Uplink port access:

Establishing a Telnet connection
A Telnet connection offers the convenience of accessing the switch from any workstation connected to the network. Telnet provides the same options for user, operator, and administrator access as those available through the console port. By default, Telnet is enabled on the switch. The switch supports four concurrent Telnet connections. Once the IP parameters are configured, you can access the CLI using a Telnet connection. To establish a Telnet connection with the switch, run the Telnet program on the workstation and enter the telnet command, followed by the switch IP address: telnet <GbE2c Ethernet Blade Switch IP address> You will then be prompted to enter a password. The password entered determines the access level: administrator, operator, or user. See the Accessing the switch section later in this chapter for description of default passwords.
Establishing an SSH connection
Although a remote network administrator can manage the configuration of a switch via Telnet, this method does not provide a secure connection. The Secure Shell (SSH) protocol enables you to securely log into the switch over the network. As a secure alternative to using Telnet to manage switch configuration, SSH ensures that all data sent over the network is encrypted and secure. In order to use SSH, you must first configure it on the switch. See the Secure Shell Server configuration section in the Configuration Menu chapter for information on how to configure SSH. The switch can perform only one session of key/cipher generation at a time. Therefore, an SSH/Secure Copy (SCP) client will not be able to log in if the switch is performing key generation at that time or if another client has just logged in before this client. Similarly, the system will fail to perform the key generation if an SSH/SCP client is logging in at that time.
Command line interface 10
The supported SSH encryption and authentication methods are listed below. Server Host AuthenticationClient RSA authenticates the switch in the beginning of every connection Key ExchangeRSA Encryption: AES256-CBC AES192-CBC AES128-CBC 3DES-CBC 3DES ARCFOUR
User AuthenticationLocal password authentication; Remote Authentication Dial-in User Service (RADIUS) SSH 3.0.1 for Linux (freeware) SecureCRT 4.1.8 (VanDyke Technologies, Inc.) OpenSSH_3.9 for Linux (FC 3) FedoraCore 3 for SCP commands PuTTY Release 0.58 (Simon Tatham) for Windows
The following SSH clients are supported:

Command Usage Displays IEEE 802.1x statistics Displays bridging (dot1) statistics for the port. Displays Ethernet (dot3) statistics for the port. Displays interface statistics for the port. Displays Internet Protocol statistics for the port. Displays link statistics for the port. Displays Remote Monitoring (RMON) statistics for the port. Clears all the statistics on the port.
8021x brg ether if ip link rmon clear

Statistics Menu 62

802.1x statistics
Command: /stats/port <port number>/8021x Authenticator Statistics: eapolFramesRx = eapolFramesTx = eapolStartFramesRx = eapolLogoffFramesRx = eapolRespIdFramesRx = eapolRespFramesRx = eapolReqIdFramesTx = eapolReqFramesTx = invalidEapolFramesRx = eapLengthErrorFramesRx = lastEapolFrameVersion = lastEapolFrameSource = 0 00:00:00:00:00:00 = = = = = = = = = = = = = = = = = = 0 0
Authenticator Diagnostics: authEntersConnecting authEapLogoffsWhileConnecting authEntersAuthenticating authSuccessesWhileAuthenticating authTimeoutsWhileAuthenticating authFailWhileAuthenticating authReauthsWhileAuthenticating authEapStartsWhileAuthenticating authEapLogoffWhileAuthenticating authReauthsWhileAuthenticated authEapStartsWhileAuthenticated authEapLogoffWhileAuthenticated backendResponses backendAccessChallenges backendOtherRequestsToSupplicant backendNonNakResponsesFromSupplicant backendAuthSuccesses backendAuthFails
The following table describes the 802.1x authenticator diagnostics for a selected port: Table 46 802.1x statistics for port
Statistics Authenticator Diagnostics Description
authEntersConnecting authEapLogoffsWhileConnecting
Total number of times that the state machine transitions to the CONNECTING state from any other state. Total number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOLLogoff message. Total number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAPResponse/ Identity message being received from the Supplicant. Total number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant. Total number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout. Total number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure. Total number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a re-authentication request

ipInAddrErrors

ipInUnknownProtos ipInDiscards
ipInDelivers ipOutRequests

ipOutDiscards

ipDefaultTTL

Route statistics

Command: /stats/l3/route Route statistics: ipRoutesCur: ipRoutesMax:

7 4096

ipRoutesHighWater:
The following table describes the Route statistics: Table 58 Route statistics
Statistics Description The total number of outstanding routes in the route table. The maximum number of supported routes. The highest number of routes ever recorded in the route table.
ipRoutesCur ipRoutesMax ipRoutesHighWater

ARP statistics

Command: /stats/l3/arp ARP statistics: arpEntriesCur: 2 arpEntriesHighWater: 4

Statistics Menu 73

The following table describes the Address Resolution Protocol (ARP) statistics: Table 59 ARP statistics
Statistic Description The total number of outstanding ARP entries in the ARP table. The highest number of ARP entries ever recorded in the ARP table.
arpEntriesCur arpEntriesHighWater

DNS statistics

Command: /stats/l3/dns DNS statistics: dnsInRequests: dnsBadRequests: dnsOutRequests: 0
The following table describes the Domain Name System (DNS) statistics: Table 60 DNS statistics
Statistic Description The total number of DNS request packets that have been received. The total number of DNS response packets that have been transmitted. The total number of DNS request packets received that were dropped.
dnsInRequests dnsOutRequests dnsBadRequests

ICMP statistics

Command: /stats/l3/icmp ICMP statistics: icmpInMsgs: icmpInDestUnreachs: icmpInParmProbs: icmpInRedirects: icmpInEchoReps: icmpInTimestampReps: icmpInAddrMaskReps: icmpOutErrors: icmpOutTimeExcds: icmpOutSrcQuenchs: icmpOutEchos: icmpOutTimestamps: icmpOutAddrMasks: 0 icmpInErrors: icmpInTimeExcds: icmpInSrcQuenchs: icmpInEchos: icmpInTimestamps: icmpInAddrMasks: icmpOutMsgs: icmpOutDestUnreachs: icmpOutParmProbs: icmpOutRedirects: icmpOutEchoReps: icmpOutTimestampReps: icmpOutAddrMaskReps: 0

tcpRtoMax

tcpMaxConn
tcpActiveOpens tcpPassiveOpens tcpAttemptFails
tcpEstabResets tcpInSegs tcpOutSegs tcpRetransSegs tcpInErrs tcpCurBuff tcpCurConn tcpOutRsts

UDP statistics

Command: /stats/l3/udp UDP statistics: udpInDatagrams: udpInErrors: udpOutDatagrams: udpNoPorts: 43 1578077
The following table describes the User Datagram Protocol (UDP) statistics: Table 63 UDP statistics
Statistics Description The total number of UDP datagrams delivered to the switch. The total number of UDP datagrams sent from this switch. The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port. The total number of received UDP datagrams for which there was no application at the destination port.
udpInDatagrams udpOutDatagrams udpInErrors udpNoPorts

