HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
30 Figure 16 Network diagram Configuration procedure 1. Set the IP address for each interface as shown in Figure 16. (Details not shown.) 2. Configure Device A: # Configure the Device A to operate in NTP br oadcast client mode and receive NTP broadcast messages on VLAN-interface 2. system-view [DeviceA] interface vlan-interface 2 [DeviceA-Vlan-interface2] ntp-service broadcast-client 3. Configure Device B: # Enable NTP authentication on Device B. Configur e an NTP authentication key, with the key ID 88 and key value 123456, and specify the key as a trusted key. system-view [DeviceB] ntp-service authentication enable [DeviceB] ntp-service authentication-keyid 88 authentication-mode md5 12\ 3456 [DeviceB] ntp-service reliable authentication-keyid 88 # Configure Device B to operate in broadcast client mode and receive NTP broadcast messages on VLAN-interface 2. [DeviceB] interface vlan-interface 2 [DeviceB-Vlan-interface2] ntp-service broadcast-client 4. Configure Device C: # Configure Device C to operate in NTP broadcast server mode and use VLAN-interface 2 to send NTP broadcast packets. [DeviceC] interface vlan-interface 2 [DeviceC-Vlan-interface2] ntp-service broadcast-server [DeviceC-Vlan-interface2] quit # Display the NTP service status information on Device A. [DeviceA-Vlan-interface2] display ntp-service status Clock status: synchronized Clock stratum: 4 Reference clock ID: 3.0.1.31 Nominal frequency: 64.0000 Hz
31 Actual frequency: 64.0000 Hz Clock precision: 2^7 Clock offset: 0.0000 ms Root delay: 31.00 ms Root dispersion: 8.31 ms Peer dispersion: 34.30 ms Reference time: 16:01:51.713 UTC Sep 19 2005 (C6D95F6F.B6872B02) The output shows that Device A has synchronized to Device C because it has a higher stratum than Device C. # Display the NTP session information of Device A. [DeviceA-Vlan-interface2] display ntp-service sessions source reference stra reach poll now offset delay disper ************************************************************************\ ** [1234] 3.0.1.31 127.127.1.0 3 254 64 62 -16.0 32.0 16.\ 6 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 confi\ gured Total associations : 1 The output shows that an association has been set up Device A and Device C. # .Display the NTP service status information on Device B. [DeviceB-Vlan-interface2] display ntp-service status Clock status: unsynchronized Clock stratum: 16 Reference clock ID: none Nominal frequency: 100.0000 Hz Actual frequency: 100.0000 Hz Clock precision: 2^18 Clock offset: 0.0000 ms Root delay: 0.00 ms Root dispersion: 0.00 ms Peer dispersion: 0.00 ms Reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000) The output shows that NTP authentication is enabl ed on Device B, but not enabled on Device C. Therefore, Device B cannot synchronize to Device C. # Enable NTP authentication Device C. Configure an NTP authentication key, with the key ID 88 and key value 123456, and specify the key as a trusted key. [DeviceC] ntp-service authentication enable [DeviceC] ntp-service authentication-keyid 88 authentication-mode md5 12\ 3456 [DeviceC] ntp-service reliable authentication-keyid 88 # Specify Device C as an NTP broadcast serv er, and associate the key 88 with Device C. [DeviceC] interface vlan-interface 2 [DeviceC-Vlan-interface2] ntp-service broadcast-server authentication-ke\ yid 88 # Display the NTP service status information on Device B. [DeviceB-Vlan-interface2] display ntp-service status Clock status: synchronized Clock stratum: 4 Reference clock ID: 3.0.1.31 Nominal frequency: 64.0000 Hz Actual frequency: 64.0000 Hz
32 Clock precision: 2^7 Clock offset: 0.0000 ms Root delay: 31.00 ms Root dispersion: 8.31 ms Peer dispersion: 34.30 ms Reference time: 16:01:51.713 UTC Sep 19 2005 (C6D95F6F.B6872B02) The output shows that Device B has synchronized to Device C because it has a higher stratum than Device C. # Display the NTP session information of Device B. [DeviceB-Vlan-interface2] display ntp-service sessions source reference stra reach poll now offset delay disper ************************************************************************\ ** [1234] 3.0.1.31 127.127.1.0 3 254 64 62 -16.0 32.0 16\ .6 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 confi\ gured Total associations : 1 The output shows that an association has been set up between Device B and Device C. # Display the NTP service status information on Device A. [DeviceA-Vlan-interface2] display ntp-service status Clock status: synchronized Clock stratum: 4 Reference clock ID: 3.0.1.31 Nominal frequency: 64.0000 Hz Actual frequency: 64.0000 Hz Clock precision: 2^7 Clock offset: 0.0000 ms Root delay: 31.00 ms Root dispersion: 8.31 ms Peer dispersion: 34.30 ms Reference time: 16:01:51.713 UTC Sep 19 2005 (C6D95F6F.B6872B02) The output shows that configuring NTP authenticati on on Device C does not affect Device A and Device A still synchronizes to Device C.
