How it Works
HP
Loading...
1920-48G
User Manual
516 pgs11.43 Mb0
User Manual
23 pgs1.89 Mb0
Table of contents
Loading...

HP 1920-48G, 1920-24G, 1920-16G, 1920-8G, 1920-24G-PoE+ User Manual

...
HP 1920 Gigabit Ethernet Switch Series
User Guide
Part number: 5998-5627
Software version: Release 1102
Document version: 5W100-20140620
Legal and notice information
© Copyright 2014 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

Contents

Overview ······································································································································································ 1
Configuring the switch in the Web interface ············································································································· 2
Restrictions and guidelines ··············································································································································· 2
Operating system requirements ······························································································································ 2 Web browser requirements ····································································································································· 2
Others ········································································································································································ 5 Overview ············································································································································································ 6 Logging in to the Web interface······································································································································ 6 Logging out of the Web interface ··································································································································· 7 Web interface ··································································································································································· 7 Web user level ·································································································································································· 8 Web-based NM functions ················································································································································ 8 Common items on the Web pages ······························································································································ 16
Configuring the switch at the CLI ······························································································································ 20
Getting started with the CLI ··········································································································································· 20
Setting up the configuration environment ··········································································································· 20
Setting terminal parameters ·································································································································· 21
Logging in to the CLI ············································································································································· 24 CLI commands ································································································································································ 24
initialize ·································································································································································· 25
ipsetup ···································································································································································· 25
ipsetup ipv6 ··························································································································································· 26
password ································································································································································ 26
ping ········································································································································································· 27
ping ipv6 ································································································································································ 27
quit ·········································································································································································· 28
reboot ····································································································································································· 29
summary ································································································································································· 29
upgrade ·································································································································································· 30
upgrade ipv6 ························································································································································· 31 Configuration example for upgrading the system software image at the CLI ························································· 32
Configuration wizard ················································································································································· 34
Basic service setup ················································································································································ 34
Entering the configuration wizard homepage ···································································································· 34
Configuring system parameters ··························································································································· 34
Configuring management IP address ·················································································································· 36
Finishing configuration wizard ···························································································································· 37
Configuring stack ······················································································································································· 39
Overview ········································································································································································· 39 Configuration task list ···················································································································································· 39 Configuring global parameters of a stack ·················································································································· 40 Configuring stack ports ················································································································································· 41 Displaying topology summary of a stack ···················································································································· 42 Displaying device summary of a stack ························································································································ 42 Logging in to a member device from the master ········································································································ 42 Stack configuration example ········································································································································ 43 Configuration guidelines ··············································································································································· 46
i
Displaying system and device information ··············································································································· 47
Displaying system information ······································································································································ 47
Displaying basic system information ··················································································································· 47
Displaying the system resource state ··················································································································· 48
Displaying recent system logs ······························································································································ 48
Setting the refresh period ····································································································································· 48 Displaying device information ······································································································································ 48
Configuring basic device settings ····························································································································· 50
Configuring system name ·············································································································································· 50 Configuring idle timeout period ··································································································································· 50
Maintaining devices ··················································································································································· 52
Software upgrade ·························································································································································· 52 Device reboot ································································································································································· 53 Electronic label ······························································································································································· 54 Diagnostic information ·················································································································································· 54
Configuring system time ············································································································································ 56
Overview ········································································································································································· 56 Displaying the current system time ······························································································································· 56 Manually configuring the system time·························································································································· 56 Configuring system time by using NTP ························································································································ 57 System time configuration example ····························································································································· 58
Network requirements ··········································································································································· 58
Configuring the system time ································································································································· 59
Verifying the configuration ··································································································································· 59 Configuration guidelines ··············································································································································· 59
Configuring syslog ····················································································································································· 61
Displaying syslogs ·························································································································································· 61 Setting the log host························································································································································· 62 Setting buffer capacity and refresh interval ················································································································ 63
Managing the configuration······································································································································ 64
Backing up the configuration ········································································································································ 64 Restoring the configuration ··········································································································································· 64 Saving the configuration ··············································································································································· 65 Resetting the configuration ············································································································································ 66
Managing files ··························································································································································· 67
Displaying files ······························································································································································· 67 Downloading a file ························································································································································ 67 Uploading a file ····························································································································································· 68 Removing a file ······························································································································································· 68 Specifying the main boot file ········································································································································ 68
Managing ports ·························································································································································· 69
Setting operation parameters for a port ······················································································································ 69 Displaying port operation parameters ························································································································· 73
Displaying a specified operation parameter for all ports ················································································· 73
Displaying all the operation parameters for a port ··························································································· 74 Port management configuration example ···················································································································· 75
Network requirements ··········································································································································· 75
Configuring the switch ·········································································································································· 75
Configuring port mirroring ········································································································································ 79
Terminology ···································································································································································· 79
ii
Mirroring source ···················································································································································· 79
Mirroring destination ············································································································································ 79
Mirroring direction ················································································································································ 79
Mirroring group ····················································································································································· 79 Local port mirroring ······················································································································································· 79 Configuration restrictions and guidelines ···················································································································· 80 Recommended configuration procedures ···················································································································· 80 Configuring a mirroring group ····································································································································· 80 Configuring ports for the mirroring group ··················································································································· 81 Local port mirroring configuration example ················································································································ 83
Network requirements ··········································································································································· 83
Configuration procedure ······································································································································ 83
Managing users ························································································································································· 86
Adding a local user ······················································································································································· 86 Setting the super password ··········································································································································· 87 Switching to the management level ····························································································································· 88
Configuring a loopback test ······································································································································ 89
Configuration guidelines ··············································································································································· 89 Configuration procedure ··············································································································································· 89
Configuring VCT ························································································································································ 91
Overview ········································································································································································· 91 Testing cable status ························································································································································ 91
Configuring the flow interval ····································································································································· 92
Viewing port traffic statistics ········································································································································· 92
Configuring RMON ··················································································································································· 93
Overview ········································································································································································· 93
Working mechanism ············································································································································· 93
RMON groups ······················································································································································· 93 RMON configuration task list ······································································································································· 95
