HP 6120XG HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide
HP 6120XG Manual
View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals |
HP 6120XG manual content summary:
- HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 1
ProCurve Series 6120 Switches IPv6 Guide August 2009 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 2
language without the prior written consent of HewlettPackard. Publication Number 5992-5527 August 2009 Applicable Products HP ProCurve Switch 6120G/XG HP ProCurve Switch 6120XG (498358-B21) (516733-B21) Trademark Credits Microsoft, Windows, and Microsoft Windows NT are US registered trademarks - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 3
ii - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 4
Index About Your Switch Manual Set xi Printed Publications xi Electronic Publications xi IPv6 Command Index xiii 1 Getting Started Contents 1-1 Introduction 1-2 Conventions 1-2 Command Syntax Statements 1-2 Command Prompts 1-3 Screen Simulations 1-3 Configuration and Operation Examples - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 5
IPv6 Capability 2-6 Supported IPv6 Operation 2-6 Configuration and Management 2-7 Management Features 2-7 IPv6 Addressing 2-7 SLAAC (Stateless Automatic Address Configuration 2-7 DHCPv6 (Stateful) Address Configuration 2-8 Static Address Configuration 2-8 Default IPv6 Gateway 2-8 Neighbor - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 6
Autoconfiguration (SLAAC 3-7 Applications 3-7 Preferred and Valid Lifetimes of Stateless Autoconfigured Addresses 3-7 Stateful (DHCPv6) Address Configuration 3-8 Static Address Configuration 3-9 Address Types and Scope 3-10 Address Types 3-10 Address Scope 3-11 Unicast Address Prefixes 3-11 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 7
3-25 4 IPv6 Addressing Configuration Contents 4-1 Introduction 4-3 General Configuration Steps 4-4 Configuring IPv6 Addressing 4-5 Enabling IPv6 with an Automatically Configured Link-Local Address 4-6 Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on a VLAN - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 8
Operating Notes for Neighbor Discovery 4-20 View the Current IPv6 Addressing Configuration 4-22 Router Access and Default Router Selection 4-29 Router Advertisements 4-29 Router Solicitations 4-29 Default IPv6 Router 4-30 Router Redirection 4-30 View IPv6 Gateway, Route, and Router Neighbors - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 9
5-20 SNMP Configuration Commands Supported 5-21 SNMPv1 and V2c 5-21 SNMPv3 5-21 IP Preserve for IPv6 5-23 6 IPv6 Management Security Features Contents 6-1 IPv6 Management Security 6-2 Authorized IP Managers for IPv6 6-3 Usage Notes 6-3 Configuring Authorized IP Managers for Switch Access - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 10
Debug/Syslog for IPv6 7-11 Configuring Debug and Event Log Messaging 7-11 Debug Command 7-12 Configuring Debug Destinations 7-13 Logging Command 7-14 A IPv6 Terminology ix - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 11
x - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 12
printed publication) is available in PDF format on the ProCurve Web site, as described in the Note at the top of this page. The publications listed below cover all of the switches supported by this manual. ■ Installation and Getting Started Guide-Describes how to install hard- ware, and get started - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 13
■ IPv6 Configuration Guide-Describes the IPv6 protocol operations that are supported on the switch. ■ Release Notes-Describe new features, fixes, and enhancements that become available between revisions of the main product guide. xii - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 14
Note IPv6 Command Index This index provides a tool for locating descriptions of individual IPv6 commands covered in this guide. A link-local address must include %vlan< vid > without spaces as a suffix. For example: fe80::110:252%vlan20 The index begins on the next page. xiii - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 15
Command Min. Level Page Authorized Manager ipv6 authorized managers < ipv6-addr >* Global Config 6-5 show ipv6 authorized-managers Manager 6-12 Copy auto-tftp Global Config 5-19 copy tftp < target > < ipv6-addr > < filename > Manager 5-17 copy < source > tftp < ipv6-addr > < filename > - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 16
| timeout] Global Config 6-19 Telnet show console Operator 5-8 show telnet telnet < ipv6-addr >* Operator 5-7 Manager 5-6 Timep ip timep dhcp ip timep manual < ipv6-addr >* Global Config 5-13 Global Config 5-13 show sntp Manager 5-11 show timep Manager 5-14 sntp server priority - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 17
1 Getting Started Contents Contents 1-1 Introduction 1-2 Conventions 1-2 Command Syntax Statements 1-2 Command Prompts 1-3 Screen Simulations 1-3 Configuration and Operation Examples 1-4 Keys 1-4 Sources for More Information 1-4 Getting Documentation From the Web 1-6 Online Help 1-6 Menu - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 18
HP ProCurve 6120G/XG and 6120GX switches. It describes how to use the command line interface (CLI) to configure, manage, monitor, and troubleshoot switch operation. For an overview of other product documentation for the above switches, refer to "Product Documentation" on page xi. You can download - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 19
In the default configuration, your switch displays a CLI prompt similar to the following examples: ProCurve 6120G/XG Blade Switch# ProCurve 6120XG Blade Switch# To simplify recognition, this guide uses ProCurve to represent command prompts for all switch models. For example: ProCurve# (You can - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 20
/blades/components/c-class-tech-installing.html ■ Software Release Notes-Release Notes are posted on the ProCurve Networking web site and provide information on new software updates: • new features and how to configure and use them • software management, including downloading software to the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 21
for information on topics such as: • Overview of IPv6 operation and supported features • Configuring IPv6 addressing • Using IPv6 management, security, and troubleshooting features ■ Feature Index-The following software guides for your switch include an index of non-IPv6 features (and where to find - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 22
the Web To obtain the latest versions of documentation and release notes for your switch, please see the following web sites: www.procurve.com/manuals www.hp.com/go/bladesystem/documentation h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html If you need further information on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 23
in the CLI, type the command name followed by help. For example: ProCurve# write help Usage: write Description: View or save the running configuration of the switch. write terminal - displays the running configuration of the switch on the terminal write memory - saves the running - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 24
