HP 6120XG HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide
HP 6120XG Manual
View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals |
HP 6120XG manual content summary:
- HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 1
ProCurve Series 6120 Switches IPv6 Configuration Guide November 2010 Version Z.14.22 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 2
- HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 3
HP ProCurve 6120G/XG Switch 6120XG Switch November 2010 Z.14.22 IPv6 Configuration Guide - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 4
language without the prior written consent of HewlettPackard. Publication Number 5992-5527 November 2010 Applicable Products HP ProCurve Switch 6120G/XG HP ProCurve Switch 6120XG (498358-B21) (516733-B21) Trademark Credits Microsoft, Windows, and Microsoft Windows NT are US registered trademarks - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 5
Index About Your Switch Manual Set xi Printed Publications xi Electronic Publications xi IPv6 Command Index xii 1 Getting Started Contents 1-1 Introduction 1-2 Conventions 1-2 Command Syntax Statements 1-2 Command Prompts 1-3 Screen Simulations 1-3 Configuration and Operation - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 6
Adding IPv6 Capability 2-6 Supported IPv6 Operation 2-6 Configuration and Management 2-7 Management Features 2-7 IPv6 Addressing 2-7 SLAAC (Stateless Automatic Address Configuration 2-7 DHCPv6 (Stateful) Address Configuration 2-8 Static Address Configuration 2-8 Default IPv6 Gateway - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 7
Address Prefixes 3-11 Link-Local Unicast Address 3-13 Autoconfiguring Link-Local Unicast Addresses 3-13 Extended Unique Identifier (EUI 3-14 Statically Configuring Link-Local Addresses 3-15 Global Unicast Address 3-16 Stateless Autoconfiguration of a Global Unicast Address 3-16 Static - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 8
25 4 IPv6 Addressing Configuration Contents 4-1 Introduction 4-3 General Configuration Steps 4-4 Configuring IPv6 Addressing 4-5 Enabling IPv6 with an Automatically Configured Link-Local Address 4-6 Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 9
Operating Notes for Neighbor Discovery 4-20 View the Current IPv6 Addressing Configuration 4-22 Router Access and Default Router Selection 4-29 Router Advertisements 4-29 Router Solicitations 4-29 Default IPv6 Router 4-30 Router Redirection 4-30 View IPv6 Gateway, Route, and Router - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 10
SNMP Configuration Commands Supported 5-24 SNMPv1 and V2c 5-24 SNMPv3 5-24 IP Preserve for IPv6 5-27 6 IPv6 Management Security Features Contents 6-1 IPv6 Management Security 6-2 Authorized IP Managers for IPv6 6-3 Usage Notes 6-3 Configuring Authorized IP Managers for Switch Access - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 11
Debug/Syslog for IPv6 7-11 Configuring Debug and Event Log Messaging 7-11 Debug Command 7-12 Configuring Debug Destinations 7-13 Logging Command 7-14 A IPv6 Terminology Index ix - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 12
x - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 13
below cover all of the switches supported by this manual. ■ Installation and Getting Started Guide-Explains how to prepare for and perform the physical installation and connect the switch to your network. ■ Management and Configuration Guide-Describes how to configure, manage, and monitor basic - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 14
Note ■ IPv6 Configuration Guide-Describes the IPv6 protocol operations that are supported on the switch. ■ Release Notes-Describe new features, fixes, and enhancements that become available between revisions of the main product guide. IPv6 Command Index This index provides a tool for locating - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 15
Command Min. Level Page Authorized Manager ipv6 authorized managers < ipv6-addr >* Global Config 6-5 show ipv6 authorized-managers Manager 6-12 Copy auto-tftp Global Config 5-22 copy tftp < target > < ipv6-addr > < filename > Manager 5-19 copy < source > tftp < ipv6-addr > < filename > - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 16
| timeout] Global Config 6-20 Telnet show console Operator 5-9 show telnet telnet < ipv6-addr >* Operator 5-7 Manager 5-6 Timep ip timep dhcp ip timep manual < ipv6-addr >* Global Config 5-14 Global Config 5-14 show sntp Manager 5-12 show timep Manager 5-15 sntp server priority - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 17
1 Getting Started Contents Introduction 1-2 Conventions 1-2 Command Syntax Statements 1-2 Command Prompts 1-3 Screen Simulations 1-3 Configuration and Operation Examples 1-4 Keys 1-4 Sources for More Information 1-4 Getting Documentation From the Web 1-6 Online Help 1-6 Menu - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 18
HP ProCurve 6120G/XG and 6120GX switches. It describes how to use the command line interface (CLI) to configure, manage, monitor, and troubleshoot switch operation. For an overview of other product documentation for the above switches, refer to "Product Documen tation" on page xi. You can download - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 19
In the default configuration, your switch displays a CLI prompt similar to the following examples: ProCurve 6120G/XG Blade Switch# ProCurve 6120XG Blade Switch# To simplify recognition, this guide uses ProCurve to represent command prompts for all switch models. For example: ProCurve# (You can - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 20
/blades/components/c-class-tech-installing.html ■ Software Release Notes-Release Notes are posted on the ProCurve Networking web site and provide information on new software updates: • new features and how to configure and use them • software management, including downloading software to the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 21
for information on topics such as: • Overview of IPv6 operation and supported features • Configuring IPv6 addressing • Using IPv6 management, security, and troubleshooting features ■ Feature Index-The following software guides for your switch include an index of non-IPv6 features (and where to find - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 22
the Web To obtain the latest versions of documentation and release notes for your switch, please see the following web sites: www.procurve.com/manuals www.hp.com/go/bladesystem/documentation h18004.www1.hp.com/products/blades/components/c-class-tech-installing.html If you need further information on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 23
the CLI, type the command name followed by help. For example: ProCurve# write help Usage: write Description: View or save the running configuration of the switch. write terminal - displays the running configuration of the switch on the terminal write memory - saves the running - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 24
To Set Up and Install the Switch in Your Network Use the ProCurve Installation and Getting Started Guide for the following: ■ Notes, cautions, and warnings related to installing and using the switch and its related modules ■ Instructions for physically installing the switch in your network ■ Quickly - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 25
