9304m Advanced Configuration 9308m and Management Guide 9315m 9408sl

ProCurve Routing Switches Software versions 07.8.00a (9300 series) and 01.0.02 (9408sl)

www.procurve.com

Advanced Configuration and

Management Guide

for the ProCurve 9300/9400 Series

Routing Switches

Software versions 07.8.00a (9300 Series) and 01.0.02 (9408sl)

Copyright 2000, 2003, 2005

Hewlett-Packard Company, LP.

The information contained herein is subject to change without notice.

Publication number

5990-6030

June 2005

Applicable Products

ProCurve 9304M (J4139A) ProCurve 9308M (J4138A) ProCurve 9315M (J4874A) ProCurve 9408sl (J8680A)

Trademark Credits

Microsoft®, Windows®, and Windows NT® are U.S. registered trademarks of Microsoft Corporation.

Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.

Disclaimer

The information contained in this document is subject to change without notice.

HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance or use of this material.

The only warranties for HP products and services are set forth in the express Warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett-Packard.

Warranty

See the Customer Support and Warranty booklet included with the product.

A copy of the specific warranty terms applicable to your Hewlett-Packard product and replacement

parts can be obtained from your HP Sales and Service Office or authorized dealer.

Safety Considerations

Prior to the installation and use of this product, review all safety markings and instructions.

Instruction Manual Symbol.

If the product is marked with the above symbol, refer to the product manual to protect the product from damage.

WARNING Denotes a hazard that can cause injury.

CAUTION Denotes a hazard that can damage equipment or data.

Do not proceed beyond a WARNING or CAUTION notice until you have understood the hazard and have taken appropriate precautions.

Use of control, adjustments or performance procedures other than those specified herein may result in hazardous radiation exposure.

Grounding

This product provides a protective earthing terminal. There must be an uninterrupted safety earth ground from the main power source to the product’s input wiring terminals, power cord or supplied power cord set. Whenever it is likely that the protection has been impaired, disconnect the power cord until the ground has been restored.

If your LAN covers an area served by more than one power distribution system, be sure their safety grounds are securely interconnected.

LAN cables may occasionally be subject to hazardous transient voltages (such as lightning or disturbances in the electrical utilities power grid). Handle exposed metal components of the network with caution.

For more safety information, see the Installation and Basic Configuration Guide for ProCurve 9300 Series Routing Switches and the Installation and Basic Configuration Guide for the ProCurve 9408sl Routing Switch .

Servicing

There are no user-serviceable parts inside the userinstallable modules comprising the product. Any servicing, adjustment, maintenance or repair must be performed only by service-trained personnel.

ii

Contents

Organization of Product Documentation ............................................. xxv

Chapter 1Getting Started ........................................................................................ 1-1

Introduction ...............................................................................................................................................1-1

Software Versions Covered ......................................................................................................................1-1

Audience ...................................................................................................................................................1-1

Conventions ..............................................................................................................................................1-1

Terminology ..............................................................................................................................................1-2

Support and Warranty Information ...........................................................................................................1-2

Related Publications .................................................................................................................................1-2

Chapter 2Configuring Quality of Service .............................................................. 2-1

The Queues .............................................................................................................................................2-1

Automatic Queue Mapping for IP Type Of Service (TOS) Values .....................................................2-2

Queuing Methods .....................................................................................................................................2-2

Selecting the Queuing Method ...........................................................................................................2-3

Configuring the Queues .....................................................................................................................2-3

Renaming the Queues................................................................................................................. 2-3

Changing the Minimum Bandwidth Percentages of the Queues ................................................. 2-4

Resetting the Minimum Bandwidth Percentages to Their Defaults ............................................. 2-9

Displaying the QoS Profile Configuration .................................................................................................2-9

Assigning QoS Priorities to Traffic ..........................................................................................................2-10

Changing a Port’s Priority ................................................................................................................2-10

Changing a Layer 2 Port-Based VLAN’s Priority ..............................................................................2-11

Reassigning 802.1p Priorities to Different Queues ..........................................................................2-13

Displaying the Queue Assignments for the 802.1p Priorities .................................................... 2-14

Assigning Static MAC Entries to Priority Queues .............................................................................2-15

Assigning IP and Layer 4 Sessions to Priority Queues ....................................................................2-16

Routing Switch Syntax............................................................................................................... 2-16

June 2005 iii

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Assigning AppleTalk Sockets to Priority Queues (9300 only) ..........................................................2-20

Configuring a Utilization List for an Uplink Port ......................................................................................2-21

Displaying Utilization Percentages for an Uplink ..............................................................................2-22

Chapter 3Configuring Enhanced Quality of Service ............................................ 3-1

Basic and Advanced ToS-Based QoS ......................................................................................................3-1

QoS Support When IP ToS-Based QoS Is Disabled ................................................................................3-2

Classification, Marking, and Scheduling ...................................................................................................3-2

Classification ......................................................................................................................................3-2

Marking ..............................................................................................................................................3-2

Scheduling .........................................................................................................................................3-3

Default QoS Mappings .......................................................................................................................3-3

Default CoS –> DSCP Mappings................................................................................................. 3-3

Default IP Precedence –> DSCP Mappings ................................................................................ 3-4

Default DSCP –> DSCP Mappings.............................................................................................. 3-4

Default DSCP –> Internal Forwarding Priority Mappings ............................................................ 3-4

Layer 4 CAM Usage .................................................................................................................................3-5

Using ACLs, PBR, or NAT and IP ToS-Based QoS .................................................................................3-5

