HP 6125G HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf
HP 6125G Manual
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
HP 6125G manual content summary:
- HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 1
HP 6125 Blade Switch Series Layer 3 - IP Services Configuration Guide Part number: 5998-3156 Software version: Release 2103 Document version: 6W100-20120907 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 2
, or use of this material. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 3
example in case of port isolation 15 Local proxy ARP configuration example in isolate-user-VLAN 16 Configuring ARP snooping 18 Overview 18 Configuration procedure 18 Displaying and maintaining ARP snooping 18 Configuring IP addressing 19 Overview 19 IP address classes 19 Special - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 4
packets 42 Displaying and maintaining the DHCP relay agent 42 DHCP relay agent configuration examples 43 DHCP relay agent configuration example 43 DHCP relay agent Option 82 support configuration example 44 Troubleshooting DHCP relay agent configuration 45 Symptom 45 Analysis 45 Solution 45 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 5
procedure 65 Dynamic domain name resolution configuration example 66 Network requirements 66 Configuration procedure 66 Verifying the configuration 68 Troubleshooting IPv4 DNS configuration 69 Symptom 69 Solution 69 Configuring IP performance optimization 70 Enabling receiving and - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 6
97 Enabling sending of ICMPv6 destination unreachable messages 98 Displaying and maintaining IPv6 basics configuration 98 IPv6 basics configuration example 99 Network requirements 99 Configuration procedure 100 Verifying the configuration 101 Troubleshooting IPv6 basics configuration 105 iv - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 7
task list 124 Configuring a tunnel interface 125 Configuration guidelines 125 Configuration procedure 125 Configuring an IPv6 manual tunnel 126 Configuration prerequisites 126 Configuration guidelines 126 Configuration procedure 126 Configuration example 127 Configuring a 6to4 tunnel 130 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 8
146 Configuration guidelines 146 Configuration procedure 147 Configuration example 148 Displaying and maintaining tunneling configuration 151 Troubleshooting tunneling configuration 152 Symptom 152 Solution 152 Support and other resources 153 Contacting HP 153 Subscription service 153 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 9
Configuring ARP Overview The Address Resolution Protocol (ARP) is used to resolve an IP address into a physical address (Ethernet MAC address, for example). In an Ethernet LAN, a device uses ARP to resolve the IP address of the next hop to the corresponding MAC address. ARP message format ARP - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 10
1. Host A looks in its ARP table to see whether there is an ARP entry for Host B. If yes, Host A uses the MAC address in the entry to encapsulate the IP packet into a data link layer frame and sends the frame to Host B. 2. If Host A finds no entry for Host B, Host A buffers the packet and broadcasts - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 11
is manually configured configure a long static ARP entry: • The vlan-id argument must be the ID of an existing VLAN where the ARP entry resides. The specified Ethernet configure a static ARP entry: Step 1. Enter system view. 2. Configure a static ARP entry. Command Remarks system-view • Configure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 12
can learn: Step 1. Enter system view. 2. Enter Ethernet interface view. Command system-view interface interface-type interface-number 3. Set the maximum minutes by default. Enabling dynamic ARP entry check The dynamic ARP entry check function controls whether the device supports dynamic ARP - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 13
Command 1. Enter system view. system-view 2. Enable dynamic ARP entry check. arp check enable Remarks N/A Optional. Enabled by default. Configuring ARP quick update HP scenario GE1/0/1 GE1/0/2 Switch AP1 AP2 Laptop With ARP quick update enabled, the switch updates the corresponding ARP - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 14
Group Management Protocol (IGMP) multicast mode-The switch sends packets only out of the ports that connect to the cluster members rather than all ports. NOTE: Multicast ARP is applicable to only multicast-mode NLB. To configure multicast ARP: Step Command Remarks 1. Disable the ARP entry check - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 15
users from attacking the switch and enhance security for communications between the router and switch, configure a static ARP entry for the router on the switch. Figure 4 Network diagram Configuration procedure Configure the switch: # Create VLAN 10. system-view [Switch] vlan 10 [Switch - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 16
gateway of Host A and Host B. • Specify 16.1.1.30/24 as the default gateway of Server A and Server B. • Disable the ARP entry check function so that the switch can learn dynamic ARP entries containing multicast MAC addresses. • Configure a static multicast MAC address entry so that only interfaces - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 17
-Vlan-interface1] ip address 16.1.1.30 255.255.255.0 [Switch-Vlan-interface1] quit # Disable the ARP entry check function. [Switch] undo arp check enable # Configure a static multicast MAC address entry. [Switch] mac-address multicast 03bf-1001-0164 interface GigabitEthernet 1/0/2 Gigabi tEthernet - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 18
until the host re-creates the ARP entries. To prevent this problem, enable the gateway to send gratuitous ARP packets periodically. The gratuitous ARP packets contain the gateway's primary IP address or one of its manually configured secondary IP addresses, so the receiving host can update ARP - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 19
see High Availability Configuration Guide. Configuration guidelines Follow these guidelines when you configure gratuitous ARP: packets and set the sending interval. Command system-view gratuitous-arp-learning enable Remarks N/A Optional. Enabled by default. By default, a device does not send - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 20
advantage of common proxy ARP is that you can enable it on a single switch without disturbing routing tables of other routers in the network. Proxy ARP acts as the gateway for hosts that are not configured with a default gateway or do not have routing capability. Local proxy ARP As shown in Figure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 21
is configured, hosts in different secondary VLANs of the isolate-user-VLAN need to communicate at Layer 3. Enabling common proxy ARP To enable common proxy ARP in VLAN interface view: Step 1. Enter system view. 2. Enter interface view. 3. Enable proxy ARP. Command system-view interface interface - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 22
