Release Notes K.12.26

ManualsBrandsHP ManualsComputer AccessoriesHP AdvStack 10/100 TX Switch Port Mod

Release Notes:

Version K.12.26 Software

for the ProCurve Series 3500yl, 6200yl, and 5400zl Switches

These release notes include information on the following:

■ Downloading switch software and documentation from the Web (page 1)

■ Support Notes, Known Issues, and Clarifications for certain software features (page 10)

■ A listing of software enhancements in recent releases (page 12)

■ A listing of software fixes included in releases K.11.11 through K.12.26 (page 65)

Support Notices:

Security: Downloading and booting software release K.12.01 or greater for the first time automatically enables

SNMP access to the hpSwitchAuth MIB objects. If this is not desirable for your network, ProCurve

recommends that you disable it after downloading and rebooting with the latest switch software.

See“Support Notes” on page 10 for details.

ACL numbering restrictions: This release enforces ACL numbering restrictions. See the Note under Version

K.12.01 Software Fixes on page 80 (PR_1000389442) for details.

OSPF virtual link: OSPF virtual links configurations will be lost with the update to K.12.01. See the Note under

Version K.12.01 Software Fixes on page 81 (PR_1000374003) for details.

MSTP auto-edge-port support and default settings: With version K.12.04, automatic detection of edge ports is

supported, along with revised command options and default settings. See Release K.12.04 Enhancements

on page 19 (PR_1000369492) for details.

Related Publications

See “To Download Product Documentation:” on page 2 to get the latest version of these documents.

■ Management and Configuration Guide

■ Advanced Traffic Management Guide

■ Access Security Guide

■ Multicast and Routing Guide

■ Command Line Interface Reference Guide

■ Log Message Reference Guide

Summary of content (100 pages)