Statistics Menu 76

IGMP Multicast Group statistics
Command: /stats/l3/igmp Enter VLAN number: (1-4095) 1 -----------------------------------------------------------IGMP Snoop vlan 1 statistics: -----------------------------------------------------------rxIgmpValidPkts: 0 rxIgmpInvalidPkts: 0 rxIgmpGenQueries: 0 rxIgmpGrpSpecificQueries: 0 rxIgmpLeaves: 0 rxIgmpReports: 0 txIgmpReports: 0 txIgmpGrpSpecificQueries: 0 txIgmpLeaves: 0 This menu option enables you to display statistics regarding the use of the IGMP Multicast Groups. The following table describes the IGMP statistics: Table 64 IGMP statistics
Statistic Description Total number of valid IGMP packets received Total number of invalid packets received Total number of General Membership Query packets received Total number of Membership Query packets received from specific groups Total number of Leave requests received Total number of Membership Reports received Total number of Membership reports transmitted Total number of Membership Query packets transmitted to specific groups Total number of Leave messages transmitted
rxIgmpValidPkts rxIgmpInvalidPkts rxIgmpGenQueries rxIgmpGrpSpecificQueries rxIgmpLeaves rxIgmpReports txIgmpReports txIgmpGrpSpecificQueries txIgmpLeaves

OSPF statistics menu

Command: /stats/l3/ospf [OSPF stats Menu] general - Show global stats aindex - Show area(s) stats if - Show interface(s) stats NOTE: This menu is available only on the GbE2c Layer 2/3 Ethernet Blade Switch. The following table describes the OSPF statistics menu options. Table 65 OSPF statistics menu options

Configuration Menu 106

Table 99 Port Configuration Menu options
Command Description Displays the Gigabit Ethernet Physical Link Menu. Displays the Access Control List (ACL)/Quality of Service (QoS) configuration menu. Configures the ports 802.1p priority level. Sets the default VLAN number which will be used to forward frames which are not VLAN tagged. The default number is 1. Note: VLAN 4095 is reserved for switch management. Sets a name for the port (maximum 64 characters). The assigned port name displays next to the port number on some information and statistics screens. Enables or disables Remote Monitoring for the port. RMON must be enabled for any RMON configurations to function. Disables or enables VLAN tagging for this port. It is disabled by default. Disables or enables VLAN tag persistence. When disabled, the VLAN tag is removed from packets whose VLAN tag matches the port PVID. The default value is enabled. Displays the current ports transmission media: copper, fiber, or
gig aclqos 8021ppri pvid <1-4095>
name <1-64 characters>|none
rmon enable|disable tag enable|disable tagpvid enable|disable

*media

This option is only available on uplink ports. This option applies only to the GbE2c Layer 2/3 Ethernet Blade Switch.

*fiber

Configures the ports transmission media as fiber. This option is only available on uplink ports. This option applies only to the GbE2c Layer 2/3 Ethernet Blade Switch. Configures the ports transmission media as copper. This option is only available on uplink ports. This option applies only to the GbE2c Layer 2/3 Ethernet Blade Switch. Configures the ports transmission media as auto. This option is only available on uplink ports. This option applies only to the GbE2c Layer 2/3 Ethernet Blade Switch. Limits the number of broadcast packets per second to the specified value. If disabled (dis), the port forwards all broadcast packets. Limits the number of multicast packets per second to the specified value. If disabled (dis), the port forwards all multicast packets. Limits the number of unknown unicast packets per second to the specified value. If disabled (dis), the port forwards all unknown unicast packets. Enables the port. Disables the port. To temporarily disable a port without changing its configuration attributes, see the Temporarily disabling a port section later in this chapter. Displays current port parameters.

*copper

*automedia
brate <0-262143>|dis mrate <0-262143>|dis drate <0-262143>|dis ena dis
* indicates commands that are available only on the GbE2c Layer 2/3 Ethernet Blade Switch.

Configuration Menu 107

Temporarily disabling a port
To temporarily disable a port without changing its stored configuration attributes, enter the following command at any prompt: Main# /oper/port <port number>/dis Because this configuration sets a temporary state for the port, you do not need to use apply or save. The port state will revert to its original configuration when the switch is reset. See the Menu information section in the Operations Menu chapter for other operations-level commands.

When configuring STP bridge parameters, the following formulas must be used: 2*(fwd-1) > mxage 2*(hello+1) < mxage
Spanning Tree port configuration
Command: /cfg/l2/stp <1-32>/port <port number> [Spanning Tree Port 1 Menu] prior - Set port Priority (0-255) cost - Set port Path Cost (1-65535 (802.1d) / 1-200000000 (MSTP/RSTP)/0 for auto) link - Set port link type (auto, p2p, or shared; default: auto) edge - Enables or disables this port as an edge port fastfwd - Enable/disable Port Fast Forwarding mode on - Turn port's Spanning Tree ON off - Turn port's Spanning Tree OFF cur - Display current port Spanning Tree parameters By default for STP/PVST+, Spanning tree is turned Off for downlink ports (1-16), and turned On for cross-connect ports (17-18), and uplink ports (20-24). By default for RSTP/MSTP, Spanning tree is turned On for all downlink ports (1-16), all cross-connect ports (17-18), and all uplink ports (20-24), with downlink ports configured as Edge ports. Spanning tree port parameters are used to modify STP operation on an individual port basis. STP port parameters include: Port priority Port path cost
The following table describes the Spanning Tree Port Configuration Menu options. Table 112 Spanning Tree Port Configuration Menu options
Command Description Configures the port priority. The port priority helps determine which bridge port becomes the designated port. In a network topology that has multiple bridge ports connected to a single segment, the port with the lowest port priority becomes the designated port for the segment. The range is 0 to 255, and the default is 128. RSTP/MSTP: The range is 0 to 240, in steps of 16 (0, 16, 32.) and the default is 128. Configures the port path cost. The port path cost is used to help determine the designated port for a segment. Generally speaking, the faster the port, the lower the path cost. The range is 1 to 65535. The default is 10 for 100Mb/s ports, and 1 for Gigabit ports. A value of 0 indicates that the default cost will be computed for an autonegotiated link speed. RSTP/MSTP: The range is 1 200000000, and the default it 20000 for Gigabit ports.

prior <0-255>

Trunk configuration

Command: /cfg/l2/trunk <1-12> [Trunk group 1 Menu] add - Add port to trunk group rem - Remove port from trunk group ena - Enable trunk group dis - Disable trunk group del - Delete trunk group cur - Display current Trunk Group configuration Trunk groups can provide super-bandwidth connections between switches or other trunk capable devices. A trunk is a group of ports that act together, combining their bandwidth to create a single, larger port. Up to 12 trunk groups can be configured on the switch, with the following restrictions. Any physical switch port can belong to no more than one trunk group. Up to six ports/trunks can belong to the same trunk group. All ports in a trunk must have the same configuration for speed, flow control, and auto negotiation. Trunking from other devices must comply with Cisco EtherChannel technology. By default, port 17 and port 18 are trunked to support an internal switch-to-switch crosslink trunk. By default, ports 17 and 18 are disabled. NOTE: See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Application Guide for information on how to use port trunks. The following table describes the Trunk Group Configuration Menu options. Table 115 Trunk Group Configuration Menu options
Command Description Adds a physical port to the current trunk group. Removes a physical port from the current trunk group. Enables the current trunk group. Turns the current trunk group off. Removes the current trunk group configuration. Displays current trunk group parameters.
add <port number> rem <port number> ena dis del cur

