HP PROCURVE 8212ZL Bedienungsanleitung

Release Notes:Version K.13.49 Softwarefor the ProCurve Series 3500yl, 6200yl, 5400zl, and 8212zl SwitchesThese release notes include information o

viiiRelease K.12.51 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

89 EnhancementsRelease K.13.04 EnhancementsFigure 3. Example of Disabling Inbound Multicast Rate-limiting for Port 3Operating Notes• This rate-li

90EnhancementsRelease K.13.04 EnhancementsFor example, if the host “Labswitch” is in the domain abc.com, you can enter the following command and t

91 EnhancementsRelease K.13.04 EnhancementsFigure 17. Example of the show modules Command Output Figure 18. An Example of the show modules detail

92EnhancementsRelease K.13.04 EnhancementsNoteOn ProCurve 3500yl and 6200yl series switches, the mini-GBIC information does not display as the por

93 EnhancementsRelease K.13.04 EnhancementsFigure 19. Example of the show vrrp Command with Statistics Enhancement (PR_ 0000000420) — This enhanc

94EnhancementsRelease K.13.05 through K.13.15 EnhancementsFor example:Figure 4. Example of Using the show-tech Command to Upload a Customized Li

95 EnhancementsRelease K.13.16 EnhancementsFor example:ProCurve(config)# console inactivity-timer 20 Enhancement (PR_1000780247) — This enhancemen

96EnhancementsRelease K.13.16 EnhancementsSetting the Management Access Method—CLIEnter the following command to configure the management access m

97 EnhancementsRelease K.13.16 EnhancementsFigure 7. Example of Menu Showing Authorized Managers with Access MethodFigure 8. Example of Edit Me

98EnhancementsRelease K.13.16 EnhancementsFigure 9. Example of Configuring Authorized Manager Access Method in the Web InterfaceSee “Using Autho

ixRelease K.13.26 through K.13.39 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200Rel

99 EnhancementsRelease K.13.16 EnhancementsColumns supported are:Syntax: show interfaces custom [port-list] column-listSelect the information that

100EnhancementsRelease K.13.16 EnhancementsFigure 20. Example of the Custom show interfaces CommandYou can specify the column width by entering a

101 EnhancementsRelease K.13.16 EnhancementsNote on Using Pattern Matching with the “Show Interfaces Custom” CommandIf you have included a pattern

102EnhancementsRelease K.13.16 EnhancementsYou can also use the no-tag-added parameter with ACL traffic filtering when mirroring IP traffic.Figure

103 EnhancementsRelease K.13.16 EnhancementsFigure 23. Example of Session Output Showing no-tag-added OptionNoteFor more information about traffic

104EnhancementsRelease K.13.16 Enhancements SHOULD save the change to non-volatile storage.” DEFVAL { 2 } ::= { hpicfBr

105 EnhancementsRelease K.13.16 Enhancements• Web and MAC authentications are not allowed on the same port if unauthenticated VLAN (that is, a gues

106EnhancementsRelease K.13.16 EnhancementsFigure 24. Example of Disabling a Specific CipherConfiguring Key Lengths and DSA/RSA SupportThis enhan

107 EnhancementsRelease K.13.16 EnhancementsMessage Authentication Code (MAC) SupportThis enhancement allows configuration of the set of MACs that

108EnhancementsRelease K.13.16 EnhancementsFigure 25. Example of show ip ssh Command Showing Ciphers, MACs and Key InformationLogging MessagesThe

1 Software ManagementPremium License Switch Software FeaturesSoftware ManagementPremium License Switch Software FeaturesThe ProCurve 3500yl and 540

109 EnhancementsRelease K.13.17 Enhancements• debug• debug2• debug3Release K.13.17 EnhancementsNo enhancements; Bug fixes only. Release K.13.18 Enh

110EnhancementsRelease K.13.19 EnhancementsFor example, if you use the show interface custom command to specify the output, you can configure an a

111 EnhancementsRelease K.13.19 EnhancementsNoteRemember to enclose the command being aliased in quotes.Command parameters for the aliased command

