HP FlexFabric 5930 Series User manual

HP FlexFabric 5930 Switch Series
Configuration Guides Index
Part number: 5998-7760a
Software version: Release 241x
Document version: 6W102-20151210

Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.

1
Index
This index covers all configuration guides for the HP FlexFabric 5930 Switch Series product set. Use the table to
match the code to the appropriate guide. Page numbers in the index are preceded by a matching code. For
example, FM-12 indicates page 12 in the fundamentals configuration guide.
Confi
g
uration
g
uide Code
HP FlexFabric 5930 Switch Series ACL and QoS Configuration Guide-Release 241x
QACL
HP FlexFabric 5930 Switch Series EVB Configuration Guide-Release 241x EVB
HP FlexFabric 5930 Switch Series FC and FCoE Configuration Guide-Release 241x
FC&FCoE
HP FlexFabric 5930 Switch Series Fundamentals Configuration Guide-Release 241x
FM
HP FlexFabric 5930 Switch Series High Availability Configuration Guide-Release
241x HA
HP FlexFabric 5930 Switch Series IP Multicast Configuration Guide-Release 241x MCAST
HP FlexFabric 5930 Switch Series IRF Configuration Guide-Release 241x IRF
HP FlexFabric 5930 Switch Series Layer 2 - LAN Switching Configuration
Guide-Release 241x LSW
HP FlexFabric 5930 Switch Series Layer 3 - IP Routing Configuration Guide-Release
241x IPR
HP FlexFabric 5930 Switch Series Layer 3 - IP Services Configuration Guide-Release
241x IPSER
HP FlexFabric 5930 Switch Series MPLS Configuration Guide-Release 241x MPLS
HP FlexFabric 5930 Switch Series Network Management and Monitoring
Configuration Guide-Release 241x NM
HP FlexFabric 5930 Switch Series OpenFlow Configuration Guide-Release 241x OF
HP FlexFabric 5930 Switch Series Security Configuration Guide-Release 241x SEC
HP FlexFabric 5930 Switch Series SPB Configuration Guide-Release 241x SPB
HP FlexFabric 5930 Switch Series TRILL Configuration Guide-Release 241x TRILL
HP FlexFabric 5930 Switch Series VXLAN Configuration Guide-Release 241x VXLAN
?
? (CLI online help access), FM-2
1
1:1 V L A N m a p p i n g
application scenario, LSW-235
configuration, LSW-241, LSW-248
implementation, LSW-237, LSW-238
1: 2 V L A N m a p p i n g
application scenario, LSW-237
configuration, LSW-246, LSW-253
implementation, LSW-237, LSW-239
1:N process redundancy, HA-220
10 -GE interface
combine, LSW-2
1-way DM
CFD 1-way DM configuration, HA-25

2
2
2:2 VLAN mapping
application scenario, LSW-237
configuration, LSW-247, LSW-253
implementation, LSW-237, LSW-239
2-way DM
CFD 2-way DM configuration, HA-25
3
3DES
IPsec encryption algorithm, SEC-276
4
40-GE interface
split, LSW-2
4-byte
IPv4 BGP AS number suppression, IPR-250
IPv6 BGP AS number suppression, IPR-250
6
6PE
IP routing BGP 6PE, IPR-272
IP routing BGP 6PE basics, IPR-272
IP routing BGP 6PE optional capabilities,
IPR-273
IPv6 BGP 6PE, IPR-317
6to4
relay, IPSER-217
tunnel, IPSER-217
tunnel configuration, IPSER-226, IPSER-227
8
802
802.1ah PBB configuration, LSW-256
802.1Q-in-802.1Q. Use QinQ
IGMP snooping message 802.1p priority,
MCAST-27
MLD snooping 802.1p message priority,
MCAST-245
QinQ SVLAN tag 802.1p priority, LSW-229
QoS packet 802.1p priority, QACL-91
SPBM data packet, SPB-4
SPBM ISIS-SPB hello packet, SPB-3
SPBM ISIS-SPB LSP, SPB-4
SPBM ISIS-SPB SNP, SPB-4
SPBM overview, SPB-1
VLAN group configuration, LSW-158
802.1p
priority marking configuration, QACL-69
QCN CND, QACL-104
QCN CND priority mapping, QACL-104
802.1p priority
drop precedence, QACL-68
802.1X
access control method, SEC-87
ACL assignment, SEC-83, SEC-102
architecture, SEC-67
authentication, SEC-71
authentication (access device initiated), SEC-70
authentication (client initiated), SEC-70
authentication configuration, SEC-98
authentication initiation, SEC-70
authentication request attempts max number,
SEC-88
authentication timeout timers, SEC-88
authentication trigger, SEC-90
Auth-Fail VLAN, SEC-80, SEC-94
authorization VLAN, SEC-76
authorization VLAN assignment, SEC-100
basic configuration, SEC-98
configuration, SEC-76, SEC-85
controlled/uncontrolled port, SEC-67
critical VLAN, SEC-81, SEC-95
display, SEC-97
EAD assistant, SEC-104
EAD assistant configuration, SEC-96

