HP Training Student guide - Dahlgren...

HP Training

Student guide

Installation and service of HP ProCurve devicesRev. 4.21HP Restricted

© Copyright 2004 Hewlett-Packard Development Company, L.P.

The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

This is an HP copyrighted work that may not be reproduced without the written permission of HP. You may not use these materials to deliver training to any person outside of your organization without the written permission of HP.

Printed in the USA

Installation and service of HP ProCurve devicesStudent guideMay 2004

HP Restricted

Rev. 4.21 HP Restricted [Module #] – i

Contents

Overview Introduction .............................................................................................................. 1 Course objectives...................................................................................................... 1 Prerequisites ............................................................................................................. 2 Course module overviews ........................................................................................ 3 Course agenda .......................................................................................................... 3 Additional information ............................................................................................. 4

Module 1 — The HP ProCurve product family Objectives ................................................................................................................. 1 Useful definitions ..................................................................................................... 2 Structured cabling system......................................................................................... 4 Network components................................................................................................ 6 OSI Protocol Stack ................................................................................................... 7 OSI Protocol Stack ................................................................................................... 8 OSI Protocol Stack ................................................................................................... 9 OSI Protocol Stack ................................................................................................. 10 OSI Protocol Stack ................................................................................................. 11 HP ProCurve product families................................................................................ 12 HP ProCurve switch family positioning................................................................. 14 HP ProCurve accessories and features ................................................................... 16 HP ProCurve accessories: module, transceivers, mini-GBICs.............................. 17 Connectors.............................................................................................................. 19 Copper cabling system ........................................................................................... 20 Cable specifications for full-duplex Ethernet......................................................... 22 Points to ponder….................................................................................................. 24 HP ProCurve switch portfolio ................................................................................ 25 HP ProCurve switch management.......................................................................... 27 HP ProCurve feature: hot swap (4000 series, 4100gl, 5300xl series, 9300 series)............................................................................................................. 28 HP ProCurve accessories: mode selector (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) .................................................................................. 29 HP ProCurve Switch 2500 Series........................................................................... 30 HP ProCurve Switch 2500 Series........................................................................... 31 HP ProCurve 2600 class switch ............................................................................. 32 HP ProCurve Switch 2600 Series........................................................................... 33 Back of HP ProCurve Switch 2600 Series ............................................................. 34 HP ProCurve 600 Redundant and External Power Supply ................................... 35 HP ProCurve Switch 6108...................................................................................... 36

Installation and service of HP ProCurve devices

HP Restricted Rev. 4.21 ii

HP ProCurve Switch 2800 Series........................................................................... 37 HP ProCurve redundant power supplies (4000 series, 4100gl, 5300xl series, 9300 series)............................................................................................................. 38 HP ProCurve Switch 4000m/8000m ...................................................................... 39 Switch 4000m/8000m – front................................................................................. 40 Switch 4000m/8000m – modules ........................................................................... 41 HP ProCurve Switch 4100gl Series........................................................................ 42 HP ProCurve Switch 4100gl Series: modules/transceivers/GBICs........................ 43 HP ProCurve Switch 5300xl Series........................................................................ 44 HP ProCurve Switch 5300xl Series........................................................................ 45 HP ProCurve Switch 5300xl Series: modules/transceivers/GBICs........................ 46 Port and slot numbering (2500, 2600, 4000 series, 4100gl series, 5300xl series, 6108)....................................................................................................................... 47 HP ProCurve accessories: Reset and Clear buttons (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) .............................................................. 48 Using Clear and Reset to erase the startup config (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) .............................................................. 49 HP ProCurve Routing Switch 9300m Series.......................................................... 50 HP ProCurve 9300m series .................................................................................... 51 Management modules (9300 series) ....................................................................... 52 Enhanced performance management and port modules (highest port density) – 9300 series .............................................................................................................. 53 10-gigabit module – 1 port (9300 series) ............................................................... 54 10-gigabit module – 2 port (9300 series) ............................................................... 55 Recently retired - M4 redundant management and port modules ......................... 56 Retired management modules for HP ProCurve Routing Switch 9300 series ....... 57 Retired redundant management modules for HP ProCurve Routing Switch 9300 series .............................................................................................................. 58 Retired port modules for HP ProCurve Routing Switch 9300 series ..................... 59 Port and slot numbering (9300 series).................................................................... 60 Recovering from a lost password (9300 series) ..................................................... 61 Ignore startup configuration at boot time (9300 series) ........................................ 62 HP ProCurve reference material............................................................................. 63 Module 1 summary................................................................................................. 64

Module 2 — Switch management Objectives ................................................................................................................. 1 Device management can take different paths........................................................... 2 Out-of-band access ................................................................................................... 3 In-band access for device management .................................................................... 4 Management interfaces............................................................................................. 5 Points to ponder... ..................................................................................................... 6 CLI interface privilege levels (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ..... 7 Points to ponder….................................................................................................... 8 Assigning a manager password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)........................................................................................... 9 Assigning an operator password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)......................................................................................... 10

Contents

Rev. 4.21 HP Restricted iii

Local authentication for device access (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, and 6108)............................................................................ 11 Centralized authentication for device access (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ........................................................................... 12 Setting system information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 13 Manager and operator (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) ........ 14 Interface context at the CLI - some commands (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)......................................................................................... 15 CLI tips and shortcuts (2500, 2600, 2800, 4100gl, 5300xl series, 6108)............... 16 CLI interface privilege levels (9300 series) ........................................................... 18 Accessing the CLI (9300 series)............................................................................. 19 EXEC – the command interpreter (9300 series)..................................................... 21 EXEC – Enable (9300 series)................................................................................. 22 Assigning the super-user password (9300 series) .................................................. 23 Creating the read-only and port-config users (9300 series) .................................. 25 Saving configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 26 Points to ponder….................................................................................................. 27 CLI advantages....................................................................................................... 28 Menu interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108)...... 29 Menu interface – Main Menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ... 31 Menu interface navigation (2500, 2600, 2800, 4100gl, 5300xl series, 6108)........ 33 Getting help (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ............................. 34 Using the full menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ... 35 Port configuration at the menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108)................................................................................................ 36 Activating configuration changes (2500, 2600, 2800, 4100gl, 5300xl series, 6108)....................................................................................................................... 37 Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108)..... 39 Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108)..... 40 Points to ponder….................................................................................................. 41 Menu interface (4000 series) .................................................................................. 42 Menu interface navigation (4000 series) ................................................................ 44 Setting manager and operator passwords (4000 series) ........................................ 45 The 4000 series CLI ............................................................................................... 46 4000 series – some helpful CLI commands ........................................................... 47 Advantages of the menu interface .......................................................................... 48 HP web browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) ........................................................................... 50 Starting the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series............................................................................. 51 The port status indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) ........................................................................... 52


HP Restricted Rev. 4.21 iv

The port utilization indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) .............................................................. 53 Creating usernames and passwords in the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) .......................................... 54 Advantages of web browser interface .................................................................... 55 Points to ponder….................................................................................................. 56 Statically defining an IP address and mask (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ........................................................................... 57 Defining the default gateway (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)...................................................................................................................... 58 Using the Switch Setup menu to configure IP info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) .......................................................................... 59 4000 series – configuring IP................................................................................... 60 4000 series – IP configuration................................................................................ 62 Web interface configuring IP address .................................................................... 63 Module 2 summary................................................................................................. 64

Module 3 — System information Objectives ................................................................................................................. 1 HP ProCurve accessories: LEDs .............................................................................. 2 Switch LEDs (2500, 2800, 4100gl, 5300xl series, 6108)......................................... 3 Port LEDs: 2500, 2800, 4100gl, 5300xl series, 6108............................................... 4 Switch LEDs (2600) ................................................................................................. 5 Port LEDs (2600) ..................................................................................................... 6 Switch LEDs (9300 series) ....................................................................................... 7 Port LEDs (9300 series) ........................................................................................... 8 Points to ponder….................................................................................................... 9 HP ProCurve Switch configuration file manipulation............................................ 10 CLI: viewing configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 11 Configuration flow commands (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 12 Saving configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 13 File transfer............................................................................................................. 14 Saving the running configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 15 Saving the startup configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 16 Restoring configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 17 Displaying flash info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 19 Copying firmware from a TFTP server (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 20

Contents

Rev. 4.21 HP Restricted v

Flash file manipulation (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ... 21 Booting from an alternate image source (2600, 2800, 4100gl, 5300xl series, 6108)....................................................................................................................... 22 Updating the system image (4100gl, 5300xl series, 9300 series) .......................... 23 Updating the system image (4000 series)............................................................... 24 Viewing system information (4000 series)............................................................. 25 The boot monitor (9300 series) .............................................................................. 26 Boot the switch from a TFTP server (9300 series)................................................. 27 show tech command (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ....... 28 Copying command output to a file ......................................................................... 29 Putting system info to a file (4000 series) .............................................................. 30 Module 3 summary................................................................................................. 31

Module 4 — Verification toolbox Objectives ................................................................................................................. 1 Points to ponder….................................................................................................... 2 Time synchronization protocols ............................................................................... 3 Configuring SNTP parameters (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................... 4 Time zone and manual time setting (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)..................................................................................................... 5 Menu: configuring time protocol (2500, 2600, 2800, 4100gl, 5300xl series, 6108)......................................................................................................................... 6 Menu: configuring time protocol (4000 series)........................................................ 7 Points to ponder….................................................................................................... 8 Event log system (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................... 9 Event....................................................................................................................... 10 Show logging.......................................................................................................... 11 The Debug/System-Logging (syslog) system ........................................................ 12 Defining a SyslogD server...................................................................................... 13 Enabling Debug/System Logging (2500, 2600, 2800, 4100gl, 5300xl series, 6108)....................................................................................................................... 14 Debug command (2500, 2600, 2800, 4100gl, 5300xl series, 6108)....................... 15 Messaging structure (2500, 2600, 2800, 4100gl, 6108) ......................................... 16 Messaging structure (5300xl series) ....................................................................... 17 Event logging (4000 series).................................................................................... 18 View the event log (4000 series) ............................................................................ 19 Event logging (9300 series).................................................................................... 20 Message levels (9300 series) .................................................................................. 21 Configuring Syslog using CLI (9300 series).......................................................... 22 Simple Network Management Protocol (SNMP)................................................... 23 Configuring SNMP................................................................................................. 24 Defining an SNMP read/write community (2500, 2600, 2800, 4100gl, 5300xl series, 6108)................................................................................................ 25


HP Restricted Rev. 4.21 vi

Configuring SNMP trap operation (2500, 2600, 2800, 4100gl, 5300xl series, 6108)....................................................................................................................... 26 Configuring SNMP trap operation (4000 series).................................................... 27 Defining an SNMP read/write community (9300 series) ...................................... 28 Configuring SNMP trap operation (9300 series).................................................... 29 Points to ponder... ................................................................................................... 30 Cisco Discovery Protocol (CDP) – 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series .................................................................................................... 31 Displaying CDP information (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)...................................................................................................................... 32 Displaying CDP neighbor details (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)................................................................................................... 33 Modifying CDP settings (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 34 Diagnostic tools (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 35 Diagnostic tools: ping test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 36 Diagnostic tools: link test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 37 Diagnostic tools: show tech (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 38 Diagnostic tools: traceroute (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)............................................................................................................. 39 Port mirroring (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ....... 40 Ping test (4000 series) ............................................................................................ 41 Link test (4000 series) ............................................................................................ 42 Port mirroring (4000 series) ................................................................................... 43 Viewing events with the Web interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) ........................................................................... 44 Viewing details of events (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ......... 45 Setting Fault Detection policy (2500, 2600, 2800, 4100gl, 5300xl series, 6108) .. 46 Alert sensitivities (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ...................... 47 Configuring Syslog using Web interface (9300 series).......................................... 48 To add Syslog server (9300 series) ........................................................................ 49 Diagnostic tools (2500, 2600, 2800, 4100gl, 5300xl series, 6108) ....................... 50 Module 4 summary................................................................................................. 51

Module 5 — Advanced hardware replacement and software utilities Objectives ................................................................................................................. 1 9300m LED behavior ............................................................................................... 2 9300 management – EP modules ............................................................................. 3 Removing 9300m modules....................................................................................... 4 Inserting 9300m modules ......................................................................................... 5 Replacing 9300m management modules.................................................................. 6 Replacing 9300m management modules.................................................................. 7

Contents

Rev. 4.21 HP Restricted vii

Recovering from a lost password (9300 series) ....................................................... 8 Ignore startup configuration boot time (9300 series) ............................................... 9 5300xl LED pattern ................................................................................................ 10 4100gl/5300xl module insertion............................................................................. 12 4100gl/5300xl Redundant Power Supply (RPS) .................................................... 13 4000m/8000m LED patterns .................................................................................. 14 4000m/8000m module insertion............................................................................. 15 4000m/8000m Redundant Power Supply............................................................... 16 Software tools: TFTPD32....................................................................................... 17 Software tools: Tera Term...................................................................................... 18 SolarWinds Subnet Calculator ............................................................................... 19 Sam Spade network utility...................................................................................... 20 SnagIt – screen capture utility ................................................................................ 21 Module 5 summary................................................................................................. 22

Learning check answers


HP Restricted Rev. 4.21 viii

Contents

Rev. 4.21 HP Restricted ix

Rev. 4.21 HP Restricted Overview – 1

Overview

Introduction The purpose of this course is to provide field repair engineers with the skills they need to do basic installation and configuration tasks, as well as troubleshoot and repair/replace field replaceable units (FRUs) and verify that units are operational. This course focuses on HP ProCurve hardware and software. This course does not cover network-centric troubleshooting tools and methodology.

Course objectives After completing this course and its accompanying hands-on activities, you will be able to:

Name the high-level features of each device

Name each of the field replaceable units (FRUs) for a given HP ProCurve device

Name the modules and accessories

Correctly identify the 9300 module and accessory compatibilities and incompatibilities

Describe proper LED behavior

Describe the meaning of the Mode Select buttons

Demonstrate the ability to use Mode Select buttons

Describe the purpose of Reset and Clear buttons

Demonstrate the proper use of the Reset and Clear buttons

Demonstrate the ability to insert and/or remove all field replaceable units, including (but not limited to) power supplies, modules, fans or fan bays, tranceivers, and mini-GBICs

Describe the hot-swap/hot-insert procedures for each device

Demonstrate the ability to verify that a module is installed correctly

Demonstrate the ability to connect the network cables


Overview – 2 HP Restricted Rev. 4.21

Demonstrate the ability to verify that network connections are working correctly

Demonstrate the ability to access each device through the Web, Telnet, or CLI, depending upon the capability of the given HP ProCurve device

Demonstrate the ability to configure a single IP address through any given access method

Demonstrate the ability to save and restore configurations

Demonstrate the ability to update the software

Demonstrate the ability to collect counters, logs, and diagnostic information

Demonstrate the ability to use various diagnostic tools for device connectivity verification

Describe basic Ethernet networking concepts

Describe basic physical cabling requirements

Demonstrate general familiarity with customer premise wiring

Demonstrate familiarity with virtual LANs

Demonstrate familiarity with customer security needs

Prerequisites One of the following options:

Completion of the HP ProCurve Networking Primer (available at http://www.hp.com/rnd/training/technical/index.htm )

CompTIA Network + certification

Completion of Building Proactive Networks/Adaptive EDGE Fundamentals

PLUS

Familiarity with hardware repair and maintenance

Overview


Course module overviews Module 1 provides an overall introduction to basic networking switch technologies and specifically to HP ProCurve switches.

Module 2 discusses the management features of HP ProCurve switches.

Module 3 reviews system information on HP ProCurve products.

Module 4 discusses the features and functions of the verification toolbox.

Module 5 discusses hardware replacement and software tools and utilities.

Course agenda Day 1

Module 1 – The HP ProCurve product family

Lab 1

Module 2 – Switch management

Lab 2

Module 3 – System information

Day 2 Lab 3

Module 4 – Verification toolbox

Lab 4

Module 5 – Advanced hardware replacement and software utilities

Lab 5


Additional Information

Rev. 4.21 HP Restricted 1 – 1

The HP ProCurve product family Module 1

Objectives This module gives an overall introduction to basic networking switch technologies and specifically to HP ProCurve switches.

After completing this module you will be able to:

Describe the OSI architecture model and understand the position of each HP ProCurve product within the OSI architecture

Understand the features of each HP ProCurve product

Understand the “speeds and feeds” of each HP ProCurve product

Describe the similarities across the HP ProCurve product line

Understand product field replaceable units (FRUs)


1 – 2 HP Restricted Rev. 4.21

Useful definitions

3Rev. 4.21 HP Restricted

Useful definitions

• Fixed switch / stackable• Modular switch• Managed vs. unmanaged switch• Bounded• Non-blocking• Local area network (LAN)• Virtual local area network (VLAN)• Layer 2 switch (bridge)• Layer 3 switch (router)• Auto-sensing• MDI-MDIX

Fixed switches have a limited, well-defined number of ports. They don’t support line cards. Typically, fixed switches are one rack unit (RU). Because fixed switches provide no growth potential via insertion of additional line cards, many fixed switches are stackable, meaning that multiple fixed switches can be connected to look like a single switch from the perspective of management software. This stacking is sometime accomplished with special-purpose ports.

Unmanaged switches are limited in functionality. They cannot support VLANs or other configured options.

A bounded switch is one that offers no high-speed uplinks. Many fixed switches are bounded because all the ports are the same speed. You will see that HP ProCurve fixed switches are not bounded.

A non-blocking switch is one in which the speed of the backplane or the bandwidth of the switch’s internal switching mechanism is at least as large as the sum of the speeds of all the ports.

A LAN is a single broadcast domain. Usually the underlying technology is Ethernet.

A VLAN is a way of configuring a switch to participate in multiple broadcast domains, thereby segmenting traffic.

The HP ProCurve product family


An OSI Layer 2 switch, or a bridge, forwards traffic based on the frame’s Layer 2 information. Typically, it supports the Spanning Tree Protocol.

An OSI Layer 3 switch, or a router, forwards traffic based on the frame’s Layer 2 information. Typically, it supports a dynamic routing protocol.

An auto-sensing port automatically determines a common speed and duplicity that both ends of the connection can support.

An MDI-MDIX port supports both straight-through cable and crossover cable.

For example, the default port mode setting is auto. Suppose that your network uses Cat 3 wiring and you want to connect the switch to another autosensing device capable of 100Mbps operation. Because 100Mbps over Cat 3 wiring can introduce transmission problems, the recommended port mode is auto-10, which allows the port to negotiate full- or half-duplex but restricts speed to 10Mbps.



Structured cabling system


Structured cabling system

Access

Distribution

Core

Network devices fall into three functional categories, which are shown in the diagram. Although terminology for these functions may differ between vendors, all are in agreement on the functions themselves, as well as some fundamental network design practices. The backbone or “core” layer of the network is a central or common point where traffic flows between users in workgroups and their centralized resources. Since most inter-workgroup traffic flows through the core, it is important that networking devices located in the core introduce little or no latency. In a local area network, core switches are usually wire-speed, highly available devices.

The “distribution” layer of the network is a consolidation point for the switches that connect directly to end stations. Distribution points are often called the Main Distribution Frame (MDF) or Intermediate Distribution Frame (IDF) and may at times be part of a computer room. These distribution points are often shared between voice and data wiring. In large networks, the distribution layer is the most likely place to implement broadcast control. Broadcast control may occur in the form of Layer 3 switching or routing, working to interconnect physically separated LANs and/or virtual LANs.



Cabling runs between wiring closets and core switches may span distances longer than copper media will allow. As a result, distribution switches are often modular switches that allow flexible port selection and support a mixture of fiber and copper media.

Access switches are those that connect directly to end stations, such as computers and printers. The access switch is the last switch in line between end stations and their shared resources. Access switches are often physically located in wiring closets, with cable runs that terminate in user cubicles or offices.

It is important to note that each of the products is targeted toward a specific set of environments, which will be revealed within this module. However, while specific products may be categorized as “core” or “distribution” switches, this reference can be limiting. For example, a switch that serves as an access layer device in a large, high-traffic environment may alternatively serve as a core layer switch at a much smaller site.



Network components


Network components

Switch_A Switch_B

Access

Distribution

Core

HP ProCurve offers a variety of products for provisioning the network infrastructure, including both fixed-port and modular switches with a mixture of 10-, 100-, and 1000Mbps ports, as well as the new 10Gbps ports. All of the switches have high availability features and support for Quality of Service, making them ready for time-sensitive applications such as IP telephony and video.

The challenge in provisioning today’s networks involves more than simply determining which environments might benefit from the feature sets of each product. Rather, it involves analysis of the current and future requirements of a particular environment, and choosing a set of solutions that will best meet those requirements. One of the goals of this course is to help you, as a network designer or installer, to properly position these products to get the most effective results.



OSI Protocol Stack


OSI Protocol Stack

7

6

5

4

3

Application Layer

Presentation Layer

Session Layer

Transport Layer

Network Layer

Data Link Layer2

Open Systems Interconnection (OSI)Protocol Stack

1 Physical Layer

Next, we’re going to take a look at the OSI Protocol Stack model.

OSI stands for Open Standards Interconnect. The model describes conceptually how information from a software application in one computer moves through the network layers to a software application in another computer.

The OSI Protocol Stack is a reference guide for networking communication.

It defines how the various devices in a network communicate with each other.

Although there are 7 layers in the OSI Protocol Stack, we’re mainly concerned with Layers 2 and 3.

The HP ProCurve product family spans from “dumb” Layer 2 devices to really intelligent Layer 4-7 devices. This training focuses on Layer 2 and some Layer 3 switches.



OSI Protocol Stack


OSI Protocol Stack


7

6

5

4

3

Application Layer

Presentation Layer

Session Layer

Transport Layer

Network Layer

Data Link Layer2

1 Physical Layer1 Physical Layer Connectors, cables, etc.

Layer 1 is the Physical Layer. As the name implies, this layer consists of the cables and connectors that are used to physically connect devices to the network.

The Physical Layer establishes the physical connection between a computer and the network. This layer also controls the transmission of information as it specifies the mechanical and electrical characteristics of the protocol in terms of connector size, pin assignments, and voltage levels. This layer also deals with cable specification—for example, how far apart the communication devices can be placed from one another.



OSI Protocol Stack


7

6

5

4

3

1

Application Layer

Presentation Layer

Session Layer

Transport Layer

Network Layer

Physical Layer

Data Link Layer2 Ethernet Ethernet(Layer 2)Switch

HP ProCurveSwitch 408 (J4097B)

HP ProCurve Switch 2124 (J4868A)



HP ProCurveSwitch 2708 (J4898A)


Layer 2 Unmanaged Stackables



HP ProCurve Switch 4000m (J4121A)

HP ProCurve Switch 8000m (J4110A)

Layer 2 Managed Stackables and ChassisOpen Systems Interconnection (OSI)Protocol Stack

OSI Protocol Stack

The Data Link Layer is primarily concerned with packaging and unpackaging data packets so that they can be encoded and decoded into bits, which will enable the data packets to be transmitted through a network. The Data Link Layer works as the transmission protocol by supporting error handling in the Physical Layer and corruption (through check summing). Additionally it is also known that the Data Link Layer is divided into two sublayers; these are known as the Media Access Control (MAC) Layer and the Logical Link Control Layer. The MAC sublayer controls the flow of how a computer sends data across a network and how the network will receive it. Apart from this, it also gives permission to transmit data. The Logical Link Control Layer controls frame synchronization and flow control.