112EnhancementsRelease K.13.19 EnhancementsNoteSee the section “Command Differences for the ProCurve Series 2600/2800/3400cl/6400cl Switches” on p

113 EnhancementsRelease K.13.19 EnhancementsFigure 11. Example of the Logging Command with a Priority DescriptionNoteA notification is sent to th

114EnhancementsRelease K.13.19 Enhancements• If the default severity value is in effect, all messages that have severities greater than the defaul

115 EnhancementsRelease K.13.19 Enhancements• You can use up to three Web servers in your network to store and display customized Web pages for Web

116EnhancementsRelease K.13.19 EnhancementsCustomizable HTML TemplatesThe sample HTML files described in the following sections are customizable t

117 EnhancementsRelease K.13.19 Enhancements Figure 13. HTML Code for User Login Page Template<!--ProCurve Web Authentication Templateindex.ht

118EnhancementsRelease K.13.19 EnhancementsAccess Granted Page (accept.html)Figure 14. Access Granted PageThe accept.html file is the Web page u

2Software ManagementDownload Switch Documentation and Software from the WebDownload Switch Documentation and Software from the WebYou can download

119 EnhancementsRelease K.13.19 EnhancementsFigure 15. HTML Code for Access Granted Page TemplateAuthenticating Page (authen.html)Figure 16. A

120EnhancementsRelease K.13.19 EnhancementsThe authen.html file is the Web page used to process a client login and is refreshed while user credent

121 EnhancementsRelease K.13.19 EnhancementsThe reject_unauthvlan.html file is the Web page used to display login failures in which an unauthenti-c

122EnhancementsRelease K.13.19 EnhancementsTimeout Page (timeout.html)Figure 20. Timeout PageThe timeout.html file is the Web page used to retur

123 EnhancementsRelease K.13.19 EnhancementsRetry Login Page (retry_login.html)Figure 22. Retry Login PageThe retry_login.html file is the Web pa

124EnhancementsRelease K.13.19 EnhancementsFigure 23. HTML Code for Retry Login Page TemplateSSL Redirect Page (sslredirect.html)Figure 24. SS

125 EnhancementsRelease K.13.19 EnhancementsThe sslredirect file is the Web page displayed when a client is redirected to an SSL server to enter cr

126EnhancementsRelease K.13.19 EnhancementsAccess Denied Page (reject_novlan.html)Figure 26. Access Denied PageThe reject_novlan file is the Web

127 EnhancementsRelease K.13.19 EnhancementsFigure 27. HTML Code for Access Denied Page Template<!--ProCurve Web Authentication Templatereject

128EnhancementsRelease K.13.19 EnhancementsCommands for Using Custom Web Authentication Pagesaaa port-access web-based ewa-serverFigure 29. Addi

3 Software ManagementDownload Switch Documentation and Software from the WebTFTP Download from a ServerSyntax:copy tftp flash <ip-address> &l

129 EnhancementsRelease K.13.19 Enhancementsshow port-access web-based configFigure 33. Example of show port-access Web-based config Command Outp

130EnhancementsRelease K.13.19 EnhancementsProtection Against IP Source Address SpoofingMany network attacks occur when an attacker injects packet

131 EnhancementsRelease K.13.19 EnhancementsPrerequisite: DHCP SnoopingDynamic IP lockdown requires that you enable DHCP snooping as a prerequisite

132EnhancementsRelease K.13.19 EnhancementsIn this example, the following DHCP leases have been learned by DHCP snooping on port 5. VLANs 2 and 5

133 EnhancementsRelease K.13.19 EnhancementsEnabling Dynamic IP LockdownTo enable dynamic IP lockdown on all ports or specified ports, enter the ip

134EnhancementsRelease K.13.19 Enhancements• Remove the trusted-port configuration. You can configure dynamic IP lockdown only from the CLI; thi

135 EnhancementsRelease K.13.19 EnhancementsAdding a Static BindingTo add the static configuration of an IP-to-MAC binding for a port to the lease

136EnhancementsRelease K.13.19 EnhancementsAn example of the show ip source-lockdown status command output is shown in Figure 31. Note that the op

137 EnhancementsRelease K.13.19 EnhancementsFigure 32. Example of show ip source-lockdown bindings Command OutputIn the show ip source-lockdown bin

138EnhancementsRelease K.13.20 EnhancementsFigure 33. Example of debug dynamic-ip-lockdown Command OutputRelease K.13.20 EnhancementsRelease K.13.

