HP ProCurve 10-GbE al Manual Download Page 15

Page: 15 / 126

Intelligent Edge Software
Features

Manual

Management

and

Configuration

Advanced

Traffic

Management

Multicast and

Routing

Access

Security

Guide

RMON 1,2,3,9

Routing

Routing - IP Static

Secure Copy

sFlow

SFTP

SNMPv3

Software Downloads (SCP/SFTP, TFPT, Xmodem)

Source-Port Filters

Spanning Tree (STP, RSTP, MSTP)

SSHv2 (Secure Shell) Encryption

SSL (Secure Socket Layer)

Stack Management (3500yl/6200yl switches only)

Syslog

System Information

Authentication

Telnet Access

TFTP

Time Protocols (TimeP, SNTP)

Traffic Mirroring

Traffic/Security Filters

Troubleshooting

Uni-Directional Link Detection (UDLD)

UDP Forwarder

USB Device Support

VLANs

xiii

Summary of Contents for ProCurve 10-GbE al

Page 1: ...Multicast and Routing Guide ProCurve Switches W 14 01 2910al www procurve com ...

Page 2: ......

Page 3: ...HP ProCurve 2910al Switch September 2009 W 14 03 Multicast and Routing Guide ...

Page 4: ...PANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE Hewlett Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing performance or use of this material The only warranties for HP products and services ar...

Page 5: ...1 2 Protocol Acronyms 1 2 Command Syntax and Displayed Information 1 2 Command Syntax Statements 1 2 Command Prompts 1 3 Screen Simulations 1 3 Keys 1 4 Sources for More Information 1 4 Getting Documentation From the Web 1 6 Online Help 1 6 Menu Interface 1 6 Command Line Interface 1 7 Web Browser Interface 1 7 Need Only a Quick Start 1 8 IP Addressing 1 8 To Set Up and Install the Switch in Your ...

Page 6: ...ing 2 13 Automatic Fast Leave IGMP 2 14 Forced Fast Leave IGMP 2 17 Configuring Delayed Group Flush 2 18 IGMP Proxy Forwarding 2 18 How IGMP Proxy Forwarding Works 2 19 CLI Commands for IGMP Proxy Configuration 2 21 VLAN Context Command 2 22 IGMP Proxy Show Command 2 23 Operating Notes for IGMP Proxy Forwarding 2 24 Using the Switch as Querier 2 26 Excluding Well Known or Reserved Multicast Addres...

Page 7: ...18 Enabling Forwarding of Directed Broadcasts 3 18 Configuring ICMP 3 20 Disabling ICMP Messages 3 20 Disabling Replies to Broadcast Ping Requests 3 20 Disabling ICMP Destination Unreachable Messages 3 21 Disabling ICMP Redirects 3 22 Configuring Static IP Routes 3 22 Static Route Types 3 22 Other Sources of Routes in the Routing Table 3 23 Static IP Route Parameters 3 23 Static Route States Follo...

Page 8: ...on 3 39 Displaying RIP Redistribution Filter restrict Information 3 39 Configuring IRDP 3 40 Enabling IRDP Globally 3 41 Enabling IRDP on an Individual VLAN Interface 3 41 Displaying IRDP Information 3 43 Configuring DHCP Relay 3 43 Overview 3 43 DHCP Packet Forwarding 3 44 Unicast Forwarding 3 44 Broadcast Forwarding 3 44 Prerequisites for DHCP Relay Operation 3 44 Enabling DHCP Relay 3 45 Config...

Page 9: ...e of Option 82 Configuration 3 60 Operating Notes 3 61 UDP Broadcast Forwarding 3 63 Overview 3 63 Subnet Masking for UDP Forwarding Addresses 3 64 Configuring and Enabling UDP Broadcast Forwarding 3 65 Globally Enabling UDP Broadcast Forwarding 3 65 Configuring UDP Broadcast Forwarding on Individual VLANs 3 65 Displaying the Current IP Forward Protocol Configuration 3 67 Operating Notes for UDP B...

Page 10: ...viii ...

Page 11: ...cations The latest version of each of the publications listed below is available in PDF format on the ProCurve Web site as described in the Note at the top of this page Installation and Getting Started Guide Explains how to prepare for and perform the physical installation and connect the switch to your network Management and Configuration Guide Describes how to configure manage and monitor basic ...

Page 12: ...er to the IPv6 Configuration Guide Intelligent Edge Software Features Manual Management and Configuration Advanced Traffic Management Multicast and Routing Access Security Guide 802 1Q VLAN Tagging X 802 1X Port Based Priority X 802 1X Multiple Authenticated Clients Per Port X Access Control Lists ACLs X AAA Authentication X Authorized IP Managers X Authorized Manager List Web Telnet TFTP X Auto M...

Page 13: ...ion Dynamic Configuration Arbiter Eavesdrop Protection Event Log X X X X Factory Default Settings Flow Control 802 3x File Management File Transfers X X X X Friendly Port Names Guaranteed Minimum Bandwidth GMB GVRP Identity Driven Management IDM X X X X IGMP Interface Access Telnet Console Serial Web IP Addressing IP Routing X X X X Jumbo Packets LACP Link LLDP X X X X LLDP MED Loop Protection MAC...

Page 14: ...uration Files Network Management Applications SNMP OpenView Device Management X X X X X X X X Passwords and Password Clear Protection ProCurve Manager PCM Ping Port Configuration X X X X Port Monitoring Port Security Port Status Port Trunking LACP X X X X Port Based Access Control 802 1X Power over Ethernet PoE Protocol Filters Protocol VLANS X X X X Quality of Service QoS RADIUS Authentication an...