Adding IPv6 Capability 2-6 Supported IPv6 Operation 2-6 Configuration and Management 2-7 Management Features 2-7 IPv6 Addressing 2-7 SLAAC (Stateless Automatic Address Configuration 2-7 DHCPv6 (Stateful) Address Configuration 2-8 Static Address Configuration 2-8 Default IPv6 Gateway - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 26
Introduction to IPv6 Contents Ping6 2-13 Traceroute6 2-13 Debug/Syslog Enhancements 2-13 Domain Name System (DNS) Resolution 2-13 IPv6 Neighbor Discovery (ND) Controls 2-14 Event Log 2-14 SNMP 2-14 Loopback Address 2-14 IPv6 Scalability 2-15 2-2 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 27
the same VLAN ■ using a connection to an external, IPv6-configured router, forward IPv6 traffic intended for devices on other VLANs and for traffic that must traverse an IPv4 network to reach an IPv6 destination IPv6/IPv4 Router ProCurve Switch H1 H2 IPv6/IPv4 Router IPv4 Network DHCPv6 Server - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 28
Operation Since most initial IPv6 deployments are in networks having a mixture of IPv6 and IPv4 hosts, the software supports dual- stack IPv4/IPv6 operation. This enables the switch to communicate individually with IPv4 and IPv6 devices with their respective protocols. Thus, IPv4 and IPv6 traffic is - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 29
Note Introduction to IPv6 Migrating to IPv6 Connecting to Devices Supporting IPv6 Over IPv4 Tunneling The switches covered by this guide can interoperate with IPv6/IPv4 devices capable of tunneling IPv6 traffic across an IPv4 infrastructure. Some examples include: ■ traffic between IPv6/IPv4 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 30
in over a period of years, requiring an interoperability among the devices using the two protocols. The switches covered by this guide support IPv4/IPv6 dual stack operation. This allows full ethernet link support for both IPv4 and IPv6 traffic to move on the same interface (VLAN) without modifying - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 31
and Management This section outlines the configurable management features supporting IPv6 operation on your ProCurve IPv6-ready switch. Management Features The software provides host-based IPv6 features that enable the switches covered by this guide to be managed from an IPv6 management - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 32
support is available through either of the following modes: ■ accessible on a VLAN configured on the switch ■ accessible through a connection to a router configured . In IPv6 for the switches covered by this guide, the default route cannot be statically configured. Also, DHCPv6 does not include - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 33
ARP protocol to provide for discovery of IPv6 devices such as other switches, routers, management stations, and servers on the same interface. Neighbor Discovery runs automatically in the default configuration and provides services in addition to those provided in IPv4 by ARP. For example: ■ Run - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 34
this guide are dependent on switched management traffic solutions. TFTPv6 Transfers The switch supports these downloads from an IPv6 TFTP server: ■ automatic OS download ■ manual OS download ■ command script download and execution ■ configuration file downloads ■ public key file downloads ■ startup - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 35
configured on VLAN 1 (the default VLAN) when a configuration file is downloaded to the switch Ethernet frames, the default MTU is 1500 bytes. If a router on the path cannot forward the default is supported on ProCurve switches running either IPv4 or IPv6. When SSH operation is enabled (the default - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 36
Introduction to IPv6 Configurable IPv6 Security Caution The switch supports up to six inbound sessions of the following types feature takes precedence over the other forms of access control configurable on the switch, such as local passwords, RADIUS, and both Port-Based and Client-Based Access - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 37
Troubleshooting Diagnostic and Troubleshooting The software includes the IPv6 diagnostic and troubleshooting configured with a host name counterpart on a DNS server. The software includes the following DNS-compatible commands: ■ ping6 ■ traceroute6 The switches covered by this guide now support - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 38
to IPv6 Diagnostic and Troubleshooting Note If an IPv6 DNS server address is configured on the switch, at least one VLAN on the switch (and in the path to the DNS server) must be configured with an IPv6 address. For information on configuring DNS resolution on the switch, refer to "DNS Resolver - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 39
guide support the following: ■ Dual stack operation (IPv4 and IPv6 addresses on the same VLAN). ■ Maximum of 2048 active IPv6 addresses on the switch, in addition to a maximum of 2048 IPv4 addresses. ("Active IPv6 addresses" includes the total of all preferred and non-preferred addresses configured - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 40
Introduction to IPv6 IPv6 Scalability 2-16 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 41
Address Prefixes 3-11 Link-Local Unicast Address 3-13 Autoconfiguring Link-Local Unicast Addresses 3-13 Extended Unique Identifier (EUI 3-14 Statically Configuring Link-Local Addresses 3-15 Global Unicast Address 3-16 Stateless Autoconfiguration of a Global Unicast Address 3-16 Static - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 42
IPv6 Addressing Contents Prefixes in Routable IPv6 Addresses 3-18 Unique Local Unicast IPv6 Address 3-19 Anycast Addresses 3-20 Multicast Application to IPv6 Addressing 3-21 Overview of the Multicast Operation in IPv6 3-21 IPv6 Multicast Address Format 3-22 Multicast Group - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 43
IPv6 Addressing Introduction Introduction IPv6 supports multiple addresses on an interface, and uses them in a manner comparable to subnetting an IPv4 VLAN. For example, where the switch is configured with multiple VLANs and each is connected to an IPv6 router, each VLAN will have a single link- - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 44
IPv6 identifier for a unicast or anycast address can be automatically generated from the switch's MAC address using EUI-64 (Extended Unique Identifier) format. Other methods include DHCPv6 assignments and static configuration. Inter face identifiers are covered in more detail in the later sections - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 45
supports stateless and stateful address Autoconfiguration, as well as static address configuration the use of servers. Instead, in the default operation, the host uses its MAC address to , an IPv6 address supporting routing is automatically generated, as well. (The switch merges a router-generated - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 46
stateless or static methods, the DHCPv6 server can still be used to automatically provide other configuration information to the host. Refer to page 3-8. Static Address Configuration. Static configuration is used instead of or in addition to stateless and stateful Autoconfiguration where use of the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 47