PAGE 1
Release Notes: Version K.12.26 Software for the ProCurve Series 3500yl, 6200yl, and 5400zl Switches These release notes include information on the following: ■ Downloading switch software and documentation from the Web (page 1) ■ Support Notes, Known Issues, and Clarifications for certain software features (page 10) ■ A listing of software enhancements in recent releases (page 12) ■ A listing of software fixes included in releases K.11.11 through K.12.
PAGE 3
Contents Software Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1 Premium Edge Switch Software Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Software Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Downloading Switch Documentation and Software from the Web . . . . . . . . . . . . . . . . . . . . . .
PAGE 4
Release K.11.45 Through K.11.47 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Release K.11.48 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Release K.11.49 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Release K.11.60 through K.11.63 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 5
RADIUS Server Unavailable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Configuring RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Specifying the MAC Address Format . . . . . . . . . . . .
PAGE 6
Release K.11.36 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Release K.11.37 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Release K.11.38 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Release K.11.39 . . . . . . . . . .
PAGE 7
Version K.12.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Version K.12.12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Version K.12.13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Version K.12.14 . . . . . . . . . .
PAGE 8
Software Management Premium Edge Switch Software Features Software Management Premium Edge Switch Software Features The ProCurve 3500yl and 5400zl switches ship with the ProCurve Intelligent Edge software feature set. The additional Premium Edge switch software features for the 3500yl and 5400zl switches can be acquired by purchasing the optional Premium Edge license and installing it on the Intelligent Edge version of these switches.
PAGE 9
Software Management Downloading Switch Documentation and Software from the Web Downloading Switch Documentation and Software from the Web You can download software updates and the corresponding product documentation from the ProCurve Networking Web site as described below. To Download a Software Version: 1. Go to the ProCurve Networking Web site at: www.procurve.com. 2. Click on Software updates (in the sidebar). 3. Under Latest software, click on Switches.
PAGE 10
Software Management Downloading Software to the Switch Downloading Software to the Switch ProCurve Networking periodically provides switch software updates through the ProCurve Networking Web site (www.procurve.com). After you acquire the new software file, you can use one of the following methods for downloading it to the switch: ■ For a TFTP transfer from a server, do either of the following: • ■ Select Download OS in the Main Menu of the switch’s menu interface and use the (default) TFTP option.
PAGE 11
Software Management Downloading Software to the Switch TFTP Download from a Server Syntax:copy tftp flash [ < primary | secondary > ] Note that if you do not specify the flash destination, the TFTP download defaults to the primary flash. For example, to download a software file named K_11_1x.swi from a TFTP server with the IP address of 10.28.227.103: 1. Execute the copy command as shown below: ProCurve # copy tftp flash 10.28.227.103 K_11_1x.
PAGE 12
Software Management Downloading Software to the Switch Syntax: copy xmodem flash [< primary | secondary >] 1. To reduce the download time, you may want to increase the baud rate in your terminal emulator and in the switch to a value such as 115200 bits per second. (The baud rate must be the same in both devices.
PAGE 13
Software Management Downloading Software to the Switch Using USB to Download Switch Software To use the USB port on the switch to download a software version from a USB flash drive: ■ The software version must be stored on the USB flash drive, and you must know the file name (such as K_12_10.swi). ■ The USB flash drive must be properly installed in the USB port on the switch. Note Some USB flash drives may not be supported on your switch.
PAGE 14
Software Management Saving Configurations While Using the CLI Saving Configurations While Using the CLI The switch operates with two configuration files: ■ Running-Config File: Exists in volatile memory and controls switch operation. Rebooting the switch erases the current running-config file and replaces it with an exact copy of the current startup-config file. To save a configuration change, you must save the running configuration to the startup-config file.
PAGE 15
Software Management ProCurve Switch, Routing Switch, and Router Software Keys ProCurve Switch, Routing Switch, and Router Software Keys Software Letter ProCurve Networking Products C 1600M, 2400M, 2424M, 4000M, and 8000M CY Switch 8100fl Series (8108fl and 8116fl) E Switch 5300xl Series (5304xl, 5308xl, 5348xl, and 5372xl) F Switch 2500 Series (2512 and 2524), Switch 2312, and Switch 2324 G Switch 4100gl Series (4104gl, 4108gl, and 4148gl) H Switch 2600 Series, Switch 2600-PWR Series: H.07.
PAGE 16
Software Management OS/Web/Java Compatibility Table OS/Web/Java Compatibility Table The switch web agent supports the following combinations of OS browsers and Java Virtual Machines: Operating System Internet Explorer Windows NT 4.0 SP6a 5.00, 5.01 5.01, SP1 6.0, SP1 Windows 2000 Pro SP4 5.05, SP2 6.0, SP1 Windows XP Pro SP2 6.0, SP1 Windows Server SE 2003 SP1 6.0, SP1 Java Sun Java 2 Runtime Environment: – Version 1.3.1.12 – Version 1.4.2.05 Sun Java 2 Runtime Environment: – Version 1.5.0.
PAGE 17