To Set Up and Install the Switch in Your Network Use the ProCurve Installation and Getting Started Guide for the following: ■ Notes, cautions, and warnings related to installing and using the switch and its related modules ■ Instructions for physically installing the switch in your network ■ Quickly - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 25
IPv6 Capability 2-6 Supported IPv6 Operation 2-6 Configuration and Management 2-7 Management Features 2-7 IPv6 Addressing 2-7 SLAAC (Stateless Automatic Address Configuration 2-7 DHCPv6 (Stateful) Address Configuration 2-8 Static Address Configuration 2-8 Default IPv6 Gateway 2-8 Neighbor - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 26
Introduction to IPv6 Contents Ping6 2-13 Traceroute6 2-13 Debug/Syslog Enhancements 2-13 Domain Name System (DNS) Resolution 2-13 IPv6 Neighbor Discovery (ND) Controls 2-14 Event Log 2-14 SNMP 2-14 Loopback Address 2-14 IPv6 Scalability 2-15 2-2 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 27
the same VLAN ■ using a connection to an external, IPv6-configured router, forward IPv6 traffic intended for devices on other VLANs and for traffic that must traverse an IPv4 network to reach an IPv6 destination IPv6/IPv4 Router ProCurve Switch H1 H2 IPv6/IPv4 Router IPv4 Network DHCPv6 Server - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 28
Operation Since most initial IPv6 deployments are in networks having a mixture of IPv6 and IPv4 hosts, the software supports dual- stack IPv4/IPv6 operation. This enables the switch to communicate individually with IPv4 and IPv6 devices with their respective protocols. Thus, IPv4 and IPv6 traffic is - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 29
Note Introduction to IPv6 Migrating to IPv6 Connecting to Devices Supporting IPv6 Over IPv4 Tunneling The switches covered by this guide can interoperate with IPv6/IPv4 devices capable of tunneling IPv6 traffic across an IPv4 infrastructure. Some examples include: ■ traffic between IPv6/IPv4 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 30
in over a period of years, requiring an interoperability among the devices using the two protocols. The switches covered by this guide support IPv4/IPv6 dual stack operation. This allows full ethernet link support for both IPv4 and IPv6 traffic to move on the same interface (VLAN) without modifying - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 31
and Management This section outlines the configurable management features supporting IPv6 operation on your ProCurve IPv6-ready switch. Management Features The software provides host-based IPv6 features that enable the switches covered by this guide to be managed from an IPv6 management - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 32
support is available through either of the following modes: ■ accessible on a VLAN configured on the switch ■ accessible through a connection to a router configured . In IPv6 for the switches covered by this guide, the default route cannot be statically configured. Also, DHCPv6 does not include - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 33
ARP protocol to provide for discovery of IPv6 devices such as other switches, routers, management stations, and servers on the same interface. Neighbor Discovery runs automatically in the default configuration and provides services in addition to those provided in IPv4 by ARP. For example: ■ Run - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 34
this guide are dependent on switched management traffic solutions. TFTPv6 Transfers The switch supports these downloads from an IPv6 TFTP server: ■ automatic OS download ■ manual OS download ■ command script download and execution ■ configuration file downloads ■ public key file downloads ■ startup - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 35
configured on VLAN 1 (the default VLAN) when a configuration file is downloaded to the switch Ethernet frames, the default MTU is 1500 bytes. If a router on the path cannot forward the default supported on ProCurve switches running either IPv4 or IPv6. When SSH operation is enabled (the default - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 36
Introduction to IPv6 Configurable IPv6 Security Caution The switch supports up to six inbound sessions of the following types feature takes precedence over the other forms of access control configurable on the switch, such as local passwords, RADIUS, and both Port-Based and Client-Based Access - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 37
Troubleshooting Diagnostic and Troubleshooting The software includes the IPv6 diagnostic and troubleshooting configured with a host name counterpart on a DNS server. The software includes the following DNS-compatible commands: ■ ping6 ■ traceroute6 The switches covered by this guide now support - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 38
to IPv6 Diagnostic and Troubleshooting Note If an IPv6 DNS server address is configured on the switch, at least one VLAN on the switch (and in the path to the DNS server) must be configured with an IPv6 address. For information on configuring DNS resolution on the switch, refer to "DNS Resolver - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 39
Introduction to IPv6 IPv6 Scalability IPv6 Scalability The switches covered by this guide support the following: ■ Dual stack operation (IPv4 and IPv6 addresses on the same VLAN). ■ per-switch ■ Maximum of 2048 active IPv6 addresses on the switch, in addition to a maximum of 2048 IPv4 addresses. (" - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 40
Autoconfiguration (SLAAC 3-7 Applications 3-7 Preferred and Valid Lifetimes of Stateless Autoconfigured Addresses 3-7 Stateful (DHCPv6) Address Configuration 3-8 Static Address Configuration 3-9 Address Types and Scope 3-10 Address Types 3-10 Address Scope 3-11 Unicast Address Prefixes 3-11 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 41
IPv6 Addressing Contents Global Unicast Address 3-16 Stateless Autoconfiguration of a Global Unicast Address 3-16 Static Configuration of a Global Unicast Address 3-17 Prefixes in Routable IPv6 Addresses 3-18 Unique Local Unicast IPv6 Address 3-19 Anycast Addresses 3-20 Multicast Application - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 42
IPv6 Addressing Introduction Introduction IPv6 supports multiple addresses on an interface, and uses them in a manner comparable to subnetting an IPv4 VLAN. For example, where the switch is configured with multiple VLANs and each is connected to an IPv6 router, each VLAN will have a single link- - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 43
IPv6 identifier for a unicast or anycast address can be automatically generated from the switch's MAC address using EUI-64 (Extended Unique Identifier) format. Other methods include DHCPv6 assignments and static configuration. Interface identifiers are covered in more detail in the later sections of - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 44
