Hot answers tagged

13

Yes, configure it, just because your port channel is good doesn't mean your entire topology necessarily is - just connect another cable between the two switches on an active VLAN and watch the badness happen. I recommend MST (Multiple Spanning Tree) providing the switch supports it - interoperable, backwards compatible and of course, has the obvious benefit ...


12

You can certainly use Port Mirroring with the HP 2915. You can find the information for port mirroring on page B-23 in the documentation for the 2915. You will be able to designate monitoring of inbound and outbound traffic on either individual ports, groups of ports, static port trunks, and one static VLAN. An example to assign a port as the monitoring ...


10

The 1400 is a completely unmanaged switch. There's nothing to connect to with a browser.


8

This took less than 2 seconds on Google: HP networking portal HP ProCurve 5400zl Switch Series - High CPU Utilization (99-100%) after Startup Issue Right after the switch is started, high (99-100%) CPU utilization is observed. Solution When the switch boots, one of the initialization tasks is creation of encryption keys. Having the keys ...


7

Ciscocmd is another option like RANCID which has already been mentioned; http://sourceforge.net/projects/cosi-nms/files/ciscocmd/ Alternatively you could use SNMP. You can send an SNMP write to the device with the location of a config server using an TFTP URL or HTTP URL and setting the "Pull config" option via SNMP; http://www.cisco.com/c/en/us/support/...


7

You have a fundamental problem with your configuration, which is that the configuration digests on core and access switches don't match. [Core-sw]dis stp region-configuration Oper Configuration Format selector : 0 Region name : ***edited*** Revision level : 0 Configuration digest : 0x950fe4b63ba3d47dc4a539d00f613bb9 ...


6

If your devices are not to old netconf is the generic way to do this.


6

You need a router. The HP 2520G is a Layer 2 managed switch, and has no Layer 3 capabilities. This is highlighted in the features tab on hp.com and in the 2520G feature support matrix If you're not able to get funding for a router, maybe you could power up a Vyatta VM at the ProCurve site?


6

If my memory serves, the older Procurve switches used to accept and forward any CoS/DSCP markings they received. You couldn't modify them unless you were on a 5400xl or better switch. It looks like the 2520 and the 3800 allow you to modify whether or not you're using CoS or DiffServ TOS for classification. The top level command you want is qos type-of-...


6

For HP you can use: in user-view : screen-length disable Then all output will be without "page" interruption.


6

You can either adjust the screen length as Konstantin has suggested (screen-length disable isn't available on many switches though) or you can disable paging altogether using no page Re-enable with page.


5

Your problem is, indeed, with routing. Things in VLAN 1 are using 5.1 as the gateway, right? 5.1 doesn't know about any other internal networks. (i.e. VLAN 10) Likewise, the hosts in VLAN 1 don't know about VLAN 10. When clientA tries to ping serverA, the packets go to the ASA and die as it doesn't know where to send them. (it's default route would send ...


5

The HP ProCurve switches can have 802.1p CoS Priorities or DSCP Policies set, honored, changed or honored with new priority. By default, Quality of Service is ENABLED and operates based on 802.1p settings in the packet. Classification is configured primarily on a global basis; but can be configured by VLAN and port. Marking is configured primarily on a ...


5

A better term would be "port mirroring". This concept is generally universal among vendor products. (Cisco would call theirs SPAN, but it's essentially the same thing). You take a range of ports or VLANs, and simply copy all traffic to a destination port, where you'd hook up a PC with wireshark. Try this thread - it's not a complete exhaustive walkthrough ...


5

This depends entirely on the switch model. Simple layer-2 switches, "not likely". The issue is the inability to enter an atomic set of commands. Each configuration change will be active the instant it's entered. So, when you enter primary-vlan xx, the minute you hit enter your connection will fail. With layer-3 switches, "Yes". But it takes a careful ...


5

This sounds like an optical problem in the transceiver module - for whatever reason the optics are not lining up correctly when the connector is clicked into place, but are managing to focus when the connector is pushed in further. I do kinda wonder if everything is clean - filth at a very small scale is the bane of fiber optics in general. If you can't ...


