HP 6200YL Guide d'installation

The information contained herein is subject to change without notice.

The ProCurve 3500yl/5400zl/6200yl Switch

Software Update NPI Technical Training

NPI Technical Training

Version 1.0b

6 December 2006

The information contained herein is subject to change without notice.

Traffic Mirroring Section

Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems

Advantages

•Allows you to monitor traffic from the local switch or from multiple

remote switches

•Eliminates the need for a monitoring port on every switch

•Reduces the number of necessary security appliances

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

Traffic is selected based

on port, VLAN, or ACL.

Selected traffic is mirrored

to another switch.

Destination switch

forwards mirrored

traffic to IDS/IPS.

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Remote Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems from across the network and bring information back to

the analyzer.

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Guidelines for Using Traffic

Mirroring

Two types of traffic mirroring:

•Local mirroring—source and destination are on the same switch

•Remote mirroring—source and destination are on different switches

Each switch can be the:

•Originator for four mirror sessions, with the destination on either the

local switch or another switch

•Destination for 32 mirror sessions

Network

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

Four mirror sessions originate on

the local 5400zl Switch.

The 3500yl Switch can receive

up to 28 additional mirror

sessions.

Guidelines for Using Traffic

Mirroring

Continued

For local mirroring, configure exit ports:

•Configure multiple mirror sessions to use the same exit port

•Load balance mirror sessions across multiple exit ports

1357 11

812246 Core

IDS/IPS

Overview of Configuration

Steps

1. Configure the destination switch for remote traffic

mirroring.

2. Configure the source switch.

•Define the session number and the destination for the mirror

session on the source switch.

–Local traffic mirroring—port on the same switch

–Remote traffic mirroring—another 3500yl, 5400zl, or 6200yl Switch

•Define the source interface and the direction of traffic

–Ports, including mesh ports

–Static trunks

–Static virtual LANs (VLANs)

–Direction of traffic—inbound, outbound, or both directions

•Apply an optional Access Control List (ACL) to further select traffic.

–Select inbound traffic on the source interface with an extended or

standard ACL

Overview of Configuration

Steps

3. For remote traffic mirroring, enable jumbo frames to

mirror information fields larger than 1446 bytes

(untagged) or (tagged)

• On both source and destination switches

• Any infrastructure switches in between

• The end stations, in this case the IPS/IDS if you know the

originating frame was larger than 1522 bytes.

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M Mirror session originates on the

local 5400zl Switch.

The destination is on

the remote 3500yl

Switch.

ProCurve (config)# vlan <vlan_id> jumbo

Configuring the Destination

Switch

1. For remote traffic mirroring, configure the source and destination of

the mirror session on the destination switch

ProCurve_dst_switch(config)# mirror endpoint ip <src-ip-add>

<src-udp-port> <dst-ip-add> port <port#>

Options

IP address of the VLAN or subnet for the exit

port on the destination switch

<dst-ip-add>

The unique UDP port number to use for the

session

<src-udp-port>

Exit port on the destination switch

IP address of the VLAN or subnet on which the

mirrored traffic enters or leaves the source

switch

<port#>

<src-ip-add>

These settings

must match the

settings you will

configure on the

source switch.

Configuring the Source Switch

Remote traffic mirroring

2. Configure the source switch

—For remote traffic mirroring, identify the mirror session, the source,

and the destination.

–Replace <1-4> with the number to identify this mirror session.

–Assign an optional name if you want an easier way to identify the session.

–Ensure the other settings match those configured on the destination

switch.

ProCurve_source_switch(config)# mirror <1-4> [name <name>]

remote ip <src-ip-add> <src-udp-port> <dst-ip-add>

Autres manuels pour 6200YL

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels HP Changer

HP ProCurve 224 Manuel utilisateur

HP Procurve Series 4100GL Manuel utilisateur

HP 2/8q Fibre Channel Manuel utilisateur

HP ProCurve 3500-48 Instructions de montage

HP 438031-B21 - 1:10Gb Ethernet BL-c Switch Manuel utilisateur

HP J9575A Manuel utilisateur

HP ProCurve 1600M Manuel utilisateur

HP StorageWorks SN6000 Manuel utilisateur

HP 316095-B21 - StorageWorks Edge Switch 2/24 Mode d’emploi

HP StorageWorks 2/8-EL - SAN Switch Mode d’emploi

HP FlexFabric 5700 series Manuel utilisateur

HP A3100-8 v2 SI Manuel utilisateur

HP V1405-24 Instructions d'utilisation

HP E3800-24G-PoE+-2SFP+ Manuel utilisateur

HP zl2 Manuel utilisateur

HP 6125G Manuel d'installation

HP 5900 Manuel d'installation

HP 8/20q Manuel d'installation et d'exploitation

HP A5820X-24XG-SFP+ Instructions d'utilisation

HP 5300 Manuel utilisateur

HP ProCurve 2610-48 Manuel utilisateur

HP J3128A AdvanceStack 10Base-T Hub-8E Manuel d'installation et d'exploitation

HP 316095-B21 - StorageWorks Edge Switch 2/24 Manuel utilisateur

HP 5920 Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur