HP 6125XLG User manual

HP 6125XLG Blade Switch
Layer 3 - IP Services
Configuration Guide
Part number: 5998-5371a
Software version: Release 240x
Document version: 6W101-20150515

Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.

i
Contents
Configuring ARP··························································································································································· 1
Overview············································································································································································1
ARP message format ················································································································································1
ARP operating mechanism ······································································································································1
ARP table···································································································································································2
Configuring a static ARP entry·········································································································································3
Configuring a multiport ARP entry···································································································································4
Setting the maximum number of dynamic ARP entries for a device ············································································5
Setting the maximum number of dynamic ARP entries for an interface ······································································5
Setting the aging timer for dynamic ARP entries ···········································································································6
Enabling dynamic ARP entry check ································································································································6
Enabling ARP logging·······················································································································································6
Configuring ARP fast update ···········································································································································7
Displaying and maintaining ARP·····································································································································8
Configuration examples ···················································································································································8
Static ARP configuration example ··························································································································8
Multiport ARP entry configuration example···········································································································9
Configuring gratuitous ARP ·······································································································································12
Overview········································································································································································· 12
Gratuitous ARP packet learning··························································································································· 12
Periodic sending of gratuitous ARP packets ······································································································· 12
Configuration procedure··············································································································································· 13
Enabling IP conflict notification ···································································································································· 13
Configuring proxy ARP··············································································································································15
Enabling common proxy ARP ······································································································································· 15
Enabling local proxy ARP·············································································································································· 15
Displaying proxy ARP···················································································································································· 16
Common proxy ARP configuration example··············································································································· 16
Network requirements··········································································································································· 16
Configuration procedure ······································································································································ 16
Configuring ARP snooping········································································································································18
Configuration procedure··············································································································································· 18
Displaying and maintaining ARP snooping ················································································································ 18
Configuring IP addressing·········································································································································19
Overview········································································································································································· 19
IP address classes·················································································································································· 19
Special IP addresses ············································································································································· 20
Subnetting and masking ······································································································································· 20
Assigning an IP address to an interface ······················································································································ 21
Configuration guidelines ······································································································································ 21
Configuration procedure ······································································································································ 21
Configuring IP unnumbered ·········································································································································· 21
Configuration guidelines ······································································································································ 22
Configuration prerequisites ·································································································································· 22
Configuration procedure ······································································································································ 22
Displaying and maintaining IP addressing ················································································································· 22
IP address configuration example ································································································································ 23

ii
Network requirements··········································································································································· 23
Configuration procedure ······································································································································ 23
Verifying the configuration··································································································································· 24
DHCP overview ··························································································································································25
DHCP address allocation ·············································································································································· 25
Allocation mechanisms ········································································································································· 25
IP address allocation process······························································································································· 26
IP address lease extension···································································································································· 26
DHCP message format··················································································································································· 27
DHCP options ································································································································································· 28
Common DHCP options········································································································································ 28
Custom DHCP options··········································································································································· 28
Protocols and standards ················································································································································ 30
Configuring the DHCP server····································································································································32
Overview········································································································································································· 32
DHCP address pool··············································································································································· 32
IP address allocation sequence···························································································································· 34
DHCP server configuration task list ······························································································································ 34
Configuring an address pool on the DHCP server····································································································· 35
Configuration task list ··········································································································································· 35
Creating a DHCP address pool··························································································································· 35
Specifying IP address ranges for a DHCP address pool ·················································································· 35
Specifying gateways for the client······················································································································· 38
Specifying a domain name suffix for the client·································································································· 39
Specifying DNS servers for the client·················································································································· 39
Specifying WINS servers and NetBIOS node type for the client····································································· 39
Specifying BIMS server information for the client ······························································································ 40
Specifying the TFTP server and boot file name for the client············································································ 40
Specifying a server for the DHCP client·············································································································· 41
Configuring Option 184 parameters for the client···························································································· 41
Customizing DHCP options ·································································································································· 42
Enabling DHCP ······························································································································································ 43
Enabling the DHCP server on an interface·················································································································· 43
Applying an address pool on an interface ················································································································· 44
Configuring IP address conflict detection···················································································································· 44
Enabling handling of Option 82·································································································································· 44
Configuring DHCP server compatibility······················································································································· 45
Configuring the DHCP server to broadcast all responses················································································· 45
Configure the DHCP server to ignore BOOTP requests ···················································································· 45
Configuring the DHCP server to send BOOTP responses in RFC 1048 format·············································· 46
Setting the DSCP value for DHCP packets sent by the DHCP server········································································ 46
Displaying and maintaining the DHCP server ············································································································ 46
DHCP server configuration examples ·························································································································· 47
Static IP address assignment configuration example························································································· 47
Dynamic IP address assignment configuration example··················································································· 49
DHCP user class configuration example············································································································· 50
Primary and secondary subnets configuration example ··················································································· 51
DHCP option customization configuration example·························································································· 52
Troubleshooting DHCP server configuration ··············································································································· 53
Symptom································································································································································· 53
Analysis ·································································································································································· 53
Solution··································································································································································· 54