. (DHCPv6 does not configure link-local addresses.) Where routed traffic is used, you will also need global unicast addressing, either through stateless Autoconfiguration or the other listed methods. Stateless Address Autoconfiguration (SLAAC) On the switches covered by this guide, stateless address - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 48
an IPv6 router configured with DHCP Relay to support service requests from the switch. DHCPv6 relay may not currently be available in some IPv6 routers. ■ DHCPv6 addressing must be enabled per-VLAN on the switch. Note that IPv6 router advertisements (RAs) can also include instructions to clients to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 49
Sources Static Address Configuration Generally, static address configuration should be used when you want specific, non-default addressing to be , the address is listed as "preferred", but is not used. Statically configured IPv6 addresses saved to the startup-config file (by using write memory) - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 50
can be assigned to a specific VLAN on the switch and to other IPv6 devices connected to the switch. At a minimum, a given interface must have which source it uses to acquire the service. Anycast usage can be of value, for example, in a network supporting multiple DNS servers. Refer to "Anycast - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 51
generates a link-local address used for switched traffic on the VLAN. Global Unicast Address either replace or complement an automatically configured address of the same type. Unique format as a global unicast address. In this guide, unless otherwise stated, information on global unicast - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 52
IPv6 Addressing Address Types and Scope In binary notation, the fixed prefix for link-local prefixes is: 1111 1110 10 = fe80/10 For more on link-local addresses, refer to "Link-Local Unicast Address" on page 3-13. Routable Global Unicast Prefix. This well-known 3-bit fixed-prefix indi cates a - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 53
-local address must be unique only for the VLAN on which it is configured. (Traffic with a link-local source or destination address cannot be routed This address is limited in scope to that VLAN, and is usable only for switched traffic. This address has a well- known, 64-bit prefix of fe80:0000: - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 54
VLAN on which it was generated, this should not be a problem. For example, executing ipv6 address dhcp full on a VLAN for which IPv6 was not previously configured does all of the following: ■ enables IPv6 on the VLAN ■ causes the switch to generate a stateless link-local unicast address on the VLAN - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 55
-local address is automatically imple mented on the switches covered by this guide when IPv6 is enabled on a VLAN interface. If Configuration" on page 3-9.) For related information, refer to: ■ RFC 2373: "IP Version 6 Addressing Architecture" ■ RFC 2464: "Transmission of IPv6 Packets Over Ethernet - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 56
. To support subnetting, a VLAN can be configured with multiple global unicast configured on the VLAN for each unique prefix received. Where there are multiple routers on the VLAN, the default you enable Autoconfiguration on the VLAN, then the switch automatically generates a link-local address for the VLAN - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 57
, and to listen for advertise ments from any IPv6 routers on the VLAN. For each unique router advertisement (RA) the switch receives from any router(s), the switch configures a unique, global unicast address. This address type is composed of a 64-bit network prefix specified by the router advertise - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 58
) bits comprising the prefix. For an automatically generated global unicast address, the default prefix length is 64 bits. (Practically speaking, the entire prefix in a /64 address defines the subnet.) Prefixes configured through stateful or static methods can be any length compatible with the local - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 59
can be assigned by router advertisements, DHCPv6 servers, or static configuration. The boundaries for unique local unicast address are set by border routers. Unique local unicast addresses can be assigned in DNS servers supporting an internal network, but should not be included in global DNS - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 60
provide redundant paths to a given entity, such as a specific service provider. With IPv6 this can be done efficiently using the anycast is used. For information on configuring an anycast address on the switches covered by this guide, refer to "Statically Configuring An Anycast Address" on - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 61
of the Multicast Operation in IPv6 When IPv6 is enabled on a VLAN interface on the switch, the interface automatically joins the All-Nodes and Solicited-Node multicast address groups for each of its configured unicast and anycast addresses. The interface also attempts to learn of other devices by - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 62
IPv6 Addressing Multicast Application to IPv6 Addressing IPv6 Multicast Address Format The multicast address format has three principal sections in the leading 16 bits: ■ identifier: ff (bits 1-8) ■ flags: 0xxx (bits 9-12) ■ scope: 0001 - 1110 (bits 13-16) For related information, refer to RFC 4291. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 63
multicast group identity. (Refer to RFCs 3306, 4291, and 2375.) Solicited-Node Multicast Address Format The solicited-node multicast address the switch generates for a configured unicast or anycast address is composed of a unique, 104-bit multicast prefix (ff02:0:0:0:0:1:ff) and the last 24 bits of - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 64
that is sent out of a device, and the switch drops any traffic it receives with a loopback address destination. An example use case is: ProCurve# ping6 ::1 0000:0000:0000:0000:0000:0000:0000: unspecified address cannot be statically configured on the switch, or used as a destination address. 3-24 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 65
lifetime, and router-assigned lifetime expiration of a leased address terminates the switch's use of the address. (The routerassigned lifetime can be extended by receipt of a new router advertisement.) Statically configured IPv6 addresses are regarded as permanent addresses, and do not expire - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 66
IPv6 Addressing IPv6 Address Deprecation Related Information ■ RFC 2462: "IPv6 Stateless Address Autoconfiguration" ■ RFC 4291: "IP Version 6 Addressing Architecture" 3-26 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 67
Global Unicast Address and a Default Router Identity on a VLAN 4-7 Operating Notes 4-8 Enabling DHCPv6 4-9 Operating Notes 4-10 Configuring a Static IPv6 Address on a VLAN 4-11 Statically Configuring a Link-Local Unicast Address 4-12 Statically Configuring A Global Unicast Address 4-13 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 68
IPv6 Addressing Configuration Contents Router Solicitations 4-29 Default IPv6 Router 4-30 Router Redirection 4-30 View IPv6 Gateway, Route, and Router Neighbors 4-31 Viewing Gateway and IPv6 Route Information 4-31 Viewing IPv6 Router Information 4- - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 69