Configuring a statistics entry ································································································································ 97
Configuring a history entry ··································································································································· 98
Configuring an event entry ··································································································································· 99
Configuring an alarm entry ································································································································ 100
Displaying RMON statistics ································································································································ 101
Displaying RMON history sampling information ····························································································· 103
Displaying RMON event logs ···························································································································· 104 RMON configuration example ··································································································································· 105
Configuring energy saving ····································································································································· 109
Configuring energy saving on a port ························································································································ 109
Configuring SNMP ·················································································································································· 111
Overview ······································································································································································· 111
SNMP mechanism ··············································································································································· 111
SNMP protocol versions ····································································································································· 112 Recommended configuration procedure···················································································································· 112
Enabling SNMP agent ········································································································································ 113 Configuring an SNMP view ········································································································································ 115
Creating an SNMP view····································································································································· 115
Adding rules to an SNMP view ························································································································· 116 Configuring an SNMP community ····························································································································· 117 Configuring an SNMP group ······································································································································ 118
iii
Configuring an SNMP user ········································································································································· 120 Configuring SNMP trap function ································································································································ 121 Displaying SNMP packet statistics ····························································································································· 123 SNMPv1/v2c configuration example ························································································································ 124 SNMPv3 configuration example ································································································································ 127
Displaying interface statistics ································································································································· 132
Configuring VLANs ················································································································································· 133
Overview ······································································································································································· 133
VLAN fundamentals············································································································································· 133
VLAN types ·························································································································································· 134
Port-based VLAN ················································································································································· 135 Recommended VLAN configuration procedures ······································································································· 137
Recommended configuration procedure for assigning an access port to a VLAN ······································ 137
Recommended configuration procedure for assigning a trunk port to a VLAN ··········································· 137
Recommended configuration procedure for assigning a hybrid port to a VLAN ········································· 138 Creating VLANs ··························································································································································· 139 Configuring the link type of a port ····························································································································· 140 Setting the PVID for a port ··········································································································································· 141 Selecting VLANs ··························································································································································· 142 Modifying a VLAN ······················································································································································· 143 Modifying ports ···························································································································································· 144 VLAN configuration example ······································································································································ 145
Network requirements ········································································································································· 145
Configuring Switch A ·········································································································································· 145
Configuring Switch B ·········································································································································· 149 Configuration guidelines ············································································································································· 149
Configuring VLAN interfaces ································································································································· 150
Overview ······································································································································································· 150 Creating a VLAN interface ·········································································································································· 150 Modifying a VLAN interface ······································································································································· 152 Configuration guidelines ············································································································································· 155
Configuring a voice VLAN ····································································································································· 156
Overview ······································································································································································· 156
OUI addresses ····················································································································································· 156
Voice VLAN assignment modes ························································································································· 156
Security mode and normal mode of voice VLANs ··························································································· 158 Recommended voice VLAN configuration procedure ······························································································ 159 Configuring voice VLAN globally ······························································································································ 160 Configuring voice VLAN on ports ······························································································································ 161 Adding OUI addresses to the OUI list ······················································································································· 162 Voice VLAN configuration examples ························································································································· 163
Configuring voice VLAN on a port in automatic voice VLAN assignment mode ········································· 163
Configuring a voice VLAN on a port in manual voice VLAN assignment mode ········································· 167 Configuration guidelines ············································································································································· 172
Configuring the MAC address table ····················································································································· 173
Overview ······································································································································································· 173
How a MAC address entry is created ·············································································································· 173
Types of MAC address entries ··························································································································· 174 Displaying and configuring MAC address entries ··································································································· 174 Setting the aging time of MAC address entries ········································································································ 175 MAC address table configuration example ·············································································································· 175
Network requirements ········································································································································· 175
iv
Creating a static MAC address entry················································································································ 176
Configuring MSTP ··················································································································································· 177
Overview ······································································································································································· 177 Introduction to STP ······················································································································································· 177
STP protocol packets ··········································································································································· 177
Basic concepts in STP ·········································································································································· 178
Calculation process of the STP algorithm ········································································································· 179 Introduction to RSTP ····················································································································································· 184 Introduction to MSTP ···················································································································································· 185
MSTP features ······················································································································································ 185
MSTP basic concepts ·········································································································································· 185
How MSTP works ················································································································································ 189
MSTP implementation on devices ······················································································································ 189
Protocols and standards ····································································································································· 190 Configuration guidelines ············································································································································· 190 Recommended MSTP configuration procedure ········································································································· 190 Configuring an MST region ········································································································································ 191 Configuring MSTP globally ········································································································································· 192 Configuring MSTP on a port ······································································································································· 195 Displaying MSTP information of a port ····················································································································· 197 MSTP configuration example ······································································································································ 199
Network requirements ········································································································································· 199
Configuration procedure ···································································································································· 200
Configuring link aggregation and LACP ··············································································································· 205
Overview ······································································································································································· 205
Basic concepts ····················································································································································· 205
Link aggregation modes ····································································································································· 206 Configuration procedures ··········································································································································· 208
Configuring a static aggregation group ··········································································································· 208
Configuring a dynamic aggregation group ····································································································· 208
Creating a link aggregation group ··················································································································· 208
Displaying aggregate interface information ····································································································· 209
Setting LACP priority ··········································································································································· 211
Displaying LACP-enabled port information ······································································································· 211 Link aggregation and LACP configuration example ································································································· 213
Configuration guidelines ···································································································································· 215
Configuring LLDP ····················································································································································· 217
Overview ······································································································································································· 217
Basic concepts ····················································································································································· 217
LLDP operating modes ········································································································································· 221
Working mechanism ··········································································································································· 221 Protocols and standards ·············································································································································· 222 Recommended LLDP configuration procedure ··········································································································· 222 Enabling LLDP on ports ················································································································································ 223 Setting LLDP parameters on ports ······························································································································· 224
Setting LLDP parameters for a single port ········································································································· 224
Setting LLDP parameters for ports in batch ······································································································· 227 Configuring LLDP globally ··········································································································································· 227 Displaying LLDP information for a port ······················································································································ 229 Displaying global LLDP information ··························································································································· 234 Displaying LLDP information received from LLDP neighbors ···················································································· 236 LLDP configuration example ········································································································································ 236
Network requirements ········································································································································· 236
v
Configuring Switch A ·········································································································································· 236
Configuring Switch B ·········································································································································· 239
Verifying the configuration ································································································································· 239 LLDP configuration guidelines ····································································································································· 241
Configuring ARP ······················································································································································ 242
Overview ······································································································································································· 242
ARP message format ··········································································································································· 242