Task Command Remarks Display whether common proxy ARP is enabled. display proxy-arp [ interface configure proxy ARP on the switch to enable communication between the two hosts. Figure 8 Network diagram Configuration procedure # Create VLAN 2. system-view [Switch] vlan 2 [Switch-vlan2 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 23
255.0 # Enable proxy ARP on interface VLAN-interface 2. [Switch-Vlan-interface2] proxy-arp enable After completing preceding configurations, use the ping command to verify the connectivity between Host A and Host D. Local proxy ARP configuration example in case of port isolation Network requirements - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 24
Host B. The ping operation is successful after the configuration. Local proxy ARP configuration example in isolate-user-VLAN Network requirements As shown in Figure 10, Switch B is attached to Switch A. VLAN 5 on Switch B is an isolate-user-VLAN, which includes uplink port GigabitEthernet 1/0/2 and - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 25
GigabitEthernet1/0/1] quit [SwitchB] interface GigabitEthernet 1/0/3 [SwitchB-GigabitEthernet1/0/3] port isolate-user-vlan host [SwitchB-GigabitEthernet1/0/3] quit [SwitchB] isolate-user-vlan 5 secondary 2 3 2. Configure Switch A: # Create VLAN 5 and add GigabitEthernet 1/0/2 to it. system - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 26
ARP snooping feature is used in Layer 2 switching networks. It creates ARP snooping entries using ARP packets, and the entries can be used by manual-mode MFF to answer ARP requests from a gateway. For more information about MFF, see Security Configuration Guide. If ARP snooping is enabled on a VLAN - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 27
Configuring IP addressing This chapter describes IP addressing basic and manual IP address assignment for interfaces. Dynamic IP address assignment (BOOTP and DHCP) are beyond the scope of this chapter. Overview This section describes the IP - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 28
the net ID and subnet ID, and consecutive zeros represent the host ID. Before being subnetted, Class A, B, and C networks use the following default masks (also called natural masks): 255.0.0.0, 255.255.0.0, and 255.255.255.0 respectively. Figure 12 shows how a Class B network is subnetted. Figure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 29
. Command Remarks system-view N/A interface interface-type interface-number N/A ip address ip-address { mask-length By default, no IP address is assigned to | mask } [ sub ] any interface. Configuration example Network requirements As shown in Figure 13, a port in VLAN 1 on a switch is - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 30
Vlan-int1 172.16.1.1/24 172.16.2.1/24 sub 172.16.2.2/24 172.16.2.0/24 Host A Configuration procedure # Assign a primary IP address and a secondary IP address to VLAN-interface 1. system-view [Switch] interface vlan-interface 1 [Switch-Vlan-interface1] ip address 172.16.1.1 255.255.255 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 31
= 25/25/26 ms The output shows that the switch can communicate with the hosts on subnet 172.16.2.0/24 configure the interface to obtain one through BOOTP or DHCP. Configuration procedure To configure IP unnumbered on an interface: Step 1. Enter system view. 2. Enter tunnel interface view. Command - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 32
interface-number Remarks The interface does not borrow IP addresses from other interfaces by default. Displaying and maintaining IP addressing Task Command Remarks Display IP configuration information display ip interface [ interface-type for a specified Layer 3 interface or all interface - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 33
DHCP server on another subnet via a DHCP relay agent. For more information about the DHCP relay agent, see " Configuring DHCP relay agent." DHCP address allocation DHCP supports the following mechanisms for IP address allocation. • Static allocation-The network administrator assigns an IP address to - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 34
allocation process Figure 15 Dynamic IP address allocation process 1. The client broadcasts a DHCP-DISCOVER message to locate a DHCP server. 2. A DHCP server offers configuration parameters such as an IP address to the client, in a DHCP-OFFER message. The sending mode of the DHCP-OFFER is determined - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 35
set to zero. • yiaddr-'Your' (client) IP address, assigned by the server. • siaddr-Server IP address, from which the client obtained configuration parameters. • giaddr-(Gateway) IP address of the first relay agent a request message traveled. • chaddr-Client hardware address. • sname-Server host name - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 36
. Vendor-specific option (Option 43) DHCP servers and clients use Option 43 to exchange vendor-specific configuration information. The DHCP client can obtain the following information through Option 43: • Auto-Configuration Server (ACS) parameters, including the ACS URL, username, and password. 28 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 37
PXE server. 1. Format of Option 43 Network configuration parameters are carried in different sub-options of Option username, and ACS password separated by spaces (0x20): Figure 19 ACS parameter sub-option value field { The value field of the service provider identifier sub-option contains the service - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 38
are two methods for configuring Option 82: • User-defined method-Manually specify the content of Option 82. • Non-user-defined method-Pad Option 82 in the default normal format, verbose format, private format, or standard format. NOTE: Only the DHCP snooping device supports sub-option 9, padded in - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 39
Figure 22 Sub-option 2 in normal padding format • Verbose padding format { Sub-option 1-Contains the user-specified access node identifier (ID of the device that adds Option 82 in DHCP messages), and the type, number, and VLAN ID of the interface - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 40
can be defined as needed. The device supports Option 184 carrying voice related parameters, so user when both the primary and backup calling processors are unreachable. You must define sub-option 1 to make other sub-options take effect. Protocols and standards • RFC 2131, Dynamic Host Configuration - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 41
• RFC 3442, The Classless Static Route Option for Dynamic Host Configuration Protocol (DHCP) version 4 33 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 42
configuration is supported only on VLAN interfaces. Overview Via a relay agent, DHCP clients can communicate with a DHCP server on another subnet to obtain configuration more information about MCE, see Layer 3-IP Routing Configuration Guide. Fundamentals Figure 28 DHCP relay agent application The - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 43
