HPE OfficeConnect 1950 Series User manual
HPE OfficeConnect 1950 Switch Series
User Guide
Part number: 5998-8111
Document version: 6W103-20160825
© Copyright 2015-2016 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are trademarks of the Microsoft group of companies.
Adobe® andAcrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
i
Contents
Overview·········································································································1
Restrictions: Applicable hardware platforms and software versions···············1
Logging in to the Web interface ······································································2
Restrictions and guidelines································································································································2
Web browser requirements························································································································2
Default login settings··································································································································2
Concurrent login users·······························································································································3
Logging in to the Web interface for the first time ·······························································································3
Logging out of the Web interface·······················································································································4
Using the Web interface··················································································5
Types of webpages············································································································································6
Using a feature page··································································································································6
Using a table page·····································································································································6
Using a configuration page ························································································································7
Icons and buttons···············································································································································8
Performing basic tasks·······································································································································9
Saving the configuration·····························································································································9
Displaying or modifying settings of a table entry························································································9
Rebooting the device ·······························································································································10
Feature navigator··························································································11
Dashboard menu ·············································································································································11
Device menu····················································································································································11
Network menu··················································································································································12
Resources menu··············································································································································16
QoS menu························································································································································17
Security menu··················································································································································17
PoE menu ························································································································································18
Log menu·························································································································································18
Device management·····················································································19
Settings····························································································································································19
System time sources································································································································19
Clock synchronization protocols···············································································································19
NTP/SNTP operating modes····················································································································19
NTP/SNTP time source authentication ····································································································20
Administrators··················································································································································20
User account management······················································································································21
Role-based access control·······················································································································21
Password control······································································································································22
HPE OfficeConnect 1950 stacking (IRF) ·········································································································24
Stack member roles·································································································································25
Stack port·················································································································································25
Stack physical interfaces··························································································································25
Stack domain ID·······································································································································25
Stack split and stack merge·····················································································································25
Member priority········································································································································26
Network services features·············································································27
Link aggregation ··············································································································································27
Aggregation group····································································································································27
Link aggregation modes···························································································································28
Storm control····················································································································································31
Port isolation ····················································································································································31
ii
VLAN································································································································································31
Port-based VLANs ···································································································································31
VLAN interface·········································································································································32
Voice VLAN······················································································································································32
OUI addresses·········································································································································32
QoS priority setting mode for voice traffic································································································32
Voice VLAN assignment modes···············································································································33
Security mode and normal mode of voice VLANs····················································································33
MAC·································································································································································33
Types of MAC address entries·················································································································33
Aging timer for dynamic MAC address entries·························································································34
MAC address learning······························································································································34
STP··································································································································································34
Spanning tree modes·······························································································································35
MSTP basic concepts ······························································································································35
Port roles··················································································································································35
Port states················································································································································36
LLDP································································································································································36
LLDP agent··············································································································································36
Transmitting LLDP frames ·······················································································································36
Receiving LLDP frames ···························································································································37
LLDP reinitialization delay························································································································37
LLDP trapping··········································································································································37
LLDP TLVs···············································································································································37
CDP compatibility·····································································································································38
DHCP snooping ···············································································································································38
IP······································································································································································39
IP address classes···································································································································39
Subnetting and masking···························································································································39
IP address configuration methods············································································································40
MTU for an interface ································································································································40
ARP··································································································································································40
Types of ARP table entries ······················································································································40
Gratuitous ARP········································································································································41
ARP attack protection ······························································································································41
DNS ·································································································································································44
Dynamic domain name resolution············································································································44
Static domain name resolution·················································································································45
DNS proxy················································································································································45
DDNS·······················································································································································45
