7 votes
Accepted

HP Procurve 5406zl - ACL issue

According to the Access Security Guide for your device, the first address and mask of an ACE is source and the second address and mask is the destination. (Just in case, an ACE is an Access Control ...
user avatar
6 votes
Accepted

Spanning-Tree Interoperability between ProCurve core & Cisco access layer

Cisco PVST uses a non-standard destination MAC for BPDUs on all VLANs, so HP will not understand it. To the Cisco switch, it is the only switch on VLANs 2-14, which is why it thinks it is the root. ...
user avatar
  • 63k
5 votes

Switch security when in an unsecured location

I'd use a patch panel protector if port security was a real issue. Of course, this depends on the access needed, frequency of physical port changes, and the composition of the rest of the rack/...
user avatar
  • 369
5 votes
Accepted

Multiple Spanning-Tree. Same VLANs on instance for all switches?

The switches in a MSTP domain do agree which VLANs are mapped to which instances. Altering the mapping will change the configuration digest. The result of that will be two separate, degenerate MSTP ...
user avatar
  • 1,548
5 votes
Accepted

Computer mac address appearing on more than one switch

2 of those 3 ports are ports that connect to another switch. If you don't know which ones, I don't know HP command syntax but there is probably a command like show mac port xx, if that show multiple ...
user avatar
  • 2,628
5 votes
Accepted

Port Security Or 802.1X Authentication On Non-Server Network

The 2910al supports 802.1X port security as authenticator, using RADIUS over EAP or PEAP. Depending on your exact goals, an additional router is not required but you do need a RADIUS server. Check the ...
user avatar
  • 71.7k
5 votes
Accepted

Why does the HP Procurve show MAC addresses as 64bit and what do the first 16bits represent?

P1.17 is ancient (March 2010). Our 1810Gs - v1 and v2 - show MAC addresses as 48 bit. I'd update the firmware; P2.23 is latest for v1. If you do need an answer to what the two additional octets ...
user avatar
  • 71.7k
4 votes
Accepted

HP Networking Switch CLI Comments?

Although there's no direct equivalent to the Cisco IOS "!" to add comment lines to an HP ProCurve switch config file, you can achieve a similar result by using multiple "alias" commands within the ...
user avatar
  • 56
4 votes

Switch security when in an unsecured location

You also need to consider console port security - ie making sure AAA is enabled on the console. If the ProCurve doesn't support AAA on the console port, then make sure the login password for the ...
user avatar
  • 8,887
4 votes

How do I connect to an HP 1910 switch console from GNU screen?

I was able to get it working with this command sudo screen /dev/ttyS0 38400,cs8,-ixon,ixoff Before running the command, I had to use dmesg to find which of the ttyS or ttyU devices was to be used. ...
user avatar
4 votes

Spanning-Tree Interoperability between ProCurve core & Cisco access layer

The only standards compliant STP method common to all switches is MST. You don't have to go nuts with it, 'tho -- running everything from the CIST is fine. (I do just that between half a dozen vendors....
user avatar
  • 29.7k
4 votes
Accepted

what will change in a trunk between lacp mode and trunk mode?

LACP is a protocol where both side negotiate the trunk - if either side doesn't use LACP both (all) links will stay separate. STP may step in and prevent a bridge loop. A static trunk uses no ...
user avatar
  • 71.7k
4 votes
Accepted

How to set IPv6 RA values for RDNSS and DNSSL on HPE/Aruba 5400R

As it turns out this cannot be configured in a sane manner. Both values are taken from the configuration of the DNS resolver and search-list for the management plane of the switch. This implies that ...
user avatar
4 votes

HP ProCurve 2520G Switch not accepting HP transceiver SFP

The 468508-002 is a short-wave (850 nm) 8Gb SFP+ transceiver for Fibre Channel. It is not compatible with Ethernet switches and won't ever work in a 2520. Provision switches like the 2520 series ...
user avatar
  • 71.7k
4 votes
Accepted

Subinterface on Cisco ASA 5550 does not work with VLAN on HP ProCurve

Solved. I registered VLAN 810 on two interfaces on switch to ASA (we have two devices ASA in stack failover). Don't trust GVRP. :-)
user avatar
  • 155
4 votes

Prevent Users from Setting Specific Static IP

The 5400 series supports DHCP snooping with ARP protection which is your best option. Those force a client to use the IP address it is assigned by the authorized DHCP server(s). Any other traffic is ...
user avatar
  • 71.7k
4 votes
Accepted

MSTP with different VLANs blocking port

In order for MSTP to split VLAN traffic across redundant trunks you need to configure MSTP instances in the exact same way on all switches within a region. The switches exchange config digests that ...
user avatar
  • 71.7k
4 votes

MSTP with different VLANs blocking port

You have a fairly common problem with MSTP, which is thinking it should work like PVST, when it's a completely different animal. The concept that you have to get your head around is that in PVST you ...
user avatar
  • 1,548
4 votes
Accepted

Tagged-only VLANs

What is the purpose of a vlan containing only tagged ports? Likely, those (trunk) ports interconnect VLANs spanning multiple switches. It's also possible that a trunk leads to a VLAN-aware host or a ...
user avatar
  • 71.7k
3 votes

HP ProCurve Auto WOL MAC Address of offline devices

an automated WOL system can save minutes of time per machine I don't see how. Let's suppose a person carries the machine in, sets on desk, plugs in power, plugs in network. After all that, how hard ...
user avatar
  • 29.7k
3 votes

Dropping packets routed between VLANs

If the problem only happens between VLANs, you need to look at the router which is used to route between the VLANs. It may be overloaded on its CPU or buffers, but that is the common point between ...
user avatar
  • 94.1k
3 votes
Accepted

Distributed Trunking With core and Access Swtiches?

HP Switches support distributed trunking, so yes you can connect a switch to the trunk. The trunk is a single logical link, so yes the traffic is load balanced based on some combination of source and ...
user avatar
  • 63k
3 votes
Accepted

HP Procurve 5412zl Management unresponsive via IP when cpu high

There's a very simple answer. Management traffic such as SSH, HTTP, ICMP is handled by the CPU. The main purpose of the switch is traffic forwarding, and management traffic has the lowest priority. ...
user avatar
3 votes

How can I change the IP address of a running switch (HP 2510)?

It can be problematic to change an address remotely. The best option is to do it in person from the directly attached console. To move the switch to a different subnet, that is indeed what is required....
user avatar
  • 29.7k
3 votes

How can I change the IP address of a running switch (HP 2510)?

You normally would just overwrite it with e. g.: vlan 1 ip address 10.10.10.11/8 But if you stay on the same subnet, the switch will complain: The IP address (or subnet) 10.10.10.11/8 already exists. ...
user avatar
3 votes

Help setting up multiple IP ranges on same subnet

There are a couple of things you could do: Change the network mask to expand the address range. For example, change the mask length to /23 to double , or /22 to quadruple, the number of network ...
user avatar
  • 94.1k
3 votes

HP ProCurve 2524 - CLI Command to find Fiber Transceiver's Serial Number

show tech transceiver should work on the old Procurves, at least it does on the 2510 and 2600 series. Somewhat newer Provision switches (2910, 2530, ...) support show interfaces transceiver [n] ...
user avatar
  • 71.7k
3 votes

HP ProCurve 2524 - CLI Command to find Fiber Transceiver's Serial Number

Try display transceiver interface <interface-id>.
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible