Installation and service of HP ProCurve devices. Rev HP Restricted. HP Training. Student guide

Transcription

1 Installation and service of HP ProCurve devices HP Training Student guide

2

3 Copyright 2004 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. This is an HP copyrighted work that may not be reproduced without the written permission of HP. You may not use these materials to deliver training to any person outside of your organization without the written permission of HP. Printed in the USA Installation and service of HP ProCurve devices Student guide May 2004

4 Contents Overview Introduction... 1 Course objectives... 1 Prerequisites... 2 Course module overviews... 3 Course agenda... 3 Additional information... 4 Module 1 The HP ProCurve product family Objectives... 1 Useful definitions... 2 Structured cabling system... 4 Network components... 6 OSI Protocol Stack... 7 OSI Protocol Stack... 8 OSI Protocol Stack... 9 OSI Protocol Stack OSI Protocol Stack HP ProCurve product families HP ProCurve switch family positioning HP ProCurve accessories and features HP ProCurve accessories: module, transceivers, mini-gbics Connectors Copper cabling system Cable specifications for full-duplex Ethernet Points to ponder HP ProCurve switch portfolio HP ProCurve switch management HP ProCurve feature: hot swap (4000 series, 4100gl, 5300xl series, 9300 series) HP ProCurve accessories: mode selector (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) HP ProCurve Switch 2500 Series HP ProCurve Switch 2500 Series HP ProCurve 2600 class switch HP ProCurve Switch 2600 Series Back of HP ProCurve Switch 2600 Series HP ProCurve 600 Redundant and External Power Supply HP ProCurve Switch [Module #] i

5 Installation and service of HP ProCurve devices HP ProCurve Switch 2800 Series HP ProCurve redundant power supplies (4000 series, 4100gl, 5300xl series, 9300 series) HP ProCurve Switch 4000m/8000m Switch 4000m/8000m front Switch 4000m/8000m modules HP ProCurve Switch 4100gl Series HP ProCurve Switch 4100gl Series: modules/transceivers/gbics HP ProCurve Switch 5300xl Series HP ProCurve Switch 5300xl Series HP ProCurve Switch 5300xl Series: modules/transceivers/gbics Port and slot numbering (2500, 2600, 4000 series, 4100gl series, 5300xl series, 6108) HP ProCurve accessories: Reset and Clear buttons (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) Using Clear and Reset to erase the startup config (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) HP ProCurve Routing Switch 9300m Series HP ProCurve 9300m series Management modules (9300 series) Enhanced performance management and port modules (highest port density) 9300 series gigabit module 1 port (9300 series) gigabit module 2 port (9300 series) Recently retired - M4 redundant management and port modules Retired management modules for HP ProCurve Routing Switch 9300 series Retired redundant management modules for HP ProCurve Routing Switch 9300 series Retired port modules for HP ProCurve Routing Switch 9300 series Port and slot numbering (9300 series) Recovering from a lost password (9300 series) Ignore startup configuration at boot time (9300 series) HP ProCurve reference material Module 1 summary Module 2 Switch management ii Objectives... 1 Device management can take different paths... 2 Out-of-band access... 3 In-band access for device management... 4 Management interfaces... 5 Points to ponder... 6 CLI interface privilege levels (2500, 2600, 2800, 4100gl, 5300xl series, 6108)... 7 Points to ponder... 8 Assigning a manager password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)... 9 Assigning an operator password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108)... 10

6 Contents Local authentication for device access (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, and 6108) Centralized authentication for device access (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Setting system information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Manager and operator (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) Interface context at the CLI - some commands (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) CLI tips and shortcuts (2500, 2600, 2800, 4100gl, 5300xl series, 6108) CLI interface privilege levels (9300 series) Accessing the CLI (9300 series) EXEC the command interpreter (9300 series) EXEC Enable (9300 series) Assigning the super-user password (9300 series) Creating the read-only and port-config users (9300 series) Saving configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Points to ponder CLI advantages Menu interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) Menu interface Main Menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Menu interface navigation (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Getting help (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Using the full menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Port configuration at the menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Activating configuration changes (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Points to ponder Menu interface (4000 series) Menu interface navigation (4000 series) Setting manager and operator passwords (4000 series) The 4000 series CLI series some helpful CLI commands Advantages of the menu interface HP web browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Starting the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series The port status indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) iii

7 Installation and service of HP ProCurve devices The port utilization indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Creating usernames and passwords in the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Advantages of web browser interface Points to ponder Statically defining an IP address and mask (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Defining the default gateway (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Using the Switch Setup menu to configure IP info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) series configuring IP series IP configuration Web interface configuring IP address Module 2 summary Module 3 System information Objectives... 1 HP ProCurve accessories: LEDs... 2 Switch LEDs (2500, 2800, 4100gl, 5300xl series, 6108)... 3 Port LEDs: 2500, 2800, 4100gl, 5300xl series, Switch LEDs (2600)... 5 Port LEDs (2600)... 6 Switch LEDs (9300 series)... 7 Port LEDs (9300 series)... 8 Points to ponder... 9 HP ProCurve Switch configuration file manipulation CLI: viewing configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Configuration flow commands (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) File transfer Saving the running configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving the startup configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Restoring configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Displaying flash info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Copying firmware from a TFTP server (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) iv

8 Contents Flash file manipulation (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Booting from an alternate image source (2600, 2800, 4100gl, 5300xl series, 6108) Updating the system image (4100gl, 5300xl series, 9300 series) Updating the system image (4000 series) Viewing system information (4000 series) The boot monitor (9300 series) Boot the switch from a TFTP server (9300 series) show tech command (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Copying command output to a file Putting system info to a file (4000 series) Module 3 summary Module 4 Verification toolbox Objectives... 1 Points to ponder... 2 Time synchronization protocols... 3 Configuring SNTP parameters (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)... 4 Time zone and manual time setting (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series)... 5 Menu: configuring time protocol (2500, 2600, 2800, 4100gl, 5300xl series, 6108)... 6 Menu: configuring time protocol (4000 series)... 7 Points to ponder... 8 Event log system (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series)... 9 Event Show logging The Debug/System-Logging (syslog) system Defining a SyslogD server Enabling Debug/System Logging (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Debug command (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Messaging structure (2500, 2600, 2800, 4100gl, 6108) Messaging structure (5300xl series) Event logging (4000 series) View the event log (4000 series) Event logging (9300 series) Message levels (9300 series) Configuring Syslog using CLI (9300 series) Simple Network Management Protocol (SNMP) Configuring SNMP Defining an SNMP read/write community (2500, 2600, 2800, 4100gl, 5300xl series, 6108) v

9 Installation and service of HP ProCurve devices Configuring SNMP trap operation (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Configuring SNMP trap operation (4000 series) Defining an SNMP read/write community (9300 series) Configuring SNMP trap operation (9300 series) Points to ponder Cisco Discovery Protocol (CDP) 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Displaying CDP information (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Displaying CDP neighbor details (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Modifying CDP settings (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: ping test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: link test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: show tech (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: traceroute (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Port mirroring (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Ping test (4000 series) Link test (4000 series) Port mirroring (4000 series) Viewing events with the Web interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Viewing details of events (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Setting Fault Detection policy (2500, 2600, 2800, 4100gl, 5300xl series, 6108).. 46 Alert sensitivities (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Configuring Syslog using Web interface (9300 series) To add Syslog server (9300 series) Diagnostic tools (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Module 4 summary Module 5 Advanced hardware replacement and software utilities Objectives m LED behavior management EP modules... 3 Removing 9300m modules... 4 Inserting 9300m modules... 5 Replacing 9300m management modules... 6 Replacing 9300m management modules... 7 vi

10 Contents Recovering from a lost password (9300 series)... 8 Ignore startup configuration boot time (9300 series) xl LED pattern gl/5300xl module insertion gl/5300xl Redundant Power Supply (RPS) m/8000m LED patterns m/8000m module insertion m/8000m Redundant Power Supply Software tools: TFTPD Software tools: Tera Term SolarWinds Subnet Calculator Sam Spade network utility SnagIt screen capture utility Module 5 summary Learning check answers vii

11 Installation and service of HP ProCurve devices viii

12 Contents ix

13 Overview Introduction The purpose of this course is to provide field repair engineers with the skills they need to do basic installation and configuration tasks, as well as troubleshoot and repair/replace field replaceable units (FRUs) and verify that units are operational. This course focuses on HP ProCurve hardware and software. This course does not cover network-centric troubleshooting tools and methodology. Course objectives After completing this course and its accompanying hands-on activities, you will be able to: Name the high-level features of each device Name each of the field replaceable units (FRUs) for a given HP ProCurve device Name the modules and accessories Correctly identify the 9300 module and accessory compatibilities and incompatibilities Describe proper LED behavior Describe the meaning of the Mode Select buttons Demonstrate the ability to use Mode Select buttons Describe the purpose of Reset and Clear buttons Demonstrate the proper use of the Reset and Clear buttons Demonstrate the ability to insert and/or remove all field replaceable units, including (but not limited to) power supplies, modules, fans or fan bays, tranceivers, and mini-gbics Describe the hot-swap/hot-insert procedures for each device Demonstrate the ability to verify that a module is installed correctly Demonstrate the ability to connect the network cables Overview 1

14 Installation and service of HP ProCurve devices Demonstrate the ability to verify that network connections are working correctly Demonstrate the ability to access each device through the Web, Telnet, or CLI, depending upon the capability of the given HP ProCurve device Demonstrate the ability to configure a single IP address through any given access method Demonstrate the ability to save and restore configurations Demonstrate the ability to update the software Demonstrate the ability to collect counters, logs, and diagnostic information Demonstrate the ability to use various diagnostic tools for device connectivity verification Describe basic Ethernet networking concepts Describe basic physical cabling requirements Demonstrate general familiarity with customer premise wiring Demonstrate familiarity with virtual LANs Demonstrate familiarity with customer security needs Prerequisites One of the following options: Completion of the HP ProCurve Networking Primer (available at ) CompTIA Network + certification Completion of Building Proactive Networks/Adaptive EDGE Fundamentals PLUS Familiarity with hardware repair and maintenance Overview 2

15 Overview Course module overviews Module 1 provides an overall introduction to basic networking switch technologies and specifically to HP ProCurve switches. Module 2 discusses the management features of HP ProCurve switches. Module 3 reviews system information on HP ProCurve products. Module 4 discusses the features and functions of the verification toolbox. Module 5 discusses hardware replacement and software tools and utilities. Course agenda Day 1 Day 2 Module 1 The HP ProCurve product family Lab 1 Module 2 Switch management Lab 2 Module 3 System information Lab 3 Module 4 Verification toolbox Lab 4 Module 5 Advanced hardware replacement and software utilities Lab 5 Overview 3

16 Additional Information Overview 4

17 The HP ProCurve product family Module 1 Objectives This module gives an overall introduction to basic networking switch technologies and specifically to HP ProCurve switches. After completing this module you will be able to: Describe the OSI architecture model and understand the position of each HP ProCurve product within the OSI architecture Understand the features of each HP ProCurve product Understand the speeds and feeds of each HP ProCurve product Describe the similarities across the HP ProCurve product line Understand product field replaceable units (FRUs) 1 1

18 Installation and service of HP ProCurve devices Useful definitions Useful definitions Fixed switch / stackable Modular switch Managed vs. unmanaged switch Bounded Non-blocking Local area network (LAN) Virtual local area network (VLAN) Layer 2 switch (bridge) Layer 3 switch (router) Auto-sensing MDI-MDIX 3 Fixed switches have a limited, well-defined number of ports. They don t support line cards. Typically, fixed switches are one rack unit (RU). Because fixed switches provide no growth potential via insertion of additional line cards, many fixed switches are stackable, meaning that multiple fixed switches can be connected to look like a single switch from the perspective of management software. This stacking is sometime accomplished with special-purpose ports. Unmanaged switches are limited in functionality. They cannot support VLANs or other configured options. A bounded switch is one that offers no high-speed uplinks. Many fixed switches are bounded because all the ports are the same speed. You will see that HP ProCurve fixed switches are not bounded. A non-blocking switch is one in which the speed of the backplane or the bandwidth of the switch s internal switching mechanism is at least as large as the sum of the speeds of all the ports. A LAN is a single broadcast domain. Usually the underlying technology is Ethernet. A VLAN is a way of configuring a switch to participate in multiple broadcast domains, thereby segmenting traffic. 1 2

19 The HP ProCurve product family An OSI Layer 2 switch, or a bridge, forwards traffic based on the frame s Layer 2 information. Typically, it supports the Spanning Tree Protocol. An OSI Layer 3 switch, or a router, forwards traffic based on the frame s Layer 2 information. Typically, it supports a dynamic routing protocol. An auto-sensing port automatically determines a common speed and duplicity that both ends of the connection can support. An MDI-MDIX port supports both straight-through cable and crossover cable. For example, the default port mode setting is auto. Suppose that your network uses Cat 3 wiring and you want to connect the switch to another autosensing device capable of 100Mbps operation. Because 100Mbps over Cat 3 wiring can introduce transmission problems, the recommended port mode is auto-10, which allows the port to negotiate full- or half-duplex but restricts speed to 10Mbps. 1 3

20 Installation and service of HP ProCurve devices Structured cabling system Structured cabling system Core Distribution Access 4 Network devices fall into three functional categories, which are shown in the diagram. Although terminology for these functions may differ between vendors, all are in agreement on the functions themselves, as well as some fundamental network design practices. The backbone or core layer of the network is a central or common point where traffic flows between users in workgroups and their centralized resources. Since most inter-workgroup traffic flows through the core, it is important that networking devices located in the core introduce little or no latency. In a local area network, core switches are usually wire-speed, highly available devices. The distribution layer of the network is a consolidation point for the switches that connect directly to end stations. Distribution points are often called the Main Distribution Frame (MDF) or Intermediate Distribution Frame (IDF) and may at times be part of a computer room. These distribution points are often shared between voice and data wiring. In large networks, the distribution layer is the most likely place to implement broadcast control. Broadcast control may occur in the form of Layer 3 switching or routing, working to interconnect physically separated LANs and/or virtual LANs. 1 4

21 The HP ProCurve product family Cabling runs between wiring closets and core switches may span distances longer than copper media will allow. As a result, distribution switches are often modular switches that allow flexible port selection and support a mixture of fiber and copper media. Access switches are those that connect directly to end stations, such as computers and printers. The access switch is the last switch in line between end stations and their shared resources. Access switches are often physically located in wiring closets, with cable runs that terminate in user cubicles or offices. It is important to note that each of the products is targeted toward a specific set of environments, which will be revealed within this module. However, while specific products may be categorized as core or distribution switches, this reference can be limiting. For example, a switch that serves as an access layer device in a large, high-traffic environment may alternatively serve as a core layer switch at a much smaller site. 1 5

22 Installation and service of HP ProCurve devices Network components Network components Switch_A Switch_B Core Distribution Access 5 HP ProCurve offers a variety of products for provisioning the network infrastructure, including both fixed-port and modular switches with a mixture of 10-, 100-, and 1000Mbps ports, as well as the new 10Gbps ports. All of the switches have high availability features and support for Quality of Service, making them ready for time-sensitive applications such as IP telephony and video. The challenge in provisioning today s networks involves more than simply determining which environments might benefit from the feature sets of each product. Rather, it involves analysis of the current and future requirements of a particular environment, and choosing a set of solutions that will best meet those requirements. One of the goals of this course is to help you, as a network designer or installer, to properly position these products to get the most effective results. 1 6

23 The HP ProCurve product family OSI Protocol Stack OSI Protocol Stack Open Systems Interconnection (OSI) Protocol Stack Application Layer Presentation Layer Session Layer Transport Layer Network Layer Data Link Layer 1 Physical Layer 6 Next, we re going to take a look at the OSI Protocol Stack model. OSI stands for Open Standards Interconnect. The model describes conceptually how information from a software application in one computer moves through the network layers to a software application in another computer. The OSI Protocol Stack is a reference guide for networking communication. It defines how the various devices in a network communicate with each other. Although there are 7 layers in the OSI Protocol Stack, we re mainly concerned with Layers 2 and 3. The HP ProCurve product family spans from dumb Layer 2 devices to really intelligent Layer 4-7 devices. This training focuses on Layer 2 and some Layer 3 switches. 1 7

24 Installation and service of HP ProCurve devices OSI Protocol Stack OSI Protocol Stack Open Systems Interconnection (OSI) Protocol Stack Application Layer Presentation Layer Session Layer Transport Layer Network Layer Data Link Layer 1 Physical Layer Connectors, cables, etc. 7 Layer 1 is the Physical Layer. As the name implies, this layer consists of the cables and connectors that are used to physically connect devices to the network. The Physical Layer establishes the physical connection between a computer and the network. This layer also controls the transmission of information as it specifies the mechanical and electrical characteristics of the protocol in terms of connector size, pin assignments, and voltage levels. This layer also deals with cable specification for example, how far apart the communication devices can be placed from one another. 1 8

25 The HP ProCurve product family OSI Protocol Stack OSI Protocol Stack Open Systems Interconnection (OSI) Protocol Stack Layer 2 Managed Stackables and Chassis 7 6 Application Layer Presentation Layer HP ProCurve Switch 2524 (J4813A) HP ProCurve Switch 2512 (J4812A) HP ProCurve Switch 4000m (J4121A) HP ProCurve Switch 8000m (J4110A) 5 Session Layer Layer 2 Unmanaged Stackables 4 3 Transport Layer Network Layer HP ProCurve Switch 2724 (J4897A) HP ProCurve Switch 2324 (J4818A) HP ProCurve Switch 2708 (J4898A) HP ProCurve Switch 2312 (J4817A) HP ProCurve Switch 2124 (J4868A) HP ProCurve Switch 408 (J4097B) 2 Data Link Layer Ethernet Ethernet 1 Physical Layer (Layer 2) Switch 8 The Data Link Layer is primarily concerned with packaging and unpackaging data packets so that they can be encoded and decoded into bits, which will enable the data packets to be transmitted through a network. The Data Link Layer works as the transmission protocol by supporting error handling in the Physical Layer and corruption (through check summing). Additionally it is also known that the Data Link Layer is divided into two sublayers; these are known as the Media Access Control (MAC) Layer and the Logical Link Control Layer. The MAC sublayer controls the flow of how a computer sends data across a network and how the network will receive it. Apart from this, it also gives permission to transmit data. The Logical Link Control Layer controls frame synchronization and flow control. 1 9

26 Installation and service of HP ProCurve devices OSI Protocol Stack OSI Protocol Stack Open Systems Interconnection (OSI) Protocol Stack 7 Application Layer 6 Presentation Layer 5 Session Layer 4 Transport Layer 3 Network Layer HP ProCurve Switch 4160gl (J8152A) HP ProCurve Switch 6108 (J4902A) HP ProCurve Switch 2848 (J4904A) Layer 2/3 Managed Chassis HP ProCurve HP ProCurve Switch 4108gl Switch (J4865A) 4140gl (J8151A) Power over Ethernet HP ProCurve Switch PWR (J8165A) HP ProCurve Switch 2824 (J4903A) HP ProCurve Switch 4104gl (J4887A) Layer 2/3 Managed Stackables HP ProCurve Switch PWR (J8164A) HP ProCurve Switch 2650 (J4899A) HP ProCurve Switch 4108gl bundle (J4861A) HP ProCurve Switch 2626 (J4900A) HP ProCurve Switch 4148gl (J4888A) 2 Data Link Layer Ethernet Ethernet 1 Physical Layer (Layer 2) Switch (Layer 3) Switch IP Static Routes 9 Many HP ProCurve switches support Layer 3 forwarding via static routers. They do not run dynamic routing protocols, but they do route packets. This IP packet forwarding, while not supporting a dynamic routing protocol, is sometimes referred to as Layer 3 light. 1 10

27 The HP ProCurve product family OSI Protocol Stack OSI Protocol Stack Open Systems Interconnection (OSI) Protocol Stack 7 Application Layer 6 Presentation Layer Layer 2/3/4 Managed Chassis HP ProCurve Routing Switch 9315m (J4874A) HP ProCurve Routing Switch 9308m (J4138A) Layer 2/3 Managed Chassis HP ProCurve Routing Switch 9304m (J4139A) 5 4 Session Layer Transport Layer HP ProCurve Switch 5372xl (J4848A) HP ProCurve Switch 5308xl (J4819A) HP ProCurve Switch 5348xl (J4849A) HP ProCurve Switch 5304xl (J4850A) 3 Network Layer 2 Data Link Layer Ethernet Ethernet 1 Physical Layer IP Protocol (Layer 2) Switch (Layer 3) Switch (Layer 3) Switch Traditional Routing 10 The Network Layer is where the Internet Protocol (IP) lives. IP is a much more robust and sophisticated communication protocol than Ethernet and is used to connect user groups and the core network. Network Layer devices such as routers and Layer 3 switches make intelligent routing decisions for client/server traffic. Routers and Layer 3 switches are used to connect several networks and make decisions on what traffic should be routed to Network A versus Network B versus Network C, and so on. Typically, the only thing differentiating routers from Layer 3 switches is whether or not the routing technology has been implemented in silicon versus software. In other words, switches can be thought of as routers that have been implemented in silicon. The Network Layer is used for routing data across configured network nodes. This layer uses many technologies, known as switching and routing, to enable the data to be transmitted. These technologies create logical paths (known as virtual circuits) for transmitting data across a network from a node-to-node transmission. Additionally, other functions of this layer include addressing, error handling, congestion control, and, finally, packet sequencing. 1 11

28 Installation and service of HP ProCurve devices HP ProCurve product families HP ProCurve product families 4000 class (4000 & 8000) Modular L class Fixed L class (2600, 2800, 4100gl, 6108) Fixed and modular L2 and L3 light 5300xl class Modular L2 and L series Modular L2 and L3 (and L4) 11 Here we ve classified the HP ProCurve devices according to their forwarding capabilities. We also could have classed them according to speeds and feeds, performance, modularity, and so on. The HP ProCurve product line has several classes of switches with different feature sets. The five types of manageable switches can be loosely classified as Layer 2 switches and Layer 3 switches. Layer 2 switches make forwarding decisions based on the destination MAC addresses of the frames they receive. The 2500 series switches have either 12 or 24 10/100 ports with two transceiver slots that support several flavors of Gigabit Ethernet. These fixed-configuration switches support wire speed throughput (6.55 million pps) with a 9.6Gbps switch on a chip. Unmanaged versions of both 12- and 24-port switches are available as HP ProCurve 2312 and 2324 switches. There are also 10/100/1000 unmanaged 24/8-port HP ProCurve 2724 and 2708 switches. The feature set of the HP ProCurve Switch 4100gl series is similar to that of the 2500 series switches, with some enhancements. It is a modular switch with 4 or 8 slots and support for a wide variety of connectivity modules. The HP ProCurve 2650 has 48-port 10/100 with two 10/100/1000 including optional fiber slots managed, making it the highest port density per 1U rack height in the industry. 1 12

