About the Configuration Guides for HP Unified

About the Configuration Guides for HP Unified Wired-W Products HP 830 Unified Wired-W PoE+ Switch Series HP 850 Unified Wired-W Appliance HP 870 Unified Wired-W Appliance HP 11900/10500/7500 20G Unified Wired-W Module Part number: 5998-4779 Software version: 3507P22 (HP 830 PoE+ Switch Series) 2607P22 (HP 850 Appliance) 2607P22 (HP 870 Appliance) 2507P22 (HP 11900/10500/7500 20G Module) Document version: 6W101-20140418

Legal and notice information Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

Contents About the configuration guides for HP products 1 Typical network scenarios 5 HP 11900/10500/7500 20G module network scenario 5 HP 830 series PoE+ switch/hp 870 appliance network scenario 5 HP 850 appliance network scenario 6 Feature matrixes 7 Support and other resources 12 Contacting HP 12 Subscription service 12 Related information 12 Documents 12 Websites 12 Conventions 13 Index 15 i

About the configuration guides for HP products The configuration guides for HP products describe the software features for the HP 830 series PoE+ switches, HP 850/870 appliances, and HP 11900/10500/7500 20G modules, and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply the software features to different network scenarios. Configuration guide Fundamentals Configuration Guide W Configuration Guide Content Describes how to access the command line interface (CLI), log in to and set up the modules, configure FTP and TFTP, upgrade the software, manage files and licenses, and use the basic management functions. This guide includes: CLI Login management FTP and TFTP File system management Configuration file management Software upgrade License management Device management Automatic configuration Describes how to configure W services, W security, IACTP tunnel and W roaming, W RRM, W QoS, W IDS, W mesh link, W high availability, advanced W, and W optimization. This guide includes: W interface W access W security IATCP tunnel and W roaming W RRM W IDS W QoS W mesh link Advanced W W high availability W IPS W optimization 1

Configuration guide Layer 2 Configuration Guide Layer 3 Configuration Guide IP Multicast Configuration Guide ACL and QoS Configuration Guide Content Covers Layer 2 technologies and features used on a switched network, such as Ethernet interface, loopback and null interfaces, V technology, MAC address table management, Ethernet link aggregation, Layer 2 forwarding, and PPPoE. This guide includes: Ethernet interface Loopback and null interfaces V MAC address table Ethernet link aggregation Layer 2 forwarding PPPoE server FPGA fast forwarding LLDP Describes IP addressing (including static and dynamic IPv4 and IPv6 address assignment), network performance optimization, ARP, and interoperation between IPv4 and IPv6. This guide includes: ARP IP addressing DHCP DHCPv6 DNS IPv6 DNS NAT Adjacency table Flow classification IPv6 basics IP performance optimization IP routing basics Static routing IPv6 static routing Covers IGMP snooping, MLD snooping, multicast V, and IPv6 multicast V. This guide includes: IGMP snooping MLD snooping Multicast V IPv6 multicast V Describes how to classify traffic with ACLs, and allocate network resources and manage congestions with QoS technologies to improve network performance and network use efficiency. You can use ACLs to help other function modules (such as QoS and IP routing) classify or filter traffic. This guide includes: ACL QoS 2

Configuration guide Security Configuration Guide High Availability Configuration Guide Content Covers security features. The major security features available on the device include: identity authentication (AAA, public Key, and PKI), access security (802.1X, MAC authentication, portal, and port security), secure management (SSH, user profile, and password control), SSL, and security protection (TCP attack protection and ARP attack protection). This guide includes: Security overview AAA 802.1X MAC authentication Portal Port security User profile Password control Public key PKI SSH SSL TCP attack protection ARP attack protection IPsec ALG Firewall Session management Web filtering User isolation Source IP address verification FIPS Protocol packet rate limit Describes high availability technologies and features for network fault detection and diagnosis. This guide includes: High availability overview VRRP Stateful failover Track 3

Configuration guide Network Management and Monitoring Configuration Guide OAA Configuration Guide HP 11900/10500/7500 20G Unified Wired-W Module Basic Configuration Guide Content Describes features that help you manage and monitor your network, for example, display system information, and use the ping and tracert commands to check and debug network connectivity. This guide includes: System maintenance and debugging NQA NTP IPC SNMP RMON Mirroring Information center Flow logging sflow Describes the open application architecture (OAA), how to log in to the HP open application platform (OAP) card connected to your device and reset the operating system of the OAP card. Describes the required configurations for an HP 11900/10500/7500 20G module to cooperate with an Ethernet switch. 4