Note Regarding DSCP Processing for Traffic Forwarded by the CPU .....................................................3-5

Alternative QoS Methods ..........................................................................................................................3-5

Configuring ToS-Based QoS ....................................................................................................................3-6

Enabling Advanced ToS-Based QoS .................................................................................................3-6

Specifying the Trust Level ..................................................................................................................3-7

Changing the QoS Mappings .............................................................................................................3-7

Changing the CoS –> DSCP Mappings....................................................................................... 3-7

Changing the IP Precedence –> DSCP Mappings ...................................................................... 3-8

Changing the DSCP –> DSCP Mappings.................................................................................... 3-8

Changing the DSCP –> Internal Forwarding Priority Mappings .................................................. 3-8

Changing the Internal Forwarding Priority –> Hardware Forwarding Queue Mappings .............. 3-9

Displaying Configuration Information ......................................................................................................3-10

Chapter 4Software-Based IP Access Control Lists (ACLs) ................................. 4-1

Chapter Overview .....................................................................................................................................4-2

How Software-Based ACLs Work ......................................................................................................4-3

How Fragmented Packets are Processed ................................................................................... 4-3

Hardware Aging of Layer 4 CAM Entries for software-Based ACLs............................................ 4-4

Types of IP ACLs ...............................................................................................................................4-4

ACL IDs and Entries ...........................................................................................................................4-4

Default ACL Action .............................................................................................................................4-5

Controlling Management Access to the Device .................................................................................4-6

ACL Logging ......................................................................................................................................4-6

Usage Guidelines for Access Control Lists (ACLs) ..................................................................................4-6

Using ACLs as Input to Other Features .............................................................................................4-6

Using ACLs and Network Address Translation (NAT) on the Same Interface (9300 Series Only) ....4-6

Requirement for Applying ACL Configuration Changes ...........................................................................4-7

June 2005 iv

Contents

Reapplying Modified ACLs .................................................................................................................4-8

Disabling or Re-Enabling Access Control Lists (ACLs) ............................................................................4-8

Enabling ACL Mode ...........................................................................................................................4-8

Disabling ACL Mode ..........................................................................................................................4-9

Configuring Numbered and Named ACLs ................................................................................................4-9

Configuring Standard Numbered ACLs ..............................................................................................4-9

Standard ACL Syntax ................................................................................................................ 4-10

Configuring Extended Numbered ACLs ...........................................................................................4-13

Configuring Named ACLs ................................................................................................................4-15

Filtering on IP Precedence and ToS Values ....................................................................................4-16

Filtering ICMP Packets Based on the IP Packet Length ..................................................................4-17

Extended ACL Syntax ......................................................................................................................4-18

Adding a Comment to an ACL Entry ................................................................................................4-25

Reapplying ACLs to Interfaces ...............................................................................................................4-26

Modifying ACLs ......................................................................................................................................4-27

Dropping All Fragments That Exactly Match an ACL .............................................................................4-28

Enabling Hardware Filtering for Packets Denied by ACLs .....................................................................4-28

Enabling ICMP Unreachable Messages for Traffic Denied by ACLs ......................................................4-29

ACL Filtering for Traffic Switched Within a Virtual Routing Interface .....................................................4-29

Applying an ACL to a Subset of Ports on a Virtual Interface ..................................................................4-29

Enabling Strict TCP or UDP Mode .........................................................................................................4-30

Enabling Strict TCP Mode ................................................................................................................4-30

Enabling Strict UDP Mode ...............................................................................................................4-31

Configuring ACL Packet and Flow Counters ....................................................................................4-32

Using ACLs to Filter ARP Packets .........................................................................................................4-32

Configuring ACLs for ARP Filtering ..................................................................................................4-34

Configuring the Layer 4 Session Log Timer ...........................................................................................4-35

Inserting, Deleting, Replacing, and Adding Comments to ACL Entries (Series 9300 Only) ...................4-35

Displaying a List of ACL Entries .......................................................................................................4-35

Numbered ACLs ........................................................................................................................ 4-35

Named ACLs ............................................................................................................................. 4-36

Inserting an ACL Entry .....................................................................................................................4-36

Numbered ACLs ........................................................................................................................ 4-36

Named ACLs ............................................................................................................................. 4-36

Deleting an ACL Entry From Within a List ........................................................................................4-37

Numbered ACLs ........................................................................................................................ 4-37

Named ACLs ............................................................................................................................. 4-38

Replacing an ACL Entry ...................................................................................................................4-39

Numbered ACLs ........................................................................................................................ 4-39

Named ACLs ............................................................................................................................. 4-39

Adding, Inserting, Replacing, or Deleting a Remark ........................................................................4-40

Numbered ACL .......................................................................................................................... 4-40

Named ACLs: Remarks for a New ACL .................................................................................... 4-41

Named ACLs: Inserting or Replacing Remarks to Existing ACL Entries ................................... 4-42

Deleting a Remark from a Named ACL. .................................................................................... 4-43

ICMP Filtering .........................................................................................................................................4-43

Numbered ACLs ........................................................................................................................ 4-44

Named ACLs ............................................................................................................................. 4-44

June 2005 v

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Displaying ACLs .....................................................................................................................................4-46

Displaying of TCP/UDP Numbers in ACLs .............................................................................................4-47

Displaying ACL Log Entries ....................................................................................................................4-47

Displaying ACLs Using Keywords ..........................................................................................................4-48

Numbered ACL .......................................................................................................................... 4-49

Named ACLs ............................................................................................................................. 4-50

Displaying and Clearing Software-Based ACL Statistics ........................................................................4-51