Addressing n/a 4-22 In the default configuration, IPv6 operation is disabled on the switch. This section describes the general to all IPv6 commands available on the switch, refer to the "IPv6 Command Index" on page xii at the front of this guide. The switch is capable of operating in dual-stack - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 70
level are satisfactory for many applications and generally do not need adjustment when you are first configuring IPv6 on the switch. In the default configuration, IPv6 is disabled on all VLANs. 1. If IPv6 DHCP service is available, enable IPv6 DHCP on the VLAN. If IPv6 is not already enabled on the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 71
replacing the automatically generated link-local address • statically adding global unicast, unique local unicast, and/or anycast addresses Configuring IPv6 Addressing In the default configuration on a VLAN, any one of the following commands enables IPv6 and creates a link-local address. Thus, while - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 72
the preferred status, with a "permanent" lifetime. (Refer to "IPv6 Address Depreca tion" on page 3-25.) Default: Disabled The no form of the command disables IPv6 on the VLAN if no other IPv6-enabling command is configured on the VLAN. (Refer to "Disabling IPv6 on a VLAN" on page 4-16.) To view the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 73
Router Identity on a VLAN Enabling Autoconfiguration of a Global Unicast Address and a Default Router Identity on a VLAN Enabling autoconfig or rebooting the switch with autoconfig enabled on a VLAN causes the switch to configure IPv6 addressing on the VLAN using router advertisements and an EUI-64 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 74
on the switch.) ■ show ipv6 vlan < vid > (Lists IPv6 addresses configured on the VLAN.) For more information, refer to "View the Current IPv6 Addressing Configura tion" on page 4-22. Operating Notes With IPv6 enabled, the VLAN uses received router advertisements to designate the default IPv6 router - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 75
needed to provide a global unicast address to a switch interface, the server can still be configured to provide the NTP server assignment. This is full [rapid-commit] This option configures DHCPv6 on a VLAN, which initiates transmission of DHCPv6 requests for service. If IPv6 is not already - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 76
for all VLANs configured on the switch.) ■ show ipv6 vlan < vid > (Lists IPv6 addresses configured on the switch supports both DHCPv4 and DHCPv6 client operation on the same VLAN. ■ DHCPv6 authentication and stateless DHCPv6 are not supported. ■ With IPv6 enabled, the switch determines the default - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 77
3633: "IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP) version 6" ■ RFC 3736: "Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6" Configuring a Static IPv6 Address on a VLAN This option enables configuring of unique, static unicast and anycast IPv6 addresses - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 78
link-local address disables IPv6 on the VLAN. ■ If other IPv6-enabling commands have been configured on the VLAN, then deleting the statically configured link-local address causes the switch to replace it with the default (EUI-64) link-local address for the VLAN, and IPv6 remains enabled. (For more - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 79
in Routable IPv6 Addresses" on page 3-18. < device-id >: Enters a user-defined device identity. < prefix-length >: Specifies the number of bits in the network Lists IPv6 addresses for all VLANs configured on the switch.) ■ show ipv6 vlan < vid > (Lists IPv6 addresses configured on VLAN < vid >.) For - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 80
Notes ■ With IPv6 enabled, the switch determines the default IPv6 router for the VLAN from the router advertisements it receives. (Refer to "Router Access and Default Router Selection" on page 4-29.) ■ If DHCPv6 is configured on a VLAN, then configuring a static global unicast address on the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 81
(as an anycast address) on other devices on the same network. Default: None. The no form of the command erases the specified anycast identity of anycast addresses configured for VLANs to which the switch belongs, use the show run command. To view all currently configured IPv6 unicast addresses, - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 82
operation on the VLAN. That is, to disable IPv6 on a VLAN, all of the following commands must be removed from the VLAN's configuration: ipv6 enable ipv6 address dhcp full [rapid-commit] ipv6 address autoconfig ipv6 address fe80::< device-identifier > link-local ipv6 address < prefix > : < device - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 83
of Neighbor Discovery is triggered on a device when a new (tentative) or changed IPv6 address is detected. (This includes stateless, stateful, and static address configuration.) ND operates in a per-VLAN scope; that is, within the VLAN on which the the device running the ND instance is a member - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 84
before it is assigned to a VLAN interface on the switch. DAD is enabled in the default IPv6 configuration, and can be reconfigured, disabled, or re-enabled at the global config command level. DAD can be useful in helping to troubleshoot erroneous replies to DAD requests, or where the neighbor cache - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 85
interface. Disabling DAD bypasses checks for uniqueness on newly configured addresses. If a reboot is performed while DAD is disabled, the duplicate address check is not performed on any IPv6 addresses configured on the switch. Default: 3 (enabled); Range: 0 - 600 (0 = disabled) The no form of the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 86
nd. Range: 1000 - 2147483647 ms; Default: 30000 ms. Operating Notes for Neighbor Discovery ■ A verified link-local unicast address must exist on a VLAN interface before the switch can run DAD on other addresses associated with the interface. ■ If a previously configured unicast address is changed - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 87
Duplicate Address Detection (DAD) ■ If a previously configured unicast address is changed, a neighbor adver tisement is sent on the VLAN to notify other devices, and also for duplicate address detection. ■ If DAD is disabled when an address is configured, the address is assumed to be unique and is - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 88
per-VLAN. (Refer to "Router Access and Default Router Selection" on page 4-29.) Default Gateway: Lists the IPv4 default gateway, if any, config ured on the switch. This is a globally configured router gateway address, and is not configured per-VLAN. ND DAD: Indicates whether DAD is enabled - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 89
that addresses having a DHCP origin are listed with a 128 bit prefix length. ■ Manual: The address was statically configured on the VLAN. ■ IPv6 Address/Prefix Length: Lists each IPv6 address and prefix length configured on the indicated VLAN. Address Status: ■ Tentative: DAD has not yet confirmed - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 90