supports stateless and stateful address Autoconfiguration, as well as static address configuration the use of servers. Instead, in the default operation, the host uses its MAC address to an IPv6 address supporting routing is automatically generated, as well. (The switch merges a router-generated - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 45
stateless or static methods, the DHCPv6 server can still be used to automatically provide other configuration information to the host. Refer to page 3-8. Static Address Configuration. Static configuration is used instead of or in addition to stateless and stateful Autoconfiguration where use of the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 46
. (DHCPv6 does not configure link-local addresses.) Where routed traffic is used, you will also need global unicast addressing, either through stateless Autoconfiguration or the other listed methods. Stateless Address Autoconfiguration (SLAAC) On the switches covered by this guide, stateless address - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 47
an IPv6 router configured with DHCP Relay to support service requests from the switch. DHCPv6 relay may not currently be available in some IPv6 routers. ■ DHCPv6 addressing must be enabled per-VLAN on the switch. Note that IPv6 router advertisements (RAs) can also include instructions to clients to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 48
Sources Static Address Configuration Generally, static address configuration should be used when you want specific, non-default addressing to be , the address is listed as "preferred", but is not used. Statically configured IPv6 addresses saved to the startup-config file (by using write memory) - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 49
can be assigned to a specific VLAN on the switch and to other IPv6 devices connected to the switch. At a minimum, a given interface must have which source it uses to acquire the service. Anycast usage can be of value, for example, in a network supporting multiple DNS servers. Refer to "Anycast - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 50
generates a link-local address used for switched traffic on the VLAN. Global Unicast Address statically configured to either replace or complement an automatically configured address of format as a global unicast address. In this guide, unless otherwise stated, information on global unicast - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 51
IPv6 Addressing Address Types and Scope In binary notation, the fixed prefix for link-local prefixes is: 1111 1110 10 = fe80/10 For more on link-local addresses, refer to "Link-Local Unicast Address" on page 3-13. Routable Global Unicast Prefix. This well-known 3-bit fixed-prefix indicates a - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 52
-local address must be unique only for the VLAN on which it is configured. (Traffic with a link-local source or destination address cannot be routed This address is limited in scope to that VLAN, and is usable only for switched traffic. This address has a well- known, 64-bit prefix of fe80:0000: - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 53
VLAN on which it was generated, this should not be a problem. For example, executing ipv6 address dhcp full on a VLAN for which IPv6 was not previously configured does all of the following: ■ enables IPv6 on the VLAN ■ causes the switch to generate a stateless link-local unicast address on the VLAN - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 54
a link-local address is automatically implemented on the switches covered by this guide when IPv6 is enabled on a VLAN interface. Configuration" on page 3-9.) For related information, refer to: ■ RFC 2373: "IP Version 6 Addressing Architecture" ■ RFC 2464: "Transmission of IPv6 Packets Over Ethernet - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 55
. To support subnetting, a VLAN can be configured with multiple global unicast configured on the VLAN for each unique prefix received. Where there are multiple routers on the VLAN, the default you enable Autoconfiguration on the VLAN, then the switch automatically generates a link-local address for the VLAN - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 56
and to listen for advertisements from any IPv6 routers on the VLAN. For each unique router advertisement (RA) the switch receives from any router(s), the switch configures a unique, global unicast address. This address type is composed of a 64-bit network prefix specified by the router advertisement - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 57
) bits comprising the prefix. For an automatically generated global unicast address, the default prefix length is 64 bits. (Practically speaking, the entire prefix in a /64 address defines the subnet.) Prefixes configured through stateful or static methods can be any length compatible with the local - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 58
can be assigned by router advertisements, DHCPv6 servers, or static configuration. The boundaries for unique local unicast address are set by border routers. Unique local unicast addresses can be assigned in DNS servers supporting an internal network, but should not be included in global DNS - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 59
provide redundant paths to a given entity, such as a specific service provider. With IPv6 this can be done efficiently using the anycast is used. For information on configuring an anycast address on the switches covered by this guide, refer to "Statically Configuring An Anycast Address" on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 60
of the Multicast Operation in IPv6 When IPv6 is enabled on a VLAN interface on the switch, the interface automatically joins the All-Nodes and Solicited-Node multicast address groups for each of its configured unicast and anycast addresses. The interface also attempts to learn of other devices by - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 61
IPv6 Addressing Multicast Application to IPv6 Addressing IPv6 Multicast Address Format The multicast address format has three principal sections in the leading 16 bits: ■ identifier: ff (bits 1-8) ■ flags: 0xxx (bits 9-12) ■ scope: 0001 - 1110 (bits 13-16) For related information, refer to RFC 4291. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 62
multicast group identity. (Refer to RFCs 3306, 4291, and 2375.) Solicited-Node Multicast Address Format The solicited-node multicast address the switch generates for a configured unicast or anycast address is composed of a unique, 104-bit multicast prefix (ff02:0:0:0:0:1:ff) and the last 24 bits of - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 63
that is sent out of a device, and the switch drops any traffic it receives with a loopback address destination. An example use case is: ProCurve# ping6 ::1 0000:0000:0000:0000:0000:0000:0000: unspecified address cannot be statically configured on the switch, or used as a destination address. 3-24 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 64
lifetime, and router-assigned lifetime expiration of a leased address terminates the switch's use of the address. (The routerassigned lifetime can be extended by receipt of a new router advertisement.) Statically configured IPv6 addresses are regarded as permanent addresses, and do not expire - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 65