ARP operating mechanism ································································································································· 242
ARP table ······························································································································································ 243
Gratuitous ARP ····················································································································································· 244 Configuring ARP entries ·············································································································································· 244
Displaying ARP entries ········································································································································ 244
Creating a static ARP entry ································································································································ 245 Removing ARP entries ·················································································································································· 245 Configuring gratuitous ARP ········································································································································· 246
Static ARP configuration example ····················································································································· 246
Configuring ARP attack protection ························································································································· 250
Overview ······································································································································································· 250
User validity check ·············································································································································· 250
ARP packet validity check ·································································································································· 250 Configuring ARP detection ·········································································································································· 250
Configuring IGMP snooping ·································································································································· 252
Overview ······································································································································································· 252
Basic IGMP snooping concepts ························································································································· 252
How IGMP snooping works ······························································································································· 254
Protocols and standards ····································································································································· 255 Recommended configuration procedure···················································································································· 255 Enabling IGMP snooping globally ····························································································································· 256 Configuring IGMP snooping in a VLAN ···················································································································· 257 Configuring IGMP snooping port functions ··············································································································· 258 Displaying IGMP snooping multicast forwarding entries ························································································· 259 IGMP snooping configuration example ····················································································································· 260
Network requirements ········································································································································· 260
Configuration procedure ···································································································································· 261
Verifying the configuration ································································································································· 264
Configuring MLD snooping ···································································································································· 266
Overview ······································································································································································· 266
Basic MLD snooping concepts ··························································································································· 266
How MLD snooping works ································································································································· 268
Protocols and standards ····································································································································· 269 Recommended configuration procedure···················································································································· 269
Enabling MLD snooping globally ······················································································································ 270
Configuring MLD snooping in a VLAN ············································································································· 270
Configuring MLD snooping port functions ········································································································ 272
Displaying MLD snooping multicast forwarding entries ·················································································· 273 MLD snooping configuration example ······················································································································· 274
Network requirements ········································································································································· 274
Configuration procedure ···································································································································· 274
Verifying the configuration ································································································································· 277
Configuring IPv4 and IPv6 routing ························································································································ 278
Overview ······································································································································································· 278
Routing table ························································································································································ 278
vi
Static route ··························································································································································· 278
Default route ························································································································································· 279 Displaying the IPv4 active route table ······················································································································· 279 Creating an IPv4 static route ······································································································································· 280 Displaying the IPv6 active route table ······················································································································· 281 Creating an IPv6 static route ······································································································································· 281 IPv4 static route configuration example ····················································································································· 283
Network requirements ········································································································································· 283
Configuration considerations ····························································································································· 283
Configuration procedure ···································································································································· 283
Verifying the configuration ································································································································· 286 IPv6 static route configuration example ····················································································································· 287
Network requirements ········································································································································· 287
Configuration considerations ····························································································································· 287
Configuration procedure ···································································································································· 287
Verifying the configuration ································································································································· 290 Configuration guidelines ············································································································································· 291
DHCP overview ······················································································································································· 292
DHCP address allocation ············································································································································ 292
Allocation mechanisms ······································································································································· 292
IP address allocation process ····························································································································· 293
IP address lease extension·································································································································· 293 DHCP message format ················································································································································· 294 DHCP options ······························································································································································· 295
Common DHCP options ······································································································································ 295
Option 82 ···························································································································································· 295 Protocols and standards ·············································································································································· 296
Configuring DHCP relay agent ······························································································································ 297
Overview ······································································································································································· 297 Recommended configuration procedure···················································································································· 298 Enabling DHCP and configuring advanced parameters for the DHCP relay agent ············································· 299 Creating a DHCP server group ·································································································································· 300 Enabling the DHCP relay agent on an interface ······································································································ 301 Configuring and displaying clients' IP-to-MAC bindings ························································································· 302 DHCP relay agent configuration example ················································································································· 303
Configuring DHCP snooping ·································································································································· 306
Overview ······································································································································································· 306
Application of trusted ports ································································································································ 306
DHCP snooping support for Option 82 ············································································································ 308 Recommended configuration procedure···················································································································· 308 Enabling DHCP snooping ··········································································································································· 309 Configuring DHCP snooping functions on an interface ··························································································· 309 Displaying clients' IP-to-MAC bindings ······················································································································ 310 DHCP snooping configuration example ···················································································································· 311
Managing services ·················································································································································· 314
Overview ······································································································································································· 314 Managing services ······················································································································································· 315
Using diagnostic tools ············································································································································· 317
Ping ················································································································································································ 317 Traceroute ····································································································································································· 317 Ping operation ······························································································································································ 318
Traceroute operation ··········································································································································· 319
vii
Configuring 802.1X ··············································································································································· 321
802.1X overview ························································································································································· 321
802.1X architecture ············································································································································ 321
Access control methods ······································································································································ 321
Controlled/uncontrolled port and port authorization status ··········································································· 322
Packet formats ······················································································································································ 322
EAP over RADIUS ················································································································································ 323
Initiating 802.1X authentication ························································································································ 324
802.1X authentication procedures ···················································································································· 325
802.1X timers ······················································································································································ 328
Using 802.1X authentication with other features ···························································································· 329 Configuration prerequisites ········································································································································· 331 Recommended configuration procedure···················································································································· 332 Configuring 802.1X globally ····································································································································· 332 Configuring 802.1X on a port ··································································································································· 333
Configuring an 802.1X guest VLAN ················································································································· 335
Configuring an Auth-Fail VLAN ························································································································· 336
802.1X configuration examples ································································································································· 336
MAC-based 802.1X configuration example ···································································································· 336
802.X with ACL assignment configuration example ······················································································· 343
Configuring AAA ···················································································································································· 352
Overview ······································································································································································· 352
AAA application ·················································································································································· 352
Domain-based user management ······················································································································ 353 Configuration prerequisites ········································································································································· 353
Recommended configuration procedure ··········································································································· 353
Configuring an ISP domain ································································································································ 354
Configuring authentication methods for the ISP domain ················································································· 355
Configuring authorization methods for the ISP domain ·················································································· 356
Configuring accounting methods for the ISP domain ······················································································ 357 AAA configuration example ······································································································································· 359
Configuring RADIUS ··············································································································································· 363
Overview ······································································································································································· 363
Client/server model ············································································································································ 363
Security and authentication mechanisms ·········································································································· 364
Basic RADIUS message exchange process ······································································································ 364