Displaying ACL Statistics for Software-Based ACLs ........................................................................4-51

Clearing Software-Based ACL Statistics ..........................................................................................4-52

Displaying and Clearing ACL Filters for ARP .........................................................................................4-52

Displaying ACL Filters for ARP ........................................................................................................4-52

Clearing Filter Count ........................................................................................................................4-52

Policy-Based Routing (PBR) ..................................................................................................................4-52

Configuring PBR ..............................................................................................................................4-53

Configure the ACLs ................................................................................................................... 4-53

Configure the Route Map .......................................................................................................... 4-54

Enabling PBR ...................................................................................................................................4-55

Enabling PBR Globally .............................................................................................................. 4-55

Enabling PBR Locally ................................................................................................................ 4-55

Configuration Examples ...................................................................................................................4-55

Setting the Next Hop ................................................................................................................. 4-56

Setting the Next Hop When no Next Hop Is Explicitly Configured............................................. 4-57

Setting the Output Interface to the Null Interface ...................................................................... 4-57

Chapter 5Hardware-Based IP Access Control Lists (ACLs)................................ 5-1

Chapter Overview .....................................................................................................................................5-1

Comparison of Flow-Based ACLs and Hardware-Based ACLs ................................................................5-2

How Flow-Based ACLs Work .............................................................................................................5-2

How Hardware-Based ACLs Work .....................................................................................................5-2

How Fragmented Packets are Processed ................................................................................... 5-3

Hardware Aging of Layer 4 CAM Entries..................................................................................... 5-4

Configuration Considerations ..................................................................................................................5-4

Disabling or Re-Enabling Hardware-Based ACLs ....................................................................................5-5

Syslog Message for Changed ACL Mode ..........................................................................................5-6

Globally Disabling ACL Logging ...............................................................................................................5-6

Copying Denied Traffic to a Mirror Port for Monitoring .......................................................................5-6

Reapplying ACLs to Interfaces .................................................................................................................5-7

Specifying the Maximum Number of CAM Entries for ACLs ....................................................................5-7

Enabling ACL Filtering of Fragmented Packets ........................................................................................5-8

Throttling the Fragment Rate .............................................................................................................5-8

Configuring and Applying an ACL ............................................................................................................5-9

QoS Options for IP ACLs .................................................................................................................5-10

Using an ACL to Change the Forwarding Queue ...................................................................... 5-10

Matching on a Packet’s 802.1p Value ....................................................................................... 5-11

Matching on a Packet’s DSCP Value ........................................................................................ 5-11

Using an IP ACL to Mark ToS Values ....................................................................................... 5-12

ACL Filtering for Traffic Switched Within a Virtual Routing Interface .....................................................5-12

June 2005 vi

Contents

Displaying ACL Information ....................................................................................................................5-12

Troubleshooting Hardware-Based ACLs ................................................................................................5-12

Hardware-Based Policy-Based Routing (PBR) ......................................................................................5-13

Next Hop Selection .................................................................................................................... 5-13

Configuration Considerations .................................................................................................... 5-13

Configuring a PBR Policy .......................................................................................................... 5-14

Configuration Examples ............................................................................................................ 5-14

Using the Most Direct Route...................................................................................................... 5-14

Enabling PBR for Fragmented Packets ..................................................................................... 5-14

PBR Syntax ............................................................................................................................... 5-15

Chapter 6Configuring Rate Limiting

on the 9300 Series (with M2, M4, and T-flow) ...................................... 6-1

Additional Notes .......................................................................................................................... 6-1

Fixed Rate Limiting ...................................................................................................................................6-2

How Fixed Rate Limiting Works .........................................................................................................6-2

Configuring Fixed Rate Limiting .........................................................................................................6-3

Displaying Fixed Rate Limiting Information ........................................................................................6-3

Adaptive Rate Limiting ..............................................................................................................................6-4

Examples of Adaptive Rate Limiting Applications ..............................................................................6-5

Adaptive Rate Policies For a Trunk Group Uplink ....................................................................... 6-5

Adaptive Rate Policy for a Virtual Routing Interface that Route VLANs ...................................... 6-6

Adaptive Rate Policy for a Layer 2 Port-Based VLAN ................................................................. 6-7

Adaptive Rate Limiting Parameters ....................................................................................................6-8

Average Rate............................................................................................................................... 6-9

Normal Burst Size........................................................................................................................ 6-9

Excess Burst Size........................................................................................................................ 6-9

Committed Time Interval ............................................................................................................. 6-9

How Adaptive Rate Limiting Works ..................................................................................................6-10

Normal Burst Size and Excess Burst Size Counters ................................................................. 6-10

Committed Time Interval ........................................................................................................... 6-13

Configuring Adaptive Rate Limiting ..................................................................................................6-13

Characterizing the Traffic .......................................................................................................... 6-14

Specifying the Bandwidth Allowances and Applying Rate Policy Rules to an Interface ............ 6-16

Configuring Port-, VLAN- and Direction-Based Rate Limiting (T-Flow only) ....................................6-18

Configuration Considerations .................................................................................................... 6-18

Configuring a Port-, VLAN-, and Direction-Based Rate Limiting Policy..................................... 6-18

Displaying Configuration Information and Statistics .........................................................................6-20

Clearing Adaptive Rate Limiting Statistics .......................................................................................6-20

Complete CLI Examples ..................................................................................................................6-21

Commands for Adaptive Rate Policies For a Trunk Group ....................................................... 6-21