IPv6··································································································································································46
IPv6 address formats·······························································································································46
IPv6 address types···································································································································46
EUI-64 address-based interface identifiers······························································································47
IPv6 global unicast address configuration methods·················································································47
IPv6 link-local address configuration methods·························································································48
ND····································································································································································49
Neighbor entries·······································································································································49
RA messages···········································································································································49
ND proxy··················································································································································51
Port mirroring ···················································································································································52
Static routing····················································································································································52
Policy-based routing ········································································································································52
Policy························································································································································52
PBR and Track·········································································································································53
IGMP snooping ················································································································································53
MLD snooping··················································································································································53
DHCP·······························································································································································53
DHCP server············································································································································53
DHCP relay agent····································································································································55
HTTP/HTTPS···················································································································································56
SSH··································································································································································56
iii
FTP ··································································································································································57
Telnet·······························································································································································57
NTP··································································································································································57
SNMP·······························································································································································57
MIB···························································································································································57
SNMP versions ········································································································································58
SNMP access control·······························································································································58
Resources features·······················································································60
ACL··································································································································································60
ACL types and match criteria···················································································································60
Match order··············································································································································60
Rule numbering········································································································································61
Time range·······················································································································································62
SSL ··································································································································································62
Public key·························································································································································62
Managing local key pairs··························································································································63
Managing peer public keys ······················································································································63
PKI ···································································································································································64
PKI architecture········································································································································64
Managing certificates·······························································································································65
Certificate access control·································································································································66
Certificate access control policies············································································································66
Attribute groups········································································································································66
QoS features·································································································68
QoS policies·····················································································································································68
Traffic class··············································································································································68
Traffic behavior ········································································································································68
QoS policy················································································································································68
Applying a QoS policy······························································································································68
Hardware queuing············································································································································68
SP queuing···············································································································································69
WRR queuing···········································································································································69
WFQ queuing···········································································································································70
Queue scheduling profile ·························································································································71
Priority mapping···············································································································································71
Port priority···············································································································································71
Priority map··············································································································································72
Rate limit··························································································································································72
Security features···························································································73
Packet filter ······················································································································································73
IP source guard················································································································································73
Overview··················································································································································73
Interface-specific static IPv4SG bindings·································································································73
802.1X······························································································································································73
802.1X architecture··································································································································73
802.1X authentication methods················································································································74
Access control methods···························································································································74
Port authorization state····························································································································74
Periodic online user reauthentication·······································································································74
Online user handshake····························································································································75
Authentication trigger·······························································································································75
Auth-Fail VLAN ········································································································································75
Guest VLAN·············································································································································76
Critical VLAN············································································································································76
Mandatory authentication domain············································································································77
EAD assistant···········································································································································77
MAC authentication··········································································································································77
Overview··················································································································································77
MAC authentication configuration on a port·····························································································78
iv
Port security·····················································································································································79
Overview··················································································································································79
Port security settings································································································································80
Port security features·······························································································································82
Secure MAC addresses···························································································································83
Portal································································································································································83
Portal authentication server ·····················································································································84
Portal Web server ····································································································································85
Local portal Web server···························································································································85
Portal-free rules········································································································································88
