HP 10Gb Ethernet BL-c Switch Command Reference Guide 2350 Mission College Blvd. Part number BMD00022 Suite 600 January 2008 Santa Clara, CA 95054 www.bladenetwork.net...
Contents Command line interface ... 8 Introduction ... 8 Additional references ... 8 Connecting to the switch ... 8 Establishing a console connection ... 9 Setting an IP address ... 9 Establishing a Telnet connection... 10 Establishing an SSH connection ... 10 Accessing the switch ...
Page 4
VLAN information ... 48 Fast Uplink Convergence status... 49 Layer 3 information ... 50 Route information ... 51 Show all IP Route information ... 51 ARP information ... 53 OSPF information... 54 Routing Information Protocol information ... 58 IP information ... 59 IGMP multicast group information ...
Page 5
TCP statistics... 101 UDP statistics ... 101 CPU statistics ... 102 Access Control List (ACL) statistics menu ... 102 ACL statistics ... 102 SNMP statistics ... 103 NTP statistics ... 105 Uplink Failure Detection statistics... 106 Statistics dump... 107 Configuration Menu ... 108 Introduction ...
Page 6
Updating the switch software image ... 211 Downloading new software to the switch ... 211 Selecting a software image to run ... 213 Uploading a software image from the switch ... 213 Selecting a configuration block ... 214 Resetting the switch ... 214 Accessing the ISCLI ...
Page 7
Introduction ... 216 Menu information ... 216 System maintenance options... 217 Forwarding Database options... 218 Debugging options... 218 ARP cache options ... 219 IP Route Manipulation options... 220 IGMP Multicast Group options ... 220 IGMP Snooping options ... 221 IGMP Mrouter options ... 221 Uuencode flash dump ...
Command line interface Introduction The HP 10Gb Ethernet BL-c Switch is ready to perform basic switching functions right out of the box. Some of the more advanced features, however, require some administrative configuration before they can be used effectively. This guide provides a command reference for the HP 10Gb Ethernet BL-c Switch.
Establishing a console connection To establish a console connection with the switch, you need: • A null modem cable with a female DB-9 connector (See the HP 10Gb Ethernet BL-c Switch User Guide for more information.) • An ASCII terminal or a computer running terminal emulation software set to the parameters...
The switch can perform only one session of key/cipher generation at a time. Therefore, an SSH/Secure Copy (SCP) client will not be able to log in if the switch is performing key generation at that time or if another client has just logged in before this client. Similarly, the system will fail to perform the key generation if an SSH/SCP client is logging in at that time.
Access to switch functions is controlled through the use of unique usernames and passwords. Once you are connected to the switch via the local console, Telnet, or SSH, you are prompted to enter a password. The password entered determines the access level. The default user names/password for each access level is listed in the following table.
Description and tasks performed User The user has no direct responsibility for switch management. He or she can view all switch status information and statistics, but cannot make any configuration changes to the switch. The user account is enabled by default, and the default password is user.
Typographical conventions The following table describes the typographic styles used in this guide: Table 3 Typographical conventions Typeface or Meaning symbol This type depicts onscreen computer output and prompts. AaBbCc123 This type displays in command examples and shows text AaBbCc123 that must be typed in exactly as shown.
Menu basics Introduction The AOS CLI is used for viewing switch information and statistics. In addition, the administrator can use the CLI for performing all levels of switch configuration. To make the CLI easy to use, the various commands have been logically grouped into a series of menus and submenus.
This menu is used for debugging purposes, enabling you to generate a technical support dump of the critical state information in the switch, and to clear entries in the Forwarding Database and the Address Resolution Protocol (ARP) and routing tables. This menu is available only from an administrator and operator login.
Page 16
2 = Verbose: Everything is shown. This is the default. • When used without a value, the current setting is displayed. This command is used to Telnet out of the switch. The format is: telnet telnet <hostname> | <IP address> [port] [-m|-mgt|-d|-data] By default, the -m or -mgt option for the management port is used.
Command line history and editing Using the command line interface, you can retrieve and modify previously entered commands with just a few keystrokes. The following options are available globally at the command line: Table 5 Command line history and editing options Option history <Ctrl-p>...
Command line interface shortcuts The following shortcuts allow you to enter commands quickly and easily. Command stacking As a shortcut, you can type multiple commands on a single line, separated by forward slashes (/). You can connect as many commands as required to access the menu option that you want. For example, the keyboard shortcut to access the Simple Network Management Protocol (SNMP) Configuration Menu from the Main# prompt is: Main# cfg/sys/ssnmp/name...
Introduction This chapter describes how to perform first-time configuration and how to change system passwords. To begin first-time configuration of the switch, perform the following steps. Connect to the switch console. After connecting, the login prompt displays. HP 10Gb Ethernet BL-c Switch Copyright(C)2006 Hewlett-Packard Development Company, L.P.
>> System# save Setting passwords HP recommends that you change all passwords after initial configuration and as regularly as required under the network security policies. See the “Accessing the switch” section in the “Command line interface” chapter for a description of the user access levels.
Page 21
From the Configuration Menu, use the following command to select the System Menu: >> Configuration# sys The System Menu is displayed. [System Menu] syslog sshd - SSH Server Menu radius - RADIUS Authentication Menu tacacs+ - TACACS+ Authentication Menu - NTP Server Menu ssnmp - System SNMP Menu access...
Changing the default user password The user login has limited control of the switch. Through a user account, you can view switch information and statistics, but you cannot make configuration changes. The default password for the user account is user. This password cannot be changed from the user account.
Page 23
Only the administrator can change the user password. Entering the administrator password confirms your authority. Changing OPERATOR password; validation required... Enter current administrator password: Enter the new operator password at the prompt: Enter new operator password: Enter the new operator password, again, at the prompt: Re-enter new operator password: Apply and save the changes: System# apply...
Information Menu Introduction You can view configuration information for the switch in the user, operator, and administrator command modes. This chapter discusses how to use the CLI to display switch information. Menu overview Command: /info [Information Menu] rmon link port...
Displays Uplink Failure Detection information. Displays Server Link Failure Detection information. Dumps all switch information available from the Information Menu (10K or more, depending on your configuration). If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands.
Usage Displays the User Access Information Menu. Dumps all switch information available from the Information Menu (10K or more, depending on your configuration). - Show usmUser table information - Show vacmViewTreeFamily table information - Show vacmAccess table information...
User Table parameters Field Description This is a string that represents the name of the user that you can use to access the switch. User Name This indicates whether messages sent on behalf of this user are protected from disclosure Protocol using a privacy protocol.
The following table describes the SNMPv3 View Table information. Table 10 View Table parameters Field Description Displays the name of the view. View Name Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object Subtree instances which have a common Object Identifier prefix to their names.
SNMPv3 Group Table information Command: /info/sys/snmpv3/group Sec Model --------- snmpv1 A group is a combination of security model and security name that defines the access rights assigned to all the security names belonging to that group. The group is identified by a group name. The following table describes the SNMPv3 Group Table information.
SNMPv3 Target Address Table information Command: /info/sys/snmpv3/taddr Name ---------- trap1 This command displays the SNMPv3 target address table information, which is stored in the SNMP engine. The following table describes the SNMPv3 Target Address Table information. Table 14 Target Address Table parameters Field Name Transport Addr...