Support Notes Using SNMP To View and Configure Switch Authentication Features Support Notes Using SNMP To View and Configure Switch Authentication Features Beginning with software release K.12.01, manager read/write access is available for a subset of the SNMP MIB objects for switch authentication (hpSwitchAuth) features.
PAGE 18
Clarifications Known Issues Clarifications The following clarification or updates apply to documentation for the ProCurve 3500yl Series, 6200yl Series, and 5400zl Series switches as of February 2007. ■ Enabling Jumbo Frames and Flow Control: The 3500yl, 5400zl, and 6200yl switches support simultaneous use of Jumbo Frames and Flow Control. (The earlier version of the Management and Configuration Guide incorrectly stated that these features could not be enabled at the same time.
PAGE 19
Enhancements Release K.11.12 Enhancements Enhancements Unless otherwise noted, each new release includes the enhancements added in all previous releases. Enhancments are listed in chronological order, oldest to newest software release. To review a summary of enhancements included since the last general release that was published, begin with “Release K.12.06 Enhancements” on page 29. Descriptions and detailed instructions for enhancements included in Release K.12.
PAGE 20
Enhancements Release K.11.35 Enhancements three distinct sFlow instances. For more information, refer to the section on “CLI-Configured sFlow with Multiple Instances” in the chapter titled “Configuring for Network Management Applications” in the Management and Configuration Guide for your switch. ■ Event log display options: Two new options have been added to provide greater flexibility in viewing event log entries via the CLI.
PAGE 21
Enhancements Release K.11.42 Enhancements Release K.11.42 Enhancements No enhancements, software fixes only. Release K.11.43 Enhancements Release K.11.43 includes the following enhancement: ■ 802.1X Controlled Directions enhancement. With this change, Administrators can use “Wakeon-LAN” with computers that are connected to ports configured for 802.1X authentication. Release K.11.44 Enhancements Release K.11.
PAGE 22
Enhancements Release K.11.60 through K.11.63 Enhancements Release K.11.60 through K.11.63 Enhancements No enhancements, software fixes only. ■ Versions K.11.50 through K.11.59 were never built. ■ Version K.11.60 was never released. Release K.11.64 Enhancements Release K.11.64 includes the following enhancement: ■ Loop Protection feature additions, including packet authentication, loop detected trap, and receiver port configuration.
PAGE 23
Enhancements Release K.12.01 Enhancements Release K.12.01 Enhancements Release K.12.01 is a major software update containing many new features and enhancements to existing features. The following updates have been documented in the latest revisions to the manuals (February 2007). Refer to the manuals for additional details.
PAGE 24
Enhancements Release K.12.01 Enhancements Sofware Manual/ Enhancements Description Advanced Traffic Management Guide Qos Queue Config: Allows you to reduce the number of outbound queues that all switch ports will use to buffer packets for 802.1p user priorities. Number of Defaut VLANs: In the factory default state, support has been increased from 8 VLANs to 256 VLANs. (You can reconfigure the switch to support up to 2048 (vids up to 4094) VLANs.
PAGE 25
Enhancements Release K.12.02 Enhancements Sofware Manual/ Enhancements Description Controlled Directions Allows you to use the aaa port-access controlled-directions command to Web/MAC Auth: configure how a port transmits traffic before it successfully authenticates a client and enters the authenticated state. This feature is available for both 802.1X and Web/MAC authorization.
PAGE 26
Enhancements Release K.12.04 Enhancements For more information, refer to “QoS TCP/UDP Priority” in the Advanced Traffic Management Guide. Release K.12.04 Enhancements Release K.12.04 includes the following enhancement: ■ Enhancement MSTP (PR_1000369492) — Update of MSTP implementation to the latest IEEE P802.1Q-REV/D5.0 specification to stay in compliance with the protocol evolution.
PAGE 27
Enhancements Release K.12.04 Enhancements [ admin-edge-port ] Enables admin-edge-port for RSTP/MSTP. If a bridge or switch is detected on the segment, the port automatically operates as non-edge, not enabled. (Default: No - disabled) If admin-edge-port is disabled on a port and auto-edge-port has not been disabled, the auto-edge-port setting controls the behavior of the port. The no spanning-tree < port-list > admin-edge-port command disables admin-edgeport operation on the specified ports.
PAGE 28
Enhancements Release K.12.04 Enhancements Syntax: spanning-tree < port-list > < hello-time | path-cost | point-to-point-mac | priority > [ hello-time < global | 1 - 10 > When the switch is the CIST root, this parameter specifies the interval (in seconds) between periodic BPDU transmissions by the designated ports. This interval also applies to all ports in all switches downstream from each port in the < port-list >.
PAGE 29
Enhancements Release K.12.05 Enhancements priority < 0..15 > MSTP uses this parameter to determine the port(s) to use for forwarding. The port with the lowest assigned value has the highest priority. While the actual priority range is 0 to 240, this command specifies the priority as a multiplier (0-15) of 16. That is, when you specify a priority multiplier of 0-15, the actual priority assigned to the switch is: (priority-multiplier) x 16 = priority The default priority-multiplier value is 8.
PAGE 30
Enhancements Release K.12.05 Enhancements Note You can use 802.1X (port-based or client-based) authentication and either Web or MAC authentication at the same time on a port, with a maximum of 32 clients allowed on the port. (The default is one client.) Web authentication and MAC authentication are mutually exclusive on the same port. Also, you must disable LACP on ports configured for any of these authentication methods.