OSI Protocol Stack


7

6

5

4

3

1

Application Layer

Presentation Layer

Session Layer

Transport Layer

Physical Layer


OSI Protocol Stack


(Layer 3)Switch

IP Static Routes






Power over Ethernet

HP ProCurve Switch 2650-PWR (J8165A)

HP ProCurve Switch 2626-PWR (J8164A)

HP ProCurve Switch 4140gl (J8151A)



HP ProCurve Switch 4108gl bundle (J4861A)



Layer 2/3 Managed Stackables

Layer 2/3 Managed Chassis

Network Layer

Many HP ProCurve switches support Layer 3 forwarding via static routers. They do not run dynamic routing protocols, but they do route packets. This IP packet forwarding, while not supporting a dynamic routing protocol, is sometimes referred to as Layer 3 “light.”



OSI Protocol Stack


7

6

5

4

1

Application Layer

Presentation Layer

Session Layer

Transport Layer

3 Network Layer

Physical Layer


OSI Protocol Stack


(Layer 3)Switch

IP Protocol(Layer 3)Switch

Traditional Routing

HP ProCurve Switch 5348xl (J4849A)




Layer 2/3 Managed Chassis

HP ProCurve Routing Switch 9315m (J4874A)



Layer 2/3/4 Managed Chassis

The Network Layer is where the Internet Protocol (IP) lives.

IP is a much more robust and sophisticated communication protocol than Ethernet and is used to connect user groups and the core network.

Network Layer devices such as routers and Layer 3 switches make intelligent routing decisions for client/server traffic.

Routers and Layer 3 switches are used to connect several networks and make decisions on what traffic should be routed to Network A versus Network B versus Network C, and so on.

Typically, the only thing differentiating routers from Layer 3 switches is whether or not the routing technology has been implemented in silicon versus software.

In other words, switches can be thought of as routers that have been implemented in silicon.

The Network Layer is used for routing data across configured network nodes. This layer uses many technologies, known as switching and routing, to enable the data to be transmitted. These technologies create logical paths (known as virtual circuits) for transmitting data across a network from a node-to-node transmission. Additionally, other functions of this layer include addressing, error handling, congestion control, and, finally, packet sequencing.



HP ProCurve product families


HP ProCurve product families

• 4000 class (4000 & 8000)• Modular• L2

• 2500 class• Fixed• L2

• 2600 class (2600, 2800, 4100gl, 6108)• Fixed and modular• L2 and L3 light

• 5300xl class• Modular• L2 and L3

• 9300 series• Modular• L2 and L3 (and L4)

Here we’ve classified the HP ProCurve devices according to their forwarding capabilities. We also could have classed them according to speeds and feeds, performance, modularity, and so on.

The HP ProCurve product line has several classes of switches with different feature sets. The five types of manageable switches can be loosely classified as Layer 2 switches and Layer 3 switches. Layer 2 switches make forwarding decisions based on the destination MAC addresses of the frames they receive. The 2500 series switches have either 12 or 24 10/100 ports with two transceiver slots that support several flavors of Gigabit Ethernet. These fixed-configuration switches support wire speed throughput (6.55 million pps) with a 9.6Gbps “switch on a chip.” Unmanaged versions of both 12- and 24-port switches are available as HP ProCurve 2312 and 2324 switches. There are also 10/100/1000 unmanaged 24/8-port HP ProCurve 2724 and 2708 switches.

The feature set of the HP ProCurve Switch 4100gl series is similar to that of the 2500 series switches, with some enhancements. It is a modular switch with 4 or 8 slots and support for a wide variety of connectivity modules. The HP ProCurve 2650 has 48-port 10/100 with two 10/100/1000 including optional fiber slots managed, making it the highest port density per 1U rack height in the industry.



Other modular Layer 2 switches in the Layer 2-only category are the HP ProCurve 4000m and 8000m. They have been a part of the HP ProCurve product line for many years and have a different feature set than the other Layer 2 switches.

The product line supports four separate modular switches with different feature sets. All of the modular switches support high-availability features such as link aggregation and the spanning tree protocol, as well as optional redundant power supplies

HP ProCurve switches in the second category are called Layer 3 switches because they can forward traffic using Layer 2 or Layer 3 information. The HP ProCurve 6108 is a stackable, multi-layer, managed 8-port switch with 6 autosensing 10/100/1000 ports and 2 dual-personality ports for 10/100/1000 or mini-GBIC connectivity along with Layer 3 VLAN static routing. The HP ProCurve Switch 5300xl series is a modular, wire-speed, chassis-based Layer 3 switch with either 4 or 8 slots, each of which can support 24 10/100 ports or 4 gigabit ports. It can forward IP traffic between directly connected VLANs using Layer 3 information and also exchange route information with other IPs. Its IP forwarding capabilities make it ideally suited for use as a distribution layer device.

The HP ProCurve 9300 series routing switch is a 4-, 8-, or 15-slot modular, wire-speed, chassis-based Layer 3 switch. Each slot can support either 24 10/100 ports or 8 gigabit ports to two 10 gigabit ports.



HP ProCurve switch family positioning


HP ProCurve switch family positioning

Modular:9300 seriesModular:

5300xl series

Modular:4000/8000Stackable:2500 series

Distribution

Edge

Core

Modular:4100gl seriesStackable:2600 series2800 series6108

The HP ProCurve switch product line includes devices suitable for deployment at all layers of the contemporary network. Furthermore, as this diagram illustrates, some switch families can properly be deployed in more than one layer, depending on the needs of the particular network.

Possible deployments for switch families shown in the diagram are:

The 2500 and 4000/8000 switches provide basic connectivity and are appropriate only for edge deployment.

The 2600, 2800, 4100gl, and 6108 switches include Layer 2 and Layer 3 capabilities that make them suitable for edge or distribution deployment. The 2800 and 4100gl series switches support many gigabit ports that may make them useful for aggregation of lower-speed links provided by 2500 or 2600 series switches at the edge, or they may be edge switches themselves. The 6108 unit features only eight gigabit ports, but it can be deployed in the distribution layer as an aggregation point for slower-speed edge devices.



The 5300xl is perhaps the most versatile of all switches and can be deployed in any network layer. Throughout this course, we will discuss the 5300 unit’s many sophisticated features that make it suitable for the edge. Because it supports a wide variety of interface types, the 5300 device is also suitable for distribution deployment, where it can serve as an aggregation point for slower devices. Finally, the 5300 switch’s support for full IP routing—including Routing Information Protocol (RIP) and Open Shortest Path First (OSPF) dynamic routing—makes it a suitable choice for core deployment.

The 9300 series is best deployed as a core switch.



HP ProCurve accessories and features


HP ProCurve accessories and features

• There are several components that many HP ProCurveswitches have in common, including:– LEDs– Mode selectors– Clear and Reset buttons– Connectors– Hot-swap capabilities– Load-sharing power supplies– In-band and out-of-band management access

The HP ProCurve families of switches have many things in common:

Switch LEDs provide indications of proper switch operation:

Each switch port has a Link LED that should light whenever an active network device is connected to the port.

•

• Problems with the switch hardware and software are indicated by flashing the Fault and other switch LEDs.

The type of information conveyed by the port LED is controlled by the LED Mode Select button on the switch.

Reset and Clear buttons can be used to reset the switch or to remove the password protection.

All modular HP ProCurve switches have module “hot-swap” capabilities and load-sharing power supplies.

Most switches have a common CLI interface, menu interface, and Web browser interface.



HP ProCurve accessories: module, transceivers, mini-GBICs


HP ProCurve accessories: module, transceivers, mini-GBICs

XGigabit-LX

XGigabit-SX

X

X

X

X

6100

X10 Gigabit

XXPoE

X10-FL

Xmodule

Xmodule

Xmodule

X

X

X

X

9300

X

X

X

X

X

X

X

X

5300

XXXGigabit-SX

41002800260025004000Modules

XXXGigabit-LX

XXXGigabit-LH

Mini-GBICs

XXGigabit Stacking

XXGigabit-SX

XXGigabit-LX

X100/1000-T

X100-FX

Transceivers

XMini-GBIC

XXX100/1000-T

XXX100-FX

XXXX10/100-TX

XXX10/100/1000

HP ProCurve switches support a comprehensive set of “speeds and feeds.” The most common interface on today’s switches and routers is the RJ-45. It supports UTP cable (cat 3,4,5,5e,6) and data rates from 10 to 1000Mbps (maximum distance is 100m).

Another common interface is the MTRJ. It is a multi-mode fiber connect with the same form factor as the RJ-45. It supports a 100mps data rate up to a distance of 2km.

Gigabit-SX: Uses SC connectors and support multimode fiber - maximum distance is 500m.

Gigabit-LX: Uses SC connectors and support multimode and single mode fiber - maximum distance: 10 km (single mode) or 550m (multimode).

The Gigabit Stacking Kit is used with stackable devices. The connector is an HP proprietary connector.

The 10 GbE port is based on XENPAK optics. It uses an SC connector.



The mini-GBICs provide great flexibility and port density. They use LC Connectors:

SX (short wavelength) – Uses multimode fiber – maximum distance is 550m

LX (long wavelength) – Maximum distance: 10 km (single mode) or 550m (multimode)

LH (long haul) - Maximum distance: 70 km



Connectors


Connectors

RJ-45

All copper ports support RJ-45 connectors. The connector type describes the port pin assignments. For fiber optic ports there are several port connectors. The connector type describes the attachment port. Usually the LC connectors attach to mini-GBICs. They provide the smallest footprint and thus the greatest port density. The MTRJ connector is the same size as the RJ-45 but internally it has a send and a transmit fiber.



Copper cabling system


Copper cabling system

• TIA/EIA-568-A defines a performance rating system for UTP cable and connecting hardware:– Category 3 performance is defined up to 16MHz– Category 4 performance is defined up to 20MHz– Category 5 performance is defined up to 100MHz– Category 6 performance is defined up to 200MHz

• Impedance and structural return loss• Attenuation• Propagation delay

In 1991, the Electronic Industries Association published standard EIA-568, “Commercial Building Telecommunications Cabling Standard,” which specified the use of voice-grade unshielded twisted pair as well as shielded twisted pair for in-building data applications. At that time, the specification was felt to be adequate for the range of frequencies and data rates found in office environments. Up to that time, the principal interest for LAN designs was in the range of data rates from 1Mbps to 16Mbps. Subsequently, as users migrated to higher-performance workstations and applications, there was increasing interest in providing LANs that could operate up to 100Mbps over inexpensive cable. In response to this need, EIA-568-A was issued in 1995. The new standard reflects advances in cable and connector design and test methods. It covers 150-ohm shielded twisted pair and 100-ohm unshielded twisted pair.

EIA-568-A recognizes three categories of UTP cabling:

Category 3: UTP cables and associated connecting hardware whose transmission characteristics are specified up to 16MHz.





Of these, Category 3 and Category 5 cable have received the most attention for LAN applications. Category 3 corresponds to the voice-grade cable found in abundance in most office buildings. Over limited distances, and with proper design, data rates of up to 16Mbps should be achievable with Category 3. Category 5 is a data-grade cable that is becoming increasingly common for preinstallation in new office buildings. Over limited distances, and with proper design, data rates of up to 100Mbps should be achievable with Category 5.

A key difference between Category 3 and Category 5 cable is the number of twists in the cable per unit distance. Category 5 is much more tightly twisted, typically 3 to 4 twists per inch compared to 3 to 4 twists per foot for Category 3. The tighter twisting is more expensive but provides much better performance than Category 3.

EIA-568-A specifies the expected performance of Category 3 and 5 UTP, as well as the more expensive shielded twisted pair STP. The first parameter used for comparison, attenuation, is fairly straightforward. The strength of a signal falls off with distance over any transmission medium. For copper wire media, attenuation is generally logarithmic and therefore is typically expressed as a constant number of decibels per unit distance. Attenuation introduces three considerations for the designer:

First, a received signal must have sufficient magnitude so that the electronic circuitry in the receiver can detect and interpret the signal.

Second, the signal must maintain a level sufficiently higher than noise to be received without error.

Third, attenuation is an increasing function of frequency.

Near-end crosstalk, as applied to twisted-pair wiring systems, is the coupling of the signal from one pair of conductors to another pair. These conductors may be the metal pins in a connector or wire pairs in a cable. The term near end refers to coupling that takes place when the transmit signal entering the link couples back to the receive conductor pair at that same end of the link; that is, the near transmitted signal is picked up by the near receive pair.

Enhanced Category 5 and Category 6 specify cable performance characteristics to higher levels.



Cable specifications for full-duplex Ethernet


Cable specifications for full-duplex Ethernet

Interface type Cable supported Maximum distance

1000Base-LX

1000Base-SX

1000Base-SX

100/1000B ase-T

Single-mode (9 micron)

Multimode (62.5 micron)

Multimode (50 micron)

Category 5 UTP

10 kilometers

220 meters

500 meters

100 meters

1000Base-LX Multimode (62.5 or 50 micron) 550 meters

100Base-FX Multimode (62.5 or 50 micron) 2 kilometers

Gigabit-L H Single-mode (9 micron) 70 kilometers

10GBase-SR 300 meters

10G-XNPK-ER 40 kilometersSingle-mode (9 micron)

10G-XNPK-LR 10 kilometersSingle-mode (9 micron)

Multimode (62.5 or 50 micron)

When the IEEE set out to define the specifications for transmission of Ethernet frames at 1Gbps, they saw the need to allow it to work over a variety of media. The approved cable types and their maximum distances are shown in this diagram. All of these distances assume point-to-point links between two switches, or a switch and an end station.

An important goal for Gigabit Ethernet is to provide backward compatibility with existing standards for 10Base-T, 100Base-TX, and 100Base-FX.

While the 10Base-T standard allows for voice grade unshielded twisted pair cabling (Category 3 UTP), 100Base-T requires data grade cable known as Category 5 UTP. To support 1000Base-T (known as IEEE 802.3ab), the Category 5 UTP standard has been enhanced to impose some additional restrictions. When using 1000Base-T over existing wiring, you must verify that the cabling complies with Category 5E (addendum 5 to the TIA-568-A standard, which is also known as ANSI/TIA/EIA-568-A-5). Many existing Category 5 installations are suitable for gigabit over copper, but because signals are sent over all four pairs, the cabling system must adhere to using all four pairs and should be tested for attenuation, near-end crosstalk (NEXT), and far-end crosstalk (FEXT).

1000Base-T can easily be used when the distance between switches is short. For example, it may be used for several switches in the same room or for short distances between a switch and servers with gigabit network adapters. 1000Base-T can also be used over distances up to 100 meters between floors or wiring closets.



Fiber optic cable is available in single mode and multimode. One difference between them is in the diameter of the glass channel down the center of the cable (also known as the “core”). Another difference is in the way that signals are transmitted through the core.

In single mode fiber, a laser generates a single signal that travels straight down the center of the channel in what is called a “coaxial” mode. The signal is constrained in a very narrow (9-micron diameter) core and is carried over very long distances. The 1000Base-LX standard specifies up to 5 kilometers, but single mode fiber is capable of carrying a signal up to 70 kilometers using long-haul transceivers known as Gigabit-LH.

In multimode fiber, the transmitter generates multiple light signals that are reflected off the internal walls of the cable. The variance in propagation of the signals translates into a shorter distance before attenuation makes the signal indistinguishable. In general, a smaller diameter constrains the signal more than a larger diameter; 50-micron multimode fiber allows a distance up to 500 meters, while 62.5-micron fiber supports a distance up to 220 meters.

The 100Base-FX standard specifies multimode fiber at a maximum supported distance of 2 kilometers. So, while the media may be compatible for an upgrade from 100Base-FX to 1000Base-SX or LX, you should always verify the distance. Gigabit Ethernet requires single mode cable for distances over 550 meters.

At times you may need to use multimode fiber at distances exceeding 550 meters. In this situation you may need to consider how many available strands of fiber there are currently installed and determine whether traffic could be carried over multiple links.

Although 100Base-FX transceivers use LEDs to generate light signals, both 1000Base-LX and 1000Base-SX transceivers use lasers due to Gigabit Ethernet’s high data rate. However, the properties of laser-generated signals make it better suited to single mode fiber; multiple light rays generated by a laser (over multimode fiber) will interfere with each other, severely limiting the maximum distance.

It should be noted that, with the exception of Gigabit-LH, these are standards- driven specifications. Recent developments in technologies have allowed for greater distances in the gigabit fiber technologies. Much of this is dependent upon the quality of the fiber used in the installation. Many vendors now claim greater distances than previously stated when the standards were finalized. In some situations HP now supports 10 km on single-mode fiber for Gigabit Ethernet.

XENPAK describes a fiber-optic transceiver module that conforms to the 10 Gigabit Ethernet (10 GbE) standard as laid down by the IEEE 802.3ae. A standard for 10 GbE transceivers is essential to provide a focal point for the industry to allow development of 10 GbE products and thus enable 10 GbE technology adoption and proliferation.



Points to ponder…


Points to ponder…

The interface-connector-cablecombination can have a significant impact on the performance of the network. Be careful and note that a particular type of connector does not ensure a particular type of cable. An LC could be connecting either multimode or single mode. Themini-GBICs look the same. Readthe label!Also, over-subscription of the uplinks may cause performance degradation at times of heavy network activity. There are tools and mechanisms to measure the distances and levels of over-subscription.

While there are many tools, mechanisms, and utilities for network and cable troubleshooting, they are beyond the scope of this course.



HP ProCurve switch portfolio


HP ProCurve switch portfolio

4100 series – 4- or 8-slot chassis with support for 10/100, 100-FX, 10/100/1000, and fiber Gigabit modules

5300xl series – 4- or 8-slot chassis with support for 10/100, 100-FX, 10/100/1000, and fiber Gigabit modules

2500 series – 12 or 24 10/100 port stackable w/ 2 Gig ports (2300 series unmanaged version available)

feat

ures

performance

4000m/8000m – 40 port or 10 slot chassis supports 8-port 10/100, 4-port 100-FX, and 1-port Gigabit modules

2600 series – 24 or 48 10/100 port stackable with 2 UTP or fiber Gigabit ports (2700 series unmanaged version available)

6108 – 8 10/100/1000 port stackable, of which 2 ports may be replaced with mini-GBICs

2800 series – 24 or 48 10/100/1000 port stackable, of which 4 ports may be replaced with mini-GBICs

9300m series – 4-, 8-, or 15-slot chassis with support for 10/100, 100-FX, and fiber Gigabit modules

Full Layer 3 support

Layer 2/basic IP routing

Layer 2 only

While networking vendors often recognize the benefits of bringing intelligence to the edge, they usually have not developed devices specifically for this purpose.

Instead, they recommend the deployment of high-end “core” devices at the network’s edge. In most cases, these products are more costly and complex than devices designed specifically for edge deployment.

By contrast, HP ProCurve Networking offers several families of switches designed specifically for edge deployments. Other members of the HP ProCurve product line can be used as core or edge switches, depending on the size and complexity of the customer’s network and on other specialized needs or requirements.

When they deploy HP ProCurve solutions, customers pay only for the features they need and are not burdened with the cost and configuration of features they never use. Customers can implement solutions with just enough functionality to meet their current needs or they can “future-proof” their investments by purchasing features they expect to require later.

The HP ProCurve line offers several families of stackable and modular chassis switches with feature sets suitable for different roles in edge-centric networks. The stackable switches include:

Two families of stackable 10/100 switches with support for 12, 24, or 48 ports. Each switch in these families also supports two fiber or copper gigabit uplinks.

A family of stackable 10/100/1000 switches with 24 or 48 ports and support for fiber gigabit.



The chassis switches support 10/100, 100-FX, 10/100/1000, and mini-GBIC (gigabit interface converter) modules, enabling support for SX, LX, and LH connectivity. These switches also support redundant power supplies. To help you choose the solution that is best for your environment, the next few slides will examine the “speeds and feeds” for each switch.



HP ProCurve switch management


HP ProCurve switch management

9300

5300

4100

4000

2800

2600

2500

Boot monitorWeb browserMenuCLISwitch

Usually the CLI is the most comprehensive management interface. With the 4000 series the menu interface is the most powerful. For most switches the Web browser interface is limited in functionality; however, for the 9300 series the Web browser interface offers that functionality as the 9300 series CLI. Only the 9300 series supports the boot monitor. The boot monitor provides primitive functionality, such as booting from factory defaults.

In the table shown here, the larger checkmarks show the preferred or fully functional management interface for the device.



HP ProCurve feature: hot swap (4000 series, 4100gl, 5300xl series, 9300 series)


All HP ProCurve modular switches support ‘live’ module insertion• Adding modules – hot insert

– A like module can be added with no disruption to switch operation• Replacing modules – hot swap

– A like module can be replaced with no disruption to switch operation• Changing the module type

– If you exchange a module with one of a different type, the switch must be rebooted after the new module is installed

– Note: A module revision, i.e. J4115A versus J4115B, would not be hot-swappable because these are considered different modules

– 9300m routing switches can be manually configured for modules of different types to become active without a reboot

• “Hot swap mini-GBICs” – You can add, replace, or change the type of any of the mini-GBICs without

having to first remove the module, and without having to shut down the switch – but you should disconnect cable first

• Transceivers are typically not hot-swap

HP ProCurve feature: hot swap4000 series, 4100gl, 5300xl series, 9300 series

If a module has to be replaced with one of the same type, or you are expanding the switch capability by adding a module in a slot where one was not previously installed, the replaced or new module is immediately operational; there is no interruption to the switch operation.

If you exchange a module with one of a different type, though—for example, a Gigabit-SX module is installed in place of a 100Base-FX module that was in the slot—the switch must be rebooted after the new module is installed so the switch processor can properly initialize and configure the new module type.

Until the switch is rebooted, the module will not operate, the Module Status LED will continue to flash, and all the LEDs on the module will stay on continuously.



HP ProCurve accessories: mode selector (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108)


HP ProCurve accessories: mode selector2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108

• On most HP ProCurve switches the operation of the portmode LED is controlled by the Mode Select button

• If the Activity (Act) indicator LED is lit, each port mode LED displays activity information for the port—it flickers as network traffic is received and transmitted through the port

• If the Full Duplex (FDx) indicator LED is lit, the port mode LEDs light up for those ports that are operating in full duplex

• If the 100Mbps (Max) indicator LED is lit, the port mode LEDs light up for those ports that are operating at 100Mbps

• If the ! Indicator is lit, each mode LED lights up briefly for each network event that could require operator attention

When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test, as described in the manual for your switch.

Verify proper operation by observing the LEDs. Make sure the LED on each power supply is a solid green. Also make sure that some of the port LEDs on each module momentarily light up. The LEDs indicate that the device is performing diagnostics. After the diagnostics are complete, the LEDs will be dark except for the ones that are attached by cables to other devices. If the links on these cables are good and the connected device is powered on, the link LEDs will light.



HP ProCurve Switch 2500 Series



HP ProCurve Switch 2512• 12 10/100 ports (RJ-45)• 2 gigabit transceiver slots• 9.6Gbps switch on a chip for

non-blocking performance

HP ProCurve Switch 2524• 24 10/100 ports (RJ-45)• 2 gigabit transceiver slots• 9.6Gbps switch on a chip for

non-blocking performance

The HP ProCurve Switch 2500 Series provides a low-cost solution for access layer connectivity. These non-blocking, high-performance switches are available in two basic models:

HP ProCurve Switch 2512 (J4812A), featuring 12 10/100 ports and two gigabit transceiver slots

HP ProCurve Switch 2524 (J4813A), featuring 24 10/100 ports and two gigabit transceiver slots

Each 10/100 port is equipped with HP auto-MDIX, which means crossover cables are not required to interconnect switches when their ports are left at default settings.

Both 2500 switches also offer a full line of management capabilities, enhancing customers’ ability to command from the center. However, for simpler deployments, both switches are available in unmanaged versions known as the 2300 series.