SNMPv3 Notify Table information Command: /info/sys/snmpv3/notify Name -------------------- -------------------- v1v2trap The following table describes the SNMPv3 Notify Table information. Table 16 SNMPv3 Notify Table Field Description The locally arbitrary, but unique identifier associated with this snmpNotifyEntry. Name This represents a single tag value which is used to select entries in the snmpTargetAddrTable.
RackName: Default Rack Name EnclosureName: Default Chassis Name BayNumber: Switch has been up for 3 days, 14 hours, 56 minutes and 22 seconds. Last boot: 17:25:38 Mon Jan 8, 2007 (software reset) MAC address: 00:10:00:01:00:01 Management Port MAC Address: 00:10:18:00:00:00 Management Port IP Address (if 250): 10.20.7.15...
System user information Command: /info/sys/user Usernames: user oper admin Current User ID table: 1: name tech1 2: name tech2 The following table describes the User Name information. Table 17 User Name information menu Field user oper admin Current User ID Table - enabled - disabled - Always Enabled...
Layer 2 information Command: /info/l2 [Layer 2 Menu] lacp hotlink 8021x cist trunk vlan uplink dump The following table describes the Layer 2 Information Menu options. Table 18 Layer 2 Information Menu options Command Usage Displays the Forwarding Database Information Menu. Displays the Link Aggregation Control Protocol Information Menu.
The forwarding database (FDB) contains information that maps the media access control (MAC) address of each known device to the switch port where the device address was learned. The FDB also shows which other ports have seen frames destined for a particular MAC address.
00:02:01:00:00:0b 00:02:01:00:00:0c An address that is in the forwarding (FWD) state indicates that the switch has learned it. When in the trunking (TRK) state, the Trnk field displays the trunk group number. If the state for the port is listed as unknown (UNK), the MAC address has not yet been learned by the switch, but has only been seen as a destination address.
Command: /info/l2/lacp/dump >> LACP# dump port lacp ------------------------------------------------------------------ … LACP dump includes the following information for each port in the switch: • lacp—Displays the port’s LACP mode (active, passive, or off) • adminkey—Displays the value of the port’s adminkey. •...
802.1X information Command: /info/l2/8021x System capability : Authenticator System status Protocol version Port Auth Mode ---- ------------ force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth force-auth ------------------------------------------------------------------ * - Port down or disabled The following table describes the IEEE 802.1X parameters.
Page 41
Table 21 802.1X information Field Description Authenticator PAE State Displays the Authenticator Port Access Entity State. The PAE state can be one of the following: • • • • • • • • Displays the Backend Authorization State. The Backend Authorization state Backend Auth State can be one of the following: •...
---- -------- The switch software uses the IEEE 802.1D Spanning Tree Protocol (STP). If RSTP/MSTP is turned on, see the “Rapid Spanning Tree information” section for Spanning Tree Group information. In addition to seeing if STP is enabled or disabled, you can view the following STP bridge information: •...
Page 43
Path-cost is the total path cost to the root bridge. It is the summation of the path Path-Cost cost between bridges (up to the root bridge). The current root port refers to the port on the switch that receives data from the Port current root. Zero (0) indicates the root bridge of the STP.
---- ---- The switch software can be set to use the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) or the IEEE 802.1s Multiple Spanning Tree Protocol (MSTP). If RSTP/MSTP is turned on, you can view the following RSTP bridge information for the Spanning Tree Group: •...
Page 45
Path-cost is the total path cost to the root bridge. It is the summation of the path cost Path-Cost between bridges (up to the root bridge). The current root port refers to the port on the switch that receives data from the Port current root. Zero (0) indicates the root bridge of the STP.
Common Internal Spanning Tree information Command: /info/l2/cist Mstp Digest: 0xac36177f50283cd4b83821d8ab26de62 Common Internal Spanning Tree: VLANs MAPPED: 1-16 18-31 33-4094 VLANs: 1 25 26 4095 Current Root: 8000 00:03:42:fa:3b:80 CIST Regional Root: 8000 00:03:42:fa:3b:81 Parameters: Port Prio Cost State ---- ---- ---- ------ ---- --------------------- -------- ----- ---- 2000 2000 2000...
Page 47
The following table describes the CIST parameters. Table 24 Common Internal Spanning Tree parameter description Parameter Description Shows information about the root bridge for the Common Internal Spanning Tree CIST Root (CIST). Values on this row of information refer to the CIST root. Shows information about the root bridge for this MSTP region.
Trunk group information Command: /info/l2/trunk Trunk group 1, Enabled port state: 20: STG 21: STG When trunk groups are configured, you can view the state of each port in the various trunk groups. NOTE: If Spanning Tree Protocol on any port in the trunk group is set to forwarding, the remaining ports in the trunk group will also be set to forwarding.
This information display includes all configured VLANs and all member ports that have an active link state. VLAN information includes: • VLAN Number • VLAN Name • Status • Port membership of the VLAN • Protocol VLAN information • Private VLAN information Fast Uplink Convergence status Command: /info/l2/uplink STP uplink fast mode : disabled...
Displays the VRRP Information Menu. vrrp Displays the Server Mobility Information Menu. Dumps all switch information available from the Layer 3 Menu (10K or more, depending dump on your configuration). If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands.
100.10.1.1. Displays routes to a single gateway. For example, 100.10.1.2. Displays routes of a single type. Displays routes of a single tag. Displays routes on a single interface. Displays all routes configured in the switch. Mask Gateway --------------- --------------- 255.0.0.0 11.0.0.1...
Page 52
The next hop to the host or subnet destination will be forwarded through a router at the indirect Gateway address. Packets will be delivered to a destination host or subnet attached to the switch. direct Indicates a route to one of the switch’s IP interfaces.
- Show a single ARP entry by IP address - Show ARP entries on a single port - Show ARP entries on a single VLAN - Show ARP entries for switch's interfaces - Show all ARP entries Usage Displays a single ARP entry by IP address. For example, 192.4.17.101.
ARP address list information Command: /info/arp/addr IP address --------------- --------------- 205.178.18.66 205.178.50.1 205.178.18.64 This screen displays all entries in the ARP cache. OSPF information Command: /info/l3/ospf [OSPF Information Menu] general aindex virtual dbase sumaddr nsumadd routes dump The following table describes the OSPF Menu options. Table 32 OSPF information Command...
OSPF general information Command: /info/l3/ospf/general OSPF Version 2 Router ID: 10.10.10.1 Started at 1663 and the process uptime is 4626 Area Border Router: yes, AS Boundary Router: no LS types supported are 6 External LSA count 0 External LSA checksum sum 0x0 Number of interfaces in this router is 2 Number of virtual links in this router is 1 16 new lsa received and 34 lsa originated from this router...
Routing Information Protocol information Command: /info/l3/rip [RIP Information Menu] routes dump The following table describes the Routing Information Protocol information menu options. Table 34 RIP information Command routes dump <0-249> RIP Routes information Command: /info/l3/rip/routes >> IP Routing# /info/l3/rip/routes 3.0.0.0/8 via 30.1.1.11 metric 4 4.0.0.0/16 via 30.1.1.11 metric 16 10.0.0.0/8 via 30.1.1.2 metric 3 20.0.0.0/8 via 30.1.1.2 metric 2...