RADIUS packet format ········································································································································ 365
Extended RADIUS attributes ······························································································································· 367
Protocols and standards ····································································································································· 368 Configuring a RADIUS scheme ··································································································································· 368
Configuring common parameters ······················································································································ 369
Adding RADIUS servers ······································································································································ 373 RADIUS configuration example ·································································································································· 374 Configuration guidelines ············································································································································· 378
Configuring users ···················································································································································· 380
Configuring a local user ·············································································································································· 380 Configuring a user group ············································································································································ 382
Managing certificates ············································································································································· 384
Overview ······································································································································································· 384
PKI terms ······························································································································································· 384
PKI architecture ···················································································································································· 384
How PKI works ····················································································································································· 385
viii
PKI applications ··················································································································································· 386 Recommended configuration procedures ·················································································································· 386
Recommended configuration procedure for manual request ·········································································· 386
Recommended configuration procedure for automatic request ······································································ 388 Creating a PKI entity ···················································································································································· 388 Creating a PKI domain ················································································································································ 390 Generating an RSA key pair······································································································································· 393 Destroying the RSA key pair ······································································································································· 394 Retrieving and displaying a certificate ······················································································································ 394 Requesting a local certificate ······································································································································ 396 Retrieving and displaying a CRL ································································································································ 398 PKI configuration example ·········································································································································· 399 Configuration guidelines ············································································································································· 403
Configuring MAC authentication ··························································································································· 404
Overview ······································································································································································· 404
User account policies ·········································································································································· 404
Authentication methods······································································································································· 404
MAC authentication timers ································································································································· 405 Using MAC authentication with other features ········································································································· 405
VLAN assignment ················································································································································ 405
ACL assignment ··················································································································································· 405
Auth-Fail VLAN ···················································································································································· 405 Configuration prerequisites ········································································································································· 406 Recommended configuration procedure···················································································································· 406 Configuring MAC authentication globally ················································································································ 406
Configuring MAC authentication on a port ····································································································· 408 MAC authentication configuration examples ············································································································ 408
Local MAC authentication configuration example··························································································· 408
ACL assignment configuration example············································································································ 411
Configuring port security ········································································································································ 421
Overview ······································································································································································· 421
Port security features ··········································································································································· 421
Port security modes ············································································································································· 421 Configuration guidelines ············································································································································· 423 Recommended configuration procedure···················································································································· 423 Configuring global settings for port security ············································································································· 424 Configuring basic port security control ······················································································································ 425 Configuring secure MAC addresses ·························································································································· 427 Configuring advanced port security control ·············································································································· 428 Configuring permitted OUIs ········································································································································ 429 Port security configuration examples ························································································································· 430
Basic port security mode configuration example ····························································································· 430
Advanced port security mode configuration example ···················································································· 433
Configuring port isolation ······································································································································· 440
Configuring the isolation group ·································································································································· 440 Port isolation configuration example·························································································································· 441
Configuring authorized IP ······································································································································ 443
Configuration procedure ············································································································································· 443 Authorized IP configuration example ························································································································· 444
Network requirements ········································································································································· 444
Configuration procedure ···································································································································· 444
ix
Configuring loopback detection ···························································································································· 447
Recommended configuration procedure···················································································································· 447 Configuring loopback detection globally ·················································································································· 447 Configuring loopback detection on a port ················································································································ 448
Configuring ACLs ···················································································································································· 450
Overview ······································································································································································· 450
ACL categories ···················································································································································· 450
Match order ························································································································································· 450
Implementing time-based ACL rules ··················································································································· 452
IPv4 fragments filtering with ACLs ····················································································································· 452 Configuration guidelines ············································································································································· 452 Recommend ACL configuration procedures ·············································································································· 452
Recommended IPv4 ACL configuration procedure ·························································································· 452
Recommended IPv6 ACL configuration procedure ·························································································· 453
Configuring a time range ··································································································································· 453
Adding an IPv4 ACL ··········································································································································· 454
Configuring a rule for a basic IPv4 ACL ··········································································································· 455
Configuring a rule for an advanced IPv4 ACL ································································································· 456
Configuring a rule for an Ethernet frame header ACL ···················································································· 459
Adding an IPv6 ACL ··········································································································································· 461
Configuring a rule for a basic IPv6 ACL ··········································································································· 462
Configuring a rule for an advanced IPv6 ACL ································································································· 463
Configuring QoS ····················································································································································· 466
Overview ······································································································································································· 466
Networks without QoS guarantee ····················································································································· 466
QoS requirements of new applications ············································································································· 466
Congestion: causes, impacts, and countermeasures ······················································································· 467
End-to-end QoS ···················································································································································· 468
Traffic classification ············································································································································· 468
Packet precedences ············································································································································· 469
Queue scheduling ··············································································································································· 471
Rate limit ······························································································································································· 473
Priority mapping ·················································································································································· 474
Introduction to priority mapping tables ············································································································· 475 Configuration guidelines ············································································································································· 476 Recommended QoS configuration procedures ········································································································· 476 Adding a class ····························································································································································· 478 Configuring classification rules ··································································································································· 479 Adding a traffic behavior ············································································································································ 480 Configuring traffic mirroring and traffic redirecting for a traffic behavior ···························································· 481 Configuring other actions for a traffic behavior ······································································································· 481 Adding a policy ··························································································································································· 483 Configuring classifier-behavior associations for the policy ····················································································· 484 Applying a policy to a port ········································································································································· 484 Configuring queue scheduling on a port ··················································································································· 485 Configuring rate limit on a port ·································································································································· 486 Configuring priority mapping tables ·························································································································· 487 Configuring priority trust mode on a port ················································································································· 488
ACL and QoS configuration example ··················································································································· 489
Network requirements ················································································································································· 489 Configuring Switch ······················································································································································ 489
x
Configuring PoE ······················································································································································ 497
Overview ······································································································································································· 497 Configuring PoE ··························································································································································· 498
Configuring PoE ports ········································································································································· 498
Configuring non-standard PD detection ············································································································ 499
Displaying information about PSE and PoE ports ···························································································· 500 PoE configuration example ········································································································································· 501
Support and other resources ·································································································································· 503
Contacting HP ······························································································································································ 503
Subscription service ············································································································································ 503 Related information ······················································································································································ 503
Documents ···························································································································································· 503
Websites ······························································································································································· 503 Conventions ·································································································································································· 504
Index ········································································································································································ 506
xi