Page 15: ...oads SCP SFTP TFPT Xmodem Source Port Filters Spanning Tree STP RSTP MSTP SSHv2 Secure Shell Encryption X X X X SSL Secure Socket Layer Stack Management 3500yl 6200yl switches only Syslog System Information X X X X TACACS Authentication Telnet Access TFTP Time Protocols TimeP SNTP X X X X Traffic Mirroring Traffic Security Filters Troubleshooting Uni Directional Link Detection UDLD X X X X UDP For...

Page 16: ...ftware Features Manual Management and Configuration Advanced Traffic Management Multicast and Routing Access Security Guide Voice VLAN Web Authentication RADIUS Support Web based Authentication Web UI Xmodem X X X X X xiv ...

Page 17: ...nfiguration and Operation Examples 1 3 Keys 1 3 Sources for More Information 1 4 Getting Documentation From the Web 1 6 Online Help 1 6 Menu Interface 1 6 Command Line Interface 1 7 Web Browser Interface 1 7 Need Only a Quick Start 1 8 IP Addressing 1 8 To Set Up and Install the Switch in Your Network 1 8 Physical Installation 1 8 1 1 ...

Page 18: ...ite www procurve com Conventions Configuration and Operation Examples Unless otherwise noted examples using a particular switch model apply to all switch models covered by this guide Protocol Acronyms IP Refers to the IPv4 protocol unless otherwise noted IPv6 Refers to the IPv6 protocol Command Syntax and Displayed Information Command Syntax Statements Syntax ip default gateway ip addr routing Syn...

Page 19: ...owing example ProCurve 2910al To simplify recognition this guide uses ProCurve to represent command prompts for all switch models For example ProCurve You can use the hostname command to change the text in the CLI prompt Screen Simulations Displayed Text Figures containing simulated screen text and command output look like this ProCurve show version Image stamp Boot Image sw code build info Novemb...

Page 20: ...the ProCurve Networking web site and provide information on new software updates new features and how to configure and use them software management including downloading software to the switch software fixes addressed in current and previous releases Product Notes and Software Update Information The printed Read Me First shipped with your switch provides software update information product notes a...

Page 21: ...Lists ACLs Multicast and Routing Guide Use this guide for information on topics such as IGMP IP routing Access Security Guide Use this guide for information on topics such as Local username and password security Web Based and MAC based authentication RADIUS and TACACS authentication SSH Secure Shell and SSL Secure Socket Layer operation 802 1X access control Port security operation with MAC based ...

Page 22: ... Care 3 Click on Manuals 4 Click on the product for which you want to view or download a manual If you need further information on ProCurve switch technology visit the ProCurve Networking web site at www procurve com Online Help Menu Interface If you need information on specific parameters in the menu interface refer to the online help provided in the interface For example Online Help for Menu Fig...

Page 23: ...face hereafter referred to as the web browser interface use the online Help You can access the Help by clicking on the Help text on top right side of any of the web browser interface screens Figure 1 4 Help for Web Browser Interface Not e To access the online Help for the ProCurve web browser interface you need either ProCurve Manager version 1 5 or greater installed on your network or an active c...

Page 24: ...p screen see the Installation and Getting Started Guide you received with the switch To Set Up and Install the Switch in Your Network Physical Installation Use the ProCurve Installation and Getting Started Guide for the following Notes cautions and warnings related to installing and using the switch and its related modules Instructions for physically installing the switch in your network Quickly a...

Page 25: ...g IGMP 2 7 How IGMP Operates 2 12 Operation With or Without IP Addressing 2 13 Automatic Fast Leave IGMP 2 14 Forced Fast Leave IGMP 2 17 Configuring Delayed Group Flush 2 18 IGMP Proxy Forwarding 2 18 How IGMP Proxy Forwarding Works 2 19 CLI Commands for IGMP Proxy Configuration 2 21 VLAN Context Command 2 22 IGMP Proxy Show Command 2 23 Operating Notes for IGMP Proxy Forwarding 2 24 Using the Sw...

Page 26: ...information on how to use the switch s built in interfaces refer to these chapters in the Management and Configuration Guide for your switch Chapter 3 Using the Menu Interface Chapter 4 Using the Command Line Interface CLI Chapter 5 Using the ProCurve Web Browser Interface Chapter 6 Switch Memory and Configuration Not e The use of static multicast filters is described in the chapter titled Traffic...

Page 27: ...orks where IP multi cast traffic is a factor Enabling IGMP allows the ports to detect IGMP queries and report packets and manage IP multicast traffic through the switch IGMP is useful in multimedia applications such as LAN TV desktop confer encing and collaborative computing where there is multipoint communica tion that is communication from one to many hosts or communication originating from many...

Page 28: ... connected to devices IGMP clients that belong to specific multicast groups and triggers updates of this information A querier uses data received from the queries to determine whether to forward or block multicast traffic on specific ports When the switch has an IP address on a given VLAN it automatically operates as a Querier for that VLAN if it does not detect a multicast router or another switc...

Page 29: ...to Blocked Forward You can use the console to configure individual ports to any of the following states Auto the default Causes the switch to interpret IGMP packets and to filter IP multicast traffic based on the IGMP packet information for ports belonging to a multicast group This means that IGMP traffic will be forwarded on a specific port only if an IGMP host or multicast router is connected to...

Page 30: ...the packets entered the switch For more on this topic see Excluding Well Known or Reserved Multicast Addresses from IP Multicast Filtering on page 2 27 For more information refer to How IGMP Operates on page 2 12 Number of IP Multicast Addresses Allowed The total of IGMP filters addresses and static multicast filters together is 2 047 if data driven or 2 048 otherwise depending on the current max ...

Page 31: ...ocol IGMP Status in appendix B of the ManagementandConfigurationGuideforyour switch Viewing the Current IGMP Configuration This commandlists theIGMP configuration for all VLANs configured on the switch or for a specific VLAN Syntax show ip igmp config Displays IGMP configuration for all VLANs on the switch show ip igmp vlan vid config Displays IGMP configuration for a specific VLAN on the switch i...