IP information Command: /info/l3/ip IP information: Interface information: 1: 10.80.23.243 250: 10.20.7.144 Default gateway information: metric strict 1: 10.80.22.1, 254: 10.20.1.1, Current ServerMobility settings: OFF ServerMobility ports: DHCP request filtering enabled ports: Relay on non-ServerMobility ports: Ena Active-Backup ports: Current IP forwarding settings: OFF, dirbr disabled Current network filter settings: none Current route map settings:...
The following table describes the commands used to display information about IGMP groups learned by the switch. Table 35 IGMP Multicast Group menu options Command mrouter find <IP address> vlan <1-4094> port <port number>...
The following table describes the commands used to display information about multicast routers learned through IGMP Snooping. Table 36 IGMP Multicast Router menu options Command vlan <1-4094> dump Usage Displays information for all multicast groups on a single VLAN. Displays information for all multicast groups learned by the switch. Information Menu 61...
VRRP information Virtual Router Redundancy Protocol (VRRP) support on the HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address.
Server Mobility Port information Command: /info/l3/sm/port ------------------------------------------------------ Server Mobility Port agent.circuit-id = 55:53:45:36:33:35:31:4d:34:36:00:00:00:00:00:00 agent.remote-id Server Mobility : Filtering Port 2 has no backup port This display includes the following information for each port that has Server Mobility configured: • Agent Circuit ID—hexadecimal value of the DHCP option 82 Agent Circuit ID •...
QoS information Command: /info/qos [QoS Menu] 8021p The following table describes the commands used to display Quality of Service (QoS) information. Table 37 QoS menu options Command 8021p 802.1p information Command: /info/qos/8021p Current priority to COS queue information: Priority COSq -------- ---- Current port priority information:...
The following table describes the IEEE 802.1p port priority information. Table 39 802.1p Port Priority information Field Port Priority Cosq Weight ACL information Command: /info/acl Current ACL information: ------------------------ Filter 1 profile: Ethernet - VID Actions Filter 2 profile: Ethernet - VID Actions No ACL groups configured.
RMON Information Menu Command: /info/rmon [RMON Information Menu] hist alarm event dump The following table describes the RMON Information parameters. Table 40 RMON History Information Menu Command hist alarm event dump RMON history information Command: /info/rmon/hist RMON History group configuration: Index ----- ------------------------------...
RMON alarm information Command: /info/rmon/alarm RMON Alarm group configuration: Index Interval ----- -------- Index ----- ------------------------------ The following table describes the RMON Alarm Information parameters. Table 42 RMON Alarm Information Menu Field Index Interval Type rLimit fLimit rEvtIdx fEvtIdx Type rLimit fLimit ----...
Displays the type of notification provided for this event, as follows: none, log, trap, both. Displays the time that passed since the last switch reboot, when the most recent event was triggered. This value is cleared when the switch reboots.
10000 10000 10000 10000 10000 10000 10000 Use this command to display link status information about each port on a switch, including: • Port number • Port speed (10000 Mb/s or 100 Mb/s) • Duplex mode (half, full, or any) •...
Port information Command: /info/port Port Tag RMON PVID ---- --- ---- ---- -------------- ------------------------------- * = PVID is tagged. Port information includes: • Port number • Whether the port uses VLAN tagging or not (y or n) • Whether Remote Monitoring (RMON) is enabled or disabled (e or d) •...
LtD status and member ports Information dump Command: /info/dump Use the dump command to dump all switch information available from the Information Menu (10K or more, depending on your configuration). This data is useful for tuning and debugging switch performance.
Statistics Menu Introduction You can view switch performance statistics in the user, operator, and administrator command modes. This chapter discusses how to use the CLI to display switch statistics. Menu information Command: /stats [Statistics Menu] port clrports - Clear stats for all ports...
Clears all Management Processor statistics. Dumps all switch statistics. Use this command to gather data for tuning and debugging switch performance. If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump command.
Page 75
Table 46 802.1X statistics for port Statistics authTimeoutsWhileAuthenticating authFailWhileAuthenticating authReauthsWhileAuthenticating authEapStartsWhileAuthenticating authEapLogoffWhileAuthenticating authReauthsWhileAuthenticated authEapStartsWhileAuthenticated authEapLogoffWhileAuthenticated backendResponses backendAccessChallenges backendOtherRequestsToSupplicant backendNonNakResponsesFromSupplic backendAuthSuccesses Port Total number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout.
Table 46 802.1X statistics for port Statistics backendAuthFails Bridging statistics Command: /stats/port <port number>/brg Bridging statistics for port 1: dot1PortInFrames: dot1PortOutFrames: dot1PortInDiscards: dot1TpLearnedEntryDiscards: dot1StpPortForwardTransitions: The following table describes the bridging statistics for a selected port: Table 47 Bridging statistics for port Statistics dot1PortInFrames dot1PortOutFrames...
Ethernet statistics Command: /stats/port <port number>/ether Ethernet statistics for port 1: dot3StatsAlignmentErrors: dot3StatsFCSErrors: dot3StatsSingleCollisionFrames: dot3StatsMultipleCollisionFrames: dot3StatsLateCollisions: dot3StatsExcessiveCollisions: dot3StatsInternalMacTransmitErrors: dot3StatsFrameTooLongs: dot3StatsInternalMacReceiveErrors: The following table describes the Ethernet statistics for a selected port: Table 48 Ethernet statistics for port Statistics dot3StatsAlignmentErrors dot3StatsFCSErrors dot3StatsSingleCollisionFrames Description A count of frames received on a particular interface that are...
Page 78
Table 48 Ethernet statistics for port Statistics dot3StatsMultipleCollisionFrames dot3StatsLateCollisions dot3StatsExcessiveCollisions dot3StatsInternalMacTransmitErrors dot3StatsFrameTooLongs Description A count of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision. A frame that is counted by an instance of this object is also counted by the corresponding instance of either the ifOutUcastPkts, ifOutMulticastPkts, or ifOutBroadcastPkts, and is not counted by the...
Table 48 Ethernet statistics for port Statistics dot3StatsInternalMacReceiveErrors Interface statistics Command: /stats/port <port number>/if Interface statistics for port 1: Octets: UcastPkts: BroadcastPkts: MulticastPkts: Discards: Errors: The following table describes the interface (IF) statistics for a selected port: Table 49 Interface statistics for port Statistics Octets—IfHCIn UcastPkts—IfHCIn...
Page 80
Table 49 Interface statistics for port Statistics Description For packet-oriented interfaces, the number of inbound packets that contained Errors—IfHCIn errors preventing them from being delivered to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol.
The number of input datagrams discarded because the IP address in their IP header's destination field was not a valid address to be received at this entity (the switch). The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but which were discarded (for example, for lack of buffer space).