IPv6 Addressing IPv6 Address Deprecation Related Information ■ RFC 2462: "IPv6 Stateless Address Autoconfiguration" ■ RFC 4291: "IP Version 6 Addressing Architecture" 3-26 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 66
Addressing 4-5 Enabling IPv6 with an Automatically Configured Link-Local Address 4-6 Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on a VLAN 4-7 Operating Notes 4-8 Enabling DHCPv6 4-9 Operating Notes 4-10 Configuring a Static IPv6 Address on a VLAN 4-11 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 67
IPv6 Addressing Configuration Contents Router Solicitations 4-29 Default IPv6 Router 4-30 Router Redirection 4-30 View IPv6 Gateway, Route, and Router Neighbors 4-31 Viewing Gateway and IPv6 Route Information 4-31 Viewing IPv6 Router Information 4- - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 68
Addressing n/a 4-22 In the default configuration, IPv6 operation is disabled on the switch. This section describes the general all IPv6 commands available on the switch, refer to the "IPv6 Command Index" on page xiii at the front of this guide. The switch is capable of operating in dual-stack - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 69
level are satisfactory for many applications and generally do not need adjustment when you are first configuring IPv6 on the switch. In the default configuration, IPv6 is disabled on all VLANs. 1. If IPv6 DHCP service is available, enable IPv6 DHCP on the VLAN. If IPv6 is not already enabled on the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 70
replacing the automatically generated link-local address • statically adding global unicast, unique local unicast, and/or anycast addresses Configuring IPv6 Addressing In the default configuration on a VLAN, any one of the following commands enables IPv6 and creates a link-local address. Thus, while - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 71
the preferred status, with a "permanent" lifetime. (Refer to "IPv6 Address Deprecation" on page 3-25.) Default: Disabled The no form of the command disables IPv6 on the VLAN if no other IPv6-enabling command is configured on the VLAN. (Refer to "Disabling IPv6 on a VLAN" on page 4-16.) To view the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 72
Router Identity on a VLAN Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on a VLAN Enabling autoconfig or rebooting the switch with autoconfig enabled on a VLAN causes the switch to configure IPv6 addressing on the VLAN using router advertisements and an EUI-64 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 73
on the switch.) ■ show ipv6 vlan < vid > (Lists IPv6 addresses configured on the VLAN.) For more information, refer to "View the Current IPv6 Addressing Configuration" on page 4-22. Operating Notes With IPv6 enabled, the VLAN uses received router advertisements to designate the default IPv6 router - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 74
needed to provide a global unicast address to a switch interface, the server can still be configured to provide the NTP server assignment. This is full [rapid-commit] This option configures DHCPv6 on a VLAN, which initiates transmission of DHCPv6 requests for service. If IPv6 is not already - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 75
, refer to "View the Current IPv6 Addressing Configuration" on page 4-22. Operating Notes ■ If multiple DHCPv6 servers are available, the switch selects a server based on the preference value sent in DHCPv6 messages from the servers. ■ The switch supports both DHCPv4 and DHCPv6 client operation on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 76
3633: "IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP) version 6" ■ RFC 3736: "Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6" Configuring a Static IPv6 Address on a VLAN This option enables configuring of unique, static unicast and anycast IPv6 addresses - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 77
link-local address disables IPv6 on the VLAN. ■ If other IPv6-enabling commands have been configured on the VLAN, then deleting the statically configured link-local address causes the switch to replace it with the default (EUI-64) link-local address for the VLAN, and IPv6 remains enabled. (For more - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 78
" on page 3-18. < device-id >: Enters a user-defined device identity. < prefix-length >: Specifies the number of configured IPv6 unicast addresses, use the following: ■ show ipv6 (Lists IPv6 addresses for all VLANs configured on the switch.) ■ show ipv6 vlan < vid > (Lists IPv6 addresses configured - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 79
Notes ■ With IPv6 enabled, the switch determines the default IPv6 router for the VLAN from the router advertisements it receives. (Refer to "Router Access and Default Router Selection" on page 4-29.) ■ If DHCPv6 is configured on a VLAN, then configuring a static global unicast address on the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 80
network. Default: None. The no form of the command erases the specified anycast address and, if no other IPv6- enabling command is configured on the anycast addresses configured for VLANs to which the switch belongs, use the show run command. To view all currently configured IPv6 unicast addresses - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 81
operation on the VLAN. That is, to disable IPv6 on a VLAN, all of the following commands must be removed from the VLAN's configuration: ipv6 enable ipv6 address dhcp full [rapid-commit] ipv6 address autoconfig ipv6 address fe80::< device-identifier > link-local ipv6 address < prefix > : < device - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 82
of Neighbor Discovery is triggered on a device when a new (tentative) or changed IPv6 address is detected. (This includes stateless, stateful, and static address configuration.) ND operates in a per-VLAN scope; that is, within the VLAN on which the the device running the ND instance is a member - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 83
before it is assigned to a VLAN interface on the switch. DAD is enabled in the default IPv6 configuration, and can be reconfigured, disabled, or re-enabled at the global config command level. DAD can be useful in helping to troubleshoot erroneous replies to DAD requests, or where the neighbor cache - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 84
interface. Disabling DAD bypasses checks for uniqueness on newly configured addresses. If a reboot is performed while DAD is disabled, the duplicate address check is not performed on any IPv6 addresses configured on the switch. Default: 3 (enabled); Range: 0 - 600 (0 = disabled) The no form of the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 85
nd. Range: 1000 - 2147483647 ms; Default: 30000 ms. Operating Notes for Neighbor Discovery ■ A verified link-local unicast address must exist on a VLAN interface before the switch can run DAD on other addresses associated with the interface. ■ If a previously configured unicast address is changed - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 86