HP ProCurve 2600 class switch



HP ProCurve Switch 2626• 24 10/100 ports (RJ-45)• 2 “dual personality” ports:

10/100/1000 RJ-45 or mini-GBIC slot for a fiber transceiver

• 9.6Gbps backplane

HP ProCurve Switch 2650• 48 10/100 ports (RJ-45)• 2 “dual personality” ports• 13.6Gbps backplane

The HP ProCurve Switch 2600 Series provides a low-cost solution for access layer connectivity. This non-blocking, high-performance switch comes in two basic models:

HP ProCurve Switch 2626 (J4900A), featuring 24 10/100 ports and two “dual-personality” ports, which means they can support fiber or copper connectivity. A version that supports Power over Ethernet (PoE) also is available as the HP ProCurve Switch 2626-PWR (J8164A).

HP ProCurve Switch 2650 (J4899A), featuring 48 10/100 ports and two “dual-personality” ports. A PoE-compliant version is available as the HP ProCurve Switch 2650-PWR (J8165A).

Unmanaged versions of the switches are available as the HP ProCurve Switch 2700 Series.

The HP ProCurve Switch 2600 also offers IP routing capabilities that make it an excellent choice for bringing network intelligence to the edge. Switches in the 2600 series can forward IP traffic between VLANs and can use static IP routes.






The HP ProCurve Switch 2600-PWR Series can be connected to an HP ProCurve 600 Redundant and External Power Supply (J8168A).



Back of HP ProCurve Switch 2600 Series


Back of HP ProCurve Switch 2600 Series

The HP ProCurve Switch 2600 Series devices do not have a power switch. They are powered on when the power cord is connected to the switch and to a power source. For safety, the power outlet should be located near the switch installation.

Redundant power if the primary power supply fails

External power to provide more power to the PoE ports



HP ProCurve 600 Redundant and External Power Supply


HP ProCurve 600 Redundant and External Power SupplyHP ProCurve 600 Redundant and External Power Supply (J8168A)• Provides redundant power for one of six switches connected to redundant power

supply ports• Supplies external power for HP ProCurve IEEE 802.3af Power over Ethernet

compatible devices such as HP ProCurve 2626-PWR, 2650-PWR, and 5300xl series switches

Redundant External

HP ProCurve 2800 series switches

HP ProCurve 600 RPS/EPS

Power-over-Ethernet (PoE power)—Power over Ethernet technology allows IP telephones, wireless LAN access points, and other appliances to receive power as well as data over existing LAN cabling, without the need to modify the existing Ethernet infrastructure. The new Switch 2600-PWR series is designed with an internal PoE power supply that will supply 370 watts across the ports of the switch, at up to 15.4 watts per port.

Redundant and External Power Supply Support—The Switch 2600-PWR series can be connected to an HP ProCurve 600 Redundant and External Power Supply (J8168A), hereafter referred to as the HP 600 RPS/EPS, and receive redundant power from that unit. As an RPS unit, the HP 600 RPS/EPS will provide all the AC power necessary to keep the switch running should the switch internal AC power supply fail. As an EPS unit, the HP 600 RPS/EPS can supply up to 368 watts of PoE power to the switch if the internal PoE power supply of the switch should fail. When used with the Switch 2650-PWR, the additional EPS power can provide up to 15.4 watts per port for 48 ports.



HP ProCurve Switch 6108


HP ProCurve Switch 6108

HP ProCurve Switch 6108• Six 10/100-TX/1000-T ports (RJ-45)

Two “dual personality” ports: 10/100/1000 RJ-45 port or mini-GBIC slot

• 16Gbps backplane

The HP ProCurve Switch 6108 (J4902A) is a low-cost, stackable 8-port switch with 6 auto-sensing 10/100/1000 ports and 2 dual-personality ports for 10/100/1000 or mini-GBIC connectivity. This switch is ideal for access tier aggregation with two optional gigabit fiber uplinks to connect at distances of up to 70km.

The 6108 unit supports the same Layer 3 features as the 4100gl and 2600 series switches, including support for static IP routes and forwarding between VLANs.

The mini-GBICs available for the 6108 unit are:

HP ProCurve Gigabit-SX-LC mini-GBIC (J4858A)

HP ProCurve Gigabit-LX-LC mini-GBIC (J4859A)

HP ProCurve Gigabit-LH-LC mini-GBIC (J4860A)






HP ProCurve Switch 2824• 20 10/100-TX/1000-T ports

(RJ-45) • Four “dual personality” ports:

10/100/1000 (RJ-45) or mini-GBIC

• 48Gbps backplane

HP ProCurve Switch 2848• 44 10/100-TX/1000-T ports

(RJ-45)• Four “dual personality” ports• 96Gbps backplane

The HP ProCurve Switch 2800 Series maximizes LAN performance with its ability to maintain and manage bandwidth-intensive applications running at optimum capabilities.

It handles complex applications such as digital imaging, graphic-intensive applications, media streaming requiring gigabit performance to the edge of the network where users connect and productivity requirements happen.

The HP ProCurve Switch 2800 Series includes switches that offer the highest 1000Base-T port density available in a stackable device. The two basic models are:



The 2800 series supports the same Layer 3 features as the 4100gl and 2600 series switches, including support for static IP routes and forwarding between VLANs.



HP ProCurve redundant power supplies (4000 series, 4100gl, 5300xl series, 9300 series)


HP ProCurve redundant power supplies4000 series, 4100gl, 5300xl series, 9300 series

All HP ProCurve modular switches support optional redundant, load-sharing power supplies

Pictured here is a second, load-sharing redundant power supply (HP ProCurve Switch 4000m/8000m Power Supply, J4119A). It would be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source than the other supply. Then, if one AC power source fails, the switch will continue to run.

Caution The switch power supplies are hot-swappable, but the power supply must be disconnected from AC power before being installed or removed.



HP ProCurve Switch 4000m/8000m


HP ProCurve Switch 4000m/8000m

HP ProCurve Switch 4000m/8000m• 10-slot chassis• Switch 4000m includes 40 auto-

sensing 10/100 ports and 5 open module slots

• Note: As of December 1999 the 4000m and 8000m switches were made functionally equivalent

The HP ProCurve Switch 4000m and 8000m are Layer 2, managed modular 10/100/1000 desktop switches that provide scalable, expandable, low-cost migration to 10/100 switching for the desktop with gigabit uplinks.

HP ProCurve Switch 4000m (J4121A) comes bundled with 5 - 8 port 10/100Base-TX auto-sensing ports installed and 5 open module slots.

HP ProCurve Switch 8000m (J4110A) comes with 10 open slots.

The 4000 series devices have hot-swappable modules and support optional redundant load-sharing power supplies.



Switch 4000m/8000m – front


Switch 4000m/8000m - front

Front of the switch

Power andFault LEDs

Console portReset and Clear buttons

System Fail andSelf-Test LEDs

Mode Selectorbuttons and LEDs

Status LEDs for switchmodules, fans, andpower supplies

Link and Mode LEDs for each slot

Switch Engine Module



Switch 4000m/8000m – modules


Switch 4000m/8000m - modules

• 10 slots for installing any of the available switch modules:

ST4-port 10Base-FL (J4118A)

RJ-451-port 100/1000Base-T (4115B)

SC1-port Gigabit-LX (J4114A)

SC1-port Gigabit-SX (J4113A)

SC4-port 100Base-FX (J4112A)*

RJ-458-port 10/100Base-T (J4111A)

ConnectorModule

* A redundant power supply is required if more than five 100-FX modules installed

The 4000 series switches support a flexible array of interfaces enabling the switch to provide excellent port density, gigabit uplinks for aggregation, and fiber connects where reach is needed.



HP ProCurve Switch 4100gl Series


HP ProCurve Switch 4100gl Series

HP ProCurve Switch 4140gl• 40 10/100-TX/1000-T ports • 4 mini-GBIC transceiver slots

HP ProCurve Switch 4160gl• 60 10/100-TX/1000-T ports • 6 mini-GBIC transceiver slots

Empty slots may contain additional 10/100/1000 modules or any combination of HP ProCurve Switch gl modules

The 4100gl switches provide reliable, high-performance, high-density 10Mbit, 100Mbit, or gigabit connectivity for a growing network. The Switch 4100gl series is the low-cost, modular alternative to stackable switches.

The HP ProCurve Switch 4100gl series offers an excellent solution for bringing high-density gigabit connectivity to the edge. For the highest concentration of gigabit edge ports in a modular switch, the HP ProCurve Switch 4100gl series switches are available in modes that ship with two or three 20-port, 10/100/1000 modules. These models are:

HP ProCurve Switch 4140gl (J8151A), which ships with 40 10/100 ports and 4 mini-GBIC transceiver slots

HP ProCurve Switch 4160gl (J8152A), which ships with 60 10/100 ports and 6 mini-GBIC transceiver slots



HP ProCurve Switch 4100gl Series: modules/transceivers/GBICs


HP ProCurve Switch 4100gl Series:modules/transceivers/GBICs

• 4 or 8 slots for installing any of the available switch components:

3 slot Transceiver (J4864A)

LCGigabit-SX (J4858A)LCGigabit-LX (J4859A)LCGigabit-LH (J4860A)

Stacking Kit (J4116A)SCGigabit-SX (4131B)SCGigabit-LX (J4132A)RJ-45100/1000-T (J4834A)SC100-FX (J4853A)

6-slot mini-GBIC (J4893A)RJ-456-port 100/1000-T (J4863A)MTJR12-port 100-FX (J4892A)RJ-4524-port 10/100-TX (J4862B)

RJ-45LC

24-port 10/100/1000Plus 2 mini-GBIC slots (J4908A)

ConnectorModule/transceiver/GBIC

Module

Transceiver

Mini-GBIC



HP ProCurve Switch 5300xl Series



HP ProCurve Switch 5308xl• 8-slot chassis may contain any of

the following modules:– 24-port 10/100-TX– 4-port 100-TX/1000-T– 4-port mini-GBIC module

supports standard transceivers– 12-port 100-FX with MTRJ

connectors

HP ProCurve Switch 5304xl• 4-slot chassis – support same

modules

The HP ProCurve Switch 5300xl Series includes modular 4- and 8-slot switches that support a flexible array of connectivity modules. The series offers models with populated or unpopulated slots.

The unpopulated models are:

The HP ProCurve Switch 5304xl (J4850A), which offers four empty slots

The HP ProCurve Switch 5308xl (J4819A), which offers eight empty slots

The populated models are:

The HP ProCurve Switch 5348xl (J4849A), which ships with two 24-port 10/100 modules installed in the 4-slot (5304xl) chassis

The HP ProCurve Switch 5372xl (J4848A), which ships with three 24-port 10/100 modules installed in the 8-slot (5308xl) chassis



HP ProCurve Switch 5300xl Series: modules/transceivers/GBICs


HP ProCurve Switch 5300xl Series:modules/transceivers/GBICs

• 4 or 8 slots for installing any of the available switch components:

MTRJ12-port 100-FX (J4852A)

RJ-4516-port 10/100/1000

LCGigabit-SX (J4858A)

LCGigabit-LX (J4859A)

LCGigabit-LH (J4860A)

PoE (J8161A)

4-slot Mini-GBIC (J4878A)

RJ-454-port 100/1000-T (J4821A)

RJ-4524-port 10/100-TX (J4820B)

ConnectorModule/transceiver/GBIC

Module

Mini-GBIC



Port and slot numbering (2500, 2600, 4000 series, 4100gl series, 5300xl series, 6108)


Port and slot numbering2500, 2600, 4000 series, 4100gl series, 5300xl series, 6108

2412

61 13

725 26

12

61

713 14

1

24

1

24

1 2 3A B

C D

10/100Base-TX ports Transceiver slots

Switch 2524: P orts 1-24 are 10/100; ports 25 and 26 are 1000Base-SX

Switch 2512: P orts 1-12 are 10/100; ports 13 and 14 are 1000Base-SX

12

61 13

7 24

1

24A B

C D

Switch 5304xl: P orts A1-A24 and B1-B24 are 10/100 ports ;ports C1-C4 are 100-TX /1000-T ports ; ports D1-D2 are 1000Base-SX mini-GBICs

1 2 3 4 5 6

1 2 3 41 2 3 4

Switch 4104gl: P orts A1 and A2 are 1000Base-SX; ports B1-B6 are 100-TX /1000-T ; portsC1-24 and D1-24 are 10/100



HP ProCurve accessories: Reset and Clear buttons (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108)


HP ProCurve accessories: Reset and Clear buttons2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108

Most ProCurve switches have Reset and Clear buttons– Reset button

• Resets the switch – “warm reboot”• Clears any temporary error conditions that may have occurred• Executes the switch self-test and resets all network activity

counters to zero– Clear button

• Clears passwordWhen pressed by itself for at least one second, deletes any switch console access passwords that you may have configured

• Restores factory defaultsWhen pressed with the Reset button in a specific pattern, clears any configuration changes you may have made

The Reset button is used to reset the switch while it is powered on. This action clears any temporary error conditions that may have occurred, executes the switch self-test, and resets all network activity counters to zero.

The Clear button is used for these purposes:

Deleting passwords – When pressed by itself for at least one second, deletes any switch console access passwords that you may have configured.

Use this feature if you have misplaced the password and need console access.

Restoring factory default configuration – When pressed with the Reset button in a specific pattern, clears any configuration changes you may have made through the switch console, the web browser interface, and SNMP management, and restores the factory default configuration to the switch.



Using Clear and Reset to erase the startup config (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108)


Using Clear and Reset to erase the startup config2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108

If manager password is unknown:1. Simultaneously press the Reset

and Clear buttons2. Continue to press the Clear

button while releasing the Resetbutton

3. When the Self Test LED begins to flash, release the Clear buttonThis procedure requires physical access to the switch

If manager password is known:• Access manager level and enter

this command:Edge_1# erase startup-config

21

Perform Factory Reset

Flashing LED3

Administrators can erase the current startup configuration of an HP ProCurve switch by accessing buttons on the front panel or by issuing a command at the CLI.

If the manager password is known, administrators can erase the configuration by accessing the manager level and issuing the command erase startup-config. Users who issue this command will receive a prompt asking them to confirm that they want to delete the startup configuration. This command will not erase or reset the password. To perform this function, see the previous page.

If the password has been lost, you can erase the startup configuration by simultaneously pressing the Reset and Clear buttons, as shown above. This operation resets the switch to its factory default settings. This includes resetting all user-defined passwords.

The precautions described during the discussion of removing passwords apply to this operation as well. They are:

Using non-conducting instruments to access the buttons

Housing the device in a secure location so that unauthorized users cannot use this procedure to disrupt switch operation



HP ProCurve Routing Switch 9300m Series


HP ProCurve Routing Switch 9300m Series

8 open module slots• Up to 120 Gigabit Ethernet ports• Up to 336 auto-sensing 10/100-TX ports• Up to fourteen 10-Gigabit Ethernet ports

15 open module slots• Up to 232 Gigabit Ethernet ports• Up to 672 auto-sensing 10/100-TX ports• Up to twenty-eight 10-Gigabit Ethernet ports

4 open module slots• Up to 56 Gigabit Ethernet ports• Up to 144 auto-sensing 10/100-TX ports• Up to six 10-Gigabit Ethernet ports

9315m (J4874A)

9308m (J4138A)

9304m (J4139A)

The HP ProCurve Routing Switch 9300m Series routing switch is a modular, wire-speed, chassis-based Layer 3 switch. As such, it offers a high-performance solution for core routing and switching. The 9300m series is available in three models that enable a high degree of scalability and the ability to future-proof almost any enterprise network:

HP ProCurve Routing Switch 9304m (J4139A), which includes four open module slots that can accommodate six 10-gigabit ports, 56 Gigabit Ethernet ports, 144 auto-sensing 10/100 ports, or a combination

HP ProCurve Routing Switch 9308m (J4138A), which includes eight open module slots that can accommodate 14 10-gigabit ports, 120 Gigabit Ethernet ports, 336 auto-sensing 10/100 ports, or a combination

HP ProCurve Routing Switch 9315m (J4874A), which includes 15 open module slots that can accommodate 28 10-gigabit ports, 232 Gigabit Ethernet ports, 672 auto-sensing 10/100 ports, or a combination

All 9300m series switches support the same modules, and all models ship with unpopulated slots, creating maximum flexibility for network designers.



HP ProCurve 9300m series


HP ProCurve 9300m series

Power supplies

Console port

9315m

9308m

9304m

Note The 9315m unit requires a minimum of two J4875A power supplies to power up or reboot. With only two power supplies installed, if it becomes necessary to replace a failed power supply, you must first install and power up the replacement power supply before you remove the failed power supply. Otherwise, the 9315m routing switch will cease to operate. Also, for true power supply redundancy (N+1) in both the 9315m and the 9308m units, you must install all four power supplies.



Management modules (9300 series)


Management modules9300 series

Each chassis must have at least one management module. Management modules:

• Provide flash memory for storage of system image (firmware) and configuration information

• Provide dynamic RAM for storage of forwarding tables and routing information

• Enable direct serial connection for configuration and monitoring• Support in-band management via Secure Shell, Telnet, HTTP, SNMP• Support file transfer via TFTP and Secure Copy

Three types of management modules are available. Each management module supports a family of port modules for network connectivity.

• Extended Performance (EP) Management Module• M4 Management Module• T-Flow Management Module

The HP ProCurve Routing Switch 9315m (J4874A) includes 15 open module slots that can accommodate 28 10-gigabit ports, 232 Gigabit Ethernet ports, 672 auto-sensing 10/100 ports, or a combination.

All 9300m series routing switches forward IP, IPX, and AppleTalk traffic.

The management module has flash memory that holds the switch’s operating system and its configuration information. It also has dynamic memory that holds the tables the switch uses to make forwarding decisions. Although the routing switch will continue to forward traffic without a working management module, it cannot add entries to its memory-resident tables if the management module fails.

The management module supports IP management and transfer protocols, such as Secure Shell (SSH), Telnet server and client, the Simple Network Management Protocol (SNMP), HyperText Transfer Protocol (HTTP, for web access), and Trivial File Transfer Protocol (TFTP). Providing a redundant management module ensures that if the primary module fails, the backup management module will continue to provide remote access to the switch and the ability to add to its tables.



Enhanced performance management and port modules (highest port density) – 9300 series


HP J4889A – 48-port 10/100 (RJ-21 – telco connectors)

Enhanced performance management and port modules (highest port density)9300 series

HP J4894A – EP 16-port Mini-GBIC module

HP J4895A – EP 16-port 100/1000-T module (RJ-45 connectors)

HP J4881A – 48-port 10/100 (RJ-45 connectors)

HP J4885A – EP 8-port Mini-GBIC redundant management module

There are two choices for gigabit port modules, each of which supports 16 ports. One supports mini-GBICs and the other has RJ-45 ports for Category 5 cabling. Each of these modules occupies a single module slot.

There are two choices for 10/100 port modules, each of which supports 48 ports. The port module with RJ-45 connectors occupies two module slots. The port module with RJ-21 connectors occupies a single module slot. Each of the four 50-pin Telco ports can be connected to a patch panel that converts the signal into 12 RJ-45 ports.

EP port modules support twice as many ports as the modules in the M4 family, which is described later in this section. The use of EP modules results in the high port density that makes the HP ProCurve Routing Switch 9300 series suitable for data center applications and medium to large enterprise networks.

In the past few years, technology advancements have allowed dramatic increases in speed in Ethernet networks—up to 10Gbps. Many experts agree that the 1.5 Kbyte frame size traditionally used on Ethernet networks has become inefficient in the face of these higher speeds. To make better use of available bandwidth, many end stations with gigabit network interfaces can be configured to use “jumbo” frames, which are up to 14,336 bytes in size. When the clients, servers, and switches within a network have jumbo frame support enabled, efficiency can be improved dramatically. HP ProCurve Routing Switch 9300 series devices that use EP technology can be configured to support jumbo Ethernet frames box-wide or on a per-interface basis.



10-gigabit module – 1 port (9300 series)


10-gigabit module – 1 port9300 series

HP J4891A – 10 GbE 10km module

• 1310nm serial - single mode fiber

• Compatible with M2, M4, and EP management modules (not compatible with M1)

• Complies with IEEE 802.3ae

• Supports distances up to 10km

The HP ProCurve 10-Gigabit Ethernet module is compliant with IEEE 802.3ae draft 3.3. The HP ProCurve product line supports one variety of 10-gigabit Ethernet – 1310nm serial – for use with single-mode fiber and an SC connector.

The 10-gigabit Ethernet module may be used in the 9304m, 9308m, and 9315m routing switches. The 10-gigabit module does not provide management services, which means that it must be installed in a chassis that has at least one management module. It is compatible with the EP redundant management module and may coexist with other EP port modules. The 10-gigabit module is also compatible with the M4 management module and its related port modules.



10-gigabit module – 2 port (9300 series)


• Compatible with M2, M4 and EP management modules (not compatible with M1)

• The module uses GBIC-like XENPAK Multisource Agreement (MSA) optics – hot-swappable

• The following kinds of XENPAK optics are supported:

– 1310nm serial for single-mode fiber (10 km reach)

– 1510nm serial for single-mode fiber (40km reach)

J8174A 2-port - 10 GbE

10-gigabit module – 2 port9300 series

The HP ProCurve Routing Switch 9300m series delivers a new level of high-performance capabilities and investment protection for medium and large enterprise networks. By providing high-performance throughput from the wiring closet into the data center and out to the edge of the WAN, the Routing Switch 9300m series’ non-blocking architecture enables network managers to build scalable and highly available network designs.



Recently retired - M4 redundant management and port modules


Recently retired - M4 redundant management and port modules

HP J4857A - 8-port mini-GBIC redundant management module

HP J4140A - 24-port 10/100 (RJ-45)

HP J4142A - 24-port 100Base- FX (MT-RJ)

HP J4842A - 8-port 1000Base-T

HP J4856A - 8-port mini-GBIC

The M4 management module and its port modules are the oldest of the module families. The capabilities of its predecessors, M1 and M2 modules, are more fully described in the latest release notes for 9300 series routing switch software updates. The M4 management module can be used with any of the port modules shown in this slide. The port modules in the M4 family are not compatible with the EP modules described previously.



Retired management modules for HP ProCurve Routing Switch 9300 series


Retired management modules for HP ProCurve Routing Switch 9300 series

M1 Management Modules

Console7 Link 8

Activity

5 Link 6

Activ ity

3 Link 4

Activity

1 Link 2

Activity

HP J4144A - 8-port Gigabit-SX Management Module

* These management modules cannot coexist in the same chassis with redundant management modules

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

Cons ole

HP J4141A - 16-port 10/100 Management Module

HP J4146A - 4-port Gigabit-LX and 4-port Gigabit-SX Management Module

Console7 Link 8

Activity

5 Link 6

Activ ity

3 Link 4

Activity

1 Link 2

Activity

SXLX

The 8-port Gigabit SX Management Module (HPJ4144A) combines management capabilities with eight Gigabit-SX ports. Gigabit-SX ports allow connections of up to 220 meters using multimode fiber.

The 4-port Gigabit LX and 4-port Gigabit SX Management Module (HPJ4146A) combines management capabilities with eight Gigabit-LX ports. Gigabit-LX ports allow connections of up to 5 kilometers when using single-mode fiber. When using multimode fiber, distances of up to 550 meters are supported; however, you must use a conditioning cable when using multimode fiber with Gigabit-LX ports.

The 16-port 10/100 Management Module (HPJ4141A) supports 16 10/100 ports with RJ-45 connectors that autonegotiate with attached devices, supporting 10Base-T half/full duplex and 100Base-T half/full duplex.

These management modules contain a Central Processing Unit, 32MB RAM, flash memory for storing system code, and other critical hardware and software components. If the management module fails, the system will not operate fully and the management module must be replaced. The management modules shown here do not support redundancy; only one of these management modules can exist in the routing switch chassis.