Overview

The HP 1920 Switch Series can be configured through the command line interface (CLI), Web interface, and SNMP/MIB. These configuration methods are suitable for different application scenarios.
• The Web interface supports all 1920 Switch Series configurations.
• The CLI provides configuration commands to facilitate your operation. To perform other
configurations not supported by the CLI, use the Web interface.
1

Configuring the switch in the Web interface

Restrictions and guidelines

To ensure a successful login, verify that your operating system and Web browser meet the requirements, and follow the guidelines in this section.

Operating system requirements

• The device supports the following operating systems:
{ Windows XP
{ Windows 2000
{ Windows Server 2003 Enterprise Edition
{ Windows Server 2003 Standard Edition
{ Windows Vista
{ Windows 7
{ Linux
{ MAC OS
• If you are using a Windows operating system, turn off the Windows firewall. The Windows firewall
limits the number of TCP connections. When the limit is reached, you cannot log in to the Web interface.

Web browser requirements

• HP recommends that you use the following Web browsers:
{ Internet Explorer 6 SP2 or higher
{ Mozilla Firefox 3 or higher
{ Google Chrome 2.0.174.0 or higher
• If you are using a Microsoft Internet Explorer browser, you must enable the security settings (see
"Enabling securing settings in a Mic controls and plug-ins, Script ActiveX controls marked safe for scripting, and Active scripting.
• If you are using a Mozilla Firefox browser, you must enable JavaScript (see "Enabling JavaScript in a
refox browserEnabling JavaScript in a Firefox browser")
Fi
Enabling securing settings in a Microsoft Internet Explorer browser
1. Launch the Internet Explorer, and select Tools > Internet Options from the main menu.
2. Select the Security tab, and select the content zone where the target Website resides, as shown
in Figure 1.
rosoft Internet Explorer browser"), including Run ActiveX
.
2
Figure 1 Internet Explorer settings (1)
3. Click Custom Level.
4. In the Security Settings dialog box, enable Run ActiveX controls and plug-ins, Script ActiveX
controls marked safe for scripting, and Active scripting.
3
Figure 2 Internet Explorer settings (2)
5. Click OK to save your settings.
Enabling JavaScript in a Firefox browser
1. Launch the Firefox browser, and select Tools > Options.
2. In the Options dialog box, click the Content icon, and select Enable JavaScript.
4
Figure 3 Firefox browser settings
3. Click OK to save your settings.

Others

• The Web interface does not support the Back, Next, and Refresh buttons provided by the browser.
• To ensure correct display of Web page contents after software upgrade or downgrade, clear data
• If you click the verification code displayed on the Web login page, you can get a new verification
• Up to five users can concurrently log in to the device through the Web interface.
• A list can contain a maximum of 20000 entries if displayed in pages.
• The PC where you configure the device is not necessarily a Web-based network management
• After logging in to the Web interface, you can select Device > Users from the navigation tree, create
Using these buttons might result in abnormal display of Web pages.
cached by the browser before you log in.
code.
terminal. A Web-based network management terminal is a PC used to log in to the Web interface and is required to be reachable to the device.
a new user, and select Wizard or Network > VLAN interface to configure the IP address of the VLAN interface acting as the management interface. For more information, see the corresponding configuration guides of these modules.
5

Overview

The device provides web-based configuration interfaces for visual device management and maintenance.
Figure 4 Web-based network management operating environment