Configuration Menu 119

IP Trunk Hash configuration
Command: /cfg/l2/thash [IP Trunk Hash Menu] set - IP Trunk Hash Settings Menu cur - Display current IP trunk hash configuration The following table describes the IP Trunk Hash Configuration Menu options. Table 116 IP Trunk Hash Configuration Menu options
Command Description Displays the Trunk Hash Settings menu. Display current trunk hash configuration.

set cur

Layer 2 IP Trunk Hash configuration
Command: /cfg/l2/thash/set [set IP Trunk smac dmac sip dip cur Hash Settings Menu] - Enable/disable smac hash - Enable/disable dmac hash - Enable/disable sip hash - Enable/disable dip hash - Display current trunk hash setting

Command Description Sets the authentication key for this OSPF packet. Deletes the authentication key for this OSPF packet. Displays the current MD5 key configuration.

key delete cur

IGMP configuration
Command: /cfg/l3/igmp [IGMP Menu] snoop mrouter igmpflt on off cur IGMP Snoop Menu Static Multicast Router Menu IGMP Filtering Menu Globally turn IGMP ON Globally turn IGMP OFF Display current IGMP configuration
IGMP Snooping allows the switch to forward multicast traffic only to those ports that request it. IGMP Snooping prevents multicast traffic from being flooded to all ports. The switch learns which server hosts are interested in receiving multicast traffic, and forwards it only to ports connected to those servers. The following table describes the IGMP Menu options. Table 142 IGMP Snoop Menu options
Command Description Displays the IGMP Snoop Menu. Displays the Static Multicast Router Menu. Displays the IGMP Filtering Menu. Globally turns IGMP on. Globally turns IGMP off. Displays the current IGMP configuration parameters.
snoop mrouter igmpflt on off cur

Configuration Menu 136

IGMP snooping configuration
Command: /cfg/l3/igmp/snoop [IGMP Snoop Menu] timeout - Set report timeout mrto - Set multicast router timeout qintrval - Set IGMP query interval robust - Set expected packet loss on subnet aggr - Aggregate IGMP report srcip - Set source ip to use when proxying GSQ add - Add VLAN(s) to IGMP Snooping rem - Remove VLAN(s) from IGMP Snooping clear - Remove all VLAN(s) from IGMP Snooping fastlv - Enable/disable Fastleave processing in VLAN cur - Display current IGMP Snooping configuration The following table describes the IGMP Snoop Configuration Menu options. Table 143 IGMP Snoop Menu options
Command Description Sets the Maximum Response Time (MRT) for IGMP hosts. MRT is one of the parameters used to determine the age out period of the IGMP hosts. Increasing the timeout increases the age out period. The range is from 1 to 255 seconds. The default is 10 seconds Configures the age-out period for the IGMP Mrouters in the Mrouter table. If the switch does not receive a General Query from the Mrouter for mrto seconds, the switch removes the multicast router from its Mrouter table. The range is from 1 to 600 seconds. The default is 255 seconds. Sets the IGMP router query interval. The range is 1-600 seconds. The default value is 125. Configures the IGMP Robustness variable, which allows you to tune the switch for expected packet loss on the subnet. If the subnet is expected to be lossy (high rate of packet loss), then increase the value. The default value is 2. Enables or disables IGMP Membership Report aggregation. Configures the source IP address used as a proxy for IGMP Group Specific Queries. Adds the VLAN to IGMP Snooping. Removes the VLAN from IGMP Snooping. Removes all VLANs from IGMP Snooping. immediately remove a port from the IGMP port list, if the host sends a Leave message, and the proper conditions are met. This command is disabled by default.

timeout <1-255>

mrto <1-600>
qintrval <1-600> robust <2-10>
aggr disable|enable srcip <IP address> add <1-4095> rem <1-4095> clear
fastlv <1-4095> disable|enable Enables or disables FastLeave processing. FastLeave allows the switch to

ena dis cur

Enables IGMP Snooping. Disables IGMP Snooping. Displays the current IGMP Snooping parameters.

Configuration Menu 137

IGMP static multicast router configuration
Command: /cfg/l3/igmp/mrouter [Static add rem cur Multicast Router Menu] - Add port as Multicast Router Port - Remove port as Multicast Router Port - Display current Multicast Router configuration
The following table describes the Static Multicast Router Configuration Menu options. NOTE: When you configure a static multicast router on a VLAN, the process of learning multicast routers is disabled for that VLAN. Table 144 IGMP Static Multicast Router Menu
Command Description Selects a port/VLAN combination on which the static multicast router is connected, and configures the IGMP version (1 or 2) of the multicast router.
add <port number> <1-4095> <1-2>
Port number must be an external port (19-24). combination.
remove <port number> <1-4095> <1-2> Removes a static multicast router from the selected port/VLAN cur
Displays the current IGMP Static Multicast Router parameters.
IGMP filtering configuration
Command: /cfg/l3/igmp/igmpflt [IGMP Filter Menu] filter - IGMP Filter Definition Menu port - IGMP Filtering Port Menu ena - Enable IGMP Filtering dis - Disable IGMP Filtering cur - Display current IGMP Filtering configuration The following table describes the IGMP Filter Configuration Menu options. Table 145 IGMP Filtering Menu
Command Description Displays the IGMP Filter Definition Menu. Displays the IGMP Filtering Port Menu. Enables IGMP filtering globally. Disables IGMP Filtering globally. Displays the current IGMP Filtering parameters.
filter <1-16> port <port number> ena dis cur

Configuration Menu 138

IGMP filter definition
Command: /cfg/l3/igmp/igmpflt/filter <1-16> [IGMP Filter 1 Definition Menu] range - Set IP Multicast address range action - Set filter action ena - Enable filter dis - Disable filter del - Delete filter cur - Display current IGMP filter configuration The following table describes the IGMP Filter Definition Menu options. Table 146 IGMP Filter Definition Menu
Command Description Configures the range of IP multicast addresses for this filter. Enter the first IP multicast address of the ranger, followed by the second IP multicast address of the range. Allows or denies multicast traffic for the IP multicast addresses specified. Enables this IGMP filter. Disables this IGMP filter. Deletes this filters parameter definitions. Displays the current IGMP filter.