Commands for Adaptive Rate Policy for a Virtual Routing Interface that Route VLANs ........... 6-22

Commands for Adaptive Rate Policy for a Layer 2 Port-Based VLAN ...................................... 6-22

Disabling Rate Limiting Exemption for Control Packets ...................................................................6-22

Using a Rate Limiting ACL to Deny Traffic .......................................................................................6-23

June 2005 vii

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Chapter 7Configuring EP Rate Limiting

on the 9300 Series (with EP Modules) .................................................. 7-1

Adaptive Rate Limiting ..............................................................................................................................7-1

EP Rate Limiting Support for Release 07.6.01 and Greater ..............................................................7-2

Additional Notes .......................................................................................................................... 7-2

Rate Limiting Algorithm and Parameters ...........................................................................................7-2

Average Rate............................................................................................................................... 7-3

Credits ......................................................................................................................................... 7-3

Rate Limiting Interval ................................................................................................................... 7-3

Rate Limiting of Control Packets ........................................................................................................7-4

Configuration Considerations .............................................................................................................7-4

Configuring EP Adaptive Rate Limiting ..............................................................................................7-5

Configuring a Port-Based Rate Limiting Policy............................................................................ 7-5

Configuring a Port-and-Priority-Based Rate Limiting Policy ........................................................ 7-6

Configuring an ACL-Based Rate Limiting Policy ......................................................................... 7-6

Rate Limiting Syntax.................................................................................................................... 7-6

Displaying the Policies .......................................................................................................................7-8

Displaying Adjusted Average Rates .................................................................................................7-10

Displaying Adjusted Rates for Inbound Rate Limiting ............................................................... 7-11

Displaying Adjusted Rates for Outbound Rate Limiting............................................................. 7-11

Chapter 8Configuring Rate Limiting on the 9408sl .............................................. 8-1

Rate Limiting on ProCurve 9408sl ............................................................................................................8-1

Rate Limiting Parameters and Algorithm ...........................................................................................8-1

Average Rate............................................................................................................................... 8-2

Maximum Burst............................................................................................................................ 8-2

Credits and Credit Total............................................................................................................... 8-2

Configuration Considerations .............................................................................................................8-2

Configuring Rate Limiting on ProCurve 9408sl ..................................................................................8-3

Configuring a Port-Based Rate Limiting Policy............................................................................ 8-3

Configuring a Port-and-Priority-Based Rate Limiting Policy ........................................................ 8-3

Configuring a Port-and-VLAN-Based Rate Limiting Policy .......................................................... 8-3

Configuring a Port-and-ACL-Based Rate Limiting Policy ............................................................ 8-4

Displaying Rate Limiting Policies .......................................................................................................8-5

Chapter 9Configuring IP ......................................................................................... 9-1

Basic Configuration ..................................................................................................................................9-1

Overview ...................................................................................................................................................9-1

IP Interfaces .......................................................................................................................................9-2

IP Packet Flow Through a Routing Switch .........................................................................................9-2

ARP Cache and Static ARP Table .............................................................................................. 9-4

IP Route Table............................................................................................................................. 9-5

IP Forwarding Cache................................................................................................................... 9-6

Layer 4 Session Table ................................................................................................................. 9-6

IP Route Exchange Protocols ............................................................................................................9-7

viii June 2005

Contents

IP Multicast Protocols .........................................................................................................................9-7

Specifying a Single Source Interface for Telnet, TACACS/TACACS+,

Configuring Load Balancing and Redundancy Using Multiple Static Routes to the Same Destination

Configuring Standard Static IP Routes and Interface or Null Static Routes to the Same Destination

IP Interface Redundancy Protocols ....................................................................................................9-7

Network Address Translation (9300 Series Only) ..............................................................................9-7

Access Control Lists and IP Access Policies .....................................................................................9-8

Basic IP Parameters and Defaults ............................................................................................................9-8

When Parameter Changes Take Effect .............................................................................................9-8

IP Global Parameters .........................................................................................................................9-9

IP Interface Parameters ...................................................................................................................9-14

Configuring IP Parameters – Routing Switches .....................................................................................9-15

Configuring IP Addresses ................................................................................................................9-15

Assigning an IP Address to an Ethernet Port ............................................................................ 9-16

Assigning an IP Address to a Loopback Interface ..................................................................... 9-17

Assigning an IP Address to a Virtual Interface .......................................................................... 9-18

Deleting an IP Address .............................................................................................................. 9-19

Configuring Domain Name Server (DNS) Resolver .........................................................................9-19

Defining a DNS Entry ................................................................................................................ 9-19

Using a DNS Name To Initiate a Trace Route........................................................................... 9-20

Configuring Packet Parameters .......................................................................................................9-21

Changing the Encapsulation Type............................................................................................. 9-21

Changing the Maximum Transmission Unit (MTU).................................................................... 9-22

No Fragmentation for Jumbo Packets Sent to the CPU (Release 07.8.00 and Higher) ............ 9-24

Per-VLAN Forwarding of Jumbo Packets (Release 07.8.00 and Higher).................................. 9-25

Changing the Router ID ...................................................................................................................9-26

or RADIUS Packets ...................................................................................................................9-27

Configuring ARP Parameters ...........................................................................................................9-29

How ARP Works ........................................................................................................................ 9-29

Rate Limiting ARP Packets ..............................................................................................................9-30

Changing the ARP Aging Period ............................................................................................... 9-31

Enabling Proxy ARP .................................................................................................................. 9-31

Creating Static ARP Entries ...................................................................................................... 9-32

Changing the Maximum Number of Entries the Static ARP Table Can Hold ............................ 9-33

