, if you configure two IP sub-net VLANs on a routing switch, you can configure a virtual interf

Configuring VLANs16 - 5Default VLANBy default, all the ports on a device are in a single port-based VLAN. his VLAN is called DEFAULT-VLAN and is VLA

Advanced Configuration and Management Guide Untagged Packet Format 6 bytes Destination Address 6 bytes Source Address 2 bytes Type Field Up to 1500 by

Contents GETTING STARTED... 1-1 INTRODUCTION ...

Using Access Control Lists (ACLs) 7. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to

Configuring VLANs16 - 7Figure 16.5 VLANs configured across multiple devicesSpanning Tree Protocol (STP)The default state of STP depends on the device

Advanced Configuration and Management Guide16 - 8 blocked, the virtual interface can still route so long as at least one port in the virtual interface

Configuring VLANs16 - 9Dynamic, Static, and Excluded Port MembershipWhen you add ports to a protocol VLAN, IP sub-net VLAN, IPX network VLAN, or Apple

Advanced Configuration and Management Guide16 - 10 Static PortsStatic ports are permanent members of the protocol VLAN. he ports remain active membe

Configuring VLANs Super Aggregated VLANs You can aggregate multiple VLANs within another VLAN. This feature allows you to construct Layer 2 paths and

Advanced Configuration and Management Guide Routing Between VLANs (Routing Switches Only) The routing switches can locally route IP, IPX, and Appletal

Configuring VLANs There is a separate STP domain for each port-based VLAN. Routing occurs independently across port-based VLANs or STP domains. You

Advanced Configuration and Management Guide Port 2 IP sub-net 2 IPX network 2 AppleTalk cable range 200 AppleTalk zone “CTP” 6208M-SX Ports 5 - 8 IP s

Configuring VLANs VLAN “BROWN” VLAN “GREEN” 6208M-SX C IP sub-net 2 IPX network 2 Atalk 200.1 Zone “B” port 5 IP sub-net 1 IPX network 1 Atalk 100.1 Z

Advanced Configuration and Management Guide HP6208-A(config-vlan-3)# tag ethernet 7 to 8 HP6208-A(config-vlan-3)# spanning-tree HP6208-A(config-vlan-3

Installation and Getting Started Guide The commands in this example configure an ACL to deny packets from three source IP addresses from being forward

Configuring VLANs Modifying a Port-Based VLAN You can make the following modifications to a port-based VLAN: • Add or delete a VLAN port. • Change i

Advanced Configuration and Management Guide 4. Enter the following commands to exit the VLAN CONFIG mode and save the configuration to the system-con

Configuring VLANs Enable Spanning Tree on a VLAN The spanning tree bridge and port parameters are configurable using one CLI command set at the Global

Advanced Configuration and Management Guide • Priority – a parameter used to identify the root bridge in a network. The bridge with the lowest value

Configuring VLANs To configure the VLANs shown in Figure 16.11, use the following procedure. USING THE CLI 1. To permanently assign ports 1 – 3 and p

Advanced Configuration and Management Guide the flat IP and IPX segment with connectivity to the rest of the network. Within VLAN 4 IP and IPX will f

Configuring VLANs To configure the Layer 3 VLANs and virtual interfaces on the routing switches in Figure 16.12, use the following procedure. USING TH

Advanced Configuration and Management Guide Do the same thing for VLAN 8. HP9300-A(config-vif-1)# vlan 8 name IPX_Network2 HP9300-A(config-vlan-8)# un

Configuring VLANs HP9300-A(config-vlan-4)# tag ethernet 4/1 to 4/2 HP9300-A(config-vlan-4)# spanning-tree HP9300-A(config-vlan-4)# spanning-tree prior

Advanced Configuration and Management Guide • There is no need to include a virtual interface within VLAN 4. • The backbone VLAN between 9304 B and

Using Access Control Lists (ACLs) NOTE: You can enable logging on ACLs and filters that support logging even when the ACLs and filters are already in

Configuring VLANs HP9300-B(config-vlan-ipx-network)# static e2/5 to 2/8 HP9300-B(config-vlan-ipx-network)# router-interface ve4 HP9300-B(config-vlan-i

Advanced Configuration and Management Guide HP9300-C(config-ospf-router)# area 0.0.0.0 normal HP9300-C(config-ospf-router)# router ipx HP9300-C(config

Configuring VLANs HP9300-C(config-vif-4)# vlan 4 name Bridged_ALL_Protocols HP9300-C(config-vlan-4)# untag ethernet 3/1 to 3/8 HP9300-C(config-vlan-4)