Interface policy·········································································································································88
ISP domains·····················································································································································89
RADIUS ···························································································································································90
RADIUS protocol······································································································································90
Enhanced RADIUS features ····················································································································90
Log features··································································································92
Log levels·················································································································································92
Log destinations·······································································································································92
Configuration examples················································································93
Device maintenance examples························································································································93
System time configuration example·········································································································93
Administrators configuration example······································································································93
Stack configuration example····················································································································94
NTP configuration example······················································································································96
SNMP configuration example···················································································································97
Network services configuration examples········································································································97
Ethernet link aggregation configuration example·····················································································97
Port isolation configuration example········································································································98
VLAN configuration example····················································································································99
Voice VLAN configuration example········································································································100
MAC address entry configuration example····························································································101
MSTP configuration example·················································································································101
LLDP configuration example··················································································································103
DHCP snooping configuration example·································································································103
Static ARP entry configuration example·································································································104
Static DNS configuration example ·········································································································105
Dynamic DNS configuration example ····································································································106
DDNS configuration example with www.3322.org ·················································································107
Static IPv6 address configuration example····························································································108
ND configuration example······················································································································109
Port mirroring configuration example·····································································································110
IPv4 static route configuration example·································································································111
IPv4 local PBR configuration example···································································································112
IGMP snooping configuration example··································································································112
MLD snooping configuration example····································································································114
DHCP configuration example·················································································································115
Password authentication enabled Stelnet server configuration example···············································117
QoS configuration example····························································································································118
Security configuration examples····················································································································119
ACL-based packet filter configuration example······················································································119
Static IPv4 source guard configuration example····················································································121
802.1X RADIUS authentication configuration example··········································································122
802.1X local authentication configuration example················································································123
RADIUS-based MAC authentication configuration example··································································124
RADIUS-based port security configuration example··············································································126
Direct portal authentication configuration example················································································128
Re-DHCP portal authentication configuration example··········································································130
Cross-subnet portal authentication configuration example····································································132
Direct portal authentication using local portal Web server configuration example·································134
AAA for SSH users by a TACACS server configuration example··························································136
v
PoE configuration example····························································································································137
Network requirements····························································································································137
Configuration procedure·························································································································138
Appendix A Managing the device from the CLI···········································139
display poe pse······································································································································140
initialize ··················································································································································141
ipsetup dhcp···········································································································································142
ipsetup ip address··································································································································142
ipsetup ipv6 address······························································································································143
ipsetup ipv6 auto····································································································································144
password················································································································································145
ping ························································································································································145
ping ipv6·················································································································································146
poe update·············································································································································146
quit ·························································································································································147
reboot·····················································································································································147
summary ················································································································································148
telnet ······················································································································································150
telnet ipv6···············································································································································151
transceiver phony-alarm-disable············································································································151
upgrade··················································································································································152
xtd-cli-mode············································································································································154
Document conventions and icons·······························································156
Conventions···················································································································································156
Network topology icons··································································································································157
Support and other resources ······································································158
Accessing Hewlett Packard Enterprise Support ····························································································158
Accessing updates·········································································································································158
Websites ················································································································································159
Customer self repair·······························································································································159
Remote support······································································································································159
Documentation feedback ·······················································································································159
Index···········································································································161
1
Overview
This user guide provides the following information:
Information Section
How to log in to the Web interface for the first time. Logging in to the Web interface for the first time
How to use the Web interface. Using the Web interface
What features you can configure from the Web
interface.
How to access the page for a feature or task. Feature navigator
How to use features in typical scenarios. Configuration examples
How to manage the device from the CLI. Appendix A Managing the device from the CLI
This user guide does not include step-by-step configuration procedures, because the webpages are
task oriented by design. Aconfiguration page typically provides links to any pages that are required
to complete the task. Users do not have to navigate to multiple pages. For tasks that require
navigation to multiple pages, this user guide provides configuration examples.
This user guide also does not provide detailed information about parameters. You can obtain
sufficient online help, feature information, and parameter information from the webpages.
1
Restrictions: Applicable hardware
platforms and software versions
Product code HPE description Software version
JG960A HPE OfficeConnect 1950 24G 2SFP+ 2XGT Switch
Release 3111P02
Release 3113P05
JG961A HPE OfficeConnect 1950 48G 2SFP+ 2XGT Switch
JG962A HPE OfficeConnect 1950 24G 2SFP+ 2XGT
PoE+(370W) Switch
JG963A HPE OfficeConnect 1950 48G 2SFP+ 2XGT
PoE+(370W) Switch
JH295A HPE OfficeConnect 1950 12XGT 4SFP+ Switch Release 5103P03
2
Logging in to the Web interface
Log in to the Web interface through HTTP or HTTPS.
Restrictions and guidelines
To ensure a successful login, verify that your operating system and Web browser meet the
requirements, and follow the guidelines in this section.
Web browser requirements
As a best practice, use one of the following Web browsers to log in:
•Internet Explorer 8 or higher.
•Google Chrome 10 or higher.
•Mozilla Firefox 4 or higher.
•Opera 11.11 or higher.
•Safari 5.1 or higher.
To access the Web interface, you must use the following browser settings:
•Accept the first-party cookies (cookies from the site you are accessing).
