Home » HP Manuals » Servers » HP 6120XG » Manual Viewer

HP 6120XG ProCurve Series 6120 Blade Switches Management and Configuration Gui - Page 537

TACACS-Related Problems, Event Log., All Users Are Locked Out of Access to the Switch.

Add to My Manuals
Save this manual to your list of manuals

Page 537 highlights

Troubleshooting Unusual Network Activity TACACS-Related Problems Event Log. When troubleshooting TACACS+ operation, check the switch's Event Log for indications of problem areas. All Users Are Locked Out of Access to the Switch. If the switch is func tioning properly, but no username/password pairs result in console or Telnet access to the switch, the problem may be due to how the TACACS+ server and/or the switch are configured. Use one of the following methods to recover: ■ Access the TACACS+ server application and adjust or remove the configuration parameters controlling access to the switch. ■ If the above method does not work, try eliminating configuration changes in the switch that have not been saved to flash (boot-up configuration) by causing the switch to reboot from the boot-up configuration (which includes only the configuration changes made prior to the last write memory command.) If you did not use write memory to save the authentication configuration to flash, then pressing the Reset button or cycling the power reboots the switch with the boot-up configuration. ■ Disconnect the switch from network access to any TACACS+ servers and then log in to the switch using either Telnet or direct console port access. Because the switch cannot access a TACACS+ server, it will default to local authentication. You can then use the switch's local Operator or Manager username/password pair to log on. ■ As a last resort, use the Clear/Reset button combination to reset the switch to its factory default boot-up configuration. Taking this step means you will have to reconfigure the switch to return it to operation in your network. No Communication Between the Switch and the TACACS+ Server Application. If the switch can access the server device (that is, it can ping the server), then a configuration error may be the problem. Some possibilities include: ■ The server IP address configured with the switch's TACACS-server host command may not be correct. (Use the switch's show tacacs server command to list the TACACS+ server IP address.) C-19