Logging in to the Web interface

You can use the following default settings to log in to the web interface through HTTP:
• Username—admin
• Password—None
• IP address of VLAN-interface 1 on the device—IP address of the device, depending on the status of
the network where the device resides.
{ If the device is not connected to the network, or no DHCP server exists in the subnet where the
device resides, you can get the IP address of the device on the label on the device. IP address is 169.254.xxx.xxx. If the MAC address is 08004E000102, the IP address would be
169. 2 54 .1.2 .
{ If a DHCP server exists in the subnet where the device resides, the device will dynamically
obtain its IP address through the DHCP server.
You can log in to the device through the console port, and execute the summary command to view the information about its IP address.
<Sysname> summary Select menu option: Summary IP Method: DHCP IP address: 169.254.1.2 Subnet mask: 255.255.0.0 Default gateway: 0.0.0.0 <Omitted>
Assuming that the IP address of the device is 169.254.1.2, to log in to the Web interface of the device from a PC:
1. Connect the Ethernet interface of the device to a PC by using a crossover Ethernet cable. By default,
all interfaces belong to VLAN 1.
2. Configure an IP address for the PC and make sure that the PC and device can reach each other.
For example, assign the PC an IP address (for example, 169.254.1.27) within 169.254.0.0/16 (except for the IP address of the device).
3. Open the browser, and input the login information. a. Type the IP address http:// 169.254.1.2 in the address bar and press Enter.
The login page of the web interface (see Figure 5) appears.
6
b. Enter the username admin and the verification code, leave the password blank, and click
Login.
Figure 5 Login page of the Web interface

Logging out of the Web interface

CAUTION:
• You cannot log out by directly closing the browser.
• For security purposes, log out of the Web interface after you finish your operations.
1. Save the current configuration.
Because the system does not save the current configuration automatically, HP recommends that you perform this step to avoid loss of configuration.
2. Click Logout in the upper-right corner of the Web interface.

Web interface

The Web interface includes three parts: navigation tree, title area, and body area, as shown in Figure 6.
Figure 6 Web-based configuration interface
(1) Navigation tree
(2) Body area
7
(3) Title area
• Navigation tree—Organizes the Web-based NM functions as a navigation tree, where you can
p
select and configure functions as needed. The result is displayed in the body area.
• Body area—Allows you to configure and display features.
• Title area—On the left, displays the path of the current configuration interface in the navigation
area; on the right, provides the Save button to quickly save the current configuration, the Help button to display the Web-related help information, and the Logout button to log out of the Web interface.

Web user level

Web user levels, from low to high, are visitor, monitor, configure, and management. A user with a higher level has all the operating rights of a user with a lower level.
• Visitor—Users of this level can only use the network diagnostic tools ping and Trace Route. They
can neither access the device data nor configure the device.
• Monitor—Users of this level can only access the device data but cannot configure the device.
• Configure—Users of this level can access device data and configure the device, but they cannot
upgrade the host software, add/delete/modify users, or backup/restore configuration files.
• Management—Users of this level can perform any operations to the device.