Command Description Sets the IP address of the BOOTP server. For example, 100.10.1.1 Sets the IP address of the secondary BOOTP server. For example, 100.10.1.2 Globally turns on BOOTP relay. Globally turns on BOOTP relay. Displays the current BOOTP relay configuration.
addr <IP address> addr2 <IP address> on off cur

Configuration Menu 140

Virtual Router Redundancy Protocol configuration
Command: /cfg/l3/vrrp [Virtual Router vr group if track on off cur Redundancy Protocol Menu] VRRP Virtual Router Menu VRRP Virtual Router Group Menu VRRP Interface Menu VRRP Priority Tracking Menu Globally turn VRRP ON Globally turn VRRP OFF Display current VRRP configuration
NOTE: This menu is available only on the GbE2c Layer 2/3 Ethernet Blade Switch. Virtual Router Redundancy Protocol (VRRP) support on the GbE2c provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRPcapable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address. If the master fails, one of the backup virtual routers will assume routing authority and take control of the virtual router IP address. By default, VRRP is disabled. For more information on VRRP, see the High Availability chapter in the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Application Guide. The following table describes the VRRP Configuration Menu options. Table 150 VRRP Configuration Menu options
Command Description Displays the VRRP Virtual Router Menu. This menu is used for configuring up to 255 virtual routers on this switch. Displays the VRRP virtual router group menu, used to combine all virtual routers together as one logical entity. Group options must be configured when using two or more GbE2c in a hot-standby failover configuration where only one switch is active at any given time. Displays the VRRP Virtual Router Interface Menu. Displays the VRRP Tracking Menu. This menu is used for weighting the criteria used when modifying priority levels in the master router election process. Globally enables VRRP on this switch. Globally disables VRRP on this switch. Displays the current VRRP parameters.

vr <1-255> group

ethfmt eth2|snap|llc tagfmt none|tagged reset cur

ACL Group configuration

Command: /cfg/acl/group <1-762> [ACL Group 1 Menu] add - Add ACL to group rem - Remove ACL from group cur - Display current ACL items in group This menu allows you to compile one or more ACLs into an ACL Group. Once you create an ACL Group, you can assign the ACL Group to one or more ports. The following table describes the ACL Group Configuration Menu options. Table 170 ACL Group Configuration Menu options
Command Description Adds the selected ACL to the ACL Group. Removes the selected ACL from the ACL Group. Displays the current ACL group parameters.
add acl <1-762> rem acl<1-762> cur
Remote Monitoring configuration
Command: /cfg/rmon [RMON Menu] hist event alarm cur RMON History Menu RMON Event Menu RMON Alarm Menu Display current RMON configuration
Remote Monitoring (RMON) allows you to monitor traffic flowing through the switch. The RMON MIB is described in RFC 1757.

Configuration Menu 152

The following table describes the RMON Configuration Menu options. Table 171 RMON Menu options
Command Description Displays the RMON History Menu. Displays the RMON Event Menu. Displays the RMON Alarm Menu. Displays the current RMON configuration.

hist event alarm cur

RMON history configuration
Command: /cfg/rmon/hist <1-65535> [RMON History ifoid rbnum intrval owner delete cur 1 Menu] Set interface MIB object to monitor Set the number of requested buckets Set polling interval Set owner for the RMON group of statistics Delete this history and restore defaults Display current history configuration
The following table describes the RMON History Menu options. Table 172 RMON History Menu options
Command Description Configures the interface MIB Object Identifier. The IFOID must correspond to the standard interface OID, as follows: 1.3.6.1.2.1.2.2.1.1.x The interface OID can have a maximum of 127 characters. Configures the requested number of buckets, which is the number of discrete time intervals over which data is to be saved. The range is from 1 to 65535. The default is 30.
ifoid <1-127 characters>

rbnum <1-65535>

The maximum number of buckets that can be granted is 50. Configures the time interval over which the data is sampled for each bucket. The range is from 1 to 3600 seconds. The default value is 1800 seconds. Enter a text string that identifies the person or entity that uses this history index. The owner can have a maximum of 127 characters. Deletes the selected history index. Displays the current RMON History parameters.
intrval <1-3600> owner <1-127 characters> delete cur

Configuration Menu 153

RMON event configuration
Command: /cfg/rmon/event <1-65535> [RMON Event 1 descn type owner delete cur Menu] - Set description for the event - Set event type - Set owner for the event - Delete this event and restore defaults - Display current event configuration
The following table describes the RMON Event Menu options. Table 173 RMON Event Menu options
Command Description Enter a text string to describe the event. The description can have a maximum of 127 characters. Selects the type of notification provided for this event. For log events, an entry is made in the log table and sent to the configured syslog host. For trap events, an SNMP trap is sent to the management station (/cfg/snmp/trap). Enter a text string that identifies the person or entity that uses this event index. The owner can have a maximum of 127 characters. Deletes this event index. Displays the current RMON Event parameters.
descn <1-127 characters> type none|log|trap|both
owner <1-127 characters> delete cur

RMON alarm configuration

Command: /cfg/rmon/alarm <1-65535> [RMON Alarm 1 oid intrval sample almtype rlimit flimit revtidx fevtidx owner delete cur Menu] - Set MIB oid datasource to monitor - Set alarm interval - Set sample type - Set startup alarm type - Set rising threshold - Set falling threshold - Set event index to fire on rising threshold crossing - Set event index to fire on falling threshold crossing - Set owner for the alarm - Delete this alarm and restore defaults - Display current alarm configuration
The Alarm RMON group can track rising or falling values for a MIB object. The MIB object must be a counter, gauge, integer, or time interval. Each alarm index must correspond to an event index that triggers once the alarm threshold is crossed. The following table describes the RMON Alarm Menu options. Table 174 RMON Alarm Menu options
Command Description Configures an alarm MIB Object Identifier. The alarm OID can have a maximum of 127 characters. Configures the time interval over which data is sampled and compared with the rising and falling thresholds. The range is from 1 to 65535 seconds. The default is 1800 seconds.
oid <1-127 characters> intrval <1-65535>

Configuration Menu 154

If the switch resets for any reason, the management processor (MP) trace buffer is saved into the snap trace buffer area. The output from these commands can be interpreted by HP technical support. The following table describes the Miscellaneous Debug Menu options: Table 188 Miscellaneous Debug Menu options
Command Usage Displays the management processor trace buffer. Header information similar to the following is shown: MP trace buffer at 13:28:15 Fri May 25, 2002; mask: 0x2ffdf748 The buffer information is displayed after the header. Displays the management processor snap (or post-mortem) trace buffer. This buffer contains information traced at the time that a reset occurred. Deletes all flash configuration blocks. The next time the switch is rebooted, it returns to the factory default settings.

snap clrcfg

ARP cache options
Command: /maint/arp [Address Resolution Protocol Menu] find - Show a single ARP entry by IP address port - Show ARP entries on a single port vlan - Show ARP entries on a single VLAN addr - Show ARP entries for switch's interfaces dump - Show all ARP entries clear - Clear ARP cache The following table describes the Address Resolution Protocol Menu options: Table 189 Address Resolution Protocol Menu options
Command Usage Shows a single ARP entry by IP address. For example, 192.4.17.35 Shows ARP entries on a single port. Shows ARP entries on a single VLAN. Shows the list of IP addresses that the switch will respond to for ARP requests. Shows all ARP entries. Clears the entire ARP list from switch memory.
find <IP address> port <port number> vlan <1-4095> addr dump clear
NOTE: To display all ARP entries currently held in the switch, or a portion according to one of the options listed on the menu above (find, port, vlan, dump), see the ARP information section of the Information Menu chapter.