iii
Configuring the DHCP relay agent···························································································································55
Overview········································································································································································· 55
Operation······························································································································································· 55
DHCP relay agent support for Option 82 ·········································································································· 56
DHCP relay agent configuration task list····················································································································· 56
Enabling DHCP ······························································································································································ 57
Enabling the DHCP relay agent on an interface ········································································································ 57
Specifying DHCP servers on a relay agent················································································································· 57
Configuring the DHCP relay agent security functions ································································································ 58
Enabling the DHCP relay agent to record relay entries ···················································································· 58
Enabling periodic refresh of dynamic relay entries··························································································· 58
Enabling DHCP starvation attack protection ······································································································ 59
Configuring the DHCP relay agent to release an IP address ···················································································· 60
Configuring Option 82 ················································································································································· 60
Setting the DSCP value for DHCP packets sent by the DHCP relay agent······························································· 61
Displaying and maintaining the DHCP relay agent ··································································································· 61
DHCP relay agent configuration examples················································································································· 61
DHCP relay agent configuration example·········································································································· 61
Option 82 configuration example······················································································································· 62
Troubleshooting DHCP relay agent configuration······································································································ 63
Symptom································································································································································· 63
Analysis ·································································································································································· 63
Solution··································································································································································· 63
Configuring the DHCP client ·····································································································································64
Enabling the DHCP client on an interface··················································································································· 64
Configuring a DHCP client ID for an interface ··········································································································· 64
Enabling duplicated address detection ······················································································································· 65
Setting the DSCP value for DHCP packets sent by the DHCP client ········································································· 65
Displaying and maintaining the DHCP client·············································································································· 66
DHCP client configuration example ····························································································································· 66
Network requirements··········································································································································· 66
Configuration procedure ······································································································································ 66
Verifying the configuration··································································································································· 67
Configuring DHCP snooping·····································································································································69
Overview········································································································································································· 69
Application of trusted and untrusted ports·········································································································· 69
DHCP snooping support for Option 82·············································································································· 70
DHCP snooping configuration task list ························································································································ 71
Configuring basic DHCP snooping······························································································································ 71
Configuring Option 82 ················································································································································· 72
Saving DHCP snooping entries ···································································································································· 73
Enabling DHCP starvation attack protection ··············································································································· 74
Enabling DHCP-REQUEST attack protection ··············································································································· 74
Setting the maximum number of DHCP snooping entries ·························································································· 75
Configuring DHCP packet rate limit····························································································································· 75
Displaying and maintaining DHCP snooping ············································································································· 76
DHCP snooping configuration examples····················································································································· 77
Basic DHCP snooping configuration example ··································································································· 77
Option 82 configuration example······················································································································· 77
Configuring the BOOTP client···································································································································79
BOOTP application························································································································································ 79
Obtaining an IP address dynamically ························································································································· 79
Protocols and standards ················································································································································ 79