29 The HP ProCurve product family Other modular Layer 2 switches in the Layer 2-only category are the HP ProCurve 4000m and 8000m. They have been a part of the HP ProCurve product line for many years and have a different feature set than the other Layer 2 switches. The product line supports four separate modular switches with different feature sets. All of the modular switches support high-availability features such as link aggregation and the spanning tree protocol, as well as optional redundant power supplies HP ProCurve switches in the second category are called Layer 3 switches because they can forward traffic using Layer 2 or Layer 3 information. The HP ProCurve 6108 is a stackable, multi-layer, managed 8-port switch with 6 autosensing 10/100/1000 ports and 2 dual-personality ports for 10/100/1000 or mini-gbic connectivity along with Layer 3 VLAN static routing. The HP ProCurve Switch 5300xl series is a modular, wire-speed, chassis-based Layer 3 switch with either 4 or 8 slots, each of which can support 24 10/100 ports or 4 gigabit ports. It can forward IP traffic between directly connected VLANs using Layer 3 information and also exchange route information with other IPs. Its IP forwarding capabilities make it ideally suited for use as a distribution layer device. The HP ProCurve 9300 series routing switch is a 4-, 8-, or 15-slot modular, wirespeed, chassis-based Layer 3 switch. Each slot can support either 24 10/100 ports or 8 gigabit ports to two 10 gigabit ports. 1 13

30 Installation and service of HP ProCurve devices HP ProCurve switch family positioning HP ProCurve switch family positioning Core Modular: 5300xl series Modular: 9300 series Distribution Edge Modular: 4000/8000 Stackable: 2500 series Modular: 4100gl series Stackable: 2600 series 2800 series The HP ProCurve switch product line includes devices suitable for deployment at all layers of the contemporary network. Furthermore, as this diagram illustrates, some switch families can properly be deployed in more than one layer, depending on the needs of the particular network. Possible deployments for switch families shown in the diagram are: The 2500 and 4000/8000 switches provide basic connectivity and are appropriate only for edge deployment. The 2600, 2800, 4100gl, and 6108 switches include Layer 2 and Layer 3 capabilities that make them suitable for edge or distribution deployment. The 2800 and 4100gl series switches support many gigabit ports that may make them useful for aggregation of lower-speed links provided by 2500 or 2600 series switches at the edge, or they may be edge switches themselves. The 6108 unit features only eight gigabit ports, but it can be deployed in the distribution layer as an aggregation point for slower-speed edge devices. 1 14

31 The HP ProCurve product family The 5300xl is perhaps the most versatile of all switches and can be deployed in any network layer. Throughout this course, we will discuss the 5300 unit s many sophisticated features that make it suitable for the edge. Because it supports a wide variety of interface types, the 5300 device is also suitable for distribution deployment, where it can serve as an aggregation point for slower devices. Finally, the 5300 switch s support for full IP routing including Routing Information Protocol (RIP) and Open Shortest Path First (OSPF) dynamic routing makes it a suitable choice for core deployment. The 9300 series is best deployed as a core switch. 1 15

32 Installation and service of HP ProCurve devices HP ProCurve accessories and features HP ProCurve accessories and features There are several components that many HP ProCurve switches have in common, including: LEDs Mode selectors Clear and Reset buttons Connectors Hot-swap capabilities Load-sharing power supplies In-band and out-of-band management access 13 The HP ProCurve families of switches have many things in common: Switch LEDs provide indications of proper switch operation: Each switch port has a Link LED that should light whenever an active network device is connected to the port. Problems with the switch hardware and software are indicated by flashing the Fault and other switch LEDs. The type of information conveyed by the port LED is controlled by the LED Mode Select button on the switch. Reset and Clear buttons can be used to reset the switch or to remove the password protection. All modular HP ProCurve switches have module hot-swap capabilities and load-sharing power supplies. Most switches have a common CLI interface, menu interface, and Web browser interface. 1 16

33 The HP ProCurve product family HP ProCurve accessories: module, transceivers, mini-gbics HP ProCurve accessories: module, transceivers, mini-gbics Modules /100/1000 X X X X X 10/100-TX X X X X X X 10-FL X 100-FX X X X X X 100/1000-T X X X X X Mini-GBIC X X X Gigabit-SX X Gigabit-LX X 10 Gigabit X PoE X X Transceivers 100-FX X 100/1000-T X Gigabit-LX X X Gigabit-SX X X Gigabit Stacking X X Mini-GBICs Gigabit-LH X X X X X X module Gigabit-LX X X X X X X module Gigabit-SX X X X X X X module 14 HP ProCurve switches support a comprehensive set of speeds and feeds. The most common interface on today s switches and routers is the RJ-45. It supports UTP cable (cat 3,4,5,5e,6) and data rates from 10 to 1000Mbps (maximum distance is 100m). Another common interface is the MTRJ. It is a multi-mode fiber connect with the same form factor as the RJ-45. It supports a 100mps data rate up to a distance of 2km. Gigabit-SX: Uses SC connectors and support multimode fiber - maximum distance is 500m. Gigabit-LX: Uses SC connectors and support multimode and single mode fiber - maximum distance: 10 km (single mode) or 550m (multimode). The Gigabit Stacking Kit is used with stackable devices. The connector is an HP proprietary connector. The 10 GbE port is based on XENPAK optics. It uses an SC connector. 1 17

34 Installation and service of HP ProCurve devices The mini-gbics provide great flexibility and port density. They use LC Connectors: SX (short wavelength) Uses multimode fiber maximum distance is 550m LX (long wavelength) Maximum distance: 10 km (single mode) or 550m (multimode) LH (long haul) - Maximum distance: 70 km 1 18

35 The HP ProCurve product family Connectors Connectors RJ All copper ports support RJ-45 connectors. The connector type describes the port pin assignments. For fiber optic ports there are several port connectors. The connector type describes the attachment port. Usually the LC connectors attach to mini-gbics. They provide the smallest footprint and thus the greatest port density. The MTRJ connector is the same size as the RJ-45 but internally it has a send and a transmit fiber. 1 19

36 Installation and service of HP ProCurve devices Copper cabling system Copper cabling system TIA/EIA-568-A defines a performance rating system for UTP cable and connecting hardware: Category 3 performance is defined up to 16MHz Category 4 performance is defined up to 20MHz Category 5 performance is defined up to 100MHz Category 6 performance is defined up to 200MHz Impedance and structural return loss Attenuation Propagation delay 16 In 1991, the Electronic Industries Association published standard EIA-568, Commercial Building Telecommunications Cabling Standard, which specified the use of voice-grade unshielded twisted pair as well as shielded twisted pair for in-building data applications. At that time, the specification was felt to be adequate for the range of frequencies and data rates found in office environments. Up to that time, the principal interest for LAN designs was in the range of data rates from 1Mbps to 16Mbps. Subsequently, as users migrated to higher-performance workstations and applications, there was increasing interest in providing LANs that could operate up to 100Mbps over inexpensive cable. In response to this need, EIA-568-A was issued in The new standard reflects advances in cable and connector design and test methods. It covers 150-ohm shielded twisted pair and 100-ohm unshielded twisted pair. EIA-568-A recognizes three categories of UTP cabling: Category 3: UTP cables and associated connecting hardware whose transmission characteristics are specified up to 16MHz. Category 4: UTP cables and associated connecting hardware whose transmission characteristics are specified up to 20MHz. Category 5: UTP cables and associated connecting hardware whose transmission characteristics are specified up to 100MHz. 1 20

37 The HP ProCurve product family Of these, Category 3 and Category 5 cable have received the most attention for LAN applications. Category 3 corresponds to the voice-grade cable found in abundance in most office buildings. Over limited distances, and with proper design, data rates of up to 16Mbps should be achievable with Category 3. Category 5 is a data-grade cable that is becoming increasingly common for preinstallation in new office buildings. Over limited distances, and with proper design, data rates of up to 100Mbps should be achievable with Category 5. A key difference between Category 3 and Category 5 cable is the number of twists in the cable per unit distance. Category 5 is much more tightly twisted, typically 3 to 4 twists per inch compared to 3 to 4 twists per foot for Category 3. The tighter twisting is more expensive but provides much better performance than Category 3. EIA-568-A specifies the expected performance of Category 3 and 5 UTP, as well as the more expensive shielded twisted pair STP. The first parameter used for comparison, attenuation, is fairly straightforward. The strength of a signal falls off with distance over any transmission medium. For copper wire media, attenuation is generally logarithmic and therefore is typically expressed as a constant number of decibels per unit distance. Attenuation introduces three considerations for the designer: First, a received signal must have sufficient magnitude so that the electronic circuitry in the receiver can detect and interpret the signal. Second, the signal must maintain a level sufficiently higher than noise to be received without error. Third, attenuation is an increasing function of frequency. Near-end crosstalk, as applied to twisted-pair wiring systems, is the coupling of the signal from one pair of conductors to another pair. These conductors may be the metal pins in a connector or wire pairs in a cable. The term near end refers to coupling that takes place when the transmit signal entering the link couples back to the receive conductor pair at that same end of the link; that is, the near transmitted signal is picked up by the near receive pair. Enhanced Category 5 and Category 6 specify cable performance characteristics to higher levels. 1 21

38 Installation and service of HP ProCurve devices Cable specifications for full-duplex Ethernet Cable specifications for full-duplex Ethernet Interface type Cable supported Maximum distance 1000B ase-lx Single-mode (9 micron) 10 kilometers Gigabit-L H Single-mode (9 micron) 70 kilometers 1000B ase-lx Multimode (62.5 or 50 micron) 550 meters 1000B ase-sx 1000B ase-sx 100/1000B ase-t Multimode (62.5 micron) Multimode (50 micron) Category 5 UTP 220 meters 500 meters 100 meters 100B ase-fx Multimode (62.5 or 50 micron) 2 kilometers 10GBase-SR 10G-XNPK-ER 10G-XNPK-LR Multimode (62.5 or 50 micron) Single-mode (9 micron) Single-mode (9 micron) 300 meters 40 kilometers 10 kilometers 17 When the IEEE set out to define the specifications for transmission of Ethernet frames at 1Gbps, they saw the need to allow it to work over a variety of media. The approved cable types and their maximum distances are shown in this diagram. All of these distances assume point-to-point links between two switches, or a switch and an end station. An important goal for Gigabit Ethernet is to provide backward compatibility with existing standards for 10Base-T, 100Base-TX, and 100Base-FX. While the 10Base-T standard allows for voice grade unshielded twisted pair cabling (Category 3 UTP), 100Base-T requires data grade cable known as Category 5 UTP. To support 1000Base-T (known as IEEE 802.3ab), the Category 5 UTP standard has been enhanced to impose some additional restrictions. When using 1000Base-T over existing wiring, you must verify that the cabling complies with Category 5E (addendum 5 to the TIA-568-A standard, which is also known as ANSI/TIA/EIA-568-A-5). Many existing Category 5 installations are suitable for gigabit over copper, but because signals are sent over all four pairs, the cabling system must adhere to using all four pairs and should be tested for attenuation, near-end crosstalk (NEXT), and far-end crosstalk (FEXT). 1000Base-T can easily be used when the distance between switches is short. For example, it may be used for several switches in the same room or for short distances between a switch and servers with gigabit network adapters. 1000Base-T can also be used over distances up to 100 meters between floors or wiring closets. 1 22

39 The HP ProCurve product family Fiber optic cable is available in single mode and multimode. One difference between them is in the diameter of the glass channel down the center of the cable (also known as the core ). Another difference is in the way that signals are transmitted through the core. In single mode fiber, a laser generates a single signal that travels straight down the center of the channel in what is called a coaxial mode. The signal is constrained in a very narrow (9-micron diameter) core and is carried over very long distances. The 1000Base-LX standard specifies up to 5 kilometers, but single mode fiber is capable of carrying a signal up to 70 kilometers using long-haul transceivers known as Gigabit-LH. In multimode fiber, the transmitter generates multiple light signals that are reflected off the internal walls of the cable. The variance in propagation of the signals translates into a shorter distance before attenuation makes the signal indistinguishable. In general, a smaller diameter constrains the signal more than a larger diameter; 50-micron multimode fiber allows a distance up to 500 meters, while 62.5-micron fiber supports a distance up to 220 meters. The 100Base-FX standard specifies multimode fiber at a maximum supported distance of 2 kilometers. So, while the media may be compatible for an upgrade from 100Base-FX to 1000Base-SX or LX, you should always verify the distance. Gigabit Ethernet requires single mode cable for distances over 550 meters. At times you may need to use multimode fiber at distances exceeding 550 meters. In this situation you may need to consider how many available strands of fiber there are currently installed and determine whether traffic could be carried over multiple links. Although 100Base-FX transceivers use LEDs to generate light signals, both 1000Base-LX and 1000Base-SX transceivers use lasers due to Gigabit Ethernet s high data rate. However, the properties of laser-generated signals make it better suited to single mode fiber; multiple light rays generated by a laser (over multimode fiber) will interfere with each other, severely limiting the maximum distance. It should be noted that, with the exception of Gigabit-LH, these are standardsdriven specifications. Recent developments in technologies have allowed for greater distances in the gigabit fiber technologies. Much of this is dependent upon the quality of the fiber used in the installation. Many vendors now claim greater distances than previously stated when the standards were finalized. In some situations HP now supports 10 km on single-mode fiber for Gigabit Ethernet. XENPAK describes a fiber-optic transceiver module that conforms to the 10 Gigabit Ethernet (10 GbE) standard as laid down by the IEEE 802.3ae. A standard for 10 GbE transceivers is essential to provide a focal point for the industry to allow development of 10 GbE products and thus enable 10 GbE technology adoption and proliferation. 1 23

40 Installation and service of HP ProCurve devices Points to ponder Points to ponder The interface-connector-cable combination can have a significant impact on the performance of the network. Be careful and note that a particular type of connector does not ensure a particular type of cable. An LC could be connecting either multimode or single mode. The mini-gbics look the same. Read the label! Also, over-subscription of the uplinks may cause performance degradation at times of heavy network activity. There are tools and mechanisms to measure the distances and levels of oversubscription. 18 While there are many tools, mechanisms, and utilities for network and cable troubleshooting, they are beyond the scope of this course. 1 24

41 The HP ProCurve product family HP ProCurve switch portfolio HP ProCurve switch portfolio Full Layer 3 support 9300m series 4-, 8-, or 15-slot chassis with support for 10/100, 100-FX, and fiber Gigabit modules 5300xl series 4- or 8-slot chassis with support for 10/100, 100-FX, 10/100/1000, and fiber Gigabit modules features Layer 2/ basic IP routing 2800 series 24 or 48 10/100/1000 port stackable, of which 4 ports may be replaced with mini-gbics /100/1000 port stackable, of which 2 ports may be replaced with mini-gbics 4100 series 4- or 8-slot chassis with support for 10/100, 100-FX, 10/100/1000, and fiber Gigabit modules 2600 series 24 or 48 10/100 port stackable with 2 UTP or fiber Gigabit ports (2700 series unmanaged version available) Layer 2 only 4000m/8000m 40 port or 10 slot chassis supports 8-port 10/100, 4-port 100-FX, and 1-port Gigabit modules 2500 series 12 or 24 10/100 port stackable w/ 2 Gig ports (2300 series unmanaged version available) performance 19 While networking vendors often recognize the benefits of bringing intelligence to the edge, they usually have not developed devices specifically for this purpose. Instead, they recommend the deployment of high-end core devices at the network s edge. In most cases, these products are more costly and complex than devices designed specifically for edge deployment. By contrast, HP ProCurve Networking offers several families of switches designed specifically for edge deployments. Other members of the HP ProCurve product line can be used as core or edge switches, depending on the size and complexity of the customer s network and on other specialized needs or requirements. When they deploy HP ProCurve solutions, customers pay only for the features they need and are not burdened with the cost and configuration of features they never use. Customers can implement solutions with just enough functionality to meet their current needs or they can future-proof their investments by purchasing features they expect to require later. The HP ProCurve line offers several families of stackable and modular chassis switches with feature sets suitable for different roles in edge-centric networks. The stackable switches include: Two families of stackable 10/100 switches with support for 12, 24, or 48 ports. Each switch in these families also supports two fiber or copper gigabit uplinks. A family of stackable 10/100/1000 switches with 24 or 48 ports and support for fiber gigabit. 1 25

42 Installation and service of HP ProCurve devices The chassis switches support 10/100, 100-FX, 10/100/1000, and mini-gbic (gigabit interface converter) modules, enabling support for SX, LX, and LH connectivity. These switches also support redundant power supplies. To help you choose the solution that is best for your environment, the next few slides will examine the speeds and feeds for each switch. 1 26

43 The HP ProCurve product family HP ProCurve switch management HP ProCurve switch management Switch CLI Menu Web browser Boot monitor Usually the CLI is the most comprehensive management interface. With the 4000 series the menu interface is the most powerful. For most switches the Web browser interface is limited in functionality; however, for the 9300 series the Web browser interface offers that functionality as the 9300 series CLI. Only the 9300 series supports the boot monitor. The boot monitor provides primitive functionality, such as booting from factory defaults. In the table shown here, the larger checkmarks show the preferred or fully functional management interface for the device. 1 27

44 Installation and service of HP ProCurve devices HP ProCurve feature: hot swap (4000 series, 4100gl, 5300xl series, 9300 series) HP ProCurve feature: hot swap 4000 series, 4100gl, 5300xl series, 9300 series All HP ProCurve modular switches support live module insertion Adding modules hot insert A like module can be added with no disruption to switch operation Replacing modules hot swap A like module can be replaced with no disruption to switch operation Changing the module type If you exchange a module with one of a different type, the switch must be rebooted after the new module is installed Note: A module revision, i.e. J4115A versus J4115B, would not be hot-swappable because these are considered different modules 9300m routing switches can be manually configured for modules of different types to become active without a reboot Hot swap mini-gbics You can add, replace, or change the type of any of the mini-gbics without having to first remove the module, and without having to shut down the switch but you should disconnect cable first Transceivers are typically not hot-swap 21 If a module has to be replaced with one of the same type, or you are expanding the switch capability by adding a module in a slot where one was not previously installed, the replaced or new module is immediately operational; there is no interruption to the switch operation. If you exchange a module with one of a different type, though for example, a Gigabit-SX module is installed in place of a 100Base-FX module that was in the slot the switch must be rebooted after the new module is installed so the switch processor can properly initialize and configure the new module type. Until the switch is rebooted, the module will not operate, the Module Status LED will continue to flash, and all the LEDs on the module will stay on continuously. 1 28

45 The HP ProCurve product family HP ProCurve accessories: mode selector (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) HP ProCurve accessories: mode selector 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108 On most HP ProCurve switches the operation of the port mode LED is controlled by the Mode Select button If the Activity (Act) indicator LED is lit, each port mode LED displays activity information for the port it flickers as network traffic is received and transmitted through the port If the Full Duplex (FDx) indicator LED is lit, the port mode LEDs light up for those ports that are operating in full duplex If the 100Mbps (Max) indicator LED is lit, the port mode LEDs light up for those ports that are operating at 100Mbps If the! Indicator is lit, each mode LED lights up briefly for each network event that could require operator attention 22 When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test, as described in the manual for your switch. Verify proper operation by observing the LEDs. Make sure the LED on each power supply is a solid green. Also make sure that some of the port LEDs on each module momentarily light up. The LEDs indicate that the device is performing diagnostics. After the diagnostics are complete, the LEDs will be dark except for the ones that are attached by cables to other devices. If the links on these cables are good and the connected device is powered on, the link LEDs will light. 1 29

46 Installation and service of HP ProCurve devices HP ProCurve Switch 2500 Series HP ProCurve Switch 2500 Series HP ProCurve Switch /100 ports (RJ-45) 2 gigabit transceiver slots 9.6Gbps switch on a chip for non-blocking performance HP ProCurve Switch /100 ports (RJ-45) 2 gigabit transceiver slots 9.6Gbps switch on a chip for non-blocking performance 23 The HP ProCurve Switch 2500 Series provides a low-cost solution for access layer connectivity. These non-blocking, high-performance switches are available in two basic models: HP ProCurve Switch 2512 (J4812A), featuring 12 10/100 ports and two gigabit transceiver slots HP ProCurve Switch 2524 (J4813A), featuring 24 10/100 ports and two gigabit transceiver slots Each 10/100 port is equipped with HP auto-mdix, which means crossover cables are not required to interconnect switches when their ports are left at default settings. Both 2500 switches also offer a full line of management capabilities, enhancing customers ability to command from the center. However, for simpler deployments, both switches are available in unmanaged versions known as the 2300 series. 1 30

47 The HP ProCurve product family HP ProCurve Switch 2500 Series HP ProCurve Switch 2500 Series

48 Installation and service of HP ProCurve devices HP ProCurve 2600 class switch HP ProCurve Switch 2600 Series HP ProCurve Switch /100 ports (RJ-45) 2 dual personality ports: 10/100/1000 RJ-45 or mini- GBIC slot for a fiber transceiver 9.6Gbps backplane HP ProCurve Switch /100 ports (RJ-45) 2 dual personality ports 13.6Gbps backplane 25 The HP ProCurve Switch 2600 Series provides a low-cost solution for access layer connectivity. This non-blocking, high-performance switch comes in two basic models: HP ProCurve Switch 2626 (J4900A), featuring 24 10/100 ports and two dual-personality ports, which means they can support fiber or copper connectivity. A version that supports Power over Ethernet (PoE) also is available as the HP ProCurve Switch 2626-PWR (J8164A). HP ProCurve Switch 2650 (J4899A), featuring 48 10/100 ports and two dual-personality ports. A PoE-compliant version is available as the HP ProCurve Switch 2650-PWR (J8165A). Unmanaged versions of the switches are available as the HP ProCurve Switch 2700 Series. The HP ProCurve Switch 2600 also offers IP routing capabilities that make it an excellent choice for bringing network intelligence to the edge. Switches in the 2600 series can forward IP traffic between VLANs and can use static IP routes. 1 32

49 The HP ProCurve product family HP ProCurve Switch 2600 Series HP ProCurve Switch 2600 Series 26 The HP ProCurve Switch 2600-PWR Series can be connected to an HP ProCurve 600 Redundant and External Power Supply (J8168A). 1 33

50 Installation and service of HP ProCurve devices Back of HP ProCurve Switch 2600 Series Back of HP ProCurve Switch 2600 Series 27 The HP ProCurve Switch 2600 Series devices do not have a power switch. They are powered on when the power cord is connected to the switch and to a power source. For safety, the power outlet should be located near the switch installation. Redundant power if the primary power supply fails External power to provide more power to the PoE ports 1 34

51 The HP ProCurve product family HP ProCurve 600 Redundant and External Power Supply HP ProCurve 600 Redundant and External Power Supply HP ProCurve 600 Redundant and External Power Supply (J8168A) Provides redundant power for one of six switches connected to redundant power supply ports Supplies external power for HP ProCurve IEEE 802.3af Power over Ethernet compatible devices such as HP ProCurve 2626-PWR, 2650-PWR, and 5300xl series switches Redundant External HP ProCurve 600 RPS/EPS HP ProCurve 2800 series switches 28 Power-over-Ethernet (PoE power) Power over Ethernet technology allows IP telephones, wireless LAN access points, and other appliances to receive power as well as data over existing LAN cabling, without the need to modify the existing Ethernet infrastructure. The new Switch 2600-PWR series is designed with an internal PoE power supply that will supply 370 watts across the ports of the switch, at up to 15.4 watts per port. Redundant and External Power Supply Support The Switch 2600-PWR series can be connected to an HP ProCurve 600 Redundant and External Power Supply (J8168A), hereafter referred to as the HP 600 RPS/EPS, and receive redundant power from that unit. As an RPS unit, the HP 600 RPS/EPS will provide all the AC power necessary to keep the switch running should the switch internal AC power supply fail. As an EPS unit, the HP 600 RPS/EPS can supply up to 368 watts of PoE power to the switch if the internal PoE power supply of the switch should fail. When used with the Switch 2650-PWR, the additional EPS power can provide up to 15.4 watts per port for 48 ports. 1 35

