HP 6120 User Manual

August 2009
ProCurve Series 6120 Switches
Management and Configuration Guide
© Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change with­out notice. All Rights Reserved.
This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Hewlett­Packard.
Publication Number
5992-5523 August 2009
Applicable Products
HP ProCurve Switch 6120G/XG (498358-B21) HP ProCurve Switch 6120XG (516733-B21)
Trademark Credits
Microsoft, Windows, and Microsoft Windows NT are US registered trademarks of Microsoft Corporation. Java™ is a US trademark of Sun Microsystems, Inc.
Disclaimer
The information contained in this document is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett-Packard.
Warranty
See the Customer Support/Warranty information at
http://www.hp.com/#Support
A copy of the specific warranty terms applicable to your Hewlett-Packard products and replacement parts can be obtained from your HP Sales and Service Office or authorized dealer.
.
HP Contact Information
For the name of the nearest HP authorized reseller:
• See the Contact HP worldwide (in English) webpage
(http://welcome.hp.com/country/us/en/wwcontact.html).
For HP technical support:
• In the United States, for contact options see the Contact HP United States webpage (http://welcome.hp.com/country/us/en/contact_us.html).
To contact HP by phone:
• Call 1-800-HP-INVENT (1-800-474-6836). This service is available 24 hours a day, 7 days a week. For continuous quality improvement, calls may be recorded or monitored.
• If you have purchased a Care Pack (service upgrade), call 1-800-633-3600. For more information about Care Packs, refer to the HP website (http://www.hp.com/hps).
• In other locations, see the Contact HP worldwide (in
English) webpage
(http://welcome.hp.com/country/us/en/wwcontact.html).
Hewlett-Packard Company 8000 Foothills Boulevard, m/s 5551 Roseville, California 95747-5551 http://www.procurve.com
ii
Contents
Product Documentation
About Your Switch Manual Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
Printed Publications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
Electronic Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
Software Feature Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii
1 Getting Started
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Command Syntax Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Command Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Screen Simulations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Configuration and Operation Examples . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Sources for More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
Getting Documentation From the Web . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Menu Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Web Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Need Only a Quick Start? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
IP Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
To Set Up and Install the Switch in Your Network . . . . . . . . . . . . . . . 1-8
Physical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
2 Selecting a Management Interface
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
iii
Understanding Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
Understanding Management Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
Advantages of Using the Menu Interface . . . . . . . . . . . . . . . . . . . . . . . . 2-4
Advantages of Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
General Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Information on Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Advantages of Using the Web Browser Interface . . . . . . . . . . . . . . . . 2-6
Advantages of Using ProCurve Manager
or ProCurve Manager Plus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Custom Login Banners for the Console and
Web Browser Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9
Banner Operation with Telnet, Serial, or SSHv2 Access . . . . . . . . 2-9
Banner Operation with Web Browser Access . . . . . . . . . . . . . . . . 2-9
Configuring and Displaying a Non-Default Banner . . . . . . . . . . . 2-10
Example of Configuring and Displaying a Banner . . . . . . . . . . . . 2-11
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
3 Using the Menu Interface
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Starting and Ending a Menu Session . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3
How To Start a Menu Interface Session . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
How To End a Menu Session and Exit from the Console: . . . . . . . . . . 3-5
Main Menu Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7
Screen Structure and Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-9
Rebooting the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-12
Menu Features List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14
Where To Go From Here . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-15
4 Using the Command Line Interface (CLI)
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
iv
Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Privilege Levels at Logon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Privilege Level Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Operator Privileges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Manager Privileges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5
How To Move Between Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
Listing Commands and Command Options . . . . . . . . . . . . . . . . . . . . . . 4-8
Listing Commands Available at Any Privilege Level . . . . . . . . . . . 4-8
Listing Command Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10
Displaying CLI “Help” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11
Configuration Commands and the Context Configuration Modes . . 4-13
CLI Control and Editing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Executing a Prior Command—Redo . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Repeating Execution of a Command . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Using a Command Alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18
CLI Shortcut Keystrokes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-20
5 Using the ProCurve Web Browser Interface
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
General Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3
Starting a Web Browser
Interface Session with the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
Using a Standalone Web Browser in a PC or UNIX Workstation . . . . 5-4
Using ProCurve Manager (PCM) or
ProCurve Manager Plus (PCM+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
Tasks for Your First ProCurve Web Browser Interface Session . . 5-7
Viewing the “First Time Install” Window . . . . . . . . . . . . . . . . . . . . . . . . 5-7
Security: Creating Usernames and Passwords
in the Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
Entering a User Name and Password . . . . . . . . . . . . . . . . . . . . . . 5-10
Using a User Name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
If You Lose the Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
v
Online Help for the Web Browser Interface . . . . . . . . . . . . . . . . . . . . 5-11
Support/Mgmt URLs Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-12
Support URL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-13
Help and the Management Server URL . . . . . . . . . . . . . . . . . . . . . . . . 5-13
Using the PCM Server for Switch Web Help . . . . . . . . . . . . . . . . . . . . 5-14
Status Reporting Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-16
The Overview Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-16
The Port Utilization and Status Displays . . . . . . . . . . . . . . . . . . . . . . . 5-17
Port Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-17
Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-19
The Alert Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
Sorting the Alert Log Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
Alert Types and Detailed Views . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21
The Status Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22
Setting Fault Detection Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-24
6 Switch Memory and Configuration
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Configuration File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Using the CLI To Implement Configuration Changes . . . . . . . . . . . . 6-6
Using the Menu and Web Browser Interfaces To Implement
Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-10
Menu: Implementing Configuration Changes . . . . . . . . . . . . . . . . . . . 6-10
Using Save and Cancel in the Menu Interface . . . . . . . . . . . . . . . 6-10
Rebooting from the Menu Interface . . . . . . . . . . . . . . . . . . . . . . . 6-11
Web: Implementing Configuration Changes . . . . . . . . . . . . . . . . . . . . 6-13
Using Primary and Secondary Flash Image Options . . . . . . . . . . . . . 6-14
Displaying the Current Flash Image Data . . . . . . . . . . . . . . . . . . . . . . 6-14
Switch Software Downloads . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16
Local Switch Software Replacement and Removal . . . . . . . . . . . . . . 6-17
Rebooting the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-19
Operating Notes about Booting . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-19
Boot and Reload Command Comparison . . . . . . . . . . . . . . . . . . . 6-20
vi
Setting the Default Flash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21
Booting from the Default Flash (Primary or Secondary) . . . . . . 6-22
Booting from a Specified Flash . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-22
Using Reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-23
Multiple Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-25
General Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-26
Transitioning to Multiple Configuration Files . . . . . . . . . . . . . . . . . . . 6-27
Listing and Displaying Startup-Config Files . . . . . . . . . . . . . . . . . . . . . 6-29
Viewing the Startup-Config File Status with Multiple
Configuration Enabled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-29
Displaying the Content of A Specific Startup-Config File . . . . . . 6-30
Changing or Overriding the Reboot Configuration Policy . . . . . . . . . 6-30
Managing Startup-Config Files in the Switch . . . . . . . . . . . . . . . . . . . 6-32
Renaming an Existing Startup-Config File . . . . . . . . . . . . . . . . . . 6-33
Creating a New Startup-Config File . . . . . . . . . . . . . . . . . . . . . . . . 6-33
Erasing a Startup-Config File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-35
Using the Clear + Reset Button Combination To Reset the
Switch to Its Default Configuration . . . . . . . . . . . . . . . . . . . . . . . . 6-37
Transferring Startup-Config Files To or From a Remote Server . . . . 6-37
TFTP: Copying a Configuration File to a Remote Host . . . . . . . . 6-38
TFTP: Copying a Configuration File from a Remote Host . . . . . 6-39
Xmodem: Copying a Configuration File to a Serially
Connected Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-40
Xmodem: Copying a Configuration from a Serially
Connected Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-40
Operating Notes for Multiple Configuration Files . . . . . . . . . . . . 6-41
Automatic Configuration Update with DHCP Option 66 . . . . . . . . 6-41
CLI Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-41
Possible Scenarios for Updating the Configuration File . . . . . . . . . . 6-42
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-42
Log Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-43
7 Interface Access and System Information
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
vii
Interface Access: Console/Serial Link, Web, and Inbound Telnet . 7-3
Menu: Modifying the Interface Access . . . . . . . . . . . . . . . . . . . . . . . . . . 7-4
CLI: Modifying the Interface Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
Denying Interface Access by Terminating Remote Management
Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-11
System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-12
Menu: Viewing and Configuring System Information . . . . . . . . . . . . . 7-13
CLI: Viewing and Configuring System Information . . . . . . . . . . . . . . 7-14
Web: Configuring System Parameters . . . . . . . . . . . . . . . . . . . . . . . . . 7-19
8 Configuring IP Addressing
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
Just Want a Quick Start with IP Addressing? . . . . . . . . . . . . . . . . . . . . 8-3
IP Addressing with Multiple VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
Menu: Configuring IP Address, Gateway, and Time-To-Live (TTL) . . 8-5
CLI: Configuring IP Address, Gateway, and Time-To-Live (TTL) . . . . 8-6
Web: Configuring IP Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-10
How IP Addressing Affects Switch Operation . . . . . . . . . . . . . . . . . . . 8-11
DHCP/Bootp Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-12
Network Preparations for Configuring DHCP/Bootp . . . . . . . . . 8-14
viii
IP Preserve: Retaining VLAN-1 IP
Addressing Across Configuration File Downloads . . . . . . . . . . . . . . 8-16
Operating Rules for IP Preserve . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-16
Enabling IP Preserve . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-17
9 Time Protocols
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
TimeP Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
SNTP Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
Selecting a Time Synchronization Protocol or Turning Off Time
Protocol Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-3
General Steps for Running a Time Protocol on the Switch: . . . . . . . . 9-3
Disabling Time Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-3
SNTP: Viewing, Selecting, and Configuring . . . . . . . . . . . . . . . . . . . . . 9-4
Menu: Viewing and Configuring SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . 9-5
CLI: Viewing and Configuring SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-8
Viewing the Current SNTP Configuration . . . . . . . . . . . . . . . . . . . . 9-8
Configuring (Enabling or Disabling) the SNTP Mode . . . . . . . . . 9-10
TimeP: Viewing, Selecting, and Configuring . . . . . . . . . . . . . . . . . . . . 9-16
Menu: Viewing and Configuring TimeP . . . . . . . . . . . . . . . . . . . . . . . . 9-17
CLI: Viewing and Configuring TimeP . . . . . . . . . . . . . . . . . . . . . . . . . . 9-18
Viewing the Current TimeP Configuration . . . . . . . . . . . . . . . . . . 9-19
Configuring (Enabling or Disabling) the TimeP Mode . . . . . . . . 9-20
SNTP Unicast Time Polling with Multiple SNTP Servers . . . . . . . . 9-25
Displaying All SNTP Server Addresses Configured on the Switch . . 9-25
Adding and Deleting SNTP Server Addresses . . . . . . . . . . . . . . . . . . . 9-26
Menu: Operation with Multiple SNTP Server Addresses
Configured . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-26
SNTP Messages in the Event Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-26
10 Port Status and Configuration
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3
Viewing Port Status and Configuring Port Parameters . . . . . . . . . . 10-3
Menu: Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6
CLI: Viewing Port Status and Configuring Port Parameters . . . . . . . 10-8
Viewing Port Status and Configuration . . . . . . . . . . . . . . . . . . . . . 10-8
Customizing the Show Interfaces Command . . . . . . . . . . . . . . . . . . . 10-10
Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-12
Note on Using Pattern Matching with the “Show Interfaces Custom”
Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-13
Viewing Port Utilization Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-13
Viewing Transceiver Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-14
Enabling or Disabling Ports and Configuring Port Mode . . . . . . . . . 10-15
Enabling or Disabling Flow Control . . . . . . . . . . . . . . . . . . . . . . . . . . 10-17
ix
Configuring a Broadcast Limit on the Switch . . . . . . . . . . . . . . . . . . 10-18
Configuring ProCurve Auto-MDIX . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-19
Web: Viewing Port Status and Configuring Port Parameters . . . . . 10-22
Using Friendly (Optional) Port Names . . . . . . . . . . . . . . . . . . . . . . . 10-23
Configuring and Operating Rules for Friendly Port Names . . . . . . . 10-23
Configuring Friendly Port Names . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-24
Displaying Friendly Port Names with Other Port Data . . . . . . . . . . 10-25
Configuring Transceivers and Modules That Haven’t
Been Inserted . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-29
Transceivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-29
Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-29
Clearing the Module Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-29
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-30
Uni-Directional Link Detection (UDLD) . . . . . . . . . . . . . . . . . . . . . . 10-31
Configuring UDLD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-32
Enabling UDLD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-33
Changing the Keepalive Interval . . . . . . . . . . . . . . . . . . . . . . . . . 10-34
Changing the Keepalive Retries . . . . . . . . . . . . . . . . . . . . . . . . . . 10-34
Configuring UDLD for Tagged Ports . . . . . . . . . . . . . . . . . . . . . . 10-34
Viewing UDLD Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-35
Configuration Warnings and Event Log Messages . . . . . . . . . . . . . . 10-37
11 Port Trunking
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2
Port Trunk Features and Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-4
Trunk Configuration Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-4
Menu: Viewing and Configuring a Static Trunk Group . . . . . . . . . . 11-9
CLI: Viewing and Configuring Port Trunk Groups . . . . . . . . . . . . . 11-11
Using the CLI To View Port Trunks . . . . . . . . . . . . . . . . . . . . . . . . . . 11-11
Using the CLI To Configure a Static or Dynamic Trunk Group . . . 11-14
Web: Viewing Existing Port Trunk Groups . . . . . . . . . . . . . . . . . . . . 11-17
Trunk Group Operation Using LACP . . . . . . . . . . . . . . . . . . . . . . . . . 11-18
x
Default Port Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-21
LACP Notes and Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-22
Trunk Group Operation Using the “Trunk” Option . . . . . . . . . . . . 11-26
How the Switch Lists Trunk Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-27
Outbound Traffic Distribution Across Trunked Links . . . . . . . . . 11-27
12 Port Traffic Controls
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2
Jumbo Frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2
Operating Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-3
Configuring Jumbo Frame Operation . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4
Viewing the Current Jumbo Configuration . . . . . . . . . . . . . . . . . . 12-5
Enabling or Disabling Jumbo Traffic on a VLAN . . . . . . . . . . . . . 12-7
Configuring a Maximum Frame Size . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-7
SNMP Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-7
Displaying the Maximum Frame Size . . . . . . . . . . . . . . . . . . . . . . 12-8
Operating Notes for Maximum Frame Size . . . . . . . . . . . . . . . . . 12-8
Operating Notes for Jumbo Traffic-Handling . . . . . . . . . . . . . . . . . . . 12-9
Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-11
13 Configuring for Network Management Applications
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-1
Using SNMP Tools To Manage the Switch . . . . . . . . . . . . . . . . . . . . . . 13-3
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-3
SNMP Management Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-5
Configuring for SNMP version 1 and 2c Access to the Switch . . . . . 13-5
Configuring for SNMP Version 3 Access to the Switch . . . . . . . . . . . 13-6
SNMP Version 3 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-7
Enabling SNMPv3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-8
SNMPv3 Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-8
xi
Group Access Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-12
SNMPv3 Communities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-12
Menu: Viewing and Configuring non-SNMP version 3
Communities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-14
CLI: Viewing and Configuring SNMP Community Names . . . . 13-16
SNMP Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-18
Supported Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-18
General Steps for Configuring SNMP Notifications . . . . . . . . . 13-19
SNMPv1 and SNMPv2c Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-20
Configuring an SNMP Trap Receiver . . . . . . . . . . . . . . . . . . . . . . 13-20
Enabling SNMPv2c Informs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-22
Configuring SNMPv3 Notifications . . . . . . . . . . . . . . . . . . . . . . . 13-24
Managing Network Security Notifications . . . . . . . . . . . . . . . . . 13-27
