Home » HP Manuals » Servers » HP 6120XG » Manual Viewer

HP 6120XG ProCurve Series 6120 Blade Switches Management and Configuration Gui - Page 471

SSH-Related Problems, Switch access refused to a client.

Add to My Manuals
Save this manual to your list of manuals

Page 471 highlights

Troubleshooting Unusual Network Activity SSH-Related Problems Switch access refused to a client. Even though you have placed the client's public key in a text file and copied the file (using the copy tftp pub-keyfile command) into the switch, the switch refuses to allow the client to have access. If the source SSH client is an SSHv2 application, the public key may be in the PEM format, which the switch (SSHv1) does not interpret. Check the SSH client application for a utility that can convert the PEM-formatted key into an ASCII-formatted key. Executing IP SSH does not enable SSH on the switch. The switch does not have a host key. Verify by executing show ip host-public-key. If you see the message ssh cannot be enabled until a host key is configured (use 'crypto' command). then you need to generate an SSH key pair for the switch. To do so, execute crypto key generate.(Refer to "2. Generating the Switch's Public and Private Key Pair" in the SSH chapter of the Access Security Guide for your switch.) C-17

Section	Page
Getting Started	27
Contents	27
Introduction	28
Conventions	28
Command Syntax Statements	28
Command Prompts	29
Screen Simulations	29
Configuration and Operation Examples	29
Keys	29
Sources for More Information	30
Getting Documentation From the Web	32
Online Help	32
Need Only a Quick Start?	34
IP Addressing	34
To Set Up and Install the Switch in Your Network	34
Physical Installation	34
Selecting a Management Interface	36
Contents	36
Overview	37
Understanding Physical Interfaces	37
Understanding Management Interfaces	38
Advantages of Using the Menu Interface	39
Advantages of Using the CLI	40
Advantages of Using the Web Browser Interface	41
Advantages of Using ProCurve Manager or ProCurve Manager Plus	42
Custom Login Banners for the Console and Web Browser Interfaces	44
Using the Menu Interface	49
Contents	49
Overview	50
Starting and Ending a Menu Session	51
How To Start a Menu Interface Session	52
How To End a Menu Session and Exit from the Console:	53
Main Menu Features	55
Screen Structure and Navigation	57
Rebooting the Switch	60
Menu Features List	62
Where To Go From Here	63
Using the Command Line Interface (CLI)	64
Contents	64
Overview	65
Accessing the CLI	65
Using the CLI	65
Privilege Levels at Logon	66
Privilege Level Operation	67
How To Move Between Levels	70
Listing Commands and Command Options	71
Displaying CLI “Help”	74
Configuration Commands and the Context Configuration Modes	76
CLI Control and Editing	79
Executing a Prior Command—Redo	79
Repeating Execution of a Command	79
Using a Command Alias	81
CLI Shortcut Keystrokes	83
Using the ProCurve Web Browser Interface	84
Contents	84
Overview	85
General Features	86
Starting a Web Browser Interface Session with the Switch	87
Using a Standalone Web Browser in a PC or UNIX Workstation	87
Using ProCurve Manager (PCM) or ProCurve Manager Plus (PCM+)	88
Tasks for Your First ProCurve Web Browser Interface Session	90
Viewing the “First Time Install” Window	90
Security: Creating Usernames and Passwords in the Browser Interface	91
Online Help for the Web Browser Interface	94
Support/Mgmt URLs Feature	95
Support URL	96
Help and the Management Server URL	96
Using the PCM Server for Switch Web Help	97
Status Reporting Features	99
The Overview Window	99
The Port Utilization and Status Displays	100
The Alert Log	103
The Status Bar	105
Setting Fault Detection Policy	107
Switch Memory and Configuration	109
Contents	109
Overview	111
Configuration File Management	111
Using the CLI To Implement Configuration Changes	114
Using the Menu and Web Browser Interfaces To Implement Configuration Changes	118
Menu: Implementing Configuration Changes	118
Web: Implementing Configuration Changes	121
Using Primary and Secondary Flash Image Options	122
Displaying the Current Flash Image Data	122
Switch Software Downloads	124
Local Switch Software Replacement and Removal	125
Rebooting the Switch	127
Multiple Configuration Files	133
General Operation	134
Transitioning to Multiple Configuration Files	135
Listing and Displaying Startup-Config Files	137
Changing or Overriding the Reboot Configuration Policy	138
Managing Startup-Config Files in the Switch	140
Transferring Startup-Config Files To or From a Remote Server	145
Automatic Configuration Update with DHCP Option 66	149
CLI Command	149
Possible Scenarios for Updating the Configuration File	150
