Release Notes: Version F.05.55 Software for the ProCurve Series 2300 and 2500 Switches These release notes include information on the following: ■ Downloading switch software and Documentation from the Web (Page 1) ■ Enhancements in Release F.05.xx (Page 7) ■ Enhancements in Release F.04.08 (Page 69) ■ Enhancements in Release F.02.11 (Page 145) ■ Enhancements in Release F.02.02 (Page 161) ■ Updates and corrections for the Management and Configuration Guide (page 217) ■ Software fixes for Series 2500 switch software releases (page 223) Note Starting with Software version F.05.50, FEC trunks (Cisco Systems’ FastEtherChannel for aggregated links) are no longer supported, and generation of CDP (Cisco Discovery Protocol) packets are no longer supported. In their place are IEEE standards based LACP aggregated links (as well as statically configured trunks) and generation of LLDP packets for device discovery. For more information, please see: ftp://ftp.hp.com/pub/networking/software/LLDP-and-LACP-statement.pdf. Caution: Archive Pre-F. 05.17 Configuration Files A configuration file saved while using release F.05.17 or later software is not backward-compatible with earlier software versions. For this reason, ProCurve recommends that you archive the most recent configuration on switches using software releases earlier than F.05.17 before you update any switches to software release F.05.17 or later. For the latest information on using your ProCurve product please check its "Frequently Asked Questions" (FAQ) page. Go to the ProCurve Web site at http://www.procurve.com. Click on Technical support, then FAQs and select your product from the list presented. © Copyright 2001, 2006 Hewlett-Packard Disclaimer Company, LP. The information contained herein The information contained in this document is subject to is subject to change without notice. change without notice. HEWLETT-PACKARD COMPANY MAKES NO WARRANTY Publication Number OF ANY KIND WITH REGARD TO THIS MATERIAL, 5990-3102 INCLUDING, BUT NOT LIMITED TO, THE IMPLIED May, 2006 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or Applicable Products consequential damages in connection with the furnishing, ProCurve Switch 2512 (J4812A) performance, or use of this material. ProCurve Switch 2524 (J4813A) The only warranties for HP products and services are set ProCurve Switch 2312 (J4817A) forth in the express warranty statements accompanying ProCurve Switch 2324 (J4818A) such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Trademark Credits Hewlett-Packard assumes no responsibility for the use or Microsoft, Windows, Windows 95, and Microsoft Windows reliability of its software on equipment that is not furnished NT are registered trademarks of Microsoft Corporation. by Hewlett-Packard. Software Credits Warranty SSH in the ProCurve Series 2500 switches is based on the See the Customer Support/Warranty booklet included with OpenSSH software toolkit. For more information on the product. OpenSSH, visit http://www.openssh.com. A copy of the specific warranty terms applicable to your Hewlett-Packard products and replacement parts can be obtained from your HP Sales and Service Office or authorized dealer. Hewlett-Packard Company 8000 Foothills Boulevard, m/s 5552 Roseville, California 95747-5552 http://www.procurve.com ii Contents Software Management Downloading Switch Documentation and Software . 1 Downloading Software to the Switch . 2 TFTP Download from a Server . 3 Xmodem Download From a PC or Unix Workstation . 4 Saving Configurations While Using the CLI . 5 ProCurve Switch, Routing Switch, and Router Software Keys . 6 Enhancements in Release F.05.xx Implementation of LLDP . .8 LLDP Terminology . 8 General LLDP Operation . 9 LLDP Configuration Options . 9 LLDP Standards Compatibility . 10 LLDP Operating Rules . 10 LLDP Operation and Commands . 11 Enabling or Disabling LLDP Operation on the Switch. 12 Disable Auto-MDIX . 13 New Console Option . .13 Clarification of Time Zone Issue . 14 Syslog Overview . 15 Syslog Operation . 15 Viewing the Syslog Configuration . 17 Configuring Syslog Logging . 17 Operating Notes for Syslog . 18 Isolated Port Groups (Enhanced) . 18 Options for Isolated Port Groups . 19 Operating Rules for Port Isolation . 20 Configuring Port Isolation on the Switch . 21 Steps for Configuring Port Isolation . 21 Configuring and Viewing Port-Isolation . 22 iii Messages Related to Port-Isolation Operation . 25 Troubleshooting Port-Isolation Operation . 26 Configuring Port-Based Access Control (802.1X) . 26 Overview . 26 Why Use Port-Based Access Control? . 26 General Features . 27 How 802.1X Operates . 28 Authenticator Operation . 28 Switch-Port Supplicant Operation . 29 Terminology . 30 General Operating Rules and Notes . 32 General Setup Procedure for Port-Based Access Control (802.1X) . 33 Do These Steps Before You Configure 802.1X Operation . 33 Overview: Configuring 802.1X Authentication on the Switch . 33 Configuring Switch Ports as 802.1X Authenticators . 35 1. Enable 802.1X Authentication on Selected Ports . 36 3. Configure the 802.1X Authentication Method . 39 4. Enter the RADIUS Host IP Address(es) . 40 5. Enable 802.1X Authentication on the Switch . 40 802.1X Open VLAN Mode . 41 Introduction . 41 Use Models for 802.1X Open VLAN Modes . 42 Operating Rules for Authorized-Client and Unauthorized-Client VLANs . 45 Setting Up and Configuring 802.1X Open VLAN Mode . 47 802.1X Open VLAN Operating Notes . 51 Option For Authenticator Ports: Configure Port-Security To Allow Only 802.1X Devices . 52 Configuring Switch Ports To Operate As Supplicants for 802.1X Connections to Other Switches 54 Displaying 802.1X Configuration, Statistics, and Counters . 58 Show Commands for Port-Access Authenticator . 58 Viewing 802.1X Open VLAN Mode Status . 60 Show Commands for Port-Access Supplicant . 63 How RADIUS/802.1X Authentication Affects VLAN Operation . 64 Messages Related to 802.1X Operation . 67 iv IGMP Version 3 Support . 68 Enhancements in Release F.04.08 Using Friendly (Optional) Port Names . ..