HP Procurve Switch 2824 CLI Telnet Experience , Guide and Tutorial


-------------------------------------
ProCurve J4903A Switch 2824
Software revision I.10.77

Copyright (C) 1991-2009 Hewlett-Packard Co.  All Rights Reserved.

                           RESTRICTED RIGHTS LEGEND

 Use, duplication, or disclosure by the Government is subject to restrictions
 as set forth in subdivision (b) (3) (ii) of the Rights in Technical Data and
 Computer Software clause at 52.227-7013.

         HEWLETT-PACKARD COMPANY, 3000 Hanover St., Palo Alto, CA 94303

We'd like to keep you up to date about:
  * Software feature updates
  * New product announcements
  * Special events

Please register your products now at:  www.ProCurve.com




Press any key to continue
-------------------------------------------

LACP Problems - Be Warned - Disable LACP Unless You Need It!

Disable LACP, this is the link aggregation protocol where you can combine 4 ports to increase the overall bandwidth.  This sure sounds great but all LACP ports should be disabled unless you are using it. The reason is because it often takes down ports of computers/servers for no apparent or justified reason and it is a pain to troubleshoot.  LACP should only be enabled on ports that are actually going to use LACP.

Symptoms in the log are as follows:

I 01/02/90 01:41:36 ports: port 7 is Blocked by LACP
I 01/02/90 01:41:39 ports: port 7 is now on-line
I 01/02/90 01:45:23 ports: port 7 is now off-line
I 01/02/90 01:45:48 ports: port 7 is Blocked by LACP
I 01/02/90 01:45:51 ports: port 7 is now on-line
I 01/02/90 01:56:47 ports: port 7 is now off-line
I 01/02/90 02:22:42 ports: port 7 is Blocked by LACP
I 01/02/90 02:22:42 ports: port 7 is now off-line
I 01/02/90 02:39:44 ports: port 7 is Blocked by LACP
I 01/02/90 02:39:47 ports: port 7 is now on-line
I 01/02/90 02:45:15 ports: port 7 is now off-line
I 01/02/90 02:56:42 ports: port 7 is Blocked by LACP
I 01/02/90 02:56:45 ports: port 7 is now on-line
I 01/02/90 02:57:44 ports: port 7 is now off-line

#check if you have lacp enabled on any ports


show lacp
no LACP ports found.

How to disable LACP:

*Warning if you have machines that do not come back automatically if the link goes up and down be warned that this could take some or all machines offline and needs physical intervention.  When I typed the "no interface all lacp" this took down most computers on the switch and they did not come back on their own except a few.


ProCurve Switch 2824# config
ProCurve Switch 2824(config)#
ProCurve Switch 2824(config)# no interface all lacp
wr mem



 

 

Disable port

*Warning about port disable/enable is that I find some servers detect the uplink but will not work after being re-enabled without a network restart (eg. service network restart

The "8" represents port numbers.  You can also do a range such as "8-15"

config

int ethernet 8 disable

---------------------------

 

Enable Port

*Warning about port disable/enable is that I find some servers detect the uplink but will not work after being re-enabled without a network restart (eg. service network restart

config

int ethernet 8 enable

------------------------------------

Check each port's bandwidth usage in mbit

The "Util" field is how many mbit per second the port is doing.  You need to base the % percentage off the port speed eg. 10,100 or 1000 mbit. 

 Port      Mode     | --------------------------- | ---------------------------
                    | Kbits/sec   Pkts/sec  Util  | Kbits/sec  Pkts/sec   Util
 --------- -------- + ---------- ---------- ----- + ---------- ---------- -----
 1         1000FDx  | 5016       15         00.50 | 5040       47         00.50
 2         1000FDx  | 0          0          0     | 0          0          0   
 3         1000FDx  | 2536       0          00.25 | 5024       32         00.50
 4         1000FDx  | 12376      691        01.23 | 5352       448        00.53
 5         1000FDx  | 600        0          00.06 | 5024       32         00.50
 6         1000FDx  | 3960       0          00.39 | 5024       32         00.50
 7         1000FDx  | 5360       77         00.53 | 5344       112        00.53
 8         1000FDx  | 0          0          0     | 0          0          0   
 9         1000FDx  | 2488       0          00.24 | 5024       32         00.50
 10        1000FDx  | 2536       0          00.25 | 5024       32         00.50
 11        1000FDx  | 2488       0          00.24 | 5024       32         00.50
 12        1000FDx  | 2472       0          00.24 | 5024       32         00.50
 13        1000FDx  | 0          0          0     | 0          0          0   
 14        1000FDx  | 0          0          0     | 0          0          0   
 15        1000FDx  | 0          0          0     | 0          0          0   
 16        1000FDx  | 0          0          0     | 0          0          0   
 17        1000FDx  | 0          0          0     | 0          0          0   
 18        1000FDx  | 0          0          0     | 0          0          0   
 19        1000FDx  | 5680       538        00.56 | 12760      784        01.27
 20        100HDx   | 0          0          0     | 520        32         00.52
 21        1000FDx  | 0          0          0     | 0          0          0   
 22        1000FDx  | 0          0          0     | 0          0          0   
 23        1000FDx  | 0          0          0     | 0          0          0   
 24        1000FDx  | 0          0          0     | 0          0          0   