Enabling Link-Change Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-29
Configuring the Source IP Address for SNMP Notifications . . 13-30
Displaying SNMP Notification Configuration . . . . . . . . . . . . . . . 13-32
Configuring Listening Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-34
Advanced Management: RMON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-35
LLDP (Link-Layer Discovery Protocol) . . . . . . . . . . . . . . . . . . . . . . . 13-36
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-37
General LLDP Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-39
LLDP-MED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-39
Packet Boundaries in a Network Topology . . . . . . . . . . . . . . . . . . . . 13-39
Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-40
Options for Reading LLDP Information Collected by the Switch . . 13-42
LLDP and LLDP-MED Standards Compatibility . . . . . . . . . . . . . . . . 13-42
LLDP Operating Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-43
Configuring LLDP Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-44
Viewing the Current Configuration . . . . . . . . . . . . . . . . . . . . . . . 13-44
Configuring Global LLDP Packet Controls . . . . . . . . . . . . . . . . . 13-46
Configuring SNMP Notification Support . . . . . . . . . . . . . . . . . . . 13-50
Configuring Per-Port Transmit and Receive Modes . . . . . . . . . 13-51
Configuring Basic LLDP Per-Port Advertisement Content . . . . 13-52
Configuring Support for Port Speed and Duplex
Advertisements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-54
LLDP-MED (Media-Endpoint-Discovery) . . . . . . . . . . . . . . . . . . . . . 13-55
xii
LLDP-MED Topology Change Notification . . . . . . . . . . . . . . . . . 13-58
LLDP-MED Fast Start Control . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-60
Advertising Device Capability, Network Policy, PoE Status
and Location Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-60
Configuring Location Data for LLDP-MED Devices . . . . . . . . . 13-63
Displaying Advertisement Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-68
Displaying Switch Information Available for Outbound
Advertisements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-69
Displaying LLDP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-73
LLDP Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-75
LLDP and CDP Data Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-77
LLDP and CDP Neighbor Data . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-77
CDP Operation and Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 13-79
A File Transfers
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3
Downloading Switch Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3
General Software Download Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-4
Using TFTP To Download Software from a Server . . . . . . . . . . . . . . A-4
Menu: TFTP Download from a Server to Primary Flash . . . . . . . A-5
CLI: TFTP Download from a Server to Flash . . . . . . . . . . . . . . . . A-7
Enabling TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-9
Using Auto-TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-11
Using Secure Copy and SFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-12
How It Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-13
The SCP/SFTP Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-13
Disable TFTP and Auto-TFTP for Enhanced Security . . . . . . . A-14
Command Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-15
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-16
SCP/SFTP Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-16
Troubleshooting SSH, SFTP, and SCP Operations . . . . . . . . . . A-18
Using Xmodem to Download Switch Software From a PC or UNIX
Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-19
Menu: Xmodem Download to Primary Flash . . . . . . . . . . . . . . . A-20
xiii
CLI: Xmodem Download from a PC or UNIX Workstation to
Primary or Secondary Flash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-21
Switch-to-Switch Download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-22
Menu: Switch-to-Switch Download to Primary Flash . . . . . . . . A-22
CLI: Switch-To-Switch Downloads . . . . . . . . . . . . . . . . . . . . . . . A-23
Using PCM+ to Update Switch Software . . . . . . . . . . . . . . . . . . . . . . A-24
Copying Software Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-25
TFTP: Copying a Software Image to a Remote Host . . . . . . . . . A-25
Xmodem: Copying a Software Image from the Switch to a
USB Serial Console Connected PC or UNIX Workstation . . . . A-25
Transferring Switch Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . A-26
TFTP: Copying a Configuration File to a Remote Host . . . . . . . A-26
TFTP: Copying a Configuration File from a Remote Host . . . . A-27
TFTP: Copying a Customized Command File to a Switch . . . . A-27
Xmodem: Copying a Configuration File to a USB Serial Console
Connected PC or UNIX Workstation . . . . . . . . . . . . . . . . . . . . . . A-28
Xmodem: Copying a Configuration File from a Serially
Connected PC or UNIX Workstation . . . . . . . . . . . . . . . . . . . . . . A-29
Copying Diagnostic Data to a Remote
Host, USB Device, PC or UNIX Workstation . . . . . . . . . . . . . . . . . . . A-30
Copying Command Output to a Destination Device . . . . . . . . . A-31
Copying Event Log Output to a Destination Device . . . . . . . . . A-31
Copying Crash Data Content to a Destination Device . . . . . . . A-32
Copying Crash Log Data Content to a Destination Device . . . . A-33
xiv
B Monitoring and Analyzing Switch Operation
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-3
Status and Counters Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-4
Menu Access To Status and Counters . . . . . . . . . . . . . . . . . . . . . . . . . B-5
General System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-6
Menu Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-6
CLI Access to System Information . . . . . . . . . . . . . . . . . . . . . . . . B-7
Task Monitor—Collecting Processor Data . . . . . . . . . . . . . . . . . . . . . B-8
Switch Management Address Information . . . . . . . . . . . . . . . . . . . . . . B-8
Menu Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-8
CLI Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-9
Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-10
Menu: Displaying Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-10
CLI Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-10
Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-10
Viewing Port and Trunk Group Statistics and Flow Control Status B-11
Menu Access to Port and Trunk Statistics . . . . . . . . . . . . . . . . . B-12
CLI Access To Port and Trunk Group Statistics . . . . . . . . . . . . B-13
Web Browser Access To View Port and Trunk Group Statistics B-13
Viewing the Switch’s MAC Address Tables . . . . . . . . . . . . . . . . . . . . B-14
Menu Access to the MAC Address Views and Searches . . . . . . B-14
CLI Access for MAC Address Views and Searches . . . . . . . . . . B-17
Spanning Tree Protocol (MSTP) Information . . . . . . . . . . . . . . . . . . B-18
CLI Access to MSTP Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-18
Internet Group Management Protocol (IGMP) Status . . . . . . . . . . . B-19
VLAN Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-20
Web Browser Interface Status Information . . . . . . . . . . . . . . . . . . . . B-22
Traffic Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-23
Mirroring Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-24
Mirrored Traffic Destinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-26
Local Destinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-26
Monitored Traffic Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-26
Criteria for Selecting Mirrored Traffic . . . . . . . . . . . . . . . . . . . . . . . . B-26
Mirroring Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-26
Mirroring Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-27
Endpoint Switches and Intermediate Devices . . . . . . . . . . . . . . B-28
Using the Menu or Web Interface To Configure Local Mirroring . . B-29
Menu and Web Interface Limits . . . . . . . . . . . . . . . . . . . . . . . . . . B-29
Configuration Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-30
CLI: Configuring Local Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-33
Local Mirroring Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-33
1. Determine the Mirroring Session and Destination . . . . . . . . . . . . B-35
2. Configure a Mirroring Session on the Source Switch . . . . . . . . . . B-35
3. Configure the Monitored Traffic in a Mirror Session . . . . . . . . . . B-35
xv
Traffic Selection Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-36
Mirroring-Source Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . B-36
Selecting All Inbound/Outbound Traffic to Mirror . . . . . . . . . . . . . . B-36
Displaying a Mirroring Configuration . . . . . . . . . . . . . . . . . . . . . . . . . B-38
Displaying the Mirroring Configuration Summary . . . . . . . . . . B-38
Viewing Mirroring in the Current Configuration File . . . . . . . . B-40
Mirroring Configuration Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . B-41
Local Mirroring Using Traffic-Direction Criteria . . . . . . . . . . . . B-41
Maximum Supported Frame Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-42
Enabling Jumbo Frames To Increase Mirroring Path MTU . . . B-43
Effect of Downstream VLAN Tagging on
Untagged, Mirrored Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-44
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-45
Troubleshooting Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-47
C Troubleshooting
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-4
Troubleshooting Approaches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-5
xvi
Browser or Telnet Access Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . C-7
Unusual Network Activity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-9
General Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-9
802.1Q Prioritization Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-10
IGMP-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-10
LACP-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-11
Port-Based Access Control (802.1X)-Related Problems . . . . . . . . . C-11
QoS-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-14
Radius-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-15
Spanning-Tree Protocol (MSTP) and Fast-Uplink Problems . . . . . . C-16
SSH-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-17
TACACS-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-19
TimeP, SNTP, or Gateway Problems . . . . . . . . . . . . . . . . . . . . . . . . . C-21
VLAN-Related Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-21
Using the Event Log for Troubleshooting Switch Problems . . . . C-24
Event Log Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-24
Menu: Displaying and Navigating in the Event Log . . . . . . . . . . . . . C-31
CLI: Displaying the Event Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-32
CLI: Clearing Event Log Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-32
CLI: Turning Event Numbering On . . . . . . . . . . . . . . . . . . . . . . . . . . . C-33
Using Log Throttling to Reduce Duplicate
Event Log and SNMP Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-33
Log Throttle Periods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-34
Example of Log Throttling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-34
Example of Event Counter Operation . . . . . . . . . . . . . . . . . . . . . C-36
Debug/Syslog Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-37
Debug/Syslog Messaging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-37
Debug/Syslog Destination Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . C-37
Debug/Syslog Configuration Commands . . . . . . . . . . . . . . . . . . . . . . C-38
Configuring Debug/Syslog Operation . . . . . . . . . . . . . . . . . . . . . . . . . C-39
Displaying a Debug/Syslog Configuration . . . . . . . . . . . . . . . . . . C-41
Debug Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-45
Debug Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-45
Debug Destinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-47
Logging Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-48
Configuring a Syslog Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-49
Adding a Description for a Syslog Server . . . . . . . . . . . . . . . . . . . . . . C-51
Adding a Priority Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-52
Configuring the Severity Level for Event Log Messages
Sent to a Syslog Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-53
Configuring the System Module Used to Select the Event Log
Messages Sent to a Syslog Server . . . . . . . . . . . . . . . . . . . . . . . . C-54
Operating Notes for Debug and Syslog . . . . . . . . . . . . . . . . . . . . . . . C-54
Diagnostic Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-56
Port Auto-Negotiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-57
Ping and Link Tests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-57
Web: Executing Ping or Link Tests . . . . . . . . . . . . . . . . . . . . . . . C-58
CLI: Ping Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-59
Link Tests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-60
Traceroute Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-61
xvii
Viewing Switch Configuration and Operation . . . . . . . . . . . . . . . . . C-65
CLI: Viewing the Startup or Running Configuration File . . . . . . . . . C-65
Web: Viewing the Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . C-65
CLI: Viewing a Summary of Switch Operational Data . . . . . . . . . . . C-65
Saving show tech Command Output to a Text File . . . . . . . . . . C-67
Customizing show tech Command Output . . . . . . . . . . . . . . . . . C-68
CLI: Viewing More Information on Switch Operation . . . . . . . . . . . C-71
Pattern Matching When Using the Show Command . . . . . . . . . C-72
CLI: Useful Commands for Troubleshooting Sessions . . . . . . . . . . . C-75
Restoring the Factory-Default Configuration . . . . . . . . . . . . . . . . . C-76
CLI: Resetting to the Factory-Default Configuration . . . . . . . . . . . . C-76
Clear/Reset: Resetting to the Factory-Default Configuration . . . . . C-76
Restoring a Flash Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-77
DNS Resolver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-79
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-79
Basic Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-80
Configuring and Using DNS Resolution with
DNS-Compatible Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-81
Configuring a DNS Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-82
Example Using DNS Names with Ping and Traceroute . . . . . . . . . . C-83
Viewing the Current DNS Configuration . . . . . . . . . . . . . . . . . . . . . . C-85
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-86
Event Log Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-87
xviii
D MAC Address Management
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D-1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D-2
Determining MAC Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D-3
Menu: Viewing the Switch’s MAC Addresses . . . . . . . . . . . . . . . . . . . . D-4
CLI: Viewing the Port and VLAN MAC Addresses . . . . . . . . . . . . . . . . D-5
Viewing the MAC Addresses of Connected Devices . . . . . . . . . . . . . D-7
E Monitoring Resources
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . E-1
Viewing Information on Resource Usage . . . . . . . . . . . . . . . . . . . . . . . E-2
Policy Enforcement Engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . E-2
When Insufficient Resources Are Available . . . . . . . . . . . . . . . . . . . . E-3
F Daylight Savings Time on ProCurve Switches
G Network Out-of-Band Management (OOBM)
Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-1
Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-2
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-5
OOBM and Switch Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-6
Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-7
OOBM Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-7
OOBM context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-7
OOBM enable/disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-8
OOBM port enable/disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-9
OOBM IPv4 address configuration . . . . . . . . . . . . . . . . . . . . . . . G-10
OOBM IPv4 default gateway configuration . . . . . . . . . . . . . . . . G-10
OOBM Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-11
Show OOBM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-11
Show OOBM IP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . G-12
Show OOBM ARP information . . . . . . . . . . . . . . . . . . . . . . . . . . . G-12
Application Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-13
Application Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-15
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . G-16
xix
xx
Product Documentation
About Your Switch Manual Set
Note For the latest version of switch documentation, please visit any of the follow-
ing websites:
www.procurve.com/manuals
www.hp.com/go/bladesystem/documentation
h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html
Printed Publications
The publication listed below is printed and shipped with your switch. The latest version is also available in PDF format, as described in the Note at the top of this page.
Quick Installation Card—Explains how to prepare for and perform the
physical installation and connect the switch to your network.
Electronic Publications
The latest version of each of the publications listed below is available in PDF format on the ProCurve Web site, as described in the Note at the top of this page.
Installation and Getting Started Guide—Describes how to install hard-
ware, and get started using the switch.
Management and Configuration Guide—Describes how to configure,
manage, and monitor basic switch operation.
Advanced Traffic Management Guide—Explains how to configure traffic
management features such as VLANs, MSTP, and QoS.
Multicast and Routing Guide—Explains how to configure IGMP fea-
tures.
Access Security Guide—Explains how to configure access security fea-
tures and user authentication on the switch.
IPv6 Configuration Guide—Describes the IPv6 protocol operations that
are supported on the switch.
Release Notes—Describe new features, fixes, and enhancements that
become available between revisions of the main product guide.
xxi
Software Feature Index
This feature index indicates which manual to consult for information on a given software feature.
Note This Index does not cover IPv6 capable software features. For information on
IPv6 protocol operations and features (such as DHCPv6, DNS for IPv6, and Ping6), refer to the IPv6 Configuration Guide.
Intelligent Edge Software Features. These features are automatically included on all switches.
Intelligent Edge Software Features
802.1Q VLAN Tagging X
802.1X Multiple Authenticated Clients Per Port X
AAA Authentication X
Authorized IP Managers X
Authorized Manager List (Web, Telnet, TFTP) X
Auto MDIX Configuration X
BOOTP X
Config File X
Console Access X
Copy Command X
CoS (Class of Service) X
Debug X
DHCP Configuration X
Management
and
Configuration
Advanced
Management
Traffic
Manual
Multicast and
Routing
Access
Security
Guide
DHCP/Bootp Operation X
Diagnostic Tools X
xxii
Intelligent Edge Software Features
Downloading Software X
Event Log X
Factory Default Settings X
Flow Control (802.3x) X
File Transfers X
Friendly Port Names X
GVRP X
Identity-Driven Management (IDM) X
IGMP X
Interface Access (Telnet, Console/Serial, Web) X
IP Addressing X
Jumbo Packets X
LACP X
Management
and
Configuration
Advanced
Management
Traffic
Manual
Multicast and
Routing
Access
Security
Guide
LLDP X
LLDP-MED X
Loop Protection X
MAC Address Management X
MAC Lockdown X
MAC Lockout X
MAC-based Authentication X
Monitoring and Analysis X
Network Management Applications (SNMP) X
Passwords and Password Clear Protection X
ProCurve Manager (PCM) X
Ping X
Port Configuration X
xxiii
Intelligent Edge Software Features
Port Monitoring X
Port Security X
Port Status X
Port Trunking (LACP) X
Port-Based Access Control (802.1X) X
Protocol VLANS X
Quality of Service (QoS) X
RADIUS Authentication and Accounting X
RADIUS-Based Configuration X
RMON 1,2,3,9 X
Secure Copy X
SFTP X
SNMPv3 X
Management
and
Configuration
Advanced
Management
Traffic
Manual
Multicast and
Routing
Access
Security
Guide
Software Downloads (SCP/SFTP, TFPT, Xmodem) X
Source-Port Filters X
Spanning Tree (STP, RSTP, MSTP) X
SSHv2 (Secure Shell) Encryption X
SSL (Secure Socket Layer) X
Syslog X
System Information X
TACACS+ Authentication X
Telnet Access X
TFTP X
Time Protocols (TimeP, SNTP) X
Troubleshooting X
Uni-Directional Link Detection (UDLD) X
xxiv
Intelligent Edge Software Features
VLANs X
Web Authentication RADIUS Support X
Web-based Authentication X
Web UI X
Management
and
Configuration
Advanced
Management
Traffic
Manual
Multicast and
Routing
Access
Security
Guide
xxv