Page 32: ...Yes Yes 33 VLAN 3 No No No You could use the CLI to display this data as follows Figure 2 1 Example Listing of IGMP Configuration for All VLANs in the Switch The following version of the show ip igmp command includes the VLAN ID vid designation and combines the above data with the IGMP per port configuration IGMP Configuration for the Selected VLAN IGMP Configuration On the Individual Ports in the...

Page 33: ...nable and disable IGMP on the default VLAN VID 1 ProCurve config vlan 1 ip igmp Enables IGMP on VLAN 1 ProCurve vlan 1 ip igmp Same as above ProCurve config no vlan 1 ip igmp Disables IGMP on vlan 1 Not e If you disable IGMP on a VLAN and then later re enable IGMP on that VLAN the switch restoresthe last saved IGMP configurationfor thatVLAN For more on how switch memory operates refer to the chapt...

Page 34: ...s for VLAN 1 on the 100 1000T ports on a module in slot 1 Ports A1 A2 auto Filter multicast traffic Forward IGMP traffic to hosts on these ports that belong to the multicast group for which the traffic is intended Also forward any multicast traffic through any of these ports that is connected to a multicast router Ports A3 A4 forward Forward all multicast traffic through this port Ports A5 A6 bloc...

Page 35: ...on VLAN 1 ProCurve vlan 1 ip igmp high priority forward Same as above command but in the VLAN 1 context level ProCurve vlan 1 no ip igmp high priority forward Returns IGMP traffic to normal priority ProCurve show ip igmp config Show command to display results of above high priority commands Configuring the Querier Function Syntax no vlan vid ip igmp querier This command disables or re enables the ...

Page 36: ... you can do so through the CLI using the IGMP configuration MIB See Configuring the Querier Function on page 2 11 Report Join A message sent by a host to the querier to indicate that the host wants to be or is a member of a given group indicated in the report message Leave Group A message sent by a host to the querier to indicate that the host has ceased to be a member of a specific multicast grou...

Page 37: ...the section titled Internet Group Management Protocol IGMP Status in appendix B Monitoring and Analyzing Switch Operation of the Management and Configuration Guide for you switch Operation With or Without IP Addressing You can configure IGMP on VLANs that do not have IP addressing The benefit of IGMP without IP addressing is a reduction in the number of IP addresses you have to use and configure T...

Page 38: ... Automatic Fast Leave IGMP Fast Leave IGMP Depending on the switch model Fast Leave is enabled or disabled in the default configuration Switch Model Data IGMP Fast Default IGMP Behavior or Series Driven Leave Setting IGMP Included Switch 8212zl Yes Always Drops unjoined mulitcast traffic except for Switch 6400cl Enabled always fowarded traffic toward the Querier or Switch 6200yl multicast routers ...

Page 39: ... switches via an SNMP set of this object hpSwitchIgmpPortForceLeaveState vid port number However this is not recommended as this will increase the amount of multi cast flooding during the period between the client s IGMP Leave and the Querier s processing of that Leave For more information on this topic refer to Forced Fast Leave IGMP on page page 2 17 Automatic Fast Leave Operation If a switch po...

Page 40: ...er it does not wait for the actual Querier to verify that there are no other group members on port A3 If the switch itself is the Querier it does not query port A3 for the presence of other group members Note that Fast Leave operation does not distinguish between end nodes on the same port that belong to different VLANs Thus for example even if all of the devices on port A6 in figure 2 3 belong to...

Page 41: ...ving multiple end nodes receives a Leave Group request from one end node for a given multicast group X Forced Fast Leave activates and waits a small amount of time to receive a join request from any other group X member on that port If the port does not receive a join request for that group within the forced leave interval the switch then blocks any further group X traffic to the port Configuring ...

Page 42: ... Not e For more information about PIM DM and PIM SM see the chapters PIM DM Dense Mode and PIM SM Sparse Mode in this guide WhenanetworkhasaborderrouterconnectingaPIM SMdomaintoaPIM DM domain the routers that are completely within the PIM DM domain have no way to discover multicast flows in the PIM SM domain When an IGMP join occurs on a router entirely within the PIM DM domain for a flow that ori...

Page 43: ...forward joins towards Border Router 1 Routing Switch 1 is also configured to forward joins from VLAN 1 toward Border Router 2 as is VLAN 4 on Routing Switch 3 2 VLAN 2 on Routing Switch 2 is configured to forward joins toward Border Router 1 3 When the host connected in VLAN 1 issues an IGMP join for multicast address 235 1 1 1 the join is proxied by Routing Switch 1 onto VLAN 2 and onto VLAN 4 Th...

Page 44: ...onnected to Border Router 1 5 Border Router 1 uses PIM SM to find and connect to the multicast traffic for the requested traffic The traffic is flooded into the PIM DM network where it is routed to the original joining host 6 Additionally the join was proxied from Routing Switch 3 to Border Router 2 At first both border routers will flood the traffic into the PIM DM domain However PIM DM only forw...

Page 45: ...equired for the no form of the command Note The current routing FIB determines the best path towards the border router and therefore the VLAN that a proxy is sent out on low bound ip address all The low boundary inclusive of the multicast address range to associate with this domain for example 234 0 0 1 If all is selected the multicast addresses in the range of 224 0 1 0 239 255 255 255 will be in...

Page 46: ...ses that are currently joined on the downstream interface Syntax no igmp proxy domain name Tells the VLAN which IGMP proxy domains to use with joins on the VLAN The no version of the command with no domain name specified removes all domains associated with this VLAN Note Multiple different domains may be configured in the same VLAN context where the VLAN is considered the downstream interface The ...