PAGE 31
Enhancements Release K.12.05 Enhancements If the dynamic VLAN does not exist or if you have not enabled the use of a dynamic VLAN for authentication sessions on the switch, the authentication fails. ■ To enable the use of a GVRP-learned (dynamic) VLAN as the untagged VLAN used in an authentication session, enter the aaa port-access gvrp-vlans command, as described in “Enabling the Use of GVRP-Learned Dynamic VLANs in Authentication Sessions” on page 28.
PAGE 32
Enhancements Release K.12.05 Enhancements Therefore, on a port where one or more authenticated client sessions are already running, all such clients are on the same untagged VLAN. If a RADIUS server subsequently authenticates a new client, but attempts to re-assign the port to a different, untagged VLAN than the one already in use for the previously existing, authenticated client sessions, the connection for the new client will fail. For more on this topic, refer to “802.
PAGE 33
Enhancements Release K.12.05 Enhancements In the show command output, port A2 is temporarily configured as untagged on VLAN 22 for an 802.1X session. This temporary configuration change is necessary to accommodate an 802.1X client’s access, authenticated by a RADIUS server, in which the server included an instruction to assign the client session to VLAN 22. Note: In the current VLAN configuration ( Figure 1), port A2 is only listed as a member of VLAN 22 in show vlan 22 output when an 802.
PAGE 34
Enhancements Release K.12.05 Enhancements When the 802.1X client session on port A2 ends, the port removes the temporary untagged VLAN membership. The static VLAN (VLAN 33) that is “permanently” configured as untagged on the port becomes available again. Therefore, when the RADIUS-authenticated 802.1X session on port A2 ends, VLAN 22 access on port A2 also ends, and the untagged VLAN 33 access on port A2 is restored as shown in Figure 4. When the 802.
PAGE 35
Enhancements Release K.12.05 Enhancements Enabling the Use of GVRP-Learned Dynamic VLANs in Authentication Sessions Syntax: aaa port-access gvrp-vlans Enables the use of dynamic VLANs (learned through GVRP) in the temporary untagged VLAN assigned by a RADIUS server on an authenticated port in an 802.1X, MAC, or Web authentication session. Enter the no form of this command to disable the use of GVRP-learned VLANs in an authentication session.
PAGE 36
Enhancements Release K.12.06 Enhancements Release K.12.06 Enhancements Release K.12.06 includes the following enhancement: ■ Enhancement (PR_1000308332) — Passwords (hashed) can be saved to the configuration file. Saving Security Credentials in a Configuration File In software release K.12.06 and greater, you can store and view the following security settings in the running-config file associated with the current software image by entering the include-credentials command.
PAGE 37
Enhancements Release K.12.06 Enhancements ■ By storing different security settings in different files, you can test different security configurations when you first download a new software version that supports multiple configuration files by changing the configuration file used when you reboot the switch.
PAGE 38
Enhancements Release K.12.06 Enhancements In software release K.12.06 and greater, you cannot view the configured local password settings in plain text.
PAGE 39
Enhancements Release K.12.06 Enhancements ■ The parameter specifies the type of algorithm (if any) used to hash the password. Valid values are plaintext or sha-1. ■ The parameter is the clear ASCII text string or SHA-1 hash of the password. You can enter a manager/operator password in clear ASCII text or hashed format, while the portaccess password must be clear ASCII text only.
PAGE 40
Enhancements Release K.12.06 Enhancements is the hashed authentication password used with the configured authentication method. priv “” is the (optional) hashed privacy password used by a privacy protocol to encrypt SNMPv3 messages between the switch and the station.
PAGE 41
Enhancements Release K.12.06 Enhancements After you enter the complete password port-access command syntax, the password is set. You are not prompted to enter the password a second time. TACACS+ Encryption Key Authentication You can use TACACS+ servers to authenticate users who request access to a switch through Telnet (remote) or console (local) sessions.
PAGE 42
Enhancements Release K.12.06 Enhancements In software release K.12.06 and greater, RADIUS shared secret (encryption) keys can be saved in a configuration file with the following syntax: radius-server key Where: is the encryption key (in clear text) used for secure communication with all or a specific RADIUS server. SSH Client Public-Key Authentication Secure Shell version 2 (SSHv2) is used by ProCurve switches to provide remote access to SSHenabled management stations.
PAGE 43
Enhancements Release K.12.06 Enhancements If the keystring contains double-quotes, it can be quoted with single quotes ('keystring'). The following restrictions for a keystring apply: ■ A keystring cannot contain both single and double quotes. ■ A keystring cannot have extra characters, such as a blank space or a new line. However, to improve readability, you can add a backlash at the end of each line. Note In software release K.12.
PAGE 44
Enhancements Release K.12.06 Enhancements ...
PAGE 45
Enhancements Release K.12.06 Enhancements Enabling the Storage and Display of Security Credentials To enable the security settings described in “Security Settings that Can Be Saved” on page 30 to be included and viewed in the running configuration on the switch, enter the include-credentials command. Syntax: [no] include-credentials Enables the inclusion and display of the currently configured manager and operator usernames and passwords, RADIUS shared secret keys, SNMP and 802.
PAGE 46