Retired redundant management modules for HP ProCurve Routing Switch 9300 series


Retired redundant management modules for HP ProCurve Routing Switch 9300 series

M2 Redundant Management Modules

Cons ole

HP J4847A - Redundant* Management Module

Console7 Link 8

Activity

5 Link 6

Activity

3 Link 4

Activity

1 Link 2

Activ ity

HP J4846A - 8-port Gigabit-LX Redundant* Management Module

HP J4845A - 8-port Gigabit-SX Redundant* Management Module

Console7 Link 8

Activity

5 Link 6

Activity

3 Link 4

Activity

1 Link 2

Activ ity

* These management modules cannot coexist in the same chassis with non-redundant management modules

Support for redundant management modules is in Routing Switch system image code version 5.0 or above.

The 8-port Gigabit SX Redundant Management Module (HPJ4845A) combines management capabilities with eight Gigabit-SX ports. Gigabit-SX ports allow connections of up to 220 meters using multimode fiber.

The 8-port Gigabit LX Redundant Management Module (HPJ4846A) combines management capabilities with eight Gigabit-LX ports. Gigabit-LX port allows connections of up to 5 kilometers when using single mode fiber. When using multimode fiber, distances of up to 550 meters are supported; however, you need to use a conditioning cable when using multimode fiber with Gigabit-LX ports.

The Redundant Management Module (HPJ4847A) supports no external connections and is dedicated to the management task.

These management modules contain a Central Processing Unit, 128MB RAM, flash memory for storing system code, and other critical hardware and software components. The system will not work fully without a management module. Redundant management modules shown here may not coexist with the non-redundant management modules shown on the previous slide.



Retired port modules for HP ProCurve Routing Switch 9300 series


Retired port modules for HP ProCurve Routing Switch 9300 series

7 Link 8

Activity

5 Link 6

Activity

3 Link 4

Activity

1 Link 2

Activity

HP J4143A - 8-port Gigabit-SXSXLX

7 Link 8

Activity

5 Link 6

Activity

3 Link 4

Activity

1 Link 2

Activity

HP J4145A - 4-port Gigabit-SX and 4-port Gigabit-LX

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

HP J4140A - 24-port 10/100 (RJ-45)

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

HP J4142A - 24-port 100Base FX (MT-RJ)

The HP J4143A has eight Gigabit-SX ports with SC connectors that support distances up to 220 meters with multimode fiber.

The HP J4145A has four Gigabit-SX ports with SC connectors that support distances up to 220 meters with multimode fiber, and four Gigabit LX ports with SC connectors that support distances up to 5 kilometers with single-mode fiber.

The HP J4140A has 24 10/100 ports with RJ-45 connectors which autonegotiate with attached devices, supporting 10Base-T half/full duplex and 100Base-TX half/full duplex.

The HP J4142A has 24 100Base-FX ports with MT-RJ connectors. MT-RJ connectors include both transmit and receive fibers in a single connector that is the same size as an RJ-45 connector, thus allowing higher port density than SC connectors.



Port and slot numbering (9300 series)


Port and slot numbering9300 series

HP ProCurve 9304m

•Slots on HP ProCurve 9308m and 9315m are numbered from left to right. Ports are numbered from top to bottom.

slot 1

slot 4

e 4/1 e 4/16

e 1/1 e 1/8

•Slots on HP ProCurve 9304m are numbered from top to bottom. Ports are numbered from left to right.

HP ProCurve 9315mslot 1 slot 15

e 1/8

e 15/1

e 15/16

e 1/1



Recovering from a lost password (9300 series)


Recovering from a lost password9300 series

M4 BI Boot Code Version 07.00.05Enter ‘b’ to go to boot monitor …

BOOT MONITOR> no password BOOT MONITOR> boot system flash primary

Once the switch finishes booting and loads the startup-configuration you are left at the non-privileged prompt

Router_A>enableRouter_A>config terminalRouter_A(config)#enable super-user-password “password”

The boot monitor allows you to interrupt the boot sequence and boot the system without requiring any passwords. You can then change the password for future access and the switch will operate normally. This command is not listed in the help menu,nor can it be abbreviated

While the HP ProCurve routing switch is starting up, there is a 2-second window during which you can interrupt the boot process by pressing the “b” key from a terminal with a direct serial connection. This brings up the boot monitor.

Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The diagram shown here displays how to instruct the switch to boot from primary flash.

The boot monitor can also be used for recovery from a lost super-user password. In this case, you must enter the boot monitor and enter a hidden command no password, followed by a boot system flash primary command.

Note that booting without password protection does not remove the passwords from the configuration file; it simply removes the authentication requirement. When the system boots with no password, you can enter the privileged level EXEC by simply entering the enable command at the user level EXEC.

You should assign a new super-user password and write the configuration to memory immediately to secure the system and replace the unknown password.



Ignore startup configuration at boot time (9300 series)


Ignore startup configuration at boot time9300 series

The boot monitor allows you to interrupt the boot sequence and boot the system with the factory default configuration

This is useful if there is something in the startup-configuration preventing the switch from booting normally

Router_A# reloadM4 BI Boot Code Version 07.00.05Enter ‘b’ to go to boot monitor …

BOOT MONITOR> use default config BOOT MONITOR> boot system flash primary

This command sequence instructs the switch to boot with the factory default configuration.

The two-second boot monitor opportunity may be eliminated by enabling the “fastboot” feature. Note that fastboot may be enabled (fastboot) or disabled (fastboot off) at both the user and privileged EXEC level. The fastboot command does not cause the system to restart; it does determine how quickly the system will boot.



HP ProCurve reference material


HP ProCurve reference material

• HP ProCurve home pagehttp://www.hp.com/go/procurve or http://www.hp.com/rnd/

• HP ProCurve products index pagehttp://www.hp.com/rnd/products/index.htm

• HP ProCurve software downloads pagehttp://www.hp.com/rnd/software/index.htm

• HP ProCurve product manuals pagehttp://www.hp.com/rnd/support/manuals/index.htm

• HP ProCurve network services pagehttp://www.hp.com/rnd/services/index.htm

• HP ProCurve problem reports & FAQshttp://www.hp.com/rnd/support/problem_reports/

Release notes are posted on the HP ProCurve website and provide information on new software updates:

New features and how to configure and use them

Software management, including downloading software to the switch

Software fixes addressed in current and previous releases

To view and download a copy of the latest release notes for your switch:

1. Go to the HP ProCurve website at http://www.hp.com/go/hpprocurve.

2. Click on Technical support.

3. Click on Product manuals.

4. Click on the product for which you want to view or download a manual.



Module 1 summary


Module 1 summary

In this module you learned:• How the HP ProCurve products fit into the OSI architecture• Accessories and features that the different products have in

common• Specifications for the cables and connectors supported by

the product line• Which management interfaces are supported by each

product



Learning check Module 1

1. Which HP ProCurve switch family members are modular switches?

a. 4000m

b. 2800 series

c. 5300xl series

d. 4100gl series

e. 2500 series 2. Which HP ProCurve switch family provides the highest Gigabit Ethernet port

density?

a. 2600

b. 2800

c. 4100gl

d. 5300xl

e. 6108 3. In the following list, check which switches use mini-GBICs, transceivers,

or both:

5300xl mini-GBICs ________ transceivers _________

2500 mini-GBICs ________ transceivers _________

2800 mini-GBICs ________ transceivers _________

9300m mini-GBICs ________ transceivers _________

4100gl mini-GBICs ________ transceivers _________ 4. In the following list, check the network design layer at which the switches are

commonly used:

5300xl Core _______ Distribution_______ Edge _________

4100gl Core _______ Distribution_______ Edge _________

9300m Core _______ Distribution_______ Edge _________

2800 Core _______ Distribution_______ Edge _________



Rev. 4.21 HP Restricted 2-1

•

•

•

Switch management Module 2

Objectives This module discusses the management features of HP ProCurve switches.

After completing this module you should be able to:

Discuss the supported management interfaces on a per-product basis:

CLI

Menu

Web

Configure IP addressing and the default gateway


2-2 HP Restricted Rev. 4.21

Device management can take different paths


Out-of-band – RS-232 and terminal emulationOut-of-band – RS-232 and terminal emulation

File transfers - Xmodem, ZmodemFile transfers - Xmodem, ZmodemInterface: CL I or menu, not graphical Interface: CL I or menu, not graphical

In-band - Ethernet connectionIn-band - Ethernet connection

File transfers – TFTPFile transfers – TFTP

Interface: CL I or menu via TelnetInterface: CL I or menu via Telnet

Interface: graphical via HTTP and SNMP Interface: graphical via HTTP and SNMP

Device management can take different paths

Switch management


Out-of-band access


Out-of-band access

Initial configuration is often performed via direct serial connection• The console port (DB-9 male) is on the front of the switch• A cable is provided with every switch

– Note: 9300 series devices require a straight-through console cable; all other switches use a cross/null modem cable

• Terminal emulation session: – 9600 bps – 8 data bits, no parity, 1 stop bit– XON/XOFF flow control

Also works with No Flow Control – incidentally, No Flow Control is specified for the 9300 unit.

The CLI is a character-based interface that enables users to define parameters for the switch feature set and to view the current status of those features.

Although the CLI is available through Telnet after an IP address has been assigned to the switch, you will probably use a direct serial connection through the switch’s console port for initial configuration. To begin this session, use the cable provided with the switch to connect a PC to the console port (DB-9 male) on the front of the switch. You will also need a terminal emulation application, such as HyperTerminal, which is included with Microsoft Windows, or TeraTerm Pro, the application you will use during lab exercises.

After you have connected to the switch and waited for its power-on self-test to complete, press Enter several times to initiate a session. Because the switch does not have any password protection at factory default settings, one of your first activities is likely to be assigning passwords.



In-band access for device management


In-band access for device management

• Device management is typically performed remotely using IP services such as:– Telnet – enables terminal access to the command line

interface– HTTP – provides web access to graphical interface– SNMP – uses network management applications to provide

access to a graphical interface• Remote access requires a valid IP address, which may be

assigned using:– Dynamic Host Configuration Protocol (DHCP)– Static IP address assignment through direct connection to the

serial interface• Network devices may be protected from unauthorized

access using a password

Administrators and technicians typically use one of the following IP services to perform device management tasks:

Telnet, which enables terminal access to the Command Line Interface (CLI)

HTTP, which provides Web access to a graphic configuration interface

SNMP, which uses network management applications to provide access to a graphic management interface

All of these device-management techniques are classified as “in-band” techniques, meaning that traffic resulting from the management tasks takes the same path as other network traffic. Consequently, the switch’s management interface must have an IP address before these tools are available. By default, a switch will receive an IP address through Dynamic Host Configuration Protocol (DHCP), but because DHCP addresses are usually dynamic, they are not well-suited to management interfaces. Instead, administrators typically use the CLI to assign static IP addresses to managed switches and other infrastructure devices. Administrators also can assign addresses to switches using reservations configured on their DHCP servers. We will discuss the implications of how IP addressing is handled.

Switch management


Management interfaces


Management interfaces

HP ProCurve switches support four configuration and monitoring interfaces:• Command Line Interface (CLI)

– Character-based interface allows configuration and monitoring of all features

– Accessible through direct serial or Telnet session • Menu interface

– Accessible through direct serial or Telnet session• Web interface

– Graphical configuration and monitoring interface– Enables web browser to access switch’s built-in web server

• SNMP – network management interface– Enables switch access via a management station/application

All HP ProCurve switches offer the monitoring interfaces listed in the slide. The CLI is the most extensive management tool, enabling configuration and monitoring of all switch features. The menu and Web interfaces support subsets of the features available through the CLI.

This module will discuss all of these interfaces, and you will make extensive use of the CLI and Web interfaces during exercises throughout the course.

The switches support the Simple Network Management Protocol (SNMP), an IP component that enables monitoring of a wide array of performance metrics on switches and other network devices. Typically, administrators use SNMP-enabled applications to collect specified data about network devices.

Administrators also can use HP ProCurve Manager and HP ProCurve Manager Plus to monitor and configure many parameters on HP ProCurve switches.



Points to ponder...


Points to ponder…

You will usually find that the CLI is the most comprehensive interface to use. You will often find it useful to access the switch from a remote location – either on-net or off-net. Remember that the switch must have an IP address before you can access it remotely via Telnet or HTTP.The menu interface is often useful when you are configuring many features at one time. The Web interface provides user-friendly switch access. It can be the preferred way to monitor switch activity.

Switch management


CLI interface privilege levels (2500, 2600, 2800, 4100gl, 5300xl series and 6108)


CLI interface privilege levels2500, 2600, 2800, 4100gl, 5300xl series and 6108

• The CLI is a text-based interface for configuring and monitoring HP ProCurve switches. The CLI can be accessed either through a direct serial connection to the device or through a Telnet session

• Operator – HPswitch> enable

config terminal

vlan 10

– At the Operator level you can examine the current configuration and move between interfaces without being able to change the configuration

• Manager – HPswitch# – Provides all Operator-level privileges plus the ability to perform system-level

actions that do not require saving changes to the system configuration file• Global Configuration - HPswitch(config)#

– Provides all Operator- and Manager-level privileges and enables you to make configuration changes to any of the switch’s software features

• Context Configuration - HPswitch(vlan-10)– Provides all Operator and Manager privileges and enables you to make

configuration changes in a specific context, such as one or more ports or a VLAN

Each switch provides different levels of access. Each level can be password protected. The assignment of user privileges and passwords is an important part of a device installation.

All switches except the 9300 device support two levels of management access. The Operator basically has read access, while Manager level provides read/write access. The 9300 device provides additional levels of access.

Note If you are unable to connect with the routing switch through a Web browser due to a proxy problem, it may be necessary to set your Web browser to direct Internet access instead of using a proxy. For information on how to change a proxy setting, refer to the online help provided with your Web browser.



Points to ponder…


Points to ponder…

Before trying to access a customer switch,you must understand the type of access that they’ve implemented. Many larger networks have deployed centralized authentication. The advantage is that this approach enables multiple user/password pairs, allowing multiple users to have individual accounts with the same access privileges. Another advantage is that centralized authentication provides a way for encrypting the username/ password pairs.

The customer may have configured passwords for local user accounts. Or, he may have configured the device to use a centralized authentication method, such asa RADIUS server or a TACACS/TACACS+ server.

You must make sure that you have the proper access level to perform the task that needs to be done!

Switch management


Assigning a manager password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)


Assigning a manager password at CLI2500, 2600, 2800, 4100gl, 5300xl series and 6108

At system defaults, the switch is not password-protected. The initial prompt “#” signifies read/write access to the switch.

The prompt “>” signifies read-only access to the switch.

Provide the manager password to gain read/write access.

Define a manager password to protect read/write access to the switch.

HP ProCurve Switch# HP ProCurve Switch# co<TAB>

configurecopy

HP ProCurve Switch# configHP ProCurve Switch(config)# password ?

<operator|manager>HP ProCurve Switch(config)# password managerNew password: ********Please retype new password: ********HP ProCurve Switch# exitHP ProCurve Switch# exitHP ProCurve Switch> exitDo you want to log out(Y/N)? y...HP ProCurve Switch> enablePassword: ********HP ProCurve Switch#

When you connect to the switch for the first time, the CLI prompt presents a default switch name followed by the number sign (#). The default name is based on the switch model. The # indicates that you are in read/write mode, or “manager” level. It is then possible to configure the switch without entering a password.

To assign a manager password from the CLI, enter the password manager command. The next time you log in to the switch, the prompt shows the “greater than” sign (>) to indicate that you are in read-only mode, or operator level. To move to the manager level, enter enable.



Assigning an operator password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)


Assigning an operator password at CLI2500, 2600, 2800, 4100gl, 5300xl series and 6108

Provide the manager password to gain read/write access.

Define an operator password to protect read-only access to the switch.

Provide the operator password to gain read-only access.

OR

HP ProCurve Switch# configHP ProCurve Switch(config)# password operatorNew password: ********Please retype new password: ********HP ProCurve Switch(config)# exitHP ProCurve Switch# exitHP ProCurve Switch> exitDo you want to log out(Y/N)? y...Password: ********HP ProCurve Switch> exitDo you want to log out(Y/N)? y

...Password: ********HP ProCurve Switch#

In operator level, a user has read-only rights to the switch’s settings, meaning the user can view statistics and the switch’s current configuration, but cannot alter the configuration. If you want to protect this level from unauthorized access, use the password operator command.

If only the manager password has been defined, all users can access the operator level by pressing Enter at the password prompt. Users who enter the enable command to access the manager level will be prompted for the manager password. If only an operator password has been defined, users who enter the password will be presented with the operator prompt. All authenticated operator users can then access the manager level with the enable command. The manager level is only protected if a manager password is explicitly defined.

Switch management


Local authentication for device access (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, and 6108)


Local authentication for device access2500, 2600, 2800, 4000 series, 4100gl, 5300xl series and 6108

Most HP ProCurve switches support one password for manager-level access and one password for operator-levelaccess.You can optionally associate a name with each access level.

Switch prompts for user name and password

User supplies name and password

Switch validates manager name and password and grants read/write access3

2

1

If the switch is configured for local authentication, the password is compared with those defined on the switch. Local authentication allows you to define one password for the manager level and one password for the operator level; all users with a particular access level share the same authentication information. If the supplied password matches with the operator level, the user is given read-only access. If the password matches with the manager level, the user is given read/write access.



Centralized authentication for device access (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Centralized authentication for device access2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

TACACS+ or RADIUS authentication server

3 Switch forwards authentication information to server

4 Server validates user name /password pair against its database and notifies switch of the privilege level

Switch prompts for user name and password

User supplies name and password

Switch grants appropriate access level5

2

1

Benefits :• Name/password pairs are entered

once for each server, rather than once for each switch

• Each user has a unique name/ password pair, rather than sharing with other users with the same access level

• Authentication traffic between switch and server may be encrypted for better security

IP network

All manageable HP ProCurve switches can be configured to use either local or centralized authentication services. When using centralized authentication, name/password pairs are stored on a server that the switch can access through the IP network.

Switch management


Setting system information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Setting system information2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

You can define three items that clearly identify the switch and differentiate it from other switches:• Host name, a name that appears as part of the prompt at

the CLI• Contact information, such as phone extension or email

address• Physical location, such as building and wiring closet

Location and contact information is defined as part of SNMP services

Define a host name for the switch. Notice that the prompt changes. HP ProCurve Switch# config

HP ProCurve Switch(config)# hostname Edge_1Edge_1(config)# snmp-server contact Admin-555.5555Edge_1(config)# snmp-server location data center

One of the first things you will want to do is configure the system information. When you are working with multiple switches, seeing the name of the switch you’re working on (in the prompt) will make things less confusing. Configuring contact information will be of great value to another tech that is not familiar with the account.



Manager and operator (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)


Manager and operator levels2500, 2600, 2800, 4100gl, 5300xl series and 6108

To enter the manager level from the operator level:

Edge_1> enable <Enter> Edge_1#

Manager-level prompt: Edge_1#

Operator-level prompt: Edge_1>

• show - display system information• ping, link-test - test connectivity• menu, setup - move to one of the

menu interfaces• enable - advance to manager

level

• show - display system information• ping, link-test - test connectivity• menu, setup - move to one of the

menu interfaces• clear - reset system statistics

counters• erase, write, copy - manipulate

image and configuration files• config - advance to the global

configuration level• exit - return to operator level

To leave the manager level and return to the operator level:

Edge_1# exit <Enter> Edge_1>

HP ProCurve switches support four privilege levels: operator, manager, global configuration, and context configuration. This slide shows the relationship between the operator and manager levels.

The commands available at the operator level are essentially a subset of those available at the manager level. The operator level enables read-only access and allows the user to view statistics by using the show command or a menu. Operator users also can use link-test and ping commands to perform Layer 2 and Layer 3 connectivity tests from a menu interface or at the CLI.

Operator users who have the appropriate password can use the enable command to advance to the manager level. Users at the manager level have access to all of the same commands as users at the operator level. In addition to commands that display statistics and test connectivity, users at the manager level can clear statistics. Manager level users can write, erase, and copy image and configuration files to flash memory.

Switch management


Interface context at the CLI - some commands (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)


Interface context at the CLI (some commands)2500, 2600, 2800, 4100gl, 5300xl series and 6108

This is only a subset of the available commands. Also, note that the commands available will be different depending upon the access level. Typically, the manager level will have access to the largest number of available commands.



CLI tips and shortcuts (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


CLI tips and shortcuts2500, 2600, 2800, 4100gl, 5300xl series and 6108

• Help– Display Help for any command that is available at the current

context level by entering enough of the command string to identify the command, along with “help”

– Typing the ? symbol lists the commands you can execute at the current privilege level

• Tab completion– Type one or more consecutive characters in a command and

then press [Tab]• History

– “show history” displays the current command history

The CLI offers several shortcuts and features designed to simplify management and improve productivity. Some of the most important are as follows:

The <Tab> and <?> commands enable administrators to access the help features on HP ProCurve switches. When accessing help in these ways, it is not necessary to press Enter. The <Tab> command also can be used to obtain context-sensitive completion of a partial command. For instance, if you enter co<Tab> at the manager level, the CLI will indicate that available commands that start with “co” are configure and copy.

The CLI enables you to shorten commands to the minimum number of characters necessary for uniqueness. For instance, at the manager level, the CLI will execute the configure command after “con” is entered because it is the only command that begins with those characters.

Switch management


HP ProCurve switches store up to 25 commands—numbered 1 to 25—in their history buffers. To scroll through the list of commands, press the up or down cursor arrows from the CLI prompt. Enter the show history command to see a complete list of buffer commands. To repeat a command in the buffer multiple times, enter repeat plus the command’s buffer number plus count and the number of times you want the command to repeat. For instance, the command repeat 6 count 1 will repeat the sixth command in the buffer once.

To simplify the reissuing of complex commands, you can recall any command from the CLI buffer and edit it with new parameters.

Command completion and history do not work on 9300 devices.



CLI interface privilege levels (9300 series)


CLI interface privilege levels9300 series

• User EXEC – HPswitch> enable

config terminal

vlan 10

– Commands are at the top of the CLI hierarchy. These are the first commands that you have access to when connected to the device through the CLI. At this level you can view basic system information and verify connectivity, but you cannot make any changes to the device configuration.

• Privileged – HPswitch# – Primarily enables you to transfer and store software images and

configuration files between the network and the system, and review the configuration.

• Global configuration – HPswitch(config)# – Provides all user and privileged EXEC level privileges, and enables you to

make configuration changes to any of the switch’s software features• Context configuration – HPswitch(vlan-10)

– Provides all user and privileged EXEC level privileges, and enables you to make configuration changes in a specific context, such as one or more ports or a VLAN.

CLI access does not require a password by default. If you want to configure a password, you must use the CLI. A password cannot be assigned through the Web management interface. The CLI contains the following access levels:

User EXEC level – The level you enter when you first start a CLI session. At this level, you can view some system information but you cannot configure system or port parameters.

Privileged EXEC level – This level is also called the enable level and can be secured by a password. You can perform tasks such as managing files on the flash module, saving the system configuration to flash, and clearing caches at this level.

CONFIG level – The configuration level. This level lets you configure everything about the switch, including the system’s IP address, host name, VLANs, and so forth.

Switch management


Accessing the CLI (9300 series)


Accessing the CLI9300 series

Once connectivity to the device is established, you will see theprompt: HP9300>At this prompt ( > ) you are at the user EXEC level of the CLI command structure.To reach the Global CONFIG Level, the uppermost level of the CONFIG commands, enter the following commands:

HP9300> enableHP9300# configure terminalHP9300(config)#

You can then reach all other levels of the CONFIG command structure from this point.

There are two modes available at the CLI: the EXEC level, which is for basic management commands, and the configuration level, which allows you to selectively enable items within the feature set and assign specific values, such as IP addresses.

The user EXEC level is the starting point for a console session. A limited set of read-only commands is available at the user EXEC level. To make configuration changes, a user must enter the privileged EXEC level, which is also known as “enable” mode. At factory default settings, the enable mode gives full read/write access to the system and is not protected by a password.

You can move from the user EXEC level to the privileged EXEC level and have unlimited read/write access to the system by entering the command enable.