address and other configuration parameters to the relay agent, and the relay agent conveys them to the client. DHCP relay agent support for Option 82 format The DHCP relay agent will... Random Random normal verbose user-defined normal Drop the message. Forward the message without changing - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 44
the message after adding the user-defined Option 82. DHCP relay agent configuration task list Task Enabling DHCP Enabling configurations related to the DHCP relay agent. To enable DHCP: Step 1. Enter system view. 2. Enable DHCP. Command system-view dhcp enable Remarks N/A Disabled by default - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 45
-select command is configured by using the dhcp relay server-group command. Configuration procedure Command system-view dhcp relay server-group group-id ip ip-address interface interface-type interface-number dhcp relay server-select group-id Remarks N/A Not created by default. N/A By default - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 46
feature also supports static bindings. You can also configure static IP-to-MAC bindings on the DHCP relay agent, so users can access service, and enable the DHCP relay agent on the interface. Otherwise, the address check configuration is ineffective. • The dhcp relay address-check enable command - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 47
entries: Step 1. Enter system view. 2. Enable periodic refresh of dynamic client entries. 3. Configure the refresh interval. Command Remarks system-view N/A dhcp relay security refresh enable Optional. Enabled by default. dhcp relay security tracker { interval | auto } Optional. auto by - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 48
checks whether a user is online by manually. To enable offline detection: Step 1. Enter system view. 2. Enter interface view. 3. Enable offline detection. Command system-view interface interface-type interface-number dhcp relay client-detect enable Remarks N/A N/A Disabled by default Configuring - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 49
device name must contain no spaces. Otherwise, the DHCP relay agent will drop the message. Configuration procedure To configure the DHCP relay agent to support Option 82: Step Command 1. Enter system view. system-view 2. Enter interface view. interface interface-type interface-number 3. Enable - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 50
Configure non-user-defined Option 82. 6. Configure user-defined Option 82. Command Remarks • Configure the padding format for Optional. Option 82: By default an 8-bit Type of Service (ToS) field. As defined in RFC 2474, the first six bits set the Differentiated Services Code Point (DSCP) value - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 51
Task Command Remarks Display Option 82 configuration information on the DHCP relay agent. display dhcp relay information { all server-group group-id ] Available in user view DHCP relay agent configuration examples DHCP relay agent configuration example Network requirements As shown in Figure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 52
shown.) # Enable DHCP. system-view [Switch] dhcp enable # Add DHCP server 10.1.1.1 into DHCP server group 1. [Switch] dhcp relay server-group command, use the display dhcp relay security command to view bindings of DHCP relay agents DHCP relay agent Option 82 support configuration example - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 53
Troubleshooting DHCP relay agent configuration Symptom DHCP clients cannot obtain any configuration parameters via the DHCP relay agent. Analysis Problems may occur with the DHCP relay agent or server configuration. Solution To locate the problem, enable debugging and execute the display command - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 54
obtain configuration parameters such as an IP address from the DHCP server. Configuration restrictions • The DHCP client configuration is supported only N/A N/A Disabled by default Setting the DSCP value for DHCP packets An IPv4 packet header contains an 8-bit Type of Service (ToS) field. As - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 55
value for DHCP packets sent by the DHCP client. Command dhcp client dscp dscp-value Remarks Optional. By default, the DSCP value is 56. Displaying and maintaining the DHCP client Task Display specified configuration information. Command display dhcp client [ verbose ] [ interface interface-type - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 56
from authorized DHCP servers With DHCP snooping, the ports of a switch can be configured as trusted or untrusted to make sure that clients obtain IP through. For more information, see Security Configuration Guide. • VLAN mapping-The device replaces service provider VLANs (SVLANs) in packets with - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 57
addresses, MAC addresses, and CVLANs, before sending the packets to clients. For more information, see Layer 2-LAN Switching Configuration Guide. Application environment of trusted ports Configuring a trusted port connected to a DHCP server As shown in Figure 32, the DHCP snooping device port that - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 58
33 Configuring trusted ports in a cascaded network Table 3 Roles of ports Device Switch A Switch B Switch C for security control and accounting purposes. For more information, see "Configuring DHCP relay agent." If DHCP snooping supports Option 82, it handles a client's request according to the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 59
after adding the user-defined Option 82. The handling strategy and padding format for Option 82 on the DHCP snooping device are the same as those on the relay agent. DHCP snooping configuration task list Task Configuring DHCP snooping basic functions Configuring DHCP snooping to support Option 82 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 60
LAN Switching Configuration Guide. • If a Layer 2 Ethernet port is added to an aggregation group, the DHCP snooping configuration of IP-to-MAC dhcp-snooping trust bindings of clients. no-user-binding Remarks N/A Disabled by default. The interface connects to the DHCP server. After DHCP snooping - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 61
10 (a in hexadecimal) and the inner VLAN tag is 20 (14 in hexadecimal), the VLAN ID is 000a.0014. To configure DHCP snooping to support Option 82: Step Command 1. Enter system view. system-view 2. Enter interface view. interface interface-type interface-number 3. Enable DHCP snooping to dhcp - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 62
Step Command Remarks 5. Configure Option 82 in the non-user-defined padding format. Optional. By default, • Configure the padding format for • The padding format for Option 82 is Option 82: normal. dhcp-snooping information format • The code type for the circuit ID { - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 63
configure DHCP snooping entries backup: Step 1. Enter system view. Command specified by default. DHCP snooping entries are stored immediately after this command is used is discarded. Enable MAC address check only on Layer 2 Ethernet ports and Layer 2 aggregate interfaces. To enable MAC address - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 64