Getting Started

Contents

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Command Syntax Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Command Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Screen Simulations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Configuration and Operation Examples . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Sources for More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
Getting Documentation From the Web . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
1
Menu Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Web Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Need Only a Quick Start?
IP Addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
To Set Up and Install the Switch in Your Network . . . . . . . . . . . . . . . 1-8
Physical Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
1-1
Getting Started

Introduction

Introduction
This guide is intended for use with the HP ProCurve 6120G/XG and 6120GX switches.
It describes how to use the command line interface (CLI), Menu interface, and we
b browser to configure, manage, monitor, and troubleshoot switch opera-
tion. For an overview of product documentation for the above switches, refer
Product Documentation” on page xiii. You can download documentation
to from the following web sites:
www.procurve.com/manuals
www.hp.com/go/bladesystem/documentation
h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html

Conventions

1-2
This guide uses the following conventions for commands and screen displays.

Command Syntax Statements

Syntax: ip < default-gateway < ip-addr >> | routing >
Syntax: show int
Vertical bars ( | ) separate alternative, mutually exclusive elements.
Square brackets ( [ ] ) indicate optional elements.
Braces ( < > ) enclose required elements.
Braces within square brackets ( [ < > ] ) indicate a required element within
an optional choice.
Boldface indicates use of a CLI command, part of a CLI command syntax,
or other displayed element in general text. For example:
“Use the copy tftp command to download the key from a TFTP server.”
Italics indicate variables for which you must supply a value when execut-
ing the command. For example, in this command syntax, you must provide one or more port numbers:
Syntax: aaa port-access authenticator < por
erfaces [port-list ]
t-list >
Getting Started
ProCurve> show version Image stamp: /sw/code/build/vern
Feb 20 2009 14:56:49 Z.14.XX 427
Boot Image: Primary
Build Options: QA
Watchdog: ENABLED
Conventions

Command Prompts

In the default configuration, your switch displays a CLI prompt similar to the following examples:
ProCurve 6120G/XG Blade Switch#
ProCurve 6120XG Blade Switch#
To simplify recognition, this guide uses ProCurve prompts. For example:
ProCurve#
(You can use the ho
stname command to change the text in the CLI prompt.)
to represent command

Screen Simulations

Displayed Text. Figures containing simulated screen text and command output look like this:
Figure 1-1. Example of a Figure Showing a Simulated Screen
In some cases, brief command-output sequences appe tification. For example:
ar without figure iden-
ProCurve(config)# clear public-key ProCurve(config)# show ip client-public-key show_client_public_key: cannot stat keyfile

Configuration and Operation Examples

Keys

Simulations of actual keys use a bold, sans-serif typeface with square brackets. For example, the Tab key appears as
[Tab] and the “Y” key appears as [Y].
1-3
Getting Started

Sources for More Information

Sources for More Information
For information about switch operation and features not covered in this guide, consult the following sources:
Feature Index—For information on which manual to consult for a given
software feature, refer to the “Software Feature Index” on page xiv.
Note For the latest version of all HP ProCurve switch documentation referred to
below, including Release Notes covering recently added features, visit any of the following web sites:
www.procurve.com/manuals
www.hp.com/go/bladesystem/documentation
h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html
Software Release Notes—Release Notes provide information on new
software updates:
new features and how to configure and use them
software management, including downloading software to the switch
software fixes addressed in current and previous releases
Product Notes and Software Update Information—The printed Quick
Installation Card shipped with your switch provides basic installation
and getting started information.
Installation and Getting Started Guide—Use the Installation and Get-
ting Started Guide to prepare for and perform the physical installation. This guide also steps you through connecting the switch to your network and assigning IP addressing, as well as describing the LED indications for correct operation and trouble analysis.
Management and Configuration Guide—Use this guide for information
on topics such as:
various interfaces available on the switch
memory and configuration operation
interface access
IP addressing
time protocols
port configuration, trunking, and traffic control
SNMP, LLDP, and other network management topics
1-4
Sources for More Information
Getting Started
file transfers, switch monitoring, troubleshooting, and MAC address management
Advanced Traffic Management Guide—Use this guide for information on
topics such as:
VLANs: Static port-based and protocol VLANs, and dynamic GVRP VLANs
spanning-Tree: 802.1D (STP), 802.1w (RSTP), and 802.1s (MSTP)
Quality-of-Service (QoS)
Multicast and Routing Guide—Use this guide for information on topics
such as:
•IGMP
Access Security Guide—Use this guide for information on topics such as:
Local username and password security
Web-Based and MAC-based authentication
RADIUS and TACACS+ authentication
SSH (Secure Shell) and SSL (Secure Socket Layer) operation
802.1X access control
Port security operation with MAC-based control
Authorized IP Manager security
IPv6 Configuration Guide—Use this guide for information on topics
such as:
Overview of IPv6 operation and features supported
Configuring IPv6 addressing
Using IPv6 management, security, and troubleshooting features
1-5
Getting Started
Online Help for Menu
Sources for More Information

Getting Documentation From the Web

To obtain the latest versions of documentation and release notes for your switch, go to any of the following web sites:
www.procurve.com/manuals
www.hp.com/go/bladesystem/documentation
h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html

Online Help

Menu Interface
If you need information on specific parameters in the menu interface, refer to the online help provided in the interface. For example:
1-6
Figure 1-2. Online Help for Menu Interface
Sources for More Information
The Help Button
Getting Started
Command Line Interface
If you need information on a specific command in the CLI, type the command name followed by help. For example:
Figure 1-3. Example of CLI Help
Web Browser Interface
If you need information on specific features in the HP ProCurve Web Browser Interface (hereafter referred to as the “web browser interface”), use the online Help. You can access the Help by clicking on the question mark button in the upper right corner of any of the web browser interface screens.
Figure 1-4. Button for Web Browser Interface Online Help
Note To access the online Help for the Web browser interface, you need either
ProCurve Manager (version 1.5 or greater) installed on your network or an active connection to the World Wide Web. Otherwise, Online help for the web browser interface will not be available.
Online help is also accessible by logging into the Onboard Administrator.
1-7
Getting Started
The Help Button

Need Only a Quick Start?

Figure 1-5. Button for Onboard Administrator Interface Online Help
Need Only a Quick Start?