The privileged EXEC level supports a powerful command set that allows dynamic configuration changes, manipulation of files in flash memory, and reloading of the operating system. You must establish a password for the privileged EXEC level to secure the system. If you enter the privileged EXEC level when it is in an unprotected state, the system notifies you that no password has been assigned.

If you enter the exit command from the privileged EXEC level, you will be returned to the user EXEC level.



The configure terminal command advances to the configuration level. Entering the configuration level causes the prompt to change, as shown in the slide.

Global level commands affect the entire system. Some examples of global level configuration commands include the assignment of a host name and system passwords. Support for routing protocols, such as RIP and OSPF, is enabled at the global configuration level, but changes to the operating parameters of the routing protocols are made within a router configuration context.

You can give the routing switch a name by using the hostname command. The name can have embedded spaces if you enclose it in quotation marks.

The exit command returns you to the previous level within the configuration level. Regardless of the current configuration level, the end command exits the configuration level and returns you to the privileged EXEC level.

Switch management


EXEC – the command interpreter (9300 series)


•show - display system information

•ping, traceroute - test connectivity

•enable - advance to Privileged EXEC level

EXEC - the command interpreter9300 series

Privileged EXEC HP9304#

User EXEC HP9304>

To leave the privileged EXEC level and return to the user EXEC level:

HP9304# exit <ENTER> HP9304>

•show - display system information

•clear - reset system statistics counters

•ping, traceroute - test connectivity

•erase, write, copy -manipulate image and configuration files

• config - advance to the configuration level.

At factory default settings, there are two EXEC levels. To enter the privileged EXEC level:

HP9304> enable <ENTER> HP9304#

CLI access does not require a password by default. If you want to configure a password, you must use the CLI. A password cannot be assigned through the Web management interface. The CLI contains the following access levels:

User EXEC level – The level you enter when you first start a CLI session. At this level, you can view some system information but you cannot configure system or port parameters.

Privileged EXEC level – This level is also called the enable level and can be secured by a password. You can perform tasks such as manage files on the flash module, save the system configuration to flash, and clear caches at this level.

CONFIG level – The configuration level. This level lets you configure the system’s IP address and configure



EXEC – Enable (9300 series)


EXEC – Enable9300 series

Three levels of passwords can be assigned to provide a range of access point for various users within the network:• Super user

– This user has unlimited access to all levels of the CLI. This level is generally reserved for system administration. The super user is also the only user that can assign a password access level to another user.

• Read only– A user with this password level is able to use only the show commands. No

configuration is allowed with this access type.• Configure port

– This user has the ability to configure interface parameters only. The user can also use the show commands.

By default, there are no CLI passwords. To secure CLI access, you must assign passwords.

You can set the following levels of Enable passwords:

Super User – Allows complete read-and-write access to the system. This is generally for system administrators and is the only password level that allows you to configure passwords. You must set a super user password before you can set other types of passwords.

Port Configuration – Allows read-and-write access for specific ports but not for global (system-wide) parameters.

Read Only – Allows access to the privileged EXEC mode and CONFIG mode, but only with read access.

Note You must use the CLI to assign a password. You cannot assign a password using the Web management interface or an SNMP network management application.

Switch management


Assigning the super-user password (9300 series)


Assigning the super-user password9300 series

To assign the password:

Router_A> enable <ENTER> Router_A# config termRouter_A(config)# enable super-user-password secret

To authenticate as super-user, supply the correct password:

Router_A> enable secretRouter_A#

privileged EXEC Router_A#

user EXEC Router_A>

passwordaccount

super-user has all rights at the privileged EXEC level

To protect the routing switch from unauthorized access, you should assign passwords. The configuration of a privileged EXEC password creates a super-user account, which is unlimited in scope. You must enter the global configuration level to create this account and assign a password.

In addition to protecting the enable mode from unauthorized access, the definition of a super-user password removes most of the commands that are available at the user EXEC level at factory default settings, such as show and ping.

The super-user can create a read-only privileged level account whose capabilities approximate the command set that the user EXEC level had before the super-user password was assigned. The system also supports the creation of a port-config account whose capabilities include all read-only functions and some limited port-level configuration. The read-only and port-config accounts do not exist until the super-user creates them by defining passwords for the accounts.

The read-only account should be used by system operators or other monitoring personnel who need read-only access to information. This type of user has unlimited access to show commands, including show configuration, but this is not a security risk because that command does not display the passwords configured for system-defined users. The read-only user can perform connectivity tests and can Telnet to other routers and network devices from the routing switch, but cannot make any changes to the configuration.



The port-config account is a superset of the read-only account suitable for use by technicians and other persons who must dynamically configure interface parameters. The port-config user can enable/disable individual ports, and change their physical parameters such as speed and duplex settings.

Switch management


Creating the read-only and port-config users (9300 series)


Creating the read-only and port-config users9300 series

To authenticate as the read-only user, supply the correct password:

Router_A> enable operatorRouter_A#

privileged EXEC Router_A#

user EXEC Router_A>

The super-user creates the read-only and port-config accounts by assigning a password. For example:

Router_A> enable secret<ENTER> Router_A# config termRouter_A(config)# enable read-only-password operatorRouter_A(config)# enable port-config-only-password techie

passwordaccount

port-config userread-only

user

The super-user can create a read-only privileged level account whose capabilities approximate the command set that the user EXEC level had before the super-user password was assigned. The system also supports the creation of a port-config account whose capabilities include all read-only functions and some limited port-level configuration. The read-only and port-config accounts do not exist until the super-user creates them by defining passwords for the accounts.

The read-only account should be used by system operators or other monitoring personnel who need read-only access to information. This type of user has unlimited access to show commands, including show configuration, but this is not a security risk because that command does not display the passwords configured for system-defined users. The read-only user can perform connectivity tests and can Telnet to other routers and network devices from the routing switch, but cannot make any changes to the configuration.

The port-config account is a superset of the read-only account suitable for use by technicians and other persons who must dynamically configure interface parameters. The port-config user can enable/disable individual ports, and change their physical parameters such as speed and duplex settings.



Saving configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Saving configuration information2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• Configuration instructions issued at the CLI are dynamically executed and written to running configuration in volatile memory

• Configuration information entered at the CLI does not survive a reboot unless it is saved to the startup configuration in non-volatile flash memory

• To save configuration information from the running configuration to the startup configuration, execute the CLI command:

write memory

• This command can be executed from within manager, global configuration, and context configuration levels

At boot time, the switch uses configuration information from non-volatile flash memory.

When you make changes in the global configuration level, changes are dynamically executed and stored in the running configuration, which is in volatile memory and does not survive a reboot.

To save configuration information from RAM to flash memory, execute the CLI command write memory.

This command can be executed from within manager, global configuration, and context configuration levels.

Switch management


Points to ponder…


Points to ponder…

Initially, walking into a customer’s wiring closet or computer room may be a bit overwhelming and intimidating. If you understand your exposure you will find it easier to reach a comfort level.

There is much that you can do without risk. For example, you will not disrupt anything by issuing a “show” command. Also, any changes that you do make at the CLI are not committed to non-volatile memory until you issue a ”write memory”(the other side of this is to make sure that,once you’re satisfied with the configuration changes that you’ve made, you do enter “write memory”).

Next we will see how changes that you’ve made from the Menu or Web interface are committed to non-volatile memory.



CLI advantages


CLI advantages

• Provides quick,easy management access to a menu-driven subset of switch configuration and performance features

• Offers out-of-band access (through the RS-232 connection)• Enables Telnet (in-band) access to the menu functionality

Switch management


Menu interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108)


Menu interface2500, 2600, 2800, 4000 series, 4100gl, 5300xl series and 6108

• The menu interface can be accessed either in-band or out-of-band

• The menu interface is the default for the 4000 series (the 4000 series menu is slightly different from the other switches’ menu)

• To enter the menu from the CLI, use the “menu” command (to return to the CLI from the menu interface, select Command Line Interface -- CLI option)

• HPswitch# menu [Enter]

The menu interface operates through the switch console to provide you with a subset of switch CLI commands in an easy-to-use menu format enabling you to:

Perform a “quick configuration” of basic parameters, such as the IP addressing needed to provide management access through your network

Configure these features:

Manager and operator passwords •

•

•

•

•

•

•

•

•

System parameters

IP addressing

Time protocol

Ports

Trunk groups

A network monitoring port

Spanning Tree operation

SNMP community names



•

•

•

•

•

IP authorized managers

VLANs (virtual LANs) and GVRP

View status, counters, and Event Log information

Update switch software

Reboot the switch

Switch management


Menu interface – Main Menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Menu interface – Main Menu2500, 2600, 2800, 4100gl, 5300xl series, 6108

HPswitch# menu [Enter]:

The Main Menu gives you access to these menu interface features:

Status and Counters: Provides access to display screens showing switch information, port status and counters, port and VLAN address tables, and spanning tree information.

Switch Configuration: Provides access to configuration screens for displaying and changing the current configuration settings.

Console Passwords: Provides access to the screen used to set or change manager-level and operator-level passwords, and to delete manager and operator password protection.

Event Log: Enables you to read progress and error messages that are useful for checking and troubleshooting switch operation.

Command Line (CLI): Selects the Command Line Interface at the same level (manager or operator) that you are accessing in the menu interface.

Reboot Switch: Performs a “warm” reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up-time to zero. A reboot is required to activate a change in the VLAN Support parameter.



Download OS: Enables you to download a new software version to the switch.

Run Setup: Displays the Switch Setup screen for quickly configuring basic switch parameters such as IP addressing, default gateway, logon default interface, spanning tree, and others.

Logout: Closes the menu interface and console session, and disconnects Telnet access to the switch.

Switch management


Menu interface navigation (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Menu interface navigation2500, 2600, 2800, 4100gl, 5300xl series, 6108

Screen title – identifies the location within the menu structure

Parameter fields

Actions line

Navigation instructions

Help line describing the selected action or selected parameter field

Menu interface screens include these three elements:

Parameter fields and/or read-only information such as statistics

Navigation and configuration actions, such as Save, Edit, and Cancel

Help line to describe navigation options, individual parameters, and read-only data

Navigation of the menu interface requires use of the cursor arrow keys. To make changes, use the arrow key to move to the “Edit” action and press Enter. This puts the cursor in the upper half of the screen, where you can key in the system name. Continue using the arrow keys to move to other fields on the page.

Some fields allow a limited list of options. In the case of the “IP Config” field, the choices are “DHCP/Bootp,” “Disabled,” and “Manual.” Use the spacebar to cycle through the choices. If you want to statically configure an IP address, you must choose “Manual.”



Getting help (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Getting help2500, 2600, 2800, 4100gl, 5300xl series, 6108

Highlighting on any itemin the Actions line indicates that the Actions line is active

The Help line provides abrief descriptor of the highlighted Action item or parameter

Pressing [H] or highlighting Help and pressing [Enter] displays Help for the parameters listed in the upper part of the screen

In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlighted, press H, and a separate help screen is displayed.

To get help on the actions or data fields in each screen, use the arrow keys (<, >, ^, or v) to select an action or data field. The help line under the Actions items describes the currently selected action or data field.

Switch management


Using the full menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Using the full menu interface2500, 2600, 2800, 4100gl, 5300xl series, 6108

HP ProCurve switches offer a configuration menu for convenience and for compatibility with previous HP ProCurve switch families. However, the menu is not as powerful as the CLI, which enables configuration of the entire Layer 2 and Layer 3 feature sets for HP ProCurve switches.

To access this interface, enter menu at the CLI. As shown here, the Main Menu offers 10 options. Access any option by moving the cursor to the appropriate line and pressing Enter.

The Status and Counters menu is available to both manager- and operator-level users. It can be more convenient than the CLI for many monitoring tasks because its display is dynamically updated.

Some submenus are available to manager-level users only. For example, the Switch Configuration menu enables modification of the IP configuration, port settings, and other items that can be altered only by users with manager rights.

To leave the menu interface and return to the CLI, select item 5 from the Main Menu. The next slide show the results of “Port Status.”



Port configuration at the menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Port configuration at the menu interface2500, 2600, 2800, 4100gl, 5300xl series, 6108

Switch management


Activating configuration changes (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Activating configuration changes2500, 2600, 2800, 4100gl, 5300xl series, 6108

An asterisk indicates a configuration change that requires a reboot in order to take effect

Reminder to reboot the switch to activate configuration changes

Rebooting to activate configuration changes: Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the Maximum VLANs to support parameter.

To access this parameter, go to the Main Menu and select:

2. Switch Configuration

8. VLAN Menu

1. VLAN Support If you make configuration changes in the menu interface that require a reboot, the switch displays an asterisk (*) next to the menu item in which the change has been made. For example, if you change and save the value for the maximum VLANs to support parameter, an asterisk appears next to the VLAN Support entry in the VLAN Menu screen, and also next to the Switch Configuration …entry in the Main Menu.



To activate changes indicated by the asterisk, go to the Main Menu and select the Reboot Switch option.

Note Executing the write memory command in the CLI does not affect pending configuration changes indicated by an asterisk in the menu interface. That is, only a reboot from the menu interface or a boot or reload command from the CLI will activate a pending configuration change indicated by an asterisk.

Switch management


Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


• Basic switch “setup” parameters, such as the default interfaces, IP address, default gateway, switch name, etc.,can be configured from the menu interface

• To access the Setup Menu, do one of the following:– From the CLI, type “setup”

• HPswitch# setup [Enter]– From the Main Menu

• Highlight “Run Setup” and press <Enter>

Basic switch setup via menu2500, 2600, 2800, 4100gl, 5300xl series, 6108

To access a quick setup menu that is useful for initial configuration of the switch, issue the setup command from the CLI. The Setup menu allows you to define some very basic parameters, including passwords, a system name, location, and contact information for the switch.



Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Basic switch setup via menu2500, 2600, 2800, 4100gl, 5300xl series, 6108

ME NU could be set as the default

If you leave this screen using the “Save” action, the changes are saved to the startup configuration

HPswitch# setup [Enter]:

Navigation of the menu interface requires use of the cursor arrow keys. To make changes, use the arrow key to move to the “Edit” action and press Enter. This puts the cursor in the upper half of the screen, where you can key in the system name. Continue using the arrow keys to move to other fields on the page.

Some fields allow a limited list of options. In the case of the “IP Config” field, the choices are “DHCP/Bootp,” “Disabled,” and “Manual.” Use the spacebar to cycle through the choices. If you want to statically configure an IP address, you must choose “Manual.”

Switch management


Points to ponder…


Points to ponder…

For the 4000 series devices, the menuinterface is very comprehensive. It is the most powerful interface the 4000 series has – it is more powerful than the Web interface. These switches do have a CLI but itsfunctionality is limited. The CLI is accessed from the Menu. Via the menu interface you can configure all the features that the switch has to offer. Although slightly different in structure from the Menu for the other switches, it is similar in that “*” indicates that a configuration change requires a reboot in order to take effect. There is also a reminder at the bottom of the screen informing you that the change you are about to make requires a reboot.



Menu interface (4000 series)


Menu interface4000 series

Menu interface is the default for the 4000/8000 series

The Main Menu gives you access to these console interface features:

Status and Counters: Provides access to display screens providing information on switch and port status, network activity, the address tables, and spanning tree operation.

Switch Management Access Configuration: Provides access to configuration screens that control interaction between the switch and network management, including IP address, SNMP community names and trap receivers, console/serial link parameters, and console passwords.

Switch Configuration: Provides access to configuration screens that enable you to display the current configuration settings and to customize the configuration of the switch features.


Diagnostics: Provides access to screens for doing link and ping connectivity testing, listing the current switch configuration, and to a command prompt for executing system management, monitoring, and troubleshooting commands.

Switch management


Reboot Switch: Performs a software reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up time to zero. A reboot is required (in one case) to activate a configuration change that has been made.


Logout: Terminates the console session and disconnects Telnet access to the switch.



Menu interface navigation (4000 series)


Menu interface navigation4000 series

Screen title – identifies the location within the menu structure

Parameter fields

Actions line

Navigation instructionsHelp line describing the selected action or selected parameter field

Menu interface screens include these three elements:

Parameter fields and/or read-only information such as statistics

Navigation and configuration actions, such as Save, Edit, and Cancel

Help line to describe navigation options, individual parameters, and read-only data

“Forms” design The configuration screens, in particular, operate like a number of PC applications that use forms for data entry. When you first enter these screens, you see the current configuration for the item you have selected. To change the configuration, the basic operation is to:

1. Press E to select the Edit action.

2. Navigate the screen, making all the necessary configuration changes using the TAB or arrow keys.

3. Press Enter to return to the Actions line. From there you can save the configuration changes or cancel the changes. “Cancel” returns the configuration to the values you saw when you first entered the screen.

Switch management


Setting manager and operator passwords (4000 series)


Setting manager and operator passwords4000 series

From the Main Menu select:2. Switch Management Access Configuration, then

5. Console Passwords

Navigating the 4000 series menu is slightly different. You can scroll to the desired action and press Enter, or you can enter the number of the desired action. When the number is entered, the menu automatically goes to the specified action. There is no need to press Enter.



The 4000 series CLI


The 4000 series CLI4000 series

From the Main Menu select 5. Diagnostics, then

4. Command Prompt

If no VLANs are configured, the command prompt appears near the bottom of the screen. For example:

DEFAULT_CONFIG:

Type in the command you want to execute and press [Enter]. For example, to set the time to 9:55 a.m. you would execute the following command:

DEFAULT_CONFIG: time 9:55

On the 4000 unit there are limited Command Mode commands. These are outlined on the next slide.

If VLANs are configured, you will see a prompt similar to the following: Select VLAN : DEFAULT_VLAN

Use the spacebar to select the VLAN in which you want to execute a command, then press Enter to display the command prompt. The text in the prompt will match the name of the VLAN you select.

Switch management


4000 series – some helpful CLI commands


4000 series - some helpful CLI commands4000 series

• Help - Shows help information about commands• Exit - Returns to the Diagnostics Menu• Browse - Displays the switch configuration in readable form• Config - Displays the switch configuration file stored in flash• Date - Displays or sets the date and time; to set: date mm/dd/yy• Time - Displays or sets the date and time; to set: time hh:mm:ss• Set - Configures some switch parameters; use “set help” for more

information• Show - Displays some switch settings; use “show help” for more

information• Delete (delete CONFIG ) - Deletes the configuration file stored in flash• History - Displays the switch shutdown history.• Kill - Kills all other active Telnet/console sessions• Ping ping <ip-addr> [count] [wait] - Sends IP ’Echo Request’ packets to

the device identified by <ip-addr>• Version - Displays the switch OS version• Vlan - vlan <vlan-name> - Changes the VLAN in which the commands

are executed

The CLI commands that are displayed depend on your current access level. The slide shows only a portion of the available CLI commands available.



Advantages of the menu interface


Advantages of the menu interface

• Provides quick,easy management access to a menu-driven subset of switch configuration and performance features

• Offers out-of-band access (through the RS-232 connection)• Enables Telnet (in-band) access to the menu functionality• Provides simple navigation

Provides quick, easy management access to a menu-driven subset of switch configuration and performance features:

IP addressing

System information

VLANs and GVRP

Passwords

Port Security

SNMP communities

Port and Static Trunk Group

Time protocols

Spanning Tree

Switch management


The menu interface also provides access for:

Setup screen

Switch and port statistic and counter

Event Log display displays

Switch and port

Reboots

Status displays

Software downloads

It also:

Offers out-of-band access (through the RS-232 connection) to the switch, so network bottlenecks, crashes, lack of configured or correct IP address, and network downtime do not slow or prevent access

Enables Telnet (in-band) access to the menu functionality

Allows faster navigation, avoiding delays that occur with the slower display of graphical objects over a Web browser interface

Provides more security configuration information, and passwords are not seen on the network



HP web browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


HP web browser interface2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

The HP web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. The switch must have an IP address.The web browser interface lets you do the following:• Make configuration changes to the switch • Maintain security by configuring usernames and passwords• Optimize your network uptime by using the Alert Log and other

diagnostic tools

Differing capabilities per switch: 4000 and 2500 units can’t do much: 5300 units can do more; and the 9300 series can do everything.

All HP ProCurve managed switches include a Web agent and are accessible through any computer that has a Web browser. The Web interface, which is available as soon as a switch is assigned an IP address, can be used to modify some elements of the switch’s configuration. However, it is most useful for monitoring switch operation because the display is dynamically updated.

Switch management


Starting the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series


Starting the browser interface2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

• Type the IP address (or DNS name) of the switch in the browser Location or Address field and press [Enter]

• The web browser interface automatically starts with the Status Overview



The port status indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


Port status indicators and legend2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

Port Connected – the port is enabled and is properly connected to an active network device.

Port Not Connected – the port is enabled but is not connected to an active network device. A cable may not be connected to the port, or the device at the other end may be powered off or inoperable, or the cable or connected device could be faulty.

Port Disabled – the port has been configured as disabled through the web browser interface, the switch console, or SNMP network management.

Port Fault-Disabled – a fault condition has occurred on the port that has caused it to be auto-disabled.

Switch management


The port utilization indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


• % Unicast Rx & All Tx: This is all unicast traffic received and all transmitted traffic of any type. This indicator (a blue color on many systems) can signify either transmitted or received traffic.

• % Non-Unicast Pkts Rx: All multicast and broadcast traffic received by the port. This indicator (a gold color on many systems) enables you to know “at a glance” the source of any non-unicast traffic that is causing high utilization of the switch.

• % Error Pkts Rx: All error packets received by the port (this indicator is areddish color on many systems).

The port utilization indicators and legend2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series



Creating usernames and passwords in the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


Creating usernames and passwords in the browser interface 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

Switch management


Advantages of web browser interface


Advantages of web browser interface

• Easy access to the switch from anywhere on the network• Familiar browser interface - locations of window objects

consistent with commonly used browsers,uses mouse clicking for navigation,no terminal setup

• Many features have all their fields in one screen so you can view all values at once

• More visual cues using colors, status bars, device icons, and other graphical objects instead of relying solely on alphanumeric values

• Display of acceptable ranges of values available in configuration list boxes



Points to ponder…


Points to ponder…

When installing a new switch you should configure an IP address and a default gateway and enable centralized time service. The IP address is required for remote access - the default gateway is to enable remote access from a different IP network. You should discuss with the network administrator their strategy for IP addressing and time service. Usually the network will rely on a DHCP to provide IP addresses, but this is generally not the best approach for switches. The network administrator may want to assign a reserved IP address (in the DHCP server) for the switch. You may have to tell the administrator the switch’s MAC address.Time service is used to synchronize events between switches.

Switch management


Statically defining an IP address and mask (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Statically defining an IP address and mask2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Edge_1# show running-configEdge_1#. . . vlan 1untagged 1-26 ip address bootp-dhcp

. . .

Edge_1# configEdge_1(config)# vlan 1 ip address 10.1.1.3/24Edge_1(config)# show running-config. . . vlan 1untagged 1-26 ip address 10.1.1.3 255.255.255.0

. . .

All ports are untagged members of VLAN 1

Default source for VLAN 1’s IP address is BOOTP/DHCP

IP address is now statically defined

Enter global configuration level and define address

IP address and mask may be statically defined at the CLI by entering the global configuration level

The slide demonstrates how to manually configure the IP address. Notice that by default the switch will get its IP address via DHCP. Also notice that in order to change the IP address we must get to interface context level. Actually in the slide we enter the “interface context” (vlan 1) and assign an IP address and a subnet mask (10.1.1.3/24) in the same command.



Defining the default gateway (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Defining the default gateway2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Edge_1# configEdge_1(config)# ip default-gateway 10.1.1.1Edge_1(config)# show running-config. . . ip default-gateway 10.1.1.1vlan 1untagged 1-26 ip address 10.1.1.3 255.255.255.0

. . .