52 Installation and service of HP ProCurve devices HP ProCurve Switch 6108 HP ProCurve Switch 6108 HP ProCurve Switch 6108 Six 10/100-TX/1000-T ports (RJ-45) Two dual personality ports: 10/100/1000 RJ-45 port or mini-gbic slot 16Gbps backplane 29 The HP ProCurve Switch 6108 (J4902A) is a low-cost, stackable 8-port switch with 6 auto-sensing 10/100/1000 ports and 2 dual-personality ports for 10/100/1000 or mini-gbic connectivity. This switch is ideal for access tier aggregation with two optional gigabit fiber uplinks to connect at distances of up to 70km. The 6108 unit supports the same Layer 3 features as the 4100gl and 2600 series switches, including support for static IP routes and forwarding between VLANs. The mini-gbics available for the 6108 unit are: HP ProCurve Gigabit-SX-LC mini-gbic (J4858A) HP ProCurve Gigabit-LX-LC mini-gbic (J4859A) HP ProCurve Gigabit-LH-LC mini-gbic (J4860A) 1 36

53 The HP ProCurve product family HP ProCurve Switch 2800 Series HP ProCurve Switch 2800 Series HP ProCurve Switch /100-TX/1000-T ports (RJ-45) Four dual personality ports: 10/100/1000 (RJ-45) or mini-gbic 48Gbps backplane HP ProCurve Switch /100-TX/1000-T ports (RJ-45) Four dual personality ports 96Gbps backplane 30 The HP ProCurve Switch 2800 Series maximizes LAN performance with its ability to maintain and manage bandwidth-intensive applications running at optimum capabilities. It handles complex applications such as digital imaging, graphic-intensive applications, media streaming requiring gigabit performance to the edge of the network where users connect and productivity requirements happen. The HP ProCurve Switch 2800 Series includes switches that offer the highest 1000Base-T port density available in a stackable device. The two basic models are: HP ProCurve Switch 2824 (J4903A) HP ProCurve Switch 2848 (J4904A) The 2800 series supports the same Layer 3 features as the 4100gl and 2600 series switches, including support for static IP routes and forwarding between VLANs. 1 37

54 Installation and service of HP ProCurve devices HP ProCurve redundant power supplies (4000 series, 4100gl, 5300xl series, 9300 series) HP ProCurve redundant power supplies 4000 series, 4100gl, 5300xl series, 9300 series All HP ProCurve modular switches support optional redundant, load-sharing power supplies 31 Pictured here is a second, load-sharing redundant power supply (HP ProCurve Switch 4000m/8000m Power Supply, J4119A). It would be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source than the other supply. Then, if one AC power source fails, the switch will continue to run. Caution The switch power supplies are hot-swappable, but the power supply must be disconnected from AC power before being installed or removed. 1 38

55 The HP ProCurve product family HP ProCurve Switch 4000m/8000m HP ProCurve Switch 4000m/8000m HP ProCurve Switch 4000m/8000m 10-slot chassis Switch 4000m includes 40 autosensing 10/100 ports and 5 open module slots Note: As of December 1999 the 4000m and 8000m switches were made functionally equivalent 32 The HP ProCurve Switch 4000m and 8000m are Layer 2, managed modular 10/100/1000 desktop switches that provide scalable, expandable, low-cost migration to 10/100 switching for the desktop with gigabit uplinks. HP ProCurve Switch 4000m (J4121A) comes bundled with 5-8 port 10/100Base-TX auto-sensing ports installed and 5 open module slots. HP ProCurve Switch 8000m (J4110A) comes with 10 open slots. The 4000 series devices have hot-swappable modules and support optional redundant load-sharing power supplies. 1 39

56 Installation and service of HP ProCurve devices Switch 4000m/8000m front Switch 4000m/8000m - front Front of the switch Power and Fault LEDs Console port Reset and Clear buttons System Fail and Self-Test LEDs Mode Selector buttons and LEDs Status LEDs for switch modules, fans, and power supplies Link and Mode LEDs for each slot 33 Switch Engine Module 1 40

57 The HP ProCurve product family Switch 4000m/8000m modules Switch 4000m/8000m - modules 10 slots for installing any of the available switch modules: Module Connector 8-port 10/100Base-T (J4111A) 4-port 100Base-FX (J4112A)* 1-port Gigabit-SX (J4113A) 1-port Gigabit-LX (J4114A) 1-port 100/1000Base-T (4115B) 4-port 10Base-FL (J4118A) RJ-45 SC SC SC RJ-45 ST * A redundant power supply is required if more than five 100-FX modules installed 34 The 4000 series switches support a flexible array of interfaces enabling the switch to provide excellent port density, gigabit uplinks for aggregation, and fiber connects where reach is needed. 1 41

58 Installation and service of HP ProCurve devices HP ProCurve Switch 4100gl Series HP ProCurve Switch 4100gl Series HP ProCurve Switch 4140gl 40 10/100-TX/1000-T ports 4 mini-gbic transceiver slots HP ProCurve Switch 4160gl 60 10/100-TX/1000-T ports 6 mini-gbic transceiver slots Empty slots may contain additional 10/100/1000 modules or any combination of HP ProCurve Switch gl modules 35 The 4100gl switches provide reliable, high-performance, high-density 10Mbit, 100Mbit, or gigabit connectivity for a growing network. The Switch 4100gl series is the low-cost, modular alternative to stackable switches. The HP ProCurve Switch 4100gl series offers an excellent solution for bringing high-density gigabit connectivity to the edge. For the highest concentration of gigabit edge ports in a modular switch, the HP ProCurve Switch 4100gl series switches are available in modes that ship with two or three 20-port, 10/100/1000 modules. These models are: HP ProCurve Switch 4140gl (J8151A), which ships with 40 10/100 ports and 4 mini-gbic transceiver slots HP ProCurve Switch 4160gl (J8152A), which ships with 60 10/100 ports and 6 mini-gbic transceiver slots 1 42

59 The HP ProCurve product family HP ProCurve Switch 4100gl Series: modules/transceivers/gbics HP ProCurve Switch 4100gl Series: modules/transceivers/gbics 4 or 8 slots for installing any of the available switch components: Module Transceiver Mini-GBIC Module/transceiver/GBIC 24-port 10/100/1000 Plus 2 mini-gbic slots (J4908A) 24-port 10/100-TX (J4862B) 12-port 100-FX (J4892A) 6-port 100/1000-T (J4863A) 6-slot mini-gbic (J4893A) 3 slot Transceiver (J4864A) 100-FX (J4853A) 100/1000-T (J4834A) Gigabit-LX (J4132A) Gigabit-SX (4131B) Stacking Kit (J4116A) Gigabit-LH (J4860A) Gigabit-LX (J4859A) Gigabit-SX (J4858A) Connector RJ-45 LC RJ-45 MTJR RJ-45 SC RJ-45 SC SC LC LC LC

60 Installation and service of HP ProCurve devices HP ProCurve Switch 5300xl Series HP ProCurve Switch 5300xl Series HP ProCurve Switch 5308xl 8-slot chassis may contain any of the following modules: 24-port 10/100-TX 4-port 100-TX/1000-T 4-port mini-gbic module supports standard transceivers 12-port 100-FX with MTRJ connectors HP ProCurve Switch 5304xl 4-slot chassis support same modules 37 The HP ProCurve Switch 5300xl Series includes modular 4- and 8-slot switches that support a flexible array of connectivity modules. The series offers models with populated or unpopulated slots. The unpopulated models are: The HP ProCurve Switch 5304xl (J4850A), which offers four empty slots The HP ProCurve Switch 5308xl (J4819A), which offers eight empty slots The populated models are: The HP ProCurve Switch 5348xl (J4849A), which ships with two 24-port 10/100 modules installed in the 4-slot (5304xl) chassis The HP ProCurve Switch 5372xl (J4848A), which ships with three 24-port 10/100 modules installed in the 8-slot (5308xl) chassis 1 44

61 The HP ProCurve product family HP ProCurve Switch 5300xl Series HP ProCurve Switch 5300xl Series

62 Installation and service of HP ProCurve devices HP ProCurve Switch 5300xl Series: modules/transceivers/gbics HP ProCurve Switch 5300xl Series: modules/transceivers/gbics 4 or 8 slots for installing any of the available switch components: Module Mini-GBIC Module/transceiver/GBIC 24-port 10/100-TX (J4820B) 4-port 100/1000-T (J4821A) 4-slot Mini-GBIC (J4878A) 12-port 100-FX (J4852A) PoE (J8161A) 16-port 10/100/1000 Gigabit-LH (J4860A) Gigabit-LX (J4859A) Gigabit-SX (J4858A) Connector RJ-45 RJ-45 MTRJ RJ-45 LC LC LC

63 The HP ProCurve product family Port and slot numbering (2500, 2600, 4000 series, 4100gl series, 5300xl series, 6108) Port and slot numbering 2500, 2600, 4000 series, 4100gl series, 5300xl series, Switch 2524: P orts 1-24 are 10 /100; ports 25 and 26 are 1000B ase-sx Transceiver slots /100Base-TX ports Switch 2512: P orts 1-12 are 10 /100; ports 13 and 14 are 1000B ase-sx A C B D Switch 4104gl: P orts A1 and A2 are 1000B ase-sx; ports B1- B6 are 100-TX /1000-T; ports C1-24 and D1-24 are 10/ A C B D Switch 5304xl: P orts A1- A24 and B 1-B24 are 10 /100 ports ; ports C1-C4 are 100-TX / 1000-T ports; ports D1-D2 are 1000B ase-sx mini- GBICs

64 Installation and service of HP ProCurve devices HP ProCurve accessories: Reset and Clear buttons (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) HP ProCurve accessories: Reset and Clear buttons 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108 Most ProCurve switches have Reset and Clear buttons Reset button Resets the switch warm reboot Clears any temporary error conditions that may have occurred Executes the switch self-test and resets all network activity counters to zero Clear button Clears password When pressed by itself for at least one second, deletes any switch console access passwords that you may have configured Restores factory defaults When pressed with the Reset button in a specific pattern, clears any configuration changes you may have made 41 The Reset button is used to reset the switch while it is powered on. This action clears any temporary error conditions that may have occurred, executes the switch self-test, and resets all network activity counters to zero. The Clear button is used for these purposes: Deleting passwords When pressed by itself for at least one second, deletes any switch console access passwords that you may have configured. Use this feature if you have misplaced the password and need console access. Restoring factory default configuration When pressed with the Reset button in a specific pattern, clears any configuration changes you may have made through the switch console, the web browser interface, and SNMP management, and restores the factory default configuration to the switch. 1 48

65 The HP ProCurve product family Using Clear and Reset to erase the startup config (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) Using Clear and Reset to erase the startup config 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108 If manager password is unknown: 1. Simultaneously press the Reset and Clear buttons 2. Continue to press the Clear button while releasing the Reset button 3. When the Self Test LED begins to flash, release the Clear button This procedure requires physical access to the switch If manager password is known: Access manager level and enter this command: Edge_1# erase startup-config Perform Factory Reset Flashing LED 42 Administrators can erase the current startup configuration of an HP ProCurve switch by accessing buttons on the front panel or by issuing a command at the CLI. If the manager password is known, administrators can erase the configuration by accessing the manager level and issuing the command erase startup-config. Users who issue this command will receive a prompt asking them to confirm that they want to delete the startup configuration. This command will not erase or reset the password. To perform this function, see the previous page. If the password has been lost, you can erase the startup configuration by simultaneously pressing the Reset and Clear buttons, as shown above. This operation resets the switch to its factory default settings. This includes resetting all user-defined passwords. The precautions described during the discussion of removing passwords apply to this operation as well. They are: Using non-conducting instruments to access the buttons Housing the device in a secure location so that unauthorized users cannot use this procedure to disrupt switch operation 1 49

66 Installation and service of HP ProCurve devices HP ProCurve Routing Switch 9300m Series HP ProCurve Routing Switch 9300m Series 9315m (J4874A) 15 open module slots Up to 232 Gigabit Ethernet ports Up to 672 auto-sensing 10/100-TX ports Up to twenty- eight 10- Gigabit Ethernet ports 9308m (J4138A) 9304m (J4139A) 8 open module slots Up to 120 Gigabit Ethernet ports Up to 336 auto-sensing 10/100-TX ports Up to fourteen 10- Gigabit Ethernet ports 4 open module slots Up to 56 Gigabit Ethernet ports Up to 144 auto-sensing 10/100-TX ports Up to six 10- Gigabit Ethernet ports 43 The HP ProCurve Routing Switch 9300m Series routing switch is a modular, wirespeed, chassis-based Layer 3 switch. As such, it offers a high-performance solution for core routing and switching. The 9300m series is available in three models that enable a high degree of scalability and the ability to future-proof almost any enterprise network: HP ProCurve Routing Switch 9304m (J4139A), which includes four open module slots that can accommodate six 10-gigabit ports, 56 Gigabit Ethernet ports, 144 auto-sensing 10/100 ports, or a combination HP ProCurve Routing Switch 9308m (J4138A), which includes eight open module slots that can accommodate gigabit ports, 120 Gigabit Ethernet ports, 336 auto-sensing 10/100 ports, or a combination HP ProCurve Routing Switch 9315m (J4874A), which includes 15 open module slots that can accommodate gigabit ports, 232 Gigabit Ethernet ports, 672 auto-sensing 10/100 ports, or a combination All 9300m series switches support the same modules, and all models ship with unpopulated slots, creating maximum flexibility for network designers. 1 50

67 The HP ProCurve product family HP ProCurve 9300m series HP ProCurve 9300m series 9315m 9308m Console port 9304m Power supplies 44 Note The 9315m unit requires a minimum of two J4875A power supplies to power up or reboot. With only two power supplies installed, if it becomes necessary to replace a failed power supply, you must first install and power up the replacement power supply before you remove the failed power supply. Otherwise, the 9315m routing switch will cease to operate. Also, for true power supply redundancy (N+1) in both the 9315m and the 9308m units, you must install all four power supplies. 1 51

68 Installation and service of HP ProCurve devices Management modules (9300 series) Management modules 9300 series Each chassis must have at least one management module. Management modules: Provide flash memory for storage of system image (firmware) and configuration information Provide dynamic RAM for storage of forwarding tables and routing information Enable direct serial connection for configuration and monitoring Support in-band management via Secure Shell, Telnet, HTTP, SNMP Support file transfer via TFTP and Secure Copy Three types of management modules are available. Each management module supports a family of port modules for network connectivity. Extended Performance (EP) Management Module M4 Management Module T-Flow Management Module 45 The HP ProCurve Routing Switch 9315m (J4874A) includes 15 open module slots that can accommodate gigabit ports, 232 Gigabit Ethernet ports, 672 autosensing 10/100 ports, or a combination. All 9300m series routing switches forward IP, IPX, and AppleTalk traffic. The management module has flash memory that holds the switch s operating system and its configuration information. It also has dynamic memory that holds the tables the switch uses to make forwarding decisions. Although the routing switch will continue to forward traffic without a working management module, it cannot add entries to its memory-resident tables if the management module fails. The management module supports IP management and transfer protocols, such as Secure Shell (SSH), Telnet server and client, the Simple Network Management Protocol (SNMP), HyperText Transfer Protocol (HTTP, for web access), and Trivial File Transfer Protocol (TFTP). Providing a redundant management module ensures that if the primary module fails, the backup management module will continue to provide remote access to the switch and the ability to add to its tables. 1 52

69 The HP ProCurve product family Enhanced performance management and port modules (highest port density) 9300 series Enhanced performance management and port modules (highest port density) 9300 series HP J 4885A EP 8-port Mini-GBIC redundant management module HP J4894A EP 16-port Mini-GBIC module HP J4895A EP 16-port 100/1000-T module (RJ-45 connectors) HP J4889A 48-port 10/100 (RJ-21 telco connectors) HP J4881A 48-port 10/100 (RJ-45 connectors) 46 There are two choices for gigabit port modules, each of which supports 16 ports. One supports mini-gbics and the other has RJ-45 ports for Category 5 cabling. Each of these modules occupies a single module slot. There are two choices for 10/100 port modules, each of which supports 48 ports. The port module with RJ-45 connectors occupies two module slots. The port module with RJ-21 connectors occupies a single module slot. Each of the four 50- pin Telco ports can be connected to a patch panel that converts the signal into 12 RJ-45 ports. EP port modules support twice as many ports as the modules in the M4 family, which is described later in this section. The use of EP modules results in the high port density that makes the HP ProCurve Routing Switch 9300 series suitable for data center applications and medium to large enterprise networks. In the past few years, technology advancements have allowed dramatic increases in speed in Ethernet networks up to 10Gbps. Many experts agree that the 1.5 Kbyte frame size traditionally used on Ethernet networks has become inefficient in the face of these higher speeds. To make better use of available bandwidth, many end stations with gigabit network interfaces can be configured to use jumbo frames, which are up to 14,336 bytes in size. When the clients, servers, and switches within a network have jumbo frame support enabled, efficiency can be improved dramatically. HP ProCurve Routing Switch 9300 series devices that use EP technology can be configured to support jumbo Ethernet frames box-wide or on a per-interface basis. 1 53

70 Installation and service of HP ProCurve devices 10-gigabit module 1 port (9300 series) 10-gigabit module 1 port 9300 series HP J4891A 10 GbE 10km module 1310nm serial - single mode fiber Compatible with M2, M4, and EP management modules (not compatible with M1) Complies with IEEE 802.3ae Supports distances up to 10km 47 The HP ProCurve 10-Gigabit Ethernet module is compliant with IEEE 802.3ae draft 3.3. The HP ProCurve product line supports one variety of 10-gigabit Ethernet 1310nm serial for use with single-mode fiber and an SC connector. The 10-gigabit Ethernet module may be used in the 9304m, 9308m, and 9315m routing switches. The 10-gigabit module does not provide management services, which means that it must be installed in a chassis that has at least one management module. It is compatible with the EP redundant management module and may coexist with other EP port modules. The 10-gigabit module is also compatible with the M4 management module and its related port modules. 1 54

71 The HP ProCurve product family 10-gigabit module 2 port (9300 series) 10-gigabit module 2 port 9300 series J8174A 2-port - 10 GbE Compatible with M2, M4 and EP management modules (not compatible with M1) The module uses GBIC-like XE NP AK Multisource Agreement (MS A) optics hot-swappable The following kinds of XE NP AK optics are supported: 1310nm serial for single-mode fiber (10 km reach) 1510nm serial for single-mode fiber (40km reach) 48 The HP ProCurve Routing Switch 9300m series delivers a new level of highperformance capabilities and investment protection for medium and large enterprise networks. By providing high-performance throughput from the wiring closet into the data center and out to the edge of the WAN, the Routing Switch 9300m series non-blocking architecture enables network managers to build scalable and highly available network designs. 1 55

72 Installation and service of HP ProCurve devices Recently retired - M4 redundant management and port modules Recently retired - M4 redundant management and port modules HP J 4857A - 8-port mini-gbic redundant management module HP J4856A -8-port mini-gbic HP J4842A - 8-port 1000Base-T HP J4140A - 24-port 10/100 (RJ-45) HP J 4142A - 24-port 100Base- FX (MT-RJ) 49 The M4 management module and its port modules are the oldest of the module families. The capabilities of its predecessors, M1 and M2 modules, are more fully described in the latest release notes for 9300 series routing switch software updates. The M4 management module can be used with any of the port modules shown in this slide. The port modules in the M4 family are not compatible with the EP modules described previously. 1 56

73 Cons ole The HP ProCurve product family Retired management modules for HP ProCurve Routing Switch 9300 series Retired management modules for HP ProCurve Routing Switch 9300 series M1 Management Modules 1 Link 2 3 Li nk 4 5 Li nk 6 7 Li nk 8 Console Activity Activity Activity Activity HP J4144A - 8-port Gigabit-SX Management Module LX SX 1 Link 2 3 Li nk 4 5 Li nk 6 7 Li nk 8 Console Activity Activity Activity Activity HP J4146A - 4-port Gigabit-LX and 4-port Gigabit-SX Management Module HP J4141A - 16-port 10/100 Management Module * These management modules cannot coexist in the same chassis with redundant management modules 50 The 8-port Gigabit SX Management Module (HPJ4144A) combines management capabilities with eight Gigabit-SX ports. Gigabit-SX ports allow connections of up to 220 meters using multimode fiber. The 4-port Gigabit LX and 4-port Gigabit SX Management Module (HPJ4146A) combines management capabilities with eight Gigabit-LX ports. Gigabit-LX ports allow connections of up to 5 kilometers when using single-mode fiber. When using multimode fiber, distances of up to 550 meters are supported; however, you must use a conditioning cable when using multimode fiber with Gigabit-LX ports. The 16-port 10/100 Management Module (HPJ4141A) supports 16 10/100 ports with RJ-45 connectors that autonegotiate with attached devices, supporting 10Base-T half/full duplex and 100Base-T half/full duplex. These management modules contain a Central Processing Unit, 32MB RAM, flash memory for storing system code, and other critical hardware and software components. If the management module fails, the system will not operate fully and the management module must be replaced. The management modules shown here do not support redundancy; only one of these management modules can exist in the routing switch chassis. 1 57

74 Cons ole Installation and service of HP ProCurve devices Retired redundant management modules for HP ProCurve Routing Switch 9300 series Retired redundant management modules for HP ProCurve Routing Switch 9300 series M2 Redundant Management Modules 1 Link 2 3 Link 4 5 Link 6 7 Link 8 Console Activity Activity Activity Activity HP J4846A - 8-port Gigabit-LX Redundant* Management Module 1 Link 2 3 Link 4 5 Link 6 7 Link 8 Console Activity Activity Activity Activity HP J4845A - 8-port Gigabit-SX Redundant* Management Module HP J4847A - Redundant* Management Module * These management modules cannot coexist in the same chassis with nonredundant management modules 51 Support for redundant management modules is in Routing Switch system image code version 5.0 or above. The 8-port Gigabit SX Redundant Management Module (HPJ4845A) combines management capabilities with eight Gigabit-SX ports. Gigabit-SX ports allow connections of up to 220 meters using multimode fiber. The 8-port Gigabit LX Redundant Management Module (HPJ4846A) combines management capabilities with eight Gigabit-LX ports. Gigabit-LX port allows connections of up to 5 kilometers when using single mode fiber. When using multimode fiber, distances of up to 550 meters are supported; however, you need to use a conditioning cable when using multimode fiber with Gigabit-LX ports. The Redundant Management Module (HPJ4847A) supports no external connections and is dedicated to the management task. These management modules contain a Central Processing Unit, 128MB RAM, flash memory for storing system code, and other critical hardware and software components. The system will not work fully without a management module. Redundant management modules shown here may not coexist with the nonredundant management modules shown on the previous slide. 1 58