IP Addressing

If you just want to give the switch an IP address so that it can communicate on your network, or if you are not using VLANs, ProCurve recommends that you use the Switch Setup screen to quickly configure IP addressing. To do so, do one of the following:
Enter setup at the CLI Manager level prompt.
Procurve# setup
In the Main Menu of the Menu interface, select
1-8
8. Run Setup
For more on using the Switch Setup screen, see the In Started Guide you received with the switch.
stallation and Getting

To Set Up and Install the Switch in Your Network

Physical Installation

Use the Installation and Getting Started Guide for the following:
Notes, cautions, and warnings related to installing and using the switch
and its related modules
To Set Up and Install the Switch in Your Network
Getting Started
Instructions for physically installing the switch in your network
Quickly assigning an IP address and subnet mask, set a Manager pass-
word, and (optionally) configure other basic features.
Interpreting LED behavior.
For the latest version of the Installation and Getting Started Guide for your switch, refer to “Getting Documentation From the Web” on page 1-6.
1-9

Selecting a Management Interface

Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
Understanding Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
Understanding Management Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
Advantages of Using the Menu Interface . . . . . . . . . . . . . . . . . . . . . . . . 2-4
Advantages of Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
General Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Information on Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5
Selecting a Management Interface
Contents
2
Advantages of Using the Web Browser Interface . . . . . . . . . . . . . . . . 2-6
Advantages of Using ProCurve Manager
or ProCurve Manager Plus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Custom Login Banners for the Console and
Web Browser Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9
Banner Operation with Telnet, Serial, or SSHv2 Access . . . . . . . . 2-9
Banner Operation with Web Browser Access . . . . . . . . . . . . . . . . 2-9
Configuring and Displaying a Non-Default Banner . . . . . . . . . . . 2-10
Example of Configuring and Displaying a Banner . . . . . . . . . . . . 2-11
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
2-1
Selecting a Management Interface

Overview

Overview
This chapter describes the following:
Physical Interfaces
Management interfaces
Advantages of using each interface

Understanding Physical Interfaces

Physical interfaces on the switch and the C-class enclosure it is installed in provide the following options for accessing the management interfaces described in the next section:
Data ports on the switch console provide networked in-band access
Dedicated serial connection to the C-class enclosure through the Onboard
Administrator (OA) provides out-of-band access. For detailed instructions on how to login to the OA, refer to the Installa-
tion and Getting Stated Guide for the switch. See the HP BladeSystem Onboard Administrator User Guide for details on OA setup. For infor- mation on OA command line interface (CLI) commands, see the HP BladeSystem Onboard Administrator Command Line Interface User Guide. Both guides are available at
www.hp.com/go/bladesystem/documentation.
Another way that the OA provides access is through the switch CLI; telnet
to the OA IP address and connect to the interconnect bay.
Mini-USB console port on the switch provides out-of-band access.
For instructions on how to download, install and run the USB driver, refer to the Installation and Getting Stated Guide for the switch.
Dedicated networked management port in the C-class enclosure provides
networked out-of-band access. Refer to Appendix G, “Network Out-of­Band Management” in this guide for more information on out-of-band management.
2-2
Selecting a Management Interface

Understanding Management Interfaces

Note The switches covered in this guide allow up to 6 console connections. Console
session 1 always belongs to the serial console, console session 2 always belongs to the USB serial console, and the remaining 4 can be used via ssh or telnet from a network connection.
Understanding Management Interfaces
Management interfaces enable you to reconfigure the switch and to monitor switch status and performance. The switch offers the following interfaces:
Menu interface—a menu-driven interface offering a subset of switch
commands through the built-in VT-100/ANSI console—2-4
CLI—a command line interface offering the full set of switch commands
through the VT-100/ANSI console built into the switch—2-5
Web browser interface --a switch interface offering status information
and a subset of switch commands through a standard web browser (such as Netscape Navigator or Microsoft Internet Explorer)—2-6
ProCurve Manager (PCM)—a windows-based network management
solution included in-box with all manageable ProCurve devices. Features include automatic device discovery, network status summary, topology and mapping, and device management.
ProCurve Manager Plus (PCM+)—a complete windows-based
network management solution that provides both the basic features offered with PCM, as well as more advanced management features, including in-depth traffic analysis, group and policy management, config­uration management, device software updates, and advanced VLAN management. (ProCurve includes a copy of PCM+ in-box for a free 30-day trial.)
This manual describes how to use the menu interface (Chapter 3), the CLI (Chapter 4), the web browser interface (Chapter 5), and how to use these interfaces to configure and monitor the switch.
For information on how to access the web browser interface Help, see “Online Help for the Web Browser Interface” on page 5-11.
To use ProCurve Manager or ProCurve Manager Plus, refer to the Getting Started Guide and the Administrator’s Guide, which are available electron­ically with the software for these applications. For more information, visit the ProCurve Networking web site at www.procurve.com.
2-3
Selecting a Management Interface

Advantages of Using the Menu Interface

Advantages of Using the Menu Interface
Figure 2-1. Example of the Console Interface Display
Provides quick, easy management access to a menu-driven subset of
switch configuration and performance features:
• IP addressing
• VLANs and GVRP
• Port Security
• Port and Static Trunk Group
• Spanning Tree
• System information
• Local passwords
•SNMP communities
• Time protocols
The menu interface also provides access for:
•Setup screen
• Event Log display
• Switch and port status displays
Offers out-of-band access through the RS-232 connection and through
• Switch and port statistic and counter displays
• Reboots
• Software downloads
the OA network to the switch, so network bottlenecks, crashes, lack of configured or correct IP address, and network downtime do not slow or prevent access
Enables Telnet (in-band) access to the menu functionality.
Allows faster navigation, avoiding delays that occur with slower
display of graphical objects over a web browser interface.
Provides more security; configuration information and passwords are
not seen on the network.
2-4
Selecting a Management Interface

Advantages of Using the CLI

Advantages of Using the CLI
ProCurve>
ProCurve#
ProCurve(config)#
ProCurve(<context>)#
For example:
Prompt for Operator Level
Prompt for Manager Level
Prompt for Global Configuration Level
Prompt for Context Configuration Levels
ProCurve(eth-1-5)# ProCurve(vlan-1)#
Figure 2-2. Command Prompt Examples
General Benefits
Provides access to the complete set of the switch configuration, perfor-
mance, and diagnostic features.
Offers out-of-band access through the RS-232 connection and through the
through the OA network, or Telnet (in-band) access.
Enables quick, detailed system configuration and management access to
system operators and administrators experienced in command prompt interfaces.
Provides help at each level for determining available options and vari-
ables.
Information on Using the CLI
For information on how to use the CLI, refer to Chapter 4. “Using the
Command Line Interface (CLI)”.
To perform specific procedures (such as configuring IP addressing or
VLANs), use the Contents listing at the front of the manual to locate the information you need.
For monitoring and analyzing switch operation, refer to Appendix B.
For information on individual CLI commands, refer to the Index or to the
online Help provided in the CLI interface.
2-5
Selecting a Management Interface

Advantages of Using the Web Browser Interface

Advantages of Using the Web Browser Interface
Figure 2-3. Example of the Web Browser Interface
Easy access to the switch from anywhere on the network
Familiar browser interface--locations of window objects consistent
with commonly used browsers, uses mouse clicking for navigation, no terminal setup
Many features have all their fields in one screen so you can view all
values at once
More visual cues, using colors, status bars, device icons, and other
graphical objects instead of relying solely on alphanumeric values
Display of acceptable ranges of values available in configuration list
boxes
2-6

Advantages of Using ProCurve Manager or ProCurve Manager Plus

Selecting a Management Interface
Advantages of Using ProCurve Manager or ProCurve Manager Plus
You can operate ProCurve Manager and ProCurve Manager Plus (PCM and PCM+) from a PC on the network to monitor traffic, manage your hubs and switches, and proactively recommend network changes to increase network uptime and optimize performance. Easy to install and use, PCM and PCM+ are the answers to your management challenges.
Figure 2-4. Example of the Home Page for ProCurve Manager Plus
2-7
Selecting a Management Interface
Advantages of Using ProCurve Manager or ProCurve Manager Plus
PCM and PCM+ enable greater control, uptime, and performance in your network:
Features and benefits of ProCurve Manager:
Network Status Summary: Upon boot-up, a network status screen displays high-level information on network devices, end nodes, events, and traffic levels. From here, users can research any one of these areas to get more details.
Alerts and Troubleshooting: An events summary screen displays alerts to the user and categorizes them by severity, making it easier to track where bottlenecks and issues exist in the network. Alerts present detailed information on the problem, even down to the spe­cific port.
Automatic Device Discovery: This feature is customized for fast discovery of all ProCurve manageable network devices. The user can define which IP subnets to discover.
Topology and Mapping: This feature automatically creates a map of discovered network devices. Maps are color-coded to reflect device status and can be viewed at multiple levels (physical view, subnet view, or VLAN view).
Device Management: Many device-focused tasks can be performed directly by the software, or the user can access web-browser and command-line interfaces with the click of a button to manage individ­ual devices from inside the tool.
Features and benefits of ProCurve Manager Plus:
All of the Features of ProCurve Manager: Refer to the above listing.
In-Depth Traffic Analysis: An integrated, low-overhead traffic mon- itor interface shows detailed information on traffic throughout the network. Using enhanced traffic analysis protocols such as Extended RMON and sFlow, users can monitor overall traffic levels, segments with the highest traffic, or even the top users within a network segment.
Group and Policy Management: Changes in configuration are tracked and logged, and archived configurations can be applied to one or many devices. Configurations can be compared over time or between two devices, with the differences highlighted for users.
Advanced VLAN Management: A new, easy-to-use VLAN manage­ment interface allows users to create and assign VLANs across the entire network, without having to access each network device indi­vidually.
2-8
Advantages of Using ProCurve Manager or ProCurve Manager Plus
Selecting a Management Interface
Device Software Updates: This feature automatically obtains new device software images from ProCurve and updates devices, allowing users to download the latest version or choose the desired version. Updates can be scheduled easily across large groups of devices, all at user-specified times.
Investment Protection: The modular software architecture of Pro­Curve Manager Plus will allow ProCurve to offer network administra­tors add-on software solutions that complement their needs.

Custom Login Banners for the Console and Web Browser Interfaces

You can configure the switch to display a login banner of up to 3070 characters when an operator initiates a management session with the switch through any of the following methods:
Telnet
serial connection
SSHv2
Web browser
The default banner displays product registration information; the copyright splash is no longer displayed.
If a banner is configured, the banner page is displayed when you access the Web user interface. The default product registration information is not displayed as there is already a product registration prompt displayed in the Web user interface.
Banner Operation with Telnet, Serial, or SSHv2 Access
When a system operator begins a login session, the switch displays the banner above the local password prompt or, if no password is configured, above the Press any key to continue prompt. Entering a correct password or, if no password is configured, pressing any key clears the banner from the CLI and displays the CLI prompt. (Refer to Figure 2-5 on page 2-11.)
Banner Operation with Web Browser Access
When a system operator uses a Web browser to access the switch, the text of a non-default banner configured on the switch appears in a dedicated banner window with a link to the Web agent home page. Clicking on To Home Page
2-9
Selecting a Management Interface
Advantages of Using ProCurve Manager or ProCurve Manager Plus
clears the banner window and prompts the user for a password (if configured). Following entry of the correct username/password information (or if no username/password is required), the switch then displays either the Registra­tion page or the switch’s home page. Note that if the banner feature is disabled or if the switch is using the factory-default banner shown in figure 2-5, then the banner page does not appear in the Web browser when an operator initiates a login session with the switch.
Configuring and Displaying a Non-Default Banner
You can enable or disable banner operation using either the switch’s CLI or an SNMP application. The steps include:
1. Enable non-default banner operation and define the endpoint delimiter for the banner.
2. Enter the desired banner text, including any specific line breaks you want.
3. Enter the endpoint delimiter.
Use show banner motd to display the current banner status.
Syntax: banner motd < delimiter >
no banner motd
This command defines the single character used to termi­nate the banner text and enables banner text input. You can use any character except a blank space as a delimiter. The no form of the command disables the login banner feature.
< banner-text-string >
The switch allows up to 3070 banner characters, including blank spaces and CR-LF ([Enter]). (The tilde “ and the delimiter defined by banner motd <delimiter> are not allowed as part of the banner text.) While entering banner text, you can backspace to edit the current line (that is, a line that has not been terminated by a CR-LF.) However, terminating a line in a banner by entering a CR-LF prevents any further editing of that line. To edit a line in a banner entry after terminating the line with a CR-LF requires entering the delimiter described above and then re-configuring new banner text.
The banner text string must terminate with the character defined by banner motd < delimiter >.
Note: In redundant management, the banner is not seen on the standby module, only the active module.
~
2-10
Advantages of Using ProCurve Manager or ProCurve Manager Plus
ProCurve(config)# show banner motd
Banner Information
Banner status: Enabled Configured Banner:
This is a private system maintained by the Allied Widget Corporation. Unauthorized use of this system can result in civil and criminal penalties!
Selecting a Management Interface
Example of Configuring and Displaying a Banner
Suppose a system operator wanted to configure the following banner message on her company’s switches:
This is a private system maintained by the
Allied Widget Corporation.
Unauthorized use of this system can result in civil and criminal penalties!
In this case, the operator will use the [Enter] key to create line breaks, blank spaces for line centering, and the % symbol to terminate the banner message.
Figure 2-5. Example of Configuring a Login Banner
To view the current banner configuration, use either the show banner motd or show running command.
Figure 2-6. Example of show banner motd Output
2-11
Selecting a Management Interface
ProCurve (config)# show running
Running configuration:
; 498358-B21 Configuration Editor; Created on release #Z.14.04
hostname "ProCurve 6120 Blade Switch" vlan 1 name "DEFAULT_VLAN" untagged D1-4,S1-S2,X1-X2,C1 ip address dhcp-bootp exit banner motd "This is a private system maintained by the Allied Widget Corporation. Unauthorized use of this system can result in civil and criminal penalties!" snmp-server community "public" Unrestricted
Shows the current banner configuration.
The login screen displays the configured banner.
Entering a correct password clears the banner and displays the CLI prompt.
Advantages of Using ProCurve Manager or ProCurve Manager Plus
Figure 2-7. The Current Banner Appears in the Switch’s Running-Config File
The next time someone logs onto the switch’s management CLI, the following appears:
2-12
Figure 2-8. Example of CLI Result of the Login Banner Configuration
Advantages of Using ProCurve Manager or ProCurve Manager Plus
Selecting a Management Interface
If someone uses a Web browser to log in to the switch interface, the following message appears:
Figure 2-9. Example of Web Browser Interface Result of the Login Banner
Configuration
Operating Notes
The default banner appears only when the switch is in the factory
default configuration. Using no banner motd deletes the currently configured banner text and blocks display of the default banner. The default banner is restored only if the switch is reset to its factory­default configuration.
The switch supports one banner at any time. Configuring a new
banner replaces any former banner configured on the switch.
If the switch is configured with ssh version 1 or ssh version 1-or-2,
configuring the banner sets the SSH configuration to ssh version 2 and displays the following message in the CLI:
Warning: SSH version has been set to v2.
If a banner is configured, the switch does not allow configuration with
ssh version 1 or ssh version 1-or-2. Attempting to do so produces the following error message in the CLI:
Banner has to be disabled first.
If a banner is enabled on the switch, the Web browser interface
displays the following link to the banner page:
Notice to all users
2-13