Advanced Configuration and Management Guide • You cannot have an AppleTalk cable VLAN and an AppleTalk protocol VLAN in the same port-based VLAN. If

Configuring VLANs The following commands add four AppleTalk cable VLANs, in groups of three commands each. The appletalk- cable-vlan command adds a c

Advanced Configuration and Management Guide HP9300(config-vif-2)# appletalk zone-name BB HP9300(config-vif-2)# appletalk routing HP9300(config-vif-2)#

Configuring VLANs Configuration Guidelines • You cannot dynamically add a port to a protocol VLAN if the port has any routing configuration parameter

Advanced Configuration and Management Guide HP9300(config-vlan-10)# dynamic HP9300(config)# write memory These commands create a port-based VLAN on ch

Configuring VLANs Configuring Uplink Ports Within a Port-Based VLAN You can configure a subset of the ports in a port-based VLAN as uplink ports. Whe

Advanced Configuration and Management Guide VLAN 2 VLAN 3 VLAN 4 HP 9304M or 9308M Routing Switch VLAN 2 VE 1 -IP 10.0.0.1/24 VLAN 3 VE 2 -IP 10.0.1.1

Installation and Getting Started Guide NOTE: If the ACL is a forwarding ACL, the action forwards or drops the traffic. If the ACL is a management ac

Configuring VLANs VLAN 2 VLAN 3 VLAN 4 HP 9304M or 9308M Routing Switch VLAN 2 VE 1 -IP 10.0.0.1/24 VLAN 3 VE 2 -Follow VE 1 VLAN 4 VE 3 -Follow VE 1

Advanced Configuration and Management Guide NOTE: If the device’s ARP table does not contain the requested host, the device forwards the ARP request o

Configuring VLANs HP9300(config-vif-3)# ip follow ve 1 NOTE: Since virtual interfaces 2 and 3 do not have their own IP sub-net addresses but instead a

Advanced Configuration and Management Guide NOTE: The device’s memory must be configured to contain at least the number of VLANs you specify for the

Configuring VLANs virtual interface group that has the same ID as the VLAN group. You can enter this command when you configure the VLAN group for th

Advanced Configuration and Management Guide NOTE: If many of your VLANs will have an identical configuration, you might want to configure VLAN groups

Configuring VLANs HP9300# reload Syntax: system-max virtual-interface <num> The <num> parameter indicates the maximum number of virtual in

Advanced Configuration and Management Guide Client 1 ... Client 3 ... Client 5 Channel = a client VLAN nested inside a Path sub-net Path = a single VL

Configuring VLANs16 - 45Figure 16.17 Example Super Aggregated VLAN ApplicationIn this example, a collocation service provides private channels for mul

Advanced Configuration and Management Guide • Add the port connected to the client as an untagged port. • Add the port connected to the core device

Using Access Control Lists (ACLs) Configuring Extended ACLs This section describes how to configure extended ACLs. • For configuration information on

Configuring VLANs USING THE WEB MANAGEMENT INTERFACE You cannot enable VLAN aggregation using the Web management interface. The other options you nee

Advanced Configuration and Management Guide HP9300A(config-vlan-102)# untagged ethernet 1/2 HP9300A(config-vlan-102)# exit HP9300A(config)# vlan 103 b

Configuring VLANs Commands for Device D Device D is at the other end of path and separates the channels back into individual VLANs. The tag type must

Advanced Configuration and Management Guide HP9300F(config-vlan-103)# exit HP9300F(config)# vlan 104 by port HP9300F(config-vlan-104)# tagged ethernet

Configuring VLANs 10. Click the Select Port Members button to display the following panel. 11. Select the ports you are placing in the VLAN. To sel

Advanced Configuration and Management Guide 5. Enter the VLAN ID that will contain the protocol VLAN in the VLAN ID field. 6. Enter a name for the V

Configuring VLANs Configuring an IP Sub-Net VLAN 1. Log on to the device using a valid user name and password for read-write access. 2. Click on the

Advanced Configuration and Management Guide NOTE: All the ports must be members of the port-based VLAN that contains this IP sub-net VLAN. See “Layer

Configuring VLANs 7. Select the virtual interface from the Router_Interface pulldown list if you configured a virtual interface for routing into and

Advanced Configuration and Management Guide 5. Enter the VLAN ID that will contain the AppleTalk cable VLAN in the VLAN ID field. 6. Enter a name fo

Installation and Getting Started Guide The fourth entry denies all IP traffic from host 209.157.21.100to host 209.157.22.1 and generates Syslog entrie