View the Current IPv6 Addressing Configuration For example, figure 4-1 shows the output on a switch having IPv6 enabled on one VLAN. ProCurve# show ipv6 Internet (IPv6) Service IPv6 Routing : Disabled Default Gateway : fe80::213:c4ff:fedd:14b0 ND DAD : Enabled DAD Attempts : 3 Vlan - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 91
on a switch having IPv6 enabled on VLANs 1 and 20. ProCurve# show ipv6 nd IPV6 Neighbor Discovery Configuration Current Hop Limit : 0 VLAN Name RCHtime NSint (msecs) (msecs) DEFAULT_VLAN 30000 1000 VLAN20 30000 1000 Figure 4-2. Example of Show IPv6 nd Output with Default settings Syntax - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 92
Address Detection (DAD)" on page 4-18.) ■ VLAN Name: Lists the name of a VLAN statically configured on the switch. ■ IPv6 Status: For the indicated VLAN, indicates whether IPv6 is disabled (the default) or enabled. (Refer to "Config uring IPv6 Addressing" on page 4-5.) ■ IPv6 Address/Prefix Length - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 93
View the Current IPv6 Addressing Configuration ProCurve# show ipv6 vlan 10 Internet (IPv6) Service IPv6 Routing : Disabled Default Gateway : fe80::213:c4ff:fedd:14b0%vlan10 ND DAD : Enabled DAD Attempts : 3 Vlan Name IPv6 Status : VLAN10 : Enabled IPv6 Address/Prefixlength Expiry - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 94
View the Current IPv6 Addressing Configuration ProCurve(config)# show run Running configuration: . . . vlan 10 name "VLAN10" untagged A1-A12 ipv6 address fe80::1:101 link-local ipv6 address dhcp full rapid-commit . . . Statically configured IPv6 addresses appear in the show run output - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 95
Selection Router Access and Default Router Selection Routing traffic between destinations on different VLANs configured on the switch or to a destination on an off-switch VLAN is done by placing the switch on the same VLAN interface or subnet as an IPv6-capable router configured to route traffic to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 96
IPv6 router. ■ If multiple IPv6 routers on a VLAN send RAs advertising the same network, the switch configures one global unicast address and selects one router as the default router, based on the router's relative reachability, using factors such as router priority and route cost. ■ If multiple - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 97
IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors View IPv6 Gateway, Route, and Router Neighbors Use these commands to view the switch's current routing table content and connectivity to routers per VLAN. This includes information received in router advertisements from - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 98
IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors ProCurve(config)# show ipv6 route IPv6 Route Entries Dest : ::/0 "Unknown" < vid > ] This command lists the switch's IPv6 router table entries for all VLANs configured on the switch or for a single VLAN. This output - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 99
IPv6 Addressing Configuration View IPv6 Gateway, Route, and Router Neighbors MTU: This is field. For example, figure 4-6 indicates that the switch is receiving router advertise ments from a single router that exists on VLAN 10. ProCurve(config)# show ipv6 routers IPv6 Router Table Entries Router - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 100
address being refreshed, the address becomes invalid and may be assigned to another interface. Sources of IPv6 Address Lifetimes Manually configured addresses have permanent lifetimes. The prefixes received from router advertisements for global unicast addresses include finite valid and preferred - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 101
Anycast Autoconfigured Global DHCPv6-Configured Lifetime Criteria Permanent Permanent Finite Preferred and Valid Lifetimes Finite Preferred and Valid Lifetimes A new, preferred address used as a replacement for a deprecated address can be acquired from a manual, DHCPv6, or autoconfiguration source - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 102
IPv6 Addressing Configuration Address Lifetimes 4-36 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 103
Switch 5-7 Enabling or Disabling Inbound Telnet Access 5-9 Viewing the Current Inbound Telnet Configuration 5-9 SNTP and Timep 5-10 Configuring (Enabling or Disabling) the SNTP Mode 5-10 Configuring Features Supported 5-23 SNMP Configuration Commands Supported 5-24 SNMPv1 and V2c 5-24 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 104
chapter focuses on the IPv6 application of management features that support both IPv6 and IPv4 operation. For additional information on these features, refer to the current Management and Configuration Guide for your switch. Viewing and Clearing the IPv6 Neighbors Cache Neighbor discovery occurs - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 105
port on which the entry was learned. If this field is empty for a given address, then the address is configured on the switch itself. State: A neighbor destination is reachable from a given source address if confirmation has been received at the source veri fying that traffic has been received - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 106
001560-7aadc0 REACH dynamic A3 fe80::213:c4ff:fedd:14b0 0013c4-dd14b0 REACH dynamic A1 Figure 5-1. Example of Neighbor Cache Without Specifying a VLAN ProCurve(config)# show ipv6 neighbor vlan 10 IPv6 ND Cache Entries IPv6 Address MAC Address State Age Port 2001:db8:260:212::101 0013c4 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 107
address information for any next-hop route is cleared until the route is refreshed in the neighbor cache. ProCurve(config)# clear ipv6 neighbors ProCurve(config)# show ipv6 neighbors ProCurve# show ipv6 neighbors IPv6 ND Cache Entries IPv6 Address MAC Address State Type Port fe80::213:c4ff - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 108
IPv6 Telnet Operation IPv6 Telnet Operation This section describes Telnet operation for IPv6 on the switch. For IPv4 Telnet operation, refer to the Management and Configuration Guide for your switch. Outbound Telnet to Another Device Syntax: telnet < link-local-addr >%vlan< vid >[oobm] telnet - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 109
IPv6 Management Features IPv6 Telnet Operation ProCurve(config)# telnet fe80::215:60ff:fe79:980%vlan10 If the switch is receiving router advertisements from an IPv6 default gateway router, you can Telnet to a device on the same VLAN or another VLAN or subnet by using its global unicast address. For - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 110
IPv6 Management Features IPv6 Telnet Operation ProCurve# show telnet Telnet Activity Session : 1 Privilege: Manager From : Console To : 10.0.10.140 Session : 2 Privilege: Manager From : 2620:0:260:212::2:219 To : Session : ** 3 Privilege: Manager - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 111
level to enable (the default) or disable all (IPv4 and IPv6) inbound Telnet access to the switch. The no form of switch, you would use this command: ProCurve(config)# no telnet-server Viewing the Current Inbound Telnet Configuration Syntax: show console This command shows the current configuration - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 112