Page 47: ...VID Multicast Domain 234 43 209 12 192 168 1 1 1 George 235 22 22 12 15 43 209 1 1 SAM 226 44 3 3 192 168 1 1 2 George Figure 2 7 Example Showing Active IGMP Proxy Entries ProCurve config show igmp proxy domains Total number of multicast domains 5 Multicast Domain Multicast Range Border Address Active entries George 225 1 1 1 234 43 209 12 192 168 1 1 2 SAM 235 0 0 0 239 1 1 1 15 43 209 1 1 Jane 2...

Page 48: ...e same or different in each configured domain Duplicate IGMP joins are automatically prevented or leaves that would remove a flow currently joined by multiple hosts Range overlap allows for redundant connectivity and the ability for mul ticasts to arrive from different border routers based on the shortest path back to the source of the traffic The configured domain names must be associated with on...

Page 49: ...rom a host For example a join is issued from the host in VLAN 2 and routing switch 2 will proxy the join onto VLAN 1 Routing switch 3 will then proxy the join back onto VLAN 2 and increment its internal count of the number of joins on VLAN 2 Even after the host on VLAN 2 issues a leave the proxy join will continue to remain and refresh itself each time a query occurs on VLAN 2 This type of loop co...

Page 50: ...le on the same VLAN If the switch becomes the Querier for a particular VLAN for example the DEFAULT_VLAN then subsequently detects queries transmitted from another device on the same VLAN the switch ceases to operate as the Querier for that VLAN If this occurs the switch Event Log lists a pair of messages similar to these I 01 15 01 09 01 13 igmp DEFAULT_VLAN Other Querier detected I 01 15 01 09 0...

Page 51: ...LAN on which they were received except the port on which the packets entered the VLAN The following table lists the 32 well known address groups 8192 total addresses that IGMP does not filter on Table 2 2 IP Multicast Address Groups Excluded from IGMP Filtering Groups of Consecutive 224 0 0 X to 239 0 0 X Addresses in the Range of Groups of Consecutive Addresses in 224 128 0 X to 239 128 0 X the R...

Page 52: ...Where a switch has a static Traffic Security filter configured with a Multicast filter type and a Multicast Address in this range the switch will use the static filter unless IGMP learns of a multicast group destination in this range In this case IGMP dynamically takes over the filtering function for the multicast destination address es for as long as the IGMP group is active If the IGMP group sub...

Page 53: ...outing Switches 3 13 Configuring IP Addresses 3 13 Changing the Router ID 3 13 Configuring ARP Parameters 3 14 How ARP Works 3 14 Enabling Proxy ARP 3 16 Enabling Local Proxy ARP 3 17 CLI Commands 3 17 Configuring Forwarding Parameters 3 18 Changing the TTL Threshold 3 18 Enabling Forwarding of Directed Broadcasts 3 18 Configuring ICMP 3 20 Disabling ICMP Messages 3 20 Disabling Replies to Broadca...

Page 54: ...tes Learned on a VLAN Interface 3 30 Configuring RIP Redistribution 3 31 Define RIP Redistribution Filters 3 31 Modify Default Metric for Redistribution 3 32 Enable RIP Route Redistribution 3 32 Changing the Route Loop Prevention Method 3 33 Displaying RIP Information 3 33 Displaying General RIP Information 3 34 Displaying RIP Interface Information 3 36 Displaying RIP Peer Information 3 37 Display...

Page 55: ... 3 54 Configuration Options for Managing DHCP Client Request Packets 3 54 Multiple Option 82 Relay Agents in a Client Request Path 3 55 Validation of Server Response Packets 3 56 Multinetted VLANs 3 57 Configuring Option 82 3 58 Example of Option 82 Configuration 3 60 Operating Notes 3 61 UDP Broadcast Forwarding 3 63 Overview 3 63 Subnet Masking for UDP Forwarding Addresses 3 64 Configuring and E...

Page 56: ...gment Throughout this chapter the switches covered in this guide are referred to as routing switches When IP routing is enabled on your switch it behaves just like any other IP router Basic IP routing configuration consists of adding IP addresses enabling IP routing and enabling a route exchange protocol such as Routing Information Protocol RIP For configuring the IP addresses refer to the chapter...

Page 57: ...butyoucannotconfigure192 168 1 1 24and192 168 1 2 24onthesame routing switch You can configure multiple IP addresses on the same VLAN ThenumberofIPaddressesyoucanconfigureonanindividualVLANinterface is 32 You can use any of the IP addresses you configure on the routing switch for Telnet Web management or SNMP access as well as for routing Not e All ProCurve devices support configuration and displa...

Page 58: ...est or ARP reply from the device The software can learn an entry when the switch or routing switch receives an ARP request from another IP forwarding device or an ARP reply Here is an example of a dynamic entry IP Address MAC Address Type Port 1 207 95 6 102 0800 5afc ea21 Dynamic 6 Each entry contains the destination device s IP address and MAC address To configure other ARP parameters see Config...

Page 59: ...24 IP Forwarding Cache The IP forwarding cache provides a fast path mechanism for forwarding IP packets The cache contains entries for IP destinations When an ProCurve routing switch has completed processing and addressing for a packet and is ready to forward the packet the device checks the IP forwarding cache for an entry to the packet s destination If the cache contains an entry with the destin...

Page 60: ...hanging route information RIP does not use the router ID The lowest numbered IP address configured on the lowest numbered routing interface 3 13 Address Resolution Protocol ARP A standard IP mechanism that routers use to learn the Media Access Control MAC address of a device on the network The router sends the IP addressofadeviceintheARPrequestand receives the device s MAC address in an ARP reply ...