4Software ManagementDownload Switch Documentation and Software from the WebSyntax: copy xmodem flash [< primary | secondary >]1. To reduce t

139 EnhancementsRelease K.13.21 EnhancementsRelease K.13.21 EnhancementsNo enhancements; Bug fixes only. Release K.13.22 EnhancementsNo enhancement

140EnhancementsRelease K.13.40 Enhancementsdisabled (1),active (2),passive (3)}ACCESS read-writeSTATUS mandatory DESCRIPTION “Used to set

141 EnhancementsRelease K.13.40 EnhancementsSNMP displays the counter and statistics totals accumulated since the last reboot; it is not affected b

142EnhancementsRelease K.13.40 EnhancementsAdding a Description for a Syslog ServerYou can associate a user-friendly description with each of the

143 EnhancementsRelease K.13.41 EnhancementsFigure 35. Example of the Logging Command with a Priority DescriptionNoteA notification is sent to th

144EnhancementsRelease K.13.44 EnhancementsRelease K.13.44 Enhancements No enhancements; Bug fixes only. (Not a public release)Release K.13.45 Enh

145 Software Fixes in Release K.11.12 - K.13.49Release K.11.12Software Fixes in Release K.11.12 - K.13.49Software fixes are listed in chronological

146Software Fixes in Release K.11.12 - K.13.49Release K.11.13 MSTP Enhancement (PR_1000310463) — Implementation of legacy path cost MIB and CLI o

147 Software Fixes in Release K.11.12 - K.13.49Release K.11.16 CLI (PR_1000315256) — Inconsistent error message, "Resource unavailable,"

148Software Fixes in Release K.11.12 - K.13.49Release K.11.32Software exception at ldbal_cost.c:1577 -- in 'eDrvPoll', task ID = 0x17606

5 Software ManagementDownload Switch Documentation and Software from the WebUsing USB to Download Switch SoftwareTo use the USB port on the switch

149 Software Fixes in Release K.11.12 - K.13.49Release K.11.32 Crash (PR_1000335430) — The Switch may crash with a message similar to:"Cam ra

150Software Fixes in Release K.11.12 - K.13.49Release K.11.33 Module (PR_1000330312) — Booting up the Switch with an unsupported module installed

151 Software Fixes in Release K.11.12 - K.13.49Release K.11.34"Software exception at alloc_free.c:422 -- in 'eDrvPoll'...-> No ms

152Software Fixes in Release K.11.12 - K.13.49Release K.11.36 MIB (PR_1000307831) — The MIB value for ipAddrTable is not populated. RIP (PR_1000

153 Software Fixes in Release K.11.12 - K.13.49Release K.11.40Software Exception at rt_table.c.758 -- in 'eRouteCtrl', task ID = 0x8a d6

154Software Fixes in Release K.11.12 - K.13.49Release K.11.44The following problems were resolved in release K.11.43 (not a general release) Cras

155 Software Fixes in Release K.11.12 - K.13.49Release K.11.47Release K.11.47 The following problems were resolved in release K.11.47 (not a gener

156Software Fixes in Release K.11.12 - K.13.49Release K.11.61 sFlow (PR_1000361604) — Changed the maximum sFlow skipcount to 24 bits. Release K.1

157 Software Fixes in Release K.11.12 - K.13.49Release K.11.63Release K.11.63 The following problems were resolved in release K.11.63 802.1p QoS

158Software Fixes in Release K.11.12 - K.13.49Release K.11.65Release K.11.65 The following problems were resolved in release K.11.65 (not a genera

6Software ManagementSaving Configurations While Using the CLISaving Configurations While Using the CLIThe switch operates with two configuration f

159 Software Fixes in Release K.11.12 - K.13.49Release K.11.67 Web/RADIUS (PR_1000368520) — Web Authentication doesn't authenticate clients d