commands, including an example of using an IPv6 address. For the details of configuring SNTP on the switch, refer to the chapter titled "Time Protocols" in the Management and Configuration Guide for your switch. The following commands are available at the global config level for SNTP operation - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 113
the VLAN on which the server address is available. (The VLAN must be configured on the switch.) For example: fe80::11:215%vlan10 Syntax:. [no ] sntp server priority For switches that have a separate out-of-band management port, oobm specifies that SNTP traffic goes through that port. (By default, - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 114
■ fe80::215:60ff:fe7a:adc0 (on VLAN 10, configured on the switch) ■ 2001:db8::215:60ff:fe79:8980 as the priority "1" and "2" SNTP servers, respectively, using version 7, you would enter these commands at the global config level, as shown below. ProCurve(config)# sntp server priority 1 fe80::215:60ff - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 115
sntp server command example would appear as follows: ProCurve(config)# show sntp SNTP Configuration Time Sync Mode: Sntp SNTP Mode : Broadcast Poll of configuring Timep on the switch, refer to the chapter titled "Time Protocols" in the Management and Configuration Guide for your switch. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 116
manual: Specifies static configuration of a Timep server address. < ipv6-addr >: Specifies the IPv6 address of an SNTP server. Re fer to preceding Note. [ Interval < 1 - 9999 > ]: This optional setting specifies the inter val in minutes between Timep requests. (Default: 720) [oobm]: For switches - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 117
Note IPv6 Management Features SNTP and Timep where the address is on VLAN 10, configured on the switch, you would enter this command at the global config level, as shown below. ProCurve(config)# ip timep manual fe80::215:60ff:fe7a:adc0%vlan10 In the preceding example, using a link-local address - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 118
IPv6 Management Features SNTP and Timep Note that the show management command can also be used to display Timep server information. 5-16 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 119
network, refer to the "File Transfers" appendix in the Management and Configuration Guide for your switch. To upload and/or download files to the switch using TFTP in an IPv6 network, you must: 1. Enable TFTP for IPv6 on the switch (see "Enabling TFTP for IPv6" on page 5-18). 2. Enter a TFTP copy - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 120
in the network to receive downloaded files. • Use TFTP server functionality on the switch to be accessed by other IPv4 or IPv6 hosts requesting to upload files. • For switches that have a separate out-of-band management port, the listen parameter in a server configuration allows you to specify - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 121
>: Copies the contents of a file on a remote host to a configuration file on the switch. ■ flash < primary | secondary >: Copies a software file stored on a remote host to primary or secondary flash memory on the switch. To run a newly downloaded software image, enter the reload or boot system flash - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 122
host. ■ flash < primary | secondary >: Copies the software file used as the primary or secondary flash image on the switch to a file on a remote host. ■ startup-config: Copies the startup configuration file in flash memory to a remote file on a TFTP server. ■ running-config: Copies the running - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 123
example: fe80::123%vlan10 If this is a global unicast or anycast address, use this IPv6 format: < ipv6-addr > For example: 2001:db8::123 oobm: For switches that have a separate out-of-band manage ment port, specifies that the transfer will be through the out of-band management interface - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 124
boot or the reload command, or cycle the power to the switch. (To reset the boot image to primary flash, use boot set-default flash primary.) Syntax: auto-tftp Configures the switch to automatically download the specified software file from the TFTP server at the specified - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 125
site at www.procurve.com.) SNMP Features Supported The same SNMP for IPv4 features are supported over IPv6: ■ access to a switch using SNMP version 1, version 2c, or version 3 ■ enhanced security with the configuration of SNMP communities and SNMPv3 user-specific authentication password and privacy - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 126
Commands Supported IPv6 addressing is supported in the following SNMP configuration commands: For more information on each SNMP configuration procedure, refer to the "Configuring for Network Management Applications" chapter in the current Management and Configuration Guide for your switch. SNMPv1 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 127
IPv6 Management Features SNMP Management for IPv6 snmp-server trap-source < ipv4-addr | loopback < 0-7 >> snmp-server response-source [dst-ip-of-request | ipv4-addr | loopback < 0-7 >] IPv6 addresses are supported in SNMP show command output as shown in Figure 5-8 and Figure 5-9. 5-25 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 128
-server command displays the current SNMP policy configuration, including SNMP communities, network security notifications, ) or responses to SNMP requests. ProCurve(config)# show snmp-server SNMP Communities All Traps Category SNMP Authentication Password change Login failures Port-Security - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 129
overwriting the IPv6 address and subnet mask on VLAN 1 (default VLAN) in each switch, and the Gateway IPv6 address assigned to the switch. To configure IP Preserve, enter the ip preserve statement at the end of the configuration file that will be downloaded from a TFTP server. (Note that you do not - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 130
"ProCurve" time daylight-time-rule None * * * * * * password manager password operator ip preserve Entering an ip preserve statement as the last line in a configuration file stored on a TFTP server allows you to download and execute the file as the startup-config file on an IPv6 switch. When - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 131
:fe4c:e480 exit spanning-tree Trk1 priority 4 password manager password operator Because the switch's IPv6 address and default gateway were statically configured (not assigned by a DHCP server), when the switch boots up with the IP Preserve startup configuration file (see Figure 5-10), its current - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 132
IPv6 Management Features IP Preserve for IPv6 5-30 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 133
Authorized IP Managers for IPv6 6-3 Usage Notes 6-3 Configuring Authorized IP Managers for Switch Access 6-5 Using a Mask to Configure Authorized Management Stations 6-5 Configuring Single Station Access 6-5 Configuring Multiple Station Access 6-6 Displaying an Authorized IP Managers - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 134