Maintenance Menu 168

IP Route Manipulation options
Command: /maint/route [IP Routing Menu] find - Show a single route by destination IP address gw - Show routes to a single gateway type - Show routes of a single type tag - Show routes of a single tag if - Show routes on a single interface dump - Show all routes clear - Clear route table The following table describes the IP Route Manipulation Menu options: Table 190 IP Route Manipulation Menu options
Command Usage Shows a single route by destination IP address. Shows routes to a default gateway.
type Shows routes of a single type. indirect|direct|local|broadcast|martian| multicast tag fixed|static|addr|rip|ospf| broadcast|martian if <1-256> dump clear

IEEE 802.1 Q-based VLAN

The switch provides support for a total of 255 IEEE 802.1Q VLANs for server grouping and isolation. A VLAN is a network segment configured according to a logical scheme rather than a physical layout. VLANs are used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN. VLANs also logically segment the physical network into different broadcast domains so that packets are forwarded only between ports within the VLAN. This technology enhances performance by conserving bandwidth and improves security by limiting traffic to specific domains. For example, isolate the server blade iLO ports from the rest of the NICs. The iLO ports on Switch 2 are assigned to their own VLAN and go to a dedicated uplink or share an uplink using VLAN tagging. IMPORTANT: The greater the number of VLANs, the greater the switch CPU utilization. For maximum switch performance, HP recommends being judicious when configuring the number of VLANs. NOTE: VLAN 4095 is reserved for future functionality.

Spanning Tree Protocol

The switch supports IEEE 802.1D STP, which allows the blocking of links that form loops between switches in a network. When multiple links between switches are detected, a primary link is established. Duplicated links are blocked from use and become standby links. If the primary link fails, the standby link is activated.

Introduction 10

In addition, the switch provides a spanning tree domain per VLAN. The switch is compatible with Cisco PVST+ and Cisco PVST, when the other device is configured as untagged or configured to use 802.1q tagging. Sixteen spanning tree domains are supported per switch. NOTE: STP 16 is reserved for future functionality. The switch also provides IEEE 802.1s-based MSTP and IEEE 802.1w-based RSTP.
The switch is configured and monitored remotely from an SNMP-based network management station. The switch supports industry-standard SNMP MIBs and proprietary HP enterprise switch MIBs for fault detection and monitoring of switch functionality. In addition, the switch supports various environmental traps such as temperature and fan failure traps. To secure the management interface, the switch administrator configures community strings with two levels of access: Read and Read/Write. Access to the switch is also restricted to only management stations that are members of a specific IP network. This is achieved by configuring the address/mask of that specific network as a restricted management network address/mask.

Port mirroring

The switch allows mirroring of one or multiple ports (source ports) to another port (destination port) for network monitoring and troubleshooting purposes. This technology offers a way for network packet analyzers to view the traffic moving through the switch by providing a copy of the traffic that is currently being passed through any other port. The packets are sent to a network packet analyzer or other monitoring device attached to the mirror port.

Auto-negotiation of duplex mode and speed
Auto-negotiation of duplex mode and speed are configured on the switch. Network adapters that support multiple data speeds, such as Fast Ethernet and Gigabit Ethernet, choose the speed at which they run

Introduction 13

through a procedure called auto-negotiation. Auto-negotiation involves probing the capability of the network using low-level signaling techniques to select compatible Ethernet speeds. Auto-negotiation was originally developed to make the migration from traditional Ethernet to Fast Ethernet products easier.
Redundant images in firmware
The switch stores up to two different software images, called image1 and image2, as well as boot software, called boot. When downloading new software, the ability to specify where it is to be placed (into image1, image2, or boot) is activated. For example, if the active image is currently loaded into image1, load the new image software into image2. This allows a test of the new software and the option to revert back to the original image stored in image1, if needed. CAUTION: Unlike the firmware that has two images, there is only one image of boot supported. Upgrading the boot image replaces the original boot image.

External components

This section describes the rear panel of the switch.

Rear panel

Item 1 2
Description Reset button Health LED
Description Forces the switch to power up or reboot OffNot powered up GreenPowered up and all ports match AmberIndicates a problem such as a port mismatch. For more information, see the HP BladeSystem enclosure setup and installation guide.

UID LED

Introduction 14

Item 4 5

Description DB-9 management serial port RJ-45 ports 20 - 24

Description

CAUTION: Pressing the Reset button while the Health LED is green resets the switch.

Connectors

Item 5
Description Port 20 RJ-45 connector for Gigabit Ethernet uplink Port 21 RJ-45 connector for Gigabit Ethernet uplink Port 22 RJ-45 connector for Gigabit Ethernet uplink Port 23 RJ-45 connector for Gigabit Ethernet uplink Port 24 RJ-45 connector for Gigabit Ethernet uplink

Introduction 15

Installing the switch
Planning the switch configuration.... 16 Installing the switch..... 18 Accessing the switch.... 19 Logging on and configuring the switch.... 20 Cabling the switch..... 21 Supporting software and special considerations.... 21

Connect to the switch console. After connecting, the login prompt displays as shown below.
Enter admin as the default administrator password. The Main Menu displays with administrator privileges:
See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Command Reference Guide for information on configuring the IP address, changing configuration settings, and monitoring switch operation using one of these interfaces:
Local RS-232 serial console management interface Remote Telnet console management interface
See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Browser-based Interface Reference Guide for information on using the embedded HTML interface to manage the switch from anywhere on the network using a standard browser, such as Netscape Navigator or Microsoft Internet Explorer.

Installing the switch 20

See "SNMP MIBs support (on page 42)" for more information on the SNMP agents. This section also describes how to use the MIBs to configure and monitor the switch using a generic SNMP manager, such as HP OpenView Network Node Manager or HP Systems Insight Manager.

Cabling the switch

CAUTION: Do not cable the switch until after configuration. To connect the switch to the network:
Connect the network cables to the switch. Gather the network cables for the right side of the rack. Insert the end of the cable-retaining bracket (provided with the bus bar and power bus boxes) into the cable bracket (1).
Tighten the thumbscrew to secure the cable retaining bracket over the cables (2).
Supporting software and special considerations
Supporting software is available to assist in configuring and managing the switch.
Server Blade and Power Management Module FirmwareProvides firmware and installation instructions required for proper rack location operation. Utilities package and documentationProvides utilities and documentation for switch management. Firmware Upgrade Smart Component (for Microsoft Windows only)Provides quick and easy installation of the switch firmware, firmware upgrade tool, and readme file. A SoftPaq is available for use with Linux operating systems.