75 The HP ProCurve product family Retired port modules for HP ProCurve Routing Switch 9300 series Retired port modules for HP ProCurve Routing Switch 9300 series 1 Link 2 3 Link 4 5 Link 6 7 Link 8 Activity Activity Activity Activity HP J4143A - 8-port Gigabit-SX LX SX 1 Link 2 3 Link 4 5 Link 6 7 Link 8 Activity Activity Activity Activity HP J4145A - 4-port Gigabit-SX and 4-port Gigabit-LX HP J4140A - 24-port 10/100 (RJ-45) HP J4142A - 24-port 100Base FX (MT-RJ) 52 The HP J4143A has eight Gigabit-SX ports with SC connectors that support distances up to 220 meters with multimode fiber. The HP J4145A has four Gigabit-SX ports with SC connectors that support distances up to 220 meters with multimode fiber, and four Gigabit LX ports with SC connectors that support distances up to 5 kilometers with single-mode fiber. The HP J4140A has 24 10/100 ports with RJ-45 connectors which autonegotiate with attached devices, supporting 10Base-T half/full duplex and 100Base-TX half/full duplex. The HP J4142A has Base-FX ports with MT-RJ connectors. MT-RJ connectors include both transmit and receive fibers in a single connector that is the same size as an RJ-45 connector, thus allowing higher port density than SC connectors. 1 59

76 Installation and service of HP ProCurve devices Port and slot numbering (9300 series) Port and slot numbering 9300 series e 1/1 e 1/8 Slots on HP ProCurve 9304m are numbered from top to bottom. Ports are numbered from left to right. slot 1 slot 4 e 4/1 e 4/16 HP ProCurve 9304m e 1/1 e 15/1 e 1/8 Slots on HP ProCurve 9308m and 9315m are numbered from left to right. Ports are numbered from top to bottom. e 15/16 HP ProCurve 9315m slot 1 slot

77 The HP ProCurve product family Recovering from a lost password (9300 series) Recovering from a lost password 9300 series The boot monitor allows you to interrupt the boot sequence and boot the system without requiring any passwords. You can then change the password for future access and the switch will operate normally. This command is not listed in the help menu, nor can it be abbreviated M4 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR> no password BOOT MONITOR> boot system flash primary Once the switch finishes booting and loads the startupconfiguration you are left at the non-privileged prompt Router_A>enable Router_A>config terminal Router_A(config)#enable super-user-password password 54 While the HP ProCurve routing switch is starting up, there is a 2-second window during which you can interrupt the boot process by pressing the b key from a terminal with a direct serial connection. This brings up the boot monitor. Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The diagram shown here displays how to instruct the switch to boot from primary flash. The boot monitor can also be used for recovery from a lost super-user password. In this case, you must enter the boot monitor and enter a hidden command no password, followed by a boot system flash primary command. Note that booting without password protection does not remove the passwords from the configuration file; it simply removes the authentication requirement. When the system boots with no password, you can enter the privileged level EXEC by simply entering the enable command at the user level EXEC. You should assign a new super-user password and write the configuration to memory immediately to secure the system and replace the unknown password. 1 61

78 Installation and service of HP ProCurve devices Ignore startup configuration at boot time (9300 series) Ignore startup configuration at boot time 9300 series The boot monitor allows you to interrupt the boot sequence and boot the system with the factory default configuration This is useful if there is something in the startup-configuration preventing the switch from booting normally Router_A# reload M4 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR> use default config BOOT MONITOR> boot system flash primary 55 This command sequence instructs the switch to boot with the factory default configuration. The two-second boot monitor opportunity may be eliminated by enabling the fastboot feature. Note that fastboot may be enabled (fastboot) or disabled (fastboot off) at both the user and privileged EXEC level. The fastboot command does not cause the system to restart; it does determine how quickly the system will boot. 1 62

79 The HP ProCurve product family HP ProCurve reference material HP ProCurve reference material HP ProCurve home page or HP ProCurve products index page HP ProCurve software downloads page HP ProCurve product manuals page HP ProCurve network services page HP ProCurve problem reports & FAQs 56 Release notes are posted on the HP ProCurve website and provide information on new software updates: New features and how to configure and use them Software management, including downloading software to the switch Software fixes addressed in current and previous releases To view and download a copy of the latest release notes for your switch: 1. Go to the HP ProCurve website at 2. Click on Technical support. 3. Click on Product manuals. 4. Click on the product for which you want to view or download a manual. 1 63

80 Installation and service of HP ProCurve devices Module 1 summary Module 1 summary In this module you learned: How the HP ProCurve products fit into the OSI architecture Accessories and features that the different products have in common Specifications for the cables and connectors supported by the product line Which management interfaces are supported by each product

81 The HP ProCurve product family Learning check Module 1 1. Which HP ProCurve switch family members are modular switches? a. 4000m b series c. 5300xl series d. 4100gl series e series 2. Which HP ProCurve switch family provides the highest Gigabit Ethernet port density? a b c. 4100gl d. 5300xl e In the following list, check which switches use mini-gbics, transceivers, or both: 5300xl mini-gbics transceivers 2500 mini-gbics transceivers 2800 mini-gbics transceivers 9300m mini-gbics transceivers 4100gl mini-gbics transceivers 4. In the following list, check the network design layer at which the switches are commonly used: 5300xl Core Distribution Edge 4100gl Core Distribution Edge 9300m Core Distribution Edge 2800 Core Distribution Edge 2600 Core Distribution Edge 2500 Core Distribution Edge 1 65

82 Installation and service of HP ProCurve devices 1 66

83 Switch management Module 2 Objectives This module discusses the management features of HP ProCurve switches. After completing this module you should be able to: Discuss the supported management interfaces on a per-product basis: CLI Menu Web Configure IP addressing and the default gateway 2-1

84 Installation and service of HP ProCurve devices Device management can take different paths Device management can take different paths Out- Out- of-band of-band RS- RS and and terminal terminal emulation emulation Interface: Interface: CLI CLI or or menu, menu, not not graphical graphical File Filetransfers - -Xmodem, Zmodem Zmodem In-band In-band- -Ethernet Ethernetconnection Interface: Interface: CLI CLI or or menu menu via via Telnet Telnet Interface: Interface: graphical graphical via via HTTP HTTP and and SS NMP NMP File Filetransfers TFTP TFTP 3 2-2

85 Switch management Out-of-band access Out-of-band access Initial configuration is often performed via direct serial connection The console port (DB-9 male) is on the front of the switch A cable is provided with every switch Note: 9300 series devices require a straight-through console cable; all other switches use a cross/null modem cable Terminal emulation session: 9600 bps 8 data bits, no parity, 1 stop bit XON/XOFF flow control 4 Also works with No Flow Control incidentally, No Flow Control is specified for the 9300 unit. The CLI is a character-based interface that enables users to define parameters for the switch feature set and to view the current status of those features. Although the CLI is available through Telnet after an IP address has been assigned to the switch, you will probably use a direct serial connection through the switch s console port for initial configuration. To begin this session, use the cable provided with the switch to connect a PC to the console port (DB-9 male) on the front of the switch. You will also need a terminal emulation application, such as HyperTerminal, which is included with Microsoft Windows, or TeraTerm Pro, the application you will use during lab exercises. After you have connected to the switch and waited for its power-on self-test to complete, press Enter several times to initiate a session. Because the switch does not have any password protection at factory default settings, one of your first activities is likely to be assigning passwords. 2-3

86 Installation and service of HP ProCurve devices In-band access for device management In-band access for device management Device management is typically performed remotely using IP services such as: Telnet enables terminal access to the command line interface HTTP provides web access to graphical interface SNMP uses network management applications to provide access to a graphical interface Remote access requires a valid IP address, which may be assigned using: Dynamic Host Configuration Protocol (DHCP) Static IP address assignment through direct connection to the serial interface Network devices may be protected from unauthorized access using a password 5 Administrators and technicians typically use one of the following IP services to perform device management tasks: Telnet, which enables terminal access to the Command Line Interface (CLI) HTTP, which provides Web access to a graphic configuration interface SNMP, which uses network management applications to provide access to a graphic management interface All of these device-management techniques are classified as in-band techniques, meaning that traffic resulting from the management tasks takes the same path as other network traffic. Consequently, the switch s management interface must have an IP address before these tools are available. By default, a switch will receive an IP address through Dynamic Host Configuration Protocol (DHCP), but because DHCP addresses are usually dynamic, they are not well-suited to management interfaces. Instead, administrators typically use the CLI to assign static IP addresses to managed switches and other infrastructure devices. Administrators also can assign addresses to switches using reservations configured on their DHCP servers. We will discuss the implications of how IP addressing is handled. 2-4

87 Switch management Management interfaces Management interfaces HP ProCurve switches support four configuration and monitoring interfaces: Command Line Interface (CLI) Character-based interface allows configuration and monitoring of all features Accessible through direct serial or Telnet session Menu interface Accessible through direct serial or Telnet session Web interface Graphical configuration and monitoring interface Enables web browser to access switch s built-in web server SNMP network management interface Enables switch access via a management station/application 6 All HP ProCurve switches offer the monitoring interfaces listed in the slide. The CLI is the most extensive management tool, enabling configuration and monitoring of all switch features. The menu and Web interfaces support subsets of the features available through the CLI. This module will discuss all of these interfaces, and you will make extensive use of the CLI and Web interfaces during exercises throughout the course. The switches support the Simple Network Management Protocol (SNMP), an IP component that enables monitoring of a wide array of performance metrics on switches and other network devices. Typically, administrators use SNMP-enabled applications to collect specified data about network devices. Administrators also can use HP ProCurve Manager and HP ProCurve Manager Plus to monitor and configure many parameters on HP ProCurve switches. 2-5

88 Installation and service of HP ProCurve devices Points to ponder... Points to ponder You will usually find that the CLI is the most comprehensive interface to use. You will often find it useful to access the switch from a remote location either on-net or off-net. Remember that the switch must have an IP address before you can access it remotely via Telnet or HTTP. The menu interface is often useful when you are configuring many features at one time. The Web interface provides userfriendly switch access. It can be the preferred way to monitor switch activity

89 Switch management CLI interface privilege levels (2500, 2600, 2800, 4100gl, 5300xl series and 6108) CLI interface privilege levels 2500, 2600, 2800, 4100gl, 5300xl series and 6108 The CLI is a text-based interface for configuring and monitoring HP ProCurve switches. The CLI can be accessed either through a direct serial connection to the device or through a Telnet session Operator HPswitch> enable At the Operator level you can examine the current configuration and move between interfaces without being able to change the configuration Manager HPswitch# config terminal Provides all Operator-level privileges plus the ability to perform system-level actions that do not require saving changes to the system configuration file Global Configuration - HPswitch(config)# vlan 10 Provides all Operator- and Manager-level privileges and enables you to make configuration changes to any of the switch s software features Context Configuration - HPswitch(vlan-10) Provides all Operator and Manager privileges and enables you to make configuration changes in a specific context, such as one or more ports or avlan 8 Each switch provides different levels of access. Each level can be password protected. The assignment of user privileges and passwords is an important part of a device installation. All switches except the 9300 device support two levels of management access. The Operator basically has read access, while Manager level provides read/write access. The 9300 device provides additional levels of access. Note If you are unable to connect with the routing switch through a Web browser due to a proxy problem, it may be necessary to set your Web browser to direct Internet access instead of using a proxy. For information on how to change a proxy setting, refer to the online help provided with your Web browser. 2-7

90 Installation and service of HP ProCurve devices Points to ponder Points to ponder Before trying to access a customer switch, you must understand the type of access that they ve implemented. Many larger networks have deployed centralized authentication. The advantage is that this approach enables multiple user/password pairs, allowing multiple users to have individual accounts with the same access privileges. Another advantage is that centralized authentication provides a way for encrypting the username/ password pairs. The customer may have configured passwords for local user accounts. Or, he may have configured the device to use a centralized authentication method, such as a RADIUS server or a TACACS/TACACS+ server. You must make sure that you have the proper access level to perform the task that needs to be done! 9 2-8

91 Switch management Assigning a manager password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) Assigning a manager password at CLI 2500, 2600, 2800, 4100gl, 5300xl series and 6108 HP ProCurve Switch# HP ProCurve Switch# co<tab> configure copy HP ProCurve Switch# config HP ProCurve Switch(config)# password? <operator manager> HP ProCurve Switch(config)# password manager New password: ******** Please retype new password: ******** HP ProCurve Switch# exit HP ProCurve Switch# exit HP ProCurve Switch> exit Do you want to log out(y/n)? y... HP ProCurve Switch> enable Password: ******** HP ProCurve Switch# At system defaults, the switch is not password-protected. The initial prompt # signifies read/write access to the switch. The prompt > signifies read-only access to the switch. Provide the manager password to gain read/write access. Define a manager password to protect read/write access to the switch. 10 When you connect to the switch for the first time, the CLI prompt presents a default switch name followed by the number sign (#). The default name is based on the switch model. The # indicates that you are in read/write mode, or manager level. It is then possible to configure the switch without entering a password. To assign a manager password from the CLI, enter the password manager command. The next time you log in to the switch, the prompt shows the greater than sign (>) to indicate that you are in read-only mode, or operator level. To move to the manager level, enter enable. 2-9

92 Installation and service of HP ProCurve devices Assigning an operator password at CLI (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) Assigning an operator password at CLI 2500, 2600, 2800, 4100gl, 5300xl series and 6108 HP ProCurve Switch# config HP ProCurve Switch(config)# password operator New password: ******** Please retype new password: ******** HP ProCurve Switch(config)# exit HP ProCurve Switch# exit HP ProCurve Switch> exit Do you want to log out(y/n)? y... Password: ******** HP ProCurve Switch> exit Do you want to log out(y/n)? y... Password: ******** HP ProCurve Switch# Define an operator password to protect read-only access to the switch. Provide the operator password to gain readonly access. OR Provide the manager password to gain read/write access. 11 In operator level, a user has read-only rights to the switch s settings, meaning the user can view statistics and the switch s current configuration, but cannot alter the configuration. If you want to protect this level from unauthorized access, use the password operator command. If only the manager password has been defined, all users can access the operator level by pressing Enter at the password prompt. Users who enter the enable command to access the manager level will be prompted for the manager password. If only an operator password has been defined, users who enter the password will be presented with the operator prompt. All authenticated operator users can then access the manager level with the enable command. The manager level is only protected if a manager password is explicitly defined. 2-10

93 Switch management Local authentication for device access (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, and 6108) Local authentication for device access 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series and 6108 Most HP ProCurve switches support one password for manager-level access and one password for operator-level access. You can optionally associate a name with each access level Switch prompts for user name and password User supplies name and password Switch validates manager name and password and grants read /write access 12 If the switch is configured for local authentication, the password is compared with those defined on the switch. Local authentication allows you to define one password for the manager level and one password for the operator level; all users with a particular access level share the same authentication information. If the supplied password matches with the operator level, the user is given read-only access. If the password matches with the manager level, the user is given read/write access. 2-11

94 Installation and service of HP ProCurve devices Centralized authentication for device access (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Centralized authentication for device access 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series IP network TACACS+ or RADIUS authentication server 3 Switch forwards authentication information to server 4 Server validates user name /pass word pair against its database and notifies switch of the privilege level Switch prompts for user name and password User supplies name and password Switch grants appropriate access level Benefits: Name/password pairs are entered once for each server, rather than once for each switch Each user has a unique name/ password pair, rather than sharing with other users with the same access level Authentication traffic between switch and server may be encrypted for better security 13 All manageable HP ProCurve switches can be configured to use either local or centralized authentication services. When using centralized authentication, name/password pairs are stored on a server that the switch can access through the IP network. 2-12

95 Switch management Setting system information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Setting system information 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series You can define three items that clearly identify the switch and differentiate it from other switches: Host name, a name that appears as part of the prompt at the CLI Contact information, such as phone extension or address Physical location, such as building and wiring closet HP ProCurve Switch# config HP ProCurve Switch(config)# hostname Edge_1 Edge_1(config)# snmp-server contact Admin Edge_1(config)# snmp-server location data center Define a host name for the switch. Notice that the prompt changes. Location and contact information is defined as part of SNMP services 14 One of the first things you will want to do is configure the system information. When you are working with multiple switches, seeing the name of the switch you re working on (in the prompt) will make things less confusing. Configuring contact information will be of great value to another tech that is not familiar with the account. 2-13

96 Installation and service of HP ProCurve devices Manager and operator (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) Manager and operator levels 2500, 2600, 2800, 4100gl, 5300xl series and 6108 show - display system information ping, link-test - test connectivity menu, setup - move to one of the menu interfaces clear - reset system statistics counters erase, write, copy - manipulate image and configuration files config - advance to the global configuration level exit - return to operator level To enter the manager level from the operator level: Edge_1> enable <Enter> Edge_1# To leave the manager level and return to the operator level: Edge_1# exit <Enter> Edge_1> show - display system information ping, link-test - test connectivity menu, setup - move to one of the menu interfaces enable - advance to manager level Manager-level prompt: Operator-level prompt: Edge_1# Edge_1> 15 HP ProCurve switches support four privilege levels: operator, manager, global configuration, and context configuration. This slide shows the relationship between the operator and manager levels. The commands available at the operator level are essentially a subset of those available at the manager level. The operator level enables read-only access and allows the user to view statistics by using the show command or a menu. Operator users also can use link-test and ping commands to perform Layer 2 and Layer 3 connectivity tests from a menu interface or at the CLI. Operator users who have the appropriate password can use the enable command to advance to the manager level. Users at the manager level have access to all of the same commands as users at the operator level. In addition to commands that display statistics and test connectivity, users at the manager level can clear statistics. Manager level users can write, erase, and copy image and configuration files to flash memory. 2-14

97 Switch management Interface context at the CLI - some commands (2500, 2600, 2800, 4100gl, 5300xl series, and 6108) Interface context at the CLI (some commands) 2500, 2600, 2800, 4100gl, 5300xl series and This is only a subset of the available commands. Also, note that the commands available will be different depending upon the access level. Typically, the manager level will have access to the largest number of available commands. 2-15

98 Installation and service of HP ProCurve devices CLI tips and shortcuts (2500, 2600, 2800, 4100gl, 5300xl series, 6108) CLI tips and shortcuts 2500, 2600, 2800, 4100gl, 5300xl series and 6108 Help Display Help for any command that is available at the current context level by entering enough of the command string to identify the command, along with help Typing the? symbol lists the commands you can execute at the current privilege level Tab completion Type one or more consecutive characters in a command and then press [Tab] History show history displays the current command history 17 The CLI offers several shortcuts and features designed to simplify management and improve productivity. Some of the most important are as follows: The <Tab> and <?> commands enable administrators to access the help features on HP ProCurve switches. When accessing help in these ways, it is not necessary to press Enter. The <Tab> command also can be used to obtain context-sensitive completion of a partial command. For instance, if you enter co<tab> at the manager level, the CLI will indicate that available commands that start with co are configure and copy. The CLI enables you to shorten commands to the minimum number of characters necessary for uniqueness. For instance, at the manager level, the CLI will execute the configure command after con is entered because it is the only command that begins with those characters. 2-16

99 Switch management HP ProCurve switches store up to 25 commands numbered 1 to 25 in their history buffers. To scroll through the list of commands, press the up or down cursor arrows from the CLI prompt. Enter the show history command to see a complete list of buffer commands. To repeat a command in the buffer multiple times, enter repeat plus the command s buffer number plus count and the number of times you want the command to repeat. For instance, the command repeat 6 count 1 will repeat the sixth command in the buffer once. To simplify the reissuing of complex commands, you can recall any command from the CLI buffer and edit it with new parameters. Command completion and history do not work on 9300 devices. 2-17

100 Installation and service of HP ProCurve devices CLI interface privilege levels (9300 series) CLI interface privilege levels 9300 series User EXEC HPswitch> enable Commands are at the top of the CLI hierarchy. These are the first commands that you have access to when connected to the device through the CLI. At this level you can view basic system information and verify connectivity, but you cannot make any changes to the device configuration. Privileged HPswitch# config terminal Primarily enables you to transfer and store software images and configuration files between the network and the system, and review the configuration. Global configuration HPswitch(config)# vlan 10 Provides all user and privileged EXEC level privileges, and enables you to make configuration changes to any of the switch s software features Context configuration HPswitch(vlan-10) Provides all user and privileged EXEC level privileges, and enables you to make configuration changes in a specific context, such as one or more ports or a VLAN. 18 CLI access does not require a password by default. If you want to configure a password, you must use the CLI. A password cannot be assigned through the Web management interface. The CLI contains the following access levels: User EXEC level The level you enter when you first start a CLI session. At this level, you can view some system information but you cannot configure system or port parameters. Privileged EXEC level This level is also called the enable level and can be secured by a password. You can perform tasks such as managing files on the flash module, saving the system configuration to flash, and clearing caches at this level. CONFIG level The configuration level. This level lets you configure everything about the switch, including the system s IP address, host name, VLANs, and so forth. 2-18

101 Switch management Accessing the CLI (9300 series) Accessing the CLI 9300 series Once connectivity to the device is established, you will see the prompt: HP9300> At this prompt ( > ) you are at the user EXEC level of the CLI command structure. To reach the Global CONFIG Level, the uppermost level of the CONFIG commands, enter the following commands: HP9300> enable HP9300# configure terminal HP9300(config)# You can then reach all other levels of the CONFIG command structure from this point. 19 There are two modes available at the CLI: the EXEC level, which is for basic management commands, and the configuration level, which allows you to selectively enable items within the feature set and assign specific values, such as IP addresses. The user EXEC level is the starting point for a console session. A limited set of read-only commands is available at the user EXEC level. To make configuration changes, a user must enter the privileged EXEC level, which is also known as enable mode. At factory default settings, the enable mode gives full read/write access to the system and is not protected by a password. You can move from the user EXEC level to the privileged EXEC level and have unlimited read/write access to the system by entering the command enable. The privileged EXEC level supports a powerful command set that allows dynamic configuration changes, manipulation of files in flash memory, and reloading of the operating system. You must establish a password for the privileged EXEC level to secure the system. If you enter the privileged EXEC level when it is in an unprotected state, the system notifies you that no password has been assigned. If you enter the exit command from the privileged EXEC level, you will be returned to the user EXEC level. 2-19

102 Installation and service of HP ProCurve devices The configure terminal command advances to the configuration level. Entering the configuration level causes the prompt to change, as shown in the slide. Global level commands affect the entire system. Some examples of global level configuration commands include the assignment of a host name and system passwords. Support for routing protocols, such as RIP and OSPF, is enabled at the global configuration level, but changes to the operating parameters of the routing protocols are made within a router configuration context. You can give the routing switch a name by using the hostname command. The name can have embedded spaces if you enclose it in quotation marks. The exit command returns you to the previous level within the configuration level. Regardless of the current configuration level, the end command exits the configuration level and returns you to the privileged EXEC level. 2-20