Using the Menu Interface

Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Starting and Ending a Menu Session . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3
How To Start a Menu Interface Session . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
How To End a Menu Session and Exit from the Console: . . . . . . . . . . 3-5
Main Menu Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7
Screen Structure and Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-9
Rebooting the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-12
Menu Features List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14
Where To Go From Here . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-15
3
3-1
Using the Menu Interface

Overview

Overview
This chapter describes the following features:
Overview of the Menu Interface (page 3-2)
Starting and ending a Menu session (page 3-3)
The Main Menu (page 3-7)
Screen structure and navigation (page 3-9)
Rebooting the switch (page 3-12)
The menu interface operates through the switch console to provide you with a subset of switch commands in an easy-to-use menu format enabling you to:
Perform a “quick configuration” of basic parameters, such as the IP
addressing needed to provide management access through your network
Configure these features:
• Manager and Operator
passwords
• System parameters
• IP addressing
• A network monitoring port
• SNMP community names
• IP authorized managers
• VLANs (Virtual LANs) and GVRP
• Time protocol
•Ports
• Trunk groups
View status, counters, and Event Log information
Update switch software
Reboot the switch
For a detailed list of menu features, see the “Menu Features List” on page 3-14.
Privilege Levels and Password Security. ProCurve strongly recom­mends that you configure a Manager password to help prevent unauthorized access to your network. A Manager password grants full read-write access to the switch. An Operator password, if configured, grants access to status and counter, Event Log, and the Operator level in the CLI. After you configure passwords on the switch and log off of the interface, access to the menu interface (and the CLI and web browser interface) will require entry of either the Manager or Operator password. (If the switch has only a Manager pass­word, then someone without a password can still gain read-only access.)
3-2

Starting and Ending a Menu Session

Using the Menu Interface
Note If the switch has neither a Manager nor an Operator password, anyone
having access to the console interface can operate the console with full manager privileges. Also, if you configure only an Operator password, entering the Operator password enables full manager privileges.
For more information on passwords, refer to the Access Security Guide for your switch.
Menu Interaction with Other Interfaces.
The menu interface displays the current running-config parameter set-
tings. You can use the menu interface to save configuration changes made in the CLI only if the CLI changes are in the running config when you save changes made in the menu interface. (For more on how switch memory manages configuration changes, see Chapter 6, “Switch Memory and Configuration”.)
A configuration change made through any switch interface overwrites
earlier changes made through any other interface.
The Menu Interface and the CLI (Command Line Interface) both use the
switch console. To enter the menu from the CLI, use the To enter the CLI from the Menu interface, select
Command Line (CLI) option.)
menu command.
Starting and Ending a Menu Session
You can access the menu interface using any of the following:
A direct serial connection to the switch’s console port, as described in the
installation and getting started guide you received with the switch
A Telnet connection to the switch console from a networked PC or the
switch’s web browser interface. Telnet requires that an IP address and subnet mask compatible with your network have already been configured on the switch.
Note This section assumes that either a terminal device is already configured and
connected to the switch (see the Installation and Getting Started Guide) or that you have already configured an IP address on the switch (required for Telnet access).
3-3
Using the Menu Interface
Starting and Ending a Menu Session

How To Start a Menu Interface Session

In its factory default configuration, the switch console starts with the CLI prompt. To use the menu interface with Manager privileges, go to the Manager level prompt and enter the
1. Use one of these methods to connect to the switch:
A PC terminal emulator or terminal
•Telnet
2. Do one of the following:
If you are using Telnet, go to step 3.
If you are using a PC terminal emulator or a terminal, press
3. When the switch screen appears, do one of the following:
If a password has been configured, the password prompt appears.
menu command.
[Enter] one
or more times until a prompt appears.
Password: _
Type the Manager password and press
[Enter]. Entering the Manager
password gives you manager-level access to the switch. (Entering the Operator password gives you operator-level access to the switch. Refer to the Access Security Guide for your switch.)
If no password has been configured, the CLI prompt appears. Go to
the next step.
4. When the CLI prompt appears, display the Menu interface by entering the menu command. For example:
ProCurve# menu
[Enter]
results in the following display:
3-4
Starting and Ending a Menu Session
Figure 3-1. Example of the Main Menu with Manager Privileges
For a description of Main Menu features, see “Main Menu Features” on page 3-7.
Using the Menu Interface
Note To configure the switch to start with the menu interface instead of the CLI, go
to the Manager level prompt in the CLI, enter the resulting display, change the mation, see the Installation and Getting Started Guide you received with the switch.
Logon Default parameter to Menu. For more infor-
setup command, and in the

How To End a Menu Session and Exit from the Console:

The method for ending a menu session and exiting from the console depends on whether, during the session, you made any changes to the switch configu­ration that require a switch reboot to activate. (Most changes via the menu interface need only a S changes needing a reboot are marked with an asterisk (*) next to the config­ured item in the menu and also next to the Switch Configuration item in the Main Menu.
ave, and do not require a switch reboot.) Configuration
3-5
Using the Menu Interface
Asterisk indicates a configuration change that requires a reboot to activate.
Starting and Ending a Menu Session
Figure 3-2. Example Indication of a Configuration Change Requiring a Reboot
1. In the current session, if you have not made configuration changes that require a switch reboot to activate, return to the Main Menu and press (zero) to log out. Then just exit from the terminal program, turn off the terminal, or quit the Telnet session.
2. If you have made configuration changes that require a switch reboot— that is, if an asterisk (*) appears next to a configured item or next to Switch Configuration in the Main Menu:
a. Return to the Main Menu.
b. Press
[0]
[6] to select Reboot Switch and follow the instructions on the
reboot screen.
3-6
Rebooting the switch terminates the menu session, and, if you are using Telnet, disconnects the Telnet session.
(See “Rebooting To Activate Configuration Changes” on page 3-13.)
3. Exit from the terminal program, turn off the terminal, or close the Telnet application program.

Main Menu Features

Using the Menu Interface
Main Menu Features
Figure 3-3. The Main Menu View with Manager Privileges
The Main Menu gives you access to these Menu interface features:
Status and Counters: Provides access to display screens showing
switch information, port status and counters, and port and VLAN address tables. (Refer to Appendix B, “Monitoring and Analyzing Switch Opera­tion”.)
Switch Configuration: Provides access to configuration screens for
displaying and changing the current configuration settings. (See the Con­tents listing at the front of this manual.) For a listing of features and parameters configurable through the menu interface, see the “Menu Fea­tures List” on page 3-14. For an index of the features covered in the software manuals for your switch, refer to the “Software Feature Index” on page -xxii.
Console Passwords: Provides access to the screen used to set or change
Manager-level and Operator-level passwords, and to delete Manager and Operator password protection. (Refer to the chapter on configuring user­names and passwords in the Access Security Guide for your switch.)
Event Log: Enables you to read progress and error messages that are
useful for checking and troubleshooting switch operation. (See “Using the Event Log for Troubleshooting Switch Problems” on page C-24.)
3-7
Using the Menu Interface
Main Menu Features
Command Line (CLI): Selects the Command Line Interface at the same
level (Manager or Operator) that you are accessing in the Menu interface. (Refer to Chapter 4, “Using the Command Line Interface (CLI)”.)
Reboot Switch: Performs a “warm” reboot of the switch, which clears
most temporary error conditions, resets the network activity counters to zero, and resets the system up-time to zero. A reboot is required to activate a change in the VLAN Support parameter. (See “Rebooting from the Menu Interface” on page 6-11.)
Download OS: Enables you to download a new switch software version
to the switch. (See Appendix A, “File Transfers”.)
Run Setup: Displays the Switch Setup screen for quickly configuring
basic switch parameters such as IP addressing, default gateway, logon default interface, and others. (Refer to the Installation and Getting Started Guide for your switch.)
Logout: Closes the Menu interface and console session, and disconnects
Telnet access to the switch. (See “How to End a Menu Session and Exit from the Console” on page 3-5.)
3-8
Using the Menu Interface
Help line describing the selected action or selected parameter field
Parameter fields
Help describing each of the items in the parameter fields
Navigation instructions
Actions line
Screen title – identifies the location within the menu structure

Screen Structure and Navigation

Screen Structure and Navigation
Menu interface screens include these three elements:
Parameter fields and/or read-only information such as statistics
Navigation and configuration actions, such as Save, Edit, and Cancel
Help line to describe navigation options, individual parameters, and read-
only data
For example, in the following System Information screen:
Figure 3-4. Elements of the Screen Structure
“Forms” Design. The configuration screens, in particular, operate similarly to a number of PC applications that use forms for data entry. When you first enter these screens, you see the current configuration for the item you have selected. To change the configuration, the basic operation is to:
1. Press
[E] to select the Edit action.
2. Navigate through the screen making all the necessary configuration changes. (See Table 3-1 on page 3-10.)
3. Press
[Enter] to return to the Actions line. From there you can save the
configuration changes or cancel the changes. Cancel returns the configu­ration to the values you saw when you first entered the screen.
3-9
Using the Menu Interface
Screen Structure and Navigation
Table 3-1. How To Navigate in the Menu Interface
Task: Actions:
Execute an action from the “Actions –>” list at the bottom of the screen:
Reconfigure (edit) a parameter setting or a field:
Use either of the following methods:
• Use the arrow keys ([<], or [>]) to highlight the action you want
to execute, then press [Enter].
• Press the key corresponding to the capital letter in the action
name. For example, in a configuration menu, press [E] to select Edit and begin editing parameter values.
1. Select a configuration item, such as System Name. (See figure
3-4.)
2. Press [E] (for E
3. Use [Tab] or the arrow keys ([<], [>], [^], or [v]) to highlight the
item or field.
4. Do one of the following: – If the parameter has preconfigured values, either use the
Space bar to select a new option or type the first part of your selection and the rest of the selection appears automatically. (The help line instructs you to “Select” a value.)
– If there are no preconfigured values, type in a value (the Help
line instructs you to “Enter” a value).
5. If you want to change another parameter value, return to step 3.
6. If you are finished editing parameters in the displayed screen, press [Enter] to return to the Actions line and do one of the following:
– To save and activate configuration changes, press [S] (for the
Save action). This saves the changes in the startup configuration and also implements the change in the currently running configuration. (See Chapter 6, “Switch Memory and Configuration”.)
– To exit from the screen without saving any changes that you
have made (or if you have not made changes), press [C] (for the Cancel action).
Note: In the menu interface, executing Save activates most parameter changes and saves them in the startup configuration (or flash) memory, and it is therefore not necessary to reboot the switch after making these changes. But if an asterisk appears next to any menu item you reconfigure, the switch will not activate or save the change for that item until you reboot the switch. In this case, rebooting should be done after you have made all desired changes and then returned to the Main Menu.
7. When you finish editing parameters, return to the Main Menu.
8. If necessary, reboot the switch by highlighting Reboot Switch in the Main Menu and pressing [Enter]. (See the Note, above.)
dit on the Actions line).
3-10
Exit from a read-only screen.
Press [B] (for the Back action).
Using the Menu Interface
Pressing [H] or highlighting Help and pressing [Enter] displays Help for the parameters listed in the upper part of the screen
Highlight on any item in the Actions line indicates that the Actions line is active.
The Help line provides a brief descriptor of the highlighted Action item or parameter.
Screen Structure and Navigation
To get Help on individual parameter descriptions. In most screens there is a Help option in the Actions line. Whenever any of the items in the
Actions line is highlighted, press
[H], and a separate help screen is displayed.
For example:
Figure 3-5. Example Showing How To Display Help
To get Help on the actions or data fields in each screen: Use the arrow keys (
[<], [>], [^], or [v]) to select an action or data field. The help line under the
Actions items describes the currently selected action or data field.
For guidance on how to navigate in a screen: See the instructions provided at the bottom of the screen, or refer to “Screen Structure and Navigation” on page 3-9.)
3-11
Using the Menu Interface
Reboot Switch option