Modifications

The FCC requires the user to be notified that any changes or modifications made to this device that are not expressly approved by Hewlett-Packard Company may void the users authority to operate the equipment.

Cables

Connections to this device must be made with shielded cables with metallic RFI/EMI connector hoods in order to maintain compliance with FCC Rules and Regulations.

Canadian notice

This Class A digital apparatus meets all requirements of the Canadian Interference-Causing Equipment Regulations. Cet appareil numrique de la classe A respecte toutes les exigences du Rglement sur le matriel brouilleur du Canada.
European Union regulatory notice
This product complies with the following EU Directives:
Low Voltage Directive 73/23/EEC EMC Directive 89/336/EEC
Compliance with these directives implies conformity to applicable harmonized European standards (European Norms) which are listed on the EU Declaration of Conformity issued by Hewlett-Packard for this product or product family. This compliance is indicated by the following conformity marking placed on the product:
This marking is valid for non-Telecom products and EU harmonized Telecom products (e.g. Bluetooth).
This marking is valid for EU non-harmonized Telecom products. *Notified body number (used only if applicablerefer to the product label)

BSMI notice

Japanese class A notice

Korean class A notice

Laser compliance
This product may be provided with an optical storage device (that is, CD or DVD drive) and/or fiber optic transceiver. Each of these devices contains a laser that is classified as a Class 1 Laser Product in accordance with US FDA regulations and the IEC 60825-1. The product does not emit hazardous laser radiation. Each laser product complies with 21 CFR 1040.10 and 1040.11 except for deviations pursuant to Laser Notice No. 50, dated May 27, 2001; and with IEC 60825-1:1993/A2:2001. WARNING: Use of controls or adjustments or performance of procedures other than those specified herein or in the laser product's installation guide may result in hazardous radiation exposure. To reduce the risk of exposure to hazardous radiation: Do not try to open the module enclosure. There are no user-serviceable components inside. Do not operate controls, make adjustments, or perform procedures to the laser device other than those specified herein. Allow only HP Authorized Service technicians to repair the unit. The Center for Devices and Radiological Health (CDRH) of the U.S. Food and Drug Administration implemented regulations for laser products on August 2, 1976. These regulations apply to laser products manufactured from August 1, 1976. Compliance is mandatory for products marketed in the United States.

Technical specifications

General specifications.... 27 Runtime switching software default settings... 28 Physical and environmental specifications.... 35 Performance specifications..... 35

General specifications

Category Standards: Specification IEEE 802.3 10Base-T Ethernet IEEE 802.3u 100Base-TX Fast Ethernet IEEE 802.3ab 1000Base-T Ethernet IEEE 802.3z 1000Base-SX Ethernet IEEE 802.1D Spanning Tree Protocol IEEE 802.1s Multiple Spanning Tree Protocol IEEE 802.1w Rapid Spanning Tree Protocol IEEE 802.1Q VLAN IEEE 802.3ac Frame Extensions for VLAN IEEE 802.3ad Link Aggregation Protocol (No LACP support) IEEE 802.3x Full-Duplex Flow Control ANSI/IEEE 802.3 Nway Auto-Negotiation Protocols: Data transfer rates: Ethernet Fast Ethernet Gigabit Ethernet Connectors: HP GbE2c switch 10Base-T 100Base-TX 1000Base-T 5 RJ-45, 1 DB-9 Two Pair UTP Category 3, 4, 5 (100 m) EIA/TIA-568 100-ohm STP (100 m) Two Pair or Four Pair UTP Category 5 (100 m) EIA/TIA-568 100-ohm STP (100 m) Four Pair UTP Category 5e (100 m) EIA/TIA-568 100-ohm STP (100 m) Half-Duplex: 10 Mb/s Full-Duplex: 20 Mb/s Half-Duplex: 100 Mb/s Full-Duplex: 200 Mb/s Half-Duplex: 2000 Mb/s Full-Duplex: 2000 Mb/s CSMA/CD
Technical specifications 27
Category Number of ports per switch:
Specification 16 x 1000-Mb/s ports dedicated to server blade for switch communications 2 x 1000-Mb/s ports dedicated to communications between switches that are inserted in 1 and 2, 3 and 4, 5 and 6, or 7 and x 10Base-T/100Base-TX/1000Base-T RJ-45 ports 1 x serial RS-232 DB-9 rear panel management serial port
Runtime switching software default settings

General default settings

Setting Notice Banner User names and passwords Value None None User names and passwords: BOOTP service IP address (if manual IP option is selected) Subnet mask (if manual IP option is selected) Primary default gateway Secondary default gateway Primary DNS server address Secondary DNS server address Default domain name Management network/mask Switch software image on next boot Switch Config file on next boot Display Hostname (sysName) in CLI prompt Idle timeout Telnet status Telnet port Web status Web port userEnabled, password is user operDisabled, no password adminEnabled (cannot be disabled), password is admin
Enabled 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 None 0.0.0.0 / 0.0.0.0 Image 1 Active Disabled 5 minutes Enabled 23 Enabled 80

Technical specifications 30

Setting Log

Value consoleEnabled systemEnabled mgmtEnabled cliEnabled stpEnabled vlanEnabled sshEnabled ntpEnabled ipEnabled webEnabled
RSA Server Key Autogen Interval RSA Server Key Autogen SSH Server SCP-only Administrator Password SSH Server Port SCP Apply and Save RADIUS Server RADIUS Secret Primary RADIUS Server Secondary RADIUS Server RADIUS Server Port RADIUS Server Retries RADIUS Server Timeout RADIUS Backdoor for Telnet Access Re-ARP Period in Minutes MSTP MSTP Default Mode MSTP Region Name MSTP Region Version MSTP Max Hop Count CIST Bridge Max Age CIST Bridge Hello Time CIST Bridge Forward Delay CIST Bridge Priority CIST MAC Address Aging Time CIST Port Priority CIST Port Path Cost MSTP Link Type
0 Disabled On admin 22 Disabled Off None 0.0.0.0 0.0.0.Disabled 10 Disabled RSTP None 20 seconds 2 seconds 15 seconds seconds Auto
Technical specifications 31
Setting MSTP Edge Port TACACS+ Service TACACS+ Primary Secret TACACS+ Secondary Secret Primary TACACS+ Server Secondary TACACS+ Server TACACS+ Server Port
Value Enabled: ports 1-16 Off None None 0.0.0.0 0.0.0.0 49
TACACS+ Server Retries TACACS+ Server Timeout TACACS+ Backdoor for Telnet Access IGMP Snooping IGMP VLANs IGMP Report Timeout IGMP Multicast Router Timeout IGMP Robust Aggregate IGMP Report IGMP Fastleave IGMP Fastleave VLANs IGMP Filtering IGMP Filters Static Multicast Router Port Uplink Failure Detection (UFD) UFD Failure Detection Pair UFD Link To Monitor - Port UFD Link To Monitor Trunk UFD Link to Disable - Ports UFD Link To Disable Trunks RMON History Group Number RMON History Interface MIB to Monitor RMON History Number of Requested Buckets RMON History Polling Interval RMON History Owner
seconds Disabled Disabled None 10 seconds 255 seconds 2 Disabled Disabled None Disabled None None Off Disabled None None None None None None None
Technical specifications 32
Setting RMON Event Group Number RMON Event Description RMON Event Type RMON Alarm Group Number RMON Alarm MIB to Monitor RMON Alarm Interval RMON Alarm Sample Type RMON Alarm Type RMON Alarm Rising Threshold RMON Alarm Falling Threshold
Value None None None None None 1800 abs either 0 0
RMON Alarm Rising Event 0 Index RMON Alarm Falling Event 0 Index RMON Alarm Owner IP Forwarding Configurable User Name admpw Configurable User Name opw Configurable User Name usrpw Configurable User Name UID 1-10 Uplink Fast THASH - enable Null Disabled admin Disabled user Disabled Disabled SIP and DIP