3
EAD assistant feature, SEC-84
EAP over RADIUS, SEC-69
EAP packet format, SEC-68
EAP relay authentication, SEC-72
EAP relay enable, SEC-86
EAP relay termination, SEC-74
EAP relay/termination authentication, SEC-72
EAP termination enable, SEC-86
EAP-Message attribute, SEC-70
EAPOL packet format, SEC-69
enable, SEC-85
feature cooperation, SEC-83
guest VLAN, SEC-79, SEC-93
guest VLAN assignment, SEC-100
MAC authentication delay, SEC-116
MAC-based access control, SEC-76
maintain, SEC-97
mandatory port authentication domain, SEC-91
online user handshake, SEC-89
online user handshake reply, SEC-90
overview, SEC-67
packet format, SEC-68
periodic online user reauthentication, SEC-92
port authorization state, SEC-86
port authorization status, SEC-67
port security authentication control mode,
SEC-194
port security client
macAddressElseUserLoginSecure, SEC-210
port security client userLoginWithOUI, SEC-207
port security configuration, SEC-193, SEC-196,
SEC-205
port security features, SEC-199
port security intrusion protection, SEC-200
port security MAC address autoLearn, SEC-205
port security MAC move, SEC-203
port security MAC+802.1X authentication,
SEC-196
port security mode, SEC-198
port security NTK, SEC-199
port users max number, SEC-87
port-based access control, SEC-76
quiet timer, SEC-91
RADIUS Message-Authentication attribute,
SEC-70
related protocols, SEC-68
security user profile configuration, SEC-431
supported domain name delimiters, SEC-96
user profile assignment, SEC-84
VLAN manipulation, SEC-76
802.x
802.1 LLDPDU TLV types, LSW-269
802.1p-to-local priority mapping, LSW-289
802.3 LLDPDU TLV types, LSW-269
LAN switching LLDP PFC 802.1p priority,
LSW-290
A
AAA
concurrent login user max, SEC-51
configuration, SEC-1, SEC-18, SEC-52
device implementation, SEC-11
display, SEC-52
displaying local users/user groups, SEC-24
FIPS compliance, SEC-18
HWTACACS accounting server, SEC-37
HWTACACS authentication server, SEC-36
HWTACACS authorization server, SEC-36
HWTACACS display, SEC-42
HWTACACS implementation, SEC-7
HWTACACS maintain, SEC-42
HWTACACS outgoing packet source IP address,
SEC-39
HWTACACS scheme, SEC-35