Rebooting the Switch

Rebooting the Switch
Rebooting the switch from the menu interface
Terminates all current sessions and performs a reset of the operating
system
Activates any menu interface configuration changes that require a reboot
Resets statistical counters to zero
(Note that statistical counters can be reset to zero without rebooting the switch.)
To Reboot the switch, use the Reboot Switch option in the Main Menu. (Note that Reboot Switch is not available if you log on in Operator mode; that is, if you enter an Operator password instead of a manager password at the password prompt.)
3-12
Figure 3-6. The Reboot Switch Option in the Main Menu
Using the Menu Interface
Reminder to reboot the switch to activate configuration changes.
Asterisk indicates a configuration change that requires a reboot in order to take effect.
Rebooting the Switch
Rebooting To Activate Configuration Changes. Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the
Maximum VLANs to support parameter. (To access this parameter, go
to the Main Menu and select:
2. Switch Configuration
8. VLAN Menu
1. VLAN Support.
If you make configuration changes in the menu interface that require a reboot, the switch displays an asterisk (*) next to the menu item in which the change has been made. For example, if you change and save the value for the Maximum VLANs to support parameter, an asterisk appears next to the VLAN Support entry in the VLAN Menu screen, and also next to the Switch Configuration
entry in
the Main Menu.
Figure 3-7. Indication of a Configuration Change Requiring a Reboot
To activate changes indicated by the asterisk, go to the Main Menu and select the Reboot Switch option.
Note Executing the write memory command in the CLI does not affect pending
configuration changes indicated by an asterisk in the menu interface. That is, only a reboot from the menu interface or a boot or reload command from the CLI will activate a pending configuration change indicated by an asterisk.
3-13
Using the Menu Interface

Menu Features List

Menu Features List
Status and Counters
General System Information
Switch Management Address Information
Port Status
Port Counters
Address Table
Port Address Table
Switch Configuration
System Information
Port/Trunk Settings
Network Monitoring Port
IP Configuration
SNMP Community Names
IP authorized Managers
•VLAN Menu
Console Passwords
Event Log
Command Line (CLI)
Reboot Switch
Download OS (Download Switch Software)
Run Setup
Logout
3-14
Using the Menu Interface

Where To Go From Here

Where To Go From Here
This chapter provides an overview of the menu interface and how to use it. The following table indicates where to turn for detailed information on how to use the individual features available through the menu interface.
Option: Tur n to:
To use the Run Setup option Refer to the Installation and Getting Started
Guide.
To view and monitor switch status and counters
To learn how to configure and use passwords and other security features
To learn how to use the Event Log “Using the Event Log for Troubleshooting Switch
To learn how the CLI operates Chapter 4, “Using the Command Line Interface
To download switch software Appendix A, “File Transfers”
For a description of how switch memory handles configuration changes
For information on other switch features and how to configure them
Appendix B, “Monitoring and Analyzing Switch Operation”
Refer to the Access Security Guide for your switch.
Problems” on page C-24
(CLI)”
Chapter 6, “Switch Memory and Configuration”
Refer to the Feature Index on (page xxii) at the front of this guide, and to “Sources for More Information” on page 1-4.
3-15

Using the Command Line Interface (CLI)

Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Using the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Privilege Levels at Logon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Privilege Level Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Operator Privileges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Manager Privileges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5
How To Move Between Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
Listing Commands and Command Options . . . . . . . . . . . . . . . . . . . . . . 4-8
Listing Commands Available at Any Privilege Level . . . . . . . . . . . 4-8
Listing Command Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10
Displaying CLI “Help” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11
Configuration Commands and the Context Configuration Modes . . 4-13
4
CLI Control and Editing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Executing a Prior Command—Redo . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Repeating Execution of a Command . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Using a Command Alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18
CLI Shortcut Keystrokes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-20
4-1
Using the Command Line Interface (CLI)

Overview

Overview
The CLI is a text-based command interface for configuring and monitoring the switch. The CLI gives you access to the switch’s full set of commands while providing the same password protection that is used in the web browser interface and the menu interface.

Accessing the CLI

Like the menu interface, the CLI is accessed through the switch console, and in the switch’s factory default state, is the default interface when you start a console session. You can access the console out-of-band by directly connect­ing a terminal device to the switch, or in-band by using Telnet either from a terminal device or through the web browser interface.
Also, if you are using the menu interface, you can access the CLI by selecting the Command Line (CLI) option in the Main Menu.

Using the CLI

The CLI offers these privilege levels to help protect the switch from unauthor­ized access:
1. Operator
2. Manager
3. Global Configuration
4. Context Configuration
Note CLI commands are not case-sensitive.
4-2
Using the Command Line Interface (CLI)
Password Prompt
When you use the CLI to make a configuration change, the switch writes the change to the Running-Config file in volatile memory. This allows you to test your configuration changes before making them permanent. To make changes permanent, you must use the write memory command to save them to the Startup-Config file in non-volatile memory. If you reboot the switch without first using write memory, all changes made since the last reboot or write memory (whichever is later) will be lost. For more on switch memory and saving configuration changes, see Chapter 6, “Switch Memory and Configuration”.
Using the CLI

Privilege Levels at Logon

Privilege levels control the type of access to the CLI. To implement this control, you must set at least a Manager password. Without a Manager
password configured, anyone having serial port, Telnet, or web browser access to the switch can reach all CLI levels. (For more on setting passwords,
refer to the chapter on usernames and passwords in the Access Security Guide for your switch.)
When you use the CLI to log on to the switch, and passwords are set, you will be prompted to enter a password. For example:
Figure 4-1. Example of CLI Log-On Screen with Password(s) Set
In the above case, you will enter the CLI at the level corresponding to the password you provide (operator or manager).
If no passwords are set when you log onto the CLI, you will enter at the Manager level. For example:
ProCurve# _
4-3
Using the Command Line Interface (CLI)
2. Manager Level
3. Global Configuration
Operator Privileges
Manager Privileges
1. Operator Level
4. Context Configuration Level
Using the CLI
Caution ProCurve strongly recommends that you configure a Manager password. If a
Manager password is not configured, then the Manager level is not password­protected, and anyone having in-band or out-of-band access to the switch may be able to reach the Manager level and compromise switch and network security. Note that configuring only an Operator password does not prevent access to the Manager level by intruders who have the Operator password.
Pressing the Clear button on the front of the switch removes password protection. For this reason, it is recommended that you protect the switch from physical access by unauthorized persons. If you are concerned about switch security and operation, you should install the switch in a secure location, such as a locked wiring closet.

Privilege Level Operation

4-4
Figure 4-2. Access Sequence for Privilege Levels
Operator Privileges
At the Operator level you can examine the current configuration and move between interfaces without being able to change the configuration. A “>” character delimits the Operator-level prompt. For example:
ProCurve> _ (Example of the Operator prompt.)
When using enable to move to the Manager level, the switch prompts you for the Manager password if one has already been configured.
Using the Command Line Interface (CLI)
Using the CLI
Manager Privileges
Manager privileges give you three additional levels of access: Manager, Global Configuration, and Context Configuration. A “#” character delimits any Man­ager prompt. For example:
ProCurve#_ Example of the Manager prompt.
Manager level: Provides all Operator level privileges plus the ability to
perform system-level actions that do not require saving changes to the system configuration file. The prompt for the Manager level contains only the system name and the “#” delimiter, as shown above. To select this level, enter the enable command at the Operator prompt and enter the Manager password, when prompted. For example:
ProCurve> enable Enter enable at the Operator prompt. Password: CLI prompt for the Manager password.
ProCurve# _ The Manager prompt appears after the
correct Manager password is entered.
Global Configuration level: Provides all Operator and Manager level
privileges, and enables you to make configuration changes to any of the switch’s software features. The prompt for the Global Configuration level includes the system name and “(config)”. To select this level, enter the config command at the Manager prompt. For example:
ProCurve# config Enter config at the Manager prompt. ProCurve(config)#_ The Global Config prompt.
Context Configuration level: Provides all Operator and Manager priv-
ileges, and enables you to make configuration changes in a specific context, such as one or more ports or a VLAN. The prompt for the Context Configuration level includes the system name and the selected context. For example:
ProCurve(eth-1)# ProCurve(vlan-10)#
The Context level is useful, for example, for executing several commands directed at the same port or VLAN, or if you want to shorten the command strings for a specific context area. To select this level, enter the specific context at the Global Configuration level prompt. For example, to select the context level for an existing VLAN with the VLAN ID of 10, you would enter the following command and see the indicated result:
ProCurve(config)# vlan 10 ProCurve(vlan-10)#
4-5
Using the Command Line Interface (CLI)
Using the CLI
Table 4-1. Privilege Level Hierarchy
Privilege Level
Operator Privilege
Operator Level ProCurve> show < command >
Manager Privilege
Manager Level ProCurve
Global Configuration Level
Example of Prompt and Permitted Operations
setup
ping < argument > link-test < argument >
enable
menu
logout
exit
# Perform system-level actions such as system
ProCurve(config)# Execute configuration commands, plus all
View status and configuration information.
Perform connectivity tests.
Move from the Operator level to the Manager level.
Move from the CLI interface to the menu interface.
Exit from the CLI interface and terminate the console session.
Terminate the current session (same as logout).
control, monitoring, and diagnostic commands, plus any of the Operator-level commands. For a list of available commands, enter
Operator and Manager commands. For a list of available commands, enter ? at the prompt.
? at the prompt.
Context Configuration Level
4-6
ProCurve(eth-5)# ProCurve(vlan-
100)#
Execute context-specific configuration commands, such as a particular VLAN or switch port. This is useful for shortening the command strings you type, and for entering a series of commands for the same context. For a list of available commands, enter
? at the prompt.
Using the Command Line Interface (CLI)

How To Move Between Levels

Change in Levels Example of Prompt, Command, and Result
Using the CLI
Operator level to Manager level
Manager level to Global configuration level
Global configuration level to a Context configuration level
Context configuration level
to another Context configuration level
Move from any level to the preceding level
ProCurve
> enable
Password:_
After you enter enable, the Password prompt appears. After you enter the Manager password, the system prompt appears with the # symbol:
ProCurve
ProCurve
ProCurve(config)#
ProCurve
ProCurve(vlan-10)#
ProCurve
ProCurve(int-3)#
ProCurve
ProCurve(config)# exit ProCurve# exit ProCurve>
#_ # config
(config)# vlan 10
(vlan-10)# interface e 3
The CLI accepts “e” as the abbreviated form of “ethernet”.
(int-3)# exit
Move from any level to the Manager level
ProCurve(int-3)# end ProCurve#
—or— ProCurve
ProCurve#
(config)# end
Moving Between the CLI and the Menu Interface. When moving between interfaces, the switch retains the current privilege level (Manager or Operator). That is, if you are at the Operator level in the menu and select the Command Line Interface (CLI) option from the Main Menu, the CLI prompt appears at the Operator level.
Changing Parameter Settings. Regardless of which interface is used (CLI, menu interface, or web browser interface), the most recently configured version of a parameter setting overrides any earlier settings for that parameter.
4-7
Using the Command Line Interface (CLI)
Using the CLI
For example, if you use the menu interface to configure an IP address of “X” for VLAN 1 and later use the CLI to configure a different IP address of “Y” for VLAN 1, then “Y” replaces “X” as the IP address for VLAN 1 in the running­config file. If you subsequently execute write memory in the CLI, then the switch also stores “Y” as the IP address for VLAN 1 in the startup-config file. (For more on the startup-config and running config files, see Chapter 6, “Switch Memory and Configuration”.)