-------------------------------------------------------------

Show What Port MAC Address Belongs To

show mac 00:1F:D0:00:13:CC

 Status and Counters - Address Table - 001fd0-0013cc

  MAC Address : 001fd0-0013cc
  Located on Port : 8  

Show All MAC Addresses By Port

show mac all

If no MAC is displayed it means no device is connected or the device is not active or the port on the switch may be bad or disabled.

 Status and Counters - Port Address Table - 17

  MAC Address 
  -------------
  

show specific port mac

show mac 10

Set Mac Address Security:

ProCurve Switch 2824(config)# port-security 1 learn-mode static

The 1 above is the port number and then we are setting the learn mode:

The learn mode options are:

 continuous            Continuous MAC address learn mode.
 static                Static MAC address learn mode.
 configured            Static MAC address configured mode.
 port-access           Learn port-access authorized MAC address only.
 limited-continuous    Limited continuous MAC address learn mode.
 

Set how many MAC's are allowed to use the port:

port-security 1 address-limit X
 

Where x is the number of devices that are allowed to use the port

Add allowed MAC's like this:

port-security 1 mac-address themacaddress

Check port security settings of port:

 show port-security 1

 Port Security

  Port : 1    
  Learn Mode [Continuous] : Static              Address Limit [1] : 3
  Action [None] : Send Alarm              

  Authorized Addresses
  --------------------
  deadbe-efbce8       
 

 

 

Check overall port status

show interfaces is very useful for counting traffic and also identifying network issues

 Status and Counters - Port Status

                  | Intrusion                           MDI   Flow  Bcast
  Port  Type      | Alert     Enabled Status Mode       Mode  Ctrl  Limit
  ----- --------- + --------- ------- ------ ---------- ----- ----- ------
  1     100/1000T | No        Yes     Up     1000FDx    MDIX  off   0    
  2     100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  3     100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  4     100/1000T | No        Yes     Up     1000FDx    MDIX  off   0    
  5     100/1000T | No        Yes     Up     1000FDx    MDIX  off   0    
  6     100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  7     100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  8     100/1000T | No        No      Down   1000FDx    MDI   off   0    
  9     100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  10    100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  11    100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  12    100/1000T | No        Yes     Up     1000FDx    MDI   off   0    
  13    100/1000T | No        Yes     Down   1000FDx    MDI   off   0    
  14    100/1000T | No        Yes     Down   1000FDx    MDI   off   0    
  15    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  16    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  17    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  18    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  19    100/1000T | No        Yes     Up     1000FDx    MDIX  off   0    
  20    100/1000T | No        Yes     Up     100HDx     MDIX  off   0    
  21    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0    
  22    100/1000T | No        Yes     Down   1000FDx    MDI   off   0    
  23    100/1000T | No        Yes     Down   1000FDx    MDI   off   0    
  24    100/1000T | No        Yes     Down   1000FDx    MDIX  off   0  

 

show interfaces gives you more detail

 

Notice Port 7 showing 203 "Errors Rx".  It was because of a bad cable and we wondered why that server had spotty connectivity.