only on Layer 2 Ethernet ports, and Layer Command system-view interface interface-type interface-number Remarks N/A N/A dhcp-snooping check request-message Disabled by default Displaying and maintaining DHCP snooping Task Display DHCP snooping entries. Display Option 82 configuration user view 56 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 65
statistics on the DHCP snooping device. Command reset dhcp-snooping packet statistics [ slot slot-number ] Remarks Available in user view DHCP snooping configuration examples DHCP snooping configuration example Network requirements As shown in Figure 34, Switch is connected to a DHCP server - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 66
GigabitEthernet 1/0/1 as trusted. [Switch] interface GigabitEthernet 1/0/1 [Switch-GigabitEthernet1/0/1] dhcp-snooping trust [Switch-GigabitEthernet1/0/1] quit # Configure GigabitEthernet 1/0/2 to support Option 82. [Switch] interface GigabitEthernet 1/0/2 [Switch-GigabitEthernet1/0/2] dhcp-snooping - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 67
as a BOOTP client, the interface can use BOOTP to get information (such as IP address) from the BOOTP server. To use BOOTP, an administrator must configure a BOOTP parameter file for each BOOTP client on the BOOTP server. The parameter file contains information such as MAC address and IP address of - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 68
default, an interface does not use BOOTP to obtain an IP address. Displaying and maintaining BOOTP client configuration Task Command server by using BOOTP. Configuration procedure The following describes only the configuration on Switch B serving as a client. # Configure VLAN-interface 1 to - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 69
Configuring IPv4 DNS Overview Domain Name System (DNS) is a distributed database some applications and let the DNS server translate them into correct IP addresses. DNS services can be static or dynamic. After a user specifies a name, the device checks the local static name resolution table for an - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 70
supports static and dynamic DNS client services. NOTE: If an alias is configured configure static domain name resolution: Step 1. Enter system view. 2. Configure a mapping between a host name and an IPv4 address. Command system-view ip host hostname ip-address Remarks N/A Not configured by default - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 71
configured in interface view. A DNS server configured earlier has a higher priority than one configured later in the same view. A DNS server manually configured Specify a DNS server. 4. Configure a DNS suffix. Command system-view dns resolve Remarks N/A Disabled by default. • (Approach 1) In - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 72
1. Enter system view. Command system-view 2. Specify the source interface for dns source-interface DNS packets. interface-type interface-number Remarks N/A By default, no source interface for | include } regular-expression ] Available in any view reset dns host ip Available in user view 64 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 73
procedure # Configure a mapping between host name host.com and IP address 10.1.1.2. system-view [Sysname] ip host host.com 10.1.1.2 # Use the ping host.com command to verify that the device can use static domain name resolution to resolve domain name host.com into IP address 10 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 74
of the DNS server is 2.1.1.2/16 and the DNS server has a com domain, which stores the mapping between domain name host and IP address 3.1.1.1/16. Configure dynamic domain name resolution and the domain name suffix com on the device that serves as a DNS client so that the device can use domain - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 75
Figure 38 Creating a zone c. On the DNS server configuration page, right click zone com, and select New Host. Figure 39 Adding a host d. On the page that appears, enter host name host and IP address 3.1.1.1. e. Click Add Host. The mapping between the IP address and host name is created. 67 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 76
. system-view [Sysname] dns resolve # Specify the DNS server 2.1.1.2. [Sysname] dns server 2.1.1.2 # Configure com as the name suffix. [Sysname] dns domain com Verifying the configuration # Use the ping host command on the device to verify that the communication between the device and the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 77
Troubleshooting IPv4 DNS configuration Symptom After enabling dynamic domain name resolution, the user cannot get the correct IP address. Solution 1. Use the display dns host ip command to verify that the specified domain name is in the cache. 2. If the specified domain name does not exist, verify - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 78
receive directed broadcasts, the switch determines whether to forward them according to the configuration on the outgoing interface. To enable the device to receive directed broadcasts: Step 1. Enter system view. 2. Enable the device to receive directed broadcasts. Command system-view ip forward - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 79
are on the same network segment (1.1.1.0/24). VLAN-interface 2 of Switch and the server are on another network segment (2.2.2.0/24). The default gateway of the host is VLAN-interface 3 (IP address 1.1.1.2/24) of Switch. Configure the switch so that the server can receive directed broadcasts from the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 80
. An ICMP error message received from a router that does not support RFC 1191 has the MTU of the outgoing interface set to 0. Configure the size of TCP send/receive buffer. Command system-view tcp window window-size Remarks N/A Optional. 8 KB by default. Configuring TCP timers You can configure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 81
Step 1. Enter system view. Command system-view 2. Configure the TCP synwait timer. tcp timer syn-timeout time-value 3. Configure the TCP finwait timer. tcp timer fin-timeout time-value Remarks N/A Optional. 75 seconds by default. Optional. 675 seconds by default. Configuring ICMP to send error - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 82
neither a route nor the default route for forwarding a packet layer protocol of the packet is not supported by the local device, the device users. To prevent such problems, disable the device from sending ICMP error packets. Configuration destination unreachable packets. Command system-view ip - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 83
Displaying and maintaining IP performance optimization Task Command Remarks Display TCP connection statistics. display tcp statistics [ | { begin | packets. reset ip statistics [ slot slot-number ] Available in user view Clear statistics of TCP connections. Clear statistics of UDP traffic. - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 84