Configuring Forwarding Parameters ................................................................................................9-34

Changing the TTL Threshold ..................................................................................................... 9-35

Enabling Forwarding of Directed Broadcasts ............................................................................ 9-35

Disabling Forwarding of IP Source-Routed Packets ................................................................. 9-36

Enabling Support for Zero-Based IP Sub-Net Broadcasts ........................................................ 9-37

Disabling ICMP Messages ...............................................................................................................9-37

Disabling ICMP Redirect Messages .................................................................................................9-39

Configuring Static Routes ................................................................................................................9-39

Static Route Types .................................................................................................................... 9-39

Static IP Route Parameters ....................................................................................................... 9-40

Multiple Static Routes to the Same Destination Provide Load Sharing and Redundancy......... 9-40

Static Route States Follow Port States...................................................................................... 9-40

Configuring a Static IP Route .................................................................................................... 9-41

Configuring a “Null” Route ......................................................................................................... 9-43

9-44

9-46

June 2005 ix

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Configuring a Default Network Route ...............................................................................................9-49

Configuring a Default Network Route ........................................................................................ 9-50

Configuring IP Load Sharing ............................................................................................................9-51

How Multiple Equal-Cost Paths Enter the IP Route Table ........................................................ 9-51

How IP Load Sharing Works ..................................................................................................... 9-53

Disabling or Re-Enabling Load Sharing .................................................................................... 9-60

Changing the Load Sharing Method on Chassis Routing Switches .......................................... 9-61

Enabling Host-Based Load-Sharing for a Specific Destination Network ................................... 9-61

Changing the Maximum Number of Load Sharing Paths .......................................................... 9-62

Optimizing the IP Forwarding Cache ...............................................................................................9-63

Disabling Unicast High-Performance Mode............................................................................... 9-64

CAM Optimization Options ........................................................................................................ 9-64

Increased CAM Network Aggregation in Release 07.8.00 (9300 Series Only) ......................... 9-65

Enabling Standard Optimization for CAM Network Aggregation ........................................ 9-66

Enabling Premium Optimization for CAM Network Aggregation ............................................... 9-66

Enabling Supreme Optimization for CAM Network Aggregation ............................................... 9-67

Displaying CAM Network Aggregation Entries ..................................................................... 9-67

CAM Default Route Aggregation ............................................................................................... 9-68

Configuring IRDP .............................................................................................................................9-70

Enabling IRDP Globally ............................................................................................................. 9-71

Enabling IRDP on an Individual Port ......................................................................................... 9-71

Configuring RARP ............................................................................................................................9-72

How RARP Differs from BootP/DHCP ....................................................................................... 9-72

Disabling RARP ......................................................................................................................... 9-73

Creating Static RARP Entries .................................................................................................... 9-73

Changing the Maximum Number of Static RARP Entries Supported ........................................ 9-74

Configuring UDP Broadcast and IP Helper Parameters ..................................................................9-74

Enabling Forwarding for a UDP Application .............................................................................. 9-75

Configuring an IP Helper Address ............................................................................................. 9-76

Configuring BootP/DHCP Forwarding Parameters ..........................................................................9-78

BootP/DHCP Forwarding Parameters ....................................................................................... 9-78

Configuring an IP Helper Address ............................................................................................. 9-79

Changing the IP Address Used for Stamping BootP/DHCP Requests...................................... 9-79

Changing the Maximum Number of Hops to a BootP Relay Server .......................................... 9-79

Displaying IP Configuration Information and Statistics ...........................................................................9-80

Changing the Network Mask Display to Prefix Format .....................................................................9-80

Displaying IP Information .................................................................................................................9-80

Displaying Global IP Configuration Information ......................................................................... 9-81

Displaying CPU Utilization Statistics ......................................................................................... 9-83

Displaying IP Interface Information............................................................................................ 9-85

Displaying Interface Name in Syslog ......................................................................................... 9-87

Displaying ARP Entries ............................................................................................................. 9-88

Displaying the Forwarding Cache.............................................................................................. 9-91

Displaying the IP Route Table ................................................................................................... 9-93

Clearing IP Routes .................................................................................................................... 9-96

Displaying IP Traffic Statistics ................................................................................................... 9-97

Chapter 10Configuring RIP..................................................................................... 10-1

ICMP Host Unreachable Message for Undeliverable ARPs ............................................................10-1

RIP Parameters and Defaults .................................................................................................................10-2

June 2005 x

Contents

RIP Global Parameters ....................................................................................................................10-2

RIP Interface Parameters .................................................................................................................10-3

Configuring RIP Parameters ...................................................................................................................10-3

Enabling RIP ....................................................................................................................................10-3

Configuring Metric Parameters ........................................................................................................10-4

Changing the Cost of Routes Learned on a Port....................................................................... 10-4

Configuring a RIP Offset List ..................................................................................................... 10-5

Changing the Administrative Distance ............................................................................................10-6

Configuring Redistribution ................................................................................................................10-6

Configuring Redistribution Filters .............................................................................................. 10-7

Changing the Redistribution Metric ........................................................................................... 10-9

Enabling Redistribution.............................................................................................................. 10-9

Configuring Route Learning and Advertising Parameters ..............................................................10-10

Changing the Update Interval for Route Advertisements ........................................................ 10-10

Enabling Learning of RIP Default Routes ................................................................................ 10-11

Configuring a RIP Neighbor Filter............................................................................................ 10-12

Changing the Route Loop Prevention Method ...............................................................................10-13