Typical network scenarios HP 11900/10500/7500 20G module network scenario As shown in Figure 1, an HP 11900/10500/7500 20G module is installed on a Layer 2 or Layer 3 switch, which is connected to APs directly or over an IP network. Figure 1 HP 11900/10500/7500 20G module network scenario HP 830 series PoE+ switch/hp 870 appliance network scenario As shown in Figure 2, the HP 830 series PoE+ switch is connected to APs directly or over an IP network. 5

Figure 2 HP 830 series PoE+ switch network Scenario The HP 870 appliance and HP 830 series PoE+ switch have the same network scenarios. HP 850 appliance network scenario As shown in Figure 3, an HP 850 appliance is installed on a Layer 2 or Layer 3 switch, which is connected to APs directly or over an IP network. Figure 3 HP 850 appliance network scenario Scheme 1 AC Switch Server GE 1/0/1 IP network AP 1 AP 2 Client A Client B 6

Feature matrixes In this document, "Yes" means a feature or command is supported, and "No" means not supported. The HP 11900/10500/7500 20G module adopts OAA architecture and is installed on the slot as an OAP card. The module exchanges data, state and control information with the switch interface board through internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on the internal interfaces. The access and switching engine of an HP 830 series PoE+ switch or HP 870 appliance adopt the OAA architecture. The switching engine is integrated on the access as OAP software. You actually log in to the access r engine when you log in to the switch by default. HP recommends not configuring QoS rate limiting or 802.1X authentication on the internal aggregate interfaces (BAGG1) between the switching engine and the on an HP 830 switch. Inappropriate rate limiting or authentication settings on the internal aggregate interfaces can cause communication problems between the switching engine and the. On the HP 830 24-port switch, the switching engine's internal aggregate interface is formed by GigabitEthernet 1/0/29 and GigabitEthernet 1/0/30. On the HP 830 8-port switch, the switching engine's internal aggregate interface is formed by GigabitEthernet 1/0/11 and GigabitEthernet 1/0/12. On all HP 830 switches, the 's internal aggregate interface is formed by GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2. HP recommends not configuring QoS rate limiting or 802.1X authentication on the internal aggregate interfaces (BAGG1) between the switching engine and the on an HP 870 appliance. Inappropriate rate limiting or authentication settings on the internal aggregate interfaces can cause communication problems between the switching engine and the. On the HP 870 appliance, the switching engine's internal aggregate interface is formed by Ten-GigabitEthernet 1/0/29 through Ten-GigabitEthernet 1/0/32, and the r engine's internal aggregate interface is formed by Ten-GigabitEthernet 1/0/1 through Ten-GigabitEthernet 1/0/4. This document only describes the feature matrix for the access of an HP 830 series PoE+ switch or HP 870 appliance. For feature and configuration information about the switching engine of an HP 830 series PoE+ switch or HP 870 appliance, see related switching engine manuals. 7

Table 1 Feature matrix Configurati on guide Feature Function HP 11900/ 10500/ 7500 20G module HP 830 24-Port PoE+ switch access HP 830 8-Port PoE+ switch access HP 850 Unified Wired- W Applian ce HP 870 applianc e access Login managemen t AUX user interface Console user interface Yes. No. No. No. No. Yes. Yes. Yes. Yes. Yes. File system managemen t Storage media supported CF card. Flash. CF card. CF card. CF card. Fundamental s Configuratio n Guide License managemen t License function Supports 128 concurre nt APs by default, and can be extended to support 1024 APs. Supports 24 concurren t APs by default, and can be extended to support 60 APs. Supports 12 concurre nt APs by default, and can be extended to support 24 APs. Supports 64 concurre nt APs by default, and can be extended to support 512 APs. Supports 256 concurre nt APs by default, and can be extended to support 1536 APs. Device managemen t Configuring temperature alarm thresholds for boards Yes. No. No. Yes. Yes. Maximum number of SSIDs supported 512. 64. 64. 512. 512. W Configuratio n Guide W access Maximum number of service templates supported 1024. 64. 64. 512. 512. Maximum number of AP groups supported 1024. 60. 24. 512. 1536. 8