iv
Configuring an interface to use BOOTP for IP address acquisition·········································································· 80
Displaying and maintaining BOOTP client ················································································································· 80
BOOTP client configuration example ·························································································································· 80
Network requirements··········································································································································· 80
Configuration procedure ······································································································································ 80
Configuring DNS ·······················································································································································81
Overview········································································································································································· 81
Static domain name resolution····························································································································· 81
Dynamic domain name resolution······················································································································· 81
DNS proxy ····························································································································································· 82
DNS spoofing ························································································································································ 83
DNS configuration task list············································································································································ 84
Configuring the IPv4 DNS client ·································································································································· 85
Configuring static domain name resolution········································································································ 85
Configuring dynamic domain name resolution·································································································· 85
Configuring the IPv6 DNS client ·································································································································· 86
Configuring static domain name resolution········································································································ 86
Configuring dynamic domain name resolution·································································································· 87
Configuring the DNS proxy ·········································································································································· 87
Configuring DNS spoofing ··········································································································································· 88
Specifying the source interface for DNS packets ······································································································· 88
Configuring the DNS trusted interface························································································································· 89
Setting the DSCP value for outgoing DNS packets ···································································································· 89
Displaying and maintaining IPv4 DNS························································································································ 90
IPv4 DNS configuration examples ······························································································································· 90
Static domain name resolution configuration example ····················································································· 90
Dynamic domain name resolution configuration example ··············································································· 91
DNS proxy configuration example······················································································································ 93
IPv6 DNS configuration examples ······························································································································· 95
Static domain name resolution configuration example ····················································································· 95
Dynamic domain name resolution configuration example ··············································································· 96
DNS proxy configuration example····················································································································100
Troubleshooting IPv4 DNS configuration ··················································································································101
Symptom·······························································································································································101
Solution·································································································································································101
Troubleshooting IPv6 DNS configuration ··················································································································101
Symptom·······························································································································································101
Solution·································································································································································101
Configuring DDNS·················································································································································· 102
Overview·······································································································································································102
DDNS application ···············································································································································102
DDNS client configuration task list·····························································································································103
Configuring a DDNS policy········································································································································103
Configuration prerequisites ································································································································105
Configuration procedure ····································································································································105
Applying the DDNS policy to an interface················································································································105
Setting the DSCP value for outgoing DDNS packets································································································106
Displaying DDNS·························································································································································106
DDNS configuration examples ···································································································································107
DDNS configuration example with www.3322.org ·······················································································107
DDNS configuration example with PeanutHull server·····················································································108
Basic IP forwarding on the device ························································································································· 110
FIB table ········································································································································································110

v
Displaying FIB table entries·········································································································································110
Configuring load sharing ······································································································································· 112
Overview·······································································································································································112
Configuring load sharing ············································································································································112
Enabling local-first load sharing·································································································································112
Load sharing configuration example ·························································································································113
Network requirements·········································································································································113
Configuration procedure ····································································································································113
Verifying the configuration·································································································································114
Configuring IRDP····················································································································································· 115
Overview·······································································································································································115
IRDP operation·····················································································································································115
Basic concepts ·····················································································································································116
Protocols and standards ·····································································································································116
Configuration procedure·············································································································································116
IRDP configuration example········································································································································117
Network requirements·········································································································································117
Configuration procedure ····································································································································118
Verifying the configuration·································································································································119
Optimizing IP performance ···································································································································· 120
Enabling an interface to receive and forward directed broadcasts destined for the directly connected network
·······················································································································································································120
Configuration procedure ····································································································································120
Configuration example ·······································································································································121
Configuring MTU for an interface ······························································································································121
Configuring TCP MSS for an interface ······················································································································122
Configuring TCP path MTU discovery ·······················································································································122
Enabling TCP SYN Cookie··········································································································································123
Configuring the TCP buffer size··································································································································124
Configuring TCP timers················································································································································124
Enabling sending ICMP error messages····················································································································124
Disabling forwarding ICMP fragments ······················································································································126
Configuring rate limit for ICMP error messages ·······································································································126
Specifying the source address for ICMP packets ·····································································································126
Configuring IP virtual fragment reassembly ··············································································································127
Configuration guidelines ····································································································································127
Configuration procedure ····································································································································127
Displaying and maintaining IP performance optimization ······················································································128
Configuring UDP helper·········································································································································· 129
Overview·······································································································································································129
Configuration guidelines ·············································································································································129
Configuration procedure·············································································································································129
Displaying and maintaining UDP helper ···················································································································130
UDP helper configuration example ····························································································································130
Network requirements·········································································································································130
Configuration procedure ····································································································································130
Verifying the configuration·································································································································131
Configuring basic IPv6 settings······························································································································ 132
Overview·······································································································································································132
IPv6 features·························································································································································132
IPv6 addresses·····················································································································································133
IPv6 ND protocol·················································································································································136