Suppressing RIP Route Advertisement on a VRRP or VRRPE Backup Interface .........................10-14

Configuring RIP Route Filters ........................................................................................................10-14

Applying a RIP Route Filter to an Interface ............................................................................. 10-16

Displaying RIP Filters ...........................................................................................................................10-17

Displaying CPU Utilization Statistics ....................................................................................................10-19

Chapter 11Configuring IP Multicast Protocols

(9300 Series Only)................................................................................. 11-1

Overview of IP Multicasting ....................................................................................................................11-1

Multicast Terms ................................................................................................................................11-1

Changing Global IP Multicast Parameters ..............................................................................................11-2

Changing Dynamic Memory Allocation for IP Multicast Groups .......................................................11-2

Increasing the Number of IGMP Membership ........................................................................... 11-2

Defining the Maximum Number of Multicast Flows ................................................................... 11-3

Defining the Maximum Number of DVMRP Cache Entries ....................................................... 11-3

Defining the Maximum Number of PIM Cache Entries .............................................................. 11-3

Changing IGMP V1 and V2 Parameters ..........................................................................................11-4

Modifying IGMP (V1 and V2) Query Interval Period .................................................................. 11-4

Modifying IGMP (V1 and V2) Membership Time ....................................................................... 11-4

Modifying IGMP (V1 and V2) Maximum Response Time .......................................................... 11-5

Enabling Hardware Forwarding of Multicast Traffic On Tagged Ports (EP only) .............................11-5

IPC and IGC Requirements ....................................................................................................... 11-5

Disabling or Re-Enabling Hardware Multicast Forwarding For Tagged Ports ........................... 11-6

Displaying the State of Hardware Multicast Forwarding ............................................................ 11-7

Enabling Hardware Forwarding for all Fragments of IP Multicast Packets ......................................11-8

EP Hardware Forwarding of Multicast Traffic on Tagged and Untagged Ports ...............................11-8

Disabling or Re-Enabling Hardware Multicast Forwarding ........................................................ 11-9

Displaying the State of Hardware Multicast Forwarding .......................................................... 11-10

Adding an Interface to a Multicast Group .............................................................................................11-10

PIM Dense ...........................................................................................................................................11-11

Initiating PIM Multicasts on a Network ...........................................................................................11-11

June 2005 xi

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Pruning a Multicast Tree ................................................................................................................11-12

Grafts to a Multicast Tree ...............................................................................................................11-13

PIM DM Versions ...........................................................................................................................11-13

Configuring PIM DM ......................................................................................................................11-14

Enabling PIM on the Router and an Interface ......................................................................... 11-14

Modifying PIM Global Parameters ........................................................................................... 11-16

Failover Time in a Multi-Path Topology ..........................................................................................11-20

Modifying the TTL ..........................................................................................................................11-21

Dropping PIM Traffic in Hardware ..................................................................................................11-21

PIM Sparse ..........................................................................................................................................11-22

PIM Sparse Router Types ..............................................................................................................11-23

RP Paths and SPT Paths ...............................................................................................................11-23

Configuring PIM Sparse .................................................................................................................11-23

Limitations in this Release ....................................................................................................... 11-24

Configuring Global PIM Sparse Parameters ........................................................................... 11-24

Globally Enabling and Disabling PIM without Deleting Multicast Configuration ...................... 11-25

Configuring PIM Interface Parameters .................................................................................... 11-25

Configuring BSRs .................................................................................................................... 11-25

Configuring RPs ...................................................................................................................... 11-26

Changing the Shortest Path Tree (SPT) Threshold................................................................. 11-27

Changing the PIM Join and Prune Message Interval .............................................................. 11-28

Dropping PIM Traffic in Hardware ..................................................................................................11-29

Displaying PIM Sparse Configuration Information and Statistics ...................................................11-29

Displaying Basic PIM Sparse Configuration Information ......................................................... 11-29

Displaying a List of Multicast Groups ...................................................................................... 11-31

Displaying BSR Information..................................................................................................... 11-31

Displaying Candidate RP Information...................................................................................... 11-33

Displaying RP-to-Group Mappings .......................................................................................... 11-34

Displaying RP Information for a PIM Sparse Group ................................................................ 11-35

Displaying the RP Set List ....................................................................................................... 11-35

Displaying Multicast Neighbor Information .............................................................................. 11-36

Displaying Information About an Upstream Neighbor Device ................................................. 11-37

Displaying the PIM Flow Cache............................................................................................... 11-38

Displaying the PIM Multicast Cache ........................................................................................ 11-38

Displaying PIM Traffic Statistics .............................................................................................. 11-40

Displaying and Clearing PIM Errors ........................................................................................ 11-42

Configuring Multicast Source Discovery Protocol (MSDP) ...................................................................11-42

Peer Reverse Path Forwarding (RPF) Flooding ............................................................................11-44

Source Active Caching ...................................................................................................................11-44

Configuring MSDP .........................................................................................................................11-44

Enabling MSDP ....................................................................................................................... 11-44

Configuring MSDP Peers ........................................................................................................ 11-45

Designating an Interface’s IP Address as the RP’s IP Address .....................................................11-45

Filtering MSDP Source-Group Pairs ..............................................................................................11-46

Filtering Incoming Source-Active Messages ........................................................................... 11-46

Filtering Advertised Source-Active Messages ......................................................................... 11-48

Configuring MSDP Mesh Groups ...................................................................................................11-49

Configuring MSDP Mesh Group .............................................................................................. 11-50

Displaying MSDP Information ........................................................................................................11-56