Enhancements Release K.12.06 Enhancements Operating Notes Caution ■ When you first enter the include-credentials command to save the additional security credentials to the running configuration, these settings are moved from internal storage on the switch to the running-config file. You are prompted by a warning message to perform a write memory operation to save the security credentials to the startup configuration.
PAGE 47
Enhancements Release K.12.06 Enhancements ■ After you permanently save security configurations to the current startup-config file using the write memory command, you can view and manage security settings with the following commands: • show config: Displays the configuration settings in the current startup-config file.
PAGE 48
Enhancements Release K.12.06 Enhancements ■ ■ 41 If you upgrade ProCurve software on a switch from an earlier software release to software release K.12.06 or greater and then enter the include-credentials command, security passwords are managed as follows: • The manager password (if any) in the earlier software version is copied into the running configuration. The other two configuration files, if configured, will not have a manager password configured.
PAGE 49
Enhancements Release K.12.06 Enhancements Restrictions The following restrictions apply when you enable security credentials to be stored in the running configuration with the include-credentials command: ■ The private keys of an SSH host cannot be stored in the running configuration. Only the public keys used to authenticate SSH clients can be stored. An SSH host’s private key is only stored internally; for example, on the switch or on an SSH client device.
PAGE 50
Enhancements Release K.12.07 Enhancements Note that the password port-access values are configured separately from local operator username and passwords that are configured with the password operator command and used for management access to the switch. For more information about how to use the password portaccess command to configure operator passwords and usernames for 802.1X authentication, refer to the “Configuring Port-Based and Client-Based Access Control (802.
PAGE 51
Enhancements Release K.12.09 Enhancements Release K.12.09 Enhancements No enhancements, software fixes only. Release K.12.10 Enhancements Release K.12.10 includes the following enhancement: ■ Enhancement (PR_1000419653) — The show vlan ports command was enhanced to display each port in the VLAN separately, display the friendly port name (if configured), and display the VLAN mode (tagged/untagged) for each port. See “show vlan ports CLI Command Enhancement” below.
PAGE 52
Enhancements Release K.12.10 Enhancements Voice: Indicates whether a (port-based) VLAN is configured as a voice VLAN. Jumbo: Indicates whether a VLAN is configured for Jumbo packets. For more on jumbos, refer to the chapter titled “Port Traffic Controls” in the Management and Configuration Guide for your switch. Mode: Indicates whether a VLAN is tagged or untagged. The following examples illustrate the displayed output depending on whether the detail option is used.
PAGE 53
Enhancements Release K.12.11 Enhancements Release K.12.11 Enhancements No enhancements, software never released. Release K.12.12 Enhancements No enhancements, software fixes only. Release K.12.13 Enhancements No enhancements, software never released. Release K.12.14 Enhancements No enhancements, software fixes only. Release K.12.15 Enhancements Release K.12.
PAGE 54
Enhancements Send SNMP v2c Informs Informs requests can be sent several times until a response is received from the SNMP manager or the configured retry limits are reached. The request may also timeout. To enable SNMP informs, enter this command: Syntax: [no] snmp-server enable informs Enables or disables the informs option for SNMP. Default: Disabled To configure SNMP informs request options, use the following commands.
PAGE 55
Enhancements Release K.12.16 Enhancements Options for sending switch Event Log messages to a trap receiver. The levels specified with these options apply only to Event Log messages, and not to threshold traps. You can see if informs are enabled or disabled with the show snmp-server command as shown in Figure 9.
PAGE 56
Enhancements RADIUS Server Unavailable ■ Enhancement (PR_1000428213) — This software enhancement adds the ability to configure a secondary authentication method to be used when the RADIUS server is unavailable for the primary port access method. RADIUS Server Unavailable Overview In certain situations, RADIUS servers can become isolated from the network. Users are not able to access the network resources configured with RADIUS access protection and are rejected.
PAGE 57
Enhancements RADIUS Server Unavailable You can configure local, chap-radius or eap-radius as the primary password authentication method for the port-access method. You also need to select none or authorized as a secondary, or backup, method. Syntax: aaa authentication port-access Configures local, chap-radius, or eap-radius as the primary password authentication method for port-access. The default primary authentication is local.
PAGE 58
Enhancements RADIUS Server Unavailable ProCurve(config)# show authentication Status and Counters - Authentication Information Login Attempts : 3 Respect Privilege : Disabled Access Task ----------Console Telnet Port-Access Webui SSH Web-Auth MAC-Auth | | + | | | | | | | Login Primary ---------Local Local Local Local Local ChapRadius ChapRadius Login Secondary ---------None None Authorized None None Authorized Authorized Enable Primary ---------Local Local N/A Local Local N/A N/A Enable Secondary ----
PAGE 59
Enhancements Specifying the MAC Address Format Specifying the MAC Address Format The MAC address format command has been enhanced to allow upper-case letters to be used for the hexadecimal numbers when indicating the MAC address in RADIUS packets for MAC-based authentication.
PAGE 60