 Status and Counters - Port Counters

                                                            Flow  Bcast
  Port  Total Bytes  Total Frames Errors Rx    Drops Rx     Ctrl  Limit
  ----- ------------ ------------ ------------ ------------ ----- ------
  1     3,164,403... 2,285,255... 0            0            off   0    
  2     457,687,164  2,150,118... 0            0            off   0    
  3     3,716,409... 2,795,214... 14           0            off   0    
  4     1,897,977... 2,207,705... 0            0            off   0    
  5     626,012,466  3,843,597... 0            0            off   0    
  6     2,628,057... 2,138,559... 0            0            off   0    
  7     1,498,582... 476,790,025  0            0            off   0    
  8     2,830,274... 1,696,622... 589          0            off   0    
  9     1,573,201... 3,990,337... 0            0            off   0    
  10    1,930,438... 2,808,292... 238          0            off   0    
  11    3,137,823... 3,577,438... 1476         0            off   0    
  12    2,363,525... 99,291,760   1102         0            off   0    
  13    0            0            0            0            off   0    
  14    0            0            0            0            off   0    
  15    0            0            0            0            off   0    
  16    0            0            0            0            off   0    
  17    0            0            0            0            off   0    
  18    0            0            0            0            off   0    
  19    2,186,889... 2,963,434... 1            0            off   0    
  20    530,240,341  746,865,357  581          0            off   0    
  21    1866         7            2            0            off   0    
  22    2288         7            2            0            off   0    
  23    2246         7            2            0            off   0    
  24    190,610      1821         2            0            off   0
 

Password Issues/Requirements

Note that these switches support a maximum of 16 characters.  Spaces cannot be used and it is not obvious if you have gone over the limit so if you cannot login after setting a password type it out and count 16 characters and use only those and you should be able to login.

If your password is lost/unknown you can reset just the password (not the switch settings) by holding the "Clear" button on the front of the switch for at least 1 second.  Note again this does not reset the switch config but only the password when done this way.


Tags:

hp, procurve, cli, telnet, tutorialtelnet, software, revision, copyright, hewlett, packard, reserved, restricted, duplication, disclosure, restrictions, subdivision, ii, technical, clause, hanover, palo, alto, ca, feature, updates, announcements, register, products, www, lacp, disable, aggregation, protocol, combine, ports, overall, bandwidth, disabled, servers, apparent, justified, troubleshoot, enabled, follows, blocked, automatically, offline, intervention, typed, quot, interface, config, wr, mem, enable, detect, uplink, restart, eg, represents, int, ethernet, usage, mbit, util, percentage, mode, kbits, pkts, fdx, hdx, cc, counters, fd, located, addresses, displayed, active, interfaces, identifying, intrusion, mdi, bcast, ctrl, mdix, errors, rx, server, spotty, connectivity, bytes, frames, password, requirements, switches, maximum, characters, spaces, login, reset, settings,

Latest Articles

  • Cloned VM/Server/Computer in Linux won't boot and goes to initramfs busybox Solution
  • How To Add Windows 7 8 10 11 to GRUB Boot List Dual Booting
  • How to configure OpenDKIM on Linux with Postfix and setup bind zonefile
  • Debian Ubuntu 10/11/12 Linux how to get tftpd-hpa server setup tutorial
  • efibootmgr: option requires an argument -- 'd' efibootmgr version 15 grub-install.real: error: efibootmgr failed to register the boot entry: Operation not permitted.
  • Apache Error Won't start SSL Cert Issue Solution Unable to configure verify locations for client authentication SSL Library Error: 151441510 error:0906D066:PEM routines:PEM_read_bio:bad end line SSL Library Error: 185090057 error:0B084009:x509 certif
  • Linux Debian Mint Ubuntu Bridge br0 gets random IP
  • redis requirements
  • How to kill a docker swarm
  • docker swarm silly issues
  • isc-dhcp-server dhcpd how to get longer lease
  • nvidia cannot resume from sleep Comm: nvidia-sleep.sh Tainted: Linux Ubuntu Mint Debian
  • zfs and LUKS how to recover in Linux
  • [error] (28)No space left on device: Cannot create SSLMutex Apache Solution Linux CentOS Ubuntu Debian Mint
  • Save money on bandwidth by disabling reflective rpc queries in Linux CentOS RHEL Ubuntu Debian
  • How to access a disk with bad superblock Linux Ubuntu Debian Redhat CentOS ext3 ext4
  • ImageMagick error convert solution - convert-im6.q16: cache resources exhausted
  • PTY allocation request failed on channel 0 solution
  • docker error not supported as upperdir failed to start daemon: error initializing graphdriver: driver not supported
  • Migrated Linux Ubuntu Mint not starting services due to broken /var/run and dbus - Failed to connect to bus: No such file or directory solution