4
HWTACACS scheme creation, SEC-35
HWTACACS scheme VPN, SEC-38
HWTACACS server SSH user, SEC-52
HWTACACS shared keys, SEC-38
HWTACACS timers, SEC-40
HWTACACS traffic statistics units, SEC-39
HWTACACS username format, SEC-39
HWTACACS/RADIUS differences, SEC-7
ISP domain accounting method, SEC-49
ISP domain attribute configuration, SEC-46
ISP domain authentication method, SEC-47
ISP domain authorization method, SEC-48
ISP domain creation, SEC-46
ISP domain method, SEC-45
LDAP administrator attribute, SEC-43
LDAP authentication server, SEC-45
LDAP display, SEC-45
LDAP implementation, SEC-9
LDAP scheme, SEC-42
LDAP scheme creation, SEC-45
LDAP server creation, SEC-42
LDAP server IP address, SEC-43
LDAP server SSH user authentication, SEC-59
LDAP user attribute, SEC-44
LDAP versions, SEC-43
local user attribute, SEC-20
local user configuration, SEC-19
methods, SEC-12
MPLS L3VPN implementation, SEC-13
NAS-ID profile configuration, SEC-51
protocols and standards, SEC-14
RADIUS accounting server parameters, SEC-26
RADIUS accounting-on configuration, SEC-33
RADIUS attributes, SEC-14
RADIUS authentication server, SEC-26
RADIUS display, SEC-35
RADIUS implementation, SEC-2
RADIUS maintain, SEC-35
RADIUS request transmission attempts max,
SEC-29
RADIUS scheme, SEC-24
RADIUS scheme creation, SEC-25
RADIUS scheme VPN, SEC-28
RADIUS security policy server IP address,
SEC-33
RADIUS server SSH user
authentication+authorization, SEC-55
RADIUS server status, SEC-29
RADIUS session-control, SEC-51
RADIUS shared keys, SEC-27
RADIUS SNMP notification, SEC-34
RADIUS timers, SEC-32
RADIUS traffic statistics units, SEC-28
RADIUS username format, SEC-28
RBAC AAA authorization, FM-50
RBAC default user role, FM-56
RBAC local AAA authentication user
configuration, FM-61
RBAC non-AAA authorization, FM-50
RBAC user role local AAA authentication,
FM-57
RBAC user role non-AAA authentication, FM-57
RBAC user role remote AAA authentication,
FM-56
scheme configuration, SEC-19
SSH user local authentication+HWTACACS
authorization+RADIUS accounting, SEC-54
troubleshoot HWTACACS, SEC-65
troubleshoot LDAP user authentication fails,
SEC-65
troubleshoot RADIUS, SEC-64
troubleshoot RADIUS accounting error, SEC-65

5
troubleshoot RADIUS authentication failure,
SEC-64
troubleshoot RADIUS packet delivery failure,
SEC-64
user group attribute, SEC-23
user management by ISP domains, SEC-11
user management by user access types, SEC-11
abbreviating command, FM-5
aborting
ISSU software activate/deactivate operation
(install series commands), FM-128
ABR
OSPF discard route configuration, IPR-80
OSPF route summarization (ABR), IPR-79
OSPF router type, IPR-68
OSPFv3 route summarization (ABR), IPR-377
absolute time range (ACL), QACL-93
AC
MPLS L2VPN AC configuration, MPLS-334
MPLS L2VPN attachment circuit (AC), MPLS-328
MPLS L2VPN cross-connect+AC binding,
MPLS-340
VPLS architecture, MPLS-377
VPLS configuration, MPLS-384
VPLS VSI+AC binding, MPLS-390
access
TRILL access port link, TRILL-9
access control
NMM NTP access control rights configuration,
NM-19
NMM NTP peer ACL, NM-12
NMM NTP query ACL, NM-12
NMM NTP security, NM-12
NMM NTP server ACL, NM-12
NMM NTP synchronization ACL, NM-12
NMM SNMP MIB, NM-94
NMM SNMP MIB role-based, NM-96
NMM SNMP MIB view-based, NM-96
security portal authentication, SEC-133
security portal authentication configuration,
SEC-127, SEC-152
security portal authentication cross-subnet,
SEC-164
security portal authentication direct, SEC-152
security portal authentication direct local portal
Web server, SEC-187
security portal authentication extended
cross-subnet, SEC-174
security portal authentication extended direct,
SEC-167
security portal authentication extended re-DHCP,
SEC-170
security portal authentication re-DHCP, SEC-160
security portal authentication server
detection+user synchronization, SEC-177
accessing
access VSAN, FC&FCoE-38
access VSAN configuration, FC&FCoE-43
access VSAN mode negotiation, FC&FCoE-40
CLI online help, FM-2
FC zone access control, FC&FCoE-109
H-VPLS access mode, MPLS-380
H-VPLS Ethernet access mode, MPLS-380
IRF fabric, IRF-21
login management SNMP device access,
FM-38
port-based VLAN assignment (access port),
LSW-147
RBAC VPN instance access policy, FM-49
security portal authentication device access,
SEC-128
VSAN access port interface, FC&FCoE-43
VSAN access port interfaces in bulk,
FC&FCoE-43
account idle time (password control), SEC-218
accounting