Enhancements ARP Age Timer Increase Syntax: [no] ip arp-age <[1...1440] | infinite> Allows the ARP age to be set from 1 to 1440 minutes (24 hours). If the option “infinite” is configured, the internal ARP age timeout is set to 99,999,999 seconds (approximately 3.2 years). An arp-age value of 0 (zero) is stored in the configuration file to indicate that “infinite” has been configured. This value also displays with the show commands and in the menu display (Menu > Switch Configuration > IP Config).
PAGE 61
Enhancements ARP Age Timer Increase ProCurve(config)# show running-config Running configuration: ; J9091A Configuration Editor; Created on release #K.12.XX hostname "8200LP" module 2 type J8702A module 3 type J8702A module 4 type J8702A ip default-gateway 15.255.120.1 ip arp-age 1000 snmp-server community "public" Unrestricted snmp-server host 16.180.1.240 "public" vlan 1 name "DEFAULT_VLAN" untagged B1-B24,C1-C24,D1-D24 ip address 15.255.120.85 255.255.248.0 exit gvrp spanning-tree Figure 13.
PAGE 62
Enhancements Release K.12.19 Enhancements To remove a specific entry in the ARP cache, enter this command: Syntax: [no] arp IP-ADDRESS Allows removal of any dynamic entry in the ARP cache. ■ Enhancement (PR_1000438015) — The banner message of the day (MOTD) size has been increased to support up to 3070 characters. The size of the login banner page increased from 320 to 3070 characters. The default banner displays product registration information; the copyright splash is no longer displayed.
PAGE 63
Enhancements CLI Command for Rate Limiting RL-PACLs use one meter per port and that meter is shared among all PERMIT statements for the RLPACL on that port. The meter is not shared with other ports. For a 24-port interface module, 24 meters potentially can be used. (There are up to 256 meters available per module.) Operating features include: ■ Each port individually enforces the rate limit specified for that port. ■ Only one rate-limiting ACL is allowed per port.
PAGE 64
Enhancements Viewing the RL-PACL Information Note RL-PACLs and other ACL types (normal PACLs, VACLs, RACLs, etc.) operate on packets at the same time. If any ACL indicates the packet should be dropped, the packet is dropped. However, the packet will still count towards RL-PACL meter usage. To turn off the rate limiting enter this command: ProCurve(config)# no interface 4-8 rate-limit ip access-group Figure 2.
PAGE 65
Enhancements Viewing the RL-PACL Information ProCurve(config)# show access-list ports 4-6 Access Lists for Port 4 RateLimit : Group_A Type : None Access Lists for Port 5 RateLimit : Group_A Type : None Access Lists for Port 6 RateLimit : Group_A Type : None Figure 4.
PAGE 66
Enhancements Viewing the RL-PACL Information ProCurve(config)# show qos resources Resource usage in Policy Enforcement Engine | Rules | Rules Used Ports | Available | ACL | QoS | IDM | VT | ICMP | Other | ------+-----------+------+------+------+------+------+-------+ 1-24 | 3019 | 5 | 20 | 0 | 0 | 0 | 0 | 25-48 | 3044 | 0 | 0 | 0 | 0 | 0 | 0 | A | 3044 | 0 | 0 | 0 | 0 | 0 | 0 | | Application | Application | | Port Ranges | Port Ranges Used | Ports | Available* | ACL | IDM | QoS | ------+-------------+-----
PAGE 67
Enhancements Troubleshooting Troubleshooting The following situations may occurring when using RL-PACLs. Problem Resolution You try to apply an RL-PACL to a port, but Hardware resources have been consumed by some combination are informed that there are insufficient of RL-PACLs, other ACLS, other QoS or rate-limiting features or resources. other features on the switch. Enter the commands show accesslist resources or show qos resources to see what features are using resources.
PAGE 68
Enhancements Concurrent TACACS+ and SFTP” Concurrent TACACS+ and SFTP” It is now possible to have SFTP/SCP sessions run concurrently with TACACS+ authentication. Because the initial login must be with a username/password that has manager level privileges, you must configure TACACS+ single sign--on in order for TACACS+ and SFTP/SCP to coexist. To configure TACACS+ single sign-on, user the aaa authentication login privilege-mode command.
PAGE 69
Enhancements “OSPF Passive and Routing Interface Increase” Syntax: [no] ip ospf passive Configures passive OSPF for an Autonomous System. The no option disables the passive option; the interface becomes an active interface. Default: Active : Optionally you can configure an IP address on the VLAN To display the OSPF information, enter the command shown in Figure 6: ProCurve(vlan-1)# show ip ospf interface OSPF Interface Status IP Address ---------10.10.10.1 10.12.13.
PAGE 70
Enhancements Release K.12.23 Enhancements Release K.12.23 Enhancements Release K.12.23 includes the following enhancement: ■ Enhancement (PR_1000449129) — This enhancement allows MAC or Web-based authentication to use PEAP/MS-CHAPv2 protocols in addition to the default setting of CHAP. Web Auth Secure Protocol It is desirable to have an additional method for Web authentication that allows the storage of passwords in a secure manner rather than as plain text.
PAGE 71
Enhancements Release K.12.24 Enhancements ProCurve(config)# show authentication Status and Counters - Authentication Information Login Attempts : 3 Respect Privilege : Disabled Access Task ----------Console Telnet Port-Access Webui SSH Web-Auth MAC-Auth | | + | | | | | | | Login Login Enable Enable Primary Secondary Primary Secondary ------------------- ---------- ---------Local None Local None Local None Local None Local Local None Local None Local None Local None PEAP-MSCHAPv2 ChapRadius Figure 16.
PAGE 72
Software Fixes in Release K.11.12 - K.12.26 Release K.11.12 Software Fixes in Release K.11.12 - K.12.26 Software fixes are listed in chronological order, oldest to newest. Unless otherwise noted, each new release includes the software fixes added in all previous releases. Release K.11.11 was the first production software release for the ProCurve 3500yl, 6200yl, and 5400zl Series switches. Release K.11.69 is the last release of the K.11.xx software.