The default gateway is a global configuration parameter

• Assignment of default gateway is a global configuration level parameter

• The default gateway must be a router interface that is local to (or in the same subnet as) the IP address you defined within the default VLAN

In this slide we manually assign a default gateway. Notice that we do not enter “interface context” to assign the default gateway. This is because the default gateway is a “global command.” There can be only one default for the switch.

Switch management


Using the Switch Setup menu to configure IP info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Using the Switch Setup menu to configure IP info 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

The Switch Setup menu provides the easiest way to assign IP addressing information and passwords. Enter the CLI command: setup

If you leave this screen using the “Save” action, the changes are saved to the startup configuration

IP information for VLAN 1

Default gateway applies to VLAN 1

We also could have assigned the IP address and the default gateway from the Switch Setup menu.



4000 series – configuring IP


4000 series - configuring IP4000 series

From the Main Menu select:2. Switch Management Access Configuration

1. IP Configuration

The Main Menu gives you access to these console interface features:

Status and Counters: Provides access to display screens providing information on switch and port status, network activity, the address tables, and spanning tree operation.

Switch Management Access Configuration: Provides access to configuration screens that control interaction between the switch and network management, including IP address, SNMP community names and trap receivers, console/serial link parameters, and console passwords.

Switch Configuration: Provides access to configuration screens that enable you to display the current configuration settings and to customize the configuration of the switch features.


Diagnostics: Provides access to screens for doing Link and Ping connectivity testing, listing the current switch configuration, and to a command prompt for executing system management, monitoring, and troubleshooting commands.

Switch management


Reboot Switch: Performs a software reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up time to zero. A reboot is required (in one case) to activate a configuration change that has been made.


Logout: Terminates the console session and disconnects Telnet access to the switch.



4000 series – IP configuration


4000 series - IP configuration4000 series

1. Press E to select Edit, then use the down arrow key (v) to select IP Config [DHCP/BOOTP].

2. Use the spacebar to display Manual for this field.

3. Press the down arrow key (v) to display the three IP configuration parameters and select the IP Address field.

4. Enter the IP address you want to assign to the switch.

5. Select the Subnet Mask field and enter the subnet mask for your network.

6. If you want to reach off-subnet destinations, select the Gateway field and enter the address of the gateway router for your subnet.

7. Press Enter, then S (for Save), then proceed with any other console tasks.

Switch management


Web interface configuring IP address


You can use the web browser interface to access IP addressing only if the switch already has an IP address that is reachable through your network:

Click on the Configuration tabClick on [IP Configuration]

Web interface configuring IP address

Web management becomes available as soon as an IP address is assigned to the switch.



Module 2 summary


Module 2 summary

In this module you learned:• How to use the management interfaces available on the

HP ProCurve switches• How to configure IP addressing and time service

parameters using the various interfaces• How to assign passwords to specify different access levels

Switch management



1. What is the most important difference between the operator level and the manager level on HP ProCurve switches?

............................................................................................................................

............................................................................................................................ 2. Configuration instructions issued at the CLI are dynamically written to:

a. The running configuration

b. The startup configuration

c. Both running and startup configurations

d. The firmware image 3. What steps are required to enable in-band management of an HP ProCurve

switch?

............................................................................................................................

............................................................................................................................

............................................................................................................................ 4. Which of the following configuration interfaces is most powerful or allows

you to control the full features of HP ProCurve switches?

a. CLI

b. Menu interface

c. Web interface

Rev. 4.21 HP Restricted 3 - 1

System information Module 3

Objectives This module reviews system information on HP ProCurve Networking products. After completing this module you will be able to:

Understand the meaning of switch and port LEDs

View and manipulate system files

View and manipulate configuration files

Upgrade the system firmware

Use the 9300 series boot monitor


3 - 2 HP Restricted Rev. 4.21

HP ProCurve accessories: LEDs


HP ProCurve accessories: LEDs

• On all HP ProCurve switches, LEDs indicate the state of the switch and individual ports

• Generally there are two classes of LEDs:– Switch LEDs indicate the status of features that impact

operation of the switch:• Status of power supply• Status of fans• Status of diagnostics

– Module LEDs indicate the status and/or activity of specific ports, such as:• Duplicity• Activity• Speed

When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test, as described in the manual for your switch.


System information


Switch LEDs (2500, 2800, 4100gl, 5300xl series, 6108)


Switch LEDs2500, 2800, 4100gl, 5300xl series, 6108

Normal – switch not undergoing self-testSelf-test/initialization in progressA component of the switch has failed its self- test

OffOn

Blinking

Self Test(green)

Port Mode LEDs are displaying network activity Port Mode LED – lit for ports in Full Duplex ModePort Mode LED – lit for ports operating at 100MbpsPort Mode LED – lit indicate operator attention required

ACTFdx

10/100/100!

Mode Select(3 or 4 LEDs)

Cooling fan is operationalCooling fan has failed – Switch fault LED also blinking

On Blinking

Fan Status(green)

Normal stateFault has occurred on switchA component has failed self-test – check other LEDs

OffBlinking

On

Fault(orange)

Switch is receiving powerSwitch is not receiving power

OnOff

Power(green)

MeaningStateLED

As described in the next two slides, there are LEDs on the switch chassis and on the switch modules that keep you informed of the status of the switch and the network connections.

The self-test passes if the Fault and Self Test LEDs on the front of the switch go off after approximately 90 to 150 seconds, depending on the number and type of modules installed in the switch. If these LEDs stay on longer than 180 seconds or begin flashing, the switch, or a module, or an individual mini-GBIC may have to be replaced as indicated by the LEDs.

There are LEDs that provide information for each port on the link status, network activity, connection bandwidth (speed), communication mode (half- or full-duplex), and presence of specific network error packets on the port.

When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test.



Port LEDs: 2500, 2800, 4100gl, 5300xl series, 6108


Port LEDs2500, 2800, 4100gl, 5300xl series, 6108

Displays network activity information, or whether the port is configured for Full Duplex operation or 100 Mbps operation, depending on the mode selection

Mode

Port enabled and receiving ‘link’ signal• No active network cable is connected to the port• The port is not receiving link beat or sufficient light• The port has been disabled through managementFailed self-test – Fault LED also blinking

OnOff

Blinking

Link

MeaningStateLED

The port LEDs provide information about the individual switch ports. The operation of the mode LED is controlled by the LED Mode Select button on the switch chassis, and the current selection is indicated by the mode indicator LEDs near the button. Press the button to change from one mode to the next.

System information


Switch LEDs (2600)


Switch LEDs2600

Connected to HP 600 RPS/EPS – receiving PoE power.The HP 600 RPS/EPS unit has experienced a faultSwitch is not connected to an HP 600 RPS/EPS

OnBlinking

Off

EPS Status(green)

‘PoE only’

Cooling fan is operationalCooling fan has failed – Switch fault LED also blinking

On Blinking

Fan Status(green)

Normal – switch not undergoing self-testSelf-test/initialization in progressA component of the switch has failed its self-test

OffOn

Blinking

Self Test(green)

Normal operation; HP 600 RPS/EPS operating correctlyHP 600 RPS/EPS unit experienced a faultHP 600 RPS/EPS is not connected or is not powered

OnBlinking

Off

RPS Status(green)

‘PoE only’

Normal stateFault has occurred on switchA component has failed self-test – check other LEDs

OffBlinking

On

Fault(orange)

Switch is receiving powerSwitch is not receiving power

OnOff

Power(green)

MeaningStateLED



Port LEDs (2600)


Port LEDs2600

2626-PWR and 2650-PWR

2626 and 2650Depending on mode: displays port link info, network activity, duplex operation, speed

Port

Depending on mode: displays port link info, network activity, duplex operation, speed

Mode

Dual-personality ports:“T” is on – 10/100/1000Base-T – RJ45 port connected“M” is on – mini-GBIC port enabled

OnT/MAll switches

Port enabled and receiving ‘link’ signal• No active network cable is connected to the port• The port is not receiving link beat or sufficient light• The port has been disabled through managementFailed self-test – Fault LED also blinking

OnOff

Blinking

Link

MeaningStateLED

For the non-PWR switches, there is a single LED per port. The operation of this LED is controlled by the Port LED View select button, and the current setting is indicated by the Port LED View indicator LEDs near the button. Press the button to step from one view mode to the next. The default view is Link.

For the PWR switches, there are two LEDs per port. The Link status is always shown by the Link LED. The operation of the Mode LED is controlled by the LED Mode select button, and the current setting is indicated by the LED Mode indicator LEDs near the button. Press the button to step from one view mode to the next. The default mode is Activity.

System information


Switch LEDs (9300 series)


Switch LEDs9300 series

• Each management module is equipped with an LED indicating if it is active (LED is lit) or in back-up mode

• Each management module is equipped with an LED indicating if it is powered (LED is lit)

• Each power supply has an LED indicating that it is receiving power




Port LEDs (9300 series)


Port LEDs9300 series

Traffic is being transmitted and received on that port

BlinkingNo traffic is being transmittedOff


OnBottomActivityNo port connection existsOffPort is connectedOnTopLink

MeaningStatePositionLED


Blinking

The port is operating at half-duplexOffThe port is operating at full-duplexOnRightFDX

No port connection existsOffPort is connectedOnLeftLink/activity

MeaningStatePositionLED

Port LED indicators for 100Base-FX, 1000Base-SX/LX, and 1000Base-T LEDs

Port LED indicators for 10Base-T/100Base-TX ports

Each 9300 series device is equipped with LEDs that denote port and power supply status. The slide reflects the different port and expansion module port states.

System information


Points to ponder…


Points to ponder!…

Upgrading a switch’s firmware, replacing a switch or a module, and adding a new switch to the network are some of the tasks you will regularly be asked to perform.Typically, when inserting a switch or replacing a switch it will be advantageous to copy the startup-configuration file from an existing switch to the new switch. If a switch has multiple flashes, then the flashes can be used to ensure that a firmware or configuration upgrade is working properly before making the new code the default operating code. We now discuss some approaches to make these tasks a little easier.



HP ProCurve Switch configuration file manipulation


HP ProCurve Switch configuration file manipulationEach switch maintains two configuration files:the running-config file and the startup-config file• Running-config resides in volatile memory• Startup-config resides in non-volatile memory (flash)• 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series

also have a secondary flash

The running-config file exists in volatile memory and controls switch operation. If no configuration changes have been made in the CLI since the switch was last booted, the running-config file is identical to the startup-config file.

The startup-config file exists in flash (non-volatile) memory and is used to preserve the most recently saved configuration as the “permanent” configuration. Rebooting the switch replaces the current running-config file with a new running-config file that is an exact copy of the current startup-config file.

System information


CLI: viewing configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


• HPswitch(config)# show config – Displays a listing of the current startup-config file

• HPswitch(config)# show running-config – Displays a listing of the current running-config file

• HPswitch(config)# show config status – Compares the startup-config file to the running-config file

and indicates if they are synchronized

To reset the startup-config and running-config files to the factory default configuration:

HPswitch(config)# erase startup-configConfiguration will be deleted and device rebooted, continue [y/n]

CLI: viewing configuration files2500, 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series

Several commands enable you to determine the switch’s configuration status. These commands are:

show config status, which displays information about differences between the running configuration and the startup configuration.

show run, which displays the current running configuration.

show config, which displays the current startup configuration.

The write memory command copies the running configuration in RAM over the startup configuration stored in flash memory. A reboot is required to copy the startup configuration into RAM. When you restart the switch, it compares running and startup configurations and gives you an opportunity to save the running configuration before rebooting.

If the switch is to be redeployed, it is often advisable to remove the existing configuration and return the system to default settings using erase startup-config.



Configuration flow commands (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Configuration flow commands2500, 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series

Console

Running memory

Flash memory

xx xx xx xxxxxx xxx xxxx xx xx xxxxxx xxx


show running(write term)

show sta

rtup-c

onfig

write memreload

erase startup-config

The show running or write term command displays the current running-config information.

The write mem command causes the current running-config in volatile memory to be copied to the startup-config in flash.

The reload command causes a warm reboot using the startup-config that is stored in flash.

The show config command displays the startup-config that is currently in flash.

The erase startup-config command erases the startup-config file from flash.

System information


Saving configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Saving configuration files2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• Making one or more changes to the running-config file creates a new operating configuration

• Saving a new configuration means to overwrite (replace) the current startup-config file with the current running-config file

• There are three ways to save a new configuration:– CLI: Use the ‘write memory’ command. This overwrites the current

startup-config file with the contents of the current running-config file.– Menu interface: Use the ‘save’ command. This overwrites both the

running-config file and the startup-config file with the changes you have specified in the menu interface screen.

– Web browser interface: Use the [Apply Changes] button or other appropriate button. This overwrites both the running-config file and the startup-config file with the changes you have specified in the web browser interface window.

When you make changes to the switch’s configuration, the changes are immediately executed and stored in dynamic memory. The configuration in RAM is called the running configuration. When the switch is rebooted, everything in dynamic memory is lost, so changes must be written to non-volatile memory. The command for saving configuration information is write memory. Like many other CLI commands, it can be shortened. This command can be entered from the manager, global configuration, or any context configuration level.

The configuration information that is stored in flash memory and used at boot time is called the startup configuration. Note that using the CLI instead of the menu or Web browser interface gives you the option of changing the running configuration without affecting the startup configuration. This allows you to test the change without making it “permanent.” When you are satisfied that the change is satisfactory, you can make it permanent by executing the write memory command.



File transfer


File transfer

Some reasons for transferring files between a Trivial File Transfer Protocol (TFTP) server and HP ProCurveswitch are to:

– Back up the switch’s running configuration to a TFTP server– Restore the configuration to a switch by copying a

configuration file from a TFTP server to the startup configuration

– Back up the switch’s current firmware to a TFTP server– Update the switch’s firmware with a new file downloaded from

the HP ProCurve Web site– Copy output from a command – such as show tech – to a file

A TFTP server is commonly used to upload or download executable images and configurations to or from switches.

System information


Saving the running configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Saving the running configuration file 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

TFTP server10.1.1.20

running configuration



startup configuration

copy run tftp 10.1.1.20 core_1\092403_tms.cfg

Core_1

As shown here, the process for backing up the current configuration of an HP ProCurve switch is a simple matter of copying the configuration to a TFTP server using a copy command at the CLI.

The example in the slide shows the command for copying the running configuration, which is identified by the run parameter. However, the same command could be used to copy the startup configuration by simply substituting star for run. Note that the filename for the backup copy includes the date of the backup and the initials of the administrator backing up the configuration.

When you are backing up multiple switches to a single TFTP server, it is recommended that you create a folder for each switch on the TFTP server, as shown here.



Saving the startup configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Saving the startup configuration file2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

TFTP server10.1.1.20 running

configuration




Core_1

copy startup tftp 10.1.1.20 core_1\092403_tms.cfg

This command is similar to the one on the previous slide, but now we are backing up the startup configuration file instead of the running configuration file. This is useful if you want to save the current startup configuration if you are about to do a write memory, which would save a new version of the startup configuration.

The example in the slide shows the command for copying the startup configuration, which is identified by the startup parameter. Note that the filename for the backup copy includes the date of the backup and the initials of the administrator backing up the configuration.

When you are backing up multiple switches to a single TFTP server, it is recommended that you create a folder for each switch on the TFTP server, as shown here.

System information


Restoring configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Restoring configuration information2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

TFTP server10.1.1.20 running

configuration




Core_1

copy tftp star 10.1.1.20 core_1\092403_tms.cfg Restoration may be required due to:

• Incorrect or inconsistent behavior after configuration change

• Hardware failure and replacement• Rollback to previous version of

system imageSystem must be rebooted after copy

To restore configurations from a TFTP server, administrators use the same CLI copy command they use to back up configurations. Only a few parameters are different.

A restore command is shown in the slide. Note that the first parameter—tftp—indicates that the configuration should be copied from the TFTP server and that the second parameter—star—indicates it should be copied to the switch’s startup configuration. In the backup command, the configuration to be copied is the first parameter, and the TFTP server is second. In both cases, the IP address specifies the TFTP server, not the switch.

This command can be used to restore an earlier configuration version to a switch or can be used to install a configuration on a new switch.

Follow these steps to restore the configuration of the original switch:

1. Copy the current configuration to the TFTP server for analysis using the command on the previous page.

2. Copy the backup configuration file from the TFTP server archive using the command above.

The switch will reboot.



Follow these steps to install the configuration on a new switch:

1. Configure the IP addressing information on the new switch. This will enable it to contact the TFTP server where the configuration resides.

2. Use the command on the slide to copy the configuration to the switch’s startup configuration area.

The switch will reboot.

System information


Displaying flash info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Displaying flash info2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Shows version of OS in secondary flash

The unequal code size and different dates indicates twodifferent versions of OS s/w

This slide displays the commands necessary to determine the current version of images stored in flash memory and to determine which image the switch is currently using as its boot image. In this example, both stored images are the same. However, each flash memory area could contain a different image, enabling administrators to restore earlier versions if necessary. Note that the show flash command displays the boot ROM version as well as information about the current boot image.



Copying firmware from a TFTP server (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Copying firmware from a TFTP server2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

TFTP server10.1.2.7



Secondary flash

Primary flash

copy tftp flas

h 10.1.2.7 G_04_05.bin primary

copy tftp flash 10.1.2.7 G_04_05.bin secondary

4100, 5300, 2600, 2800 and 9300 series switches

The operating system for HP ProCurve switches is contained in a software image file. While all switches ship with firmware installed, HP occasionally issues new firmware versions to support new features or to improve switch performance.

As shown above, most HP ProCurve switches feature two flash memory areas—called primary and secondary—where firmware images can be stored. Because the two areas can store different images, administrators can back up a current firmware version before installing a new one. This enables the administrators to restore the switch’s earlier functionality if the new firmware proves unsuitable.

Note The HP ProCurve Switch 2500 Series maintains only one firmware image.

The copy tftp flash command copies a binary from the server to the switch.

System information


Flash file manipulation (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Flash file manipulation2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

To copy an OS image from one flash to another:HPswitch# copy flash flash <destination flash>

Copies the image in secondary flash to primary flash

When you copy the flash image from primary to secondary, or vice versa, the switch overwrites the file in the destination location with a copy of the file from the source location. This means you do not have to erase the current image at the destination location before copying in a new image.

Verify that there is an acceptable OS image in the source flash location from which you are going to copy. Use the show flash command to verify an acceptable OS image. Attempting to copy from a source image location that has a corrupted flash image overwrites the image in the destination flash location. In this case, the switch will not have a valid flash image in either flash location, but will continue running on a temporary flash image in RAM. Do not reboot the switch. Instead, immediately download another valid flash image to primary or secondary flash. Otherwise, if the switch is rebooted without an OS image in either primary or secondary flash, the temporary flash image in RAM will be cleared and the switch will go down.



Booting from an alternate image source (2600, 2800, 4100gl, 5300xl series, 6108)


To boot from a specified flash immediately: HPswitch# boot system flash < primary | secondary >

The switch will reboot immediately with no warning

To modify the configuration file to boot from a specific flash in the future:

HPswitch(config)# boot system flash < primary | secondary >

The 9300m switch also supports booting from TFTP servers. All you need is the IP address of the TFTP server and the image file name. For example:

HPswitch(config)# boot system tftp 10.1.2.3 h2r07504.bin

Booting from an alternate image source2600, 2800, 4100gl, 5300xl series, 6108

With the primary/secondary flash option you can test a new image in your system without having to replace a previously existing image. You can also use the image options for troubleshooting. For example, you can copy a problem image into secondary flash for later analysis and place another, proven image in primary flash to run your system. The switch can use only one image at a time.

System information


Updating the system image (4100gl, 5300xl series, 9300 series)


Updating the system image4100gl, 5300xl series, 9300 series

1. Download new firmware from Website and extract the image file.

10.1.2.3

2. Enable TFTP server.

Primary flash

Secondary flash

copy tftp flash 10.1.2.3 h2r07504.bin secondary

boot system flash secondary3. Access routing

switch via directconnection, Telnet,or Web. Copynew firmwareand reload. copy flash flash primary

4. Verify proper operation of the routing switchand copy to primary flash

The latest firmware images for all HP ProCurve switches are available from the HP ProCurve Web site at http://www.hp.com/rnd/software/switches.htm. The HP ProCurve site also includes a link for requesting email notification when new firmware is released.

As this slide illustrates, new firmware is first downloaded to a user’s PC, then extracted from a compressed archive. The file is then copied to a TFTP server for distribution to the switches. Steps 3 and 4 show the commands necessary to install the firmware on the switch.

Note that you can test a new firmware version by booting the switch from an image held in secondary flash memory.

After the switch’s operation is verified, the image can be copied to primary memory. The switch must be rebooted to activate the firmware. However, the firmware installation does not force a reboot.



Updating the system image (4000 series)


Updating the system image4000 series

In this slide, C.09.19 is the version of firmware that is currently running on the switch. You will specify the IP address of the TFTP server and the file name of the new firmware that you want to download to the switch. Note that the firmware file either must be in the default TFTP folder or you must specify a folder as part of the file name.

System information


Viewing system information (4000 series)


Viewing system information4000 series



The boot monitor (9300 series)


The boot monitor9300 series

Router_A# reloadM2 BI Boot Code Version 07.00.05Enter ‘b’ to go to boot monitor …BOOT MONITOR> ?

resetboot system flash primaryboot system flash secondaryboot system bootpboot system tftp 1.2.3.4 file nameip address 1.2.3.4 255.255.255.0 ip address 1.2.3.4/24 ip default_gateway 1.2.3.1ping 1.2.3.4

The boot monitor allows you to manually intervene in the boot process. The following commands are available at the boot monitor:


Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The slide displays examples of the options available at the boot monitor.

System information


Boot the switch from a TFTP server (9300 series)


Boot the switch from a TFTP server9300 series


BOOT MONITOR> ip address 10.1.2.1/24BOOT MONITOR> ping 10.1.2.1BOOT MONITOR> ping 10.1.2.3BOOT MONITOR> boot system tftp 10.1.2.3 h2r07054.bin

The boot monitor allows you to interrupt the boot sequence and boot the system from an alternate location.

If both primary and secondary flash images are corrupted, the system will be unable to boot without intervention. You can recover from this problem by booting from a system image file stored on a TFTP server.

The first step is to enter the boot monitor. In this mode, the startup configuration has not been executed, and thus the routing switch doesn’t have an IP identity. To enable the routing switch to request the system image file from the TFTP server, you must enable IP on the switch by supplying a box-wide IP address and mask.

If the TFTP server is on another network, use the IP default-gateway command to define the address of the default gateway on the switch’s local network.

When the system boots, it will automatically execute the startup configuration, if one exists in flash memory. As soon as possible, you should copy a valid image to the primary and secondary flash areas using the copy tftp flash command.



show tech command (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


show tech command2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• The show tech command outputs operation and configuration details from several internal switch sources, including:

• Image stamp• Running configuration• Event log• Boot history• Port configuration and status • IP routes• VLAN information• GVRP support• Load balancing – static and dynamic trunks

• Runs from manager level only• High-volume output – best to capture to a file

Executing show tech outputs a data listing to your terminal emulator. However, using your terminal emulator’s text capture features, you can also save show tech data to a text file for viewing, printing, or sending to HP ProCurve Support. You can send the output to a TFTP server (discussed in Module 4) or, optionally, you can capture the command output to a file using terminal emulation features or Microsoft Notepad.

System information


Copying command output to a file


Copying command output to a file

5300

9300

– The output from any CLI command can be copied to a file on the TFTP server. This is especially useful when used with show tech:

HP5300(config)# copy command-output ‘show tech’ tftp 10.1.2.3 Core_2.txt

Copies the output of the show tech command to a file named Core_2.txt at the TFTF Server at 10.1.2.3

– Output from the show tech command can be put to a file using the terminal emulation file capture facility



Putting system info to a file (4000 series)


Putting system info to a file4000 series

This slide shows putting output from a command to a remote file on the HP ProCurve 4000 series.