160Software Fixes in Release K.11.12 - K.13.49Release K.11.69Release K.11.69The following problems were resolved in release K.11.69 Routing (PR_1

161 Software Fixes in Release K.11.12 - K.13.49Release K.12.02 Enhancement (PR_1000298920) — A ping request issued to a VLAN which is down will no

162Software Fixes in Release K.11.12 - K.13.49Release K.12.03 Crash (PR_1000392863) — Switch may crash when setmib tcpConnState is used, with a m

163 Software Fixes in Release K.11.12 - K.13.49Release K.12.04 Enhancement (PR_1000398393) — For the interface <port-list> speed-duplex comm

164Software Fixes in Release K.11.12 - K.13.49Release K.12.05Release K.12.05The following problems were resolved in release K.12.05. BootROM (PR_

165 Software Fixes in Release K.11.12 - K.13.49Release K.12.08Release K.12.08 Software never released. Enhancement (PR_1000413764) — Increase the

166Software Fixes in Release K.11.12 - K.13.49Release K.12.11 SNMP (PR_1000374893) — When retrieving the switch serial number via SNMP, the manag

167 Software Fixes in Release K.11.12 - K.13.49Release K.12.15 Hotswap (PR_1000422714) — Hotswapping a module may result in a false module self-te

168Software Fixes in Release K.11.12 - K.13.49Release K.12.16 Rate-Limiting (PR_1000420720) — Rate limiting is broken beyond 9.5 Mbps. For any ra

7 Software ManagementBest Practices for Major Software UpdatesBest Practices for Major Software UpdatesMajor software updates contain new features

169 Software Fixes in Release K.11.12 - K.13.49Release K.12.18Release K.12.18The following problems were resolved in release K.12.18. CLI (PR_1000

170Software Fixes in Release K.11.12 - K.13.49Release K.12.20 10-GbE Log (PR_1000424384) — The switch is not checking for the presence of the J86

171 Software Fixes in Release K.11.12 - K.13.49Release K.12.22 Routing (PR_1000432449) — If the switch is configured with both port security and r

172Software Fixes in Release K.11.12 - K.13.49Release K.12.24 MSTP (PR_1000439775) — The switch generates a topology change when a port goes off-

173 Software Fixes in Release K.11.12 - K.13.49Release K.12.26 through K.12.29Release K.12.26 through K.12.29Software never built.Release K.12.30So

174Software Fixes in Release K.11.12 - K.13.49Release K.12.44Release K.12.44Not a general release. Enhancement (PR_1000457691) — This enhancement

175 Software Fixes in Release K.11.12 - K.13.49Release K.12.46 SNMP (PR_1000444744) — An snmp set of hpicfDot1xPaePortauth or an snmp set hpicfDo

176Software Fixes in Release K.11.12 - K.13.49Release K.12.48Release K.12.48The following problems were resolved in release K.12.48. Enhancement

177 Software Fixes in Release K.11.12 - K.13.49Release K.12.52 Routing (PR_1000424308) — A static route that points to a deleted VLAN may cause ot

178Software Fixes in Release K.11.12 - K.13.49Release K.12.54Release K.12.54The following problems were resolved in release K.12.54. Connection R

8Software ManagementBest Practices for Major Software UpdatesNote: You might opt to use a different methodology in which the new software will be

179 Software Fixes in Release K.11.12 - K.13.49Release K.12.55Release K.12.55The following problems were resolved in release K.12.55 (never release

180Software Fixes in Release K.11.12 - K.13.49Release K.12.573) The SSH client application does not get a command prompt (or equivalent) back from

181 Software Fixes in Release K.11.12 - K.13.49Release K.13.02Release K.13.02The following problems were resolved in release K.13.02. Enhancement

182Software Fixes in Release K.11.12 - K.13.49Release K.13.03 CLI (PR_1000455370) — Commands that display portmaps may yield corrupted output. Fo

183 Software Fixes in Release K.11.12 - K.13.49Release K.13.04 Crash (PR_1000763409) — When entering and deleting ACLs, the switch may crash with

184Software Fixes in Release K.11.12 - K.13.49Release K.13.04 Enhancement (PR_ 0000000081) — The CLI clear module command allows you to remove mo