Web-based NM functions

User level in Table 1 indicates that users of this level or users of a higher level can perform the corresponding operations.
Table 1 Web-based NM function description
Function menu Descri
Wizard IP Setup Perform quick configuration of the device. Management
Display global settings and port settings of a stack. Configure
Configure global parameters and stack ports. Management
Display the topology summary of a stack. Configure
Display the control panels of stack members. Configure
Display the basic system information, system resource state, and recent system operation logs.
Display the port information about the device. Monitor
Display and configure the idle timeout period for logged-in users.
Upload upgrade file from local host, and upgrade the system software.
Stack
Summary
Devi ce
Basic
Device Maintenanc e
Setup
Topology Summary
Device Summary
System Information
Device Information
System Name Display and configure the system name. Configure
Web Idle Timeout
Software Upgrade
Reboot Reboot the device. Management
tion
User level
Monitor
Configure
Management
8
Function menu Description
User level
System Time
Syslog
Configurati on
Electronic Label
Diagnostic Information
System Time Display and configure the system date and time. Configure
Net Time
Loglist
Loghost Display and configure the loghost. Configure
Log Setup
Backup
Restore
Save
Display the electronic label of the device. Monitor
Generate diagnostic information file and view or save the file to local host.
Display the synchronization status of the system clock and configure the network time.
Display and refresh system logs. Monitor
Clear system logs. Configure
Display and configure the buffer capacity and interval for refreshing system logs.
Back up the configuration file to be used at the next startup from the device to the host of the current user.
Upload the configuration file to be used at the next startup from the host of the current user to the device.
Save the current configuration to the configuration file to be used at the next startup.
Management
Monitor
Configure
Management
Management
Configure
File Manageme nt
Port Manageme nt
Port Mirroring
Users
Initialize Restore the factory default settings. Configure
File Management
Summary Display port information by features. Monitor
Detail Display feature information by ports. Monitor
Setup
Summary
Add Create a port mirroring group. Configure
Remove Remove a port mirroring group. Configure
Modify Port Configure ports for a mirroring group. Configure
Summary
Super Password
Create Create an FTP or Telnet user. Management
Manage files on the device, such as displaying the file list, downloading a file, uploading a file, and removing a file.
Create, modify, delete, and enable/disable a port, and clear port statistics.
Display the configuration information about a port mirroring group.
Display the brief information about FTP and Telnet users.
Configure a password for a lower-level user to switch from the current access level to the management level.
Management
Configure
Monitor
Monitor
Management
Modify Modify FTP or Telnet user information. Management
Remove Remove an FTP or a Telnet user. Management
9
Function menu Description
User level
Switch To Management
Loopback Loopback Perform loopback tests on Ethernet interfaces. Configure
VCT VCT
Flow Interval
RMON
Energy Saving
Port Traffic Statistics
Statistics
History
Alarm Display, create, modify, and clear alarm entries. Configure
Event Display, create, modify, and clear event entries. Configure
Log Display log information about RMON events. Configure
Energy Saving
Setup
Switch the current user level to the management level.
Check the status of the cables connected to Ethernet ports.
Display the average rate at which the interface receives and sends packets within a specified time interval.
Display, create, modify, and clear RMON statistics.
Display, create, modify, and clear RMON history sampling information.
Display and configure the energy saving settings of an interface.
Display and refresh SNMP configuration and statistics information.
Configure SNMP. Configure
Visitor
Configure
Monitor
Configure
Configure
Configure
Monitor
SNMP
Interface Statistics
Community
Group
User
Trap
View
Interface Statistics
Display SNMP community information. Monitor
Create, modify, and delete an SNMP community. Configure
Display SNMP group information. Monitor
Create, modify, and delete an SNMP group. Configure
Display SNMP user information. Monitor
Create, modify, and delete an SNMP user. Configure
Display the status of the SNMP trap function and information about target hosts.
Enable or disable the SNMP trap function; create, modify, and delete a target host.
Display SNMP view information. Monitor
Create, modify, and delete an SNMP view. Configure
Display and clear the statistics information about an interface.
Monitor
Configure
Configure
10
Function menu Description
Select VLAN Select a VLAN range. Monitor
Create Create VLANs. Configure
Port Detail Display the VLAN-related details of a port. Monitor
User level
Net work
VLAN
VLAN Interface
Voice VLAN
Detail
Modify VLAN
Modify Port Change the VLAN to which a port belongs. Configure
Remove Remove VLANs. Configure
Summary
Create
Modify
Remove Remove VLAN interfaces. Configure
Summary
Setup Configure the global voice VLAN. Configure
Port Setup Configure a voice VLAN on a port. Configure
OUI Summary
Display the member port information about a VLAN.
Modify the description and member ports of a VLAN.
Display information about VLAN interfaces by address type.
Create VLAN interfaces and configure IP addresses for them.
Modify the IP addresses and status of VLAN interfaces.
Display voice VLAN information globally or on a port.
Display the addresses of the OUIs that can be identified by voice VLAN.
Monitor
Configure
Monitor
Configure
Configure
Monitor
Monitor
MAC
MSTP
Link Aggregatio n
OUI Add
OUI Remove
MAC
Setup Display and configure MAC address aging time. Configure
Region
Global Set global MSTP parameters. Configure
Port Summary Display the MSTP information about ports. Monitor
Port Setup Set MSTP parameters on ports. Configure
Summary
Create Create link aggregation groups. Configure
Modify Modify link aggregation groups. Configure
Remove Remove link aggregation groups. Configure
Add the address of an OUI that can be identified by voice VLAN.
Remove the address of an OUI that can be identified by voice VLAN.
Display MAC address information. Monitor
Create and remove MAC addresses. Configure
Display information about MST regions. Monitor
Modify MST regions. Configure
Display information about link aggregation groups.
Configure
Configure
Monitor
11
Function menu Description
User level
LACP
LLDP
ARP Manageme nt
Summary
Setup Set LACP priorities. Configure
Port Setup
Global Setup
Global Summary
Neighbor Summary
ARP Table
Gratuitous ARP
Display information about LACP-enabled ports and their partner ports.
Display the LLDP configuration information, local information, neighbor information, statistics information, and status information about a port.
Modify LLDP configuration on a port. Configure
Display global LLDP configuration information. Monitor
Configure global LLDP parameters. Configure
Display global LLDP local information and statistics. Monitor
Display global LLDP neighbor information. Monitor
Display ARP table information. Monitor
Add, modify, and remove ARP entries. Configure
Display the configuration information about gratuitous ARP.
Configure gratuitous ARP. Configure
Monitor
Monitor
Monitor
ARP Anti-Attack
IGMP Snooping
MLD Snooping
ARP Detection
Basic
Advanced
Basic
Advanced
Summary Display the IPv4 active route table. Monitor
Display ARP detection configuration information. Monitor
Configure ARP detection. Configure
Display global IGMP snooping configuration information or the IGMP snooping configuration information in a VLAN, and the IGMP snooping multicast entry information.
Configure IGMP snooping globally or in a VLAN. Configure
Display the IGMP snooping configuration information on a port.
Configure IGMP snooping on a port. Configure
Display global MLD snooping configuration information or the MLD snooping configuration information in a VLAN, and the MLD snooping multicast entry information.
Configure MLD snooping globally or in a VLAN. Configure
Display the MLD snooping configuration information on a port.
Configure MLD snooping on a port. Configure
Monitor
Monitor
Monitor
Monitor
IPv4 Routing
Create Create an IPv4 static route. Configure
Remove Delete the selected IPv4 static routes. Configure
12
Function menu Description
Summary Display the IPv6 active route table. Monitor
User level
IPv6 Routing
DHCP
Service Service
Diagnostic Tools
Create Create an IPv6 static route. Configure
Remove Delete the selected IPv6 static routes. Configure
DHCP Relay
DHCP Snooping
IPv4 Ping Ping an IPv4 address. Visitor
IPv6 Ping Ping an IPv6 address. Visitor
IPv4 Traceroute
Display information about the DHCP status, advanced configuration information about the DHCP relay agent, DHCP server group configuration, DHCP relay agent interface configuration, and the DHCP client information.
Enable/disable DHCP, configure advanced DHCP relay agent settings, configure a DHCP server group, and enable/disable the DHCP relay agent on an interface.
Display the status, trusted and untrusted ports and DHCP client information about DHCP snooping.
Enable/disable DHCP snooping, and configure DHCP snooping trusted and untrusted ports.
Display the states of services: enabled or disabled. Configure
Enable/disable services, and set related parameters.
Perform IPv4 trace route operations. Visitor
Monitor
Configure
Monitor
Configure
Management
Auth entic ation
IPv6 Traceroute
MAC Authenticati on
802.1X 802.1X
Port Security Port Security
AAA
MAC Authentication
Domain Setup
Authentication
Authorization
Perform IPv6 trace route operations. Visitor
Display MAC authentication configuration information.
Configure MAC authentication. Configure
Display 802.1X configuration information globally or on a port.
Configure 802.1X globally or on a port. Configure
Display port security configuration information. Monitor
Configure port security. Configure
Display ISP domain configuration information. Monitor
Add and remove ISP domains. Management
Display the authentication configuration information about an ISP domain.
Specify authentication methods for an ISP domain. Management
Display the authorization method configuration information about an ISP domain.
Specify authorization methods for an ISP domain. Management
Monitor
Monitor
Monitor
Monitor
13
Function menu Description
User level
RADIUS
Users
Certificate Manageme nt
Display the accounting method configuration
Accounting
RADIUS Server Display and configure RADIUS server information. Management
RADIUS Setup Display and configure RADIUS parameters. Management
Local User
User Group
Entity
Domain
Certificate
information about an ISP domain.
Specify accounting methods for an ISP domain. Management
Display configuration information about local users.
Create, modify, and remove a local user. Management
Display configuration information about user groups.
Create, modify, and remove a user group. Management
Display information about PKI entities. Monitor
Add, modify, and delete a PKI entity. Configure
Display information about PKI domains. Monitor
Add, modify, and delete a PKI domain. Configure
Display the certificate information about PKI domains and the contents of a certificate.
Generate a key pair, destroy a key pair, retrieve a certificate, request a certificate, and delete a certificate.
Monitor
Monitor
Monitor
Monitor
Configure
Secu rity
QoS
Port Isolate Group
Authorized IP
Loopback Detection
Time Range
ACL IPv4
CRL
Summary Display port isolation group information. Monitor
Port Setup Configure the ports in an isolation group. Configure
Summary
Setup Configure authorized IP. Management
Loopback Detection
Summary Display time range configuration information. Monitor
Create Create a time range. Configure
Remove Delete a time range. Configure
Summary Display IPv4 ACL configuration information. Monitor
Create Create an IPv4 ACL. Configure
Basic Setup Configure a rule for a basic IPv4 ACL. Configure
Advanced Setup
Display the contents of the CRL. Monitor
Receive the CRL of a domain. Configure
Display the configurations of authorized IP, the associated IPv4 ACL list, and the associated IPv6 ACL list.
Display and configure system loopback detection parameters and port loopback detection parameters.
Configure a rule for an advanced IPv4 ACL. Configure
Management
Configure
14
Function menu Description
Link Setup Create a rule for a link layer ACL. Configure
Remove Delete an IPv4 ACL or its rules. Configure
Summary Display IPv6 ACL configuration information. Monitor
Create Create an IPv6 ACL. Configure
User level
ACL IPv6
Queue
Line Rate
Classifier
Behavior
Basic Setup Configure a rule for a basic IPv6 ACL. Configure
Advanced Setup
Remove Delete an IPv6 ACL or its rules. Configure
Summary Display the queue information about a port. Monitor
Setup Configure a queue on a port. Configure
Summary Display line rate configuration information. Monitor
Setup Configure the line rate. Configure
Summary Display classifier configuration information. Monitor
Create Create a class. Configure
Setup Configure the classification rules for a class. Configure
Remove Delete a class or its classification rules. Configure
Summary Display traffic behavior configuration information. Monitor
Create Create a traffic behavior. Configure
Setup Configure actions for a traffic behavior. Configure
Port Setup
Configure a rule for an advanced IPv6 ACL. Configure
Configure traffic mirroring and traffic redirecting for a traffic behavior
Configure
Remove Delete a traffic behavior. Configure
Summary Display QoS policy configuration information. Monitor
Create Create a QoS policy. Configure
QoS Policy
Port Policy
Priority Mapping
Port Priority Port Priority
Setup
Remove
Summary Display the QoS policy applied to a port. Monitor
Setup Apply a QoS policy to a port. Configure
Remove Remove the QoS policy from the port. Configure
Priority Mapping
Configure the classifier-behavior associations for a QoS policy.
Delete a QoS policy or its classifier-behavior associations.
Display priority mapping table information. Monitor
Modify the priority mapping entries. Configure
Display port priority and trust mode information. Monitor
Modify port priority and trust mode. Configure
Configure
Configure
15
Function menu Description
User level
Display PSE information and PoE interface information.
PoE PoE
Summary
PSE Setup Configure a PoE interface. Configure
Port Setup Configure a port. Configure