Page 61: ...rotocol that a router can use to advertise the IP addresses of its router interfaces to directly attached hosts You can enable or disable the protocol at the Global CLI Config level You also can enable or disable IRDP and configure the following protocol parameters on an individual VLAN interface basis at the VLAN Interface CLI Config level Forwarding method broadcast or multicast Hold time Maximu...

Page 62: ...splays with the show commands and in the menu display Menu Switch Configuration IP Config Default 20 minutes ProCurve config ip arp age 1000 Figure 3 1 Example of Setting the ARP Age Timeout to 1000 Minutes To view the value of ARP Age timer enter the show ip command as shown in Figure 3 2 ProCurve config show ip Internet IP Service IP Routing Disabled Default Gateway 15 255 120 1 Default TTL 64 A...

Page 63: ...24 C1 C24 D1 D24 ip address 15 255 120 85 255 255 248 0 exit gvrp spanning tree Figure 3 3 Example Showing ip arp age Value in the Running Config File You can set or display the arp age value using the menu interface Menu Switch Configuration IP Config ProCurve 12 June 2007 14 45 31 TELNET MANAGER MODE Switch Configuration Internet IP Service IP Routing Disabled Default Gateway 15 255 120 1 Defaul...

Page 64: ... the interface This parameter applies only to RIP routes 1 one 3 29 ICMP Router Discovery Protocol IRDP Locally overrides the global IRDP settings See table 3 1 on page 3 8 for global IRDP information Disabled 3 41 IP helper address The IP address of a UDP application server such as a BootP or DHCP server or a directed broadcast address IP helper addresses allow the routing switch to forward reque...

Page 65: ...configuredondifferentVLAN interfaces Asa result a routingswitch s identity to other devices varies depending on the interface to which the other device is attached Some routing protocols identify a routing switch by just one of the IP addresses configured on the routing switch regardless of the interfaces that connect the routing switches This IP address is the router ID Not e Routing Information ...

Page 66: ...ommand such as the following ProCurve config ip router id 209 157 22 26 Syntax Syntax ip router id ip addr The ip addr can be any valid unique IP address Not e You can specify an IP address used for an interface on the ProCurve routing switch but do not specify an IP address in use by another device Configuring ARP Parameters Address Resolution Protocol ARP is a standard IP protocol that enables a...

Page 67: ...n the ARP cache not the static ARP table for an entry that lists the MAC address for the IP address The ARP cache maps IP addresses to MAC addresses The cache also lists the port attached to the device and if the entry is dynamic the age of the entry A dynamic ARP entry enters the cache when the routing switch receives an ARP reply or receives an ARP request which contains the sender s IP address ...

Page 68: ...ows a routing switch to answer ARP requests from devices on one network on behalf of devices in another network Since ARP requests are MAC layer broadcasts they reach only the devices that are directly connected to the sender of the ARP request Thus ARP requests do not cross routers For example if Proxy ARP is enabled on a routing switch connected to two subnets 10 10 10 0 24 and 20 20 20 0 24 the...

Page 69: ...e disabled on interfaces on which local proxy ARP is enabled CLI Commands To enable local proxy ARP you must first enter vlan context for example ProCurve config vlan 1 Then enter the command to enable local proxy ARP ProCurve vlan 1 ip local proxy arp Syntax no ip local proxy arp Enables the local proxy ARP option You must be in VLAN context to execute this command When enabled on a VLAN the swit...

Page 70: ...o Live TTL threshold Forwarding of directed broadcasts All these parameters are global and thus affect all IP interfaces configured on the routing switch To configure these parameters use the procedures in the following sections Changing the TTL Threshold The configuration of this parameter is covered in the chapter titled Config uring IP Addressing in the Management and Configuration Guide for yo...

Page 71: ... for specific broadcast types To enable forwarding of IP directed broadcasts enter the following CLI command ProCurve config ip directed broadcast Syntax no ip directed broadcast ProCurve software makes the forwarding decision based on the routing switch s knowledge of the destination network prefix Routers cannot deter mine that a message is unicast or directed broadcast apart from the destina ti...

Page 72: ...annot deliver to its destination the routing switch discards the packet and sends a message back to the device that sent the packet to the routing switch The message informs the device that the destination cannot be reached by the routing switch Address Mask replies You can enable or disable ICMP address mask replies Disabling Replies to Broadcast Ping Requests By default ProCurve devices are enab...

Page 73: ...fied in the destination IP address of the packet Port The destination host does not have the destination TCP or UDP port specified in the packet In this case the host sends the ICMP Port Unreachable message to the ProCurve device which in turn sends the message to the host that sent the packet Protocol The TCP or UDP protocol on the destination host is not running This message is different from th...

Page 74: ...rk address or host a corresponding network mask and the IP address of the next hop IP address Null discard the Null route consists of the destination network address or host a corresponding network mask and either the reject or blackhole keyword Typically the null route is configured as a backup route for discarding traffic if the primary route is unavailable By default when IP routing is enabled ...

Page 75: ...he destination are not available See Configuring the Default Route on page 3 26 Static IP Route Parameters When you configure a static IP route you must specify the following parameters The IP address and network mask for the route s destination network or host The route s path which can be one of the following the IP address of a next hop router a null interface The routing switch drops traffic f...

Page 76: ...e s destination address and the next hop router s IP address or routing switch interface through which the routing switch can reach the destination The route is added to the routing switch s IP route table In the above example routing switch A knows that 207 95 6 157 is reachable through port A2 and assumes that local interfaces within that subnet are on the same port Routing switch A deduces that...

Page 77: ...xample you can enter either 10 0 0 0 24 or 10 0 0 0 255 255 255 0 for a route destination of 10 0 0 0 255 255 255 0 next hop ip This IP address is the gateway for reaching the addr destination The next hop IP address is not required to be directly reachable on a local subnet If the next hop IP address is not directly reachable the route will be added to the routing table as soon as a route to this...