Listing Commands and Command Options

At any privilege level you can:
List all of the commands available at that level
List the options for a specific command
Listing Commands Available at Any Privilege Level
At a given privilege level you can list and execute the commands that level offers, plus all of the commands available at preceding levels. For example, at the Operator level, you can list and execute only the Operator level com­mands. However, at the Manager level, you can list and execute the commands available at both the Operator and Manager levels.
4-8
Type “?” To List Available Commands. 1.Typing the
commands you can execute at the current privilege level. For example, typing ? at the Operator level produces this listing:
Figure 4-3. Example of the Operator Level Command Listing
? symbol lists the
Typing ? at the Manager level produces this listing:
When - - MORE - - appears, use the Space bar or [Return] to list additional commands.
Figure 4-4.Example of the Manager-Level Command Listing
Using the Command Line Interface (CLI)
Using the CLI
When - - MORE - - appears, there are more commands in the listing. To list the next screenfull of commands, press the Space bar. To list the remaining commands one-by-one, repeatedly press
[Enter].
Typing ? at the Global Configuration level or the Context Configuration level produces similar results.
Use
[Tab] To Search for or Complete a Command Word. You can use
[Tab] to help you find CLI commands or to quickly complete the current word
in a command. To do so, type one or more consecutive characters in a command and then press Global Configuration level, if you press
[Tab] (with no spaces allowed). For example, at the
[Tab] immediately after typing “t”, the
CLI displays the available command options that begin with “t”. For example:
ProCurve(config)# t
[Tab]
tacacs-server telnet-server time timesync trunk telnet terminal traceroute ProCurve(config)# t
4-9
Using the Command Line Interface (CLI)
This example displays the command options for configuring the switch’s console settings.
Using the CLI
As mentioned above, if you type part of a command word and press [Tab], the CLI completes the current word (if you have typed enough of the word for the CLI to distinguish it from other possibilities), including hyphenated exten­sions. For example:
ProCurve(config)# port-
[Tab]
ProCurve(config)# port-security _
Pressing
[Tab] after a completed command word lists the further options for
that command.
ProCurve(config)# qos
[Tab]
udp-portSet UDP port based priority. tcp-portSet TCP port based priority. device-priorityConfigure device-based priority. dscp-mapDefine mapping between a DSCP
(Differentiated-Services Codepoint) value and 802.1p priority.
type-of-serviceConfigure the Type-of-Service
method the device uses to prioritize IP traffic.
Listing Command Options
You can use the CLI to remind you of the options available for a command by entering command keywords followed by to see the command options for configuring the console settings:
?. For example, suppose you want
Figure 4-5. Example of How To List the Options for a Specific Command
4-10
Using the Command Line Interface (CLI)
Using the CLI

Displaying CLI “Help”

CLI Help provides two types of context-sensitive information:
Command list with a brief summary of each command’s purpose
Detailed information on how to use individual commands
Displaying Command-List Help.
Syntax: help
Displays a listing of command Help summaries for all commands available at the current privilege level. That is, at the Operator level, executing help displays the Help summaries only for Operator-Level commands. At the Manager level, executing help displays the Help summaries for both the Operator and Manager levels, and so on.
For example, to list the Operator-Level commands with their purposes:
Figure 4-6. Example of Context-Sensitive Command-List Help
Displaying Help for an Individual Command.
Syntax: < command-string > help
This option displays Help for any command available at the current context level.
For example, to list the Help for the interface command in the Global Config­uration privilege level:
4-11
Using the Command Line Interface (CLI)
Using the CLI
Figure 4-7.Example of How To Display Help for a Specific Command
Note that trying to list the help for an individual command from a privilege level that does not include that command results in an error message. For example, trying to list the help for the interface command while at the global configuration level produces this result:
ProCurve# speed-duplex help Invalid input: speed-duplex
4-12
Using the Command Line Interface (CLI)
Using the CLI

Configuration Commands and the Context Configuration Modes

You can execute any configuration command in the global configuration mode or in selected context modes. However, using a context mode enables you to execute context-specific commands faster, with shorter command strings.
The switch offers interface (port or trunk group) and VLAN context configu­ration modes:
Port or Trunk-Group Context. Includes port- or trunk-specific commands that apply only to the selected port(s) or trunk group, plus the global config­uration, Manager, and Operator commands. The prompt for this mode includes the identity of the selected port(s):
ProCurve(config)# interface c3-c6 ProCurve(eth-C5-C8)#
ProCurve(config)# interface trk1 ProCurve(eth-Trk1)#
Commands executed at configuration level for entering port and trk1 static trunk-group contexts, and resulting prompts showing port or static trunk contexts..
ProCurve(eth-C5-C8)# ProCurve(eth-Trk1)#
ProCurve(eth-C5-C8)# ? ProCurve(eth-C5-C8)# ?
Lists the commands you can use in the port or static trunk context, plus the Manager, Operator, and context commands you can exe­cute at this level.
4-13
Using the Command Line Interface (CLI)
In the port context, the first block of commands in the “?” listing show the context-specific commands that will affect only ports C3-C6.
The remaining commands in the listing are Manager, Operator, and context commands.
Using the CLI
Figure 4-8. Context-Specific Commands Affecting Port Context
4-14
Using the Command Line Interface (CLI)
In the VLAN context, the first block of commands in the “?” listing show the commands that will affect only vlan-100.
The remaining commands in the listing are Manager, Operator, and context commands.
Using the CLI
VLAN Context . Includes VLAN-specific commands that apply only to the selected VLAN, plus Manager and Operator commands. The prompt for this mode includes the VLAN ID of the selected VLAN. For example, if you had already configured a VLAN with an ID of 100 in the switch:
ProCurve(config)# vlan 100
Command executed at configuration level to enter VLAN 100 context.
ProCurve(vlan-100)#
Resulting prompt showing VLAN 100 context.
ProCurve(vlan-100)# ?
Lists commands you can use in the VLAN context, plus Manager, Operator, and context commands you can execute at this level.
Figure 4-9. Context-Specific Commands Affecting VLAN Context
4-15
Using the Command Line Interface (CLI)
ProCurve(config)# show history 2 show arp 1 show flash
ProCurve(config)# redo 2
IP ARP table
IP Address MAC Address Type Port
--------------- ----------------- ------- ----
15.255.128.1 00000c-07ac00 dynamic A11
Executes the show arp command again.

CLI Control and Editing

CLI Control and Editing

Executing a Prior Command—Redo

The redo command executes a prior command in the history list.
Syntax: redo [number | command-str]
Re-executes a command from history. Executes the last command by default.
Figure 4-10. Example of the redo Command

Repeating Execution of a Command

The repeat command executes a previous command in the history list.
number: The position of the command to execute in the history list. When number is specified, the n the most recent command in the history is executed.
command-str: When command-str is specified, the most recent command whose name matches the specified string is executed.
th
command starting from
4-16
Syntax: repeat [cmdlist] [count] [delay]
ProCurve(config)# show history 3 show ver 2 show ip 1 show arp
ProCurve(config)# repeat 1-2 IP ARP table IP Address MAC Address Type Port
--------------- ----------------- ------- ----
15.255.128.1 000000-000000 dynamic
Internet (IP) Service IP Routing : Disabled Default Gateway :
Default TTL : 64 Arp Age : 20 Domain Suffix : DNS server :
VLAN | IP Config IP Address Subnet Mask Proxy ARP
-------------------- + ---------- --------------- --------------- --------­ DEFAULT_VLAN | DHCP/Bootp 15.255.131.90 255.255.248.0 No No
Repeats the show arp and show ip commands.
Repeats execution of a previous command. Repeats the last command by default until a key is pressed.
Using the Command Line Interface (CLI)
CLI Control and Editing
For example:
cmdlist: If a number or range of numbers is specified, the command repeats the n
th
most recent commands (where “n”
is the position in the history list).
count: Repeats the command for the number of times specified.
delay: The command repeats execution after a delay for the
number of seconds specified.
ProCurve(config)# repeat 1-4,7-8,10 count 2 delay 3
Figure 4-11. Example of repeat Command Using a Range
4-17
Using the Command Line Interface (CLI)
CLI Control and Editing

Using a Command Alias

You can create a simple command alias to use in place of a command name and its options. Choose an alias name that is not an existing CLI command already. Existing CLI commands are searched before looking for an alias command; an alias that is identical to an existing command will not be executed.
The alias command is executed from the current configuration context (oper­ator, manager, or global). If the command that is aliased has to be executed in the global configuration context, you must execute the alias for that command in the global configuration context as well. This prevents bypassing the security in place for a particular context.
ProCurve recommends that you configure no more than 128 aliases.
Syntax: [no] alias <name> <command>
Creates a shortcut alias name to use in place of a commonly used command. The alias command is executed from the current config context.
name: Specifies the new command name to use to simplify keystrokes and aid memory. command: Specifies an existing command to be aliased. The command must be enclosed in quotes.
4-18
Use the no form of the command to remove the alias.
For example, if you use the show interface custom command to specify the output, you can configure an alias for the command to simplify execution. It is recommended that you use an alias that does not have an existing tab completion in the CLI. For example, using an alias that starts with “show” or “int” would complete to “show” and “interface” respectively when you use the tab completion function.
Using the Command Line Interface (CLI)
ProCurve(config)# show int custom 1-4 port name:4 type vlan intrusion speed enabled mdi
Status and Counters - Custom Port Status
Intrusion Port Name Type VLAN Alert Speed Enabled MDI-mode
---- ---------- ---------- ----- --------- ------- ------- -------­ 1 Acco 100/1000T 1 No 1000FDx Yes Auto 2 Huma 100/1000T 1 No 1000FDx Yes Auto 3 Deve 100/1000T 1 No 1000FDx Yes Auto 4 Lab1 100/1000T 1 No 1000FDx Yes Auto
ProCurve(config)# alias sic “show int custom 1-4 port name:4 type vlan intrusion speed enabled mdi” ProCurve(config)#
ProCurve(config)# sic
Status and Counters - Custom Port Status
Intrusion Port Name Type VLAN Alert Speed Enabled MDI-mode
---- ---------- ---------- ----- --------- ------- ------- -------­ 1 Acco 100/1000T 1 No 1000FDx Yes Auto 2 Huma 100/1000T 1 No 1000FDx Yes Auto 3 Deve 100/1000T 1 No 1000FDx Yes Auto 4 Lab1 100/1000T 1 No 1000FDx Yes Auto
CLI Control and Editing
Figure 4-12. Example of Using the Alias Command with show int custom
Note Remember to enclose the command being aliased in quotes.
Command parameters for the aliased command can be added at the end of the alias command string. For example:
ProCurve(config)# alias sc “show config” ProCurve(config)# sc status
To change the command that is aliased, re-execute the alias name with new command options. The new options are used when the alias is executed.
To display the alias commands that have been configured, enter the show alias command.
4-19
Using the Command Line Interface (CLI)
ProCurve(config)# show alias
Name Command
-------------------- -----------------------------­ sc show config sic show int custom 1-4 port name:4 type vlan intrusion speed enabled mdi
CLI Control and Editing
Figure 4-13. Example of Alias Commands and Their Configurations

CLI Shortcut Keystrokes

Keystrokes Function
[Ctrl] [A] Jumps to the first character of the command line.
[Ctrl]
[B] or [<]
[Ctrl] [C] Terminates a task and displays the command prompt.
[Ctrl] [D] Deletes the character at the cursor.
[Ctrl] [E] Jumps to the end of the current command line.
[Ctrl]
[F] or [>]
[Ctrl] [K] Deletes from the cursor to the end of the command line.
[L] or [Ctrl] [R]
[Ctrl]
[N] or [v]
[Ctrl]
[P] or [^]
[Ctrl]
[U] or [Ctrl] [X]
[Ctrl]
[Ctrl] [W] Deletes the last word typed.
[Esc] [B] Moves the cursor backward one word.
[Esc] [D] Deletes from the cursor to the end of the word.
[Esc] [F] Moves the cursor forward one word.
[Backspace]
[Spacebar]
Moves the cursor back one character.
Moves the cursor forward one character.
Repeats current command line on a new line.
Enters the next command line in the history buffer.
Enters the previous command line in the history buffer.
Deletes from the cursor to the beginning of the command line.
Deletes the first character to the left of the cursor in the command line.
Moves the cursor forward one character.
4-20

Using the ProCurve Web Browser Interface

Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
General Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3
Starting a Web Browser
Interface Session with the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
Using a Standalone Web Browser in a PC or UNIX Workstation . . . . 5-4
Using ProCurve Manager (PCM) or
ProCurve Manager Plus (PCM+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
Tasks for Your First ProCurve Web Browser Interface Session . . 5-7
Viewing the “First Time Install” Window . . . . . . . . . . . . . . . . . . . . . . . . 5-7
Security: Creating Usernames and Passwords
in the Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
Entering a User Name and Password . . . . . . . . . . . . . . . . . . . . . . 5-10
Using a User Name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
If You Lose the Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-10
Online Help for the Web Browser Interface . . . . . . . . . . . . . . . . . . . . 5-11
5
Support/Mgmt URLs Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-12
Support URL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-13
Help and the Management Server URL . . . . . . . . . . . . . . . . . . . . . . . . 5-13
Using the PCM Server for Switch Web Help . . . . . . . . . . . . . . . . . . . . 5-14
Status Reporting Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-16
The Overview Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-16
The Port Utilization and Status Displays . . . . . . . . . . . . . . . . . . . . . . . 5-17
Port Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-17
Port Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-19
The Alert Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
Sorting the Alert Log Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-20
Alert Types and Detailed Views . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21
The Status Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22
Setting Fault Detection Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-24
5-1
Using the ProCurve Web Browser Interface

Overview

Overview
The ProCurve web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. This lets you do the following:
Optimize your network uptime by using the Alert Log and other diagnostic
tools
Make configuration changes to the switch
Maintain security by configuring usernames and passwords
This chapter covers the following:
General features (page 5-3).
Starting a web browser interface session (page 5-4)
Tasks for your first web browser interface session (page 5-7):
Creating usernames and passwords in the web browser interface (page 5-8)
Selecting the fault detection configuration for the Alert Log operation (page 5-24)
Getting access to online help for the web browser interface (page 5-11)
Description of the web browser interface:
Overview window and tabs (page 5-16)
Port Utilization and Status displays (page 5-17)
Alert Log and Alert types (page 5-20)
Setting the Fault Detection Policy (page 5-24)
Note You can disable access to the web browser interface by either executing no
web-management at the Command Prompt or changing the Web Agent Enabled
parameter setting to No (page 7-4).
For information on operating system, browser, and Java versions for the switches covered in this guide, go to www.hp.com/go/bladesystem/documentation.
5-2
Using the ProCurve Web Browser Interface