103 Switch management EXEC the command interpreter (9300 series) EXEC - the command interpreter 9300 series show -display system information clear - reset system statistics counters ping, traceroute -test connectivity erase, write, copy - manipulate image and configuration files config -advanceto the configuration level. show -display system information ping, traceroute -test connectivity enable -advance to Privileged EXEC level At factory default settings, there are two EXEC levels. To enter the privileged EXEC level: HP9304> enable <ENTER> HP9304# To leave the privileged EXEC level and return to the user EXEC level: HP9304# exit <ENTER> HP9304> Privileged EXEC User EXEC HP9304# HP9304> 20 CLI access does not require a password by default. If you want to configure a password, you must use the CLI. A password cannot be assigned through the Web management interface. The CLI contains the following access levels: User EXEC level The level you enter when you first start a CLI session. At this level, you can view some system information but you cannot configure system or port parameters. Privileged EXEC level This level is also called the enable level and can be secured by a password. You can perform tasks such as manage files on the flash module, save the system configuration to flash, and clear caches at this level. CONFIG level The configuration level. This level lets you configure the system s IP address and configure 2-21

104 Installation and service of HP ProCurve devices EXEC Enable (9300 series) EXEC Enable 9300 series Three levels of passwords can be assigned to provide a range of access point for various users within the network: Super user This user has unlimited access to all levels of the CLI. This level is generally reserved for system administration. The super user is also the only user that can assign a password access level to another user. Read only A user with this password level is able to use only the show commands. No configuration is allowed with this access type. Configure port This user has the ability to configure interface parameters only. The user can also use the show commands. 21 By default, there are no CLI passwords. To secure CLI access, you must assign passwords. You can set the following levels of Enable passwords: Super User Allows complete read-and-write access to the system. This is generally for system administrators and is the only password level that allows you to configure passwords. You must set a super user password before you can set other types of passwords. Port Configuration Allows read-and-write access for specific ports but not for global (system-wide) parameters. Read Only Allows access to the privileged EXEC mode and CONFIG mode, but only with read access. Note You must use the CLI to assign a password. You cannot assign a password using the Web management interface or an SNMP network management application. 2-22

105 Switch management Assigning the super-user password (9300 series) Assigning the super-user password 9300 series To assign the password: Router_A> enable <ENTER> Router_A# config term Router_A(config)# enable super-user-password secret privileged EXEC Router_A# account password super-user has all rights at the privileged EXEC level To authenticate as super-user, supply the correct password: user EXEC Router_A> Router_A> enable secret Router_A# 22 To protect the routing switch from unauthorized access, you should assign passwords. The configuration of a privileged EXEC password creates a super-user account, which is unlimited in scope. You must enter the global configuration level to create this account and assign a password. In addition to protecting the enable mode from unauthorized access, the definition of a super-user password removes most of the commands that are available at the user EXEC level at factory default settings, such as show and ping. The super-user can create a read-only privileged level account whose capabilities approximate the command set that the user EXEC level had before the super-user password was assigned. The system also supports the creation of a port-config account whose capabilities include all read-only functions and some limited portlevel configuration. The read-only and port-config accounts do not exist until the super-user creates them by defining passwords for the accounts. The read-only account should be used by system operators or other monitoring personnel who need read-only access to information. This type of user has unlimited access to show commands, including show configuration, but this is not a security risk because that command does not display the passwords configured for system-defined users. The read-only user can perform connectivity tests and can Telnet to other routers and network devices from the routing switch, but cannot make any changes to the configuration. 2-23

106 Installation and service of HP ProCurve devices The port-config account is a superset of the read-only account suitable for use by technicians and other persons who must dynamically configure interface parameters. The port-config user can enable/disable individual ports, and change their physical parameters such as speed and duplex settings. 2-24

107 Switch management Creating the read-only and port-config users (9300 series) Creating the read-only and port-config users 9300 series The super-user creates the read-only and port-config accounts by assigning a password. For example: Router_A> enable secret<enter> Router_A# config term Router_A(config)# enable read-only-password operator Router_A(config)# enable port-config-only-password techie account password privileged EXEC user EXEC Router_A# port-config user read- only user Router_A> To authenticate as the read-only user, supply the correct password: Router_A> enable operator Router_A# 23 The super-user can create a read-only privileged level account whose capabilities approximate the command set that the user EXEC level had before the super-user password was assigned. The system also supports the creation of a port-config account whose capabilities include all read-only functions and some limited portlevel configuration. The read-only and port-config accounts do not exist until the super-user creates them by defining passwords for the accounts. The read-only account should be used by system operators or other monitoring personnel who need read-only access to information. This type of user has unlimited access to show commands, including show configuration, but this is not a security risk because that command does not display the passwords configured for system-defined users. The read-only user can perform connectivity tests and can Telnet to other routers and network devices from the routing switch, but cannot make any changes to the configuration. The port-config account is a superset of the read-only account suitable for use by technicians and other persons who must dynamically configure interface parameters. The port-config user can enable/disable individual ports, and change their physical parameters such as speed and duplex settings. 2-25

108 Installation and service of HP ProCurve devices Saving configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving configuration information 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Configuration instructions issued at the CLI are dynamically executed and written to running configuration in volatile memory Configuration information entered at the CLI does not survive a reboot unless it is saved to the startup configuration in non-volatile flash memory To save configuration information from the running configuration to the startup configuration, execute the CLI command: write memory This command can be executed from within manager, global configuration, and context configuration levels 24 At boot time, the switch uses configuration information from non-volatile flash memory. When you make changes in the global configuration level, changes are dynamically executed and stored in the running configuration, which is in volatile memory and does not survive a reboot. To save configuration information from RAM to flash memory, execute the CLI command write memory. This command can be executed from within manager, global configuration, and context configuration levels. 2-26

109 Switch management Points to ponder Points to ponder Initially, walking into a customer s wiring closet or computer room may be a bit overwhelming and intimidating. If you understand your exposure you will find it easier to reach a comfort level. There is much that you can do without risk. For example, you will not disrupt anything by issuing a show command. Also, any changes that you do make at the CLI are not committed to non-volatile memory until you issue a write memory (the other side of this is to make sure that, once you re satisfied with the configuration changes that you ve made, you do enter write memory ). Next we will see how changes that you ve made from the Menu or Web interface are committed to non-volatile memory

110 Installation and service of HP ProCurve devices CLI advantages CLI advantages Provides quick,easy management access to a menu-driven subset of switch configuration and performance features Offers out-of-band access (through the RS-232 connection) Enables Telnet (in-band) access to the menu functionality

111 Switch management Menu interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108) Menu interface 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series and 6108 The menu interface can be accessed either in-band or out-of-band The menu interface is the default for the 4000 series (the 4000 series menu is slightly different from the other switches menu) To enter the menu from the CLI, use the menu command (to return to the CLI from the menu interface, select Command Line Interface -- CLI option) HPswitch# menu [Enter] 27 The menu interface operates through the switch console to provide you with a subset of switch CLI commands in an easy-to-use menu format enabling you to: Perform a quick configuration of basic parameters, such as the IP addressing needed to provide management access through your network Configure these features: Manager and operator passwords System parameters IP addressing Time protocol Ports Trunk groups A network monitoring port Spanning Tree operation SNMP community names 2-29

112 Installation and service of HP ProCurve devices IP authorized managers VLANs (virtual LANs) and GVRP View status, counters, and Event Log information Update switch software Reboot the switch 2-30

113 Switch management Menu interface Main Menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Menu interface Main Menu 2500, 2600, 2800, 4100gl, 5300xl series, 6108 HPswitch# menu [Enter]: 28 The Main Menu gives you access to these menu interface features: Status and Counters: Provides access to display screens showing switch information, port status and counters, port and VLAN address tables, and spanning tree information. Switch Configuration: Provides access to configuration screens for displaying and changing the current configuration settings. Console Passwords: Provides access to the screen used to set or change manager-level and operator-level passwords, and to delete manager and operator password protection. Event Log: Enables you to read progress and error messages that are useful for checking and troubleshooting switch operation. Command Line (CLI): Selects the Command Line Interface at the same level (manager or operator) that you are accessing in the menu interface. Reboot Switch: Performs a warm reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up-time to zero. A reboot is required to activate a change in the VLAN Support parameter. 2-31

114 Installation and service of HP ProCurve devices Download OS: Enables you to download a new software version to the switch. Run Setup: Displays the Switch Setup screen for quickly configuring basic switch parameters such as IP addressing, default gateway, logon default interface, spanning tree, and others. Logout: Closes the menu interface and console session, and disconnects Telnet access to the switch. 2-32

115 Switch management Menu interface navigation (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Menu interface navigation 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Screen title identifies the location within the menu structure Parameter fields Actions line Help line describing the selected action or selected parameter field Navigation instructions 29 Menu interface screens include these three elements: Parameter fields and/or read-only information such as statistics Navigation and configuration actions, such as Save, Edit, and Cancel Help line to describe navigation options, individual parameters, and read-only data Navigation of the menu interface requires use of the cursor arrow keys. To make changes, use the arrow key to move to the Edit action and press Enter. This puts the cursor in the upper half of the screen, where you can key in the system name. Continue using the arrow keys to move to other fields on the page. Some fields allow a limited list of options. In the case of the IP Config field, the choices are DHCP/Bootp, Disabled, and Manual. Use the spacebar to cycle through the choices. If you want to statically configure an IP address, you must choose Manual. 2-33

116 Installation and service of HP ProCurve devices Getting help (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Getting help 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Highlighting on any item in the Actions line indicates that the Actions line is active Pressing [H] or highlighting Help and pressing [Enter] displays Help for the parameters listed in the upper part of the screen The Help line provides a brief descriptor of the highlighted Action item or parameter 30 In most screens there is a Help option in the Actions line. Whenever any of the items in the Actions line is highlighted, press H, and a separate help screen is displayed. To get help on the actions or data fields in each screen, use the arrow keys (<, >, ^, or v) to select an action or data field. The help line under the Actions items describes the currently selected action or data field. 2-34

117 Switch management Using the full menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Using the full menu interface 2500, 2600, 2800, 4100gl, 5300xl series, HP ProCurve switches offer a configuration menu for convenience and for compatibility with previous HP ProCurve switch families. However, the menu is not as powerful as the CLI, which enables configuration of the entire Layer 2 and Layer 3 feature sets for HP ProCurve switches. To access this interface, enter menu at the CLI. As shown here, the Main Menu offers 10 options. Access any option by moving the cursor to the appropriate line and pressing Enter. The Status and Counters menu is available to both manager- and operator-level users. It can be more convenient than the CLI for many monitoring tasks because its display is dynamically updated. Some submenus are available to manager-level users only. For example, the Switch Configuration menu enables modification of the IP configuration, port settings, and other items that can be altered only by users with manager rights. To leave the menu interface and return to the CLI, select item 5 from the Main Menu. The next slide show the results of Port Status. 2-35

118 Installation and service of HP ProCurve devices Port configuration at the menu interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Port configuration at the menu interface 2500, 2600, 2800, 4100gl, 5300xl series,

119 Switch management Activating configuration changes (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Activating configuration changes 2500, 2600, 2800, 4100gl, 5300xl series, 6108 An asterisk indicates a configuration change that requires a reboot in order to take effect Reminder to reboot the switch to activate configuration changes 33 Rebooting to activate configuration changes: Configuration changes for most parameters in the menu interface become effective as soon as you save them. However, you must reboot the switch in order to implement a change in the Maximum VLANs to support parameter. To access this parameter, go to the Main Menu and select: 2. Switch Configuration 8. VLAN Menu 1. VLAN Support If you make configuration changes in the menu interface that require a reboot, the switch displays an asterisk (*) next to the menu item in which the change has been made. For example, if you change and save the value for the maximum VLANs to support parameter, an asterisk appears next to the VLAN Support entry in the VLAN Menu screen, and also next to the Switch Configuration entry in the Main Menu. 2-37

120 Installation and service of HP ProCurve devices To activate changes indicated by the asterisk, go to the Main Menu and select the Reboot Switch option. Note Executing the write memory command in the CLI does not affect pending configuration changes indicated by an asterisk in the menu interface. That is, only a reboot from the menu interface or a boot or reload command from the CLI will activate a pending configuration change indicated by an asterisk. 2-38

121 Switch management Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Basic switch setup via menu 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Basic switch setup parameters, such as the default interfaces, IP address, default gateway, switch name, etc., can be configured from the menu interface To access the Setup Menu, do one of the following: From the CLI, type setup HPswitch# setup [Enter] From the Main Menu Highlight Run Setup and press <Enter> 34 To access a quick setup menu that is useful for initial configuration of the switch, issue the setup command from the CLI. The Setup menu allows you to define some very basic parameters, including passwords, a system name, location, and contact information for the switch. 2-39

122 Installation and service of HP ProCurve devices Basic switch setup via menu (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Basic switch setup via menu 2500, 2600, 2800, 4100gl, 5300xl series, 6108 HPswitch# setup [Enter]: ME NU could be set as the default If you leave this screen using the Save action, the changes are saved to the startup configuration 35 Navigation of the menu interface requires use of the cursor arrow keys. To make changes, use the arrow key to move to the Edit action and press Enter. This puts the cursor in the upper half of the screen, where you can key in the system name. Continue using the arrow keys to move to other fields on the page. Some fields allow a limited list of options. In the case of the IP Config field, the choices are DHCP/Bootp, Disabled, and Manual. Use the spacebar to cycle through the choices. If you want to statically configure an IP address, you must choose Manual. 2-40

123 Switch management Points to ponder Points to ponder For the 4000 series devices, the menu interface is very comprehensive. It is the most powerful interface the 4000 series has it is more powerful than the Web interface. These switches do have a CLI but its functionality is limited. The CLI is accessed from the Menu. Via the menu interface you can configure all the features that the switch has to offer. Although slightly different in structure from the Menu for the other switches, it is similar in that * indicates that a configuration change requires a reboot in order to take effect. There is also a reminder at the bottom of the screen informing you that the change you are about to make requires a reboot

124 Installation and service of HP ProCurve devices Menu interface (4000 series) Menu interface 4000 series Menu interface is the default for the 4000/8000 series 37 The Main Menu gives you access to these console interface features: Status and Counters: Provides access to display screens providing information on switch and port status, network activity, the address tables, and spanning tree operation. Switch Management Access Configuration: Provides access to configuration screens that control interaction between the switch and network management, including IP address, SNMP community names and trap receivers, console/serial link parameters, and console passwords. Switch Configuration: Provides access to configuration screens that enable you to display the current configuration settings and to customize the configuration of the switch features. Event Log: Enables you to read progress and error messages that are useful for checking and troubleshooting switch operation. Diagnostics: Provides access to screens for doing link and ping connectivity testing, listing the current switch configuration, and to a command prompt for executing system management, monitoring, and troubleshooting commands. 2-42

125 Switch management Reboot Switch: Performs a software reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up time to zero. A reboot is required (in one case) to activate a configuration change that has been made. Download OS: Enables you to download a new software version to the switch. Logout: Terminates the console session and disconnects Telnet access to the switch. 2-43

126 Installation and service of HP ProCurve devices Menu interface navigation (4000 series) Menu interface navigation 4000 series Screen title identifies the location within the menu structure Parameter fields Actions line Help line describing the selected action or selected parameter field Navigation instructions 38 Menu interface screens include these three elements: Parameter fields and/or read-only information such as statistics Navigation and configuration actions, such as Save, Edit, and Cancel Help line to describe navigation options, individual parameters, and read-only data Forms design The configuration screens, in particular, operate like a number of PC applications that use forms for data entry. When you first enter these screens, you see the current configuration for the item you have selected. To change the configuration, the basic operation is to: 1. Press E to select the Edit action. 2. Navigate the screen, making all the necessary configuration changes using the TAB or arrow keys. 3. Press Enter to return to the Actions line. From there you can save the configuration changes or cancel the changes. Cancel returns the configuration to the values you saw when you first entered the screen. 2-44

127 Switch management Setting manager and operator passwords (4000 series) Setting manager and operator passwords 4000 series From the Main Menu select: 2. Switch Management Access Configuration, then 5. Console Passwords 39 Navigating the 4000 series menu is slightly different. You can scroll to the desired action and press Enter, or you can enter the number of the desired action. When the number is entered, the menu automatically goes to the specified action. There is no need to press Enter. 2-45

128 Installation and service of HP ProCurve devices The 4000 series CLI The 4000 series CLI 4000 series From the Main Menu select 5. Diagnostics, then 4. Command Prompt If no VLANs are configured, the command prompt appears near the bottom of the screen. For example: DEFAULT_CONFIG: Type in the command you want to execute and press [Enter]. For example, to set the time to 9:55 a.m. you would execute the following command: DEFAULT_CONFIG: time 9:55 40 On the 4000 unit there are limited Command Mode commands. These are outlined on the next slide. If VLANs are configured, you will see a prompt similar to the following: Select VLAN : DEFAULT_VLAN Use the spacebar to select the VLAN in which you want to execute a command, then press Enter to display the command prompt. The text in the prompt will match the name of the VLAN you select. 2-46

129 Switch management 4000 series some helpful CLI commands 4000 series - some helpful CLI commands 4000 series Help - Shows help information about commands Exit - Returns to the Diagnostics Menu Browse - Displays the switch configuration in readable form Config - Displays the switch configuration file stored in flash Date - Displays or sets the date and time; to set: date mm/dd/yy Time - Displays or sets the date and time; to set: time hh:mm:ss Set - Configures some switch parameters; use set help for more information Show - Displays some switch settings; use show help for more information Delete (delete CONFIG ) - Deletes the configuration file stored in flash History - Displays the switch shutdown history. Kill - Kills all other active Telnet/console sessions Ping ping <ip-addr> [count] [wait] - Sends IP Echo Request packets to the device identified by <ip-addr> Version - Displays the switch OS version Vlan - vlan <vlan-name> - Changes the VLAN in which the commands are executed 41 The CLI commands that are displayed depend on your current access level. The slide shows only a portion of the available CLI commands available. 2-47

130 Installation and service of HP ProCurve devices Advantages of the menu interface Advantages of the menu interface Provides quick,easy management access to a menu-driven subset of switch configuration and performance features Offers out-of-band access (through the RS-232 connection) Enables Telnet (in-band) access to the menu functionality Provides simple navigation 42 Provides quick, easy management access to a menu-driven subset of switch configuration and performance features: IP addressing System information VLANs and GVRP Passwords Port Security SNMP communities Port and Static Trunk Group Time protocols Spanning Tree 2-48

131 Switch management The menu interface also provides access for: Setup screen Switch and port statistic and counter Event Log display displays Switch and port Reboots Status displays Software downloads It also: Offers out-of-band access (through the RS-232 connection) to the switch, so network bottlenecks, crashes, lack of configured or correct IP address, and network downtime do not slow or prevent access Enables Telnet (in-band) access to the menu functionality Allows faster navigation, avoiding delays that occur with the slower display of graphical objects over a Web browser interface Provides more security configuration information, and passwords are not seen on the network 2-49

132 Installation and service of HP ProCurve devices HP web browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) HP web browser interface 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series The HP web browser interface built into the switch lets you easily access the switch from a browser-based PC on your network. The switch must have an IP address. The web browser interface lets you do the following: Make configuration changes to the switch Maintain security by configuring usernames and passwords Optimize your network uptime by using the Alert Log and other diagnostic tools 43 Differing capabilities per switch: 4000 and 2500 units can t do much: 5300 units can do more; and the 9300 series can do everything. All HP ProCurve managed switches include a Web agent and are accessible through any computer that has a Web browser. The Web interface, which is available as soon as a switch is assigned an IP address, can be used to modify some elements of the switch s configuration. However, it is most useful for monitoring switch operation because the display is dynamically updated. 2-50

133 Switch management Starting the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series Starting the browser interface 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series Type the IP address (or DNS name) of the switch in the browser Location or Address field and press [Enter] The web browser interface automatically starts with the Status Overview

134 Installation and service of HP ProCurve devices The port status indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Port status indicators and legend 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series Port Connected the port is enabled and is properly connected to an active network device. Port Not Connected the port is enabled but is not connected to an active network device. A cable may not be connected to the port, or the device at the other end may be powered off or inoperable, or the cable or connected device could be faulty. Port Disabled the port has been configured as disabled through the web browser interface, the switch console, or SNMP network management. Port Fault-Disabled a fault condition has occurred on the port that has caused it to be auto-disabled

135 Switch management The port utilization indicators and legend (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) The port utilization indicators and legend 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series % Unicast Rx & All Tx: This is all unicast traffic received and all transmitted traffic of any type. This indicator (a blue color on many systems) can signify either transmitted or received traffic. % Non-Unicast Pkts Rx: All multicast and broadcast traffic received by the port. This indicator (a gold color on many systems) enables you to know at a glance the source of any non-unicast traffic that is causing high utilization of the switch. % Error Pkts Rx: All error packets received by the port (this indicator is a reddish color on many systems)

136 Installation and service of HP ProCurve devices Creating usernames and passwords in the browser interface (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Creating usernames and passwords in the browser interface 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series

137 Switch management Advantages of web browser interface Advantages of web browser interface Easy access to the switch from anywhere on the network Familiar browser interface - locations of window objects consistent with commonly used browsers,uses mouse clicking for navigation,no terminal setup Many features have all their fields in one screen so you can view all values at once More visual cues using colors, status bars, device icons, and other graphical objects instead of relying solely on alphanumeric values Display of acceptable ranges of values available in configuration list boxes

138 Installation and service of HP ProCurve devices Points to ponder Points to ponder When installing a new switch you should configure an IP address and a default gateway and enable centralized time service. The IP address is required for remote access - the default gateway is to enable remote access from a different IP network. You should discuss with the network administrator their strategy for IP addressing and time service. Usually the network will rely on a DHCP to provide IP addresses, but this is generally not the best approach for switches. The network administrator may want to assign a reserved IP address (in the DHCP server) for the switch. You may have to tell the administrator the switch s MAC address. Time service is used to synchronize events between switches

139 Switch management Statically defining an IP address and mask (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Statically defining an IP address and mask 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series IP address and mask may be statically defined at the CLI by entering the global configuration level Edge_1# show running-config Edge_1#... vlan 1 untagged 1-26 ip address bootp-dhcp... All ports are untagged members of VLAN 1 Default source for VLAN 1 s IP address is BOOTP/DHCP Enter global configuration level and define address Edge_1# config Edge_1(config)# vlan 1 ip address /24 Edge_1(config)# show running-config... vlan 1 untagged 1-26 ip address IP address is now statically defined The slide demonstrates how to manually configure the IP address. Notice that by default the switch will get its IP address via DHCP. Also notice that in order to change the IP address we must get to interface context level. Actually in the slide we enter the interface context (vlan 1) and assign an IP address and a subnet mask ( /24) in the same command. 2-57

140 Installation and service of HP ProCurve devices Defining the default gateway (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Defining the default gateway 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Edge_1# config Edge_1(config)# ip default-gateway Edge_1(config)# show running-config... ip default-gateway vlan 1 untagged 1-26 ip address The default gateway is a global configuration parameter Assignment of default gateway is a global configuration level parameter The default gateway must be a router interface that is local to (or in the same subnet as) the IP address you defined within the default VLAN 53 In this slide we manually assign a default gateway. Notice that we do not enter interface context to assign the default gateway. This is because the default gateway is a global command. There can be only one default for the switch. 2-58