33 Configuring the information center This chapter describes how to configure the information center. Overview The information center classifies and manages system information so that network administrators and developers can monitor network performa nce and troubleshoot network problems. The information center operates as follows: • Receives system information including log, trap, and debugging information generated by each module. • Outputs the information to different informat ion channels, according to output rules. • Outputs information to different destinations, based on information channel-to-destination associations. Information center assigns log, trap, and debugging information to 10 information channels according to eight severity levels and then outputs the information to different destinations. The following describes the working process in detail. Figure 17 Information center diagram (default)
34 By default, the information center is enabled. It affects system performance to some degree when it is processing large amounts of information. If the syst em resources are insufficient, disable the information center to save resources. Classification of system information The system information falls into the following types: • Log information • Trap i n fo rm a t io n • Debugging information System information levels The system information is classified into eight severity levels, from 0 through 7 in descending order. The device outputs the system information with a severity level that is higher than or equal to the specified level. For example, if you configure an output rule with a severity level of 6 (informational), information that has a severity level from 0 to 6 is output. Table 1 Severity description Severit y Severity value Description Corresponding keyword in commands Emergency 0 The system is unavailable. emergencies Alert 1 Action must be taken immediately. alerts Critical 2 Critical condition. critical Error 3 Error condition. errors Warning 4 Warning condition. warnings Notice 5 Normal but significant condition. notifications Informational 6 Informational messages. informational Debug 7 Debug messages. debugging System information channels and output destinations Tabl e 2 shows the information channels and output destinations. The system supports ten channels. By default, channe ls 0 through 6 are configured with channel names and output destinations, and they are associated with output destinations. You can change these default settings as needed. You can also configure channels 7, 8 and 9 associate them with specific output destinations to meet your needs. Table 2 Information channels and output destinations Information channel number Default channel name Default output destination Description 0 console Console Receives log, trap and debugging information.
35 Information channel number Default channel name Default output destination Description 1 monitor Monitor terminal Receives log, trap and debugging information, facilitating remote maintenance. 2 loghost Log host Receives log, trap and debugging information and information will be stored in files for future retrieval. 3 trapbuffer Trap buffer Receives trap information, a buffer inside the device for recording information. 4 logbuffer Log buffer Receives log and debugging information, a buffer inside the device for recording information. 5 snmpagent SNMP module Receives trap information. 6 channel6 Web interface Receives log information. 7 channel7 Not specified Receives log, trap, and debugging information. 8 channel8 Not specified Receives log, trap, and debugging information. 9 channel9 Not specified Receives log, trap, and debugging information. Outputting system information by source module The system is composed of a variety of protocol modules, and configuration modules. The system information is classified, filtered, and output according to source modules. You can use the info-center source ? command to view the supported information source modules. Default output rules of system information A default output rule specifies the system information source modules, information type, and severity levels for an output destination. Tabl e 3 sh ows the default output rules. The following applies to all modules by default: • All log information is allowed to be output to the Web interface. Log information that has a severity level of at least informational is allowed to be output to the log host. Log information that has a severity level of at least informational is allowed to be output to the console, monitor terminal, and log buffer. Log information is not allowed to be output to the trap buffer or the SNMP module. • All trap information is allowed to be output to th e console, monitor terminal, log host, Web interface. Trap information that has a severity level of at least informational is allowed to be output to the trap buffer and SNMP module. Trap information is not allowed to be output to the log buffer. • All debugging information is allowed to be output to the console and monitor terminal. Debugging information is not allowed to be output to the log host, trap buffer, log buffer, the SNMP module, Web interface.
36 Table 3 Default output rules for different output destinations Output destination Modules allowed LOG TRAP DEBUG Enabled/ disabled Severity Enabled/ disabled Severity Enabled/ disabled Severity Console default (all modules) Enabled Informa- tional Enabled Debug Enabled Debug Monitor terminal default (all modules) Enabled Informa- tional Enabled Debug Enabled Debug Log host default (all modules) Enabled Informa- tional Enabled Debug Disabled Debug Trap buffer default (all modules) Disabled Informa- tional Enabled Informatio nal Disabled Debug Log buffer default (all modules) Enabled Informa- tional Disabled Debug Disabled Debug SNMP module default (all modules) Disabled Debug Enabled Informatio nal Disabled Debug Web interface default (all modules) Enabled Debug Enabled Debug Disabled Debug System information format The following shows the original format of system info rmation, which might be different from what you see. The actual format depends on the log resolution tool you use. Formats The system information format depends on the output destinations, as shown in Tabl e 4. Table 4 System information formats Output destinatio n Format Example Console, monitor terminal, logbuffer, trapbuffer, SNMP module timestamp sysname module/level/digest: content %Jun 26 17:08:35:809 2011 Sysname SHELL/4/LOGIN: VTY login from 1.1.1.1
37 Output destination Format Example Log host • HP format: timestamp Sysname %%vvmodule/level /digest: source content • UNICOM format: timestamp Sysname vvmodule/level/serial_numb er: content • HP format: Oct 9 14:59:04 201 MyDevice %%10SHELL/5/SHELL_LOGIN(l): VTY logged in from 192.168.1.21 • UNICOM format: { Oct 13 16:48:08 2011 HP 10IFNET/2/210231a64jx073000020: log_type=port;content=Vlan-interface1 link status is DOWN. { Oct 13 16:48:08 2011 HP 10IFNET/2/210231a64jx073000020: log_type=port;content=Line protocol on the interface Vlan-interface1 is DOWN. NOTE: The closing set of angel brackets (< >), the space, the forward slash (/), and the colon (:) are all required in the above format. Following is a detailed explanation of the fields involved in system information: PRI (priority) The priority is calculated using the formula: facility*8+level, where: • facility i s t h e f a c i l i t y n a m e , r a n g i n g f r o m l o c a l 0 t o l o c a l 7 (16 t o 23 i n d e ci m a l i n t e g e r s ) a n d d e f a u l t s to local7. It can be configured with info-center loghost. I t i s us e d to id ent i f y d i f fe re nt l o g so u rc e s on the log host, and to query and filter logs from specific log sources. • level ranges from 0 to 7. See Tabl e 1 for more information. Note that the priority field is available only for information that is sent to the log host. timestamp Times tamp records the time when the system information was generated. The time stamp of the system information sent to the log host has a precision of seconds, and that to all the other destinations has a precision of milliseconds. The time stamp format of the system information sent to the log host is configured with the info-center timestamp loghost command, and that of the system information sent to the other destinations is configured with the info-center timestamp command.