Configuring VLANs Displaying VLAN Information After you configure the VLANs, you can verify the configuration using the following methods. Displaying

Advanced Configuration and Management Guide Displaying VLAN Information for Specific Ports Use one of the following methods to display VLAN informatio

Chapter 17 Route Health Injection You can configure an HP 9304M, HP 9308M, and HP 6308M-SX routing switch to check the health of the HTTP application

Advanced Configuration and Management Guide HP9308M R2 Real Server R5 Real Server R1 HP6308-SX R1 Real Server R2 209.157.22.249 (VIP) ISP Paris Intern

Route Health Injection When the web browser sends its TCP SYN request (to initiate the HTTP session with the web host), the gateway router used by the

Advanced Configuration and Management Guide Configuration Considerations • The routing switch and the SLB or real server must be in the same IP sub-n

Route Health Injection Interface Level The following commands configure an IP sub-net address that is in the same sub-net as the web site’s IP address

Advanced Configuration and Management Guide The server real command in this example configures the HP 6308M-SX to send an HTTP health check to the HTT

Route Health Injection CLI Commands for 6308M-SX R3 The following commands configure 6308M-SX R3 for the configuration shown in Figure 17.1. This exa

Advanced Configuration and Management Guide Table 17.1: Real Server Information (Continued) IP The IP address of the real server. If you configured a

Using Access Control Lists (ACLs) The second entry denies all FTP traffic from the 209.157.21.x network to the 209.157.22.x network, if the traffic ha

Appendix A Network Monitoring This chapter provides a general overview of monitoring tools supported on HP ProCurve switches and routing switches. Con

Advanced Configuration and Management Guide 2. Click on the plus sign next to Monitor in the tree view to expand the list of monitoring options. 3.

Network Monitoring Syntax: rmon alarm <entry-number> <MIB-object.interface-num> <sampling-time> <sample-type> <threshold-ty

Advanced Configuration and Management Guide NOTE: For a complete summary of all available show... CLI commands and their displays, see the Command Li

Network Monitoring Clearing Statistics You can clear statistics for many parameters with the clear option. USING THE CLI To determine the available cl

Advanced Configuration and Management Guide A - 6

Appendix B Protecting Against Denial of Service Attacks In a Denial of Service (DoS) attack, a router is flooded with useless packets, hindering norma

Advanced Configuration and Management Guide For each ICMP echo request packet sent by the attacker, a number of ICMP replies equal to the number of ho

Protecting Against Denial of Service Attacks • If the number of ICMP packets exceeds the burst-max value, all ICMP packets are dropped for the number

--------------- -------------- ----- ---- ------ ---------------------- -------- -------Advanced Configuration and Management Guide Disp

Installation and Getting Started Guide 209.157.22.26 0.0.0.255, then save the changes to the startup-config file, the value appears as 209.157.22.0/24

Appendix C Policies and Filters The HP 9304M, HP 9308M, and HP 6308M-SX routing switches and the HP 6208M-SX switch provide a robust array of policies

Advanced Configuration and Management Guide Scope Some policies and filters are configured and apply globally, while others are configured globally bu

Policies and Filters Default Filter Actions By default, no policies or filters are defined on the routing switches and switch. The following table li

Advanced Configuration and Management Guide Policy and Filter Precedence QoS You can apply QoS policies to individual ports, VLANs, static MAC address

Policies and Filters Policies A policy is a set of rules that defines how the device handles packets. Table C.3 lists the types of policies you can c

Advanced Configuration and Management Guide Syntax Use the following CLI commands or Web management interface panels to configure QoS policies. Table

Policies and Filters IP sub-net and IPX network VLANs are similar, except for these VLAN types the device examines the IP sub-net or IPX network addre

--------------------------------------------------------------------------------Advanced Configuration and Management Guide Inbound IP Access Policy G

Policies and Filters Syntax Use the following CLI commands or Web management interface panels to configure IP access policies. Table C.6: IP Access Po

Advanced Configuration and Management Guide Figure D.2 TCP/UDP Access Policies Actions TCP/UDP access policies forward (permit) or drop (deny) IP pac

Using Access Control Lists (ACLs) • pop2 • pop3 • smtp • ssl • telnet • UDP port names recognized by the software: • bootps • bootpc • dns •

Policies and Filters Syntax Use the following CLI commands or Web management interface panels to configure TCP/UDP access policies. Table C.7: TCP/UDP

Advanced Configuration and Management Guide Table C.8: Filters (Continued) AppleTalk zone filters X 21 AppleTalk network filters X 22 BGP address