Port RMON statistics Command: /stats/port <port number>/rmon RMON statistics for port 2: etherStatsDropEvents: etherStatsOctets: etherStatsPkts: etherStatsBroadcastPkts: etherStatsMulticastPkts: etherStatsCRCAlignErrors: etherStatsUndersizePkts: etherStatsOversizePkts: etherStatsFragments: etherStatsJabbers: etherStatsCollisions: etherStatsPkts64Octets: etherStatsPkts65to127Octets: etherStatsPkts128to255Octets: etherStatsPkts256to511Octets: etherStatsPkts64Octets: etherStatsPkts1024to1518Octets: The following table describes the Remote Monitoring (RMON) statistics of the selected port: Table 52 RMON statistics Statistics...
Page 83
Table 52 RMON statistics Statistics etherStatsFragments etherStatsJabbers etherStatsCollisions etherStatsPkts64Octets etherStatsPkts65to127Octets etherStatsPkts128to255Octets etherStatsPkts256to511Octets etherStatsPkts512to1023Octets etherStatsPkts1024to1518Octets Description The total number of packets received that were less than 64 octets in length (excluding framing bits but including FCS octets) and had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).
Layer 2 statistics Command: /stats/l2 [Layer 2 Statistics Menu] lacp hotlink The following table describes the Layer 2 Statistics Menu options. Table 53 Layer 2 Statistics Menu options Command lacp hotlink FDB statistics Command: /stats/l2/fdb FDB statistics: current: This menu option enables you to display statistics regarding the use of the forwarding database, including the number of current entries and the maximum number of entries ever recorded.
Hot Links statistics Command: /stats/l2/hotlink Trigger 1 statistics: Trigger Name: Master active: Backup active: FDB update: The following table describes the Hot Links statistics: Table 55 Hot Links statistics Statistic Description Total number of times the Master interface transitioned to the Active state. Master active Total number of times the Backup interface transitioned to the Active state.
Displays OSPF statistics menu. When virtual routers are configured, you can display statistics for the virtual routers. Clears VRRP statistics. Displays Routing Information Protocol (RIP) statistics. Displays the total number of Internet Group Management Protocol (IGMP) groups registered the switch. Statistics Menu 86...
Number of LPM entries used Usage Displays the total number of Internet Protocol Multicast (IPMC) groups registered on the switch. Clears all IGMP statistics for the selected VLANs. Clears IP statistics. Use this command with caution as it will delete all the IP statistics.
IP options, and so on. The number of input datagrams discarded because the IP address in their IP header destination field was not a valid address to be received at this switch. This count includes invalid addresses (for example, 0.0.0.0) and addresses of unsupported classes (for example, Class E).
The total number of ICMP messages which this switch attempted to send. Note that this counter includes all those counted by icmpOutErrors. The number of ICMP messages that this switch did not send due to problems discovered within ICMP such as a lack of buffer. This value should not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram.
Page 92
UBOUND quantity described in RFC 793. The limit on the total number of TCP connections the switch can support. In tcpMaxConn entities where the maximum number of connections is dynamic, this object should contain the value -1.
Description The total number of UDP datagrams delivered to the switch. The total number of UDP datagrams sent from this switch. The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.
Table 65 IGMP statistics Statistic rxIgmpReports txIgmpReports txIgmpGrpSpecificQueries txIgmpLeaves rxIgmpV3CurrentStateRecords rxIgmpV3SourceListChangeRecords rxIgmpV3FilterChangeRecords OSPF statistics menu Command: /stats/l3/ospf [OSPF stats Menu] general aindex The following table describes the OSPF statistics menu options. Table 66 OSPF statistics menu options Command general aindex <0-2> if <1-249>...
OSPF global statistics Command: /stats/l3/ospf/general OSPF stats ---------- Rx/Tx Stats: Pkts hello database ls requests ls acks ls updates Nbr change stats: hello start n2way adjoint ok negotiation done exchange done bad requests bad sequence loading done n1way rst_ad down Timers kickoff hello retransmit...
Page 96
Table 67 OSPF global statistics Statistic Description The sum total of all Link State Acknowledgement packets received on all OSPF Rx ls Acks areas and interfaces. The sum total of all Link State Acknowledgement packets transmitted on all OSPF Tx ls Acks areas and interfaces.
Page 97
Table 67 OSPF global statistics Statistic Description The total number of Neighboring routers down (that is, in the initial state of a down neighbor conversation) across all OSPF areas and interfaces. Intf Change Stats: The sum total number of interfaces up in all OSPF areas. The sum total number of interfaces down in all OSPF areas.
VRRP statistics Virtual Router Redundancy Protocol (VRRP) support on the HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device.
RIP statistics Command: /stats/l3/rip RIP ALL STATS INFORMATION: RIP packets received = 12 RIP packets sent = 75 RIP request received = 0 RIP response received = 12 RIP request sent = 3 RIP response sent = 72 RIP route timeout = 0 RIP bad size packet received = 0 RIP bad version received = 0 RIP bad zeros received = 0...
Management Processor statistics Command: /stats/mp [MP-specific Statistics Menu] The following table describes the Statistics Menu options for the management processor (MP): Table 69 MP-specific Statistics Menu options Command Packet statistics Command: /stats/mp/pkt Packet counts: allocs: mediums: jumbos: smalls: failures: The following table describes the packet statistics. Table 70 MP specific packet statistics Description...
Table 70 MP specific packet statistics Description smalls hi-watermark failures TCP statistics Command: /stats/mp/tcb All TCP allocated control blocks: 10ad41e8: 10ad5790: The following table describes the Transmission Control Protocol (TCP) control block (TCB) statistics shown in this example: Table 71 TCP statistics Description Memory...
CPU statistics Command: /stats/mp/cpu CPU utilization: cpuUtil1Second: cpuUtil4Seconds: cpuUtil64Seconds: The following table describes the management port CPU utilization statistics: Table 73 CPU statistics Statistics cpuUtil1Second cpuUtil4Seconds cpuUtil64Seconds Access Control List (ACL) statistics menu Command: /stats/acl [ACL Menu] dump clracl The following table describes the Access Control List (ACL) Statistics menu options: Table 74 ACL statistics menu options Command...
The following table describes the Simple Network Management Protocol (SNMP) statistics: Table 75 SNMP statistics Statistics snmpInPkts snmpInBadVersions snmpInBadC'tyNames snmpInBadC'tyUses snmpInASNParseErrs snmpEnableAuthTraps An object to enable or disable the authentication traps generated by this switch. snmpOutPkts snmpInBadTypes snmpInBadVersions: snmpInBadC'tyUses: snmpEnableAuthTraps: snmpInBadTypes: snmpInNoSuchNames: snmpInReadOnlys:...
Page 104
Table 75 SNMP statistics Statistics Description The total number of SNMP Protocol Data Units (PDUs) that were delivered to the snmpInTooBigs SNMP protocol entity and for which the value of the error-status field is too big. The total number of SNMP Protocol Data Units (PDUs) that were delivered to the snmpInNoSuchNames SNMP protocol entity and for which the value of the error-status field is noSuchName.
Primary Server: Secondary Server: The switch uses NTP (Network Timing Protocol) version 3 to synchronize the switch’s internal clock with an atomic time-calibrated NTP server. With NTP enabled, the switch can accurately update its internal clock to be consistent with other devices on the network and generates accurate syslogs.