Operating Notes	150
Log Messages	151
Interface Access and System Information	152
Contents	152
Overview	153
Interface Access: Console/Serial Link, Web, and Inbound Telnet	154
Menu: Modifying the Interface Access	155
CLI: Modifying the Interface Access	156
Denying Interface Access by Terminating Remote Management Sessions	162
System Information	163
Menu: Viewing and Configuring System Information	164
CLI: Viewing and Configuring System Information	165
Web: Configuring System Parameters	170
Configuring IP Addressing	171
Contents	171
Overview	172
IP Configuration	172
Just Want a Quick Start with IP Addressing?	173
IP Addressing with Multiple VLANs	174
Menu: Configuring IP Address, Gateway, and Time-To- Live (TTL)	175
CLI: Configuring IP Address, Gateway, and Time-To- Live (TTL)	176
Web: Configuring IP Addressing	180
How IP Addressing Affects Switch Operation	181
IP Preserve: Retaining VLAN-1 IP Addressing Across Configuration File Downloads	186
Operating Rules for IP Preserve	186
Enabling IP Preserve	187
Time Protocols	190
Contents	190
Overview	191
TimeP Time Synchronization	191
SNTP Time Synchronization	191
Selecting a Time Synchronization Protocol or Turning Off Time Protocol Operation	192
General Steps for Running a Time Protocol on the Switch:	192
Disabling Time Synchronization	192
SNTP: Viewing, Selecting, and Configuring	193
Menu: Viewing and Configuring SNTP	194
CLI: Viewing and Configuring SNTP	197
TimeP: Viewing, Selecting, and Configuring	205
Menu: Viewing and Configuring TimeP	206
CLI: Viewing and Configuring TimeP	207
SNTP Unicast Time Polling with Multiple SNTP Servers	214
Displaying All SNTP Server Addresses Configured on the Switch	214
Adding and Deleting SNTP Server Addresses	215
Menu: Operation with Multiple SNTP Server Addresses Configured	215
SNTP Messages in the Event Log	215
Port Status and Configuration	216
Contents	216
Overview	218
Viewing Port Status and Configuring Port Parameters	218
Menu: Port Configuration	221
CLI: Viewing Port Status and Configuring Port Parameters	223
Customizing the Show Interfaces Command	225
Viewing Port Utilization Statistics	228
Viewing Transceiver Status	229
Enabling or Disabling Ports and Configuring Port Mode	230
Enabling or Disabling Flow Control	232
Configuring a Broadcast Limit on the Switch	233
Configuring ProCurve Auto-MDIX	234
Web: Viewing Port Status and Configuring Port Parameters	237
Using Friendly (Optional) Port Names	238
Configuring and Operating Rules for Friendly Port Names	238
Configuring Friendly Port Names	239
Displaying Friendly Port Names with Other Port Data	240
Configuring Transceivers and Modules That Haven’t Been Inserted	244
Clearing the Module Configuration	244
Uni-Directional Link Detection (UDLD)	246
Configuring UDLD	247
Viewing UDLD Information	250
Configuration Warnings and Event Log Messages	252
Port Trunking	253
Contents	253
Overview	254
Port Trunk Features and Operation	256
Trunk Configuration Methods	256
Menu: Viewing and Configuring a Static Trunk Group	261
CLI: Viewing and Configuring Port Trunk Groups	263
Using the CLI To View Port Trunks	263
Using the CLI To Configure a Static or Dynamic Trunk Group	266
Web: Viewing Existing Port Trunk Groups	269
Trunk Group Operation Using LACP	270
Default Port Operation	273
LACP Notes and Restrictions	274
Trunk Group Operation Using the “Trunk” Option	278
How the Switch Lists Trunk Data	279
Outbound Traffic Distribution Across Trunked Links	279
Port Traffic Controls	282
Contents	282
Overview	283
Jumbo Frames	283
Terminology	283
Operating Rules	284
Configuring Jumbo Frame Operation	285
Configuring a Maximum Frame Size	288
Operating Notes for Jumbo Traffic-Handling	290
Troubleshooting	292
Configuring for Network Management Applications	293
Contents	293
Using SNMP Tools To Manage the Switch	295
Overview	295
SNMP Management Features	297
Configuring for SNMP version 1 and 2c Access to the Switch	297
Configuring for SNMP Version 3 Access to the Switch	298
SNMP Version 3 Commands	299
SNMP Notifications	310
Advanced Management: RMON	327
LLDP (Link-Layer Discovery Protocol)	328
Terminology	329
General LLDP Operation	331
Packet Boundaries in a Network Topology	331
Configuration Options	332
Options for Reading LLDP Information Collected by the Switch	334
LLDP and LLDP-MED Standards Compatibility	334
LLDP Operating Rules	335
Configuring LLDP Operation	336
LLDP-MED (Media-Endpoint-Discovery)	347
Displaying Advertisement Data	360
LLDP Operating Notes	367
LLDP and CDP Data Management	369
File Transfers	375
Contents	375
Overview	377
Downloading Switch Software	377
General Software Download Rules	378