6
AAA configuration, SEC-1, SEC-18, SEC-52
AAA ISP domain accounting method, SEC-49
AAA RADIUS accounting-on, SEC-33
AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, SEC-54
login management command accounting,
FM-45, FM-46
login management user access control, FM-39
ACL
802.1X ACL assignment, SEC-83, SEC-102
advanced configuration, QACL-6
automatic rule numbering, QACL-3
automatic rule renumbering, QACL-3
basics configuration, QACL-4
categories, QACL-1
configuration, QACL-1, QACL-4, QACL-13
copying, QACL-10
display, QACL-12
Ethernet frame header configuration, QACL-8
IGMP snooping policy, MCAST-28
IPsec ACL, SEC-279
IPsec ACL de-encapsulated packet check,
SEC-288
IPsec ACL rule keywords, SEC-279
IPsec ACL-based implementation, SEC-277,
SEC-278
IPsec ACL-based tunnel establishment, SEC-278
IPsec mirror image ACLs, SEC-280
IPsec non-mirror image ACLs, SEC-280
IPv4 advanced configuration, QACL-6
IPv4 basic configuration, QACL-4
IPv6 advanced configuration, QACL-7
IPv6 basic configuration, QACL-5
LAN switching LLDP APP parameter, LSW-287
login management command authorization,
FM-42, FM-43
login management SNMP access control,
FM-40, FM-41
login management SSH login control, FM-39
login management Telnet login control, FM-39,
FM-40
login management user access control, FM-39
MAC authentication ACL assignment, SEC-111,
SEC-124
maintain, QACL-12
match order, QACL-2
MLD snooping policy, MCAST-246
naming, QACL-2
NMM NTP peer ACL, NM-12
NMM NTP query ACL, NM-12
NMM NTP server ACL, NM-12
NMM NTP synchronization ACL, NM-12
numbering, QACL-2
packet filtering applicable scope (VLAN
interface), QACL-11
packet filtering application (interface), QACL-11
packet filtering configuration, QACL-10
packet filtering default action, QACL-12
packet filtering log interval, QACL-12
packet fragment filtering, QACL-3
routing policy, IPR-442
rule numbering, QACL-3
rule numbering step, QACL-3
SSH management parameters, SEC-333
switch applications, QACL-1
time range configuration, QACL-93
time range display, QACL-93
user-defined configuration, QACL-9
ACS
attribute type, NM-239
attribute type (default)(CLI), NM-240
attribute type (preferred), NM-239
authentication parameters, NM-241

7
autoconnect parameters, NM-242
connection interface, NM-242
HTTPS SSL client policy, NM-244
provision code, NM-241
action
loop detection block, LSW-135
loop detection no-learning protection, LSW-135
loop detection shutdown protection, LSW-135
OpenFlow action list/action set merge
restrictions, OF-20
PBR node, IPR-336
activating
EVB VSI aggregate filter, EVB-10
EVB VSI filter, EVB-10
FC zone set, FC&FCoE-115
ISSU activate operation (install series
commands), FM-128
OpenFlow instance, OF-13
activating RRPP domain, HA-64
active
ARP active acknowledgement, SEC-391
FC zone database active zone set,
FC&FCoE-101
FTP active (PORT) operating mode, FM-75
security portal authentication type, SEC-127
active virtual forwarder. Use AVF
adding
MAC address table blackhole entry, LSW-27
MAC address table multiport unicast entry,
LSW-27
address
DHCP address assignment, IPSER-34
DHCP address pool, IPSER-34
DHCP address pool application on interface,
IPSER-46
DHCP address pool selection, IPSER-35
DHCP allocation, IPSER-27
DHCP BOOTP client address acquisition,
IPSER-85
DHCP client duplicated address detection,
IPSER-69
DHCP IP address allocation sequence, IPSER-36
DHCP IP address conflict detection, IPSER-47
DHCP IP address lease extension, IPSER-28
DHCP server address pool, IPSER-37
DHCP server address pool creation, IPSER-37
DHCP server address pool IP address range,
IPSER-37
DHCPv6 address allocation, IPSER-179
DHCPv6 address pool, IPSER-179
DHCPv6 address pool selection, IPSER-179
DHCPv6 address/prefix assignment, IPSER-174
DHCPv6 address/prefix lease renewal,
IPSER-175
DHCPv6 client IPv6 address acquisition,
IPSER-197
DHCPv6 IA, IPSER-178
DHCPv6 IAID, IPSER-178
DHCPv6 IPv6 address assignment, IPSER-177
DHCPv6 IPv6 address/prefix allocation
sequence, IPSER-180
DHCPv6 multicast, IPSER-178
DHCPv6 overview, IPSER-174
DHCPv6 server dynamic IPv6 address
assignment, IPSER-189
DHCPv6 server IPv6 address assignment,
IPSER-182
fabric FC address assignment, FC&FCoE-53
fabric N_Port-WWN to FC address binding,
FC&FCoE-57
FC (FCoE), FC&FCoE-3
FC direct routes, FC&FCoE-73
FC FSPF configuration, FC&FCoE-76
FC FSPF routes, FC&FCoE-74
FC static route configuration, FC&FCoE-75

