Home » HP Manuals » Servers » HP 6120XG » Manual Viewer

HP 6120XG HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 134

Example: How Hexadecimal C in a Mask Authorizes Four IPv6 Manager Addresses

Add to My Manuals
Save this manual to your list of manuals

Page 134 highlights

IPv6 Management Security Features Authorized IP Managers for IPv6 to 0 ("off") and allow the corresponding bits in an authorized IPv6 address to be either "on" or "off". As a result, only the four IPv6 addresses shown in Figure 6-5 are allowed access. IPv6 Mask IPv6 Address Entered with the "ipv6 authorized-managers" Command Other Authorized IPv6 Addresses 1st Block FFFF 2001 2nd Block FFFF DB8 3rd Block FFFF 0000 4th Block FFFF 0000 5th Block FFFF 244 6th Block FFFF 17FF 7th Block FFFF FEB6 8th Block FFFC D37D 2001 DB8 0000 0000 244 2001 DB8 0000 0000 244 2001 DB8 0000 0000 244 17FF FEB6 D37C 17FF FEB6 D37E 17FF FEB6 D37F Figure 6-5. Example: How Hexadecimal C in a Mask Authorizes Four IPv6 Manager Addresses Example. Figure 6-6 shows an example in which a mask is applied to the IPv6 address: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64. The specified mask FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF configures eight management stations as authorized IP manager stations. Note that, in this example, the IPv6 mask is applied as follows: ■ Eight management stations in different subnets are authorized by the value of the fourth block (FFF8) in the 64-bit prefix ID (FFFF:FFFF:FFFF:FFF8) of the mask. (The fourth block of the prefix ID is often used to define subnets in an IPv6 network.) The binary equivalent of FFF8 that is used to specify valid subnet IDs in the IPv6 addresses of authorized stations is: 1111 1111 1111 1000. The three "off" bits (1000) in the last part of the this block (FFF8) of the mask allow for eight possible authorized IPv6 stations: 2001:DB8:0000:0000:244:17FF:FEB6:D37D 2001:DB8:0000:0001:244:17FF:FEB6:D37D 2001:DB8:0000:0002:244:17FF:FEB6:D37D 2001:DB8:0000:0003:244:17FF:FEB6:D37D 2001:DB8:0000:0004:244:17FF:FEB6:D37D 2001:DB8:0000:0005:244:17FF:FEB6:D37D 2001:DB8:0000:0006:244:17FF:FEB6:D37D 2001:DB8:0000:0007:244:17FF:FEB6:D37D 6-9