features that are IPv6 counter parts of IPv4 management security features on the switches covered by this guide. Feature Default CLI configure authorized IP disabled 6-5 managers for IPv6 configuring secure shell for IPv6 disabled 6-15 enabling secure copy and secure disabled 6-20 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 135
to the "Using Authorized IP Managers" chapter in the Access Security Guide. • You configure authorized IPv6 manager addresses using the ipv6 authorized-managers command. For more information, see "Configur ing Authorized IP Managers for Switch Access" on page 6-5. ■ You can block all IPv4-based or - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 136
the Authorized IP Managers feature disallows access to the device, then access is denied. Therefore, with authorized IP man agers configured, logging in with the correct passwords is not sufficient to access a switch through the network unless the station requesting access is also authorized in the - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 137
and IP address. Each management method can have its own set of authorized managers. Default: All Using a Mask to Configure Authorized Management Stations The ipv6-mask parameter controls how the switch uses an IPv6 address to determine the IPv6 addresses of authorized manager stations on your - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 138
ten or fewer management and/or operator stations for which you want to authorize access to the switch, it may be more efficient to configure them by entering each IPv6 address with the default mask in a separate ipv6 authorized-managers command. When used in a mask, "FFFF" specifies that each bit in - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 139
IPv6 Management Security Features Authorized IP Managers for IPv6 Conversely, in a mask, a "0" binary bit means that either the "on" or "off" setting of the corresponding IPv6 bit in an authorized address is valid and does not have to match the setting of the same bit in the specified IPv6 address. - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 140
last block of an authorized IPv6 address. Figure 6-3. Example: Mask for Configuring Four Authorized IPv6 Manager Stations Last block in Mask: FFFC Last block an IPv6 address, you can authorize four IPv6-based stations to access the switch. In this mask, all bits except the last two are set to 1 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 141
applied to the IPv6 address: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64. The specified mask FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF configures eight management stations as authorized IP manager stations. Note that, in this example, the IPv6 mask is applied as follows: ■ Eight management stations in - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 142
up Authorized 2001 DB8 0000 0000 244 IPv6 Address 17FF FEB6 D37D to four stations in different subnets to access the switch. This authorized IP manager configuration is useful if only management stations are specified by the authorized IPv6 addresses. Refer to Figure 6-4 for how the bitmap - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 143
) of an IPv6 address are used as the subnet ID, only the following binary expressions and hexadecimal subnet IDs are supported in this authorized IPv6 manager configuration: Authorized Subnet ID in Fourth Hexadecimal Block of IPv6 Address 0000 0001 0002 0003 0004 0005 0006 0007 Binary Equivalent - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 144
Features Authorized IP Managers for IPv6 Displaying an Authorized IP Managers Configuration Use the show ipv6 authorized-managers command to list the IPv6 stations authorized to access the switch; for example: ProCurve# show ipv6 authorized-managers IPv6 Authorized Managers Address : 2001:db8 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 145
::070a:294ff:fea4:733d%vlan2 ProCurve(config)# ipv6 authorized-managers fe80::19af:2cff:fe34:b04a%vlan5 If you do not enter an ipv6-mask value when you configure an authorized IPv6 address, the switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default IPv6 mask. Also, if you - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 146
FFFF:FFFF and manager (the default values). Note that it is not necessary to enter either of these parameters: ProCurve(config)# ipv6 authorized-managers 2001:db8::a05b:17ff:fec5:3f61 Deleting an Authorized IP Manager Entry. Enter only the IPv6 address of the configured authorized IP manager station - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 147
enabled in the default configuration, and are controlled switch authenti cates itself to a client, users connected to the client authenticate them selves to the switch by providing a valid password that matches the operator- and/or manager-level password configured and stored locally on the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 148
switch for both IPv4 and IPv6, and activates the connection with a configured SSH server (RADIUS or TACACS+). The no form of the command disables SSH on the switch to transfer files to and from the switch over IPv4 or IPv6. Default: Disabled. Note: Enabling filetransfer automatically disables - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 149
keys to authenticate SSH clients connecting to the switch, refer to the chapter titled "Configuring Secure Shell" in the latest Access Security Guide for your switch. [timeout < 5 - 120 >] Timeout value allowed to complete an SSH authentica tion and login on the switch (Default: 120 seconds). 6-17 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 150
Manage ment" in the Management and Configuration Guide for more information on out-of-band management. The listen parameter is not available on switches that do not have a separate out-of-band management port. Note For both IPv4 and IPv6, the switch supports only SSH version 2. You cannot set - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 151
ProCurve# show ip ssh With SSH running, the switch supports one console session and up to five other SSH and Telnet (IPv4 and IPv6) sessions. Web browser sessions are also supported inactive | Displays the current SSH configuration and status. The switch uses these five SSH settings internally for - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 152
However, several SFTP commands, such as create or remove, are not supported and return an error. For complete information on how to configure SCP or SFTP in an SSH session to copy files to and from the switch, refer to the "File Transfers" appendix in the Management and Configuration Guide for your - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 153
7 IPv6 Diagnostic and Troubleshooting Contents Introduction 7-2 Ping for IPv6 (Ping6 7-2 Traceroute for IPv6 7-5 DNS Resolver for IPv6 7-8 DNS Configuration 7-8 Viewing the Current Configuration 7-10 Operating Notes 7-10 Debug/Syslog for IPv6 7-11 Configuring Debug and Event Log - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 154
are displayed on the console screen. To stop a ping test before it finishes, press [Ctrl] [C]. For more information about using a ping test, refer to the "Troubleshooting" appendix in the current Management and Configuration Guide for your switch. 7-2 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 155