PAGE 73
Software Fixes in Release K.11.12 - K.12.26 Release K.11.13 ■ Web UI (PR_1000303371) — In the Web User Interface, the QOS Device Priority window scroll bar does not allow sufficient scrolling to view all entries. ■ Web UI (PR_1000311917) — When the last port on the last card is configured in a trunk or mesh, and a user browses to a specific location in the Web user interface, the HTTP web server degrades the switch, causing the Web user interface to hang. Release K.11.
PAGE 74
Software Fixes in Release K.11.12 - K.12.26 Release K.11.16 ■ Menu (PR_1000318531) — When using the Menu interface, the Switch hostname may be displayed incorrectly. Release K.11.16 The following problems were resolved in release K.11.16 (not a general release) ■ 10 GbE module (PR_1000321201) — At a high temperature and with long cables, the Switch 3500yl X2/CX4 10-GbE module (J8694A) may not work properly. Release K.11.17 The following problems were resolved in release K.11.
PAGE 75
Software Fixes in Release K.11.12 - K.12.26 Release K.11.32 ■ Crash (PR_1000323759) — The Switch may crash with a message similar to: TLB Miss: Virtual Addr=0x00000185 IP=0x8027ae04 Task='mLACPCtrl' Task ID=0x81597410 fp:0x00000000 sp:0x815972d0 ra:0x8027aa90 sr:0x1000fc01. ■ Crash (PR_1000324041) — A module may crash due to ACL Parity Interrupt with a message similar to 'ACL Int stats=0x1000000 28=0x80000b2'.
PAGE 76
Software Fixes in Release K.11.12 - K.12.26 Release K.11.32 ■ Event Log (PR_1000310958) — Unsupported modules do not produce an event log message in the Switch. ■ Fault LED (PR_1000314005) — Upon a fan fault, the fault LED does not indicate an error. ■ Flash Memory (PR_1000320941) — An incorrect error message is displayed when the Switch experiences a Flash memory failure. ■ Flow Control (PR_1000333879) — Flow Control not functioning properly.
PAGE 77
Software Fixes in Release K.11.12 - K.12.26 Release K.11.33 ■ Power Supply (PR_1000310159) — After power supply failovers, the Switch incorrectly reports power being available on ports that are actually powered down. ■ QoS/Rate Limiting (PR_1000319946) — QoS/Rate limiting may stop working or impact unwanted traffic streams. ■ QOS (PR_1000325028) — Switch may crash after configuring QOS device-priority. ■ SNMPv3 (PR_1000325021) — SNMPv3 lines may mistakenly be removed from the configuration file.
PAGE 78
Software Fixes in Release K.11.12 - K.12.26 Release K.11.34 Release K.11.34 The following problems were resolved in release K.11.34 (not a general release) ■ CLI (PR_1000323423) — Entering an incorrect password three times for either the operator or manager levels causes the CLI to display erroneous characters. ■ CLI (PR_1000322029) — The command "show vlans" does not display data correctly in the status field. ■ IDM (PR_1000334365) — Using EAP/802.1x with IDM ACLs can result in memory leaks.
PAGE 79
Software Fixes in Release K.11.12 - K.12.26 Release K.11.36 ■ Show tech (PR_1000294072) — Show Tech statistics displays incorrect port names for fixed ports. Release K.11.36 The following problems were resolved in release K.11.36 (never released) ■ 10-GbE (PR_1000346107) — The guaranteed minimum bandwidth feature is not working on 10-GbE ports. Release K.11.37 The following problems were resolved in release K.11.
PAGE 80
Software Fixes in Release K.11.12 - K.12.26 Release K.11.40 Release K.11.40 The following problems were resolved in release K.11.40 (not a general release) ■ CLI (PR_1000353548) — Use of the command show span incorrectly displays an error, "STP version was changed. To activate the change you must save the configuration to flash and reboot the device." ■ Crash (PR_1000352922) — The switch may crash with a message similar to mstp_ptx_sm.
PAGE 81
Software Fixes in Release K.11.12 - K.12.26 Release K.11.44 ■ Crash (PR_1000307842) — When deleting/removing CLI ACLs, IDM ACLs, management VLAN, or virus throttle lockouts, switch crashes with error similar to: "Delete virtual meter with nonzero rule RefCount" . ■ Crash (PR_1000334982) — When web authentication is used with open VLANs, a software exception may occur, with the switch reporting something similar to this. Software exception at wma_vlan_sm.
PAGE 82
Software Fixes in Release K.11.12 - K.12.26 Release K.11.47 Release K.11.47 The following problems were resolved in release K.11.47 (not a general release) ■ Management VLAN (PR_1000299387) — The management VLAN does not allow connectivity from valid addresses. ■ SNMP (PR_1000358129) — The command line interface (CLI) becomes unresponsive after running RMON traps code. Release K.11.48 The following problems were resolved in release K.11.
PAGE 83
Software Fixes in Release K.11.12 - K.12.26 Release K.11.61 ■ sFlow (PR_1000361604) — Changed the maximum sFlow skipcount to 24 bits. Release K.11.61 Versions K.11.50 through K.11.59 were never built. Version K.11.60 was never released. The following problems were resolved in release K.11.61 (not a general release) ■ 802.1X (PR_1000367404) — Increased the maximum number of 802.1X users per port to 32.
PAGE 84
Software Fixes in Release K.11.12 - K.12.26 Release K.11.63 Release K.11.63 The following problems were resolved in release K.11.63 ■ 802.1p QoS (PR_1000368188) — 802.1p prioritization may not work once a trunk is enabled on a module, unless the user issues the commands "qos type-of service ipprecedence" or "qos type-of service diff-services". ■ Crash (PR_1000368540) — The switch may crash with a message similar to: Software exception at parser.
PAGE 85
Software Fixes in Release K.11.12 - K.12.26 Version K.11.65 Version K.11.65 The following problems were resolved in release K.11.65 (not a general release) ■ Alarms/Log (PR_1000371908) — The ambient temperature measured by the 5406zl chassis is 4 degrees C too high, causing the generation of false high temperature alarms. ■ CLI (PR_1000377318) — The output from the CLI command, 'show dhcp-relay' is truncated.
PAGE 86