General Features

General Features
The web browser interface includes these features:
Switch Identity and Status:
General system data
Software version
IP address
Status Overview
Port utilization
Port counters
•Port status
Alert log
Switch Configuration:
Device view
Port configuration
VLAN configuration
Fault detection
Quality of service (QoS)
Port monitoring (mirroring)
System information
IP configuration
Support and management server URLs
Device features (Spanning Tree On/Off, VLAN selection, and IGMP)
Switch Security:
User names and passwords
Authorized Addresses
Intrusion Log
•SSL
RADIUS authentication (Refer to the Access Security Guide.)
Switch Diagnostics:
Ping/Link Test
Device reset
Configuration report
5-3
Using the ProCurve Web Browser Interface

Starting a Web Browser Interface Session with the Switch

Starting a Web Browser Interface Session with the Switch
You can start a web browser session in the following ways:
Using a standalone web browser on a network connection from a PC or
UNIX workstation:
Directly connected to your network
Connected through remote access to your network
Using a network management station running ProCurve Manager on your
network

Using a Standalone Web Browser in a PC or UNIX Workstation

This procedure assumes that you are using a compatible web browser and that the switch is configured with an IP address accessible from your PC or workstation. (For more on assigning an IP address, refer to “IP Configuration” on page 8-2.)
TM
1. Ensure that the Java information on this topic, refer to your browser’s online Help.
2. Use the web browser to access the switch. If your network includes a Domain Name Server (DNS), your switch’s IP address may have a name associated with it that you can type in the Location or Address field instead of the IP address. Using DNS names typically improves browser perfor­mance. Contact your network administrator to enquire about DNS names associated with your ProCurve switch.
applets are enabled for your browser. For more
5-4
Type the IP address (or DNS name) of the switch in the browser Location or Address (URL) field and press
/.)
switch6120
10.11.12.195
[Enter] (example of a DNS-type name)
[Enter] (example of an IP address)
[Enter]. (It is not necessary to include http:/
Starting a Web Browser Interface Session with the Switch
Using the ProCurve Web Browser Interface

Using ProCurve Manager (PCM) or ProCurve Manager Plus (PCM+)

ProCurve Manager and ProCurve Manager Plus are designed for installation on a network management workstation. For this reason, the system require­ments are different from the system requirements for accessing the switch’s web browser interface from a non-management PC or workstation. For PCM and PCM+ requirements, refer to the information provided with the software.
This procedure assumes that:
You have installed the recommended web browser on a PC or workstation
that serves as your network management station.
The networked device you want to access has been assigned an IP address
and (optionally) a DNS name, and has been discovered by PCM or PCM+. (For more on assigning an IP address, refer to “IP Configuration” on page 8-2.)
To establish a web browser session with PCM or PCM+ running, do the following on the network management station:
TM
1. Make sure the Java are not, refer to the web browser online Help for specific information on enabling the Java applets.
applets are enabled for your web browser. If they
2. In the Interconnected Devices listing under Network Manager Home (in the PCM/PCM+ sidebar), right-click on the model number of the device you want to access.
3. The web browser interface automatically starts with the Status Overview window displayed for the selected device, as shown in Figure 5-1.
Note If the Registration window appears, click on the Status tab.
5-5
Using the ProCurve Web Browser Interface
First time install alert
Starting a Web Browser Interface Session with the Switch
Figure 5-1. Example of Status Overview Screen
5-6

Tasks for Your First ProCurve Web Browser Interface Session

Using the ProCurve Web Browser Interface
Tasks for Your First ProCurve Web Browser Interface Session
The first time you access the web browser interface, there are three tasks you should perform:
Review the “First Time Install” window
Set Manager and Operator passwords
Set access to the web browser interface online help

Viewing the “First Time Install” Window

When you access the switch’s web browser interface for the first time, the Alert log contains a “First Time Install” alert, as shown in figure 5-2. This gives you information about first time installations, and provides an immediate opportunity to set passwords for security and to specify a Fault Detection policy, which determines the types of messages that will be displayed in the Alert Log.
Double click on First Time Install in the Alert log (figure 5-1 on page 5-6). The web browser interface then displays the “First Time Install” window, below.
Figure 5-2. First-Time Install Window
5-7
Using the ProCurve Web Browser Interface
Tasks for Your First ProCurve Web Browser Interface Session
This window is the launching point for the basic configuration you need to perform to set web browser interface passwords for maintaining security and a fault detection policy, which determines the types of messages that the Alert Log displays.
To set web browser interface passwords, click on secure access to the device to display the Device Passwords screen, and then go to the next page. (You can also access the password screen by clicking on the Security tab.)
To set Fault Detection policy, click on select the fault detection configuration in the second bullet in the window and go to the section, “Setting Fault Detection Policy” on page 5-24. (You can also access the password screen by clicking on the Configuration tab, and then the
[Fault Detection] key.)

Security: Creating Usernames and Passwords in the Browser Interface

Note On the switches covered in this guide you can also configure RADIUS authen-
tication for web browser interface access. For more information, refer to the chapter titled “RADIUS Authentication and Accounting” in the Access Secu- rity Guide for your switch.
5-8
You may want to create both a username and a password to create access security for your switch. There are two levels of access to the interface that can be controlled by setting user names and passwords:
Operator Setting. An Operator-level user name and password allows
read-only access to most of the web browser interface, but prevents access to the Security window.
Manager Setting. A Manager-level user name and password allows full
read/write access to the web browser interface.
Figure 5-3. The Device Passwords Window
To set the passwords:
Tasks for Your First ProCurve Web Browser Interface Session
Using the ProCurve Web Browser Interface
1. Access the Device Passwords screen by one of the following methods:
If the Alert Log includes a “First Time Install” event entry, double
click on this event, then, in the resulting display, click on the secure access to the device link.
Select the Security tab.
2. Click in the appropriate box in the Device Passwords window and enter user names and passwords. You will be required to repeat the password strings in the confirmation boxes.
Both the user names and passwords can be up to 16 printable ASCII characters.
3. Click on
[Apply Changes] to activate the user names and passwords.
Note Passwords you assign in the web browser interface will overwrite previous
passwords assigned in either the web browser interface, the CLI, or the menu interface. That is, the most recently assigned passwords are the switch’s passwords, regardless of which interface was used to assign the string.
5-9
Using the ProCurve Web Browser Interface
Tasks for Your First ProCurve Web Browser Interface Session
Entering a User Name and Password
Figure 5-4. Example of the Password Prompt in the Web Browser Interface
The manager and operator passwords are used to control access to all switch interfaces. Once set, you will be prompted to supply the password every time you try to access the switch through any of its interfaces. The password you enter determines the capability you have during that session:
Entering the manager password gives you full read/write/troubleshooting
capabilities
Entering the operator password gives you read and limited trouble-
shooting capabilities.
5-10
Using a User Name
If you also set user names in the web browser interface screen, you must supply the correct user name for web browser interface access. If a user name has not been set, then leave the User Name field in the password window blank.
Note that the Command Prompt and switch console interfaces use only the password, and do not prompt you for the User Name.
If You Lose the Password
If you lose the passwords, you can clear them by pressing the Clear button on the front of the switch. This action deletes all password and user name protection from all of the switch’s interfaces.
Tasks for Your First ProCurve Web Browser Interface Session
The Help Button
The Clear button is provided for your convenience, but its presence means that if you are concerned with the security of the switch configuration and operation, you should make sure the switch is installed in a secure location, such as a locked wiring closet. (For more information, refer to “Front Panel Security” in the chapter titled “Configuring Username and Password Secu­rity” in the Access Security Guide for your switch.)
Using the ProCurve Web Browser Interface

Online Help for the Web Browser Interface

Online Help is available for the web browser interface. You can use it by clicking on the question mark button in the upper right corner of any of the web browser interface screens.
Figure 5-5. The Help Button
Context-sensitive help is provided for the screen you are on.
Note To access the online Help for the ProCurve web browser interface, you need
either ProCurve Manager (version 1.5 or greater) installed on your network or an active connection to the World Wide Web. Otherwise, Online help for the web browser interface will not be available.
For more on Help access and operation, refer to “Help and the Management Server URL” on page 5-13.
5-11
Using the ProCurve Web Browser Interface
3. Enter one of the following (or use the default setting): – The URL for the support information source you want the switch to access
when you click on the web browser interface Support tab. The default is the URL for the ProCurve Networking home page.
– The URL of a PCM (ProCurve Network Manager) workstation or other server
for the online Help files for this web browser interface. (The default setting accesses the switch’s browser-based Help on the ProCurve World Wide Web site.) Note that if you install PCM in your network, the PCM management station acts as the web browser Help server and automatically inserts the necessary URL in this field.)
1. Click Here
2. Click Here
4. Click on Apply Changes

Support/Mgmt URLs Feature

Support/Mgmt URLs Feature
The Support/Mgmt URLs window enables you to change the World Wide Web Universal Resource Locator (URL) for two functions:
Support URL – A support information site for your switch
Management Server URL – The web site for web browser online Help
Figure 5-6. The Default Support/Mgmt URLs Window
5-12
Using the ProCurve Web Browser Interface
In the default configuration, the switch uses the URL for accessing the web browser interface help files on the
Support/Mgmt URLs Feature

Support URL

For technical support, go to:
www.hp.com/#Support.

Help and the Management Server URL

The Management Server URL field specifies the URL the switch uses to find online Help for the web browser interface.
If you install PCM (ProCurve Manager) in your network, the PCM manage-
ment station acts as the web browser Help server for the switch and automatically inserts the necessary URL in this field. For more on the option, see “Using the PCM Server for Switch Web Help” on page 5-14.)
In the default configuration (and if PCM is not running on your network)
this field is set to the URL for accessing online Help from the ProCurve Networking web site:
www.hp.com/rnd/device_help
Using this option, the Help files are automatically available if your work­station can access the World Wide Web. In this case, if Online Help fails to operate, ensure that the above URL appears in the Management Server
URL field shown in Figure 5-7:
Figure 5-7. How To Access Web Browser Interface Online Help
5-13
Using the ProCurve Web Browser Interface
Support/Mgmt URLs Feature

Using the PCM Server for Switch Web Help

For ProCurve devices that support the “Web Help” feature, you can use the PCM server to host the switch help files for devices that do not have HTTP access to the ProCurve Support Web site.
1. Go to the ProCurve Support web site to get the Device Help files:
www.hp.com//rnd/device_help/
2. Copy the Web help files to the PCM server, under:
C:\\program files\hewlett-packard\pnm\server\webroot\ rnd\sevice_help\help\hpwnd\webhelp
5-14
Using the ProCurve Web Browser Interface
Support/Mgmt URLs Feature
3. Add an entry, or edit the existing entry in the Discovery portion of the global properties (globalprops.prp) in PCM to redirect the switches to the help files on the PCM server. For example:
Global { TempDir=data/temp ... Discovery{ ... ... DeviceHelpUrlRedirect=http://15.29.37.12.8040/rnd/device_help
... } }
You will enter the IP address for your PCM server. 8040 is the standard port number to use.
4. Restart the Discovery process for the change to be applied.
Note Changing the Discovery’s Global properties file will redirect the Device Help
URL for all devices.
If you just want to change the Device Help URL for a particular device, then go to the Configuration tab on the Web UI for that device and select the “Support/Mgmt URL” button. Edit the entry in the “Management Server URL” field for the device to point to the PCM server; for example:
http://15.29.37.12.8040/rnd/device_help
5-15
Using the ProCurve Web Browser Interface
Alert Log Control Bar
Port Utiliza­tion Graphs
(page 5-17)
Alert Log
(page 5-20)
Port Status Indicators
(page 5-19)
Button Bar
Tab Bar
Status Bar
(page 5-22)
Active Tab
Active Button

Status Reporting Features

Status Reporting Features
Browser elements covered in this section include:
The Overview window (below)
Port utilization and status (page 5-17)
The Alert log (page 5-20)
The Status bar (page 5-22)

The Overview Window

The Overview Window is the home screen for any entry into the web browser interface.The following figure identifies the various parts of the screen.
Figure 5-8. The Status Overview Window
5-16
Using the ProCurve Web Browser Interface
Port Status Indicators
Port Utilization Bar Graphs
Bandwidth Display Control
Legend
Status Reporting Features
Policy Management and Configuration. PCM can perform network-wide policy management and configuration of your switch. The Management Server URL field (page 5-13) shows the URL for the management station performing that function. For more information, refer to the documentation provided with the PCM software.

The Port Utilization and Status Displays

The Port Utilization and Status displays show an overview of the status of the switch and the amount of network activity on each port. The following figure shows a sample reading of the Port Utilization and Port Status.
Figure 5-9. The Graphs Area
Port Utilization
The Port Utilization bar graphs show the network traffic on the port with a breakdown of the packet types that have been detected (unicast packets, non­unicast packets, and error packets). The Legend identifies traffic types and their associated colors on the bar graph:
% Unicast Rx & All Tx: This is all unicast traffic received and all
transmitted traffic of any type. This indicator (a blue color on many systems) can signify either transmitted or received traffic.
% Non-Unicast Pkts Rx: All multicast and broadcast traffic received by
the port. This indicator (a gold color on many systems) enables you to know “at-a-glance” the source of any non-unicast traffic that is causing high utilization of the switch. For example, if one port is receiving heavy broadcast or multicast traffic, all ports will become highly utilized. By color-coding the received broadcast and multicast utilization, the bar graph quickly and easily identifies the offending port. This makes it faster and easier to discover the exact source of the heavy traffic because you don’t have to examine port counter data from several ports.
5-17
Loading...