System information


Module 3 summary


Module 3 summary

In this module you learned:• The meaning of the switch and module LEDs• How to manipulate the system and configuration files• How to boot the switch from an alternate system image• How to copy output from a command to a file on a remote

device

System information



1. How would you store several versions of configuration information for a particular switch?

............................................................................................................................

............................................................................................................................ 2. What is the difference between the output of the show flash command and

the output of the show version command?

............................................................................................................................

............................................................................................................................ 3. What methods are available for upgrading the software images on most HP

ProCurve switches?

a. TFTP file transfer

b. Web browser download

c. XMODEM serial transfer through console port


•

•

•

•

Verification toolbox Module 4

Objectives This module discusses the features and functions of the verification toolbox.

After completing this module you should be able to:

Configure time synchronization

View event logging

Send events to a syslog server

Configure SNTP

Configure CDP

Use diagnostic tools, including:

Ping

Link test

Show tech

Traceroute



Points to ponder…


Points to ponder…

The first thing we talk about is time service. You can have each switch keep its own time,but using a centralized clock is a better approach, especially in larger networks.

The advantage of a centralized time service is that events across the network are synchronized, so when you have to debuga network problem you can determine therelative status of each switch with regard to a normalized time reference. The two centralized time services are Simple Network Time Protocol (SNTP) and TimeP.

You should check with the site network administrator to determine what time service they use and the location of the centralized time server – that is, its IP address.

Verification toolbox


Time synchronization protocols


Time synchronization protocols

HP ProCurve switches support two time synchronization protocols:• IP Time Protocol (TimeP), the default, allows you to:

– Manually designate a TimeP server by its IP address, or– Dynamically obtain the IP address of a TimeP server

• Simple Network Time Protocol (SNTP) allows you to:– Manually designate SNTP servers, known as “Unicast” mode – Dynamically obtain the IP address of a preferred SNTP server

by listening to broadcasts, known as “Broadcast” mode

HP ProCurve switches support two time-synchronization protocols: IP Time Protocol (TimeP) and Simple Network Time Protocol (SNTP). TimeP is the default time protocol, but it is not automatically active when the switch is set to factory defaults. To enable TimeP, you must select a TimeP mode. The three mode choices are manual, DHCP, and disabled. By default, the mode is disabled. If you choose manual mode, you must supply the IP address of a TimeP server. If the switch normally uses DHCP for IP addressing, you can select DHCP mode to enable it to receive the time server information from the DHCP server. However, this will probably require a modification to the scope configured on the DHCP server.

SNTP can be configured for unicast or broadcast mode. In broadcast mode, the switch will obtain time information from the first SNTP server that issues a broadcast advertising the service. The switch will reject all other SNTP advertisements unless it doesn’t receive an update in three times the poll interval. If the switch is configured for unicast mode, you must supply the IP address of an SNTP server.



Configuring SNTP parameters (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Configuring SNTP parameters2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

SNTP server10.1.2.7

Edge_1(config)# timesync sntpEdge_1(config)# sntp broadcast Edge_1(config)# sntp server 10.10.2.7Edge_1(config)# sntp server 10.1.2.5Edge_1(config)# sntp 720

SNTP server10.10.2.7

Edge_1 10.50.67.3

• This switch specifically requests time updates from the server specified first in its configuration

• If the server does not reply within 3 times the polling interval (720 seconds), the switch sends a request to the second server

• Up to 3 SNTP servers canbe specified

This slide illustrates the steps for configuring an HP ProCurve switch to obtain time information from SNTP servers. Note that the command sequence specifies two SNTP servers. The sntp 60 command instructs the switch to poll the time server every 60 seconds. If the switch does not receive a reply from the first server within three polling intervals, it will request time information from the second server. The default polling interval is 720 seconds.



Time zone and manual time setting (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Time zone and manual time setting2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• The time zone is represented in minutes. For example, a time zone 7 hours west of GMT would be indicated as:

Edge_1(config)# time timezone -480

• The date and time can be set manually; for example:Edge_1(config)# time 09/30/2003 08:00:00

• To display the current system time, use one of the following commands:

Edge_1# time

Fri Dec 12 08:28:18 2003

Edge_1# show time

Fri Dec 12 08:28:18 2003

By default, HP ProCurve switches will report time in Greenwich Mean Time (GMT). As shown here, administrators can change to the local time zone using the time command with the timezone parameter and a time zone differential—the difference between the local time zone and GMT—that is entered in minutes.

On networks where time services are not available, administrators can use the time command to set the time manually, as shown here. Time settings defined in this way will survive when an HP ProCurve switch is restarted. However, they will not survive loss of power.

To learn the current time setting of an HP ProCurve switch, enter show time or enter the time command without any parameters.



Menu: configuring time protocol (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Menu: configuring time protocol2500, 2600, 2800, 4100gl, 5300xl series, 6108

From the main menu, select: 2. Switch Configuration...

1. System Information

Time Protocol Selection Parameter

– TIMEP– SNTP– None

By pressing the spacebar you can scroll through the Time Sync Methods available (TIMEP, SNTP, None). For each Time Sync Method there is an associated mode.

Next, enter the mode:

SNTP mode options are disabled, broadcast, unicast

TIMEP mode options are disabled, DHCP, manual



Menu: configuring time protocol (4000 series)


Menu: configuring time protocol4000 series

From the Main Menu, select: 2. Switch Management Access Configuration

1. IP Configuration

Time Protocol Selection Parameter

– TIMEP– SNTP– None

UnicastBroadcastDisabled



Points to ponder…


Points to ponder!…

From time to time things do break. Fortunately, HP ProCurve switches have several built-tools that can help you isolate and identify problems. Occasionally, even with these tools you will not be able to resolve the problem. For these instances HP ProCurveprovides mechanisms so that you can capture the state of a switch onto a file that you can forward to HP Customer Support. They’re there to help you out and they WILL be able to resolve the issue. Typically, to capture this file you must work with the network administrator. The NA should be able to tell if there is a server set up to capture the info and the IP address of the server. If not, you need to work with the NA to set up a server.



Event log system (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


Event Log system2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

• The switch automatically records the occurrence of system events in an Event Log that resides in dynamic memory

• This volatile memory does not survive reboots• Also, this memory is very limited, and once the memory is

filled, new events overwrite the existing memory-residentinformation

• The switch’s Event Log records switch-level progress, status, and warning messages

The switch’s event log records switch-level progress, status, and warning messages. Typically, these messages are stored in the switch’s volatile memory and are lost upon a reboot. Also, only a relatively small number of events are captured before wrapping happens and measures are lost. For these reasons it is advisable to collect selected events on a remote device.



Event


Event

• An event is any significant occurrence within or affecting the system, such as an alarm, error condition, network problem, task completion, threshold breach, or status change

• The Event Log is stored in nonvolatile memory• You can also specify that certain events trigger a console

message, a syslog record, or an SNMP management system trap

• Event attributes include class and severity level

HPswitch# show logging

Displays the system Event Log since the last boot

The show logging command (shortcut: sh log or log) displays events recorded since the switch’s most recent reboot. Each entry in the event log includes one of four possible severity levels: warning, information, major, or debug.

Note The 9300 units actually support eight code levels: A=alert, C=critical, D=debugging, M=emergency, E=error, I=informational, N=notification, and W=warning.

Also displayed is a description of the software module, such as “Slot B,” that registered the event for each module.

Note The switch’s time should be set, and a centralized time protocol should be used to coordinate events.



Show logging


Show logging

5300

9300

This is the output of show logging on 5300 and 9300 switches. Although structured a little differently, the information is consistent. Also, note the time of the events. Obviously, time has not been set on the switches and/or there is no centralized time service configured. Because of the lack of synchronized time it would be difficult to associate how the individual switches reacted to a specific network event, such as a link going down.



The Debug/System-Logging (syslog) system


The Debug/System-Logging (syslog) system• Provides a mechanism for sending events to a remote

destination supporting syslogD services• Also provides a mechanism for sending other messages

indicating network-level problems such as routing mis-configurations and other network protocol details to the remote destination

• These messages can be used to monitor the state of the system and to help in debugging system problems

• You can configure the switch to send these (debug) messages to these destinations:

• Up to six Syslog servers• A CLI session

Debug/System-Logging (Syslog) is a client-server logging tool that allows a client switch to send log messages to a networked device operating with Syslog server software. Messages sent to a Syslog server can be stored to a file for later debugging analysis. Effective use of this option requires that you set up a Syslog server application on a networked host accessible to the switch.

While the switch’s event log records switch-level progress, status, and warning messages, Syslog provides a method for recording messages you can use to help in debugging network-level problems, such as routing misconfigurations and other network protocol details. Debug enables you to specify the types of event notification messages to send to external devices. Debug messaging reports on these event types:

ACL “deny” matches.

Selected IP routing events.

Events that generate messages for the switch’s event log. You can configure the switch to send debug messages to these destinations:

•

•

Up to six Syslog servers

A CLI session through any one of the following:

Direct RS-232 console

Telnet

SSH



Defining a SyslogD server


Defining a SyslogD server

Switch_A1(config)# logging 10.1.20.10Switch_A1(config)# debug all

IP host 10.1.20.10/24running syslogD services

Syslog messages will be dynamically copied to a log file on this server

Up to 6 syslog servers may be defined

After you use the logging < ip-addr > command to configure at least one Syslog server IP address in the switch configuration, this command disables or reenables Syslog logging to the configured Syslog server(s). When Syslog logging is enabled, the switch sends the debug message types (specified by the debug < debug-type > command) to the configured Syslog server(s). You can use this option only when one or more Syslog server IP addresses are already configured in switch memory.



Enabling Debug/System Logging – 2500, 2600, 2800, 4100gl, 5300xl series, 6108


Enabling Debug/System Logging 2500, 2600, 2800, 4100gl, 5300xl series, 6108

• Enable Syslog logging (up to 6 Syslog servers can be specified):• HPswitch(config)# Logging <ip-addr>• Switch begins sending Event Log message to Syslog server(s)

• To send other notification to the Syslog server(s), use the “debug”command:

• HPswitch# Debug <debug-type>

• To disable Syslog logging without deleting the server addresses, use this command:

• HPswitch# No debug destination logging

• To send notifications to a CLI session, use this command:• HPswitch# Debug destination session

These are samples of the commands to enable logging events to a remote syslog server.



Debug command (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Debug command2500, 2600, 2800, 4100gl, 5300xl series, 6108

DEBUG enables you to specify the types of notification messages to send to external devicesDEBUG < debug-type > • EVENT

• Configures the switch to send Event Log messages to the configured debug destination(s)

• IP/OSPF • Enables all IP/OSPF message types for the configured debug

destination(s)• ACL

• When a match occurs on an ACL "deny" Access Control Entry (with log configured), the switch sends an ACL message to the configured debug destination(s)

• ALL• Configures the switch to send all debug types to the configured debug

destination(s)

Debug types:

[no] debug < debug-type >

EVENT – Configures the switch to send event log messages to the configured debug destination(s).

IP/OSPF – Enables all IP/OSPF message types for the configured debug destination(s).

ACL – When a match occurs on an ACL “deny” Access Control Entry (with log configured), the switch sends an ACL message to the configured debug destination(s).

ALL – Configures the switch to send all debug types to the configured debug destination(s).



Messaging structure (2500, 2600, 2800, 4100gl, 6108)


The “debug” command performs two main functions:• Specifies the type(s) of event messaging to send to a destination• Specifies the destination(s) of the selected message types

Messaging structure2500, 2600, 2800, 4100gl, 6108

This slide shows the structure of the events that can be logged and the possible destination for the events. Notice that there are no IP routing protocol events associated with these switches.



Messaging structure (5300xl series)


Messaging structure5300xl series

The “debug” command performs two main functions:• Specifies the type(s) of event messaging to send to a destination• Specifies the destination(s) of the selected message types

This shows the structure of the events that can be logged and the possible destination for the events for the 5300 series. Notice that there are IP Routing protocol events associated with the 5300 series switches.



Event logging (4000 series)


From the Main Menu select:2. Switch Management Access Configuration, then

4. Console/Serial Link Configuration

Event logging4000 series

To change the severitylevel for eventsdisplayed in the EventLog, change this setting

For the 4000 series, event logging is configured via the Console/Serial Link Configuration menu. The options for Displayed Events are All, Critical, Debug, Not INFO, and None.



View the event log (4000 series)


View the Event Log4000 series

This shows the output of “Event Log” on the 4000 series. The output is similar to the output on the HP ProCurve switches. Again, note that the time has not been set.



Event logging (9300 series)


The Routing Switch records the occurrence of system events in a log that resides in dynamic memory. To display the log entries, issue the following command:

HP9300> show loggingSyslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)Buffer logging: level ACDMEINW, 3 messages loggedlevel code: A=alert C=critical D=debugging M=emergency E=errorI=informational N=notification W=warningStatic Log Buffer:Dec 15 19:04:14:A:Fan 1, fan on right connector, failedDynamic Log Buffer (50 entries):Dec 15 18:46:17:I:Interface Ethernet 1/4, state upDec 15 18:45:21:I:Bridge topology change, vlan 4095, interface 4, changedstate to forwardingDec 15 18:45:15:I:Warm start

Event logging9300 series

Static Log Buffer logs power supply failures, fan failures, and temperature warning or shutdown messages.

Dynamic Log Buffer logs all other message types.

In the static log, new messages replace older ones, so only the most recent message is displayed. For example, only the most recent temperature warning message will be present in the log. If multiple temperature warning messages are sent to the log, the latest one replaces the previous one. The static buffer is not configurable. The message types that appear in the static buffer do not appear in the dynamic buffer. The dynamic buffer contains up to the maximum number of messages configured for the buffer (50 by default), then begins removing the oldest messages (at the bottom of the log) to make room for new ones.

When you clear log entries, you can selectively clear the static or dynamic buffer, or you can clear both. For example, to clear only the dynamic buffer, enter the following command at the privileged EXEC level:

HP9300# clear logging dynamic-buffer

Syntax: clear logging [dynamic-buffer | static-buffer]

You can specify dynamic-buffer to clear the dynamic buffer or static-buffer to clear the static buffer. If you do not specify a buffer, both buffers are cleared.



Message levels (9300 series)


Message levels9300 series

A=alert; C=critical; D=debugging; M=emergency; E=error; I=informational; N=notification; W=warning• Alerts

– Power supply failed– Fan failed– Management module state change– Temperature warning– More power needed for modules inserted

• Warnings– NTP server failed to respond

• Notifications– Module inserted/removed into/from slot– VRRP interface state change

• Informational– Device has been powered on– Login to (Logout out from) User Exec– Login to (Logout out from) Priv Exec– Interface state change– Bridge root change– Bridge topology change

Only “Alert,” “Warning,” “Notification,” and “Informational” messages are logged by default.



Configuring Syslog using CLI (9300 series)


Configuring Syslog using CLI9300 series

• Enable Syslog logging of all severity level in the local Syslog buffer:• HP9300(config)# Logging on

• To send notifications to Syslog server(s):• HP9300(config)# Logging <ip-addr>• Up to six Syslog servers can be defined

• To disable logging of “debugging” and “informational” messages:• HP9300(config)# No logging buffered debugging• HP9300(config)# No logging buffered informational

• To view recorded log messages since last reboot use:• HP9300> show logging

These are samples of the commands to enable logging events to a remote syslog server.



Simple Network Management Protocol (SNMP)


• HP ProCurve switches can be managed from a network management application such as HP OpenView via SNMP

• HP ProCurve switches also provide support for RMON agent statistical sampling for easy-to-use traffic monitoring and network activity analysis

Simple Network Management Protocol (SNMP)

To implement SNMP management, the switch must have an IP address, configured either manually or dynamically (using DHCP or Bootp). If multiple VLANs are configured, each VLAN interface should have its own IP address.



Configuring SNMP


Configuring SNMP

• Configure the appropriate SNMP communities– The “public” community is a read-only community that exists

by default and is used by the HP network management applications

– To issue set commands to the switch, a “private” read/write community must be created

• Configure the appropriate traps to transmit and trap receivers

The public community exists by default and is used by HP network management applications. Deleting the public community disables many network management functions (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting). If security for network management is a concern, it is recommended that you change the write access for the public community to Restricted.



Defining an SNMP read/write community (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Defining an SNMP read/write community2500, 2600, 2800, 4100gl, 5300xl series, 6108

HPswitch(config)# snmp-server community red-teammanager unrestricted

HPswitch(config)# snmp-server community blue-teamoperator restricted

An SNMP community consists of one or more network management stations and one or more SNMP agents. The SNMP community attribute enables the SNMP agent on the HP ProCurve switch to identify authentic SNMP messages (messages from within the community) with a high degree of certainty.

The first command creates a read/write community (manager) named “red-team.”

The second command creates a read-only community (operator) named “blue-team.”

The community parameter specifies an SNMP community string configured on the HP ProCurve device. The string can be read-only or read-write. The string is not used to authenticate access to the trap host, but is instead a useful method for filtering traps on the host. For example, if you configure each of your HP ProCurve devices that use the trap host to send a different community string, you can easily distinguish among the traps from different HP ProCurve devices based on the community strings.



Configuring SNMP trap operation (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Configuring SNMP trap operation2500, 2600, 2800, 4100gl, 5300xl series, 6108

To configure a trap receiver in a community named “red-team”with an IP address of 10.28.227.130 to receive only “critical”log messages:

HPswitch(config)# snmp-server trap-receiver red-team 10.28.227.130 critical

This command sends critical events as SNMP traps to 10.28.227.130. The traps will have a community name of “red-team.” “Red-team” will be associated with a particular device, making it easier to decipher the info on the NMS server.



Configuring SNMP trap operation (4000 series)


Configuring SNMP trap operation4000 series

Configuring SNMP communities on the 4000 series.



Defining an SNMP read/write community (9300 series)


Defining an SNMP read/write community9300 series

By default the 9300 unit supports a READ-ONLY community called “public”• All SNMP parameters are defined at the global configuration

level using the following command:Switch_A(config)# snmp-server ?

• To create a READ/WRITE community named “admins” issue the following command:

Switch_A(config)# snmp-s community admins rw

You can specify a trap receiver to ensure that all SNMP traps sent by the HP ProCurve device go to the same SNMP trap receiver or set of receivers, typically one or more host devices on the network. When you specify the host, you also specify a community string. The HP ProCurve device sends all the SNMP traps to the specified host(s) and includes the specified community string. Administrators can therefore filter for traps from an HP ProCurve device based on IP address or community string.

When you add a trap receiver, the software automatically encrypts the community string you associate with the receiver when the string is displayed by the CLI or Web management interface. If you want the software to show the community string in the clear, you must explicitly specify this when you add a trap receiver. In either case, the software does not encrypt the string in the SNMP traps sent to the receiver.



Configuring SNMP trap operation (9300 series)


Configuring SNMP trap operation 9300 series

• By default, the routing switch supports 17 traps. To individually disable traps, use the following:– Switch_A(config)# no snmp-s enable traps ?

• To define the identity of a management station that can act as a trap receiver, use the following command:– Switch_A(config)# snmp-s host 10.1.2.8 password

• To cause all traps to be sent from the same source address, use the following command:– Switch_A(config)# snmp-s trap-source ve 1



Points to ponder...


Points to ponder…

Often you will need to validate network connectivity. HP ProCurve switches have several built-in tools that can help you perform a connectivity and reachability verification. CDP can be used to determine what device is at the other end of a physical connection. Ping is a useful tool to determine if a remote IP address is reachable. If it isnot, then you may want to use Traceroute to trace the path to the IP destination. This may help you isolate the problem network facility. Port mirroring is a convenient mechanism to actually capture packets that are traversing the LAN. Show tech will record the detailed configuration of a switch. Typically you would want to send the output of show tech to file. Then the file could be forwarded to HP ProCurve customer support.



Cisco Discovery Protocol (CDP) – 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series


Cisco Discovery Protocol (CDP)2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

HP ProCurve switches implement CDP to collect information about neighboring switches • Each switch describes itself in CDP packets it sends

through each port• Each outbound CDP packet can reach only directly

connected neighbors • Switches create a CDP neighbors table that contains an

entry for each directly connected neighbor• Information in the CDP neighbors table may be:

– Displayed at the CLI– Used by an SNMP utility to facilitate management and

graphical depiction of the network

On the 9300 series, CDP is referred to as FDP

All HP ProCurve switches implement CDP to collect information about neighboring switches. Like all CDP-aware switches, HP ProCurve switches periodically describe themselves by sending messages to neighboring switches. CDP packets survive only one hop. When it receives a CDP packet, a switch places the information from the packet into an entry in the CDP neighbors table.

On the 9300 series, CDP is called FDP (Foundry Discovery Protocol). The 9300 series switches run FDP in both advertise and listen mode, but they run only CDP in listen mode. Thus, a 9300 series switch will see all other HP ProCurve switches on a show cdp neighbors command, but switches such as the 5300xl switch will not see the 9300 switch.



Displaying CDP information (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Displaying CDP information2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• To display global and interface-level CDP status:

Core_1# show cdp

• To display a high-level view of the entries in the CDP neighbors table:

Core_1# show cdp neighbors

CDP neighbors information

Port Device ID Platform Capability----- ----------------------- -------------- ----------C1 Edge_1(0004ea-61b300 HP 5304XL SC2 Core_2(0004ea-5e5000 HP 5304XL S

Because CDP information on HP ProCurve switches can be accessed with CLI commands, CDP can act as a verification tool. The show cdp command provides the status of CDP on every switch port. As shown here, the command show cdp neighbors yields the hostname, switch type, and MAC address for every neighboring switch where CDP is supported and enabled. If the output does not show information about a connected switch, verify that CDP is enabled on it.

Note A shortcut for show cdp neighbors is sh cdp n.

CDP also is used in conjunction with SNMP. SNMP management platforms query each switch’s neighbors table and use the output to enhance the graphical representation of network devices.



Displaying CDP neighbor details (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Displaying CDP neighbor details2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• To display detailed information about CDP neighbors:

Core_1# show cdp neighbors detailCDP neighbors information

Port : C1 Device ID : Edge_1 0004ea-61b300 Address Type : IPAddress : 10.1.1.3Platform : HP 5304XLCapability : SwitchDevice Port : C1Version : E.07.37 /sw/code/build/alpmo(w03)

------------------------------------------------------

Port : C2 Device ID : Core_2 0004ea-5e5000 Address Type : IPAddress : 10.1.1.2Platform : HP 5304XLCapability : SwitchDevice Port : C2Version : E.07.37 /sw/code/build/alpmo(w03)

As shown here, the show cdp neighbors detail command provides information about a switch’s neighbors. This includes information about which ports are connected to the neighbors, as well as their IP addresses, device IDs, and device specific information such as switch model and firmware version. Note that show cdp neighbors can be used to learn the address of a neighboring switch.



Modifying CDP settings (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Modifying CDP settings2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• The default configuration of each HP ProCurve switch enables CDP box-wide

• CDP parameters can be changed at the global configuration level: Core_1(config)# cdp ?timer Set CDP transmit interval in seconds.holdtime Set holdtime value transmitted in CDP packets.run Start and stop CDP on the device.enable Enable/disable CDP on particular device ports.clear Clear records for all CDP neighbors learned by the

device.

• For example, to disable CDP on port A1: Core_1(config)# no cdp enable a1

CDP settings on HP ProCurve switches can be modified with CLI commands. For instance, as shown here, CDP can be disabled on individual ports.

You can also configure CDP timers to change the number of seconds between CDP transmissions. The default CDP transmit interval is 60 seconds. The default holdtime, which controls a CDP packet’s time to live, is 180 seconds (three times the transmit interval). If information on neighboring switches has changed, you can clear the records in the neighbors table to force relearning.