141 Switch management Using the Switch Setup menu to configure IP info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Using the Switch Setup menu to configure IP info 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The Switch Setup menu provides the easiest way to assign IP addressing information and passwords. Enter the CLI command: setup Default gateway applies to VLAN 1 IP information for VLAN 1 If you leave this screen using the Save action, the changes are saved to the startup configuration 54 We also could have assigned the IP address and the default gateway from the Switch Setup menu. 2-59

142 Installation and service of HP ProCurve devices 4000 series configuring IP 4000 series - configuring IP 4000 series From the Main Menu select: 2. Switch Management Access Configuration 1. IP Configuration 55 The Main Menu gives you access to these console interface features: Status and Counters: Provides access to display screens providing information on switch and port status, network activity, the address tables, and spanning tree operation. Switch Management Access Configuration: Provides access to configuration screens that control interaction between the switch and network management, including IP address, SNMP community names and trap receivers, console/serial link parameters, and console passwords. Switch Configuration: Provides access to configuration screens that enable you to display the current configuration settings and to customize the configuration of the switch features. Event Log: Enables you to read progress and error messages that are useful for checking and troubleshooting switch operation. Diagnostics: Provides access to screens for doing Link and Ping connectivity testing, listing the current switch configuration, and to a command prompt for executing system management, monitoring, and troubleshooting commands. 2-60

143 Switch management Reboot Switch: Performs a software reboot of the switch, which clears most temporary error conditions, resets the network activity counters to zero, and resets the system up time to zero. A reboot is required (in one case) to activate a configuration change that has been made. Download OS: Enables you to download a new software version to the switch. Logout: Terminates the console session and disconnects Telnet access to the switch. 2-61

144 Installation and service of HP ProCurve devices 4000 series IP configuration 4000 series - IP configuration 4000 series Press E to select Edit, then use the down arrow key (v) to select IP Config [DHCP/BOOTP]. 2. Use the spacebar to display Manual for this field. 3. Press the down arrow key (v) to display the three IP configuration parameters and select the IP Address field. 4. Enter the IP address you want to assign to the switch. 5. Select the Subnet Mask field and enter the subnet mask for your network. 6. If you want to reach off-subnet destinations, select the Gateway field and enter the address of the gateway router for your subnet. 7. Press Enter, then S (for Save), then proceed with any other console tasks. 2-62

145 Switch management Web interface configuring IP address Web interface configuring IP address You can use the web browser interface to access IP addressing only if the switch already has an IP address that is reachable through your network: Click on the Configuration tab Click on [IP Configuration] 57 Web management becomes available as soon as an IP address is assigned to the switch. 2-63

146 Installation and service of HP ProCurve devices Module 2 summary Module 2 summary In this module you learned: How to use the management interfaces available on the HP ProCurve switches How to configure IP addressing and time service parameters using the various interfaces How to assign passwords to specify different access levels

147 Switch management Learning check Module 2 1. What is the most important difference between the operator level and the manager level on HP ProCurve switches? Configuration instructions issued at the CLI are dynamically written to: a. The running configuration b. The startup configuration c. Both running and startup configurations d. The firmware image 3. What steps are required to enable in-band management of an HP ProCurve switch? Which of the following configuration interfaces is most powerful or allows you to control the full features of HP ProCurve switches? a. CLI b. Menu interface c. Web interface 2-65

148 Installation and service of HP ProCurve devices 2-66

149 System information Module 3 Objectives This module reviews system information on HP ProCurve Networking products. After completing this module you will be able to: Understand the meaning of switch and port LEDs View and manipulate system files View and manipulate configuration files Upgrade the system firmware Use the 9300 series boot monitor 3-1

150 Installation and service of HP ProCurve devices HP ProCurve accessories: LEDs HP ProCurve accessories: LEDs On all HP ProCurve switches, LEDs indicate the state of the switch and individual ports Generally there are two classes of LEDs: Switch LEDs indicate the status of features that impact operation of the switch: Status of power supply Status of fans Status of diagnostics Module LEDs indicate the status and/or activity of specific ports, such as: Duplicity Activity Speed 3 When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test, as described in the manual for your switch. Verify proper operation by observing the LEDs. Make sure the LED on each power supply is a solid green. Also make sure that some of the port LEDs on each module momentarily light up. The LEDs indicate that the device is performing diagnostics. After the diagnostics are complete, the LEDs will be dark except for the ones that are attached by cables to other devices. If the links on these cables are good and the connected device is powered on, the link LEDs will light. 3-2

151 System information Switch LEDs (2500, 2800, 4100gl, 5300xl series, 6108) Switch LEDs 2500, 2800, 4100gl, 5300xl series, 6108 LED Power (green) Fault (orange) Self Test (green) Mode Select (3 or 4 LEDs) Fan Status (green) State On Off Off Blinking On Off On Blinking ACT Fdx 10/100/100! On Blinking Meaning Switch is receiving power Switch is not receiving power Normal state Fault has occurred on switch A component has failed self-test check other LEDs Normal switch not undergoing self-test Self-test/initialization in progress A component of the switch has failed its self- test Port Mode LEDs are displaying network activity Port Mode LED lit for ports in Full Duplex Mode Port Mode LED lit for ports operating at 100Mbps Port Mode LED lit indicate operator attention required Cooling fan is operational Cooling fan has failed Switch fault LED also blinking 4 As described in the next two slides, there are LEDs on the switch chassis and on the switch modules that keep you informed of the status of the switch and the network connections. The self-test passes if the Fault and Self Test LEDs on the front of the switch go off after approximately 90 to 150 seconds, depending on the number and type of modules installed in the switch. If these LEDs stay on longer than 180 seconds or begin flashing, the switch, or a module, or an individual mini-gbic may have to be replaced as indicated by the LEDs. There are LEDs that provide information for each port on the link status, network activity, connection bandwidth (speed), communication mode (half- or fullduplex), and presence of specific network error packets on the port. When the module is installed properly and the switch is powered on, or the module is installed when the switch already has power, the module undergoes a self-test that takes a few seconds. You can use the LEDs to determine that the module is installed properly and has passed the self-test. 3-3

152 Installation and service of HP ProCurve devices Port LEDs: 2500, 2800, 4100gl, 5300xl series, 6108 Port LEDs 2500, 2800, 4100gl, 5300xl series, 6108 LED State Meaning Link Mode On Off Blinking Port enabled and receiving link signal No active network cable is connected to the port The port is not receiving link beat or sufficient light The port has been disabled through management Failed self-test Fault LED also blinking Displays network activity information, or whether the port is configured for Full Duplex operation or 100 Mbps operation, depending on the mode selection 5 The port LEDs provide information about the individual switch ports. The operation of the mode LED is controlled by the LED Mode Select button on the switch chassis, and the current selection is indicated by the mode indicator LEDs near the button. Press the button to change from one mode to the next. 3-4

153 System information Switch LEDs (2600) Switch LEDs 2600 LED Power (green) Fault (orange) Self Test (green) Fan Status (green) RPS Status (green) PoE only EPS Status (green) PoE only State On Off Off Blinking On Off On Blinking On Blinking On Blinking Off On Blinking Off Meaning Switch is receiving power Switch is not receiving power Normal state Fault has occurred on switch A component has failed self-test check other LEDs Normal switch not undergoing self-test Self-test/initialization in progress A component of the switch has failed its self-test Cooling fan is operational Cooling fan has failed Switch fault LED also blinking Normal operation; HP 600 RPS/EPS operating correctly HP 600 RPS/EPS unit experienced a fault HP 600 RPS/EPS is not connected or is not powered Connected to HP 600 RPS/EPS receiving PoE power. The HP 600 RPS/EPS unit has experienced a fault Switch is not connected to an HP 600 RPS/EPS 6 3-5

154 Installation and service of HP ProCurve devices Port LEDs (2600) Port LEDs 2600 LED 2626 and 2650 Port 2626-PWR and 2650-PWR Link State Depending on mode: displays port link info, network activity, duplex operation, speed On Off Blinking Meaning Port enabled and receiving link signal No active network cable is connected to the port The port is not receiving link beat or sufficient light The port has been disabled through management Failed self-test Fault LED also blinking Mode All switches T/M Depending on mode: displays port link info, network activity, duplex operation, speed On Dual-personality ports: T is on 10/100/1000Base-T RJ45 port connected M is on mini-gbic port enabled 7 For the non-pwr switches, there is a single LED per port. The operation of this LED is controlled by the Port LED View select button, and the current setting is indicated by the Port LED View indicator LEDs near the button. Press the button to step from one view mode to the next. The default view is Link. For the PWR switches, there are two LEDs per port. The Link status is always shown by the Link LED. The operation of the Mode LED is controlled by the LED Mode select button, and the current setting is indicated by the LED Mode indicator LEDs near the button. Press the button to step from one view mode to the next. The default mode is Activity. 3-6

155 System information Switch LEDs (9300 series) Switch LEDs 9300 series Each management module is equipped with an LED indicating if it is active (LED is lit) or in back-up mode Each management module is equipped with an LED indicating if it is powered (LED is lit) Each power supply has an LED indicating that it is receiving power 8 Verify proper operation by observing the LEDs. Make sure the LED on each power supply is a solid green. Also make sure that some of the port LEDs on each module momentarily light up. The LEDs indicate that the device is performing diagnostics. After the diagnostics are complete, the LEDs will be dark except for the ones that are attached by cables to other devices. If the links on these cables are good and the connected device is powered on, the link LEDs will light. 3-7

156 Installation and service of HP ProCurve devices Port LEDs (9300 series) Port LEDs 9300 series Port LED indicators for 100Base-FX, 1000Base-SX/LX, and 1000Base-T LEDs LED Position State Meaning Link Top On Port is connected Off No port connection exists Activity Bottom On Traffic is being transmitted and received on that port Off No traffic is being transmitted Blinking Traffic is being transmitted and received on that port Port LED indicators for 10Base-T/100Base-TX ports LED Position State Meaning Link/activity Left On Port is connected Off No port connection exists FDX Right Blinking On Traffic is being transmitted and received on that port The port is operating at full-duplex Off The port is operating at half-duplex 9 Each 9300 series device is equipped with LEDs that denote port and power supply status. The slide reflects the different port and expansion module port states. 3-8

157 System information Points to ponder Points to ponder! Upgrading a switch s firmware, replacing a switch or a module, and adding a new switch to the network are some of the tasks you will regularly be asked to perform. Typically, when inserting a switch or replacing a switch it will be advantageous to copy the startupconfiguration file from an existing switch to the new switch. If a switch has multiple flashes, then the flashes can be used to ensure that a firmware or configuration upgrade is working properly before making the new code the default operating code. We now discuss some approaches to make these tasks a little easier

158 Installation and service of HP ProCurve devices HP ProCurve Switch configuration file manipulation HP ProCurve Switch configuration file manipulation Each switch maintains two configuration files: the running-config file and the startup-config file Running-config resides in volatile memory Startup-config resides in non-volatile memory (flash) 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series also have a secondary flash 11 The running-config file exists in volatile memory and controls switch operation. If no configuration changes have been made in the CLI since the switch was last booted, the running-config file is identical to the startupconfig file. The startup-config file exists in flash (non-volatile) memory and is used to preserve the most recently saved configuration as the permanent configuration. Rebooting the switch replaces the current running-config file with a new running-config file that is an exact copy of the current startupconfig file. 3-10

159 System information CLI: viewing configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) CLI: viewing configuration files 2500, 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series HPswitch(config)# show config Displays a listing of the current startup-config file HPswitch(config)# show running-config Displays a listing of the current running-config file HPswitch(config)# show config status Compares the startup-config file to the running-config file and indicates if they are synchronized To reset the startup-config and running-config files to the factory default configuration: HPswitch(config)# erase startup-config Configuration will be deleted and device rebooted, continue [y/n] 12 Several commands enable you to determine the switch s configuration status. These commands are: show config status, which displays information about differences between the running configuration and the startup configuration. show run, which displays the current running configuration. show config, which displays the current startup configuration. The write memory command copies the running configuration in RAM over the startup configuration stored in flash memory. A reboot is required to copy the startup configuration into RAM. When you restart the switch, it compares running and startup configurations and gives you an opportunity to save the running configuration before rebooting. If the switch is to be redeployed, it is often advisable to remove the existing configuration and return the system to default settings using erase startupconfig. 3-11

160 Installation and service of HP ProCurve devices Configuration flow commands (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Configuration flow commands 2500, 2600, 2800, 4100gl, 5300xl series, 6108, and 9300 series Running memory reload xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx write mem Flash memory show running (write term) show startup-config erase startup-config Console 13 The show running or write term command displays the current running-config information. The write mem command causes the current running-config in volatile memory to be copied to the startup-config in flash. The reload command causes a warm reboot using the startup-config that is stored in flash. The show config command displays the startup-config that is currently in flash. The erase startup-config command erases the startup-config file from flash. 3-12

161 System information Saving configuration files (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving configuration files 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Making one or more changes to the running-config file creates a new operating configuration Saving a new configuration means to overwrite (replace) the current startup-config file with the current runningconfig file There are three ways to save a new configuration: CLI: Use the write memory command. This overwrites the current startup-config file with the contents of the current running-config file. Menu interface: Use the save command. This overwrites both the running-config file and the startup-config file with the changes you have specified in the menu interface screen. Web browser interface: Use the [Apply Changes] button or other appropriate button. This overwrites both the running-config file and the startup-config file with the changes you have specified in the web browser interface window. 14 When you make changes to the switch s configuration, the changes are immediately executed and stored in dynamic memory. The configuration in RAM is called the running configuration. When the switch is rebooted, everything in dynamic memory is lost, so changes must be written to non-volatile memory. The command for saving configuration information is write memory. Like many other CLI commands, it can be shortened. This command can be entered from the manager, global configuration, or any context configuration level. The configuration information that is stored in flash memory and used at boot time is called the startup configuration. Note that using the CLI instead of the menu or Web browser interface gives you the option of changing the running configuration without affecting the startup configuration. This allows you to test the change without making it permanent. When you are satisfied that the change is satisfactory, you can make it permanent by executing the write memory command. 3-13

162 Installation and service of HP ProCurve devices File transfer File transfer Some reasons for transferring files between a Trivial File Transfer Protocol (TFTP) server and HP ProCurve switch are to: Back up the switch s running configuration to a TFTP server Restore the configuration to a switch by copying a configuration file from a TFTP server to the startup configuration Back up the switch s current firmware to a TFTP server Update the switch s firmware with a new file downloaded from the HP ProCurve Web site Copy output from a command such as show tech to a file 15 A TFTP server is commonly used to upload or download executable images and configurations to or from switches. 3-14

163 System information Saving the running configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving the running configuration file 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series running configuration TFTP server copy run tftp core_1\092403_tms.cfg xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx startup configuration xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx Core_1 16 As shown here, the process for backing up the current configuration of an HP ProCurve switch is a simple matter of copying the configuration to a TFTP server using a copy command at the CLI. The example in the slide shows the command for copying the running configuration, which is identified by the run parameter. However, the same command could be used to copy the startup configuration by simply substituting star for run. Note that the filename for the backup copy includes the date of the backup and the initials of the administrator backing up the configuration. When you are backing up multiple switches to a single TFTP server, it is recommended that you create a folder for each switch on the TFTP server, as shown here. 3-15

164 Installation and service of HP ProCurve devices Saving the startup configuration file (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Saving the startup configuration file 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series TFTP server running configuration copy startup tftp core_1\092403_tms.cfg xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx startup configuration xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx Core_1 17 This command is similar to the one on the previous slide, but now we are backing up the startup configuration file instead of the running configuration file. This is useful if you want to save the current startup configuration if you are about to do a write memory, which would save a new version of the startup configuration. The example in the slide shows the command for copying the startup configuration, which is identified by the startup parameter. Note that the filename for the backup copy includes the date of the backup and the initials of the administrator backing up the configuration. When you are backing up multiple switches to a single TFTP server, it is recommended that you create a folder for each switch on the TFTP server, as shown here. 3-16

165 System information Restoring configuration information (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Restoring configuration information 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series TFTP server running configuration copy tftp star core_1\092403_tms.cfg Restoration may be required due to: Incorrect or inconsistent behavior after configuration change Hardware failure and replacement Rollback to previous version of system image System must be rebooted after copy xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx startup configuration xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx Core_1 18 To restore configurations from a TFTP server, administrators use the same CLI copy command they use to back up configurations. Only a few parameters are different. A restore command is shown in the slide. Note that the first parameter tftp indicates that the configuration should be copied from the TFTP server and that the second parameter star indicates it should be copied to the switch s startup configuration. In the backup command, the configuration to be copied is the first parameter, and the TFTP server is second. In both cases, the IP address specifies the TFTP server, not the switch. This command can be used to restore an earlier configuration version to a switch or can be used to install a configuration on a new switch. Follow these steps to restore the configuration of the original switch: 1. Copy the current configuration to the TFTP server for analysis using the command on the previous page. 2. Copy the backup configuration file from the TFTP server archive using the command above. The switch will reboot. 3-17

166 Installation and service of HP ProCurve devices Follow these steps to install the configuration on a new switch: 1. Configure the IP addressing information on the new switch. This will enable it to contact the TFTP server where the configuration resides. 2. Use the command on the slide to copy the configuration to the switch s startup configuration area. The switch will reboot. 3-18

167 System information Displaying flash info (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Displaying flash info 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The unequal code size and different dates indicates two different versions of OS s/w Shows version of OS in secondary flash 19 This slide displays the commands necessary to determine the current version of images stored in flash memory and to determine which image the switch is currently using as its boot image. In this example, both stored images are the same. However, each flash memory area could contain a different image, enabling administrators to restore earlier versions if necessary. Note that the show flash command displays the boot ROM version as well as information about the current boot image. 3-19

168 Installation and service of HP ProCurve devices Copying firmware from a TFTP server (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Copying firmware from a TFTP server 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series TFTP server copy tftp flash G_04_05.bin primary xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx Primary flash copy tftp flash G_04_05.bin secondary 4100, 5300, 2600, 2800 and 9300 series switches xx xx xx xxx xxx xxx xx xx xx xx xxx xxx xxx Secondary flash 20 The operating system for HP ProCurve switches is contained in a software image file. While all switches ship with firmware installed, HP occasionally issues new firmware versions to support new features or to improve switch performance. As shown above, most HP ProCurve switches feature two flash memory areas called primary and secondary where firmware images can be stored. Because the two areas can store different images, administrators can back up a current firmware version before installing a new one. This enables the administrators to restore the switch s earlier functionality if the new firmware proves unsuitable. Note The HP ProCurve Switch 2500 Series maintains only one firmware image. The copy tftp flash command copies a binary from the server to the switch. 3-20

169 System information Flash file manipulation (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Flash file manipulation 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series To copy an OS image from one flash to another: HPswitch# copy flash flash <destination flash> Copies the image in secondary flash to primary flash 21 When you copy the flash image from primary to secondary, or vice versa, the switch overwrites the file in the destination location with a copy of the file from the source location. This means you do not have to erase the current image at the destination location before copying in a new image. Verify that there is an acceptable OS image in the source flash location from which you are going to copy. Use the show flash command to verify an acceptable OS image. Attempting to copy from a source image location that has a corrupted flash image overwrites the image in the destination flash location. In this case, the switch will not have a valid flash image in either flash location, but will continue running on a temporary flash image in RAM. Do not reboot the switch. Instead, immediately download another valid flash image to primary or secondary flash. Otherwise, if the switch is rebooted without an OS image in either primary or secondary flash, the temporary flash image in RAM will be cleared and the switch will go down. 3-21

170 Installation and service of HP ProCurve devices Booting from an alternate image source (2600, 2800, 4100gl, 5300xl series, 6108) Booting from an alternate image source 2600, 2800, 4100gl, 5300xl series, 6108 To boot from a specified flash immediately: HPswitch# boot system flash < primary secondary > The switch will reboot immediately with no warning To modify the configuration file to boot from a specific flash in the future: HPswitch(config)# boot system flash < primary secondary > The 9300m switch also supports booting from TFTP servers. All you need is the IP address of the TFTP server and the image file name. For example: HPswitch(config)# boot system tftp h2r07504.bin 22 With the primary/secondary flash option you can test a new image in your system without having to replace a previously existing image. You can also use the image options for troubleshooting. For example, you can copy a problem image into secondary flash for later analysis and place another, proven image in primary flash to run your system. The switch can use only one image at a time. 3-22

171 System information Updating the system image (4100gl, 5300xl series, 9300 series) Updating the system image 4100gl, 5300xl series, 9300 series 1. Download new firmware from Web site and extract the image file. 2. Enable TFTP server. Primary flash Secondary flash 3. Access routing switch via direct connection, Telnet, or Web. Copy new firmware and reload. copy tftp flash h2r07504.bin secondary boot system flash secondary 4. Verify proper operation of the routing switch and copy to primary flash copy flash flash primary 23 The latest firmware images for all HP ProCurve switches are available from the HP ProCurve Web site at The HP ProCurve site also includes a link for requesting notification when new firmware is released. As this slide illustrates, new firmware is first downloaded to a user s PC, then extracted from a compressed archive. The file is then copied to a TFTP server for distribution to the switches. Steps 3 and 4 show the commands necessary to install the firmware on the switch. Note that you can test a new firmware version by booting the switch from an image held in secondary flash memory. After the switch s operation is verified, the image can be copied to primary memory. The switch must be rebooted to activate the firmware. However, the firmware installation does not force a reboot. 3-23

172 Installation and service of HP ProCurve devices Updating the system image (4000 series) Updating the system image 4000 series 24 In this slide, C is the version of firmware that is currently running on the switch. You will specify the IP address of the TFTP server and the file name of the new firmware that you want to download to the switch. Note that the firmware file either must be in the default TFTP folder or you must specify a folder as part of the file name. 3-24

173 System information Viewing system information (4000 series) Viewing system information 4000 series

174 Installation and service of HP ProCurve devices The boot monitor (9300 series) The boot monitor 9300 series The boot monitor allows you to manually intervene in the boot process. The following commands are available at the boot monitor: Router_A# reload M2 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR>? reset boot system flash primary boot system flash secondary boot system bootp boot system tftp file name ip address ip address /24 ip default_gateway ping While the HP ProCurve routing switch is starting up, there is a 2-second window during which you can interrupt the boot process by pressing the b key from a terminal with a direct serial connection. This brings up the boot monitor. Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The slide displays examples of the options available at the boot monitor. 3-26

175 System information Boot the switch from a TFTP server (9300 series) Boot the switch from a TFTP server 9300 series The boot monitor allows you to interrupt the boot sequence and boot the system from an alternate location. Router_A# reload M4 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR> ip address /24 BOOT MONITOR> ping BOOT MONITOR> ping BOOT MONITOR> boot system tftp h2r07054.bin 27 If both primary and secondary flash images are corrupted, the system will be unable to boot without intervention. You can recover from this problem by booting from a system image file stored on a TFTP server. The first step is to enter the boot monitor. In this mode, the startup configuration has not been executed, and thus the routing switch doesn t have an IP identity. To enable the routing switch to request the system image file from the TFTP server, you must enable IP on the switch by supplying a box-wide IP address and mask. If the TFTP server is on another network, use the IP default-gateway command to define the address of the default gateway on the switch s local network. When the system boots, it will automatically execute the startup configuration, if one exists in flash memory. As soon as possible, you should copy a valid image to the primary and secondary flash areas using the copy tftp flash command. 3-27