185 Software Fixes in Release K.11.12 - K.13.49Release K.13.04 CLI (PR_0000000476) — Various CLI parameters are rejected by the switch as invalid

186Software Fixes in Release K.11.12 - K.13.49Release K.13.05Release K.13.05The following problems were resolved in release K.13.05 (not a public

187 Software Fixes in Release K.11.12 - K.13.49Release K.13.06 UDLD (PR_0000001433) — After the switch is rebooted, UDLD may continue to keep swit

188Software Fixes in Release K.11.12 - K.13.49Release K.13.08W 03/11/06 03:18:53 00374 chassis: Ports 25-48 Slave ROM Tombstone: 0x13000601W 03/11

© Copyright 2006-2008 Hewlett-Packard Development Company, LP. The information contained herein is subject to change without notice.Publication Numb

9 Software ManagementBest Practices for Major Software Updatesb. Create a backup configuration file and verify the change.Switch1# copy config conf

189 Software Fixes in Release K.11.12 - K.13.49Release K.13.09Release K.13.09The following problems were resolved in release K.13.09. Crash (PR_00

190Software Fixes in Release K.11.12 - K.13.49Release K.13.11 RADIUS/Jumbo (PR_ 1000779048) — When an 802.1X-enabled port belongs to a VLAN that

191 Software Fixes in Release K.11.12 - K.13.49Release K.13.12 802.1X (PR_0000002036) — 802.1X with Funk Steel Belted RADIUS server causes the swi

192Software Fixes in Release K.11.12 - K.13.49Release K.13.13 .iso.org.dod.internet.mgmt.mib-2.entityMIB.entityMIBObjects.entityPhysical.entPhysi

193 Software Fixes in Release K.11.12 - K.13.49Release K.13.15Release K.13.15The following problems were resolved in release K.13.15 (never release

194Software Fixes in Release K.11.12 - K.13.49Release K.13.17A new configuration option provides the ability to configure which MACs a client is p

195 Software Fixes in Release K.11.12 - K.13.49Release K.13.18 SNMP (PR_1000761379) — When an SNMP get is used to gather statistics, the interface

196Software Fixes in Release K.11.12 - K.13.49Release K.13.19 Wake-On-LAN (PR_0000004794) — Wake-On-LAN does not always work successfully. IP

197 Software Fixes in Release K.11.12 - K.13.49Release K.13.21 X2 Transceivers (PR_0000004758) — Some ProCurve SR and ER X2-10GbE (J8436A, J8437A)

198Software Fixes in Release K.11.12 - K.13.49Release K.13.22 Config (PR_1000781031) — When the valid port setting ‘auto-1000’ is configured for

10Software ManagementBest Practices for Major Software UpdatesNoteThis step will enable you to revert from K_13_05 to your previous image with you

199 Software Fixes in Release K.11.12 - K.13.49Release K.13.24 Authentication (PR_0000007209) — A PC behind a tandem IP phone is not able to authe

200Software Fixes in Release K.11.12 - K.13.49Release K.13.26 through K.13.39 GVRP/RADIUS (PR_0000006051) — RADIUS-assigned VLANs are not propaga

201 Software Fixes in Release K.11.12 - K.13.49Release K.13.41Release K.13.41The following problems were resolved in release K.13.41 (Not a public

202Software Fixes in Release K.11.12 - K.13.49Release K.13.43 CLI (PR_0000004042) — The CLI command snmp-server response-source dst-ip-of-request

203 Software Fixes in Release K.11.12 - K.13.49Release K.13.45 CLI (PR_1000803731) — If the "|" character exists in the banner text of a

204Software Fixes in Release K.11.12 - K.13.49Release K.13.46J9143B – ProCurve 1000-BX-U SFP-LC Mini-GBIC For more information, see “Release K.13.