Diagnostic tools (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)


Diagnostic tools2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

Port auto-negotiation• When a link LED does not light (indicating loss of link

between two devices), the most common reason is a failure of port auto-negotiation between the connecting ports

• If a link LED fails to light when you connect the switch to a port on another device, do the following:

1. Ensure that the switch port and the port on the attached end-node are both set to Auto mode

2. If the attached end-node does not have an Auto mode setting, then you must manually configure the switch port to the same setting as the end-node port

If it is not a configuration problem, then possibly it is a physical problem with either the cable, the connector, or the port.



Diagnostic tools: ping test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Diagnostic tools: ping test2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Ping test• Test the path between the switch and another device on the

same or another IP network. Test that a device can respond to IP packets (ICMP Echo Requests).

Use ping to test reachability to a remote IP address. If the test fails, then you might want to use traceroute to try to isolate where the problem occurs between the source and the destination. Or you may to try a link test to determine if the problem is a Layer 2 problem rather than a Layer 3 issue. A misconfigured default gateway is a common source of ping failures. The ping command supports switches to specify the number of repetitions and the timeout.



Diagnostic tools: link test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Link test• This is a test of the connection between the switch and a

designated network device on the same LAN (or VLAN, if configured). During the link test, IEEE 802.2 test packets are sent to the designated network device in the same VLAN or broadcast domain. The remote device must be able to respond with an 802.2 Test Response Packet.

Diagnostic tools: link test2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

This is a useful test to determine if a device on the same LAN as the source is reachable. Failure indicates a Layer 1 or a Layer 2 problem. You can specify the number of repetitions and the timeout.



Diagnostic tools: show tech (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Show tech• The show tech command outputs, in a single listing, switch operating

and running configuration details from several internal switch sources, including:

– Image stamp (software version data) – Running configuration – Event Log listing – Boot history– Port settings – Status and counters — port status – IP routes – Status and counters — VLAN information – Load balancing (trunk and LACP)

HPswitch# show tech

Diagnostic tools: show tech2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Executing show tech outputs a data listing to your terminal emulator. However, using your terminal emulator’s text capture features, you can also save show tech data to a text file for viewing, printing, or sending to HP ProCurve support. You can send the output to a TFTP server (discussed in Module 3), or optionally you can capture the command output to a file using terminal emulation features or Microsoft Notepad.



Diagnostic tools: traceroute (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Traceroute• The traceroute command enables you to trace the route

from the switch to a host address. This command outputs information for each (router) hop between the switch and the destination address.

Diagnostic tools: traceroute2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

Traceroute is a very useful command when trying to isolate a network problem. The command supports several useful command line options. You can specify the maximum number of hops allowed for each probe packet sent along the route. If the destination address is further from the switch than maximum hops allows, then traceroute lists the IP addresses for all hops it detects up to the maximum hop limit. You can also specify the number of queries the switch sends for each hop.



Port mirroring (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Port mirroring2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

• Traffic from any set of ports can be sent to another port for collection and analysis – Define the mirror port at global configuration level:

Switch(config)# mirror-port c2

• Receives monitored traffic and is connected to the packet analyzer

• Cannot be a trunked port– Enable monitoring within port context configuration level:

Switch(eth-a12)# monitor

• Ports whose traffic is copied to the monitor port • May be a trunked port or a single port

Port monitoring (mirroring): Copy all traffic from the specified ports to a designated monitoring port. Individual ports and static trunks (and meshing on the 5300 series) can all be monitored at the same time. However, if you configure the switch to monitor a VLAN, all other interfaces are removed from monitoring. Also, you can configure only one VLAN at a time for monitoring.



Ping test (4000 series)


Ping test4000 series

Using ping on the 4000 series.



Link test (4000 series)


Link test4000 series

Running a link test on a 4000 series.



Port mirroring (4000 series)


Port mirroring4000 series

On the 4000 series, “mirroring” is called port monitoring.



Viewing events with the Web interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)


Viewing events with the Web interface2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series

The Web browser interface Alert Log displays a list of network occurrences, or alerts, that were detected by the switch. Typical alerts are Broadcast Storm, indicating an excessive number of broadcasts received on a port, and Problem Cable, indicating a faulty cable.Status indicates the level of severity of the event generated. Severity levels can be Information, Normal, Warning, and Critical.

The interface featured in the slide is viewable via the “Status” tab.



Viewing details of events (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Viewing details of events2500, 2600, 2800, 4100gl, 5300xl series, 6108

By double-clicking on Alert Entries, the web browser interface displays a Detail View or separate window detailing information about the events.



Setting Fault Detection policy (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Setting Fault Detection policy2500, 2600, 2800, 4100gl, 5300xl series, 6108

One of the powerful features in the web browser interface is the Fault Detection facility.



Alert sensitivities (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Alert sensitivities2500, 2600, 2800, 4100gl, 5300xl series, 6108

• High sensitivity– This policy directs the switch to send all alerts to the Alert Log. This

setting is most effective on networks that have no or few problems.• Medium sensitivity

– This policy directs the switch to send alerts related to networkproblems to the Alert Log. If you want to be notified of problems thatcause a noticeable slowdown on the network, use this setting.

• Low sensitivity– This policy directs the switch to send only the most severe alerts to

the Alert Log. This policy is most effective on a network that normally has a lot of problems and when you want to be informed of only the most severe ones.

• Never– Disables the Alert Log and transmission of alerts.

Make events viewable via the Web interface.



Configuring Syslog using Web interface (9300 series)


From the System Configuration:2. Select Management to display the Management panel.

3. Select the System Log link to display the following panel.

Configuring Syslog using Web interface9300 series

Note A change in the buffer size takes effect only after you restart the system. The buffer size does not affect how many entries the device can log on a Syslog server. The number of entries the device can log on the server depends on the server’s configuration.



To add Syslog server (9300 series)


To add Syslog server9300 series

Click the Show Log Server link under the Apply and Reset buttons to display the Log Server panel.

The list shows the IP addresses and UDP ports of the Syslog servers. To delete an entry, click on the Delete button for that entry. To add a Syslog server, click on the Add Log Server link under the dialog to display the System Log Server panel.



Diagnostic tools (2500, 2600, 2800, 4100gl, 5300xl series, 6108)


Diagnostic tools2500, 2600, 2800, 4100gl, 5300xl series, 6108

Ping test or link test – Web interface

On most switches the ping test and the link test are also available with the Web browser interface.



Module 4 summary


Module 4 summary

In this module you learned:• How to configure time synchronization with SNTP• How to use use event logging and debugging to identify

and record faults• How to use the available diagnostic tools, including:

– CDP– Ping– Link test– Traceroute– Show tech




1. What information can you obtain from the CDP neighbors table?

............................................................................................................................

............................................................................................................................ 2. Name two ways to set the current time for a switch.

............................................................................................................................

............................................................................................................................ 3. What is the benefit of enabling Syslog service for a switch?

............................................................................................................................

............................................................................................................................ 4. Why is it important to have the time synchronized on switches, especially

when working with multiple switches?

............................................................................................................................

............................................................................................................................


Advanced hardware replacement and software utilities

Module 5

Objectives This module discusses advanced hardware replacement procedures and reviews software utilities available for use on the HP ProCurve Networking switch products.

After completing this module you will be able to:

Describe the power-up LED behavior of HP ProCurve switches

Describe the procedure for hot-swapping power supplies on HP ProCurve switches

Describe the procedure for hot-swapping port modules on HP ProCurve switches

Describe the replacement procedure and the failover of HP ProCurve 9300 management modules

Discuss software utilities required for servicing HP ProCurve switches

Discuss the procedures for recovering from a lost password or bad startup-config



9300m LED behavior


9300m LED behavior

• Verify proper behavior by observing the LEDs• When power is applied, some of the module LEDs

will light• All of the power supply lights should light and stay

a solid green• Management module power and active LEDs light

solid, then the standby unit’s active LED goes dark as it goes into standby mode

• When diagnostics are complete, only port modules with active cables connected will have LEDs on

NOTE: If all of the LEDs on a module do not light up during the diagnostics, this does not indicate an error. Only some of the LEDs are lighted during the diagnostics.



9300 management – EP modules


9300 management – EP modules

• One or two redundant modules supported per chassis • Two modules work together as active and standby

management modules• If the active module becomes unavailable, the standby

takes over operation after booting and loading synchronized configuration

• Management modules must be matched: that is, M2s with M2s, M4s with M4s, EPs with EPs

.



Removing 9300m modules


Removing 9300m modules

• Non-management modules should be disabled before removing – this avoids brief service interruptions

HP9300# disable module 3

• The replacement module is automatically enabled when you insert the module into a live chassis or when you power on the chassis

• If you remove the module without first disabling it, the routing switch reinitializes the other modules in the chassis;this causes a brief interruption in service, after which normal operation resumes



Inserting 9300m modules


Inserting 9300m modules

• Hot-inserting – modules can be hot-inserted into empty chassis slots with no action required; modules will be enabled automatically

• If you want to prepare slots for modules, they can be manually entered into the configuration and physically inserted into the chassis later

HP9300(config)# module 4 24-port-copper-module

Enter the HP9300(config)# module X ? To see a list of available modules

• Hot-swapping modules – if replacing module with the same type of module, no action needs to be taken

• If you replace a module with a different type of module, you must configure the slot for the module

HP9300(config)# module 3 24-port-copper-module



Replacing 9300m management modules



• By default, the redundant management module in the lower slot number becomes the active redundant management module when you start the system

• To override the default and specify the active redundant management module, enter the following commands:

HP9300(config)# redundancy

HP9300(config-redundancy)# active-management 5

• Active management modules should be failed over to standby module before removal

• By default, the system synchronizes:– The flash code and startup-config file automatically– The running-config at regular user-configurable intervals– The boot code is NOT automatically set to synchronize but can be set to at

startup or switch failover• If you upgrade the boot code on the active module and the code contains

a problem, you can still use the system by running the older boot code that is on the standby module






1. Manually failover the active management module to the standby module using CLI or web interface

2. Remove the module to be replaced that is now in standby mode

3. Insert replacement module – it will become enabled but in standby mode; flash code and config files will automatically synchronize

4. Configure boot code synchronization if required5. Optional – manually failover management back to lowest slot

module but this will interrupt network operations; not really necessary



Recovering from a lost password (9300 series)


Recovering from a lost password9300 series


BOOT MONITOR> no password BOOT MONITOR> boot system flash primary

Router_A> enableRouter_A#

The boot monitor allows you to interrupt the boot sequence and boot the system without requiring the super-user password


Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The slide displays how to instruct the switch to boot from primary flash.

The boot monitor can also be used for recovery from a lost super-user password. In this case, you must enter the boot monitor and enter the hidden command no password, followed by a boot system flash primary command.

Note that booting without password protection does not remove the passwords from the configuration file; it simply removes the authentication requirement. When the system boots with no password, you can enter the privileged level EXEC simply by entering the enable command at the user level EXEC.

You should assign a new super-user password and write the configuration to memory immediately to secure the system and replace the unknown password.



Ignore startup configuration boot time (9300 series)


Ignore startup configuration boot time9300 series

The boot monitor allows you to interrupt the boot sequence and boot the system with the factory default configuration:


BOOT MONITOR> use default config BOOT MONITOR> boot system flash primary

This command sequence instructs the switch to boot with the factory default configuration.

The 2-second boot monitor opportunity may be eliminated by enabling the “fastboot” feature. Note that fastboot may be enabled (fastboot) or disabled (fastboot off) at both the user and privileged EXEC level. The fastboot command does not cause the system to restart; it does determine how quickly the system will boot.



5300xl LED pattern


5300xl LED pattern

When the switch is powered on, it performs its diagnostic self-test. The entire download, initialization, and self-test process can take up to 2 minutes for a fully loaded chassis, depending on the number and type of modules installed in the switch.

LED behavior during the self-test Initially, Power and Fault and all the switch chassis LEDs are on. Then, after approximately 30 seconds, all of the module LEDs go on as the modules receive power and code is downloaded to them, the Fault LED goes off, and all the chassis LEDs go off except Power, Self Test, Fan Status, and Power Status.

When the download of code to the modules is completed, the module LEDs go off. You may see each port LED go on briefly, in sequence, as the port is tested.

For the duration of the self-test, the Self Test LED stays on.

LED behavior when the self-test completes successfully The Power LED stays on, and the Status LEDs on the switch chassis stay on for the devices installed: one for each switch module installed, one for each power supply installed, and one for all the fans.

The Fault and Self Test LEDs are off.



The port LEDs on the switch modules go into their normal operational mode:

If the ports are connected to active network devices, the Link LEDs stay on and the Mode LEDs behave according to the mode selected. In the default mode (Activity), the Mode LEDs should flicker, showing network activity on the port.

If the ports are not connected to active network devices, the LEDs will stay off.



4100gl/5300xl module insertion


4100gl/5300xl module insertion

The slot cover can be removed, and the module can be installed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use. Any of the supported Switch XL modules can be installed in any of the slots.

The modules can be hot-swapped, installed after the switch is already powered on, and normally will be immediately operational. But, if you are replacing a module with a different type than what was previously installed in the slot, the switch must be rebooted after the module is installed.

The modules employ “low-force” connectors. Using high force to insert the modules is not needed and should not be used. Make sure that you fully insert the modules. That is, press the module into the slot until the bulkhead on the module is contacting or is very close to contacting the front face of the switch chassis.

Once the module is fully inserted, make sure that you screw in the two retaining screws to secure the module in place. The screws should be tightened until they are secure, but not overtightened. If you do not use one or more of the slots, make sure that the slot cover plate is still attached over the slot for safe operation and proper switch cooling.

! Important

For safety, you should not have more than one module slot uncovered at a time.



4100gl/5300xl Redundant Power Supply (RPS)


4100gl/5300xl Redundant Power Supply (RPS)

A second, load-sharing redundant power supply (HP ProCurve Switch gl/xl RPS, J4839A) can be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source from the other supply. Then, if one AC power source fails, the switch will continue to run. Each supply provides enough power to operate a fully loaded switch, so even if one fails, the switch will continue to operate normally.

Install the second power supply into power slot number 2 as shown in this slide. The slot cover can be removed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use.

Caution The switch power supplies are hot-swappable; they can be installed while the switch is receiving power from the supply in the other slot. But, as indicated by the caution statement on the power supply, the supply must not be connected to AC power before being installed.



4000m/8000m LED patterns


4000m/8000m LED patterns

When the switch is powered on, it performs its diagnostic self-test. The self-test takes approximately 35 to 70 seconds to complete, depending on the number and type of modules installed in the switch.

LED behavior during the self-test Initially, Power and Fault and all the Switch Engine and switch module LEDs are on. After approximately 3 seconds, most of the LEDs go off and then may come on again during phases of the self-test. For the duration of the self-test, the Self Test LED stays on.

LED behavior when the self-test completes successfully The large Power LED stays on, and the Status LEDs on the Switch Engine Module stay on for the modules installed: one for each switch module installed, one for each power supply installed, and the Fan LED.

The large Fault LED goes off, and the Switch Engine Fail and Self Test LEDs go off.

The port LEDs on the switch modules go into their normal operational mode:

If the ports are connected to active network devices, the Link LEDs stay on and the Mode LEDs behave according to the mode selected. In the default mode (Activity), the Mode LEDs should flicker, showing network activity on the port.

If the ports are not connected to active network devices, the LEDs will stay off.



4000m/8000m module insertion


4000m/8000m module insertion

Install switch modules into the slots as shown in this slide. For installation details, see the instructions in the manual that comes with the module.

The slot cover can be removed, and the module can be installed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use.

Note Any of the supported switch modules can be installed in any of the slots. The modules can be hot swapped, installed when the switch is powered on, and normally will be immediately operational. But if you are replacing a module with a different type than what was previously installed in the slot, the switch must be rebooted after the module is installed.

Make sure that the module is fully installed and that you screw in the retaining screws to secure the module in place. If you do not use one or more of the slots, make sure that the slot cover plate is still attached over the slot for safe operation and proper switch cooling.



4000m/8000m Redundant Power Supply


4000m/8000m Redundant Power Supply

A second, load-sharing redundant power supply (HP ProCurve Switch 4000m/8000m Power Supply, J4119A) can be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source from the other supply. Then, if one AC power source fails, the switch will continue to run. Each supply provides enough power to operate a fully loaded switch, so even if one fails, the switch will continue to operate normally.

Install the second power supply into power slot number 2 as shown in the slide. The slot cover can be removed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use.

Caution The switch power supplies are hot-swappable; they can be installed while the switch is receiving power from the supply in the other slot. But, as indicated by the caution statement on the power supply, the supply must not be connected to AC power before being installed.



Software tools: TFTPD32


Software tools: TFTPD32

• Available at:http://tftpd32.jounin.net/

• Utility for transferring firmware and configuration files

• Can also be SNTP, SYSLOG, and DHCP server

Tftpd32 includes DHCP, TFTP, SNTP and Syslog servers, as well as a TFTP client. The TFTP client and server are fully compatible with TFTP option support (tsize, blocksize and timeout), which allows the maximum performance when transferring the data.

Some extended features such as directory facility, security tuning, interface filtering, progress bars, and early acknowledgments enhance usefulness and throughput of the TFTP protocol for both client and server. The included DHCP server provides unlimited automatic or static IP address assignment.



Software tools: Tera Term


Software tools: Tera Term

• A terminal emulator that supports sessions over COM ports, Telnet, and SSH

• Available as freeware but not currently being maintained

Tera Term (Pro) is a free software terminal emulator (communication program) that supports:

Serial port connections

TCP/IP (Telnet) connections

SSH connections

VT100 emulation and selected VT200/300 emulation

TEK4010 emulation

File transfer protocols (Kermit, XMODEM, ZMODEM, B-PLUS, and Quick-VAN)

Scripts using the “Tera Term Language”

Japanese and Russian character sets



SolarWinds Subnet Calculator


SolarWinds Subnet Calculator

The Solarwinds.net Advanced Subnet Calculator is very complete in that it not only provides a comprehensive Subnet Calculator, but it also has the ability to perform CIDR (Classless Inter-Domain Routing). In addition, it performs full DNS resolution and even provides a list of addresses generated, which can be exported to Microsoft Excel and used as a working document.

This tool is available at:

http://www.solarwinds.net/Tools/Free_tools/Subnet_Calc/index.htm



Sam Spade network utility


Sam Spade network utility

Sam Spade is a network-query tool that can help you diagnose and test networks all within one utility.

Many server-finding tools, such as nslookup, whois, and traceroute, have been previously available, but only from a command line. Sam Spade lets you use these tools from a graphical interface, and information found with one tool can be queried using another. Its SMTP Verify tool helps you check on the validity of an email address, which is good for finding out if mail is being sent from that address or forwarded from another address to cover a spammer’s tracks.



SnagIt – screen capture utility


SnagIt – screen capture utility

A compete screen capture and printing utility

SnagIt Screen Capture is a complete solution. SnagIt provides a complete, start-to-finish solution for capturing, editing, and sharing content from your Windows PC.

Capture First choose the type of capture: images, text, video, print output, entire Web image collections.

Next capture the area you want: windows, regions, object, menus, and more.

Edit Edit and annotate your capture right within the Preview Window for fast, convenient changes.

Change color, size, dpi, and many other aspects of the screen capture.

Share Send your screen capture to a file, an email, the Clipboard, the printer, and even the Web.

SnagIt supports GIF, JPG, TIF, BMP, EPS, PSD, PNG, ICO, CUR, and more.



Module 5 summary


Module 5 summary

In this module you learned:• The power-up LED behavior of HP ProCurve switches• How to work hot-swap power supplies on HP ProCurve

switches• How to hot-swap or replace modules on HP ProCurve

switches• How HP ProCurve 9300m management modules failover

both automatically and manually• How to swap out an HP ProCurve 9300 management

module• What software utilities are available for servicing HP

ProCurve switches• How to recover from a lost password or startup-config

issue




1. Which HP ProCurve switch supports redundant management modules?

............................................................................................................................ 2. Which HP ProCurve switches support redundant hot-swap power supplies?

a. All HP ProCurve switches

b. HP ProCurve module switches

c. HP ProCurve stackable switches

d. Only the HP ProCurve Switch 9300m 3. When installing a new module into a previously empty switch slot, does the

switch require a reboot to recognize the new module?

............................................................................................................................ 4. Which HP ProCurve switches support hot-swapping modules of like type?




d. Only the HP ProCurve Switch 5300xl and 4000m

Rev. 4.21 HP Restricted Answers - 1


Module 1 learning check 1. Which HP ProCurve switch family members are modular switches?

a. 4000m

b. 2800 series

c. 5300xl series

d. 4100gl series

e. 2500 series 2. Which HP ProCurve switch family provides the highest Gigabit Ethernet port

density?

a. 2600

b. 2800

c. 4100gl

d. 5300xl

e. 6108 3. In the following list, check which switches use mini-GBICs, transceivers,

or both:

5300xl mini-GBICs ___X____ transceivers _________

2500 mini-GBICs ________ transceivers ___X_____

2800 mini-GBICs ________ transceivers ___X_____

9300m mini-GBICs ________ transceivers ___X_____

4100gl mini-GBICs ___X____ transceivers ___X_____ 4. In the following list, check the network design layer at which the switches are

commonly used:

5300xl Core ___X___ Distribution___X___ Edge ____X____

4100gl Core _______ Distribution___X___ Edge ____X____

9300m Core ___X___ Distribution_______ Edge _________

2800 Core _______ Distribution_______ Edge ____X____




Answers - 2 HP Restricted Rev.4.21

Module 2 learning check 1. What is the most important difference between the operator level and the

manager level on HP ProCurve switches?

The operator level provides only read access to switch configuration; the operator manager provides read/write access.

2. Configuration instructions issued at the CLI are dynamically written to:

a. The running configuration

b. The startup configuration

c. Both running and startup configurations

d. The firmware image 3. What steps are required to enable in-band management of an HP ProCurve

switch?

Define the IP address and gateway 4. Which of the following configuration interfaces is most powerful or allows

you to control the full features of HP ProCurve switches?

a. CLI

b. Menu interface

c. Web interface


Rev. 4.21 HP Restricted Answers - 3

Module 3 learning check 1. How would you store several versions of configuration information for a

particular switch?

Copy configuration files to a TFTP server 2. What is the difference between the output of the show flash command and

the output of the show version command?

The show flash command provides information about firmware versions currently stored in the switch’s flash memory. The show version command provides information about the version currently in use.

3. What methods are available for upgrading the software images on most HP

ProCurve switches?

a. TFTP file transfer

b. Web browser download

c. XMODEM serial transfer through console port

Module 4 learning check 1. What information can you obtain from the CDP neighbors table?

The platform and IP addresses of all neighboring switches, along with the ports they are connected to, firmware version, and forwarding capabilities (Layer 2 or Layer 3)

2. Name two ways to set the current time for a switch.

Manually, using the time command; dynamically, using TimeP or SNTP 3. What is the benefit of enabling Syslog service for a switch?

It saves logs on a server for later retrieval. This enables log information to remain available after switch failure.

4. Why is it important to have the time synchronized on switches, especially

when working with multiple switches?

It is useful for event correlation while working with multiple switches or an entire network to determine whether events are occurring simultaneously on multiple switches or isolated on a specific switch.


Answers - 4 HP Restricted Rev.4.21

Module 5 learning check 1. Which HP ProCurve switch supports redundant management modules?

The HP ProCurve Switch 9300m 2. Which HP ProCurve switches support redundant hot-swap power supplies?




d. Only the HP ProCurve Switch 9300m 3. When installing a new module into a previously empty switch slot, does the

switch require a reboot to recognize the new module?

No, all HP ProCurve switches support the hot-insert installation of new modules into previously empty module slots.

4. Which HP ProCurve switches support hot-swapping modules of like type?




d. Only the HP ProCurve Switch 5300xl and 4000m

HP Training Student guide - Dahlgren...

Documents

Transcript of HP Training Student guide - Dahlgren...