vi
IPv6 path MTU discovery····································································································································138
IPv6 transition technologies·········································································································································138
Dual stack·····························································································································································139
Tunneling······························································································································································139
Protocols and standards ··············································································································································139
IPv6 basics configuration task list·······························································································································139
Assigning IPv6 addresses to interfaces······················································································································140
Configuring an IPv6 global unicast address ····································································································140
Configuring an IPv6 link-local address ·············································································································142
Configuring an IPv6 anycast address ···············································································································143
Configuring IPv6 ND ···················································································································································144
Configuring a static neighbor entry ··················································································································144
Setting the maximum number of dynamic neighbor entries············································································144
Setting the aging timer for ND entries in stale state························································································145
Minimizing link-local ND entries························································································································145
Setting the hop limit ············································································································································145
Configuring parameters for RA messages········································································································146
Configuring the maximum number of attempts to send an NS message for DAD·······································148
Enabling ND proxy ·············································································································································148
Configuring a customer-side port ·······························································································································150
Configuring path MTU discovery ·······························································································································150
Configuring the interface MTU ··························································································································150
Configuring a static path MTU for a specific IPv6 address ············································································151
Configuring the aging time for dynamic path MTUs·······················································································151
Controlling sending ICMPv6 messages ·····················································································································151
Configuring the rate limit for ICMPv6 error messages····················································································152
Enabling replying to multicast echo requests ···································································································152
Enabling sending ICMPv6 destination unreachable messages······································································152
Enabling sending ICMPv6 time exceeded messages······················································································153
Enabling sending ICMPv6 redirect messages ··································································································153
Specifying the source address for ICMPv6 packets ························································································154
Enabling a device to discard IPv6 packets that contain extension headers··························································154
Displaying and maintaining IPv6 basics ···················································································································154
Basic IPv6 configuration example ······························································································································156
Network requirements·········································································································································156
Configuration procedure ····································································································································156
Verifying the configuration·································································································································157
Troubleshooting IPv6 basics configuration················································································································160
Symptom·······························································································································································160
Solution·································································································································································160
DHCPv6 overview··················································································································································· 161
DHCPv6 address/prefix assignment··························································································································161
Rapid assignment involving two messages·······································································································161
Assignment involving four messages·················································································································161
Address/prefix lease renewal ····································································································································162
Stateless DHCPv6·························································································································································163
Protocols and standards ··············································································································································163
Configuring the DHCPv6 server····························································································································· 164
Overview·······································································································································································164
IPv6 address assignment ····································································································································164
IPv6 prefix assignment········································································································································164
Concepts·······························································································································································165
DHCPv6 address pool ········································································································································166