Section	Page
HP ProCurve 6120G/XG Switch 6120XG Switch Management and Configuration Guide	1
Front Cover	1
Title Page	3
Copyright, Notices, & Publication Data	4
Contents	5
Feature Index	26
1. Getting Started	31
Contents	31
Introduction	32
Conventions	32
Command Syntax Statements	32
Command Prompts	33
Screen Simulations	33
Configuration and Operation Examples	33
Keys	33
Sources for More Information	34
Getting Documentation From the Web	36
Online Help	36
Menu Interface	36
Command Line Interface	37
Web Browser Interface	37
Need Only a Quick Start?	38
IP Addressing	38
To Set Up and Install the Switch in Your Network	39
Physical Installation	39
2. Selecting a Management Interface	41
Contents	41
Overview	42
Understanding Physical Interfaces	42
Understanding Management Interfaces	43
Advantages of Using the Menu Interface	44
Advantages of Using the CLI	45
General Benefits	45
Information on Using the CLI	45
Advantages of Using the Web Browser Interface	46
Advantages of Using ProCurve Manager or ProCurve Manager Plus	47
Custom Login Banners for the Console and Web Browser Interfaces	48
Banner Operation with Telnet, Serial, or SSHv2 Access	49
Banner Operation with Web Browser Access	49
Configuring and Displaying a Non-Default Banner	49
Example of Configuring and Displaying a Banner	50
Operating Notes	53
3. Using the Menu Interface	55
Contents	55
Overview	56
Starting and Ending a Menu Session	57
How To Start a Menu Interface Session	58
How To End a Menu Session and Exit from the Console:	59
Main Menu Features	61
Screen Structure and Navigation	63
Rebooting the Switch	66
Menu Features List	68
Where To Go From Here	69
4. Using the Command Line Interface (CLI)	71
Contents	71
Overview	72
Accessing the CLI	72
Using the CLI	72
Privilege Levels at Logon	73
Privilege Level Operation	74
Operator Privileges	74
Manager Privileges	75
How To Move Between Levels	77
Listing Commands and Command Options	78
Listing Commands Available at Any Privilege Level	78
Listing Command Options	80
Displaying CLI “Help”	81
Configuration Commands and the Context Configuration Modes	83
CLI Control and Editing	86
Executing a Prior Command—Redo	86
Repeating Execution of a Command	86
Using a Command Alias	88
CLI Shortcut Keystrokes	90
5. Using the ProCurve Web Browser Interface	91
Contents	91
Overview	93
General Features	94
Starting a Web Browser Interface Session with the Switch	95
Using a Standalone Web Browser in a PC or UNIX Workstation	95
Using ProCurve Manager (PCM) or ProCurve Manager Plus (PCM+)	96
Tasks for Your First ProCurve Web Browser Interface Session	98
Viewing the “First Time Install” Window	98
Security: Creating Usernames and Passwords in the Browser Interface	99
Entering a User Name and Password	101
Using a User Name	101
If You Lose the Password	101
Online Help for the Web Browser Interface	102
Support/Mgmt URLs Feature	103
Support URL	104
Help and the Management Server URL	104
Using the PCM Server for Switch Web Help	105
Status Reporting Features	107
The Overview Window	107
The Port Utilization and Status Displays	108
Port Utilization	108
Port Status	110
The Alert Log	111
Sorting the Alert Log Entries	111
Alert Types and Detailed Views	112
The Status Bar	113
Setting Fault Detection Policy	115
6. Switch Memory and Configuration	117
Contents	117
Overview	119
Configuration File Management	119
Using the CLI To Implement Configuration Changes	122
Using the Menu and Web Browser Interfaces To Implement Configuration Changes	126
Menu: Implementing Configuration Changes	126
Using Save and Cancel in the Menu Interface	126
Rebooting from the Menu Interface	127
Web: Implementing Configuration Changes	129
Using Primary and Secondary Flash Image Options	130
Displaying the Current Flash Image Data	130
Switch Software Downloads	132
Local Switch Software Replacement and Removal	133
Rebooting the Switch	135
Operating Notes about Booting	135
Boot and Reload Command Comparison	136
Setting the Default Flash	137
Booting from the Default Flash (Primary or Secondary)	138
Booting from a Specified Flash	138
Using Reload	139
Multiple Configuration Files	141
General Operation	142
Transitioning to Multiple Configuration Files	143
Listing and Displaying Startup-Config Files	145
Viewing the Startup-Config File Status with Multiple Configuration Enabled	145
Displaying the Content of A Specific Startup-Config File	146
Changing or Overriding the Reboot Configuration Policy	146
Managing Startup-Config Files in the Switch	148
Renaming an Existing Startup-Config File	149
Creating a New Startup-Config File	149
Erasing a Startup-Config File	151
Using the Clear + Reset Button Combination To Reset the Switch to Its Default Configuration	153
Transferring Startup-Config Files To or From a Remote Server	153