Policies and Filters Syntax Use the following CLI commands or Web management interface panels to configure MAC filters. Table C.9: MAC Filters CLI syn

Advanced Configuration and Management Guide Multicast Filters Multicast filters are outbound filters that apply to packets that have a Layer 2 multica

Policies and Filters Figure D.3 Address-lock filter Actions Forward (permit) only those packets with a MAC address that the port has learned. Deny a

Advanced Configuration and Management Guide Layer 3 Filters Layer 3 filters control a device’s transmission and receipt of packets based on routing pr

Policies and Filters Figure D.4 IP/RIP route filters Actions • An IP/RIP route filter applied to outbound traffic on a port permits or denies advert

Advanced Configuration and Management Guide Actions • An IP/RIP neighbor filter applied to outbound traffic on a port permits or denies advertisement

Policies and Filters IPX Filters IPX filters control transmission and receipt of IPX packets, IPX RIP routes, and IPX Service Advertisement Protocol (

Advanced Configuration and Management Guide IPX SAP Filters IPX Service Advertisement Protocol (SAP) filters control client access to IPX servers. Act

Installation and Getting Started Guide You can specify one of the following: • max-reliability or 2 – The ACL matches packets that have the maximum r

Policies and Filters Figure D.6 AppleTalk zone filter Appletalk Zone Filters AppleTalk zone filters let you secure access to an AppleTalk zone. The

Advanced Configuration and Management Guide NOTE: If you use the rtmp-filtering | no-rtmp-filtering parameter, you are configuring an AppleTalk netwo

Policies and Filters Actions • A BGP4 address filter applied to inbound packets permits (learns) or denies (drops) the specified network address in B

Advanced Configuration and Management Guide Scope You define BGP4 AS-path filters globally, then apply them as part of a BGP4 neighbor’s distribute li

Policies and Filters Syntax Use the following CLI commands or Web management interface panels to configure BGP4 community filters. Table C.22: BGP4 Co

Advanced Configuration and Management Guide Figure D.7 OSPF redistribution filters IP/RIP Redistribution Filters IP/RIP redistribution filters contro

Policies and Filters Syntax Use the following CLI commands or Web management interface panels to configure IP/RIP redistribution filters. Table C.23:

Advanced Configuration and Management Guide Syntax Use the following CLI commands or Web management interface panels to configure BGP4 redistribution

Index Numerics 802.1p QoS priority 2-14, 16-5 A AARP 15-4 Abdication VRRP 12-18 ABR 8-2 displaying information 8-48 OSPF 8-2 Access Control List. See

Advanced Configuration and Management Guide VLAN 15-13, 16-3, 16-20 ZIP query interval 15-19 zone 15-5 filter 15-2, C-20 zone filter 15-10 AppleTalk C

Advanced Configuration and Management Guide USAGE GUIDELINES FOR ACCESS CONTROL LISTS (ACLS) ...

Using Access Control Lists (ACLs) 5. Change the ACL number in the ACL Number field or use the ACL number displayed in the field. NOTE: You cannot sp

un-suppressing a route 10-117 BootP hops 6-72 IP address stamp 6-71 Broadcast directed 6-32 filter C-13 leaks 16-10 BSR 9-13 displaying 9-20 Cable App

Advanced Configuration and Management Guide STP 5-3 Encapsulation DVMRP 9-49 Event RMON Group 9 A-3 Excluded port VLAN 16-10 Exit overflow interval OS

I IGMP configuring 9-2 maximum response time 9-3 membership time 9-3 query interval 9-2 Inactivity timer PIM-DM 9-11 Injection 17-1 Interface AppleTal

Advanced Configuration and Management Guide age timer learned routes 14-15 learned SAP entries 14-15 configuring 14-1 interface 14-3 displaying inform

VRRP 12-4, 12-16 hold BGP4 10-23 join PIM-SM 9-17 keepalive BGP4 10-23 SRP 13-11 probe DVMRP 9-46 prune DVMRP 9-45 PIM-DM 9-9 PIM-SM 9-17 Metric BGP4

Advanced Configuration and Management Guide load sharing 8-30 LSDB maximum 8-38 modifying port parameters 8-36 neighbor 8-20 Not So Stubby Area config

excluded 16-10 static 16-10 types 16-9 Port-based VLAN configuring 16-50 default 16-5, 16-13 Preempt VRRP backup 12-18 Prefix 6-80 Priority 802.1p 2-1

Advanced Configuration and Management Guide load balancing 6-41 VLAN 16-3, 16-12, 16-21 AppleTalk 15-13 Route dampening statistics 10-79, 10-111 Route