• The receiving of directed broadcasts to a directly connected network is disabled by default on the switch. As a result, UDP helper is available only when the ip forward-broadcast command is configured in system view. For more information about reception and forwarding of directed broadcasts to - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 85
default. Displaying and maintaining UDP helper Task Displays information about forwarded UDP packets. Clear statistics about packets forwarded. Command in user view UDP helper configuration example Network requirements As shown in Figure 42, the IP address of VLAN-interface 1 of Switch A is - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 86
# Enable the forwarding broadcast packets with the UDP destination port 55. [SwitchA] udp-helper port 55 # Specify the destination server 10.2.1.1 on VLAN-interface 1 in public network. [SwitchA] interface vlan-interface 1 [SwitchA-Vlan-interface1] ip address 10.110.1.1 16 [SwitchA-Vlan-interface1] - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 87
Configuring IPv6 basics Overview Internet Protocol Version 6 (IPv6), also called IP next generation (IPng), was reduce the IPv6 routing table size through route aggregation. Address autoconfiguration To simplify host configuration, IPv6 supports stateful and stateless address autoconfiguration. 79 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 88
to automatically generate an IPv6 address and other configuration information by using its link-layer address and -in security IPv6 defines extension headers to support IPsec. IPsec provides end-to-end security ICMPv4 Redirect messages and provides a series of other functions. Flexible extension - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 89
addresses, the loopback address, and the unspecified address. • Global unicast addresses, equivalent to public IPv4 addresses, are provided for network service providers. This type of address allows efficient prefix aggregation to restrict the number of global routing entries. • Link-local addresses - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 90
• A loopback address is 0:0:0:0:0:0:0:1 (or ::1). It cannot be assigned to any physical interface and can be used by a node to send an IPv6 packet to itself in the same way as the loopback address in IPv4. • An unspecified address is 0:0:0:0:0:0:0:0 (or ::). It cannot be assigned to any node. Before - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 91
of an ISATAP tunnel interface are 0000:5EFE, whereas those of other tunnel interfaces are all zeros. For more information about tunnels, see "Configuring tunneling." • On an interface of another type The EUI-64 address-based interface identifier is generated randomly by the device. IPv6 neighbor - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 92
Figure 45 Address resolution The address resolution operates in the following steps: 1. Host A multicasts an NS message. The source address of the NS message is the IPv6 address of the sending interface of Host A and the destination address is the solicited-node multicast address of Host B. The NS - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 93
according to the address prefix and other configuration parameters in the RA message. (The automatically generated address is applicable within the valid lifetime and is removed when the valid lifetime expires.) Redirection A newly started host may contain only a default route to the gateway in its - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 94
(RFC 2893) and tunneling (RFC 2893). Dual stack Dual stack is the most direct transition approach. A network node that supports both IPv4 and IPv6 is a dual stack node. A dual stack node configured with an IPv4 address and an IPv6 address can forward both IPv4 and IPv6 packets. For an upper layer - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 95
2464, Transmission of IPv6 Packets over Ethernet Networks • RFC 2526, Reserved Addressing Architecture • RFC 4191, Default Router Preferences and More-Specific Configuring parameters related to RA messages Remarks Required Required to configure one Optional Optional Optional Optional Configuring - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 96
-64 IPv6 address. Command system-view interface interface-type interface-number ipv6 address ipv6-address/prefix-length eui-64 Remarks N/A N/A By default, no IPv6 global unicast address is configured on an interface. Manual configuration To specify an IPv6 address manually for an interface: 88 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 97
Enter interface view. 3. Configure an IPv6 address manually. Command system-view interface interface-type interface-number ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } Remarks N/A N/A By default, no IPv6 global unicast address is configured on an interface. Stateless - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 98
system view. 2. Enter interface view. Command system-view interface interface-type interface-number 3. Configure an IPv6 link-local ipv6 address ipv6-address address manually. link-local Remarks N/A N/A Optional. By default, no link-local address is configured on an interface. After an IPv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 99
layer address dynamically through NS and NA messages or through a manually configured static neighbor entry. The device uniquely identifies a static neighbor uniquely. To configure a static neighbor entry: Step 1. Enter system view. 2. Configure a static neighbor entry. Command system-view ipv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 100
in stale state: Step 1. Enter system view. 2. Set the age timer for ND entries in stale state. Command system-view ipv6 neighbor stale-aging aging-time Remarks N/A Optional. Four hours by default. Configuring parameters related to RA messages You can enable an interface to send RA messages, and - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 101
sending of RA messages: Step 1. Enter system view. 2. Enter interface view. 3. Disable RA message suppression. Command system-view interface interface-type interface-number undo ipv6 nd ra halt 4. Configure the maximum and ipv6 nd ra interval minimum intervals for sending max-interval-value RA - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 102
ipv6 nd nud reachable-time value Remarks Optional. By default, no prefix information is configured for RA messages, and the IPv6 address of the response within a specified time (determined by the ipv6 nd ns retrans-timer command), it continues to send an NS message. If the interface still does - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 103
static path MTU for a specified IPv6 address: Step Command 1. Enter system view. system-view 2. Configure a static path MTU for a specified IPv6 address. ipv6 pathmtu ipv6-address [ value ] Remarks N/A Not configured by default Configuring the aging time for dynamic path MTUs After the path - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 104