•To ensure correct display of webpage contents after software upgrade or downgrade, clear data
cached by the browser before you log in.
•Enable active scripting or JavaScript, depending on the Web browser.
•If you are using a Microsoft Internet Explorer browser, you must enable the following security
settings:
{Run ActiveX controls and plug-ins.
{Script ActiveX controls marked safe for scripting.
Default login settings
Use the settings in Table 1 for the first login.
Table 1 Default login settings
Item Setting
Device IP (VLAN-interface 1) See "Logging in to the Web interface for the first
time."
IP address mask
Username admin
Password None
User role network-admin
NOTE:
If the network has a DHCP server, you must use the DHCP assigned IP address to access the
device. For more information, see "Logging in to the Web interface for the first time."
3
Concurrent login users
The Web interface allows a maximum of 32 concurrent accesses. If this limit is reached, login
attempts will fail.
Logging in to the Web interface for the first time
IMPORTANT:
As a best practice, change the login information and assign access permissions immediately after
the first successful login for security purposes.
By default, HTTP and HTTPS are enabled.
To log in to the Web interface:
1. Use an Ethernet cable to connect the configuration terminal to an Ethernet port on the device.
2. Identify the IP address and mask of the device.
{If the device is not connected to the network, or no DHCP server exists on the network, the
device uses the default IP address and mask. The default mask is 255.255.0.0. The default
IP address is 169.254.xxx.xxx, where xxx.xxx depends on the last two bytes of the MAC
address. Find the MAC address label on the device and use the followingrules to determine
the last two bytes for the IP address:
Last two bytes of the MAC
address Last two bytes for the IP address
All 0s 0.1
All Fs 255.1
Not all 0s or all Fs Decimal values ofthe last two bytes of the MAC address
For example:
MAC address IP address
08004E080000 169.254.0.1
08004E08FFFF 169.254.255.1
08004E082A3F 169.254.42.63 (The decimal value of 2A is 42. The
value of 3F is 63.)
{If a DHCP server is available, the device obtains an IP address from the server. To identify
the address, log in to the device through the console port, and then execute the summary
command. The following is the sample output:
<Sysname> summary
Select menu option: Summary
IP Method: DHCP
IP address: 10.153.96.86
Subnet mask: 255.255.255.0
Default gateway: 0.0.0.0
For more information about console login, see the getting started guide for the device.
3. Assign the login host an IP address in the same subnet as the device.
4. Open the browser, and then enter login information:
4
a. In the address bar, enter the IP address of the device.
−HTTP access—Enter the address in the http://ip-address:port or ip-address:port
format.
−HTTPS access—Enter the address in the https://ip-address:port format.
The ip-address argument represents the IP address of the device. The port argument
represents the HTTP or HTTPS service port. The default port number is 80 for HTTP and
443 for HTTPS. You do not need to enter the port number if you have not changed the
service port setting.
b. On the login page, enter the default username (admin) and the verification code.
You do not need to enter a password at the first login.
c. Click Login.
5. Change the login information:
{To change the password of the login user (admin at the first login), click the Admin icon
.
{To add new user accounts and assign access permissions to different users, select Device >
Maintenance > Administrators.
Logging out of the Web interface
IMPORTANT:
•For security purposes, log out of the Web interface immediately after you finish your tasks.
•You cannot log out by closing the browser.
•The device does not automatically save the configuration when you log out of the Web interface.
To prevent the loss of configuration when the device reboots, you must save the configuration.
1. Use one of the following methods to save the current configuration.
{Click the Save icon in the left corner.
{Select Device > Maintenance > Configuration to access the configuration management
page.
2. Click Logout in the upper-left corner of the Web interface.
5
Using the Web interface
The Web interface contains the following areas:
Area Description
(1) Banner and auxiliary area
Contains the following items:
•Basic information, including the Hewlett Packard Enterprise logo,
device name, and information about the current login user.
•Basic management icons:
{Admin icon —Click this icon to change the login
password.
{Logout icon —Click this icon to log out.
{Save icon —Click this icon to save the configuration.