TFTP: Copying a Configuration File to a Remote Host	154
TFTP: Copying a Configuration File from a Remote Host	155
Xmodem: Copying a Configuration File to a Serially Connected Host	156
Xmodem: Copying a Configuration from a Serially Connected Host	156
Operating Notes for Multiple Configuration Files	157
Automatic Configuration Update with DHCP Option 66	157
CLI Command	157
Possible Scenarios for Updating the Configuration File	158
Operating Notes	158
Log Messages	159
7. Interface Access and System Information	161
Contents	161
Overview	162
Interface Access: Console/Serial Link, Web, and Inbound Telnet	163
Menu: Modifying the Interface Access	164
CLI: Modifying the Interface Access	165
Making Window Size Negotiation Available for a Telnet Session	167
Denying Interface Access by Terminating Remote Management Sessions	172
System Information	173
Menu: Viewing and Configuring System Information	174
CLI: Viewing and Configuring System Information	175
Web: Configuring System Parameters	180
8. Configuring IP Addressing	181
Contents	181
Overview	182
IP Configuration	182
Just Want a Quick Start with IP Addressing?	183
IP Addressing with Multiple VLANs	184
Menu: Configuring IP Address, Gateway, and Time-To- Live (TTL)	185
CLI: Configuring IP Address, Gateway, and Time-To- Live (TTL)	186
Web: Configuring IP Addressing	190
How IP Addressing Affects Switch Operation	191
DHCP/Bootp Operation	192
Network Preparations for Configuring DHCP/Bootp	194
IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads	196
Operating Rules for IP Preserve	196
Enabling IP Preserve	197
Configuring a Single Source IP Address	200
Overview	200
Specifying the Source IP Address	200
The Source IP Selection Policy	201
Displaying the Source IP Interface Information	204
Error Messages	208
9. Time Protocols	209
Contents	209
Overview	211
TimeP Time Synchronization	211
SNTP Time Synchronization	211
Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation	212
General Steps for Running a Time Protocol on the Switch:	212
Disabling Time Synchronization	212
SNTP: Viewing, Selecting, and Configuring	213
Menu: Viewing and Configuring SNTP	214
CLI: Viewing and Configuring SNTP	217
Viewing the Current SNTP Configuration	217
Configuring (Enabling or Disabling) the SNTP Mode	219
SNTP Client Authentication	225
Requirements	225
Configuring the Key-Identifier, Authentication Mode, and Key-Value	227
Configuring a Trusted Key	227
Associating a Key with an SNTP Server	228
Enabling SNTP Client Authentication	229
Configuring Unicast and Broadcast Mode	229
Displaying SNTP Configuration Information	230
Saving Configuration Files and the Include-Credentials Command	232
TimeP: Viewing, Selecting, and Configuring	235
Menu: Viewing and Configuring TimeP	236
CLI: Viewing and Configuring TimeP	238
Viewing the Current TimeP Configuration	238
Configuring (Enabling or Disabling) the TimeP Mode	240
SNTP Unicast Time Polling with Multiple SNTP Servers	245
Displaying All SNTP Server Addresses Configured on the Switch	245
Adding and Deleting SNTP Server Addresses	246
Menu: Operation with Multiple SNTP Server Addresses Configured	246
SNTP Messages in the Event Log	246
10. Port Status and Configuration	247
Contents	247
Overview	249
Viewing Port Status and Configuring Port Parameters	249
Menu: Port Configuration	252
CLI: Viewing Port Status and Configuring Port Parameters	254
Viewing Port Status and Configuration	254
Customizing the Show Interfaces Command	256
Error Messages	258
Note on Using Pattern Matching with the “Show Interfaces Custom” Command	259
Viewing Port Utilization Statistics	259
Viewing Transceiver Status	260
Enabling or Disabling Ports and Configuring Port Mode	261
Enabling or Disabling Flow Control	263
Configuring a Broadcast Limit on the Switch	264
Configuring ProCurve Auto-MDIX	265
Web: Viewing Port Status and Configuring Port Parameters	268
Using Friendly (Optional) Port Names	269
Configuring and Operating Rules for Friendly Port Names	269
Configuring Friendly Port Names	270
Displaying Friendly Port Names with Other Port Data	271
Configuring Transceivers and Modules That Haven’t Been Inserted	275
Transceivers	275
Modules	275
Clearing the Module Configuration	275
Operating Notes	276
Uni-Directional Link Detection (UDLD)	277
Configuring UDLD	278
Enabling UDLD	279
Changing the Keepalive Interval	280
Changing the Keepalive Retries	280
Configuring UDLD for Tagged Ports	280
Viewing UDLD Information	281
Configuration Warnings and Event Log Messages	283
Uplink Failure Detection	284
Terminology	284
Guidelines	285
Configuring UFD	286
Example of UFD Configuration	286
11. Port Trunking	289
Contents	289
Overview	290
Port Trunk Features and Operation	292
Trunk Configuration Methods	292