Fast Uplink Span 5-15 single 5-17 statistics A-4 VLAN 16-7, 16-19 Strict QoS method 2-3 System displaying information A-3 T Table map 10-68 Tagged por

Advanced Configuration and Management Guide authentication 12-5, 12-14 backup 12-15 priority 12-15 backup preempt 12-18 configuring 12-1, 12-12 dead i

Installation and Getting Started Guide must have network access to a DNS server and the server must have an Address record for the host. In addition,

Technical information in this document is subject to change without notice. ©Copyright Hewlett-Packard Company 2000. All rights reserved. Reproduction

Using Access Control Lists (ACLs) • GreaterThan – The ACL applies to TCP or UDP ports whose numbers are greater than the number of the port you speci

Installation and Getting Started Guide NOTE: You also can access the dialog for saving configuration changes by clicking on Command in the tree view,

Using Access Control Lists (ACLs) NOTE: For convenience, the software allows you to configure numbered ACLs using the syntax for named ACLs. The soft

Installation and Getting Started Guide NOTE: The only valid commands that are valid in the ACL list are the access-list and end commands. The HP dev

Using Access Control Lists (ACLs) NOTE: Do not place other commands in the file. The HP device reads only the ACL information in the file and ignore

Installation and Getting Started Guide Enabling Strict TCP Mode By default, when you use ACLs to filter TCP traffic, the HP device does not compare al

Using Access Control Lists (ACLs) NOTE: If the device’s configuration currently has ACLs associated with interfaces, remove the ACLs from the interfa

Installation and Getting Started Guide To display Syslog entries, use one of the following methods. USING THE CLI Enter the following command from any

CONFIGURING ADVANCED FEATURES ...5-13 FAST PORT S

Using Access Control Lists (ACLs) • Specify the default next-hop IP address if there is no explicit next-hop selection for the packet. • Send the pa

Installation and Getting Started Guide If you prefer to specify the wildcard (mask value) in CIDR format, you can enter a forward slash after the IP a

Using Access Control Lists (ACLs) The <ACL-num> parameter specifies a standard or extended ACL number or name. Syntax: set ip [default] next hop

Installation and Getting Started Guide ACLs to be further evaluated by the route map. If you specify deny, the routing switch denies the traffic from

Using Access Control Lists (ACLs) HP9300(config-routemap test-route-if-no-gateway)# exit The following command enables PBR by globally applying the ro

Installation and Getting Started Guide 3 - 30

Chapter 4 Rate Limiting HP’s rate limiting enables you to control the amount of bandwidth specific Ethernet traffic uses on specific interfaces, by li

Advanced Configuration and Management Guide intervals, the port receives less than 500000 bits in each interval. However, the port receives more than

Rate Limiting Displaying Fixed Rate Limiting Information To display configuration information and statistics for Fixed Rate Limiting, enter the follow

Advanced Configuration and Management Guide Adaptive Rate Limiting The Adaptive Rate Limiting enables you to configure rate policies that enforce band

Advanced Configuration and Management Guide CONFIGURING DOMAIN NAME SERVER (DNS) RESOLVER ...

Rate Limiting Examples of Adaptive Rate Limiting Applications The following sections show some examples of how you can use Adaptive Rate Limiting. Th

Advanced Configuration and Management Guide The rate policy rules are for three TCP/UDP applications: HTTP (web), FTP, and DNS. The fourth rule is f

Rate Limiting Adaptive Rate Policy for a Specific MAC Address Figure 4.3 shows an example of a rate policy consisting of one rule applied to a virtual

Advanced Configuration and Management Guide Adaptive Rate Policy for a Port-Based VLAN Figure 4.4 shows a rate policy applied to a VLAN. When you app

Rate Limiting Adaptive Rate Limiting uses the following parameters: • Average Rate • Normal Burst Size • Excess Burst Size • Committed Time Interv

Advanced Configuration and Management Guide Thus, the Committed Time Interval is 1000000 bits / 10000000 bits = 0.1 seconds. This means that the Adap

Rate Limiting Figure 4.5 shows an example of the Normal Burst Size and Excess Burst Size counters. This example shows two Committed Time Intervals. L

Advanced Configuration and Management Guide Figure 4.6 shows an example of two Committed Time Intervals. In this example, the policy rule matches the

Rate Limiting Figure 4.7 shows an example of eight Committed Time Intervals. The software drops traffic in the second and eighth intervals because th

Advanced Configuration and Management Guide NOTE: To characterize the traffic, configure ACLs. You can use ACLs for rate policy rules applied to IP