176 Installation and service of HP ProCurve devices show tech command (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) show tech command 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The show tech command outputs operation and configuration details from several internal switch sources, including: Image stamp Running configuration Event log Boot history Port configuration and status IP routes VLAN information GVRP support Load balancing static and dynamic trunks Runs from manager level only High-volume output best to capture to a file 28 Executing show tech outputs a data listing to your terminal emulator. However, using your terminal emulator s text capture features, you can also save show tech data to a text file for viewing, printing, or sending to HP ProCurve Support. You can send the output to a TFTP server (discussed in Module 4) or, optionally, you can capture the command output to a file using terminal emulation features or Microsoft Notepad. 3-28

177 System information Copying command output to a file Copying command output to a file 5300 The output from any CLI command can be copied to a file on the TFTP server. This is especially useful when used with show tech: HP5300(config)# copy command-output show tech tftp Core_2.txt Copies the output of the show tech command to a file named Core_2.txt at the TFTF Server at Output from the show tech command can be put to a file using the terminal emulation file capture facility

178 Installation and service of HP ProCurve devices Putting system info to a file (4000 series) Putting system info to a file 4000 series 30 This slide shows putting output from a command to a remote file on the HP ProCurve 4000 series. 3-30

179 System information Module 3 summary Module 3 summary In this module you learned: The meaning of the switch and module LEDs How to manipulate the system and configuration files How to boot the switch from an alternate system image How to copy output from a command to a file on a remote device

180 Installation and service of HP ProCurve devices 3-32

181 System information Learning check Module 3 1. How would you store several versions of configuration information for a particular switch? What is the difference between the output of the show flash command and the output of the show version command? What methods are available for upgrading the software images on most HP ProCurve switches? a. TFTP file transfer b. Web browser download c. XMODEM serial transfer through console port 3-33

182 Installation and service of HP ProCurve devices 3-34

183 Verification toolbox Module 4 Objectives This module discusses the features and functions of the verification toolbox. After completing this module you should be able to: Configure time synchronization View event logging Send events to a syslog server Configure SNTP Configure CDP Use diagnostic tools, including: Ping Link test Show tech Traceroute 4-1

184 Installation and service of HP ProCurve devices Points to ponder Points to ponder The first thing we talk about is time service. You can have each switch keep its own time, but using a centralized clock is a better approach, especially in larger networks. The advantage of a centralized time service is that events across the network are synchronized, so when you have to debug a network problem you can determine the relative status of each switch with regard to a normalized time reference. The two centralized time services are Simple Network Time Protocol (SNTP) and TimeP. You should check with the site network administrator to determine what time service they use and the location of the centralized time server that is, its IP address

185 Verification toolbox Time synchronization protocols Time synchronization protocols HP ProCurve switches support two time synchronization protocols: IP Time Protocol (TimeP), the default, allows you to: Manually designate a TimeP server by its IP address, or Dynamically obtain the IP address of a TimeP server Simple Network Time Protocol (SNTP) allows you to: Manually designate SNTP servers, known as Unicast mode Dynamically obtain the IP address of a preferred SNTP server by listening to broadcasts, known as Broadcast mode 4 HP ProCurve switches support two time-synchronization protocols: IP Time Protocol (TimeP) and Simple Network Time Protocol (SNTP). TimeP is the default time protocol, but it is not automatically active when the switch is set to factory defaults. To enable TimeP, you must select a TimeP mode. The three mode choices are manual, DHCP, and disabled. By default, the mode is disabled. If you choose manual mode, you must supply the IP address of a TimeP server. If the switch normally uses DHCP for IP addressing, you can select DHCP mode to enable it to receive the time server information from the DHCP server. However, this will probably require a modification to the scope configured on the DHCP server. SNTP can be configured for unicast or broadcast mode. In broadcast mode, the switch will obtain time information from the first SNTP server that issues a broadcast advertising the service. The switch will reject all other SNTP advertisements unless it doesn t receive an update in three times the poll interval. If the switch is configured for unicast mode, you must supply the IP address of an SNTP server. 4-3

186 Installation and service of HP ProCurve devices Configuring SNTP parameters (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Configuring SNTP parameters 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series SNTP server SNTP server Edge_ This switch specifically requests time updates from the server specified first in its configuration If the server does not reply within 3 times the polling interval (720 seconds), the switch sends a request to the second server Up to 3 SNTP servers can be specified Edge_1(config)# timesync sntp Edge_1(config)# sntp broadcast Edge_1(config)# sntp server Edge_1(config)# sntp server Edge_1(config)# sntp This slide illustrates the steps for configuring an HP ProCurve switch to obtain time information from SNTP servers. Note that the command sequence specifies two SNTP servers. The sntp 60 command instructs the switch to poll the time server every 60 seconds. If the switch does not receive a reply from the first server within three polling intervals, it will request time information from the second server. The default polling interval is 720 seconds. 4-4

187 Verification toolbox Time zone and manual time setting (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Time zone and manual time setting 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The time zone is represented in minutes. For example, a time zone 7 hours west of GMT would be indicated as: Edge_1(config)# time timezone -480 The date and time can be set manually; for example: Edge_1(config)# time 09/30/ :00:00 To display the current system time, use one of the following commands: Edge_1# time Fri Dec 12 08:28: Edge_1# show time Fri Dec 12 08:28: By default, HP ProCurve switches will report time in Greenwich Mean Time (GMT). As shown here, administrators can change to the local time zone using the time command with the timezone parameter and a time zone differential the difference between the local time zone and GMT that is entered in minutes. On networks where time services are not available, administrators can use the time command to set the time manually, as shown here. Time settings defined in this way will survive when an HP ProCurve switch is restarted. However, they will not survive loss of power. To learn the current time setting of an HP ProCurve switch, enter show time or enter the time command without any parameters. 4-5

188 Installation and service of HP ProCurve devices Menu: configuring time protocol (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Menu: configuring time protocol 2500, 2600, 2800, 4100gl, 5300xl series, 6108 From the main menu, select: 2. Switch Configuration System Information Time Protocol Selection Parameter TIMEP SNTP None 7 By pressing the spacebar you can scroll through the Time Sync Methods available (TIMEP, SNTP, None). For each Time Sync Method there is an associated mode. Next, enter the mode: SNTP mode options are disabled, broadcast, unicast TIMEP mode options are disabled, DHCP, manual 4-6

189 Verification toolbox Menu: configuring time protocol (4000 series) Menu: configuring time protocol 4000 series From the Main Menu, select: 2. Switch Management Access Configuration 1. IP Configuration Time Protocol Selection Parameter TIMEP SNTP None Unicast Broadcast Disabled 8 4-7

190 Installation and service of HP ProCurve devices Points to ponder Points to ponder! From time to time things do break. Fortunately, HP ProCurve switches have several built-tools that can help you isolate and identify problems. Occasionally, even with these tools you will not be able to resolve the problem. For these instances HP ProCurve provides mechanisms so that you can capture the state of a switch onto a file that you can forward to HP Customer Support. They re there to help you out and they WILL be able to resolve the issue. Typically, to capture this file you must work with the network administrator. The NA should be able to tell if there is a server set up to capture the info and the IP address of the server. If not, you need to work with the NA to set up a server

191 Verification toolbox Event log system (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Event Log system 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series The switch automatically records the occurrence of system events in an Event Log that resides in dynamic memory This volatile memory does not survive reboots Also, this memory is very limited, and once the memory is filled, new events overwrite the existing memory-resident information The switch s Event Log records switch-level progress, status, and warning messages 10 The switch s event log records switch-level progress, status, and warning messages. Typically, these messages are stored in the switch s volatile memory and are lost upon a reboot. Also, only a relatively small number of events are captured before wrapping happens and measures are lost. For these reasons it is advisable to collect selected events on a remote device. 4-9

192 Installation and service of HP ProCurve devices Event Event An event is any significant occurrence within or affecting the system, such as an alarm, error condition, network problem, task completion, threshold breach, or status change The Event Log is stored in nonvolatile memory You can also specify that certain events trigger a console message, a syslog record, or an SNMP management system trap Event attributes include class and severity level HPswitch# show logging Displays the system Event Log since the last boot 11 The show logging command (shortcut: sh log or log) displays events recorded since the switch s most recent reboot. Each entry in the event log includes one of four possible severity levels: warning, information, major, or debug. Note The 9300 units actually support eight code levels: A=alert, C=critical, D=debugging, M=emergency, E=error, I=informational, N=notification, and W=warning. Also displayed is a description of the software module, such as Slot B, that registered the event for each module. Note The switch s time should be set, and a centralized time protocol should be used to coordinate events. 4-10

193 Verification toolbox Show logging Show logging This is the output of show logging on 5300 and 9300 switches. Although structured a little differently, the information is consistent. Also, note the time of the events. Obviously, time has not been set on the switches and/or there is no centralized time service configured. Because of the lack of synchronized time it would be difficult to associate how the individual switches reacted to a specific network event, such as a link going down. 4-11

194 Installation and service of HP ProCurve devices The Debug/System-Logging (syslog) system The Debug/System-Logging (syslog) system Provides a mechanism for sending events to a remote destination supporting syslogd services Also provides a mechanism for sending other messages indicating network-level problems such as routing misconfigurations and other network protocol details to the remote destination These messages can be used to monitor the state of the system and to help in debugging system problems You can configure the switch to send these (debug) messages to these destinations: Up to six Syslog servers A CLI session 13 Debug/System-Logging (Syslog) is a client-server logging tool that allows a client switch to send log messages to a networked device operating with Syslog server software. Messages sent to a Syslog server can be stored to a file for later debugging analysis. Effective use of this option requires that you set up a Syslog server application on a networked host accessible to the switch. While the switch s event log records switch-level progress, status, and warning messages, Syslog provides a method for recording messages you can use to help in debugging network-level problems, such as routing misconfigurations and other network protocol details. Debug enables you to specify the types of event notification messages to send to external devices. Debug messaging reports on these event types: ACL deny matches. Selected IP routing events. Events that generate messages for the switch s event log. You can configure the switch to send debug messages to these destinations: Up to six Syslog servers A CLI session through any one of the following: Direct RS-232 console Telnet SSH 4-12

195 Verification toolbox Defining a SyslogD server Defining a SyslogD server IP host /24 running syslogd services Syslog messages will be dynamically copied to a log file on this server Up to 6 syslog servers may be defined Switch_A1(config)# logging Switch_A1(config)# debug all 14 After you use the logging < ip-addr > command to configure at least one Syslog server IP address in the switch configuration, this command disables or reenables Syslog logging to the configured Syslog server(s). When Syslog logging is enabled, the switch sends the debug message types (specified by the debug < debug-type > command) to the configured Syslog server(s). You can use this option only when one or more Syslog server IP addresses are already configured in switch memory. 4-13

196 Installation and service of HP ProCurve devices Enabling Debug/System Logging 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Enabling Debug/System Logging 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Enable Syslog logging (up to 6 Syslog servers can be specified): HPswitch(config)# Logging <ip-addr> Switch begins sending Event Log message to Syslog server(s) To send other notification to the Syslog server(s), use the debug command: HPswitch# Debug <debug-type> To disable Syslog logging without deleting the server addresses, use this command: HPswitch# No debug destination logging To send notifications to a CLI session, use this command: HPswitch# Debug destination session 15 These are samples of the commands to enable logging events to a remote syslog server. 4-14

197 Verification toolbox Debug command (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Debug command 2500, 2600, 2800, 4100gl, 5300xl series, 6108 DEBUG enables you to specify the types of notification messages to send to external devices DEBUG < debug-type > EVENT Configures the switch to send Event Log messages to the configured debug destination(s) IP/OSPF Enables all IP/OSPF message types for the configured debug destination(s) ACL When a match occurs on an ACL "deny" Access Control Entry (with log configured), the switch sends an ACL message to the configured debug destination(s) ALL Configures the switch to send all debug types to the configured debug destination(s) 16 Debug types: [no] debug < debug-type > EVENT Configures the switch to send event log messages to the configured debug destination(s). IP/OSPF Enables all IP/OSPF message types for the configured debug destination(s). ACL When a match occurs on an ACL deny Access Control Entry (with log configured), the switch sends an ACL message to the configured debug destination(s). ALL Configures the switch to send all debug types to the configured debug destination(s). 4-15

198 Installation and service of HP ProCurve devices Messaging structure (2500, 2600, 2800, 4100gl, 6108) Messaging structure 2500, 2600, 2800, 4100gl, 6108 The debug command performs two main functions: Specifies the type(s) of event messaging to send to a destination Specifies the destination(s) of the selected message types 17 This slide shows the structure of the events that can be logged and the possible destination for the events. Notice that there are no IP routing protocol events associated with these switches. 4-16

199 Verification toolbox Messaging structure (5300xl series) Messaging structure 5300xl series The debug command performs two main functions: Specifies the type(s) of event messaging to send to a destination Specifies the destination(s) of the selected message types 18 This shows the structure of the events that can be logged and the possible destination for the events for the 5300 series. Notice that there are IP Routing protocol events associated with the 5300 series switches. 4-17

200 Installation and service of HP ProCurve devices Event logging (4000 series) Event logging 4000 series From the Main Menu select: 2. Switch Management Access Configuration, then 4. Console/Serial Link Configuration To change the severity level for events displayed in the Event Log, change this setting 19 For the 4000 series, event logging is configured via the Console/Serial Link Configuration menu. The options for Displayed Events are All, Critical, Debug, Not INFO, and None. 4-18

201 Verification toolbox View the event log (4000 series) View the Event Log 4000 series 20 This shows the output of Event Log on the 4000 series. The output is similar to the output on the HP ProCurve switches. Again, note that the time has not been set. 4-19

202 Installation and service of HP ProCurve devices Event logging (9300 series) Event logging 9300 series The Routing Switch records the occurrence of system events in a log that resides in dynamic memory. To display the log entries, issue the following command: HP9300> show logging Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Buffer logging: level ACDMEINW, 3 messages logged level code: A=alert C=critical D=debugging M=emergency E=error I=informational N=notification W=warning Static Log Buffer: Dec 15 19:04:14:A:Fan 1, fan on right connector, failed Dynamic Log Buffer (50 entries): Dec 15 18:46:17:I:Interface Ethernet 1/4, state up Dec 15 18:45:21:I:Bridge topology change, vlan 4095, interface 4, changed state to forwarding Dec 15 18:45:15:I:Warm start 21 Static Log Buffer logs power supply failures, fan failures, and temperature warning or shutdown messages. Dynamic Log Buffer logs all other message types. In the static log, new messages replace older ones, so only the most recent message is displayed. For example, only the most recent temperature warning message will be present in the log. If multiple temperature warning messages are sent to the log, the latest one replaces the previous one. The static buffer is not configurable. The message types that appear in the static buffer do not appear in the dynamic buffer. The dynamic buffer contains up to the maximum number of messages configured for the buffer (50 by default), then begins removing the oldest messages (at the bottom of the log) to make room for new ones. When you clear log entries, you can selectively clear the static or dynamic buffer, or you can clear both. For example, to clear only the dynamic buffer, enter the following command at the privileged EXEC level: Syntax: HP9300# clear logging dynamic-buffer clear logging [dynamic-buffer static-buffer] You can specify dynamic-buffer to clear the dynamic buffer or static-buffer to clear the static buffer. If you do not specify a buffer, both buffers are cleared. 4-20

203 Verification toolbox Message levels (9300 series) Message levels 9300 series A=alert; C=critical; D=debugging; M=emergency; E=error; I=informational; N=notification; W=warning Alerts Power supply failed Fan failed Management module state change Temperature warning More power needed for modules inserted Warnings NTP server failed to respond Notifications Module inserted/removed into/from slot VRRP interface state change Informational Device has been powered on Login to (Logout out from) User Exec Login to (Logout out from) Priv Exec Interface state change Bridge root change Bridge topology change 22 Only Alert, Warning, Notification, and Informational messages are logged by default. 4-21

204 Installation and service of HP ProCurve devices Configuring Syslog using CLI (9300 series) Configuring Syslog using CLI 9300 series Enable Syslog logging of all severity level in the local Syslog buffer: HP9300(config)# Logging on To send notifications to Syslog server(s): HP9300(config)# Logging <ip-addr> Up to six Syslog servers can be defined To disable logging of debugging and informational messages: HP9300(config)# No logging buffered debugging HP9300(config)# No logging buffered informational To view recorded log messages since last reboot use: HP9300> show logging 23 These are samples of the commands to enable logging events to a remote syslog server. 4-22

205 Verification toolbox Simple Network Management Protocol (SNMP) Simple Network Management Protocol (SNMP) HP ProCurve switches can be managed from a network management application such as HP OpenView via SNMP HP ProCurve switches also provide support for RMON agent statistical sampling for easy-to-use traffic monitoring and network activity analysis 24 To implement SNMP management, the switch must have an IP address, configured either manually or dynamically (using DHCP or Bootp). If multiple VLANs are configured, each VLAN interface should have its own IP address. 4-23

206 Installation and service of HP ProCurve devices Configuring SNMP Configuring SNMP Configure the appropriate SNMP communities The public community is a read-only community that exists by default and is used by the HP network management applications To issue set commands to the switch, a private read/write community must be created Configure the appropriate traps to transmit and trap receivers 25 The public community exists by default and is used by HP network management applications. Deleting the public community disables many network management functions (such as auto-discovery, traffic monitoring, SNMP trap generation, and threshold setting). If security for network management is a concern, it is recommended that you change the write access for the public community to Restricted. 4-24

207 Verification toolbox Defining an SNMP read/write community (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Defining an SNMP read/write community 2500, 2600, 2800, 4100gl, 5300xl series, 6108 HPswitch(config)# snmp-server community red-team manager unrestricted HPswitch(config)# snmp-server community blue-team operator restricted 26 An SNMP community consists of one or more network management stations and one or more SNMP agents. The SNMP community attribute enables the SNMP agent on the HP ProCurve switch to identify authentic SNMP messages (messages from within the community) with a high degree of certainty. The first command creates a read/write community (manager) named red-team. The second command creates a read-only community (operator) named blueteam. The community parameter specifies an SNMP community string configured on the HP ProCurve device. The string can be read-only or read-write. The string is not used to authenticate access to the trap host, but is instead a useful method for filtering traps on the host. For example, if you configure each of your HP ProCurve devices that use the trap host to send a different community string, you can easily distinguish among the traps from different HP ProCurve devices based on the community strings. 4-25

208 Installation and service of HP ProCurve devices Configuring SNMP trap operation (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Configuring SNMP trap operation 2500, 2600, 2800, 4100gl, 5300xl series, 6108 To configure a trap receiver in a community named red-team with an IP address of to receive only critical log messages: HPswitch(config)# snmp-server trap-receiver red-team critical 27 This command sends critical events as SNMP traps to The traps will have a community name of red-team. Red-team will be associated with a particular device, making it easier to decipher the info on the NMS server. 4-26

209 Verification toolbox Configuring SNMP trap operation (4000 series) Configuring SNMP trap operation 4000 series 28 Configuring SNMP communities on the 4000 series. 4-27

210 Installation and service of HP ProCurve devices Defining an SNMP read/write community (9300 series) Defining an SNMP read/write community 9300 series By default the 9300 unit supports a READ-ONLY community called public All SNMP parameters are defined at the global configuration level using the following command: Switch_A(config)# snmp-server? To create a READ/WRITE community named admins issue the following command: Switch_A(config)# snmp-s community admins rw 29 You can specify a trap receiver to ensure that all SNMP traps sent by the HP ProCurve device go to the same SNMP trap receiver or set of receivers, typically one or more host devices on the network. When you specify the host, you also specify a community string. The HP ProCurve device sends all the SNMP traps to the specified host(s) and includes the specified community string. Administrators can therefore filter for traps from an HP ProCurve device based on IP address or community string. When you add a trap receiver, the software automatically encrypts the community string you associate with the receiver when the string is displayed by the CLI or Web management interface. If you want the software to show the community string in the clear, you must explicitly specify this when you add a trap receiver. In either case, the software does not encrypt the string in the SNMP traps sent to the receiver. 4-28

211 Verification toolbox Configuring SNMP trap operation (9300 series) Configuring SNMP trap operation 9300 series By default, the routing switch supports 17 traps. To individually disable traps, use the following: Switch_A(config)# no snmp-s enable traps? To define the identity of a management station that can act as a trap receiver, use the following command: Switch_A(config)# snmp-s host password To cause all traps to be sent from the same source address, use the following command: Switch_A(config)# snmp-s trap-source ve

212 Installation and service of HP ProCurve devices Points to ponder... Points to ponder Often you will need to validate network connectivity. HP ProCurve switches have several built-in tools that can help you perform a connectivity and reachability verification. CDP can be used to determine what device is at the other end of a physical connection. Ping is a useful tool to determine if a remote IP address is reachable. If it is not, then you may want to use Traceroute to trace the path to the IP destination. This may help you isolate the problem network facility. Port mirroring is a convenient mechanism to actually capture packets that are traversing the LAN. Show tech will record the detailed configuration of a switch. Typically you would want to send the output of show tech to file. Then the file could be forwarded to HP ProCurve customer support

213 Verification toolbox Cisco Discovery Protocol (CDP) 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Cisco Discovery Protocol (CDP) 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series HP ProCurve switches implement CDP to collect information about neighboring switches Each switch describes itself in CDP packets it sends through each port Each outbound CDP packet can reach only directly connected neighbors Switches create a CDP neighbors table that contains an entry for each directly connected neighbor Information in the CDP neighbors table may be: Displayed at the CLI Used by an SNMP utility to facilitate management and graphical depiction of the network On the 9300 series, CDP is referred to as FDP 32 All HP ProCurve switches implement CDP to collect information about neighboring switches. Like all CDP-aware switches, HP ProCurve switches periodically describe themselves by sending messages to neighboring switches. CDP packets survive only one hop. When it receives a CDP packet, a switch places the information from the packet into an entry in the CDP neighbors table. On the 9300 series, CDP is called FDP (Foundry Discovery Protocol). The 9300 series switches run FDP in both advertise and listen mode, but they run only CDP in listen mode. Thus, a 9300 series switch will see all other HP ProCurve switches on a show cdp neighbors command, but switches such as the 5300xl switch will not see the 9300 switch. 4-31

214 Installation and service of HP ProCurve devices Displaying CDP information (2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Displaying CDP information 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series To display global and interface-level CDP status: Core_1# show cdp To display a high-level view of the entries in the CDP neighbors table: Core_1# show cdp neighbors CDP neighbors information Port Device ID Platform Capability C1 Edge_1(0004ea-61b300 HP 5304XL S C2 Core_2(0004ea-5e5000 HP 5304XL S 33 Because CDP information on HP ProCurve switches can be accessed with CLI commands, CDP can act as a verification tool. The show cdp command provides the status of CDP on every switch port. As shown here, the command show cdp neighbors yields the hostname, switch type, and MAC address for every neighboring switch where CDP is supported and enabled. If the output does not show information about a connected switch, verify that CDP is enabled on it. Note A shortcut for show cdp neighbors is sh cdp n. CDP also is used in conjunction with SNMP. SNMP management platforms query each switch s neighbors table and use the output to enhance the graphical representation of network devices. 4-32