Software Fixes in Release K.11.12 - K.12.26 Version K.11.67 ■ Web/RADIUS (PR_1000368520) — Web Authentication doesn't authenticate clients due to a failure to send RADIUS requests to the configured server. ■ WebUI (PR_1000371598) — Unable to Access Stack Members through Commander WebUI. Use of the WebUI "stack access" drop-down list on the stacking commander returns a "Page not found" error. Version K.11.67 The following problems were resolved in release K.11.
PAGE 87
Software Fixes in Release K.11.12 - K.12.26 Version K.11.69 Version K.11.69 The following problems were resolved in release K.11.69 ■ Routing (PR_1000392086) — The switch learns a bogus MAC address when the next hop address is unknown, causing the switch to stop forwarding traffic. Release K.11.69 is the last release of the K.11.xx software. The 3500yl, 6200yl, and 5400zl switch series software code was rolled to the K.12.0x code branch with no intervening releases. Version K.12.
PAGE 88
Software Fixes in Release K.11.12 - K.12.26 Version K.12.02 ■ Enhancement (PR_1000298920) — A ping request issued to a VLAN which is down will now return a more specific message; instead of "request timed out", the message "The destination address is unreachable" will be displayed. ■ Enhancement (PR_1000373226) — Support was added for the ProCurve 100-FX SFP-LC Transceiver (J9054B).
PAGE 89
Software Fixes in Release K.11.12 - K.12.26 Version K.12.03 ■ Crash (PR_1000392863) — Switch may crash when setmib tcpConnState is used, with a message similar to: NMI event SW:IP=0x0079f4a0 MSR:0x00029210 LR:0x006dca60 Task='eTelnetd' Task ID=0x8a7cbb0 cr: 0x20000042 sp:0x08a7c870 ■ Daylight savings (PR_1000364740) — Due to the passage of the Energy Policy Act of 2005, Pub. L. no.
PAGE 90
Software Fixes in Release K.11.12 - K.12.26 Version K.12.04 ■ Enhancement (PR_1000398393) — For the interface speed-duplex command, added the auto-10-100 configuration option to constrain a link to 10/100 Mbps speed and allow a more rapid linkup process when 1000 Mbps operation is not possible. ■ Enhancement (PR_1000404544) — Provides TCP/UDP port range prioritization in the qos command; the range option assigns an 802.
PAGE 91
Software Fixes in Release K.11.12 - K.12.26 Version K.12.05 Version K.12.05 The following problems were resolved in release K.12.05. ■ BootROM (PR_1000402707) — BootROM does not update to latest version when updating code to primary flash. ■ CLI (PR_1000309998) — Management module is incorrectly displayed as J8627A rather than the correct J8726A product number in response to the show modules command. ■ Enhancement (PR_1000408960) — RADIUS-Assigned GVRP VLANs enhancement.
PAGE 92
Software Fixes in Release K.11.12 - K.12.26 Version K.12.08 Version K.12.08 Software never released. ■ Enhancement (PR_1000413764) — Increase the size of the sysLocation and sysContact entries from 48 to 255 characters. For more information, see “Release K.12.08 Enhancements” on page 43. Version K.12.09 The following problem was resolved in release K.12.09 (Not a general release).
PAGE 93
Software Fixes in Release K.11.12 - K.12.26 Version K.12.11 ■ SNMP (PR_1000374893) — When retrieving the switch serial number via SNMP, the management module serial number is returned instead of the chassis serial number. ■ SNMP (PR_1000422129) — HP Fault Finder doesn't send the interface index with the SNMP trap, even though it is listed in the system log. Version K.12.11 Software never released. Version K.12.12 The following problems were resolved in release K.12.12 (Not a general release).
PAGE 94
Software Fixes in Release K.11.12 - K.12.26 Version K.12.15 ■ Hotswap (PR_1000422714) — Hotswapping a module may result in a false module self-test failure.
PAGE 95
Software Fixes in Release K.11.12 - K.12.26 Version K.12.16 ■ Rate-Limiting (PR_1000420720) — Rate limiting is broken beyond 9.5 Mbps. For any rate limit set to more than 9.5 Mbps, the actual rate drops to 1 Mbps. Version K.12.16 The following problems were resolved in release K.12.16.
PAGE 96
Software Fixes in Release K.11.12 - K.12.26 Version K.12.19 ■ CLI (PR_1000419379) — The “interface” command does not exist in the VLAN context, resulting in an inability to shift to the interface configuration context directly from the VLAN context. ■ Hang (PR_1000434809) — The switch may hang, causing all the port LEDs to remain lit, and stop transmitting traffic.
PAGE 97
Software Fixes in Release K.11.12 - K.12.26 Version K.12.20 Version K.12.20 The following problems were resolved in release K.12.20 (never released). Version K.12.21 The following problems were resolved in release K.12.21 (never released). ■ ARP Protection (PR_1000438129) — ARP and ARP protection data may not display correctly following a CLI or SNMP status query. ■ Enhancement (PR_1000440049) — Classifier-Based Rate Limiting capability was added.
PAGE 98
Software Fixes in Release K.11.12 - K.12.26 Version K.12.22 ■ RADIUS (PR_1000442879) — If RADIUS (or TACACS+) keys are configured, and then the switch is updated to a software revision with the ability to save the security credentials in the configuration file (K.12.06 or later), the RADIUS keys are no longer shown in output from the "show run” or “show config" commands until the "include-credentials" command is issued. Version K.12.22 The following problems were resolved in release K.12.22.
PAGE 99
Software Fixes in Release K.11.12 - K.12.26 Version K.12.24 ■ Multicast (PR_1000436118) — Multicast forwarding with IGMP is slow and causes an unacceptable delay in servicing. ■ Enhancement (PR_1000449129) — This enhancement allows MAC or Web-based authentication to use PEAP/MS-CHAPv2 protocols in addition to the default setting of CHAP. ■ Crash (PR_1000444112) — Downloading a configuration file to the switch may cause a crash with a message similar to: Software exception at cli_config_action.
PAGE 100
© 2006 - 2007 Hewlett-Packard Development Company, LP. The information contained herein is subject to change without notice.