205 Software Fixes in Release K.11.12 - K.13.49Release K.13.46password operator sha-1 "lsadkjlkjfsd..." Example of what that line might l

206Software Fixes in Release K.11.12 - K.13.49Release K.13.47Release K.13.47The following problems were resolved in release K.13.47. (Never releas

207 Software Fixes in Release K.11.12 - K.13.49Release K.13.49Release K.13.49The following problems were resolved in release K.13.49. Auto-TFTP (P

© 2006 - 2008 Hewlett-Packard Development Company, LP. The information contained herein is subject to change without notice.January 2009Manual Part Nu

11 Software ManagementBest Practices for Major Software Updates8. Reload the new switch image.Switch1# reloadSystem will be rebooted from primary i

12Software ManagementBest Practices for Major Software Updates 1 | * * | config1 2 | * | config2 3 | |2. Boot the

13 Software ManagementBest Practices for Major Software UpdatesAnd later, the configuration that was created on K.12.57 is viewed while the switch

14Software ManagementProCurve Switch, Routing Switch, and Router Software KeysProCurve Switch, Routing Switch, and Router Software KeysSoftware Le

15 Software ManagementOS/Web/Java Compatibility TableOS/Web/Java Compatibility TableThe switch Web agent supports the following combinations of OS

16Software ManagementMinimum Software VersionsSwitch 5400zl 4p 10-GbE CX4 Module J8708A K.11.33 Switch 6200yl-24G-mGBIC J8992A K.11.33 Switch 3500

17 Support NotesMinimum Software VersionsSupport Notes ROM Update Required!All yl and zl switches running K.12.45 system software or earlier, will

18Support NotesMinimum Software VersionsProCurve(config)# snmp-server mib hpswitchauthmib excluded For more information on the above topic, refer

iContentsSoftware Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1Premium License Switch Software Fea

19 Support NotesMinimum Software VersionsManagement and Configuration Guide for ProCurve Wireless Edge Services zl Module here: ftp://ftp.hp.com/pu

20ClarificationsMinimum Software VersionsClarificationsThe following clarification or updates apply to documentation for the ProCurve Series 3500y

21 ClarificationsMinimum Software Versions Maximum UDP Broadcast Forwarding Entries:The number of UDP broadcast entries and IP helper addresses co

22Known IssuesMinimum Software VersionsKnown IssuesRelease K.13.25The following problems are known issues as of release K.13.25.SFTP/SCP (PR_00000

23 Known IssuesMinimum Software Versions Web (PR_1000761014) — The Web interface truncates 16 character passwords to 15 characters. Workaround: co

24Known IssuesRelease K.13.02 Config Transfer (PR_1000781004) — The switch allows a config file transfer to set an invalid speed-duplex setting o

25 Known IssuesRelease K.13.01

26EnhancementsRelease K.11.12 EnhancementsEnhancementsUnless otherwise noted, each new release includes the enhancements added in all previous rel

27 EnhancementsRelease K.11.35 Enhancements CLI-configured sFlow with multiple instances: In earlier software releases, the only method for config

28EnhancementsRelease K.11.41 EnhancementsRelease K.11.41 EnhancementsRelease K.11.43 includes the following enhancement: Added support for Unidi

iiEnhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26Release K.11.12 Enhancements . . . .

29 EnhancementsRelease K.11.60 through K.11.63 EnhancementsRelease K.11.60 through K.11.63 EnhancementsNo enhancements, software fixes only. Versi

30EnhancementsRelease K.12.01 EnhancementsRelease K.12.01 EnhancementsRelease K.12.01 is a major software update containing many new features and

31 EnhancementsRelease K.12.01 EnhancementsAdvanced Traffic Management GuideQos Queue Config: Allows you to reduce the number of outbound queues th

32EnhancementsRelease K.12.02 EnhancementsIn addition to the updates listed above, K.12.01 also provides the following enhancements: Enhancement

33 EnhancementsRelease K.12.04 EnhancementsFor more information, refer to “QoS TCP/UDP Priority” in the Advanced Traffic Management Guide.Release K

34EnhancementsRelease K.12.04 Enhancements[admin-edge-port]Enables admin-edge-port for RSTP/MSTP. If a bridge or switch is detected on the segment

35 EnhancementsRelease K.12.04 EnhancementsSyntax: spanning-tree < port-list > < hello-time | path-cost | point-to-point-mac | priority &g