215 Verification toolbox Displaying CDP neighbor details (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Displaying CDP neighbor details 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series To display detailed information about CDP neighbors: Core_1# show cdp neighbors detail CDP neighbors information Port : C1 Device ID : Edge_1 0004ea-61b300 Address Type : IP Address : Platform : HP 5304XL Capability : Switch Device Port : C1 Version : E /sw/code/build/alpmo(w03) Port : C2 Device ID : Core_2 0004ea-5e5000 Address Type : IP Address : Platform : HP 5304XL Capability : Switch Device Port : C2 Version : E /sw/code/build/alpmo(w03) 34 As shown here, the show cdp neighbors detail command provides information about a switch s neighbors. This includes information about which ports are connected to the neighbors, as well as their IP addresses, device IDs, and device specific information such as switch model and firmware version. Note that show cdp neighbors can be used to learn the address of a neighboring switch. 4-33

216 Installation and service of HP ProCurve devices Modifying CDP settings (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Modifying CDP settings 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The default configuration of each HP ProCurve switch enables CDP box-wide CDP parameters can be changed at the global configuration level: Core_1(config)# cdp? timer Set CDP transmit interval in seconds. holdtime Set holdtime value transmitted in CDP packets. run Start and stop CDP on the device. enable Enable/disable CDP on particular device ports. clear Clear records for all CDP neighbors learned by the device. For example, to disable CDP on port A1: Core_1(config)# no cdp enable a1 35 CDP settings on HP ProCurve switches can be modified with CLI commands. For instance, as shown here, CDP can be disabled on individual ports. You can also configure CDP timers to change the number of seconds between CDP transmissions. The default CDP transmit interval is 60 seconds. The default holdtime, which controls a CDP packet s time to live, is 180 seconds (three times the transmit interval). If information on neighboring switches has changed, you can clear the records in the neighbors table to force relearning. 4-34

217 Verification toolbox Diagnostic tools (2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools 2500, 2600, 2800, 4000 series, 4100gl, 5300xl series, 6108, 9300 series Port auto-negotiation When a link LED does not light (indicating loss of link between two devices), the most common reason is a failure of port auto-negotiation between the connecting ports If a link LED fails to light when you connect the switch to a port on another device, do the following: 1. Ensure that the switch port and the port on the attached endnode are both set to Auto mode 2. If the attached end-node does not have an Auto mode setting, then you must manually configure the switch port to the same setting as the end-node port 36 If it is not a configuration problem, then possibly it is a physical problem with either the cable, the connector, or the port. 4-35

218 Installation and service of HP ProCurve devices Diagnostic tools: ping test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: ping test 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Ping test Test the path between the switch and another device on the same or another IP network. Test that a device can respond to IP packets (ICMP Echo Requests). 37 Use ping to test reachability to a remote IP address. If the test fails, then you might want to use traceroute to try to isolate where the problem occurs between the source and the destination. Or you may to try a link test to determine if the problem is a Layer 2 problem rather than a Layer 3 issue. A misconfigured default gateway is a common source of ping failures. The ping command supports switches to specify the number of repetitions and the timeout. 4-36

219 Verification toolbox Diagnostic tools: link test (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: link test 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Link test This is a test of the connection between the switch and a designated network device on the same LAN (or VLAN, if configured). During the link test, IEEE test packets are sent to the designated network device in the same VLAN or broadcast domain. The remote device must be able to respond with an Test Response Packet. 38 This is a useful test to determine if a device on the same LAN as the source is reachable. Failure indicates a Layer 1 or a Layer 2 problem. You can specify the number of repetitions and the timeout. 4-37

220 Installation and service of HP ProCurve devices Diagnostic tools: show tech (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: show tech 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Show tech The show tech command outputs, in a single listing, switch operating and running configuration details from several internal switch sources, including: Image stamp (software version data) Running configuration Event Log listing Boot history Port settings Status and counters port status IP routes Status and counters VLAN information Load balancing (trunk and LACP) HPswitch# show tech 39 Executing show tech outputs a data listing to your terminal emulator. However, using your terminal emulator s text capture features, you can also save show tech data to a text file for viewing, printing, or sending to HP ProCurve support. You can send the output to a TFTP server (discussed in Module 3), or optionally you can capture the command output to a file using terminal emulation features or Microsoft Notepad. 4-38

221 Verification toolbox Diagnostic tools: traceroute (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Diagnostic tools: traceroute 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Traceroute The traceroute command enables you to trace the route from the switch to a host address. This command outputs information for each (router) hop between the switch and the destination address. 40 Traceroute is a very useful command when trying to isolate a network problem. The command supports several useful command line options. You can specify the maximum number of hops allowed for each probe packet sent along the route. If the destination address is further from the switch than maximum hops allows, then traceroute lists the IP addresses for all hops it detects up to the maximum hop limit. You can also specify the number of queries the switch sends for each hop. 4-39

222 Installation and service of HP ProCurve devices Port mirroring (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Port mirroring 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series Traffic from any set of ports can be sent to another port for collection and analysis Define the mirror port at global configuration level: Switch(config)# mirror-port c2 Receives monitored traffic and is connected to the packet analyzer Cannot be a trunked port Enable monitoring within port context configuration level: Switch(eth-a12)# monitor Ports whose traffic is copied to the monitor port May be a trunked port or a single port 41 Port monitoring (mirroring): Copy all traffic from the specified ports to a designated monitoring port. Individual ports and static trunks (and meshing on the 5300 series) can all be monitored at the same time. However, if you configure the switch to monitor a VLAN, all other interfaces are removed from monitoring. Also, you can configure only one VLAN at a time for monitoring. 4-40

223 Verification toolbox Ping test (4000 series) Ping test 4000 series 42 Using ping on the 4000 series. 4-41

224 Installation and service of HP ProCurve devices Link test (4000 series) Link test 4000 series 43 Running a link test on a 4000 series. 4-42

225 Verification toolbox Port mirroring (4000 series) Port mirroring 4000 series 44 On the 4000 series, mirroring is called port monitoring. 4-43

226 Installation and service of HP ProCurve devices Viewing events with the Web interface (2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series) Viewing events with the Web interface 2500, 2600, 2800, 4100gl, 5300xl series, 6108, 9300 series The Web browser interface Alert Log displays a list of network occurrences, or alerts, that were detected by the switch. Typical alerts are Broadcast Storm, indicating an excessive number of broadcasts received on a port, and Problem Cable, indicating a faulty cable. Status indicates the level of severity of the event generated. Severity levels can be Information, Normal, Warning, and Critical. 45 The interface featured in the slide is viewable via the Status tab. 4-44

227 Verification toolbox Viewing details of events (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Viewing details of events 2500, 2600, 2800, 4100gl, 5300xl series, 6108 By double-clicking on Alert Entries, the web browser interface displays a Detail View or separate window detailing information about the events

228 Installation and service of HP ProCurve devices Setting Fault Detection policy (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Setting Fault Detection policy 2500, 2600, 2800, 4100gl, 5300xl series, 6108 One of the powerful features in the web browser interface is the Fault Detection facility

229 Verification toolbox Alert sensitivities (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Alert sensitivities 2500, 2600, 2800, 4100gl, 5300xl series, 6108 High sensitivity This policy directs the switch to send all alerts to the Alert Log. This setting is most effective on networks that have no or few problems. Medium sensitivity This policy directs the switch to send alerts related to network problems to the Alert Log. If you want to be notified of problems that cause a noticeable slowdown on the network, use this setting. Low sensitivity This policy directs the switch to send only the most severe alerts to the Alert Log. This policy is most effective on a network that normally has a lot of problems and when you want to be informed of only the most severe ones. Never Disables the Alert Log and transmission of alerts. 48 Make events viewable via the Web interface. 4-47

230 Installation and service of HP ProCurve devices Configuring Syslog using Web interface (9300 series) Configuring Syslog using Web interface 9300 series From the System Configuration: 2. Select Management to display the Management panel. 3. Select the System Log link to display the following panel. 49 Note A change in the buffer size takes effect only after you restart the system. The buffer size does not affect how many entries the device can log on a Syslog server. The number of entries the device can log on the server depends on the server s configuration. 4-48

231 Verification toolbox To add Syslog server (9300 series) To add Syslog server 9300 series Click the Show Log Server link under the Apply and Reset buttons to display the Log Server panel. 50 The list shows the IP addresses and UDP ports of the Syslog servers. To delete an entry, click on the Delete button for that entry. To add a Syslog server, click on the Add Log Server link under the dialog to display the System Log Server panel. 4-49

232 Installation and service of HP ProCurve devices Diagnostic tools (2500, 2600, 2800, 4100gl, 5300xl series, 6108) Diagnostic tools 2500, 2600, 2800, 4100gl, 5300xl series, 6108 Ping test or link test Web interface 51 On most switches the ping test and the link test are also available with the Web browser interface. 4-50

233 Verification toolbox Module 4 summary Module 4 summary In this module you learned: How to configure time synchronization with SNTP How to use use event logging and debugging to identify and record faults How to use the available diagnostic tools, including: CDP Ping Link test Traceroute Show tech

234 Installation and service of HP ProCurve devices 4-52

235 Verification toolbox Learning check Module 4 1. What information can you obtain from the CDP neighbors table? Name two ways to set the current time for a switch What is the benefit of enabling Syslog service for a switch? Why is it important to have the time synchronized on switches, especially when working with multiple switches?

236 Installation and service of HP ProCurve devices 4-54

237 Advanced hardware replacement and software utilities Module 5 Objectives This module discusses advanced hardware replacement procedures and reviews software utilities available for use on the HP ProCurve Networking switch products. After completing this module you will be able to: Describe the power-up LED behavior of HP ProCurve switches Describe the procedure for hot-swapping power supplies on HP ProCurve switches Describe the procedure for hot-swapping port modules on HP ProCurve switches Describe the replacement procedure and the failover of HP ProCurve 9300 management modules Discuss software utilities required for servicing HP ProCurve switches Discuss the procedures for recovering from a lost password or bad startup-config 5-1

238 Installation and service of HP ProCurve devices 9300m LED behavior 9300m LED behavior Verify proper behavior by observing the LEDs When power is applied, some of the module LEDs will light All of the power supply lights should light and stay a solid green Management module power and active LEDs light solid, then the standby unit s active LED goes dark as it goes into standby mode When diagnostics are complete, only port modules with active cables connected will have LEDs on NOTE: If all of the LEDs on a module do not light up during the diagnostics, this does not indicate an error. Only some of the LEDs are lighted during the diagnostics

239 Advanced hardware replacement and software utilities 9300 management EP modules 9300 management EP modules One or two redundant modules supported per chassis Two modules work together as active and standby management modules If the active module becomes unavailable, the standby takes over operation after booting and loading synchronized configuration Management modules must be matched: that is, M2s with M2s, M4s with M4s, EPs with EPs

240 Installation and service of HP ProCurve devices Removing 9300m modules Removing 9300m modules Non-management modules should be disabled before removing this avoids brief service interruptions HP9300# disable module 3 The replacement module is automatically enabled when you insert the module into a live chassis or when you power on the chassis If you remove the module without first disabling it, the routing switch reinitializes the other modules in the chassis; this causes a brief interruption in service, after which normal operation resumes 5 5-4

241 Advanced hardware replacement and software utilities Inserting 9300m modules Inserting 9300m modules Hot-inserting modules can be hot-inserted into empty chassis slots with no action required; modules will be enabled automatically If you want to prepare slots for modules, they can be manually entered into the configuration and physically inserted into the chassis later HP9300(config)# module 4 24-port-copper-module Enter the HP9300(config)# module X? To see a list of available modules Hot-swapping modules if replacing module with the same type of module, no action needs to be taken If you replace a module with a different type of module, you must configure the slot for the module HP9300(config)# module 3 24-port-copper-module 6 5-5

242 Installation and service of HP ProCurve devices Replacing 9300m management modules Replacing 9300m management modules By default, the redundant management module in the lower slot number becomes the active redundant management module when you start the system To override the default and specify the active redundant management module, enter the following commands: HP9300(config)# redundancy HP9300(config-redundancy)# active-management 5 Active management modules should be failed over to standby module before removal By default, the system synchronizes: The flash code and startup-config file automatically The running-config at regular user-configurable intervals The boot code is NOT automatically set to synchronize but can be set to at startup or switch failover If you upgrade the boot code on the active module and the code contains a problem, you can still use the system by running the older boot code that is on the standby module 7 5-6

243 Advanced hardware replacement and software utilities Replacing 9300m management modules Replacing 9300m management modules 1. Manually failover the active management module to the standby module using CLI or web interface 2. Remove the module to be replaced that is now in standby mode 3. Insert replacement module it will become enabled but in standby mode; flash code and config files will automatically synchronize 4. Configure boot code synchronization if required 5. Optional manually failover management back to lowest slot module but this will interrupt network operations; not really necessary 8 5-7

244 Installation and service of HP ProCurve devices Recovering from a lost password (9300 series) Recovering from a lost password 9300 series The boot monitor allows you to interrupt the boot sequence and boot the system without requiring the super-user password Router_A# reload M4 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR> no password BOOT MONITOR> boot system flash primary Router_A> enable Router_A# 9 While the HP ProCurve routing switch is starting up, there is a 2-second window during which you can interrupt the boot process by pressing the b key from a terminal with a direct serial connection. This brings up the boot monitor. Interrupting the boot process by entering the boot monitor gives you an opportunity to specify the source of the system image. It is most useful in situations where you cannot access the privileged EXEC level. The slide displays how to instruct the switch to boot from primary flash. The boot monitor can also be used for recovery from a lost super-user password. In this case, you must enter the boot monitor and enter the hidden command no password, followed by a boot system flash primary command. Note that booting without password protection does not remove the passwords from the configuration file; it simply removes the authentication requirement. When the system boots with no password, you can enter the privileged level EXEC simply by entering the enable command at the user level EXEC. You should assign a new super-user password and write the configuration to memory immediately to secure the system and replace the unknown password. 5-8

245 Advanced hardware replacement and software utilities Ignore startup configuration boot time (9300 series) Ignore startup configuration boot time 9300 series The boot monitor allows you to interrupt the boot sequence and boot the system with the factory default configuration: Router_A# reload M4 BI Boot Code Version Enter b to go to boot monitor BOOT MONITOR> use default config BOOT MONITOR> boot system flash primary 10 This command sequence instructs the switch to boot with the factory default configuration. The 2-second boot monitor opportunity may be eliminated by enabling the fastboot feature. Note that fastboot may be enabled (fastboot) or disabled (fastboot off) at both the user and privileged EXEC level. The fastboot command does not cause the system to restart; it does determine how quickly the system will boot. 5-9

246 Installation and service of HP ProCurve devices 5300xl LED pattern 5300xl LED pattern When the switch is powered on, it performs its diagnostic selftest. The entire download, initialization, and self-test process can take up to 2 minutes for a fully loaded chassis, depending on the number and type of modules installed in the switch. 11 LED behavior during the self-test Initially, Power and Fault and all the switch chassis LEDs are on. Then, after approximately 30 seconds, all of the module LEDs go on as the modules receive power and code is downloaded to them, the Fault LED goes off, and all the chassis LEDs go off except Power, Self Test, Fan Status, and Power Status. When the download of code to the modules is completed, the module LEDs go off. You may see each port LED go on briefly, in sequence, as the port is tested. For the duration of the self-test, the Self Test LED stays on. LED behavior when the self-test completes successfully The Power LED stays on, and the Status LEDs on the switch chassis stay on for the devices installed: one for each switch module installed, one for each power supply installed, and one for all the fans. The Fault and Self Test LEDs are off. 5-10

247 Advanced hardware replacement and software utilities The port LEDs on the switch modules go into their normal operational mode: If the ports are connected to active network devices, the Link LEDs stay on and the Mode LEDs behave according to the mode selected. In the default mode (Activity), the Mode LEDs should flicker, showing network activity on the port. If the ports are not connected to active network devices, the LEDs will stay off. 5-11

248 Installation and service of HP ProCurve devices 4100gl/5300xl module insertion 4100gl/5300xl module insertion 12 The slot cover can be removed, and the module can be installed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use. Any of the supported Switch XL modules can be installed in any of the slots. The modules can be hot-swapped, installed after the switch is already powered on, and normally will be immediately operational. But, if you are replacing a module with a different type than what was previously installed in the slot, the switch must be rebooted after the module is installed. The modules employ low-force connectors. Using high force to insert the modules is not needed and should not be used. Make sure that you fully insert the modules. That is, press the module into the slot until the bulkhead on the module is contacting or is very close to contacting the front face of the switch chassis. Once the module is fully inserted, make sure that you screw in the two retaining screws to secure the module in place. The screws should be tightened until they are secure, but not overtightened. If you do not use one or more of the slots, make sure that the slot cover plate is still attached over the slot for safe operation and proper switch cooling.! Important For safety, you should not have more than one module slot uncovered at a time. 5-12

249 Advanced hardware replacement and software utilities 4100gl/5300xl Redundant Power Supply (RPS) 4100gl/5300xl Redundant Power Supply (RPS) 13 A second, load-sharing redundant power supply (HP ProCurve Switch gl/xl RPS, J4839A) can be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source from the other supply. Then, if one AC power source fails, the switch will continue to run. Each supply provides enough power to operate a fully loaded switch, so even if one fails, the switch will continue to operate normally. Install the second power supply into power slot number 2 as shown in this slide. The slot cover can be removed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use. Caution The switch power supplies are hot-swappable; they can be installed while the switch is receiving power from the supply in the other slot. But, as indicated by the caution statement on the power supply, the supply must not be connected to AC power before being installed. 5-13

250 Installation and service of HP ProCurve devices 4000m/8000m LED patterns 4000m/8000m LED patterns When the switch is powered on, it performs its diagnostic self-test. The self-test takes approximately 35 to 70 seconds to complete, depending on the number and type of modules installed in the switch. 14 LED behavior during the self-test Initially, Power and Fault and all the Switch Engine and switch module LEDs are on. After approximately 3 seconds, most of the LEDs go off and then may come on again during phases of the self-test. For the duration of the self-test, the Self Test LED stays on. LED behavior when the self-test completes successfully The large Power LED stays on, and the Status LEDs on the Switch Engine Module stay on for the modules installed: one for each switch module installed, one for each power supply installed, and the Fan LED. The large Fault LED goes off, and the Switch Engine Fail and Self Test LEDs go off. The port LEDs on the switch modules go into their normal operational mode: If the ports are connected to active network devices, the Link LEDs stay on and the Mode LEDs behave according to the mode selected. In the default mode (Activity), the Mode LEDs should flicker, showing network activity on the port. If the ports are not connected to active network devices, the LEDs will stay off. 5-14

251 Advanced hardware replacement and software utilities 4000m/8000m module insertion 4000m/8000m module insertion 15 Install switch modules into the slots as shown in this slide. For installation details, see the instructions in the manual that comes with the module. The slot cover can be removed, and the module can be installed with either a flatbladed or Torx T-10 screwdriver. Retain the slot cover for future use. Note Any of the supported switch modules can be installed in any of the slots. The modules can be hot swapped, installed when the switch is powered on, and normally will be immediately operational. But if you are replacing a module with a different type than what was previously installed in the slot, the switch must be rebooted after the module is installed. Make sure that the module is fully installed and that you screw in the retaining screws to secure the module in place. If you do not use one or more of the slots, make sure that the slot cover plate is still attached over the slot for safe operation and proper switch cooling. 5-15

252 Installation and service of HP ProCurve devices 4000m/8000m Redundant Power Supply 4000m/8000m Redundant Power Supply 16 A second, load-sharing redundant power supply (HP ProCurve Switch 4000m/8000m Power Supply, J4119A) can be installed in the back of the switch. To provide true redundancy, this second power supply should be connected to a different AC power source from the other supply. Then, if one AC power source fails, the switch will continue to run. Each supply provides enough power to operate a fully loaded switch, so even if one fails, the switch will continue to operate normally. Install the second power supply into power slot number 2 as shown in the slide. The slot cover can be removed with either a flat-bladed or Torx T-10 screwdriver. Retain the slot cover for future use. Caution The switch power supplies are hot-swappable; they can be installed while the switch is receiving power from the supply in the other slot. But, as indicated by the caution statement on the power supply, the supply must not be connected to AC power before being installed. 5-16

253 Advanced hardware replacement and software utilities Software tools: TFTPD32 Software tools: TFTPD32 Available at: Utility for transferring firmware and configuration files Can also be SNTP, SYSLOG, and DHCP server 19 Tftpd32 includes DHCP, TFTP, SNTP and Syslog servers, as well as a TFTP client. The TFTP client and server are fully compatible with TFTP option support (tsize, blocksize and timeout), which allows the maximum performance when transferring the data. Some extended features such as directory facility, security tuning, interface filtering, progress bars, and early acknowledgments enhance usefulness and throughput of the TFTP protocol for both client and server. The included DHCP server provides unlimited automatic or static IP address assignment. 5-17

254 Installation and service of HP ProCurve devices Software tools: Tera Term Software tools: Tera Term A terminal emulator that supports sessions over COM ports, Telnet, and SSH Available as freeware but not currently being maintained 20 Tera Term (Pro) is a free software terminal emulator (communication program) that supports: Serial port connections TCP/IP (Telnet) connections SSH connections VT100 emulation and selected VT200/300 emulation TEK4010 emulation File transfer protocols (Kermit, XMODEM, ZMODEM, B-PLUS, and Quick- VAN) Scripts using the Tera Term Language Japanese and Russian character sets 5-18

255 Advanced hardware replacement and software utilities SolarWinds Subnet Calculator SolarWinds Subnet Calculator 21 The Solarwinds.net Advanced Subnet Calculator is very complete in that it not only provides a comprehensive Subnet Calculator, but it also has the ability to perform CIDR (Classless Inter-Domain Routing). In addition, it performs full DNS resolution and even provides a list of addresses generated, which can be exported to Microsoft Excel and used as a working document. This tool is available at:

256 Installation and service of HP ProCurve devices Sam Spade network utility Sam Spade network utility 22 Sam Spade is a network-query tool that can help you diagnose and test networks all within one utility. Many server-finding tools, such as nslookup, whois, and traceroute, have been previously available, but only from a command line. Sam Spade lets you use these tools from a graphical interface, and information found with one tool can be queried using another. Its SMTP Verify tool helps you check on the validity of an address, which is good for finding out if mail is being sent from that address or forwarded from another address to cover a spammer s tracks. 5-20

257 Advanced hardware replacement and software utilities SnagIt screen capture utility SnagIt screen capture utility A compete screen capture and printing utility 23 SnagIt Screen Capture is a complete solution. SnagIt provides a complete, start-tofinish solution for capturing, editing, and sharing content from your Windows PC. Capture First choose the type of capture: images, text, video, print output, entire Web image collections. Next capture the area you want: windows, regions, object, menus, and more. Edit Edit and annotate your capture right within the Preview Window for fast, convenient changes. Change color, size, dpi, and many other aspects of the screen capture. Share Send your screen capture to a file, an , the Clipboard, the printer, and even the Web. SnagIt supports GIF, JPG, TIF, BMP, EPS, PSD, PNG, ICO, CUR, and more. 5-21