buffer. Command Remarks system-view N/A tcp ipv6 timer syn-timeout wait-time Optional. 75 seconds by default. Optional. tcp ipv6 timer fin-timeout wait-time 675 seconds by default. tcp ipv6 window size Optional. 8 KB by default. Configuring ICMPv6 packet sending Configuring the maximum - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 105
Step Command 2. Configure the capacity ipv6 icmp-error { bucket and update interval of bucket-size | ratelimit the token bucket. interval } * Remarks Optional. By default, the capacity of a token bucket is 10 and the update interval is 100 milliseconds. A maximum of 10 ICMPv6 error packets can - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 106
ICMPv6 destination unreachable messages, end users may be affected. To prevent default Displaying and maintaining IPv6 basics configuration Task Display the IPv6 FIB entries. Display the IPv6 FIB entry of a specified destination IPv6 address. Display the IPv6 information of the interface. Command - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 107
Task Display neighbor information. Command Remarks display ipv6 neighbors { { ipv6 user view IPv6 basics configuration example Network requirements As shown in Figure 48, a host, Switch A and Switch B are connected through Ethernet ports. Add the Ethernet ports into corresponding VLANs, configure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 108
next hop address 3001::1. [SwitchB] ipv6 route-static 2001:: 64 3001::1 3. Configure the host: # Enable IPv6 for Host to automatically obtain an IPv6 address through IPv6 ND. # On Switch A, use the ping ipv6 command to ping Switch B for the connectivity. [SwitchA] ping ipv6 3001::1 PING 3001::1 : 56 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 109
unicast address that the host obtained is 2001::15B:E0EA:3524:E791. Verifying the configuration # Display the IPv6 interface settings on Switch A. All of the IPv6 global unicast addresses configured on the interface are displayed. [SwitchA] display ipv6 interface vlan-interface 2 Vlan-interface2 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 110
ReasmReqds: ReasmOKs: InFragDrops: InFragTimeouts: OutFragFails: InUnknownProtos: InDelivers: OutRequests: OutForwDatagrams: InNoRoutes: InTooBigErrors: OutFragOKs: OutFragCreates: InMcastPkts: InMcastNotMembers: OutMcastPkts: InAddrErrors: InDiscards: OutDiscards: 0 0 0 0 0 0 47 89 48 0 0 0 0 6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 111
: InDiscards: OutDiscards: 0 0 0 0 0 0 159 1012 35 0 0 0 0 79 65 938 0 0 0 # Display the IPv6 interface settings on Switch B. All the IPv6 global unicast addresses configured on the interface are displayed. [SwitchB] display ipv6 interface vlan-interface 2 Vlan-interface2 current state :UP Line - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 112
OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 28 InMcastNotMembers: 0 OutMcastPkts: 7 InAddrErrors: 0 InDiscards: 0 OutDiscards: 0 # Ping Switch A and Switch B on the host, and ping Switch A and the host on Switch B to verify that they are connected. IMPORTANT: When you ping a link - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 113
Troubleshooting IPv6 basics configuration Symptom The peer IPv6 address cannot be pinged. Solution 1. Use the display current-configuration command in any view or the display this command in system view to verify that IPv6 is enabled. 2. Use the display ipv6 interface command in any view to verify - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 114
and other configuration parameters to hosts. Compared with other IPv6 address allocation methods (such as manual configuration and stateless assignment of address/prefix and other configuration parameters should be preferred. 2. If the DHCPv6 server supports rapid assignment, it responds with - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 115
client sends out a Solicit message, requesting an IPv6 address/prefix and other configuration parameters. 2. If the Solicit message does not contain a Rapid Commit option, or if the DHCPv6 server does not support rapid assignment even though the Solicit message contains a Rapid Commit option, the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 116
means that a node automatically generates an IPv6 address based on the information obtained through router/prefix discovery. For more information, see "Configuring IPv6 basics." Operation Figure 53 Operation of stateless DHCPv6 As shown in Figure 53, stateless DHCPv6 operates in the following steps - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 117
, the first received reply will be used. Protocols and standards • RFC 3736, Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6 • RFC 3315, Dynamic Host Configuration Protocol for IPv6 (DHCPv6) • RFC 2462, IPv6 Stateless Address Autoconfiguration • RFC 3633, IPv6 Prefix Options - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 118
agent Overview A DHCPv6 client usually uses a multicast address to contact the DHCPv6 server on the local link to obtain an IPv6 address and other configuration parameters. As shown in Figure 54, if the DHCPv6 server resides on another subnet, the DHCPv6 client can contact the server via a DHCPv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 119
an interface with the undo ipv6 dhcp relay server-address command, DHCPv6 relay agent is disabled on the interface. • HP does not recommend enabling the DHCPv6 relay agent and DHCPv6 client on the same interface Configuration procedure To configure the DHCPv6 relay agent: Step 1. Enter system view - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 120
service type of IPv6 packets. As defined in RFC 2474, the first six bits set the Differentiated Services agent. Command system-view ipv6 dhcp dscp dscp-value Remarks N/A Optional. By default, the DSCP statistics Available in user view DHCPv6 relay agent configuration example Network requirements - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 121
DHCPv6 server DHCPv6 relay agent DHCPv6 client DHCPv6 client Configuration procedure 1. Configure Switch as a DHCPv6 relay agent: # Enable the IPv6 packet forwarding function. system-view [Switch] ipv6 # Configure the IPv6 addresses of VLAN-interface 2 and VLAN-interface 3 respectively - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 122
Packets received SOLICIT REQUEST CONFIRM RENEW REBIND RELEASE DECLINE INFORMATION-REQUEST RELAY-FORWARD RELAY-REPLY Packets sent ADVERTISE RECONFIGURE REPLY RELAY-FORWARD RELAY-REPLY : 14 : 0 : 0 : 0 : 0 : 0 : 0 : 0 : 7 : 0 : 7 : 14 : 0 : 0 : 7 : 7 : 0 114 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 123
more information about the ipv6 address auto command, see the Layer 3-IP Services Command Reference. • HP does not recommend enabling the DHCPv6 client and DHCPv6 relay agent on the same interface at the same time. Configuration procedure To configure the DHCPv6 client: Step 1. Enter system view - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 124
packets sent by the DHCPv6 client. Command Remarks system-view N/A Optional. ipv6 dhcp client dscp dscp-value By default, the DSCP value in DHCPv6 Available in user view Stateless DHCPv6 configuration example Network requirements As shown in Figure 57, through stateless DHCPv6, Switch A - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 125