Enabled Enabled Enabled Enabled Enabled
Physical and environmental specifications
Category DC inputs Power consumption Operating temperature Storage temperature Operating humidity Storage humidity Switch dimensions Weight Safety Specification 12VDC: 2.0A maximum per switch 25 W maximum per switch 10 to 40 C (50 to 104 F) -40 to 70 C (-40 to 158 F) 5% to 95% RH noncondensing 5% to 95% RH noncondensing 267.7 x 192.79 x 27.94 mm (10.5 x 7.5 x 1.1 in.) 1.8 Kg (3.97 lbs.) TUV to UL 60950-1, and CAN/CSA C22.2 No. 60950-1 and to EN 60950-1 CE Marking RoHS 5/6 compliant
Performance specifications
Category Transmission method Memory Specification Store-and-forward 128 MB main, 16 MB flash, and 1 MB shared packet buffer memory per switch
Technical specifications 35
Category MAC address table size Packet forwarding rate
Specification 8 KB per switch 1,488,095 packets per second with 64 byte packets per port (for 1000 Mb/s)
Maximum external 5 X 1 GB port = 5 X 1,488,095 = 7,440,475 pps per port packet switch forwarding rate Best downlink external port packet forwarding rate ratio Interswitch xconnects across enclosure backplane MAC address learning Forwarding table age time 16 : 5
2 X 1 GB ports bundled in Port Trunk of 2 GB size
Automatic update Maximum age: 1 to 1,000,000 seconds Default: 300 seconds
Technical specifications 36
Performing a serial download
Introduction.... 37 Serial upgrade of boot code firmware image procedure.... 37 Serial upgrade of operating system firmware procedure.... 39
Perform a serial download of the switch operating system firmware, or boot code firmware if upgrading a switch directly from any existing OS or boot code images. This procedure requires:
A computer running terminal emulation software A standard null modem cable with a female DB-9 connector A switch OS firmware and/or boot code images
Serial upgrade of boot code firmware image procedure
To perform a serial upgrade of the switch boot code firmware image, usually named pGbE2c_b_100.bin:
Using the null modem, connect the console port of the switch to the serial port of a PC that supports XModem/1K XModem. Start HyperTerminal (part of Microsoft Windows) or equivalent terminal emulation application (depending on the computer operating system), and set the parameters for the terminal emulation console:

Value None 1 None

Parameter Baud rate Date bits Parity Stop bits Flow control 3.

Power on the switch.

Hold down the Shift key and press the D key repeatedly during the Memory Test, until this message appears:

If you do not have any of the suggested equipment for proper grounding, have an authorized reseller install the part. For more information on static electricity or assistance with product installation, contact an authorized reseller.
Electrostatic discharge 45

RJ-45 pin specification

Standard RJ-45 receptacle/connector... 46
Standard RJ-45 receptacle/connector
When connecting the switch to a switch, bridge, or hub, an Ethernet cable is necessary. The table indicates the pin number and wire color assignments for the switch-to-network adapter card connection, and the Ethernet cable for the switch-to-switch, switch-to-hub, or switch-to-bridge connection.
Contact Media direct interface signal Tx + (transmit) Tx - (transmit) Rx + (receive) Not used Not used Rx - (receive) Not used Not used Color match White/Orange Orange/White White/Green Blue/White White/Blue Green/White White/Brown Brown/White
The table provides the same information for the Gigabit over Copper ports.
Contact Media direct interface signal BI_DA+ BI_DABI_DB+ BI_DC+ BI_DCBI_DBBI_DD+ BI_DDColor match White/Orange Orange/White White/Green Blue/White White/Blue Green/White White/Brown Brown/White
RJ-45 pin specification 46

Troubleshooting

Forgotten administrator user name and password that was configured on the switch.. 47 Health LED on the switch is not on... 47 Health LED on the switch stays amber for more than 30 seconds and switch does not boot.. 48 No link LED appears, even after plugging the Category 5 cable in the RJ-45 connector of the external port. 48 Cannot access the switch serial console interface using null modem connection from a PC Terminal Emulation Program.... 48 Error message that the switch failed to complete the system self-testing appears on the serial console screen.. 48 The switch fails to get its IP settings from the BOOTP server, even though by default it is configured for BOOTP 49 The keyboard locks up when using HyperTerminal to log on to the switch through the console interface. 49 Cannot connect to the switch console interface remotely using Telnet.. 49 Password is not accepted by the switch using the remote console interface immediately after a reboot. 49 Cannot connect to the switch console interface remotely using SSH.. 49 Cannot connect to the switch SNMP interface.... 50 The port activity LEDs continuously indicate activity after connecting more than one port to another switch or destination device..... 50 Cannot connect to the switch remotely using the Web interface.. 50 Cannot enable a port in multiple VLANs while configuring VLANS... 51 The switch does not let the user enable two adjacent ports into two different VLANs while assigning the ports to VLANs..... 51 While using TFTP to download firmware, the switch fails to connect to the TFTP server, or after connection the download fails..... 51 The switch fails to connect to the TFTP server while using TFTP to download or upload a configuration file, or after connection the download or upload fails.... 51 The console screen displays a message to change the baud rate for the terminal emulation session for XModem transfer after forcing the switch into the download mode, and does not display CCCC.. 52 The download fails after starting to download the firmware file.. 52 The switch configuration is corrupt.... 52

Troubleshooting 48

The switch fails to get its IP settings from the BOOTP server, even though by default it is configured for BOOTP
The switch is not connected properly to the network. Check the cable and connections and be sure that there is network connectivity between the switch and the BOOTP server. The BOOTP server is not available on the network or VLAN that is attached to the switch management port. Be sure that the BOOTP server is present on the network or VLAN attached to the switch. The BOOTP server cannot offer IP settings to the switch because no IP addresses are available. Add additional IP addresses as necessary. The switch timed out its request for IP settings. Reset the switch.
The keyboard locks up when using HyperTerminal to log on to the switch through the console interface
Action: Scroll lock is on. Press the Scroll Lock key on the keyboard and be sure that the scroll lock is off.
Cannot connect to the switch console interface remotely using Telnet
The switch IP address is not configured or correct.
From the serial console interface, be sure that the switch IP address is configured and valid on the network. Use the correct IP address to establish the Telnet connection with the switch.
The setting allowing access to the switch using the Telnet interface is disabled. From the serial console interface, be sure that the Telnet interface is enabled. The management network address/mask (if used) does not contain the IP address of the management station. From the serial console interface, be sure that the Management Network Address/Mask contains the IP address of the management station.
Password is not accepted by the switch using the remote console interface immediately after a reboot
Action: The switch is still working on network convergence. Wait up to 10 seconds for the password to be accepted.
Cannot connect to the switch console interface remotely using SSH

Troubleshooting 49

From the serial console interface, be sure that the switch IP address is configured and valid on the network. Use the correct IP address to establish the SSH connection with the switch.