(2) Navigation tree Organizes feature menus in a tree.
(3) Content pane
Displays information and provides an area for you to configure features.
Depending on the content in this pane, the webpages include the following
types:
•Feature page—Contains functions or features that a feature module
can provide (see "Using a feature page").
•Table page—Displays entries in a table (see "Using a table page").
•Configuration page—Contains parameters for you to configure a
feature or function (see "Using a configuration page").
Figure 1 Web interface layout
1) Banner and auxiliary area 2) Navigation tree 3) Content pane
(1)
(2)
(3)
6
Types of webpages
Webpages include feature, table, and configuration pages. This section provides basic information
about these pages. For more information about using the icons and buttons on the pages, see "Icons
and buttons."
Using a feature page
As shown in Figure 2, a feature page contains information about a feature module, including its table
entry statistics, features, and functions. From a feature page, you can configure features provided by
a feature module.
Figure 2 Sample feature page
Using a table page
As shown in Figure 3, a table page displays entries in a table. To sort entries by a field in ascending
or descending order, click the field. For example, click MAC Address to sort entries by MAC
address.
7
Figure 3 Sample table page
Using a configuration page
As shown in Figure 4, one configuration page contains all parameters for a configuration task. If a
parameter must be configured on another page, the configuration page typically provides a link. You
do not need to navigate to the destination page.
For example, you must use anACLwhen you configure a packet filter. If no ACLs are available when
you perform the task, you can click the Add icon to create an ACL. In this situation, you do not
need to navigate to the ACL management page.
8
Figure 4 Sample configuration page
Icons and buttons
Table 2 describes icons and buttons you can use to configure and manage the device.
Table 2 Icons and buttons
Icon/button Icon/button
name Task
Help icons
Help Obtain help information for a feature.
Hint Obtain help information for a function or parameter.
Counter icon
Counter Identify the total number of table entries.
Navigation icon
Next Access the lower-level page to display information or
configure settings.
Status control icon
Status control
Control the enable status of the feature.
•If ON is displayed, the feature is enabled. To disable
the feature, click the button.
•If OFF is displayed, the feature is disabled. To enable
the feature, click the button.
Search icons
Search Enter a search expression in the search box, and then click
this icon to perform a basic search.
9
Icon/button Icon/button
name Task
Advanced search Click this icon, and then enter a combination of criteria to
perform an advanced search.
Entry management
icons
Refresh Refresh table entries manually.
Add
•Add a new entry.
•Confirm the addition of an entry and continue to add an
additional entry.
Detail Display or modify settings of an entry.
This icon appears at the end of an entry when you hover
over the entry.
Delete Delete an entry.
This icon appears at the end of an entry when you hover
over the entry.
Bulk-delete Select one or multiple entries, and then click this icon to
delete the selected entries.
Field selector Select fields to be displayed.
Advanced settings
icon
Advanced settings Access the configuration page to configure settings.
Performing basic tasks
This section describes the basic tasks that must be frequently performed when you configure or
manage the device.
Saving the configuration
Typically, settings take effect immediately after you create them. However, the system does not
automatically save the settings to the configuration file. They are lost when the device reboots.
To prevent settings from being lost, use one of the following methods to save the configuration:
•Click the Save icon in the left corner.
•Select Device > Maintenance > Configuration to access the configuration management
page.
Displaying or modifying settings of a table entry
1. Hover over the entry.
2. Click the Detail icon at the end of the entry.
10
Rebooting the device
Reboot is required for some settings (for example, the stack setup) to take effect.
To reboot the device:
1. Save the configuration.
2. Select Device > Maintenance > Reboot.
3. On the reboot page, click the reboot button.
11
Feature navigator
Menu items and icons available to you depend on the user roles you have. By default, you can use
any user roles to display information. To configure features, you must have the network-admin user
role.
This chapter describes all menus available for the network-admin user role. The top-level menu
includes Dashboard, Device, Network, Resources,QoS, Security, PoE, and Log. For each top
menu, a navigator table is provided. Use the navigator tables to navigate to the pages for the tasks
you want to perform.