on VLAN-interface 2. [SwitchA] interface vlan-interface 2 [SwitchA-Vlan-interface2] ipv6 address auto With this command executed, if VLAN-interface 2 has no IPv6 address configured, Switch A will automatically generate a link-local address, and send an RS message, requesting the gateway - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 126
Confirm Renew Rebind Information-request Release Decline : 0 : 0 : 0 : 5 : 0 : 0 118 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 127
Configuring tunneling tunneling. • Traffic engineering, such as Multiprotocol Label Switching traffic engineering (MPLS TE) to prevent network congestion packets. The devices at both ends of an IPv6 over IPv4 tunnel must support the IPv4/IPv6 dual stack. Figure 58 IPv6 over IPv4 tunnel The IPv6 over - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 128
address of the tunnel cannot be automatically acquired through the destination IPv6 address of an IPv6 packet at the tunnel source, and must be manually configured. • Automatic tunnel-The destination address of the tunnel is an IPv6 address with an IPv4 address embedded, and the IPv4 address can be - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 129
notation. For example, 1.1.1.1 can be represented by 0101:0101. The part that follows 2002:abcd:efgh uniquely identifies a host in a 6to4 network. The tunnel destination is automatically determined by the embedded IPv4 address, which makes it easy to create a 6to4 tunnel. The tunnel can forward IPv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 130
Figure 61 Principle of IPv4 over IPv4 tunneling Packets traveling through a tunnel undergo encapsulation and de-encapsulation processes, as shown in Figure 61. • Encapsulation The encapsulation follows these steps. a. Device A receives an IP packet from an IPv4 host and submits it to the IP protocol - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 131
Figure 62 Principle of IPv4 over IPv6 tunneling The encapsulation and de-encapsulation processes illustrated in Figure 62 are described as follows: • Encapsulation a. Upon receiving a packet from the attached IPv4 network, Device A examines the destination address of the packet and determines the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 132
) Tunneling configuration task list Task Configuring a tunnel interface Configuring an IPv6 over IPv4 tunnel Configuring an IPv4 over IPv4 tunnel Configuring an IPv4 over IPv6 tunnel Configuring an IPv6 over IPv6 tunnel Configuring an IPv6 manual tunnel Configuring a 6to4 tunnel Configuring an - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 133
will not be up and packets cannot be transmitted over the tunnel. For creation and configuration of a service loopback group, see Layer 2-LAN Switching Configuration Guide. • The tunnel bandwidth command does not change the actual bandwidth of the tunnel interface, but sets a bandwidth value for - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 134
, see Layer 3-IP Routing Configuration Guide. Configuration procedure To configure an IPv6 manual tunnel: Step 1. Enter system view. 2. Enable IPv6. 3. Enter tunnel interface view. Command system-view ipv6 interface tunnel number Remarks N/A By default, the IPv6 packet forwarding function - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 135
, no destination address is configured for the tunnel. N/A Optional. Disabled by default. Configuration example Network requirements As shown in Figure 64, two IPv6 networks are connected over an IPv4 network. Configure an IPv6 over IPv4 tunnel between Switch A and Switch B to make the two IPv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 136
Create service loopback group 1 to support the tunnel service. [SwitchA] service-loopback group 1 type tunnel # Assign GigabitEthernet 1/0/3 to service loopback group SwitchA-GigabitEthernet1/0/3] port service-loopback group 1 [SwitchA-GigabitEthernet1/0/3] quit # Configure a manual IPv6 tunnel. [ - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 137
Create service loopback group 1 to support the tunnel service. [SwitchB] service-loopback group 1 type tunnel # Assign GigabitEthernet 1/0/3 to service loopback SwitchB-GigabitEthernet1/0/3] port service-loopback group 1 [SwitchB-GigabitEthernet1/0/3] quit # Configure an IPv6 manual tunnel. [SwitchB] - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 138
... # Ping the IPv6 address of VLAN-interface 101 at the peer end from Switch A. [SwitchA] ping ipv6 3003::1 PING 3003::1 : 56 data bytes, press loss round-trip min/avg/max = 1/1/1 ms Configuring a 6to4 tunnel Configuration prerequisites Configure IP addresses for interfaces (such as the VLAN - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 139
support dynamic routing, you can configure configuration, see Layer 3-IP Routing Configuration Guide. • Automatic tunnel interfaces using the same encapsulation protocol cannot share the same source IP address. Configuration procedure To configure a 6to4 tunnel: Step 1. Enter system view. Command - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 140
interface 100 on Switch B is Configure an IPv6 address for VLAN-interface 101. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 address 2002:0201:0101:1::1/64 [SwitchA-Vlan-interface101] quit # Create service loopback group 1 to support the tunnel service. [SwitchA] service - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 141
group 1 on the tunnel. [SwitchA-Tunnel0] service-loopback-group 1 [SwitchA-Tunnel0] quit # Configure a static route whose destination address is 2002::/16 and next-hop is the tunnel interface. [SwitchA] ipv6 route-static 2002:: 16 tunnel 0 • Configure Switch B: # Enable IPv6. system-view - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 142
interface on the device. Because automatic tunnels do not support dynamic routing, you can configure a static route to that destination IPv6 address with . A similar configuration is required at the other tunnel end. For the detailed configuration, see Layer 3-IP Routing Configuration Guide. • The - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 143
Command system-view Remarks N/A 2. Enable IPv6. ipv6 By default, the IPv6 forwarding function is disabled. 3. Enter tunnel interface view. interface tunnel number N/A • Configure configuration is optional. prefix-length | ipv6-address/prefix-length } 4. Configure by default. Configuration - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 144
information such as the address prefix from the RA message released by the ISATAP switch. [Switch-Tunnel0] undo ipv6 nd ra halt # Reference service loopback group 1 on the tunnel. [Switch-Tunnel0] service-loopback-group 1 [Switch-Tunnel0] quit # Configure a static route to the ISATAP host. 136 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 145
(base 30000ms) retransmission interval 1000ms DAD transmits 0 default site prefix length 48 # A link-local address (fe80::5efe:2.1.1.2) in the ISATAP format was automatically generated for the ISATAP interface. Configure the IPv4 address of the ISATAP switch on the ISATAP interface. C:\>ipv6 rlu - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 146