Duplicate Address Detection (DAD) ■ If a previously configured unicast address is changed, a neighbor advertisement is sent on the VLAN to notify other devices, and also for duplicate address detection. ■ If DAD is disabled when an address is configured, the address is assumed to be unique and is - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 87
per-VLAN. (Refer to "Router Access and Default Router Selection" on page 4-29.) Default Gateway: Lists the IPv4 default gateway, if any, configured on the switch. This is a globally configured router gateway address, and is not configured per-VLAN. ND DAD: Indicates whether DAD is enabled (the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 88
link-local unicast address. ■ DHCP: The address was assigned by a DHCPv6 server. Note that addresses having a DHCP origin are listed with a 128bit prefix length. ■ Manual: The address was statically configured on the VLAN. ■ IPv6 Address/Prefix Length: Lists each IPv6 address and prefix length - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 89
View the Current IPv6 Addressing Configuration For example, figure 4-1 shows the output on a switch having IPv6 enabled on one VLAN. ProCurve# show ipv6 Internet (IPv6) Service IPv6 Routing : Disabled Default Gateway : fe80::213:c4ff:fedd:14b0 ND DAD : Enabled DAD Attempts : 3 Vlan - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 90
on a switch having IPv6 enabled on VLANs 1 and 20. ProCurve# show ipv6 nd IPV6 Neighbor Discovery Configuration Current Hop Limit : 0 VLAN Name RCHtime NSint (msecs) (msecs) DEFAULT_VLAN 30000 1000 VLAN20 30000 1000 Figure 4-2. Example of Show IPv6 nd Output with Default settings Syntax - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 91
)" on page 4-18.) ■ VLAN Name: Lists the name of a VLAN statically configured on the switch. ■ IPv6 Status: For the indicated VLAN, indicates whether IPv6 is disabled (the default) or enabled. (Refer to "Configuring IPv6 Addressing" on page 4-5.) ■ IPv6 Address/Prefix Length: Lists each IPv6 address - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 92
View the Current IPv6 Addressing Configuration ProCurve# show ipv6 vlan 10 Internet (IPv6) Service IPv6 Routing : Disabled Default Gateway : fe80::213:c4ff:fedd:14b0%vlan10 ND DAD : Enabled DAD Attempts : 3 Vlan Name IPv6 Status : VLAN10 : Enabled IPv6 Address/Prefixlength Expiry - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 93
View the Current IPv6 Addressing Configuration ProCurve(config)# show run Running configuration: . . . vlan 10 name "VLAN10" untagged A1-A12 ipv6 address fe80::1:101 link-local ipv6 address dhcp full rapid-commit . . . Statically configured IPv6 addresses appear in the show run output - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 94
Selection Router Access and Default Router Selection Routing traffic between destinations on different VLANs configured on the switch or to a destination on an off-switch VLAN is done by placing the switch on the same VLAN interface or subnet as an IPv6-capable router configured to route traffic to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 95
IPv6 router. ■ If multiple IPv6 routers on a VLAN send RAs advertising the same network, the switch configures one global unicast address and selects one router as the default router, based on the router's relative reachability, using factors such as router priority and route cost. ■ If multiple - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 96
specified IPv6 address. connected: Optional. Limits the output to show only the gateways to IPv6 addresses connected to VLAN interfaces configured on the switch, including the loopback (::1/128) address. Dest: The destination address for a detected route. Gateway: The IPv6 address or VLAN interface - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 97
IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors ProCurve(config)# show ipv6 route IPv6 Route Entries Dest : ::/0 "Unknown" < vid > ] This command lists the switch's IPv6 router table entries for all VLANs configured on the switch or for a single VLAN. This output - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 98
IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors MTU: This is field. For example, figure 4-6 indicates that the switch is receiving router advertisements from a single router that exists on VLAN 10. ProCurve(config)# show ipv6 routers IPv6 Router Table Entries Router - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 99
address being refreshed, the address becomes invalid and may be assigned to another interface. Sources of IPv6 Address Lifetimes Manually configured addresses have permanent lifetimes. The prefixes received from router advertisements for global unicast addresses include finite valid and preferred - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 100
Anycast Autoconfigured Global DHCPv6-Configured Lifetime Criteria Permanent Permanent Finite Preferred and Valid Lifetimes Finite Preferred and Valid Lifetimes A new, preferred address used as a replacement for a deprecated address can be acquired from a manual, DHCPv6, or autoconfiguration source - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 101
Switch 5-7 Enabling or Disabling Inbound Telnet Access 5-8 Viewing the Current Inbound Telnet Configuration 5-8 SNTP and Timep 5-9 Configuring (Enabling or Disabling) the SNTP Mode 5-9 Configuring Features Supported 5-20 SNMP Configuration Commands Supported 5-21 SNMPv1 and V2c 5-21 SNMPv3 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 102
chapter focuses on the IPv6 application of management features that support both IPv6 and IPv4 operation. For additional information on these features, refer to the current Management and Configuration Guide for your switch. Viewing and Clearing the IPv6 Neighbors Cache Neighbor discovery occurs - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 103
port on which the entry was learned. If this field is empty for a given address, then the address is configured on the switch itself. State: A neighbor destination is reachable from a given source address if confirmation has been received at the source verifying that traffic has been received at - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 104
001560-7aadc0 REACH dynamic A3 fe80::213:c4ff:fedd:14b0 0013c4-dd14b0 REACH dynamic A1 Figure 5-1. Example of Neighbor Cache Without Specifying a VLAN ProCurve(config)# show ipv6 neighbor vlan 10 IPv6 ND Cache Entries IPv6 Address MAC Address State Age Port 2001:db8:260:212::101 0013c4 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 105
address information for any next-hop route is cleared until the route is refreshed in the neighbor cache. ProCurve(config)# clear ipv6 neighbors ProCurve(config)# show ipv6 neighbors ProCurve# show ipv6 neighbors IPv6 ND Cache Entries IPv6 Address MAC Address State Type Port fe80::213:c4ff - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 106