For example:
•To change the default device name, select Device > Maintenance > Settings from the
navigation tree.
•To delete an IPv4 ACL, select Resources > ACL > IPv4 from the navigation tree.
NOTE:
In the navigator tables, a menu is in boldface if it has submenus.
Dashboard menu
The dashboard menu provides an overview of the system and its running status, including:
•System logs.
•System utilization.
•System info.
This menu does not contain submenus.
Device menu
Use Table 3 to navigate to the tasks you can perform from the Device menu.
Table 3 Device menu navigator
Menus Tasks
Maintenance
Settings
•Configure basic device settings, including the device name, location,
and contact.
•Configure the system time settings. You can manually set the system
time, or configure the device to obtain the UTC time from a trusted time
source and calculate the system time.
Administrators
•Create, modify, or delete user roles.
•Create, modify, or delete user accounts.
•Assign user roles to administrators for access control.
•Manage passwords.
12
Menus Tasks
Configuration
•Save the running configuration.
•Import configuration and export the running configuration. This task is
not supported in Release 3111P02.
•Display the running configuration.
•Restore the factory-default configuration.
File System
•Display storage medium information.
•Display file and folder information.
•Delete files.
•Download and upload files
Upgrade
•Upgrade software images.
•Display software image lists, including:
{Current software images.
{Main and backup startup software images.
Diagnostics Collect diagnostic information used for system diagnostics and
troubleshooting.
Reboot Reboot the device.
About
Display basic device information, including:
•Device name.
•Serial number.
•Version information.
•Electronic label.
•Legal statement.
Virtualization
IRF
•Configure the following settings to set up an HPE OfficeConnect 1950
stack:
{Member ID.
{Priority.
{Domain ID.
{Stack port bindings.
•Display the stack topology.
Network menu
Use Table 4 to navigate to the tasks you can perform from the Network menu.
Table 4 Network menu navigator
Menus Tasks
Probe
Ping •Test the connectivity to a device in an IPv4 network.
•Test the connectivity to a device in an IPv6 network.
Tracert •IPv4 Tracert.
•IPv6 Tracert.
Interfaces
Other manuals for OfficeConnect 1950 Series
1
Table of contents
Other HPE Switch manuals
HPE
HPE FlexNetwork 10500 SERIES User manual
HPE
HPE Aruba Instant On 1960 24G 20p Class4 4p Class6 PoE 2XGT 2SFP+ 370W... Assembly instructions
HPE
HPE FlexNetwork 10500 SERIES User manual
HPE
HPE FlexNetwork 5130 HI SERIES Installation manual
HPE
HPE FlexFabric 7900 Series Installation manual
HPE
HPE FlexFabric 5950 Series User manual
HPE
HPE FlexNetwork 5130 EISeries User manual
HPE
HPE FlexFabric 5940 SERIES Installation manual
HPE
HPE 5920 series Installation manual
HPE
HPE FlexNetwork 5510 HI Series User manual
HPE
HPE Aruba Networking CX 6200 Series User manual
HPE
HPE FlexFabric 5940 SERIES User manual
HPE
HPE FlexNetwork 10500 SERIES User manual
HPE
HPE 5820X Series User manual
HPE
HPE FlexFabric 5710 Series Instruction Manual
HPE
HPE 3100 v2 Series User manual
HPE
HPE 5945 Installation instructions
HPE
HPE FlexFabric 5930 Series Installation manual
HPE
HPE FlexNetwork 5510 HI Series User manual
HPE
HPE FlexFabric 12900 Installation manual
Popular Switch manuals by other brands
Tripp Lite
Tripp Lite B006-004-R user manual
High Sec Labs
High Sec Labs SK21P-3 Quick installation guide
Black Box
Black Box ServSwitch CX Quad IP KV4161A user guide
ExtremeSwitching
ExtremeSwitching 3500 Series Troubleshooting
Planet
Planet EPL-2000 Quick installation guide
Connect Pro
Connect Pro Master-IT StreamLine SL-18 user guide