36EnhancementsRelease K.12.05 EnhancementsRelease K.12.05 EnhancementsRelease K.12.05 includes the following enhancement: Enhancement (PR_1000408

37 EnhancementsRelease K.12.05 EnhancementsNoteYou can use 802.1X (port-based or client-based) authentication and either Web or MAC authentication

38EnhancementsRelease K.12.05 EnhancementsIf the dynamic VLAN does not exist or if you have not enabled the use of a dynamic VLAN for authenticati

iiiRelease K.12.10 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58Sho

39 EnhancementsRelease K.12.05 EnhancementsTherefore, on a port where one or more authenticated client sessions are already running, all such clien

40EnhancementsRelease K.12.05 EnhancementsFigure 2. Active Configuration for VLAN 22 Temporarily Changes for the 802.1X SessionHowever, as shown

41 EnhancementsRelease K.12.05 EnhancementsWhen the 802.1X client session on port A2 ends, the port removes the temporary untagged VLAN membership.

42EnhancementsRelease K.12.05 EnhancementsEnabling the Use of GVRP-Learned Dynamic VLANs in Authentication Sessions Syntax: aaa port-access gvrp-v

43 EnhancementsRelease K.12.06 EnhancementsRelease K.12.06 EnhancementsRelease K.12.06 includes the following enhancement: Enhancement (PR_1000308

44EnhancementsRelease K.12.06 Enhancements By storing different security settings in different files, you can test different security configurati

45 EnhancementsRelease K.12.06 EnhancementsIn software release K.12.06 and greater, you cannot view the configured local password settings in plain

46EnhancementsRelease K.12.06 Enhancements The <hash-type> parameter specifies the type of algorithm (if any) used to hash the password. Va

47 EnhancementsRelease K.12.06 Enhancements<auth-pass> is the hashed authentication password used with the configured authentication method.p

48EnhancementsRelease K.12.06 EnhancementsAfter you enter the complete password port-access command syntax, the password is set. You are not promp

ivRelease K.12.51 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66Rele

49 EnhancementsRelease K.12.06 EnhancementsIn software release K.12.06 and greater, RADIUS shared secret (encryption) keys can be saved in a config

50EnhancementsRelease K.12.06 EnhancementsIf the keystring contains double-quotes, it can be quoted with single quotes ('keystring'). Th

51 EnhancementsRelease K.12.06 EnhancementsFigure 6. Example of Hashed Content of an SSH Client Public KeyIf a switch configuration contains multi

52EnhancementsRelease K.12.06 EnhancementsEnabling the Storage and Display of Security CredentialsTo enable the security settings described in “Se

53 EnhancementsRelease K.12.06 EnhancementsOperating NotesCaution When you first enter the include-credentials command to save the additional secu

54EnhancementsRelease K.12.06 Enhancements After you permanently save security configurations to the current startup-config file using the write

55 EnhancementsRelease K.12.06 Enhancements If you upgrade ProCurve software on a switch from an earlier software release to software release K.12

56EnhancementsRelease K.12.06 EnhancementsRestrictionsThe following restrictions apply when you enable security credentials to be stored in the ru

57 EnhancementsRelease K.12.07 EnhancementsNote that the password port-access values are configured separately from local operator user-name and pa

58EnhancementsRelease K.12.09 EnhancementsRelease K.12.09 EnhancementsNo enhancements, software fixes only.Release K.12.10 EnhancementsRelease K.1

vEnabling Customized Web Authentication Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115Dynamic IP Lockdown . . .

59 EnhancementsRelease K.12.10 EnhancementsThe following examples illustrate the displayed output depending on whether the detail option is used.Fi

60EnhancementsRelease K.12.11 EnhancementsRelease K.12.11 EnhancementsNo enhancements, software never released.Release K.12.12 EnhancementsNo enha

61 EnhancementsRelease K.12.15 EnhancementsTo enable SNMP informs, enter this command:To configure SNMP informs request options, use the following

62EnhancementsRelease K.12.16 EnhancementsYou can see if informs are enabled or disabled with the show snmp-server command as shown in Figure 9.Fi