IPv6 on the switch. For IPv4 Telnet operation, refer to the Management and Configuration Guide for your switch. Outbound Telnet to the following command: ProCurve(config)# telnet fe80::215:60ff:fe79:980%vlan10 If the switch is receiving router advertisements from an IPv6 default gateway router, you - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 107
the outbound session, if in use. For example, the following figure shows that the switch is running one outbound, IPv4 session and is being accessed by two inbound sessions. ProCurve# show telnet Telnet Activity Session : 1 Privilege: Manager From : Console To : 10.0.10.140 Session - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 108
level to enable (the default) or disable all (IPv4 and IPv6) inbound Telnet access to the switch. The no form of switch, you would use this command: ProCurve(config)# no telnet-server Viewing the Current Inbound Telnet Configuration Syntax: show console This command shows the current configuration - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 109
commands, including an example of using an IPv6 address. For the details of configuring SNTP on the switch, refer to the chapter titled "Time Protocols" in the Management and Configuration Guide for your switch. The following commands are available at the global config level for SNTP operation - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 110
by the VLAN ID of the VLAN on which the server address is available. (The VLAN must be configured on the switch.) For example: fe80::11:215%vlan10 Syntax:. [no ] sntp server priority < 1 - 3 > optional setting specifies the SNTP server version expected for the specified server. (Default: 3) 5-10 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 111
■ fe80::215:60ff:fe7a:adc0 (on VLAN 10, configured on the switch) ■ 2001:db8::215:60ff:fe79:8980 as the priority "1" and "2" SNTP servers, respectively, using version 7, you would enter these commands at the global config level, as shown below. ProCurve(config)# sntp server priority 1 fe80::215:60ff - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 112
proceeding sntp server command example would appear as follows: ProCurve(config)# show sntp SNTP Configuration Time Sync Mode: Sntp SNTP Mode : Broadcast Poll of configuring Timep on the switch, refer to the chapter titled "Time Protocols" in the Management and Configuration Guide for your switch. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 113
must be configured on the switch. For example: fe80::11:215%vlan10 Syntax:. ip timep dhcp [ interval < 1 - 9999 >] ip timep manual < ipv6- Default: 720) For example, to configure a link-local Timep server address of: fe80::215:60ff:fe7a:adc0 where the address is on VLAN 10, configured on the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 114
Timep server. For example, the show timep output for the preceding ip timep manual command example would appear as follows: ProCurve(config)# sho timep Timep Configuration Time Sync Mode: Timep TimeP Mode [Disabled] : Manual Server Address : fe80::215:60ff:fe7a:adc0%vlan10 Poll Interval (min) [720 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 115
network, refer to the "File Transfers" appendix in the Management and Configuration Guide for your switch. To upload and/or download files to the switch using TFTP in an IPv6 network, you must: 1. Enable TFTP for IPv6 on the switch (see "Enabling TFTP for IPv6" on page 5-16). 2. Enter a TFTP copy - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 116
is enabled by default on the switch. However, configuration level. Syntax: [no] tftp Enables TFTP for IPv4 and IPv6 client or server functionality so that the switch can: • Use TFTP client functionality to access IPv4- or IPv6-based TFTP servers in the network to receive downloaded - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 117
>: Copies the contents of a file on a remote host to a configuration file on the switch. ■ flash < primary | secondary >: Copies a software file stored on a remote host to primary or secondary flash memory on the switch. To run a newly downloaded software image, enter the reload or boot system flash - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 118
host. ■ flash < primary | secondary >: Copies the software file used as the primary or secondary flash image on the switch to a file on a remote host. ■ startup-config: Copies the startup configuration file in flash memory to a remote file on a TFTP server. ■ running-config: Copies the running - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 119
boot or the reload command, or cycle the power to the switch. (To reset the boot image to primary flash, use boot set-default flash primary.) Syntax: auto-tftp Configures the switch to automatically download the specified software file from the TFTP server at the specified - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 120
site at www.procurve.com.) SNMP Features Supported The same SNMP for IPv4 features are supported over IPv6: ■ access to a switch using SNMP version 1, version 2c, or version 3 ■ enhanced security with the configuration of SNMP communities and SNMPv3 user-specific authentication password and privacy - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 121
Commands Supported IPv6 addressing is supported in the following SNMP configuration commands: For more information on each SNMP configuration procedure, refer to the "Configuring for Network Management Applications" chapter in the current Management and Configuration Guide for your switch. SNMPv1 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 122
-server command displays the current SNMP policy configuration, including SNMP communities, network security notifications, ) or responses to SNMP requests. ProCurve(config)# show snmp-server SNMP Communities All Traps Category SNMP Authentication Password change Login failures Port-Security - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 123
overwriting the IPv6 address and subnet mask on VLAN 1 (default VLAN) in each switch, and the Gateway IPv6 address assigned to the switch. To configure IP Preserve, enter the ip preserve statement at the end of the configuration file that will be downloaded from a TFTP server. (Note that you do not - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 124
"ProCurve" time daylight-time-rule None * * * * * * password manager password operator ip preserve Entering an ip preserve statement as the last line in a configuration file stored on a TFTP server allows you to download and execute the file as the startup-config file on an IPv6 switch. When - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 125
:fe4c:e480 exit spanning-tree Trk1 priority 4 password manager password operator Because the switch's IPv6 address and default gateway were statically configured (not assigned by a DHCP server), when the switch boots up with the IP Preserve startup configuration file (see Figure 5-10), its current - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 126
6-2 Authorized IP Managers for IPv6 6-3 Usage Notes 6-3 Configuring Authorized IP Managers for Switch Access 6-5 Using a Mask to Configure Authorized Management Stations 6-5 Configuring Single Station Access 6-5 Configuring Multiple Station Access 6-6 Displaying an Authorized IP Managers - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 127