5

TL;DR: MST (IEEE 802.1s) exchanges BPDUs only on instance 0. Don't expect BPDUs on the other instances. VLAN-to-instance mapping must be identical on all MST switches (ref: richardb's answer) for the topology to converge. Extended version: With MST (802.1s), only instance 0 is meant to exchange BPDUs. One of the best writeups about MST I could find is ...


5

First you define the rule, e.g. deny 192.168.1.1 DNS access anywhere, permit everything else: ip access-list extended "rulename" 10 deny udp 192.168.1.1/32 any eq 53 log 9999 permit ip any any exit Then you apply the rule to the VLAN 99: vlan 99 ip access-group "rulename" Edit: There's an implicit last entry deny ip any any that will drop all remaining ...


5

from comment HPE switches with pre-16.x firmware require original or HP-compatible transceivers. A transceiver that's not HPE branded is not activated when inserted, as indicated by LED and in the device log. You don't necessarily need an original HPE module, there's a large "compatible" market with SFPs that electronically claim to be original. With 16.x ...


5

Since i do not know what type of HP switch you have, the general command to use, as you describe is: Switch(config)# password manager user-name admin When pressing enter, you will be prompted to enter password: New password: ******** Please retype new password: ******* Switch(config)# write mem That should be it. The command might change on newer ...


4

Indeed, enable spanning-tree. The 2810 is standard MST by default. Depending on how you have your trunks configured (Trunk vs. LACP), the individual ports could still create a loop. Call it insurance... you may never need it, but the one time you do and it's not there, you'll regret it. (Other networking mistakes could also create a loop.)


4

I was able to get it working with this command sudo screen /dev/ttyS0 38400,cs8,-ixon,ixoff Before running the command, I had to use dmesg to find which of the ttyS or ttyU devices was to be used. Also the parameters after the ttyS device are the exact ones specified in the the HP 1910 manuals. There are other programs such as cu and minicom. I chose GNU ...


4

Straight from Cisco’s Campus Network for High Availability Design Guide, L3 is superior because: – Faster convergence around a link or node failure. – Increased scalability because neighbor relationships and meshing are reduced. – More efficient bandwidth utilization. From Cisco: Campus Network for High Availability Design Guide - Core Layer ...


4

All ports of any VLAN-capable switchs are always in a VLAN. Generally by default, and/or it there's no specific configuration on the port it is in VLAN 1 But you may want to further diagnose the issue. If a port is correctly configured as access for a VLAN, for the device connected on this port there's absolutely no difference with an unmanaged switch. ...


4

On the 1910, you can't simply "permit all VLAN IDs". You need to create each VLAN and assign it as tagged or untagged to the interfaces as required (creating all VLANs first and then assigning them to the ports as a second step is advisable). For instance, if port 1 is your trunk port and 44-47 are access ports associated with VLAN 10 you would assign VLAN ...


4

The 468508-002 is a short-wave (850 nm) 8Gb SFP+ transceiver for Fibre Channel. It is not compatible with Ethernet switches and won't ever work in a 2520. Provision switches like the 2520 series accept their own family of transceivers, e.g. J4858C (1000BASE-SX), J4859C (1000BASE-LX), J8177C (1000BASE-T). Check the transceiver compatibility guide and the ...


4

There are many variables to consider when configuring LAN Authentication, but here is a page from the HP manual on configuring 802.1x, and here is one from the Freeradius Wiki. These two links should get you started.


3

When you are using SSH to access the switch you are using a certain username and password. The fact that you need to elevate your privilege level by using the super command means that the account you are using doesn't have the highest privilege level. So in order to prevent elevating your privilege level via the super command you should already have a ...


3

You need to upgrade to the K.15 series. I also have a 3500yl-48G, and prior to K.15 I definitely saw bugs. sh mac-a never worked properly for me in K.14, but does in K.15. HP-3500yl-48G# sh mac-address 46 Status and Counters - Port Address Table - 46 MAC Address VLANs ------------- ------------ 00005e-00010a 100 ...


3

There's quite a few issues that can cause things like this to happen. I've had a quick look around and apparently there's a common issue with iPhone/iPads roaming where your authentication is WPA+WPA2. You want to set either WPA2/AES or WPA/TKIP. If you can get on the controller, I would run debug (I don't know with HP WLCs) to try and ascertain whether the ...


Only top voted, non community-wiki answers of a minimum length are eligible