The setting allowing access to the switch using the SSH interface is disabled. From the serial console interface, be sure that the SSH interface is enabled and all the settings are configured correctly. The management network address/mask (if used) does not contain the IP address of the management station. From the serial console interface, be sure that the management network address/mask contains the IP address of the management station.
Cannot connect to the switch SNMP interface
From the serial console interface, be sure that the switch IP address is configured and valid on the network. Use the correct IP address to establish the SNMP connection with the switch.
The management network address/mask (if used) does not contain the IP address of the management station. From the serial console interface, be sure that the management network address/mask contains the IP address of the management station.
The port activity LEDs continuously indicate activity after connecting more than one port to another switch or destination device
Action: Because there are multiple links across this device and the destination device, they form loops, which cause broadcast storms. Enable STP for multiple links. This setting prevents loops and maintains standby links for resilience in case of primary link failure.
Cannot connect to the switch remotely using the Web interface
From the serial console interface, be sure that the switch IP address is configured and valid on the network. Use the correct IP address to establish the Web connection with the switch.
Access to the switch using the Web interface is disabled. From the serial console interface, be sure that the Web interface is enabled. The Proxy server settings are configured on the Internet browser and the proxy server does not know the switch IP address. Disable the manual proxy settings on the Web browser and let it automatically find Web servers using the IP address.

Troubleshooting 50

Cannot enable a port in multiple VLANs while configuring VLANS
Action: A port is part of only one VLAN unless the port is a tagged port. Be sure that the port is enabled as a tagged port.
The switch does not let the user enable two adjacent ports into two different VLANs while assigning the ports to VLANs
Action: The ports are two adjacent ports that are bundled in a Port Trunk. Two ports that are assigned to a Port Trunk cannot be assigned to two different VLANs. Either break the trunk to assign it two different VLANs or assign the ports to one VLAN.

While using TFTP to download firmware, the switch fails to connect to the TFTP server, or after connection the download fails
The TFTP server is not available to connect to or there is connectivity failure between the switch and TFTP server.
Be sure that the IP address of the TFTP server is correct. Be sure that the TFTP server exists on the same network and VLAN as the switch. Be sure that the TFTP server can be pinged from the switch and vice versa. Be sure that a valid firmware file exists on the TFTP server to download to the switch. On the switch, check the file name configured to download.
The firmware file is not found on the TFTP server. The file name could be wrong.
The TFTP server was started with a configured directory. The switch must be configured using the full path name, if it is not in the directory specified in the TFTP server.
The switch fails to connect to the TFTP server while using TFTP to download or upload a configuration file, or after connection the download or upload fails
The TFTP server is not available to connect or there is a connectivity failure between the switch and the TFTP server.

Troubleshooting 51

Be sure that the TFTP server exists on the same network or VLAN as that of the switch. Be sure that the TFTP server can be pinged from the switch and vice versa. Be sure that the IP address of the TFTP server is correct. Be sure that a valid configuration file exists on the TFTP server to download to the switch. On the switch, check the file name configured to download or upload.
The configuration file is not found on the TFTP server. The file name could be wrong.
The console screen displays a message to change the baud rate for the terminal emulation session for XModem transfer after forcing the switch into the download mode, and does not display CCCC.
Action: The terminal emulation session baud rate does not match the switch serial console baud rate in the download mode. Change the baud rate of the terminal emulation session to match the switch serial console baud rate in the download mode. IMPORTANT: The baud rate for the switch serial console in the download mode and runtime mode are two separate settings.
The download fails after starting to download the firmware file
Action: The firmware file is not the correct one or is corrupt. Obtain the latest firmware file that is specified for this switch.
The switch configuration is corrupt
Action: An error was made when saving the switch configuration. Reboot the switch and reload the factory settings. This action clears all settings and restores them to the initial values that were present when the switch was purchased. See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Command Reference Guide for more information. After reloading the factory settings, reconfigure the switch settings.

cabling the switch 21 configuration and management of switch 8, 20 configuration, troubleshooting 52 configuring multiple switches, using a configuration file 18 configuring multiple switches, using scripted CLI commands 18 configuring the switch, manually 18
laser compliance 26 Layer 2 switching 10 link LED, troubleshooting 48 load balancing 11 logging on to the switch 20
default configuration 16, 28 default settings 28 diagnostic tools 9 duplex mode, auto-negotiation of 13
Network Time Protocol (NTP) 12
operating system firmware, performing a serial upgrade 39 overview, product 6
electrostatic discharge 45 enterprise class performance 6 external components 14
password, troubleshooting 47, 49 performing a serial download 37 planning switch configuration 16 port mapping 9 port mirroring 11 port trunking 11

features 6 firmware 21

Index 57
rear panel components 14 redundancy 8, 9, 10, 14 redundant crosslinks 9 redundant images in firmware 14 redundant paths to server bays 10 regulatory compliance notices 24, 25 Remote Authentication Dial-in User Service (RADIUS) 12 replacing the switch 22 RJ-45 pin specification 46 RJ-45, standard connector 46 runtime switching software, default settings 28

upgrading the switch 22

VLANs, troubleshooting 51

XModem 13

Secure Copy (SCP) 13 Secure Shell (SSH) 13 security features 17 serial console interface, troubleshooting 48, 49 serial download, performing 37 Simple Network Management Protocol (SNMP) 11, 55 SNMP interface, troubleshooting 50 SNMP Manager Software 42 SNMP MIBs support 42 SNMP MIBs, supported 43 SNMP traps, supported 43 Spanning Tree Protocol (STP) 10 specifications, environmental 35 specifications, performance 35 specifications, physical 35 specifications, technical 27 speed, auto-negotiation of 13 SSH, troubleshooting 49 store and forward switching scheme 11 supported SNMP MIBs 43 supported SNMP traps 43 supported technologies 10 switch redundancy 8 switch self-test, troubleshooting 48
technical specifications 27 Telnet, troubleshooting 49 Terminal Access Controller Access Control System Plus (TACACS+) 12 TFTP, troubleshooting 51 Trivial File Transfer Protocol (TFTP) 11 troubleshooting 47