security features that are IPv6 counterparts of IPv4 management security features on the switches covered by this guide. Feature Default CLI configure authorized IP disabled 6-5 managers for IPv6 configuring secure shell for IPv6 disabled 6-15 enabling secure copy and secure disabled - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 128
to the "Using Authorized IP Managers" chapter in the Access Security Guide. • You configure authorized IPv6 manager addresses using the ipv6 authorized-managers command. For more information, see "Configuring Authorized IP Managers for Switch Access" on page 6-5. ■ You can block all IPv4-based or - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 129
the Authorized IP Managers feature disallows access to the device, then access is denied. Therefore, with authorized IP managers configured, logging in with the correct passwords is not sufficient to access a switch through the network unless the station requesting access is also authorized in the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 130
method and IP address. Each management method can have its own set of authorized managers. Default: All Using a Mask to Configure Authorized Management Stations The ipv6-mask parameter controls how the switch uses an IPv6 address to determine the IPv6 addresses of authorized manager stations on your - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 131
ten or fewer management and/or operator stations for which you want to authorize access to the switch, it may be more efficient to configure them by entering each IPv6 address with the default mask in a separate ipv6 authorized-managers command. When used in a mask, "FFFF" specifies that each bit in - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 132
IPv6 Management Security Features Authorized IP Managers for IPv6 Conversely, in a mask, a "0" binary bit means that either the "on" or "off" setting of the corresponding IPv6 bit in an authorized address is valid and does not have to match the setting of the same bit in the specified IPv6 address. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 133
last block of an authorized IPv6 address. Figure 6-3. Example: Mask for Configuring Four Authorized IPv6 Manager Stations Last block in Mask: FFFC Last block an IPv6 address, you can authorize four IPv6-based stations to access the switch. In this mask, all bits except the last two are set to 1 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 134
applied to the IPv6 address: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64. The specified mask FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF configures eight management stations as authorized IP manager stations. Note that, in this example, the IPv6 mask is applied as follows: ■ Eight management stations in - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 135
up Authorized 2001 DB8 0000 0000 244 IPv6 Address 17FF FEB6 D37D to four stations in different subnets to access the switch. This authorized IP manager configuration is useful if only management stations are specified by the authorized IPv6 addresses. Refer to Figure 6-4 for how the bitmap - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 136
) of an IPv6 address are used as the subnet ID, only the following binary expressions and hexadecimal subnet IDs are supported in this authorized IPv6 manager configuration: Authorized Subnet ID in Fourth Hexadecimal Block of IPv6 Address 0000 0001 0002 0003 0004 0005 0006 0007 Binary Equivalent - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 137
Features Authorized IP Managers for IPv6 Displaying an Authorized IP Managers Configuration Use the show ipv6 authorized-managers command to list the IPv6 stations authorized to access the switch; for example: ProCurve# show ipv6 authorized-managers IPv6 Authorized Managers Address : 2001:db8 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 138
::070a:294ff:fea4:733d%vlan2 ProCurve(config)# ipv6 authorized-managers fe80::19af:2cff:fe34:b04a%vlan5 If you do not enter an ipv6-mask value when you configure an authorized IPv6 address, the switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default IPv6 mask. Also, if you - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 139
FFFF:FFFF and manager (the default values). Note that it is not necessary to enter either of these parameters: ProCurve(config)# ipv6 authorized-managers 2001:db8::a05b:17ff:fec5:3f61 Deleting an Authorized IP Manager Entry. Enter only the IPv6 address of the configured authorized IP manager station - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 140
are enabled in the default configuration, and are controlled switch authenticates itself to a client, users connected to the client authenticate themselves to the switch by providing a valid password that matches the operator- and/or manager-level password configured and stored locally on the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 141
switch for both IPv4 and IPv6, and activates the connection with a configured SSH server (RADIUS or TACACS+). The no form of the command disables SSH on the switch to transfer files to and from the switch over IPv4 or IPv6. Default: Disabled. Note: Enabling filetransfer automatically disables - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 142
keys to authenticate SSH clients connecting to the switch, refer to the chapter titled "Configuring Secure Shell" in the latest Access Security Guide for your switch. [timeout < 5 - 120 >] Timeout value allowed to complete an SSH authentication and login on the switch (Default: 120 seconds). 6-17 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 143
Guide for your switch. Displaying an SSH Configuration To verify an SSH configuration and display all SSH sessions running on the switch, enter the show ip ssh command. Information on all current SSH sessions (IPv4 and IPv6) is displayed. ProCurve# show ip ssh With SSH running, the switch supports - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 144
SFTP commands, such as create or remove, are not supported and return an error. For complete information on how to configure SCP or SFTP in an SSH session to copy files to and from the switch, refer to the "File Transfers" appendix in the Management and Configuration Guide for your switch. 6-19 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 145
7 IPv6 Diagnostic and Troubleshooting Contents Introduction 7-2 Ping for IPv6 (Ping6 7-2 Traceroute for IPv6 7-5 DNS Resolver for IPv6 7-8 DNS Configuration 7-8 Viewing the Current Configuration 7-10 Operating Notes 7-10 Debug/Syslog for IPv6 7-11 Configuring Debug and Event Log Messaging - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 146
are displayed on the console screen. To stop a ping test before it finishes, press [Ctrl] [C]. For more information about using a ping test, refer to the "Troubleshooting" appendix in the current Management and Configuration Guide for your switch. 7-2 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 147