• Responses Received—The total number of NTP responses received from the primary NTP server. • Updates—The total number of times the switch updated its time based on the NTP responses received from the primary NTP server. • Requests Sent—The total number of NTP requests the switch sent to the secondary NTP server to synchronize time.
Statistics dump Command: /stats/dump Use the dump command to dump all switch statistics available from the Statistics Menu (40K or more, depending on your configuration). This data can be used to tune or debug switch performance. If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands.
Introduction The Configuration Menu is only available from an administrator login. It includes submenus for configuring every aspect of the switch. Changes to configuration are not active until explicitly applied. Changes can be saved to non-volatile memory (NVRAM). Menu information...
FTP/TFTP server> <filename on host> Viewing, applying, reverting, and saving changes As you use the configuration menus to set switch parameters, the changes you make do not take effect immediately. All changes are considered pending until you explicitly apply them. Also, any changes are lost the next time the switch boots unless the changes are explicitly saved.
# save n You can decide which configuration you want to run the next time you reset the switch. Your options include: • The active configuration block •...
- Enable/disable Reminders This menu provides configuration of switch management parameters such as user and administrator privilege mode passwords, browser-based management settings, and management access list. The following table describes the System Configuration Menu options. Table 79...
Usage Enables or disables daylight savings time in the system clock. When enabled, the switch adds an extra hour to the system clock so that it is consistent with the local clock. The default setting is disabled. Sets the idle timeout for CLI sessions, from 1 to 60 minutes. The default value is 5 minutes.
Page 113
0-7. The default is 0. Enables or disables delivering syslog messages to the console. When necessary, disabling console ensures the switch is not affected by syslog messages. It is enabled by default. Displays a list of features for which syslog messages can be generated.
The SSH program securely logs into another computer over a network and executes commands in a secure environment. All data using SSH is encrypted. NOTE: See the HP 10Gb Ethernet BL-c Switch Application Guide for information on SSH. The following table describes the SSHD Configuration Menu options. Table 81...
NOTE: See the HP 10Gb Ethernet BL-c Switch Application Guide for information on RADIUS. The following table describes the RADIUS Server Configuration Menu options. Table 82 RADIUS Server Configuration Menu options Command prisrv <IP address>...
(secbd) are disabled. If Telnet backdoor is enabled (telnet ena), type in noradius as a backdoor to bypass RADIUS checking, and use the administrator password to log into the switch. The switch allows this even if RADIUS servers are available.
Page 117
Enables or disables TACACS+ privilege-level mapping. The default value is disabled. Maps a TACACS+ authorization level to a switch user level. Enter a TACACS+ authorization level (0-15), followed by the corresponding HP 10GbE switch user level. Enables the TACACS+ server.
[NTP Server Menu] prisrv secsrv intrval This menu enables you to synchronize the switch clock to a Network Time Protocol (NTP) server. By default, this option is disabled. The following table describes the NTP Server Configuration Menu options. Table 84...
(client/manager) accesses a set of variables known as MIBs (Management Information Base) provided by the managed device (agent). If you are running an SNMP network management station on your network, you can manage the switch using the following standard SNMP MIBs: •...
Description Configures the SNMP write community string. The write community string controls SNMP “set” and “get” access to the switch. It can have a maximum of 32 characters. The default write community string is private. Sets the timeout value for the SNMP state machine. The range is 1-30 minutes.
The following table describes the SNMPv3 Configuration Menu options. Table 86 SNMPv3 Configuration Menu options Command usm <1-16> view <1-128> access <1-32> group <1-16> comm <1-16> taddr <1-16> tparam <1-16> notify <1-16> v1v2 disable|enable User Security Model configuration Command: /cfg/sys/ssnmp/snmpv3/usm [SNMPv3 usmUser 1 name auth...
Description Configures a string up to 32 characters long that represents the name of the user. This is the login name that you need in order to access the switch. Configures the authentication protocol between HMAC-MD5-96 or HMAC- SHA-96. The default algorithm is none.
Page 123
Table 88 SNMPv3 View Configuration Menu options Command View-based Access Control Model configuration Command: /cfg/sys/ssnmp/snmpv3/access [SNMPv3 vacmAccess 1 name model level rview wview nview The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user.
SNMPv3 Group configuration Command: /cfg/sys/ssnmp/snmpv3/group [SNMPv3 vacmSecurityToGroup 1 Menu] model uname gname The following table describes the SNMPv3 Group Configuration Menu options. Table 90 SNMPv3 Group Configuration Menu options Command model usm|snmpv1|snmpv2 uname <1-32 characters> gname <1-32 characters> SNMPv3 Community Table configuration Command: /cfg/sys/ssnmp/snmpv3/comm [SNMPv3 snmpCommunityTable 1 index...
Table 91 SNMPv3 Community Table Configuration Menu options Command tag <1-255 characters> SNMPv3 Target Address Table configuration Command: /cfg/sys/ssnmp/snmpv3/taddr [SNMPv3 snmpTargetAddrTable 1 name addr port taglist pname This menu allows you to set passwords and display current user statistics. Passwords can be a maximum of 15 characters.
SNMPv3 Target Parameters Table configuration Command: /cfg/sys/ssnmp/snmpv3/tparam [SNMPv3 snmpTargetParamsTable 1 name mpmodel model uname level You can configure the target parameters entry and store it in the target parameters table in the SNMP engine. This table contains parameters that are used to generate a message. The parameters include the message processing model (for example: SNMPv3, SNMPv2c, SNMPv1), the security model (for example: USM), the security name, and the security level (noAuthnoPriv, authNoPriv, or authPriv).
SNMPv3 Notify Table configuration Command: /cfg/sys/ssnmp/snmpv3/notify [SNMPv3 snmpNotifyTable 1 name SNMPv3 uses Notification Originator to send out traps. A notification typically monitors a system for particular events or conditions, and generates Notification-Class messages based on these events or conditions. The following table describes the SNMPv3 Notify Table Configuration menu options. Table 94 SNMPv3 Notify Table Configuration Menu options Command...
<IP address> <IP mask> clear Description Sets the switch port used for serving switch Web content. The default is HTTP port 80. Disables or provides read-only/write-read SNMP access. Enables or disables BBI configuration control s for Telnet and SSH.
Sets the operator (oper) password (maximum 128 characters). The operator manages all functions of the switch. He or she can view all switch information and statistics and can reset ports or the entire switch. super user administrator has complete access to all menus, information, and configuration commands on the switch, including the ability to change both the user and administrator passwords.
Common Name (for example, user’s name) [ ]: Mr Smith • Email (for example, email address) [ ]: info@hp.com You must confirm if you want to generate the certificate. It takes approximately 30 seconds to generate the certificate. Then the switch restarts SSL agent.
This menu enables you to configure settings for individual switch ports. This command is enabled by default. NOTE: Port 17 is reserved for switch management. The following table describes the Port Configuration Menu options. Table 100...
Because this configuration sets a temporary state for the port, you do not need to use apply or save. The port state will revert to its original configuration when the switch is reset. See the “Menu information” section in the “Operations Menu” chapter for other operations-level commands.