63 EnhancementsRelease K.12.19 Enhancements Enhancement (PR_1000428213) — This software enhancement adds the ability to configure a secondary auth

64EnhancementsRelease K.12.22 EnhancementsRelease K.12.22 EnhancementsRelease K.12.22 includes the following enhancement: Enhancement (PR_1000443

65 EnhancementsRelease K.12.33 through K.12.40 Enhancements Enhancement — Merged all of the K.12.24 and earlier software fixes and enhancements wi

66EnhancementsRelease K.12.45 EnhancementsRelease K.12.45 EnhancementsNo enhancements; Never released.Release K.12.46 EnhancementsNo enhancements;

67 EnhancementsRelease K.12.52 Enhancements Enhancement (PR_10004570598) — An improved version of the MSTP-VLAN mapping enhancement referenced in

68EnhancementsRelease K.12.57 Enhancements Enhancement (PR_1000464170) — This feature provides support for adding the LLDP VLAN Name TLV to LLDP

viRelease K.11.34 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

69 EnhancementsRelease K.13.01 EnhancementsRelease K.13.01 EnhancementsRelease K.13.01 is a major software update containing many new features and

70EnhancementsRelease K.13.01 EnhancementsSTP Diagnostics: Adds more diagnostic functions to resolve STP issues. See the section on “Troubleshooti

71 EnhancementsRelease K.13.02 EnhancementsRelease K.13.02 EnhancementsRelease K.13.02 includes the following enhancements. Enhancement: Beginning

72EnhancementsRelease K.13.02 EnhancementsWhen OSPF is Also Enabled on the VRRP RoutersWhen OSPF is enabled on the routers and a Fail-back event o

73 EnhancementsRelease K.13.02 EnhancementswhereVID = 16VRID = 23PDT = 12 secondsVRRP Preempt Mode with LACP and Older ProCurve DevicesThere can be

74EnhancementsRelease K.13.02 EnhancementsThere are trade-offs between selecting a small advertisement value and a large preempt delay time. A sma

75 EnhancementsRelease K.13.03 EnhancementsError MessagesRelease K.13.03 EnhancementsRelease K.13.03 includes the following enhancements. Enhancem

76EnhancementsRelease K.13.04 EnhancementsRelease K.13.04 EnhancementsRelease K.13.04 includes the following enhancements. Enhancement (PR_ 00000

77 EnhancementsRelease K.13.04 Enhancements Enhancement (PR_ 0000000082) — The CLI track interface command allows you to configure tracking for a

78EnhancementsRelease K.13.04 EnhancementsNoteA Backup VR switches to priority zero instead of its configured value when all its tracked entities

viiRelease K.12.09 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

79 EnhancementsRelease K.13.04 EnhancementsConfiguring Track VLANThe track vlan command allows you to specify a VLAN or range of VLANs to be tracke

80EnhancementsRelease K.13.04 EnhancementsFor example:ProCurve(vlan-25-vrid-1)# no track Failover OperationFailover operation involves handing off

81 EnhancementsRelease K.13.04 EnhancementsDisplaying the VRRP ConfigurationYou can display the VRRP tracked entities by entering the command shown

82EnhancementsRelease K.13.04 Enhancements• The VRs operating VLAN can’t be configured as a tracking VLAN for that VR.• Ports that are part of a t

83 EnhancementsRelease K.13.04 Enhancements Enhancement (PR_ 0000000084) — DHCP Option 66 provides a way to automatically download and initially

84EnhancementsRelease K.13.04 EnhancementsPossible Scenarios for Updating the Configuration FileThe following table shows various network configur

85 EnhancementsRelease K.13.04 Enhancements• DHCP is preferred over BootP• If two BootP offers are received, the first one is selected• For two DHC

86EnhancementsRelease K.13.04 EnhancementsIf the IP address has not already been configured on the interface (VLAN), you will see the message show

87 EnhancementsRelease K.13.04 EnhancementsOperating Notes• If the configured BOOTP gateway address becomes invalid, DHCP relay agent returns to th

88EnhancementsRelease K.13.04 EnhancementsFigure 1. Example of Inbound Broadcast Rate-limiting of 50% on Port 3If you rate-limit multicast traff