Menu: Viewing and Configuring a Static Trunk Group	297
CLI: Viewing and Configuring Port Trunk Groups	299
Using the CLI To View Port Trunks	299
Using the CLI To Configure a Static or Dynamic Trunk Group	302
Web: Viewing Existing Port Trunk Groups	305
Trunk Group Operation Using LACP	306
Default Port Operation	309
LACP Notes and Restrictions	310
Trunk Group Operation Using the “Trunk” Option	314
How the Switch Lists Trunk Data	315
Outbound Traffic Distribution Across Trunked Links	315
12. Port Traffic Controls	319
Contents	319
Overview	321
Rate-Limiting	322
All Traffic Rate-Limiting	322
Configuring Rate-Limiting	322
Displaying the Current Rate-Limit Configuration	324
Operating Notes for Rate-Limiting	324
Configuring a Broadcast Limit on the Switch	326
Guaranteed Minimum Bandwidth (GMB)	328
Introduction	328
Terminology	328
GMB Operation	328
Impacts of QoS Queue Configuration on GMB Operation	330
Configuring Guaranteed Minimum Bandwidth for Outbound Traffic	331
Displaying the Current Guaranteed Minimum Bandwidth Configuration	335
GMB Operating Notes	337
Jumbo Frames	338
Terminology	338
Operating Rules	339
Configuring Jumbo Frame Operation	340
Overview	340
Viewing the Current Jumbo Configuration	341
Enabling or Disabling Jumbo Traffic on a VLAN	343
Configuring a Maximum Frame Size	343
SNMP Implementation	343
Displaying the Maximum Frame Size	344
Operating Notes for Maximum Frame Size	344
Operating Notes for Jumbo Traffic-Handling	345
Troubleshooting	347
Cut-Through Switching on the HP 6120XG	347
13. Configuring for Network Management Applications	349
Contents	349
Using SNMP Tools To Manage the Switch	352
Overview	352
SNMP Management Features	354
Configuring for SNMP version 1 and 2c Access to the Switch	354
Configuring for SNMP Version 3 Access to the Switch	355
SNMP Version 3 Commands	356
Enabling SNMPv3	357
SNMPv3 Users	357
Group Access Levels	361
SNMPv3 Communities	361
Menu: Viewing and Configuring non-SNMP version 3 Communities	363
CLI: Viewing and Configuring SNMP Community Names	365
SNMP Notifications	367
Supported Notifications	367
General Steps for Configuring SNMP Notifications	368
SNMPv1 and SNMPv2c Traps	369
Configuring an SNMP Trap Receiver	369
Enabling SNMPv2c Informs	371
Configuring SNMPv3 Notifications	373
Managing Network Security Notifications	376
Enabling Link-Change Traps	378
Configuring the Source IP Address for SNMP Notifications	379
Displaying SNMP Notification Configuration	381
Configuring Listening Mode	383
Advanced Management: RMON	384
CLI-Configured sFlow with Multiple Instances	384
Terminology	384
Configuring sFlow	385
Viewing sFlow Configuration and Status	385
LLDP (Link-Layer Discovery Protocol)	388
Terminology	389
General LLDP Operation	391
LLDP-MED	391
Packet Boundaries in a Network Topology	391
Configuration Options	392
Options for Reading LLDP Information Collected by the Switch	394
LLDP and LLDP-MED Standards Compatibility	394
LLDP Operating Rules	395
Configuring LLDP Operation	396
Viewing the Current Configuration	396
Configuring Global LLDP Packet Controls	398
Configuring SNMP Notification Support	402
Configuring Per-Port Transmit and Receive Modes	403
Configuring Basic LLDP Per-Port Advertisement Content	404
Configuring Support for Port Speed and Duplex Advertisements	406
Port VLAN ID TLV Support on LLDP	407
Configuring the VLAN ID TLV	407
Displaying the TLVs Advertised	408
SNMP Support	409
LLDP-MED (Media-Endpoint-Discovery)	410
LLDP-MED Topology Change Notification	413
LLDP-MED Fast Start Control	414
Advertising Device Capability, Network Policy, PoE Status and Location Data	414
Configuring Location Data for LLDP-MED Devices	417
Displaying Advertisement Data	422
Displaying Switch Information Available for Outbound Advertisements	423
Displaying LLDP Statistics	427
LLDP Operating Notes	429
LLDP and CDP Data Management	431
LLDP and CDP Neighbor Data	431
CDP Operation and Commands	433
A. File Transfers	437
Contents	437
Overview	439
Downloading Switch Software	439
General Software Download Rules	440
Using TFTP To Download Software from a Server	440
Menu: TFTP Download from a Server to Primary Flash	441
CLI: TFTP Download from a Server to Flash	443
Enabling TFTP	445
Using Auto-TFTP	447
Using Secure Copy and SFTP	448
How It Works	449
The SCP/SFTP Process	449
Disable TFTP and Auto-TFTP for Enhanced Security	450
Command Options	451
Authentication	452
SCP/SFTP Operating Notes	452
Troubleshooting SSH, SFTP, and SCP Operations	454
Using Xmodem to Download Switch Software From a PC or UNIX Workstation	455
Menu: Xmodem Download to Primary Flash	456
CLI: Xmodem Download from a PC or UNIX Workstation to Primary or Secondary Flash	457
Switch-to-Switch Download	458
Menu: Switch-to-Switch Download to Primary Flash	458