Page 78: ...t hop router IP address Configures a null route to drop traffic for the device at 10 50 10 177 and return an ICMP notification to the sender Configures a null route to drop traffic for the 10 50 10 0 network without any ICMP notification to the sender Figure 3 6 Example of Configuring Static Routes Configuring the Default Route You can also assign the default route and enter it in the routing tabl...

Page 79: ...t travel to reach the destination If the ProCurve routing switch receives a RIP update from another router that contains a path with fewer hops than thepath storedintheProCurve routing switch s route table the routing switch replaces the older route with the newer one The routing switch then includes the new path in the updates it sends to other RIP routers including ProCurve routing switches RIP ...

Page 80: ...ts the global RIP parameters and their default values Table 3 3 RIP Global Parameters Parameter Description Default RIP state Routing Information Protocol V2 only Disabled auto summary Enable Disable advertisement of summarized routes Enabled metric Default metric for imported routes 1 redistribution RIP can redistribute static and connected routes RIP redistributes connected routes by default whe...

Page 81: ...e route Poison reverse the routing switch assigns a cost of16 infinite or unreachable toaroutebefore advertising it on the same interface as the one on which the routing switch learned the route receive Define the RIP version for incoming packets V2 only send Define the RIP version for outgoing packets V2 only Configuring RIP Parameters Use the following procedures to configure RIP parameters on a...

Page 82: ... Interface When you enable RIP on a VLAN interface RIPv2 only is enabled by default You can change the RIP type to one of the following on an individual VLAN interface basis Version 1 only Version 2 only the default Version 1 or version 2 To change the RIP type supported on a VLAN interface enter commands such as the following ProCurve config vlan 1 ProCurve vlan 1 ip rip v1 only ProCurve vlan 1 e...

Page 83: ...To configure redistribution perform the following tasks 1 Configure redistribution filters to permit or deny redistribution for a route based on the destination network address or interface optional 2 Enable redistribution Define RIP Redistribution Filters Route redistribution imports and translates different protocol routes into a specified protocol type On the switches covered in this guide redi...

Page 84: ...etric for Redistribution The default metric is a global parameter that specifies the cost applied to all RIP routes by default The default value is 1 You can assign a cost from 1 15 Example To assign a default metric of 4 to all routes imported into RIP enter the following commands ProCurve config router rip ProCurve rip default metric 4 Syntax default metric value The value can be from 1 15 The d...

Page 85: ... on an individual VLAN interface basis Not e These methods are in addition to RIP s maximum valid route cost of 15 Poison reverse is enabled by default Disabling poison reverse causes the routing switch to revert to Split horizon Poison reverse is an extension of Split horizon To disable Poison reverse on an interface and thereby enable Split horizon enter the following ProCurve config vlan 1 ProC...

Page 86: ...rmation Listing The display is a summary of Global RIP information information about interfaces with RIP enabled and information about RIP peers The following fields are displayed RIP protocol Status of the RIP protocol on the router RIP must be enabled here and on the VLAN interface for RIP to be active The default is disabled Auto summary Status of Auto summary for all interfaces running RIP If ...

Page 87: ... running rip Status Status of RIP on the VLAN interface Send mode The format of the RIP updates RIP 1 RIP 2 or RIP 2 version 1 compatible Recv mode The switch can process RIP 1 RIP 2 or RIP 2 version 1 compatible update messages Metric The path cost a measurement used to determine the best RIP route path 1 is the best 15 is the worse 16 is unreachable Auth RIP messages can be required to include a...

Page 88: ...erface Output See RIP Interface Information on the previous page for definitions of these fields You can also display the information for a single RIP VLAN interface by specifying the VLAN ID for the interface or specifying the IP address for the interface Displaying RIP interface information by VLAN ID For example to show the RIP interface information for VLAN 1000 use the showip ripinterface vla...

Page 89: ...r any reason Sent updates The number of RIP routing updates that have been sent on this interface Displaying RIP interface information by IP Address For example to show the RIP interface information for the interface with IP address 100 2 0 1 enter the show ip rip interface command as shown below Figure 3 10 Example of Show IP RIP Interface Output by IP Address The information shown in this displa...

Page 90: ...s that were not processed for any reason Last update timeticks How many seconds have passed since the routing switch received an update from this peer neighbor Displaying RIP information for a specific peer For example to show the RIP peer information for the peer with IP address 100 1 0 100 enter show ip rip peer 100 1 0 100 ProCurve show ip rip peer 100 0 1 100 RIP peer information for 100 0 1 1...

Page 91: ...y redistributes connected routes that are configured on interfaces that are running RIP and all routes that are learned via RIP The routerrip redistribute command described on page 3 31 configures the routing switch to cause RIP to advertise connected routes that are not running RIP or static routes The display shows whether RIP redistribution is enabled or disabled for connected or static routes ...

Page 92: ...bled on the ProCurve routing switch the routing switch responds to the Router Solicitation messages Some clients interpret this response to mean that the routing switch is the default gateway If another router is actually the default gateway for these clients leave IRDP disabled on the ProCurve routing switch IRDP uses the following parameters If you enable IRDP on individual VLAN interfaces you c...

Page 93: ... with the highest preference as the default gateway The preference can be a number from 4294967296 to 4294967295 The default is 0 Enabling IRDP Globally To enable IRDP globally enter the following command ProCurve config ip irdp This command enables IRDP on the IP interfaces on all ports Each port uses the default values for the IRDP parameters Enabling IRDP on an Individual VLAN Interface To enab...

Page 94: ... parameter specifies the maximum amount of time theroutingswitchwaitsbetweensendingRouterAdvertisements Youcan specify a value from 1 to the current value of the holdtime parameter The default is 600 seconds minadvertinterval This parameter specifies the minimum amount of time the routing switch can wait between sending Router Advertisements The default is three fourths 0 75 the value of the maxad...