Configurati on guide Feature Function HP 11900/ 10500/ 7500 20G module HP 830 24-Port PoE+ switch access HP 830 8-Port PoE+ switch access HP 850 Unified Wired- W Applian ce HP 870 applianc e access W IDS Maximum number of dynamic blacklist entries 512. 256. 256. 512. 512. W high availability AC hot backup Yes. No. No. Yes. Yes. Ethernet interface configuratio n Single combo interface configuration Duplex mode No. No. No. Yes. No. Auto. Full duplex. Full duplex. Yes. Auto. Layer 2 Configuratio n Guide Ethernet link aggregation configuratio n Layer 2 static link aggregation Layer 2 dynamic link aggregation Yes. Yes. Yes. Yes. Yes. No. No. No. Yes. No. PPPoE server PPPoE server Yes. No. No. No. No. Layer 2 FPGA fast forwarding Layer 2 FPGA fast forwarding Yes. No. No. No. Yes. Layer 3 Configuratio n Guide Domain name resolution DDNS No. Yes. Yes. No. No. PPP users Yes. No. No. No. No. Security Configuratio n Guide AAA Assigning PPP service types for a local user Specifying a backup source address for RADIUS packets Yes. No. No. No. No. Yes. No. No. Yes. Yes. 9

Configurati on guide Feature Function HP 11900/ 10500/ 7500 20G module HP 830 24-Port PoE+ switch access HP 830 8-Port PoE+ switch access HP 850 Unified Wired- W Applian ce HP 870 applianc e access Specifying the authentication method for PPP users Yes. No. No. No. No. Specifying the authorization method for PPP users Yes. No. No. No. No. Specifying the accounting method for PPP users Yes. No. No. No. No. Specifying the device ID used in stateful failover mode Yes. No. No. Yes. Yes. Specifying the maximum number of portal servers 64. 32. 32. 64. 64. Portal Configuring stateful failover for portal authentication Yes. No. No. Yes. Yes. Port security Maximum number of PSK users 20480. 1024. 1024. 10240. 30720. IPsec stateful failover Yes. No. No. Yes. Yes. IPsec Setting the anti-replay information synchronizati on intervals in IPsec stateful failover mode Yes. No. No. Yes. Yes. 10

Configurati on guide Feature Function HP 11900/ 10500/ 7500 20G module HP 830 24-Port PoE+ switch access HP 830 8-Port PoE+ switch access HP 850 Unified Wired- W Applian ce HP 870 applianc e access High Availability Configuratio n Guide VRRP Creating a VRRP group and configuring virtual IP address The maximum number of VRRP groups on an interface is 255. No. No. The maximum number of VRRP groups on an interface is 255. The maximum number of VRRP groups on an interface is 255. Stateful failover Stateful failover Yes. No. No. Yes. Yes. Network Management and Monitoring Configuratio n Guide IPC IPC Yes. No. No. Yes. Yes. Information center Port mirroring Log file Yes. No. No. Yes. Yes. Port mirroring No. No. No. Yes. No. OAA Configuratio n Guide OAA OAP module configuration No. Yes. Yes. No. Yes. HP 11900/105 00/7500 20G Unified Wired-WLA N Module Basic Configuratio n Guide HP 11900/105 00/7500 20G LA N module basic configuratio n HP 11900/1050 0/7500 20G module basic configuration Yes. No. No. No. No. 11

Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.com/support Before contacting HP, collect the following information: Product model names and numbers Technical support registration number (if applicable) Product serial numbers Error messages Operating system type and revision level Detailed questions Subscription service HP recommends that you register your product at the Subscriber's Choice for Business website: http://www.hp.com/go/wwalerts After registering, you will receive email notification of product enhancements, new driver versions, firmware updates, and other product resources. Related information Documents Websites To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. For a complete list of acronyms and their definitions, see HP FlexNetwork Technology Acronyms. HP.com http://www.hp.com HP Networking http://www.hp.com/go/networking HP manuals http://www.hp.com/support/manuals HP download drivers and software http://www.hp.com/support/downloads HP software depot http://www.software.hp.com HP Education http://www.hp.com/learn 12

Conventions This section describes the conventions used in this documentation set. Command conventions Convention Boldface Italic Description Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. [ ] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk-marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk-marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. GUI conventions Convention Boldface Description Window names, button names, field names, and menu items are in bold text. For example, the New User window appears; click OK. > Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention WARNING CAUTION IMPORTANT NOTE TIP Description An alert that calls attention to important information that if not understood or followed can result in personal injury. An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information. An alert that contains additional or supplementary information. An alert that provides helpful information. 13

Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access r, a module, or the switching engine on a switch. Represents an access point. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. 14

Index C R C Contacting HP,12 Conventions,13 R Related information,12 15