CLI: Switch-To-Switch Downloads	459
Using PCM+ to Update Switch Software	460
Copying Software Images	461
TFTP: Copying a Software Image to a Remote Host	461
Xmodem: Copying a Software Image from the Switch to a USB Serial Console Connected PC or UNIX Workstation	461
Transferring Switch Configurations	462
TFTP: Copying a Configuration File to a Remote Host	462
TFTP: Copying a Configuration File from a Remote Host	463
TFTP: Copying a Customized Command File to a Switch	463
Xmodem: Copying a Configuration File to a USB Serial Console Connected PC or UNIX Workstation	464
Xmodem: Copying a Configuration File from a Serially Connected PC or UNIX Workstation	465
Copying Diagnostic Data to a Remote Host, USB Device, PC or UNIX Workstation	466
Copying Command Output to a Destination Device	467
Copying Event Log Output to a Destination Device	467
Copying Crash Data Content to a Destination Device	468
Copying Crash Log Data Content to a Destination Device	469
B. Monitoring and Analyzing Switch Operation	471
Contents	471
Overview	473
Status and Counters Data	474
Menu Access To Status and Counters	475
General System Information	476
Menu Access	476
CLI Access to System Information	477
Task Monitor—Collecting Processor Data	478
Switch Management Address Information	478
Menu Access	478
CLI Access	479
Port Status	480
Menu: Displaying Port Status	480
CLI Access	480
Web Access	480
Viewing Port and Trunk Group Statistics and Flow Control Status	481
Menu Access to Port and Trunk Statistics	482
CLI Access To Port and Trunk Group Statistics	483
Viewing the Switch’s MAC Address Tables	483
Menu Access to the MAC Address Views and Searches	483
CLI Access for MAC Address Views and Searches	486
Spanning Tree Protocol (MSTP) Information	488
CLI Access to MSTP Data	488
Internet Group Management Protocol (IGMP) Status	489
VLAN Information	490
Web Browser Interface Status Information	492
Traffic Mirroring	493
Mirroring Terminology	494
Mirrored Traffic Destinations	496
Local Destinations	496
Monitored Traffic Sources	496
Criteria for Selecting Mirrored Traffic	496
Mirroring Sessions	496
Mirroring Configuration	497
Endpoint Switches and Intermediate Devices	498
Using the Menu or Web Interface To Configure Local Mirroring	499
Menu and Web Interface Limits	499
Configuration Steps	500
CLI: Configuring Local Mirroring	503
Local Mirroring Overview	503
1. Determine the Mirroring Session and Destination	505
2. Configure a Mirroring Session on the Source Switch	505
3. Configure the Monitored Traffic in a Mirror Session	505
Traffic Selection Options	506
Mirroring-Source Restrictions	506
Selecting All Inbound/Outbound Traffic to Mirror	506
Displaying a Mirroring Configuration	508
Displaying the Mirroring Configuration Summary	508
Viewing Mirroring in the Current Configuration File	510
Mirroring Configuration Examples	511
Local Mirroring Using Traffic-Direction Criteria	511
Maximum Supported Frame Size	512
Enabling Jumbo Frames To Increase Mirroring Path MTU	513
Effect of Downstream VLAN Tagging on Untagged, Mirrored Traffic	514
Operating Notes	515
Troubleshooting Mirroring	517
C. Troubleshooting	519
Contents	519
Overview	522
Troubleshooting Approaches	523
Browser or Telnet Access Problems	525
Unusual Network Activity	527
General Problems	527
802.1Q Prioritization Problems	528
IGMP-Related Problems	528
LACP-Related Problems	529
Port-Based Access Control (802.1X)-Related Problems	529
QoS-Related Problems	532
Radius-Related Problems	533
Spanning-Tree Protocol (MSTP) and Fast-Uplink Problems	534
SSH-Related Problems	535
TACACS-Related Problems	537
TimeP, SNTP, or Gateway Problems	539
VLAN-Related Problems	539
Using the Event Log for Troubleshooting Switch Problems	542
Event Log Entries	542
Menu: Displaying and Navigating in the Event Log	549
CLI: Displaying the Event Log	550
CLI: Clearing Event Log Entries	550
CLI: Turning Event Numbering On	551
Using Log Throttling to Reduce Duplicate Event Log and SNMP Messages	551
Log Throttle Periods	552
Example of Log Throttling	552
Example of Event Counter Operation	554
Debug/Syslog Operation	555
Debug/Syslog Messaging	555
Debug/Syslog Destination Devices	555
Debug/Syslog Configuration Commands	556
Configuring Debug/Syslog Operation	557
Displaying a Debug/Syslog Configuration	559
Debug Command	562
Debug Messages	562
Debug Destinations	563
Logging Command	565
Configuring a Syslog Server	566
Adding a Description for a Syslog Server	568
Adding a Priority Description	569
Configuring the Severity Level for Event Log Messages Sent to a Syslog Server	570
Configuring the System Module Used to Select the Event Log Messages Sent to a Syslog Server	571
Operating Notes for Debug and Syslog	571
Diagnostic Tools	573