8
FC static routes, FC&FCoE-74
FCoE fabric address assignment, FC&FCoE-233
FCoE well-known fabric addresses,
FC&FCoE-233
IP address classes, IPSER-21
IP addressing configuration, IPSER-21, IPSER-25
IP addressing interface address, IPSER-23
IP multicast, MCAST-6
IP multicast MD-VPN default group address,
MCAST-198
IP routing IS-IS area, IPR-134
IP routing IS-IS format, IPR-133
IP routing IS-IS NSAP format, IPR-133
IP routing IS-IS PPP interface hello packet source
address check, IPR-150
IP routing IS-IS routing method, IPR-134
IP routing MP-BGP address family, IPR-202
IPPO ICMP packet source address, IPSER-137
IPv6 addresses, IPSER-145
IPv6 ICMPv6 packet source address, IPSER-167
MAC address learning disable, LSW-28
MAC address move notification, LSW-33
MAC address table address synchronization,
LSW-32
MAC address table learning priority, LSW-31
MAC Information queue length, LSW-40
MLD snooping query source IPv6 address,
MCAST-244
ping address reachability determination, NM-1
SNMP notification for MAC address table,
LSW-36
SPBM multicast address, SPB-8
special IP addresses, IPSER-22
stateless DHCPv6, IPSER-176
static source check disable, LSW-35
u R P F c o n f i g u ra t i o n , S EC - 414 , S EC - 417, S EC - 418
VPLS MAC address aging, MPLS-379
VPLS MAC address learning, MPLS-379,
MPLS-393
VPLS MAC address withdrawal, MPLS-379
Address Resolution Protocol. Use ARP, Use ARP
adjacency
MPLS TE traffic forwarding automatic route
advertisement (forwarding adjacency),
MPLS-56
MPLS TE tunnel automatic route advertisement
traffic direction (forwarding adjacency),
MPLS-78
OSPF BDR, IPR-70
OSPF DR, IPR-70
OSPFv3 BFD configuration, IPR-413
OSPFv3 configuration, IPR-371, IPR-372, IPR-394
OSPFv3 DR election configuration, IPR-401
OSPFv3 GR configuration, IPR-411
OSPFv3 IPsec profile configuration, IPR-415
OSPFv3 NSSA area configuration, IPR-398
OSPFv3 route redistribution, IPR-404
OSPFv3 stub area configuration, IPR-394
SPBM hello multiplier for calculating adjacency
hold time, SPB-25
SPBM IS-IS SPB adjacency authentication,
SPB-30
SPBM ISIS-SPB adjacency change output,
SPB-29
SPBM ISIS-SPB adjacency maintenance, SPB-24
adjusting
ARP/ND table capacity, FM-143, FM-148,
FM-163
IGMP performance adjustment, MCAST-85
MAC address table capacity, FM-143, FM-148
MLD performance, MCAST-295
routing table capacity, FM-143, FM-148, FM-163
administrative scoping
IPv6 BIDIR-PIM domains, MCAST-317
IPv6 PIM-SM admin-scoped zone configuration,
MCAST-349