Section	Page
Getting Started	17
Contents	17
Introduction	18
Conventions	18
Command Syntax Statements	18
Command Prompts	19
Screen Simulations	19
Configuration and Operation Examples	20
Keys	20
Sources for More Information	20
Getting Documentation From the Web	22
Online Help	22
Menu Interface	22
Command Line Interface	23
Web Browser Interface	23
To Set Up and Install the Switch in Your Network	24
Introduction to IPv6	25
Contents	25
Migrating to IPv6	27
IPv6 Propagation	28
Dual-Stack Operation	28
Connecting to Devices Supporting IPv6 Over IPv4 Tunneling	29
Information Sources for Tunneling IPv6 Over IPv4	29
Use Model	30
Adding IPv6 Capability	30
Supported IPv6 Operation	30
Configuration and Management	31
Management Features	31
IPv6 Addressing	31
SLAAC (Stateless Automatic Address Configuration)	31
DHCPv6 (Stateful) Address Configuration	32
Static Address Configuration	32
Default IPv6 Gateway	32
Neighbor Discovery (ND) in IPv6	33
IPv6 Management Features	34
TFTPv6 Transfers	34
IPv6 Time Configuration	34
Telnet6	34
IP Preserve	35
Web Browser Interface	35
Path MTU (PMTU) Discovery	35
Configurable IPv6 Security	35
SSHv2 on IPv6	35
IP Authorized Managers	36
Diagnostic and Troubleshooting	37
Ping6	37
Traceroute6	37
Debug/Syslog Enhancements	37
Domain Name System (DNS) Resolution	37
IPv6 Neighbor Discovery (ND) Controls	38
Event Log	38
SNMP	38
Loopback Address	38
IPv6 Scalability	39
IPv6 Addressing	40
Contents	40
Introduction	42
IPv6 Address Structure and Format	42
Address Format	42
Address Notation	42
Network Prefix	43
Interface (Device) Identifier	43
IPv6 Addressing Options	44
IPv6 Address Sources	44
General IPv6 Address Types	44
IPv6 Address Sources	46
Stateless Address Autoconfiguration (SLAAC)	46
Applications	46
Preferred and Valid Lifetimes of Stateless Autoconfigured Addresses	46
Stateful (DHCPv6) Address Configuration	47
Static Address Configuration	48
Address Types and Scope	49
Address Types	49
Address Scope	50
Unicast Address Prefixes	50
Link-Local Unicast Address	52
Autoconfiguring Link-Local Unicast Addresses	52
Extended Unique Identifier (EUI)	53
Statically Configuring Link-Local Addresses	54
Global Unicast Address	55
Stateless Autoconfiguration of a Global Unicast Address	55
Static Configuration of a Global Unicast Address	56
Prefixes in Routable IPv6 Addresses	57
Unique Local Unicast IPv6 Address	58
Anycast Addresses	59
Multicast Application to IPv6 Addressing	60
Overview of the Multicast Operation in IPv6	60
IPv6 Multicast Address Format	61
Multicast Group Identification	61
Solicited-Node Multicast Address Format	62
Loopback Address	63
The Unspecified Address	63
IPv6 Address Deprecation	64
Preferred and Valid Address Lifetimes	64
IPv6 Addressing Configuration	66
Contents	66
Introduction	68
General Configuration Steps	69
Configuring IPv6 Addressing	70
Enabling IPv6 with an Automatically Configured Link-Local Address	71
Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on a VLAN	72
Operating Notes	73
Enabling DHCPv6	74
Operating Notes	75
Configuring a Static IPv6 Address on a VLAN	76
Statically Configuring a Link-Local Unicast Address	77
Statically Configuring A Global Unicast Address	78
Operating Notes	79
Statically Configuring An Anycast Address	79
Duplicate Address Detection (DAD) for Statically Configured Addresses	81
Disabling IPv6 on a VLAN	81
Neighbor Discovery (ND)	82
Duplicate Address Detection (DAD)	83
DAD Operation	83
Configuring DAD	84
Operating Notes for Neighbor Discovery	85
View the Current IPv6 Addressing Configuration	87
Router Access and Default Router Selection	94
Router Advertisements	94
Router Solicitations	94
Default IPv6 Router	95
Router Redirection	95
View IPv6 Gateway, Route, and Router Neighbors	96
Viewing Gateway and IPv6 Route Information	96
Viewing IPv6 Router Information	97
Address Lifetimes	99
Preferred Lifetime	99
Valid Lifetime	99
Sources of IPv6 Address Lifetimes	99
IPv6 Management Features	101
Contents	101
Introduction	102
Viewing and Clearing the IPv6 Neighbors Cache	102
Viewing the Neighbor Cache	103
Clearing the Neighbor Cache	105
IPv6 Telnet Operation	106
Outbound Telnet to Another Device	106
Viewing the Current Telnet Activity on a Switch	107
Enabling or Disabling Inbound Telnet Access	108
Viewing the Current Inbound Telnet Configuration	108
SNTP and Timep	109
Configuring (Enabling or Disabling) the SNTP Mode	109
Configuring an IPv6 Address for an SNTP Server	110
Configuring (Enabling or Disabling) the Timep Mode	112
TFTP File Transfers Over IPv6	115
Enabling TFTP for IPv6	116
Using TFTP to Copy Files over IPv6	117
Using Auto-TFTP for IPv6	119
SNMP Management for IPv6	120
SNMP Features Supported	120
SNMP Configuration Commands Supported	121
SNMPv1 and V2c	121
SNMPv3	121
IP Preserve for IPv6	123
IPv6 Management Security Features	126
Contents	126
IPv6 Management Security	127
Authorized IP Managers for IPv6	128
Usage Notes	128
Configuring Authorized IP Managers for Switch Access	130
Using a Mask to Configure Authorized Management Stations	130
Configuring Single Station Access	130
Configuring Multiple Station Access	131
Displaying an Authorized IP Managers Configuration	137
Additional Examples of Authorized IPv6 Managers Configuration	138
Secure Shell (SSH) for IPv6	140
Configuring SSH for IPv6	140
Displaying an SSH Configuration	143
Secure Copy and Secure FTP for IPv6	144
IPv6 Diagnostic and Troubleshooting	145
Contents	145
Introduction	146
Ping for IPv6 (Ping6)	146
Traceroute for IPv6	149
DNS Resolver for IPv6	152
DNS Configuration	152
Viewing the Current Configuration	154
Operating Notes	154
Debug/Syslog for IPv6	155
Configuring Debug and Event Log Messaging	155
Debug Command	156
Configuring Debug Destinations	157
Logging Command	158
IPv6 Terminology	159
Symbols	160
A	160
B	160
C	160
D	161
E	161
F	162
G	162
I	162
L	163
M	163
N	163
O	164
P	164
Q	164
R	164
S	164
T	165
U	166
V	166