Displaying Summary Information............................................................................................. 11-56

June 2005 xii

Contents

Displaying Peer Information .................................................................................................... 11-57

Displaying Source Active Cache Information .......................................................................... 11-61

Clearing MSDP Information ...........................................................................................................11-62

Clearing Peer Information........................................................................................................ 11-62

Clearing the Source Active Cache........................................................................................... 11-62

Clearing MSDP Statistics ........................................................................................................ 11-62

DVMRP Overview .................................................................................................................................11-62

Initiating DVMRP Multicasts on a Network ....................................................................................11-63

Pruning a Multicast Tree ................................................................................................................11-63

Grafts to a Multicast Tree ...............................................................................................................11-65

Configuring DVMRP .............................................................................................................................11-65

Enabling DVMRP on the Routing Switch and Interface .................................................................11-65

Globally Enabling and Disabling DVMRP ................................................................................ 11-66

Globally Enabling or Disabling DVMRP without Deleting Multicast Configuration .................. 11-66

Enabling DVMRP on an Interface............................................................................................ 11-66

Modifying DVMRP Global Parameters ...........................................................................................11-67

Modifying Neighbor Timeout.................................................................................................... 11-67

Modifying Route Expires Time................................................................................................. 11-68

Modifying Route Discard Time ................................................................................................ 11-69

Modifying Prune Age ............................................................................................................... 11-69

Modifying Graft Retransmit Time ............................................................................................. 11-69

Modifying Probe Interval.......................................................................................................... 11-70

Modifying Report Interval......................................................................................................... 11-70

Modifying Trigger Interval ........................................................................................................ 11-71

Modifying Default Route .......................................................................................................... 11-71

Modifying DVMRP Interface Parameters .......................................................................................11-71

Modifying the TTL .................................................................................................................... 11-72

Modifying the Metric ................................................................................................................ 11-72

Enabling Advertising ................................................................................................................ 11-73

Displaying Information About an Upstream Neighbor Device ........................................................11-73

Configuring an IP Tunnel ......................................................................................................................11-74

Using ACLs to Control Multicast Features ............................................................................................11-75

Using ACLs to Limit Static RP Groups ...........................................................................................11-75

Using ACLs to Limit PIM RP Candidate Advertisement .................................................................11-77

Using ACLs to Control Multicast Traffic Boundaries ......................................................................11-78

Configuring a Static Multicast Route ....................................................................................................11-78

Tracing a Multicast Route .....................................................................................................................11-80

Displaying Another Multicast Router’s Multicast Configuration ............................................................11-82

IGMP V3 ...............................................................................................................................................11-83

Default IGMP Version ....................................................................................................................11-83

Compatibility with IGMP V1 and V2 .............................................................................................11-84

Globally Enabling the IGMP Version ..............................................................................................11-84

Enabling the IGMP Version Per Interface Setting ..........................................................................11-84

Enabling the IGMP Version on a Physical Port Within a Virtual Routing Interface ........................11-85

Enabling Membership Tracking and Fast Leave ............................................................................11-85

Setting the Query Interval ..............................................................................................................11-86

Setting the Group Membership Time .............................................................................................11-86

Setting the Maximum Response Time ...........................................................................................11-86

IGMP V3 and Source Specific Multicast Protocols ........................................................................11-87

June 2005 xiii

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

Enabling SSM .......................................................................................................................... 11-87

Displaying IGMP V3 Information ....................................................................................................11-87

Displaying IGMP Group Status................................................................................................ 11-87

Displaying the IGMP Status of an Interface............................................................................. 11-89

Displaying IGMP Traffic Status................................................................................................ 11-90

Clearing IGMP Statistics ................................................................................................................11-91

Chapter 12Configuring OSPF................................................................................. 12-1

Overview of OSPF ..................................................................................................................................12-1

OSPF Point-to-Point Links ...............................................................................................................12-2

Designated Routers in Multi-Access Networks ................................................................................12-3

Designated Router Election in Multi-Access Networks ....................................................................12-3

OSPF RFC 1583 and 2178 Compliance ..........................................................................................12-4

Reduction of Equivalent AS External LSAs ......................................................................................12-4

Algorithm for AS External LSA Reduction ................................................................................. 12-6

Support for OSPF RFC 2328 Appendix E ........................................................................................12-6

Dynamic OSPF Activation and Configuration ..................................................................................12-7

Dynamic OSPF Memory ..................................................................................................................12-7

Configuring OSPF ..................................................................................................................................12-8

Configuration Rules ..........................................................................................................................12-8

OSPF Parameters ............................................................................................................................12-8

Global Parameters..................................................................................................................... 12-8

Interface Parameters ................................................................................................................. 12-9

Enable OSPF on the Router ............................................................................................................12-9

Note Regarding Disabling OSPF ............................................................................................. 12-10

Assign OSPF Areas .......................................................................................................................12-10

Assign a Totally Stubby Area .................................................................................................. 12-11

Assign a Not-So-Stubby Area (NSSA) .................................................................................... 12-12

Assigning an Area Range (optional) .............................................................................................12-16

Assigning Interfaces to an Area .....................................................................................................12-17

Modify Interface Defaults ...............................................................................................................12-18

OSPF Interface Parameters .................................................................................................... 12-19

Change the Timer for OSPF Authentication Changes ...................................................................12-21

Block Flooding of Outbound LSAs on Specific OSPF Interfaces ...................................................12-22

Assign Virtual Links ........................................................................................................................12-22

Modify Virtual Link Parameters ......................................................................................................12-25

