HP 6200YL Installation guide

The information contained herein is subject to change without notice.

The ProCurve 3500yl/5400zl/6200yl Switch

Software Update NPI Technical Training

NPI Technical Training

Version 1.0b

6 December 2006

The information contained herein is subject to change without notice.

Traffic Mirroring Section

Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems

Advantages

•Allows you to monitor traffic from the local switch or from multiple

remote switches

•Eliminates the need for a monitoring port on every switch

•Reduces the number of necessary security appliances

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

Traffic is selected based

on port, VLAN, or ACL.

Selected traffic is mirrored

to another switch.

Destination switch

forwards mirrored

traffic to IDS/IPS.

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Remote Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems from across the network and bring information back to

the analyzer.

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Guidelines for Using Traffic

Mirroring

Two types of traffic mirroring:

•Local mirroring—source and destination are on the same switch

•Remote mirroring—source and destination are on different switches

Each switch can be the:

•Originator for four mirror sessions, with the destination on either the

local switch or another switch

•Destination for 32 mirror sessions

Network

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

Four mirror sessions originate on

the local 5400zl Switch.

The 3500yl Switch can receive

up to 28 additional mirror

sessions.

Guidelines for Using Traffic

Mirroring

Continued

For local mirroring, configure exit ports:

•Configure multiple mirror sessions to use the same exit port

•Load balance mirror sessions across multiple exit ports

1357 11

812246 Core

IDS/IPS

Overview of Configuration

Steps

1. Configure the destination switch for remote traffic

mirroring.

2. Configure the source switch.

•Define the session number and the destination for the mirror

session on the source switch.

–Local traffic mirroring—port on the same switch

–Remote traffic mirroring—another 3500yl, 5400zl, or 6200yl Switch

•Define the source interface and the direction of traffic

–Ports, including mesh ports

–Static trunks

–Static virtual LANs (VLANs)

–Direction of traffic—inbound, outbound, or both directions

•Apply an optional Access Control List (ACL) to further select traffic.

–Select inbound traffic on the source interface with an extended or

standard ACL

Overview of Configuration

Steps

3. For remote traffic mirroring, enable jumbo frames to

mirror information fields larger than 1446 bytes

(untagged) or (tagged)

• On both source and destination switches

• Any infrastructure switches in between

• The end stations, in this case the IPS/IDS if you know the

originating frame was larger than 1522 bytes.

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M Mirror session originates on the

local 5400zl Switch.

The destination is on

the remote 3500yl

Switch.

ProCurve (config)# vlan <vlan_id> jumbo

Configuring the Destination

Switch

1. For remote traffic mirroring, configure the source and destination of

the mirror session on the destination switch

ProCurve_dst_switch(config)# mirror endpoint ip <src-ip-add>

<src-udp-port> <dst-ip-add> port <port#>

Options

IP address of the VLAN or subnet for the exit

port on the destination switch

<dst-ip-add>

The unique UDP port number to use for the

session

<src-udp-port>

Exit port on the destination switch

IP address of the VLAN or subnet on which the

mirrored traffic enters or leaves the source

switch

<port#>

<src-ip-add>

These settings

must match the

settings you will

configure on the

source switch.

Configuring the Source Switch

Remote traffic mirroring

2. Configure the source switch

—For remote traffic mirroring, identify the mirror session, the source,

and the destination.

–Replace <1-4> with the number to identify this mirror session.

–Assign an optional name if you want an easier way to identify the session.

–Ensure the other settings match those configured on the destination

switch.

ProCurve_source_switch(config)# mirror <1-4> [name <name>]

remote ip <src-ip-add> <src-udp-port> <dst-ip-add>

Other manuals for 6200YL

This manual suits for next models

Table of contents

Other HP Switch manuals

HP 1410 series User manual

HP 6125XLG User manual

HP ProCurve 6120G/XG User manual

HP J3128A AdvanceStack 10Base-T Hub-8E User manual

HP 445860-B21 - 10Gb Ethernet BL-c Switch User manual

HP 1810-24 User manual

HP A5830 Series Installation manual

HP 316095-B21 - StorageWorks Edge Switch 2/24 Instruction Manual

HP JG221A User manual

HP 5920 Installation manual

HP 5120-48G-PoE+ EI User instructions

HP 5920 User manual

HP J9661A User manual

HP ProCurve 2520-24-PoE Manual

HP 5600-48XG-4QSFP+ series User manual

HP 8/20q Installation and operating manual

HP ProCurve 4100 Series Guide

HP StorageWorks Edge Switch 2/24 Quick start guide

HP 6125G User manual

HP 12500 Series User manual

HP FlexFabric 5930 Series Installation manual

HP 1405-5 User manual

HP ProCurve J8708A Manual

Popular Switch manuals by other brands

URC

URC Total Control MFS-8 installation manual

Azbil

Azbil HPQ-D11 user manual

Sony

Sony DFS-900M operating instructions

SICK

SICK i17S operating instructions

F&F

F&F SZR-277 quick start guide

Shure

Shure UAMS/BK user guide

Dräger

Dräger X-zone Switch Off Instructions for use

Asco

Asco Joucomatic 349 Series manual

BT Mini Hub user guide

D-Link

D-Link DES-1226G manual

Johnson Controls

Johnson Controls FS80-C installation instructions

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Configuration guide

MicroNet

MicroNet SP1200A user manual

Ruijie

Ruijie RG-PF2920 Series Hardware installation and reference guide

Altinex

Altinex DA1914SX user guide

MiLAN

MiLAN MIL-SM2401M user guide

RJM

RJM MASTERMIND PBC/6X user manual

Atlas

Atlas MMK-KVM8 owner's manual