Common items on the Web pages

Buttons and icons

Table 2 Commonly used buttons and icons
Button and icon Function
Applies the configuration on the current page.
Cancels the configuration on the current page.
Refreshes the current page.
Clears all entries in a list or all statistics.
Adds an item.
Monitor
,

Page display function

The Web interface can display contents by pages, as shown in Figure 7. You can set the number of entries displayed per page, and view the contents on the first, previous, next, and last pages, or go to any page that you want to check.
Removes the selected items.
Selects all the entries in a list.
Clears selection of all entries in a list.
Buffers but does not apply the configuration of the current step, and enters the next configuration step.
Buffers but does not apply the configuration of the current step, and returns to the previous configuration step.
Applies the configurations of all configuration steps.
Enters the modification page of an item so that you can modify the configurations of the item.
Deletes the item corresponding to this icon.
16
Figure 7 Content display by pages

Search function

The Web interface provides you with the basic and advanced searching functions to display only the entries that match specific searching criteria.
• Basic search—As shown in Figure 7, t
item from the list and click Search to display the entries that match the criteria. Figure 8 sh
ype the keyword in the text box above the list, select a search
ows an
example of searching for entries with LLDP disabled.
Figure 8 Basic search function example
• Advanced search—As shown in Figure 9, you can click the Advanced Search link to open the
advanced search area. Specify the search criteria, and click Apply to display the entries that match the criteria.
17
Loading...
+ 486 hidden pages
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use