ID number. < hostname >: Host name of an IPv6 host device configured on an IPv6 DNS server. < switch-number >: Number of an IPv6-based switch that is a member of a switch stack (IPv6 subnet). Valid values: 1 16. < oobm >: For switches that have a separate out-of-band management (OOBM) port, oobm - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 156
IPv6 Diagnostic and Troubleshooting Ping for IPv6 (Ping6) ProCurve# ping6 fe80::2:1%vlan10 fe80:0000:0000:0000:0000:0000:0002:0001 is alive, time = 975 ms ProCurve# ping6 2001:db8::a:1c:e3:3 repetitions 3 2001:0db8:0000:0000:000a:001c:00e3:0003 is alive, iteration 1, time = 15 ms 2001:0db8:0000:0000 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 157
to each traceroute operation are displayed on the console screen. To stop a traceroute operation before it finishes, press [Ctrl] [C]. For more information about how to configure and use a traceroute operation, refer to the "Troubleshooting" appendix in the Management and Configura tion - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 158
IPv6 Diagnostic and Troubleshooting Traceroute for IPv6 Syntax: traceroute6 < ipv6-address | hostname > an IPv6 host device configured on an IPv6 DNS server. < oobm >: For switches that have a separate sent along the route. Valid values: 1 - 255. Default: 30. • If the maxttl value is less than - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 159
1 ms 1 ms 0 ms 0 ms 0 ms 0 ms Intermediate router hops with the time (in milliseconds) for the switch to receive a response from each of the three probes sent to each router. ProCurve# traceroute6 2001:db8::10 maxttl 7 traceroute to fe80::1:2:3:4 1 hop min, 7 hops max, 5 sec. timeout, 3 probes - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 160
Resolver" in appendix C, "Troubleshooting", in the current Management and Configuration Guide for your switch. Syntax:. [no] ip configure the address and priority of a DNS server. Allows for configuring up to three servers providing DNS service. (The servers must all be acces sible to the switch - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 161
domain name suffix and the address of a DNS server for that same domain are both configured on the switch, then you need to enter only the host name of the desired target when executing a command that supports DNS operation. But if the DNS server used to resolve the host name for the desired - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 162
device named mars-1: ProCurve# ping6 mars-1.mygroup.procurve.net For further information and examples on using the DNS feature, refer to "DNS Resolver" in appendix C, "Troubleshooting", in the current Management and Configuration Guide for your switch. Viewing the Current Configuration Use the show - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 163
messages on a remote device to troubleshoot switch or network operation. For example, you can send messages about routing misconfigura tions and other network protocol details to an external device, and later use them to debug network-level problems. Configuring Debug and Event Log Messaging To - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 164
destination address. • If at least one Syslog server address is configured in the startup configuration and the switch is rebooted or reset. Event log messages are the default type of debug message sent to configured debug destinations. ip Configures IPv4 OSPF and RIP routing messages to be sent to - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 165
packets - Statistics on DHCPv6 packets transmitted on a switch configured as a DHCPv6 client nd- Events during IPv6 neighbor discovery lldp Configures all LLDP message types to be sent to configured debug destinations. wireless-services Configures messages about the operation of wireless-ser vices - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 166
on the switch without deleting con figured server addresses, enter the no debug destination logging command. For complete information on how to configure a Syslog server and Debug/ Syslog message reports, refer to the "Troubleshooting" appendix in the Man agement and Configuration Guide. 7-14 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 167
. DoS Denial-of-Service. EUI-64 Extended Unique Identifier. Refer to "Extended Unique Identifier (EUI)" on page 3-14. Manual Address Configures an IPv6 address by using the CLI to manually enter a static address. Configuration Referred to as "Static Address Configuration" in this guide. See Static - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 168
IPv6 Terminology A-2 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 169
5-2 DAD not supported ... 3-20 deprecation ... 4-34 in IPv6 ... 2-9 IPv6 address ... 3-10, 3-20 IPv6 address configuration ... 4-14 preferred 20 command prompts ... 1-3 command syntax conventions ... 1-2 configuration file TFTP download ... 5-19 TFTP upload on remote device ... 5-20 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 170
7-12 IPv6 event types supported ... 7-11 LLDP messages ... 7-13 OSPF messages ... 7-12 RIP messages ... 7-13 using Syslog servers ... 7-13 wireless-services messages ... 7-13 default settings IPv6 address autoconfig, disabled ... 4-8 addressing configuration features ... 4-3 DAD, enabled - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 171
28 downloading configuration file to IPv6 switch ... 5-28 feature description ... 5-27 for IPv6 ... 2-11 IPv6 address format ... 3-3 anycast address ... 2-9, 3-10, 3-20, 4-14, 5-2 benefits ... 2-6 command index ... -xii configuration overview ... 4-4 DAD ... 4-18 debug ... 7-11 default - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 172
features ... 2-11 selecting default router on a VLAN ... 4-30 single IPv6 link-local address on an interface ... 3-13 SNMP support ... 2-14, 5-23 SNTP See SNTP server. SSHv2 ... 2-11 See also SSH. static address configuration ... 4-11 supported switches ... 1-2 switching IPv4 and IPv6 - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 173
displaying configuration ... 5-26 supported ProCurve switch documentation ... -xi public-key file TFTP download configuration ... 3-11 maximum number of IPv6 routes ... 2-15 OSPF debug messages ... 7-12, 7-13 RIP debug messages ... 7-12, 7-13 selecting default IPv6 router ... 4-30 switching - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 174
default ... 7-14 for IPv6 ... 7-11 sending event log messages ... 7-11 T Telnet viewing current use ... 5-7 Telnet6 ... 5-6 enable/disable inbound ... 5-9 operations supported ... 2-10 view configuration ... 5-9 TFTP auto-TFTP feature ... 5-22 disabled ... 5-22 downloading configuration - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 175
displaying configuration ... 5-26 supported in IPv6 ... 5-23 troubleshooting configuring manual configuration ... 2-8, 3-5, 3-9, 4-12 link-local address prefix ... 3-11 neighbor discovery operation ... 4-17 router advertisements used in IPv6 ... 4-29 selecting default IPv6 router ... 4-30 switching - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 176
8 - Index - HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 177
- HP 6120XG | HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 178
forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP will not be liable for technical or editorial errors or omissions contained herein. November 2010 Manual Part Number 5992-5527 *5992-5527*
ProCurve Series 6120 Switches
IPv6 Configuration Guide
November 2010
Version Z.14.22