The following table describes the Gigabit Link Configuration Menu options. Table 101 Gigabit Link Configuration Menu options Command speed 100|10000 mode fctl rx|tx|both|none auto on|off Port ACL/QoS configuration Command: /cfg/port <port number>/aclqos [Port 20 ACL Menu] The following table describes the port ACL/QoS Configuration Menu options. Table 102 Port ACL/QoS Configuration Menu options Command...
Port PVRST configuration Command: /cfg/port <port number>/stp [Port 1 STP Menu] edge link The following table describes the port PVRST Configuration Menu options. Table 103 Port PVRST Configuration Menu options Command edge enable|disable link auto|p2p|shared - Enable/disable edge port (for PVRST only) - Set port link type (auto, p2p, or shared;...
Port Fast Forwarding enabled. Enables or disables Fast Uplink Convergence, which provides rapid Spanning Tree convergence to an upstream switch during failover. When enabled, this feature increases bridge priorities to 65500 for all STGs and path cost by 3000 for all external STP ports.
Command: /cfg/l2/8021x [802.1X Configuration Menu] global port This feature allows you to configure the HP 10GbE switch as an IEEE 802.1X Authenticator, to provide port-based network access control. The following table describes the 802.1X Configuration Menu options. Table 105 802.1X Configuration Menu options...
- Set reauthentication time interval reauth default The global 802.1X menu allows you to configure parameters that affect all ports in the switch (except management port 17). The following table describes the 802.1X Global Configuration Menu options. Table 106 802.1X Global Configuration Menu options...
- Set reauthentication time interval reauth default global The 802.1X port menu allows you to configure parameters that affect the selected port in the switch. These settings override the global 802.1X parameters. The following table describes the 802.1X Port Configuration Menu options. Table 107 802.1X Port Configuration Menu options...
Page 139
Table 107 802.1X Port Configuration Menu options Command Description Sets the re-authentication status to on or off. The default value is off. reauth on|off Resets the global 802.1X parameters to their default values. default Applies the global 802.1X parameters to the port. global Displays current 802.1X parameters.
Spanning Tree Protocol (MSTP). MSTP allows you to map many VLANs to a small number of spanning tree groups, each with its own topology. MSTP supports up to 32 Spanning Tree Groups on the switch (STG 32 is reserved for switch management). MRST is turned off by default.
• HP PVST+ (default Spanning Tree setting) is NOT interoperable with Cisco Rapid PVST+. • HP MSTP/RSTP (with mode set to either ‘mstp’ or ‘rstp’) is NOT interoperable with Cisco Rapid PVST+. The following configurations are supported: • HP PVST+ (default Spanning Tree setting) is interoperable with Cisco PVST+.
[CIST Bridge Menu] prior mxage CIST bridge parameters are used only when the switch is in MSTP mode. CIST parameters do not affect operation of STP/PVST. The following table describes the commands used to configure CIST Bridge Configuration Menu options parameters.
CIST port configuration Command: /cfg/l2/mrst/cist/port <port number> [CIST Port 1 Menu] prior cost hello link edge CIST port parameters are used to modify MRST operation on an individual port basis. CIST parameters do not affect operation of STP/PVST. For each port, CIST is turned on by default. Port parameters include: •...
- Default Spanning Tree and Member parameters The HP 10GbE switch supports the IEEE 802.1D Spanning Tree Protocol (STP) and Cisco proprietary PVST and PVST+ protocols. You can configure up to 127 spanning tree groups on the switch (STG 128 is reserved for switch management).
Configures the bridge priority. The bridge priority parameter controls which bridge on the network is the STP root bridge. To make this switch the root bridge, configure the bridge priority lower than all other switches and bridges on your network. The lower the value, the higher the bridge priority.
Table 113 Bridge Spanning Tree Configuration Menu options Command fwd <4-30> When configuring STP bridge parameters, the following formulas must be used: • 2*(fwd-1) ≥ mxage • 2*(hello+1) ≤ mxage Spanning Tree port configuration Command: /cfg/l2/stp <1-128>/port <port number> [Spanning Tree Port 1 Menu] prior cost link...
Page 147
The following table describes the Spanning Tree Port Configuration Menu options. Table 114 Spanning Tree Port Configuration Menu options Command Description Configures the port priority. The port priority helps determine which bridge prior <0-255> port becomes the designated port. In a network topology that has multiple bridge ports connected to a single segment, the port with the lowest port priority becomes the designated port for the segment.
• Trunking from other devices must comply with Cisco® EtherChannel® technology. NOTE: See the HP 10Gb Ethernet BL-c Switch Application Guide for information on how to use port trunks. The following table describes the Trunk Group Configuration Menu options. Table 117...
Command: /cfg/l2/thash/set [set IP Trunk Hash Settings Menu] smac dmac Trunk hash parameters are set globally for the HP 10GbE switch. You can enable one or two parameters, to configure any of the following valid combinations: • SMAC (source MAC only) •...
Choose short (3 seconds) or long (90 seconds). The default value is long. HP recommends that you use a timeout value of long, to reduce LACPDU processing. If your switch’s CPU utilization rate remains at 100% for periods of 90 seconds or more, consider using static trunks instead of LACP.
VLAN, and change the port membership of the VLAN. By default, the VLAN menu option is disabled except VLAN 1, which is always enabled. The HP 10GbE switch supports a maximum of 1,000 VLANs. VLAN 4095 is reserved for switch management.
Table 122 VLAN Configuration Menu options Command IMPORTANT: All ports must belong to at least one VLAN. Any port which is removed from a VLAN and which is not a member of any other VLAN is automatically added to default VLAN #1. You cannot remove a port from VLAN #1 if the port has no membership in any other VLAN.
Table 124 Private VLAN Configuration Menu options Command Hot Links configuration Command: /cfg/l2/hotlink [Hot Links Menu] trigger bpdu sndfdb The following table describes the Hot Links Configuration menu options. Table 125 Hot Links Configuration menu options Command trigger <1-4> bpdu enable|disable sndfdb enable|disable Description Disables the Private VLAN.
Page 156
Hot Links Trigger configuration Command: /cfg/l2/hotlink/trigger < [Trigger 1 Menu] master backup fdelay name preempt The following table describes the Hot Links Trigger Menu options. Table 126 Hot Links Trigger menu options Command master backup fdelay <0-3600> name <text string> preempt enable|disable Hot Links Master configuration Command: /cfg/l2/hotlink/trigger <...
Page 157
Table 127 Hot Links Master Menu options Command Hot Links Backup configuration Command: /cfg/l2/hotlink/trigger < [Backup Menu] port trunk The following table describes the Hot Links Backup Menu options. Table 128 Hot Links Backup menu options Command port <port number (0, 18-21)> trunk <trunk group number (1-12)>...
The switch can be configured with up to 250 IP interfaces. Each IP interface represents the switch on an IP subnet on your network. The IP Interface option is disabled by default. The following table describes the IP Interface Configuration Menu options.
The switch supports up to four gateways, plus the management gateway 254. By default, no gateways are configured on the switch. Enter 1, 2, 3, or 4, or 254 in the command as the <gateway number>, depending upon which gateway you want to configure.
Static ARP entries are permanent in the ARP cache and do not age out like the ARP entries that are learnt dynamically. Static ARP entries enable the switch to reach the hosts without sending an ARP broadcast request to the network. Static ARPs are also useful to communicate with devices that do not respond to ARP requests.