Page 95: ...s with IP address and other configuration parameters without user inter vention The protocol is composed of three components DHCP client DHCP server DHCP relay agent The DHCP client sends broadcast request packets to the network the DHCP servers respond with broadcast packets that offer IP parameters such as an IP address for the client After the client chooses the IP parameters commu nication bet...

Page 96: ...the IP address of the DHCP server is a specific host address The DHCP relay agent sets the destination IP address of the packet to the IP address of the DHCP server and forwards the message Broadcast Forwarding The packets are forwarded using broadcast forwarding if the IP address of the DHCP server is a subnet address or IP broadcast address 255 255 255 255 TheDHCPrelayagentsetstheDHCPserverIPadd...

Page 97: ... the ip helper address command at the VLAN configuration level as in the following example ProCurve config vlan 1 ProCurve vlan 1 ip helper address ip addr To remove the DHCP server helper address enter the no form of the command ProCurve vlan 1 no ip helper address ip addr Operating Notes You can configure up to 4000 IP helper addresses on a routing switch The helper addresses are shared between ...

Page 98: ...re 3 16 Displaying Startup Configuration with DHCP Relay and Hop Count Increment Disabled Displaying DHCP Helper Addresses To display the list of currently configured IP Helper addresses for a specified VLAN on the switch enter the show ip helper address vlan command Syntax show ip helper address vlan vlan id Displays the IP helper addresses of DHCP servers configured for all static VLANS in the s...

Page 99: ...ent setting is displayed next to DHCP Request Hop Count Increment ProCurve show dhcp relay Status and Counters DHCP Relay Agent DHCP Relay Agent Enabled Yes DHCP Request Hop Count Increment Disabled Option 82 Handle Policy Replace Remote ID MAC Address Client Requests Server Responses Valid Dropped Valid Dropped 1425 2 1425 0 Figure 3 18 Example of show dhcp relay Command Showing Hop Count Increme...

Page 100: ...ling the routing switch to append an Option 82 field to such client requests This field includes two suboptions for identifying the routing switch by MAC address or IP address and the routing switch port the client is using to access the network A DHCP server with Option 82 capability can read the appended field and use this data as criteria for selecting the IP addressing it will return to the cl...

Page 101: ...ty for the IP addressing policies configured in the server Option 82 Server Support To apply DHCP Option 82 the routing switch must operate in conjunctionwith a server that supports Option 82 DHCP servers that do not support Option 82 typically ignore Option 82 fields Also the routing switch applies Option 82 functionality only to client request packets being routed to a DHCP server DHCP relay wit...

Page 102: ... replace existing Option 82 information or leave any existing information unchanged The policy also determines whether the routing switch will forward the client request toward a DHCP server or drop the request Fora DHCPserverresponse toan Option82clientrequest therouting switch can optionally perform a validation check to determine whether to forward or drop the response Each Option 82 relay agen...

Page 103: ...t toward the DHCP server identified by the IP Helper address configured on the VLAN in which the client packet was received Other upstream relay agents used to forward the packet may append their own Option 82 fields replace the Option 82 field s they find in the packet forward the packet without adding another field or drop the packet Intermediate next hop routing switches without Option 82 capab...

Page 104: ...configured to apply a different IP addressing policy to different areas of a network uses the values in these subfields to determine which DHCP policy to apply to a given client request Remote ID This configurable subfield identifies a policy area that comprises either the routing switch as a whole by using the routing switch MAC address or an individual VLAN configured on the routing switch by us...

Page 105: ...ect a DHCP policy to assign to clients connected to the port This number is the identity of the inbound port On ProCurve fixed port switches the port number used for the Circuit ID is always the same as the physical port number shown on the front of the switch For example suppose you wanted port 10 on a given relay agent to support nomorethanfiveDHCPclientssimultaneously youcouldconfiguretheserver...

Page 106: ...Option 82 field But if the incoming client request does not already haveanyOption82 fields the relay agent appends an Option 82field before forwarding the request Some applications for keep include The DHCP server does not support multipleOption 82 packets in a client request and there are multiple Option 82 relay agents in the path to the server The unusual case where DHCP clients in the network ...

Page 107: ...r hops between the client and the server you can use different configuration options on different relay agents to achieve the results you want This includes configuring the relay agents so that the client request arrives at the server with either one Option 82 field or multiple fields Using multiple Option 82 fields assumes that the server supports multiple fields and is configured to assign IP ad...

Page 108: ...ion 82 REPLACE Relay Agent A Relay Agent B Relay Agent C Like the first example above this configuration drops client requests with spurious Option 82 fields from clients on the edge relay agent However in this case only the Option 82 field from the last relay agent is retained for use by the DHCP server In this case the DHCP policy boundary is at relay agent C In the previous two examples the bou...

Page 109: ...orward server response packet to a downstream device The server response packet carries data indicating a given routingswitchistheprimaryrelay agent for the original client request but the associated Option 82 field in the response contains a Remote ID that did not originate with the relay agent append Drop the server response packet Forward server response packet to a downstream device replace or...

Page 110: ...date keep ip mac mgmt vlan append Configures the switch to append an Option 82 field to the client DHCP packet If the client packet has existing Option 82 field s assigned by another device the new field is appended to the existing field s The appended Option 82 field includes the switch Circuit ID inbound port number associated with the client DHCP packet and the switch Remote ID The default swit...

Page 111: ...abled the routing switch applies stricter rules to an incoming Option 82 server response to determine whether to forward or drop the response For more information refer to Validation of Server Response Packets on page 3 56 ip mac mgmt vlan This option specifies the remote ID suboption that the switch uses in Option 82 fields added or appended to DHCP client packets The type of remote ID defines DH...