an IPv6 host device configured on an IPv6 DNS server. < switch-number >: Number of an IPv6-based switch that is a member of a switch stack (IPv6 subnet). 1 - 60. Default: 1 second. [data-size - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 148
IPv6 Diagnostic and Troubleshooting Ping for IPv6 (Ping6) ProCurve# ping6 fe80::2:1%vlan10 fe80:0000:0000:0000:0000:0000:0002:0001 is alive, time = 975 ms ProCurve# ping6 2001:db8::a:1c:e3:3 repetitions 3 2001:0db8:0000:0000:000a:001c:00e3:0003 is alive, iteration 1, time = 15 ms 2001:0db8:0000:0000 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 149
to each traceroute operation are displayed on the console screen. To stop a traceroute operation before it finishes, press [Ctrl] [C]. For more information about how to configure and use a traceroute operation, refer to the "Troubleshooting" appendix in the Management and Configuration Guide. 7-5 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 150
IPv6 Diagnostic and Troubleshooting Traceroute for IPv6 Syntax: traceroute6 < ipv6-address | hostname > [minttl < 1-255 > [maxttl < 1-255 of an IPv6 host device configured on an IPv6 DNS server. minttl: Minimum number of hops allowed for each probe packet sent along the route. Default: 1; Range: 1 - - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 151
and Troubleshooting Traceroute for IPv6 ProCurve# traceroute6 (in milliseconds) for the switch to receive a response from each of the three probes sent to each router. ProCurve# traceroute6 2001:db8::10 7 *** The four remaining probes within the configured seven-hop maximum (maxttl) also timed out - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 152
. For further information and examples on using the DNS feature, refer to "DNS Resolver" in appendix C, "Troubleshooting", in the current Management and Configuration Guide for your switch. Syntax:. [no] ip dns server-address priority < 1 - 3 > < ip-addr > Used at the global config level to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 153
you want to configure the following on the switch: ■ the address 2001:db8::127:10 which identifies a DNS server in the domain named mygroup.procurve.net ■ a priority of 1 for the above server ■ the domain suffix mygroup.procurve.net Assume that the above, configured DNS server supports an IPv6 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 154
device named mars-1: ProCurve# ping6 mars-1.mygroup.procurve.net For further information and examples on using the DNS feature, refer to "DNS Resolver" in appendix C, "Troubleshooting", in the current Management and Configuration Guide for your switch. Viewing the Current Configuration Use the show - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 155
debug messages on a remote device to troubleshoot switch or network operation. For example, you can send messages about routing misconfigurations and other network protocol details to an external device, and later use them to debug network-level problems. Configuring Debug and Event Log Messaging To - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 156
destination address. • If at least one Syslog server address is configured in the startup configuration and the switch is rebooted or reset. Event log messages are the default type of debug message sent to configured debug destinations. ip Configures IPv4 OSPF and RIP routing messages to be sent to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 157
on DHCPv6 packets transmitted on a switch configured as a DHCPv6 client nd- Events during IPv6 neighbor discovery lldp Configures all LLDP message types to be sent to configured debug destinations. wireless-services Configures messages about the operation of wireless-services modules to be sent to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 158
logging on the switch without deleting configured server addresses, enter the no debug destination logging command. For complete information on how to configure a Syslog server and Debug/ Syslog message reports, refer to the "Troubleshooting" appendix in the Management and Configuration Guide. 7-14 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 159
. DoS Denial-of-Service. EUI-64 Extended Unique Identifier. Refer to "Extended Unique Identifier (EUI)" on page 3-14. Manual Address Configures an IPv6 address by using the CLI to manually enter a static address. Configuration Referred to as "Static Address Configuration" in this guide. See Static - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 160
... 5-2 DAD not supported ... 3-20 deprecation ... 4-34 in IPv6 ... 2-9 IPv6 address ... 3-10, 3-20 IPv6 address configuration ... 4-14 preferred lifetime 5-18 command prompts ... 1-3 command syntax conventions ... 1-2 configuration file TFTP download ... 5-17 TFTP upload on remote device ... 5-18 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 161
7-12 IPv6 event types supported ... 7-11 LLDP messages ... 7-13 OSPF messages ... 7-12 RIP messages ... 7-13 using Syslog servers ... 7-13 wireless-services messages ... 7-13 default settings IPv6 address autoconfig, disabled ... 4-8 addressing configuration features ... 4-3 DAD, enabled ... 4-22 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 162
5-24 downloading configuration file to IPv6 switch ... 5-24 feature description ... 5-23 for IPv6 ... 2-11 IPv6 address format ... 3-3 anycast address ... 2-9, 3-10, 3-20, 4-14, 5-2 benefits ... 2-6 command index ... -xiii configuration overview ... 4-4 DAD ... 4-18 debug ... 7-11 default gateway - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 163
features ... 2-11 selecting default router on a VLAN ... 4-30 single IPv6 link-local address on an interface ... 3-13 SNMP support ... 2-14, 5-20 SNTP See SNTP server. SSHv2 ... 2-11 See also SSH. static address configuration ... 4-11 supported switches ... 1-2 switching IPv4 and IPv6 traffic on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 164
displaying configuration ... 5-22 supported in IPv6 ProCurve switch documentation ... -xi public-key file TFTP download configuration ... 3-11 maximum number of IPv6 routes ... 2-15 OSPF debug messages ... 7-12, 7-13 RIP debug messages ... 7-12, 7-13 selecting default IPv6 router ... 4-30 switching - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 165
5-11 timep server ... 2-8 Timepv6 ... 2-10, 5-13 manual configuration ... 5-13 traceroute ... 7-5 for IPv6 ... 2-13 traceroute6 ... 7-5 traffic monitoring sFlow ... 5-20 traps displaying configuration ... 5-22 supported in IPv6 ... 5-20 troubleshooting configuring Syslog servers ... 7-13 6 - Index - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 166
3-13, 3-14, 4-6 link-local address manual configuration ... 2-8, 3-5, 3-9, 4-12 link-local address prefix ... 3-11 neighbor discovery operation ... 4-17 router advertisements used in IPv6 ... 4-29 selecting default IPv6 router ... 4-30 switching IPv4 and IPv6 traffic on same VLAN ... 2-3, 3-6 Index - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 167
forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP will not be liable for technical or editorial errors or omissions contained herein. August 2009 Manual Part Number 5992-5527 *5992-5527*
August 2009
ProCurve Series 6120 Switches
IPv6 Guide