Match case Limit results 1 per page

6-9

IPv6 Management Security Features

Authorized IP Managers for IPv6

to 0 (“off”) and allow the corresponding bits in an authorized IPv6 address to

be either “on” or “off”. As a result, only the four IPv6 addresses shown in Figure

6-5 are allowed access.

Figure 6-5.

Example: How Hexadecimal C in a Mask Authorizes Four IPv6 Manager Addresses

Example.

Figure 6-6 shows an example in which a mask is applied to the

IPv6 address:

2001:DB8:0000:0000:244:17FF:FEB6:D37D/64

. The specified mask

FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF

configures eight management stations as

authorized IP manager stations.

Note that, in this example, the IPv6 mask is applied as follows:

■

Eight management stations in different subnets are authorized by the

value of the fourth block (

FFF8

) in the 64-bit prefix ID (

FFFF:FFFF:FFFF:FFF8

)

of the mask. (The fourth block of the prefix ID is often used to define

subnets in an IPv6 network.)

The binary equivalent of

FFF8

that is used to specify valid subnet IDs in the

IPv6 addresses of authorized stations is: 1111 1111 1111 1000.

The three “off” bits (1000

) in the last part of the this block (

FFF8

) of the

mask allow for eight possible authorized IPv6 stations:

2001:DB8:0000:0000

:244:17FF:FEB6:D37D

2001:DB8:0000:0001

:244:17FF:FEB6:D37D

2001:DB8:0000:0002

:244:17FF:FEB6:D37D

2001:DB8:0000:0003

:244:17FF:FEB6:D37D

2001:DB8:0000:0004

:244:17FF:FEB6:D37D

2001:DB8:0000:0005

:244:17FF:FEB6:D37D

2001:DB8:0000:0006

:244:17FF:FEB6:D37D

2001:DB8:0000:0007

:244:17FF:FEB6:D37D

1st

Block

2nd

Block

3rd

Block

4th

Block

5th

Block

6th

Block

7th

Block

8th

Block

IPv6 Mask

FFFF

FFFC

IPv6 Address Entered with the “ipv6

authorized-managers” Command

2001

DB8

0000

244

17FF

FEB6

D37D

Other Authorized IPv6 Addresses

2001

DB8

0000

244

17FF

FEB6

D37C

2001

DB8

0000

244

17FF

FEB6

D37E

2001

DB8

0000

244

17FF

FEB6

D37F