Page 112: ...IP address of the Management VLAN Figure 3 25 DHCP Option 82 When Using the Management VLAN as the Remote ID Suboption Table 3 6 DHCP Operation for the Topology in Figure 3 25 Client Remote ID giaddr DHCP Server 10 38 10 1 10 39 10 1 A only If a DHCP client is in the Management VLAN then its DHCP requests can go only to a DHCP server that is also in the Management VLAN Routing to other VLANs is no...

Page 113: ...gent port will be routed to the same DHCP server s Note that when using 802 1X on a switch a port s VLAN membership may be changed by aRADIUSserverrespondingtoaclientauthentication request Inthiscase the DHCP server s accessible from the port may change if the VLAN assigned by the RADIUS server has different DHCP helper addresses than the VLAN used by unauthenticated clients Where multiple DHCP se...

Page 114: ... Unit size then the request is forwarded to the DHCP server without Option 82 data and an error message is logged in the switch s Event Log Because routing is not allowed between the Management VLAN and other VLANs a DHCP server must be available in the Management VLAN if clients in the Management VLAN require a DHCP server If the Management VLAN IP address configuration changes after mgmt vlan ha...

Page 115: ... device or a single subnet The switch ignores any entry that designates multiple subnets Not e The number of UDP broadcast forwarding entries supported is affected by the number of IP helper addresses configured to support DHCP Relay Refer to Operating Notes for UDP Broadcast Forwarding on page 3 68 A UDP forwarding entry includes the desired UDP port number and can be either an IP unicast address...

Page 116: ...in VLAN 1 must be on this VLAN Also the destination VLAN for UDP 1812 from clients on VLAN 1 Destination VLAN for UDP 1813 broadcasts from clients on VLAN 1 Not e If an IP server or subnet entry is invalid a switch will not try to forward UDP packets to the configured device or subnet address Subnet Masking for UDP Forwarding Addresses The subnet mask for a UDP forwarding address is the same as th...

Page 117: ... configured in VLANs on the switch Default Disabled Configuring UDP Broadcast Forwarding on Individual VLANs This command routes an inbound UDP broadcast packet received from a client on the VLAN to the unicast or broadcast address configured for the UDP port type Syntax no ip forward protocol udp ip address port number port name Used in a VLAN context to configure or remove a server or broadcast ...

Page 118: ...e specified broadcast address For more information on UDP port numbers refer to TCP UDP Port Number Ranges on page 3 68 port name Allows use of common names for certain well known UDP port numbers You can type in the specific name instead of having to recall the corresponding number dns Domain Name Service 53 ntp Network Time Protocol 123 netbios ns NetBIOS Name Service 137 netbios dgm NetBIOS Dat...

Page 119: ...h or on a specific VLAN Global Display Showing UDP Broadcast ForwardingStatus and Configured Forwarding Addresses for Inbound UDP Broadcast Traffic for All VLANs Configured on the routing switch Figure 3 26 Displaying Global IP Forward Protocol Status and Configuration Display Showing UDP Broadcast Forwarding Status and the Configured Forwarding Addresses for inbound UDP Broadcast Traffic on VLAN ...

Page 120: ...tocol Number Assignment Services P Under Directory of General Assigned Numbers heading Port Numbers Messages Related to UDP Broadcast Forwarding Message Meaning udp bcast forward IP Routing support must be enabled first Appears in the CLI if an attempt to enable UDP broadcast forwarding has been made without IP routing being enabled first Enable IP routing then enable UDP broadcast forwarding UDP ...

Page 121: ...3 29 enabling RIP globally 3 29 router loop prevention 3 33 router ID 3 13 static IP routes 3 22 3 24 D default route 3 26 DHCP hop count displaying 3 47 DHCP Relay broadcast forwarding 3 44 configuration 3 43 enabling 3 45 helper address 3 45 minimum requirements 3 44 Option 82 circuit ID 3 50 3 53 packet forwarding 3 44 See also Option 82 verifying configuration 3 45 directed broadcasts 3 18 doc...

Page 122: ...ng ARP cache table 3 6 changing ARP parameters 3 14 changing router ID 3 13 configuring static routes 3 22 default route 3 26 DHCP Relay configuration See DHCP relay directed broadcasts 3 18 forwarding cache 3 7 forwarding parameters 3 18 global parameters 3 8 helper address 3 45 helper address UDP 3 12 interface parameters 3 12 IP static routes administrative distance 3 25 blackhole 3 22 3 25 con...

Page 123: ...playing information 3 37 port auto IGMP 2 5 blocked IGMP 2 5 forwarding IGMP 2 5 state IGMP control 2 5 primary relay agent 3 50 priority IP multicast traffic 2 5 ProCurve switch documentation ix protocols IP route exchange 3 8 Proxy ARP enabling 3 16 proxy forwarding IGMP 2 19 Q query See IGMP quick start 1 8 R redistribution See OSPF and RIP relay agent 3 50 remote ID 3 50 RIP changing cost of R...

Page 124: ... agent 3 51 setup screen 1 8 static IP routes configuring 3 22 3 24 route types 3 22 See also IP routing subnet 2 13 T tables ARP cache 3 6 IP 3 5 IP route 3 6 U UDP broadcast forwarding 3 63 address types 3 63 application 3 63 configure 3 65 global enable 3 65 invalid entry 3 64 IP helper address effect 3 63 maximum entries 3 63 port number ranges 3 68 show command 3 67 subnet address 3 63 subnet...

Page 125: ......

Search results

Summary of Contents for ProCurve 10-GbE al

Reviews:

Related manuals for ProCurve 10-GbE al

Brands by name

Popular brands

HP ProCurve 10-GbE al, Manual

Search results

Summary of Contents for ProCurve 10-GbE al

Reviews:

Related manuals for ProCurve 10-GbE al

Brands by name

Popular brands