Table 137 Route Map Configuration Menu options Command type 1|2|none prec <1-255> enable disable delete IP Access List configuration Command: /cfg/l3/rmap <1-32>/alist <1-8> [IP Access List 1 Menu] metric action enable disable delete current The route map number <1-32> and the access list number <1-8> represent the IP access list you wish to configure.
Routing Information Protocol configuration Command: /cfg/l3/rip [Routing Information Protocol Menu] update redist current The RIP Menu is used for configuring Routing Information Protocol parameters. This option is turned off by default. The following table describes the RIP Configuration Menu options. Table 139 RIP Configuration Menu options Command...
Configures the RIP version used by this interface. The default value is version 2. When enabled, the switch supplies routes to other routers. This command is enabled by default. When enabled, the switch learns routes from other routers. This command is enabled by default.
Open Shortest Path First configuration Command: /cfg/l3/ospf [Open Shortest Path First Menu] aindex range virt md5key host redist lsdb default The following table describes the Open Shortest Path First Menu options. Table 142 OSPF Configuration Menu options Command aindex <0-2> range <1-16>...
Configures a stub area to send a numeric metric value. All routes received via that stub area carry the configured metric to potentially influencing routing decisions. Metric value assigns the priority for choosing the switch for default route. Metric type determines the method for influencing routing decisions for external routes.
Description Configures the base IP address for the range. For example, 100.10.1.1. Configures the IP address mask for the range. Configures the area index used by the switch. Hides the OSPF summary range. Enables the OSPF summary range. Disables the OSPF summary range.
Page 171
The following table describes the OSPF Interface Configuration Menu options. Table 145 OSPF Interface Configuration Menu options Command Description Configures the OSPF area index. aindex <0-2> Configures the assigned priority value to the OSPF interfaces. prio <0-255> (A priority value of 255 is the highest and 1 is the lowest. A priority value of 0 specifies that the interface cannot be used as Designated Router (DR) or Backup Designated Router (BDR).) Configures cost set for the selected path—preferred or backup.
OSPF Virtual Link configuration Command: /cfg/l3/ospf/virt <1-3> [OSPF Virtual Link 1 aindex hello dead trans retra mdkey enable disable delete The following table describes the OSPF Virtual Link Configuration Menu options. Table 146 OSPF Virtual Link Configuration Menu options Command aindex <0-2>...
IGMP Snooping allows the switch to forward multicast traffic only to those ports that request it. IGMP Snooping prevents multicast traffic from being flooded to all ports. The switch learns which server hosts are interested in receiving multicast traffic, and forwards it only to ports connected to those servers.
Page 176
Configures the age-out period for the IGMP Mrouters in the Mrouter table. If mrto <1-600> the switch does not receive a General Query from the Mrouter for mrto seconds, the switch removes the multicast router from its Mrouter table. The range is from 1 to 600 seconds. The default is 255 seconds.
When disabled, the switch drops IGMPv1 and IGMPv2 reports. The default value is enabled. Enables or disables snooping on IGMPv3 Exclude Reports. When disabled, the switch ignores Exclude Reports. The default value is enabled. Enables IGMP version 3. The default value is disabled.
IGMP static multicast router configuration Command: /cfg/l3/igmp/mrouter [Static Multicast Router Menu] add - Add port as Multicast Router Port rem - Remove port as Multicast Router Port cur - Display current Multicast Router configuration The following table describes the Static Multicast Router Configuration Menu options. NOTE: When you configure a static multicast router on a VLAN, the process of learning multicast routers is disabled for that VLAN.
IGMP filter definition Command: /cfg/l3/igmp/igmpflt/filter <1-16> [IGMP Filter 1 Definition Menu] range - Set IP Multicast address range action - Set filter action ena - Enable filter dis - Disable filter del - Delete filter cur - Display current IGMP filter configuration The following table describes the IGMP Filter Definition Menu options.
The Domain Name System (DNS) Configuration Menu is used for defining the primary and secondary DNS servers on your local network, and for setting the default domain name served by the switch services. DNS parameters must be configured prior to using hostname parameters with the ping, traceroute, and tftp commands.
When enabled, DHCP requests from the server are filtered, so that the DHCP server receives only DHCP requests from the HP 1:10 GbE switch. Enables or disables BOOTP Relay for all ports that have Server Mobility disabled. The default value is disabled.
Page 182
Server Mobility port configuration Command: /cfg/l3/sm/port < [Port 20 Menu] addback remback The following table describes the Server Mobility port Configuration menu options. Table 160 Server Mobility Configuration menu options Command addback <port number> remback <port number> > port number - Set backup port - Remove backup port - Display current configuration...
Virtual Router Redundancy Protocol (VRRP) support on the HP 10GbE switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address.
This menu is used for configuring virtual routers for this switch. A virtual router is defined by its virtual router ID and an IP address. On each VRRP-capable routing device participating in redundancy for this virtual router, a virtual router will be configured to share the same virtual router ID and IP address.
Note that even when preem is disabled, this virtual router will always preempt any other master if this switch is the owner (the IP interface address and virtual router addr are the same). By default, this option is enabled.
The Virtual Router Group menu is used for associating all virtual routers into a single logical virtual router, which forces all virtual routers on the switch to either be master or backup as a group. A virtual router is defined by its virtual router ID and an IP address. On each VRRP-capable routing device participating in redundancy for this virtual router, a virtual router will be configured to share the same virtual router ID and IP address.
Page 187
Note that even when preem is disabled, this virtual router will always preempt any other master if this switch is the owner (the IP interface address and virtual router addr are the same). By default, this option is enabled.
When enabled, the priority for this virtual router will be increased for each other IP interface active on this switch. An IP interface is considered active when there is at least one active port on the same VLAN. This helps elect the virtual routers with the most available routes as the master.
Defines the priority increment value (0 through 254) for virtual routers in master mode vrs <0-254> detected on this switch. The default value is 2. Defines the priority increment value (0 through 254) for active IP interfaces detected on ifs <0-254>...
This feature provides the HP 10GbE switch the capability to filter IP packets based on the IEEE 802.1p bits in the packet's VLAN header. The 802.1p bits specify the priority that you should give to the packets while forwarding them. The packets with a higher (non-zero) priority bits are given forwarding preference over packets with numerically lower priority bits value.
Access Control configuration Command: /cfg/acl [ACL Menu] group Use this menu to create Access Control Lists (ACLs) and ACL Groups. ACLs define matching criteria used for IP filtering and Quality of Service functions. The following table describes the Access Control Configuration Menu options. Table 170 Access Control Configuration Menu options Command...
Table 171 ACL Configuration Menu options Command egrport <port number> action permit|deny|setprio <0-7> stats e|d reset ACL Ethernet Filter configuration Command: /cfg/acl/acl <1-384>/ethernet [Filtering Ethernet Menu] smac dmac vlan etype reset This menu allows you to define Ethernet matching criteria for an ACL. The following table describes the Ethernet Filter Configuration Menu options.