vii
IPv6 address/prefix allocation sequence ·········································································································167
Configuration task list ··················································································································································167
Configuring IPv6 prefix assignment ···························································································································167
Configuration guidelines ····································································································································168
Configuration procedure ····································································································································168
Configuring IPv6 address assignment························································································································169
Configuration guidelines ····································································································································169
Configuration procedure ····································································································································169
Configuring network parameters assignment ···········································································································170
Configuring the DHCPv6 server on an interface ······································································································171
Configuration guidelines ····································································································································171
Configuration procedure ····································································································································171
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 server ·····························································172
Displaying and maintaining the DHCPv6 server ······································································································172
DHCPv6 server configuration examples····················································································································173
Dynamic IPv6 prefix assignment configuration example ················································································173
Dynamic IPv6 address assignment configuration example·············································································175
Configuring the DHCPv6 relay agent···················································································································· 178
Overview·······································································································································································178
Configuration guidelines ·············································································································································179
Configuration procedure·············································································································································179
Displaying and maintaining the DHCPv6 relay agent·····························································································180
DHCPv6 relay agent configuration example ············································································································180
Network requirements·········································································································································180
Configuration procedure ····································································································································180
Verifying the configuration·································································································································181
Configuring the DHCPv6 client······························································································································ 182
Overview·······································································································································································182
DHCPv6 client configuration task list·························································································································182
Configuring IPv6 address acquisition ························································································································182
Configuring IPv6 prefix acquisition····························································································································183
Configuring stateless DHCPv6····································································································································183
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 client·······························································184
Configuring the DHCPv6 client DUID ························································································································184
Displaying and maintaining DHCPv6 client··············································································································185
DHCPv6 client configuration examples ·····················································································································185
IPv6 address acquisition configuration example ·····························································································185
IPv6 prefix acquisition configuration example·································································································187
Stateless DHCPv6 configuration example ········································································································188
Configuring DHCPv6 snooping ····························································································································· 191
Overview·······································································································································································191
Application of trusted and untrusted ports········································································································191
HP implementation of Option 18 and Option 37 ····································································································192
Option 18 for DHCPv6 snooping······················································································································192
DHCPv6 snooping support for Option 37········································································································193
DHCPv6 snooping configuration task list ··················································································································193
Configuring basic DHCPv6 snooping························································································································194
Configuring Option 18 and Option 37 ····················································································································194
Saving DHCPv6 snooping entries ······························································································································195
Setting the maximum number of DHCPv6 snooping entries····················································································196
Enabling DHCPv6-REQUEST check····························································································································196
Configuring DHCPv6 packet rate limit ······················································································································197
Displaying and maintaining DHCPv6 snooping·······································································································197

viii
DHCPv6 snooping configuration example················································································································198
Network requirements·········································································································································198
Configuration procedure ····································································································································198
Verifying the configuration·································································································································199
Configuring tunneling ············································································································································· 200
Overview·······································································································································································200
IPv6 over IPv4 tunneling ·····································································································································200
IPv4 over IPv4 tunneling ·····································································································································202
IPv4 over IPv6 tunneling ·····································································································································203
IPv6 over IPv6 tunneling ·····································································································································204
Protocols and standards ·····································································································································204
Tunneling configuration task list ·································································································································205
Configuring a tunnel interface····································································································································205
Configuring an IPv6 over IPv4 manual tunnel···········································································································206
Configuration example ·······································································································································207
Configuring a 6to4 tunnel···········································································································································209
Configuration example ·······································································································································210
Configuring an ISATAP tunnel ····································································································································212
Configuration example ·······································································································································213
Configuring an IPv4 over IPv4 tunnel ························································································································215
Configuration example ·······································································································································216
Configuring an IPv4 over IPv6 tunnel ························································································································218
Configuration example ·······································································································································219
Configuring an IPv6 over IPv6 tunnel ························································································································221
Configuration example ·······································································································································222
Displaying and maintaining tunneling·······················································································································224
Troubleshooting tunneling ···········································································································································224
Symptom·······························································································································································224
Analysis ································································································································································225
Solution·································································································································································225
Configuring GRE····················································································································································· 226
Overview·······································································································································································226
GRE encapsulation format··································································································································226
GRE tunnel operating principle··························································································································227
Protocols and standards ·····································································································································227
Configuring a GRE over IPv4 tunnel ··························································································································227
Configuring a GRE over IPv6 tunnel ··························································································································229
Displaying and maintaining GRE·······························································································································231
GRE configuration examples ······································································································································232
GRE over IPv4 tunnel configuration example···································································································232
GRE over IPv6 tunnel configuration example···································································································234
Troubleshooting GRE ···················································································································································237
Symptom·······························································································································································237
Analysis ································································································································································237
Solution·································································································································································238
Support and other resources ·································································································································· 239
Contacting HP ······························································································································································239
Subscription service ············································································································································239
Related information······················································································································································239
Documents····························································································································································239
Websites·······························································································································································239
Conventions ··································································································································································240