Using TFTP To Download Software from a Server	378
Using Secure Copy and SFTP	386
The SCP/SFTP Process	387
Using Xmodem to Download Switch Software From a PC or UNIX Workstation	393
Switch-to-Switch Download	396
Using PCM+ to Update Switch Software	398
Copying Software Images	399
Transferring Switch Configurations	400
Copying Diagnostic Data to a Remote Host, USB Device, PC or UNIX Workstation	404
Monitoring and Analyzing Switch Operation	408
Contents	408
Overview	410
Status and Counters Data	411
Menu Access To Status and Counters	412
General System Information	413
Task Monitor—Collecting Processor Data	415
Switch Management Address Information	415
Port Status	417
Viewing Port and Trunk Group Statistics and Flow Control Status	418
Viewing the Switch’s MAC Address Tables	421
Spanning Tree Protocol (MSTP) Information	425
Internet Group Management Protocol (IGMP) Status	426
VLAN Information	427
Web Browser Interface Status Information	429
Traffic Mirroring	430
Mirroring Terminology	431
Mirrored Traffic Destinations	433
Monitored Traffic Sources	433
Criteria for Selecting Mirrored Traffic	433
Mirroring Sessions	433
Mirroring Configuration	434
Using the Menu or Web Interface To Configure Local Mirroring	436
CLI: Configuring Local Mirroring	440
1. Determine the Mirroring Session and Destination	442
2. Configure a Mirroring Session on the Source Switch	442
3. Configure the Monitored Traffic in a Mirror Session	442
Selecting All Inbound/Outbound Traffic to Mirror	443
Displaying a Mirroring Configuration	445
Mirroring Configuration Examples	448
Maximum Supported Frame Size	449
Operating Notes	452
Troubleshooting Mirroring	454
Troubleshooting	455
Contents	455
Overview	458
Troubleshooting Approaches	459
Browser or Telnet Access Problems	461
Unusual Network Activity	463
General Problems	463
802.1Q Prioritization Problems	464
IGMP-Related Problems	464
LACP-Related Problems	465
Port-Based Access Control (802.1X)-Related Problems	465
QoS-Related Problems	468
Radius-Related Problems	469
Spanning-Tree Protocol (MSTP) and Fast-Uplink Problems	470
SSH-Related Problems	471
TACACS-Related Problems	473
TimeP, SNTP, or Gateway Problems	475
VLAN-Related Problems	475
Using the Event Log for Troubleshooting Switch Problems	478
Event Log Entries	478
Menu: Displaying and Navigating in the Event Log	485
CLI: Displaying the Event Log	486
CLI: Clearing Event Log Entries	486
CLI: Turning Event Numbering On	487
Using Log Throttling to Reduce Duplicate Event Log and SNMP Messages	487
Debug/Syslog Operation	491
Debug/Syslog Messaging	491
Debug/Syslog Destination Devices	491
Debug/Syslog Configuration Commands	492
Configuring Debug/Syslog Operation	493
Debug Command	499
Logging Command	502
Adding a Description for a Syslog Server	505
Adding a Priority Description	506
Configuring the Severity Level for Event Log Messages Sent to a Syslog Server	507
Operating Notes for Debug and Syslog	508
Diagnostic Tools	510
Port Auto-Negotiation	511
Ping and Link Tests	511
Traceroute Command	515
Viewing Switch Configuration and Operation	519
CLI: Viewing the Startup or Running Configuration File	519
Web: Viewing the Configuration File	519
CLI: Viewing a Summary of Switch Operational Data	519
CLI: Viewing More Information on Switch Operation	525
CLI: Useful Commands for Troubleshooting Sessions	529
Restoring the Factory-Default Configuration	530
CLI: Resetting to the Factory-Default Configuration	530
Clear/Reset: Resetting to the Factory-Default Configuration	530
Restoring a Flash Image	531
DNS Resolver	533
Terminology	533
Basic Operation	534
Configuring and Using DNS Resolution with DNS-Compatible Commands	535
Configuring a DNS Entry	536
Example Using DNS Names with Ping and Traceroute	537
Viewing the Current DNS Configuration	539
Operating Notes	540
Event Log Messages	541
MAC Address Management	542
Contents	542
Overview	543
Determining MAC Addresses	544
Menu: Viewing the Switch’s MAC Addresses	545
CLI: Viewing the Port and VLAN MAC Addresses	546
Viewing the MAC Addresses of Connected Devices	548
Monitoring Resources	549
Contents	549
Viewing Information on Resource Usage	550
Policy Enforcement Engine	550
When Insufficient Resources Are Available	551
Daylight Savings Time on ProCurve Switches	552
Network Out-of-Band Management (OOBM)	555
Contents	555
Concepts	556
Example	559
OOBM and Switch Applications	560
Tasks	561
OOBM Configuration	561
OOBM Show Commands	565
Application Server Commands	567
Application Client Commands	569
Example	570
Symbols	572
Numerics	572
A	572
B	572
C	573
D	574
E	576
F	576
G	576
H	577
I	577
J	577
K	577
L	578
M	579
N	581
O	581
P	581
Q	583
R	583
S	583
T	585
U	587
V	587
W	588