IPv6 address of the tunnel interface of the switch. If the address is successfully pinged, an ISATAP enable the dynamic routing protocol on both tunnel interfaces. For the detailed configuration, see Layer 3-IP Routing Configuration Guide. • The IPv4 address of the local tunnel interface cannot be - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 147
for the tunnel. By default, no destination address is configured for the tunnel. Configuration example Network requirements As shown in Figure 67, the two subnets Group 1 and Group 2 use private IPv4 addresses. Configure an IPv4 over IPv4 tunnel between Switch A and Switch B to make the two - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 148
group 1 on the tunnel. [SwitchA-Tunnel1] service-loopback-group 1 [SwitchA-Tunnel1] quit # Configure a static route from Switch through interface Tunnel 1 to Group 2. [SwitchA] ip route-static 10.1.3.0 255.255.255.0 tunnel 1 • Configure Switch B: # Configure an IPv4 address for VLAN-interface 100 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 149
2 (IP address of VLAN-interface 101 of Switch A). [SwitchB-Tunnel2] destination 2.1.1.1 # Reference service loopback group 1 on the tunnel. [SwitchB-Tunnel2] service-loopback-group 1 [SwitchB-Tunnel2] quit # Configure a static route from Switch B through interface Tunnel 2 to Group 1. [SwitchB] ip - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 150
Encapsulation is TUNNEL, service-loopback-group ID is error # Ping the IPv4 address of the peer interface VLAN-interface 100 from Switch A. [SwitchA] ping 10.1.3.1 PING 10.1.3.1: 56 data bytes, press CTRL_C to . For the detailed configuration, see Layer 3-IP Routing Configuration Guide. • Two or more - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 151
2002::2:1/64 GE1/0/3 Tunnel2 30.1.2.2/24 Vlan-int100 30.1.3.1/24 IPv4 Group 1 Service loopback port IPv4 Group 2 Configuration procedure Before configuring an IPv4 over IPv6 tunnel, make sure that Switch A and Switch B have the corresponding VLAN interfaces created and can reach each other - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 152
1 (IP address of VLAN-interface 101 of Switch B). [SwitchA-Tunnel1] destination 2002::2:1 # Reference service loopback group 1 on the tunnel. [SwitchA-Tunnel1] service-loopback-group 1 [SwitchA-Tunnel1] quit # Configure a static route from Switch A through interface Tunnel 1 to Group 2. [SwitchA] ip - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 153
2 (IP address of VLAN-interface 101 of Switch A). [SwitchB-Tunnel2] destination 2002::1:1 # Reference service loopback group 1 on the tunnel. [SwitchB-Tunnel2] service-loopback-group 1 [SwitchB-Tunnel2] quit # Configure a static route from Switch B through interface Tunnel 2 to Group 1. [SwitchB] ip - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 154
, service-loopback peer interface VLAN-interface 100 from Switch A. [RouterA] ping 30.1.3.1 Configuring an IPv6 over IPv6 tunnel Configuration prerequisites Configure Configuration guidelines Follow these guidelines when you configure configuration is required at the other tunnel end. If you configure - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 155
interface. 5. Specify the IPv6 over IPv6 tunnel mode. 6. Configure a source address or interface for the tunnel interface. 7. Configure the destination address for the tunnel interface. Command system-view ipv6 Remarks N/A By default, the IPv6 packet forwarding function is disabled. Interface - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 156
Step Command 8. Configure the maximum number of nested encapsulations of a encapsulation-limit [ number ] packet. 9. Return to system view. quit 10. Enable dropping of IPv6 packets using IPv4-compatible IPv6 addresses. tunnel discard ipv4-compatible-packet Remarks Optional. 4 by default. - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 157
IP address of VLAN-interface 101 of Switch B). [SwitchA-Tunnel1] destination 2002::22:1 # Reference service loopback group 1 on the tunnel. [SwitchA-Tunnel1] service-loopback-group 1 [SwitchA-Tunnel1] quit # Configure a static route from Switch A through interface Tunnel 1 to Group 2. [SwitchA] ipv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 158
IP address of VLAN-interface 101 of Switch A). [SwitchB-Tunnel2] destination 2002::11:1 # Reference service loopback group 1 on the tunnel. [SwitchB-Tunnel2] service-loopback-group 1 [SwitchB-Tunnel2] quit # Configure a static route from Switch B through interface Tunnel 2 to Group 1. [SwitchB] ipv6 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 159
of the peer interface VLAN-interface 100 from Switch A. [SwitchA] ping ipv6 2002:3::1 PING 2002 1/19/31 ms Displaying and maintaining tunneling configuration Task Command Remarks Display information about tunnel interfaces. display interface tunnel [ number ] ] Available in user view 151 - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 160
Troubleshooting tunneling configuration Symptom After the configuration of related parameters such as tunnel source address tunnel source is not up. Use the display interface tunnel or display ipv6 interface tunnel commands to view whether the physical interface of the tunnel source is up. If the - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 161
HP A-Series Acronyms. Websites • HP.com http://www.hp.com • HP Networking http://www.hp.com/go/networking • HP manuals http://www.hp.com/support/manuals • HP download drivers and software http://www.hp.com/support/downloads • HP software depot http://www.software.hp.com • HP Education http://www.hp - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 162
Command conventions Convention Boldface Italic [ ] { x | y | ... } [ x | y | ... ] { x | y | ... } * [ x | y | ... ] * & # Description Bold text represents commands and menu items are in bold text. For example, the New User window appears; click OK. Multi-level menus are separated by angle - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 163
, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Port numbering in examples The port numbers in this document are for - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 164
an IPv6 manual tunnel,126 Configuring an IPv6 over IPv6 tunnel,146 Configuring an ISATAP tunnel,134 Configuring ARP quick update,5 Configuring basic IPv6 functions,88 Configuring DHCP snooping basic functions,52 Configuring DHCP snooping entries backup,54 Configuring DHCP snooping to support Option - HP 6125G | HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 165
,116 Static domain name resolution configuration example,65 T Troubleshooting DHCP relay agent configuration,45 Troubleshooting IPv4 DNS configuration,69 Troubleshooting IPv6 basics configuration,105 Troubleshooting tunneling configuration,152 Tunneling configuration task list,124 U UDP helper
HP 6125 Blade Switch Series
Layer 3 - IP Services
Configuration Guide
Part number: 5998-3156
Software version: Release 2103
Document version: 6W100-20120907