Match case Limit results 1 per page

Troubleshooting

Unusual Network Activity

TACACS-Related Problems

Event Log.

When troubleshooting TACACS+ operation, check the switch’s

Event Log for indications of problem areas.

All Users Are Locked Out of Access to the Switch.

If the switch is func-

tioning properly, but no username/password pairs result in console or Telnet

access to the switch, the problem may be due to how the TACACS+ server

and/or the switch are configured. Use one of the following methods to recover:

■

Access the TACACS+ server application and adjust or remove the

configuration parameters controlling access to the switch.

■

If the above method does not work, try eliminating configuration

changes in the switch that have not been saved to flash (boot-up

configuration) by causing the switch to reboot from the boot-up

configuration (which includes only the configuration changes made

prior to the last

write memory

command.) If you did not use

write

memory

to save the authentication configuration to flash, then

pressing the Reset button or cycling the power reboots the switch

with the boot-up configuration.

■

Disconnect the switch from network access to any TACACS+ servers

and then log in to the switch using either Telnet or direct console port

access. Because the switch cannot access a TACACS+ server, it will

default to local authentication. You can then use the switch’s local

Operator or Manager username/password pair to log on.

■

As a last resort, use the Clear/Reset button combination to reset the

switch to its factory default boot-up configuration. Taking this step

means you will have to reconfigure the switch to return it to operation

in your network.

No Communication Between the Switch and the TACACS+ Server

Application.

If the switch can access the server device (that is, it can

ping

the server), then a configuration error may be the problem. Some possibilities

include:

■

The server IP address configured with the switch’s TACACS-server

host command may not be correct. (Use the switch’s

show tacacs-

server

command to list the TACACS+ server IP address.)

C-19