ACL IP Version 4 Filter configuration Command: /cfg/acl/acl <1-384>/ipv4 [Filtering IPv4 Menu] proto reset This menu allows you to define IPv4 matching criteria for an ACL. The following table describes the IP version 4 Filter Configuration Menu options. Table 173 IPv4 Filter Configuration Menu options Command sip <IP address>...
ACL TCP/UDP Filter configuration Command: /cfg/acl/acl <1-384>/tcpudp [Filtering TCP/UDP Menu] sport dport flags reset This menu allows you to define TCP/UDP matching criteria for an ACL. The following table describes the TCP/UDP Filter Configuration Menu options. Table 174 TCP/UDP Filter Configuration Menu options Command sport <1-65535>...
Description Sets the DiffServ Code Point (DSCP) of Out-of-Profile packets to the selected value. The switch sets the DSCP value on Out-of-Profile packets. Resets the update DSCP parameters for Out-of-Profile packets to their default values. Displays the current ACL re-mark out-profile parameters.
ACL Group configuration Command: /cfg/acl/group <1-384> [ACL Group 1 Menu] This menu allows you to compile one or more ACLs into an ACL Group. Once you create an ACL Group, you can assign the ACL Group to one or more ports. The following table describes the ACL Group Configuration Menu options.
Command: /cfg/rmon [RMON Menu] hist event alarm Remote Monitoring (RMON) allows you to monitor traffic flowing through the switch. The RMON MIB is described in RFC 1757. The following table describes the RMON Configuration Menu options. Table 182 RMON Menu options...
RMON alarm configuration Command: /cfg/rmon/alarm <1-65535> [RMON Alarm 1 Menu] intrval - Set alarm interval sample almtype - Set startup alarm type rlimit flimit revtidx - Set event index to fire on rising threshold crossing fevtidx - Set event index to fire on falling threshold crossing owner delete The Alarm RMON group can track rising or falling values for a MIB object.
Port mirroring is disabled by default. NOTE: See the “Troubleshooting tools” appendix in the HP 10Gb Ethernet BL-c Switch Application Guide for information on how to use port mirroring. The following table describes the Port Mirroring Configuration Menu options.
Port-based port mirroring Command: /cfg/pmirr/monport <port number> [Port 1 Menu] delete The following table describes the port-based Port Mirroring Configuration Menu options. Table 187 Port Mirroring Configuration Menu options Command add <mirrored port> in|out|both rem <mirrored port> delete - Add "Mirrored" port - Rem "Mirrored"...
Use these commands to configure a Failure Detection Pair, which consists of one Link to Monitor (LtM) and one Link to Disable (LtD). When the switch detects a failure on the LtM, it automatically disables the ports in the LtD.
Table 189 Failure Detection Pair Configuration Menu options Command current Link to Monitor configuration Command: /cfg/ufd/fdp/ltm [Failure Link to Monitor Menu] addport - Add port to Link to Monitor remport - Remove port from Link to Monitor addtrnk - Add trunk to Link to Monitor remtrnk - Remove trunk from Link to Monitor addkey remkey...
Link to Disable configuration Command: /cfg/ufd/fdp/ltd [Failure Link to Disable Menu] addport - Add port to Link to Disable remport - Remove port from Link to Disable addtrnk - Add trunk to Link to Disable remtrnk - Remove trunk from Link to Disable addkey remkey The following table describes the Link to Disable (LtD) Menu options.
When the gtcfg command is used, the active configuration will be replaced with the commands found in the specified configuration file. The file can contain a full switch configuration or a partial configuration. The configuration loaded using gtcfg is not activated until the apply command is used.
Operations Menu Introduction Operations-level commands are used for making immediate and temporary changes to switch configuration. The Operations Menu is used for bringing ports temporarily in and out of service. This menu is available only from an administrator and operator login.
RMON configurations to function. Temporarily enables the port. The port will be returned to its configured operation mode when the switch is reset. This command does not enable a port that has been disabled by an ekeying mismatch error.
Description Forces the specified master virtual router on this switch into backup mode. This is generally used for passing master control back to a preferred switch once the preferred switch has been returned to service after a failure. When this command is executed, the current master gives up control and initiates a new election by temporarily advertising its own priority level as 0 (lowest).
Updating the switch software image The switch software image is the executable code running on the switch. A version of the image ships with the switch, and comes pre-installed on the device. As new versions of the image are released, you can upgrade the software running on the switch.
Page 212
HP 10GbE switch. At the Boot Options# prompt, enter: Boot Options# gtimg Enter the name of the HP 10GbE switch software to be replaced: Enter name of switch software image to be replaced ["image1"/"image2"/"boot"]: <image> Enter the hostname or IP address of the FTP or TFTP server: Enter hostname or IP address of FTP/TFTP server: <server name or IP...
Boot Options# image Enter the name of the image you want the switch to use upon the next boot. The system informs you of which image is currently set to be loaded at the next reset, and prompts you to enter a new choice: Currently set to use switch software "image1"...
Confirm upload operation [y/n]: y Selecting a configuration block When you make configuration changes to the switch, you must save the changes so that they are retained beyond the next time the switch is reset. When you execute the save command, your new configuration changes are placed in the active configuration block.
To access the ISCLI, enter the following command from the AOS CLI, and reset the switch: Boot Options# mode iscli The default command-line interface for the HP 10GbE switch is the AOS CLI. To access the AOS CLI, enter the following command and reset the switch: >>...
The Maintenance Menu is used for debugging purposes, enabling you to generate a technical support dump of the critical state information in the switch, and to clear entries in the Forwarding Database and the Address Resolution Protocol (ARP) and routing tables. This menu is available only from an administrator and operator login.
System maintenance options Command: /maint/sys [System Maintenance Menu] flags The System Maintenance Menu is reserved for use by HP technical support. The options are used to perform system debugging. The following table describes the System Maintenance Menu options. Table 197...
If the switch resets for any reason, the management processor (MP) trace buffer is saved into the snap trace buffer area. The output from these commands can be interpreted by HP technical support. - Show a single FDB entry by MAC address...
NOTE: To display all ARP entries currently held in the switch, or a portion according to one of the options listed on the menu above (find, port, vlan, dump), see the “ARP information” section of the “Information Menu” chapter.
Shows routes of a single type. Shows routes of a single tag. Shows routes on a single interface. Shows all routes. Clears the route table from switch memory. - IGMP Snooping Menu - IGMP Multicast Router Port Menu - Clear group and mrouter tables Usage Displays the IGMP Snooping maintenance menu.
- Show all multicast router ports on a single vlan - Show all multicast router ports - Clear multicast router port table Usage Shows IGMP Multicast groups on a single VLAN. Shows all IGMP Multicast routers. Clears IGMP Multicast router data from switch memory. Maintenance Menu 221...
To clear dump information from flash memory, at the Maintenance# prompt, enter: Maintenance# cldmp The switch clears the dump region of flash memory and displays the following message: FLASH dump region cleared. If the flash dump region is already clear, the switch displays the following message: FLASH dump region is already clear.
Panic command Command: /maint/panic The panic command causes the switch to immediately dump state information to flash memory and automatically reboot. To select panic, at the Maintenance# prompt, enter: >> Maintenance# panic A FLASH dump already exists. Confirm replacing existing dump and reboot [y/n]:...