Virtual Link Parameter Descriptions ........................................................................................ 12-25

Changing the Reference Bandwidth for the Cost on OSPF Interfaces ..........................................12-27

Interface Types To Which the Reference Bandwidth Does Not Apply .................................... 12-27

Changing the Reference Bandwidth ........................................................................................ 12-27

Define Redistribution Filters ...........................................................................................................12-28

Prevent Specific OSPF Routes from Being Installed in the IP Route Table ..................................12-31

Modify Default Metric for Redistribution .........................................................................................12-34

Enable Route Redistribution ..........................................................................................................12-34

Example Using a Route Map ................................................................................................... 12-35

Disable or Re-enable Load Sharing ...............................................................................................12-37

Configure External Route Summarization ......................................................................................12-38

xiv June 2005

Contents

Configure Default Route Origination ..............................................................................................12-39

Modify SPF Timers .........................................................................................................................12-40

Modify Redistribution Metric Type ..................................................................................................12-40

Modify Administrative Distance ......................................................................................................12-41

Configuring Administrative Distance Based on Route Type .................................................... 12-41

Configure OSPF Group Link State Advertisement (LSA) Pacing ...................................................12-42

Usage Guidelines .................................................................................................................... 12-42

Changing the LSA Pacing Interval........................................................................................... 12-42

Modify OSPF Traps Generated ......................................................................................................12-42

Modify OSPF Standard Compliance Setting ..................................................................................12-43

Modify Exit Overflow Interval ..........................................................................................................12-44

Modify the Maximum Number of Routes ........................................................................................12-44

Modify LSDB Limits ........................................................................................................................12-45

Configuring an OSPF Point-to-Point Link .......................................................................................12-46

Configuration Notes and Limitations........................................................................................ 12-46

Configuring an OSPF Point-to-Point Link ................................................................................ 12-46

Viewing Configured OSPF Point-to-Point Links ...................................................................... 12-46

Specify Types of OSPF Syslog Messages to Log ..........................................................................12-46

Displaying OSPF Information ...............................................................................................................12-47

Displaying General OSPF Configuration Information .....................................................................12-48

Displaying CPU Utilization Statistics ..............................................................................................12-49

Displaying OSPF Area Information ................................................................................................12-50

Displaying OSPF Neighbor Information .........................................................................................12-51

Displaying OSPF Interface Information ..........................................................................................12-53

Displaying OSPF Route Information ..............................................................................................12-55

Displaying the Routes that Have Been Redistributed into OSPF ............................................ 12-57

Displaying OSPF External Link State Information ..........................................................................12-57

Displaying OSPF Link State Information ........................................................................................12-58

Displaying the Data in an LSA .......................................................................................................12-59

Displaying OSPF Virtual Neighbor Information ..............................................................................12-60

Displaying OSPF Virtual Link Information ......................................................................................12-60

Displaying OSPF ABR and ASBR Information ...............................................................................12-60

Displaying OSPF Trap Status ........................................................................................................12-61

Chapter 13Configuring BGP4................................................................................. 13-1

Overview of BGP4 ..................................................................................................................................13-1

Relationship Between the BGP4 Route Table and the IP Route Table ...........................................13-2

How BGP4 Selects a Path for a Route ............................................................................................13-3

BGP4 Message Types .....................................................................................................................13-4

OPEN Message ......................................................................................................................... 13-4

UPDATE Message .................................................................................................................... 13-5

KEEPALIVE Message ............................................................................................................... 13-5

NOTIFICATION Message.......................................................................................................... 13-5

Basic Configuration and Activation for BGP4 .........................................................................................13-5

Note Regarding Disabling BGP4 ......................................................................................................13-6

BGP4 Parameters ..................................................................................................................................13-7

June 2005 xv

Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches

When Parameter Changes Take Effect ...........................................................................................13-8

Immediately ............................................................................................................................... 13-9

After Resetting Neighbor Sessions............................................................................................ 13-9

After Disabling and Re-Enabling Redistribution ........................................................................ 13-9

Memory Considerations ..........................................................................................................................13-9

Memory Configuration Options Obsoleted by Dynamic Memory ...................................................13-10

Basic Configuration Tasks ....................................................................................................................13-10

Enabling BGP4 on the Router ........................................................................................................13-11

Changing the Router ID .................................................................................................................13-11

Setting the Local AS Number .........................................................................................................13-12

Adding a Loopback Interface .........................................................................................................13-12

Adding BGP4 Neighbors ................................................................................................................13-13

Encryption of BGP4 MD5 Authentication Keys........................................................................ 13-20

Adding a BGP4 Peer Group ...........................................................................................................13-21

Peer Group Parameters .......................................................................................................... 13-22

Configuration Rules ................................................................................................................. 13-22

Configuring a Peer Group........................................................................................................ 13-23

Applying a Peer Group to a Neighbor...................................................................................... 13-24

Administratively Shutting Down a Session with a BGP4 Neighbor.......................................... 13-25

Optional Configuration Tasks ...............................................................................................................13-26

Changing the Keep Alive Time and Hold Time ..............................................................................13-26

Changing the BGP4 Next-Hop Update Timer ................................................................................13-26

Enabling Fast External Fallover .....................................................................................................13-27

Changing the Maximum Number of Paths for BGP4 Load Sharing ...............................................13-27

How Load Sharing Affects Route Selection............................................................................. 13-28

How Load Sharing Works ........................................................................................................ 13-28

Changing the Maximum Number of Shared BGP4 Paths ....................................................... 13-28

Customizing BGP4 Load Sharing ..................................................................................................13-29