38 Table 5 Description on the time stamp parameters Time stamp parameter Description Example boot Time since system startup, in the format of xxxxxx.yyyyyy, where xxxxxx represents the higher 32 bits, and yyyyyy represents the lower 32 bits. System information that is sent to all destinations except the log host supports this parameter. %0.109391473 Sysname FTPD/5/FTPD_LOGIN: User ftp (192.168.1.23) has logged in successfully. 0.109391473 is a time stamp in the boot format. date Current date and time of the system, in the format of Mmm dd hh:mm:ss:sss yyyy. All system information supports this parameter. %May 30 05:36:29:579 2011 Sysname FTPD/5/FTPD_LOGIN: User ftp (192.168.1.23) has logged in successfully. May 30 05:36:29:579 2011 is a time stamp in the date format. iso Time stamp format stipulated in ISO 8601 All system information supports this parameter. 2011-05-30T06:42:44 Sysname %%10FTPD/5/FTPD_LOGIN(l): User ftp (192.168.1.23) has logged in successfully. 2011-05-30T06:42:44 is a time stamp in the iso format. none No time stamp is included. All system information supports this parameter. % Sysname FTPD/5/FTPD_LOGIN: User ftp (192.168.1.23) has logged in successfully. No time stamp is included. no-year-date Current date and time of the system, with year information excluded. Only the system information that is sent to the log host supports this parameter. May 30 06:44:22 Sysname %%10FTPD/5/FTPD_LOGIN(l): User ftp (192.168.1.23) has logged in successfully. May 30 06:44:22 is a time stamp in the no-year-date format. Sysname (host name or host IP address) • If the system information that is sent to a log host is in the UNICOM format, and the info-center loghost source command is configured, or vpn-instance vpn-instance-name is provided in the info-center loghost command, the field is displayed as the IP address of the device that generates the system information. • If the system information is sent to other destinations, or is sent to a log host in the HP format, the field is displayed as the system name of the devi ce that generates the system information. You can use the sysname command to modify the system name. For more information, see Fundamentals Command Reference . %% (vendor ID) This field indicates that the information is generated by an HP device. It is displayed only when the system information is sent to a log host in the format of HP.
39 vv This field is a version identifier of syslog, with a value of 10. It is displayed only when the output destination is log host. module The module field represents the name of the module that generates system information. You can enter the info-center source ? command in system view to view the module list. level (severity) System information is divided i n t o e i g h t l e v e l s b a s e d o n i t s s e v e r i t y, f r o m 0 t o 7. S e e Tabl e 1 for definitions and descriptions of these severity levels. The leve ls of system information generated by modules are predefined by developers, and you cannot change the system information levels. However, with the info-center source command, you can configure to output information of the specified level and not to output information lower than the specified level. digest The digest field is a string of up to 32 characters, outlining the system information. For system information destined to the log host: • If the character string ends with (l), the information is log information. • If the character string ends with (t), the information is trap information. • If the character string ends with (d), the information is debugging information. For system information destined to other destinations: • If the time stamp starts with a percent sign (%), the information is log information. • If the time stamp starts with a pound sign (#), the information is trap information. • If the time stamp starts with an asterisk (* ), the information is debugging information. serial number This field indicates the serial number of the device that generates the system information. It is displayed only when the system information is sent to a log host in the UNICOM format. source This field indicates the source of the information. It is optional and is displayed only when the system information is sent to a log host in the HP format. This field takes one of the following values: • IRF member ID • IP address of the log sender content This field provides the content of the system information. Information center configuration task list Task Remarks Outputting system information to the console Optional Outputting system information to the monitor terminal Optional Outputting system information to a log host Optional