Monday, July 15, 2013

A new software update is now available. HP 5800 Switch Series, HP 5820 Switch Series

Products: HP 5800 Switch Series, HP 5820 Switch Series
Description: A new software update is now available.

JC099A - HP A5800-24G-PoE+ Switch
JC100A - HP A5800-24G Switch
JC101A - HP A5800-48G-PoE+ Switch with 2 Interfaces
JC102A - HP A5820X-24XG-SFP+ Switch
JC103A - HP A5800-24G-SFP Switch with 1 Interface Slots
JC104A - HP A5800-48G-PoE+ Switch with 1 Interface Slot
JC105A - HP A5800-48G Switch with 1 Interface Slot
JC106A - HP A5820X-14XG-SFP+ Switch with 2 Interface Slots
JG225A - HP 5800AF-48G Switch
JG219A - HP 5820AF-24XG Switch
JG254A - HP 5800-24G-PoE+ TAA-compliant Switch
JG255A - HP 5800-24G TAA-compliant Switch
JG242A - HP 5800-48G-PoE+ TAA-compliant Switch with 2 Interface Slots
JG256A - HP 5800-24G-SFP TAA-compliant Switch with 1 Interface Slot
JG257A - HP 5800-48G-PoE+ TAA-compliant Switch with 1 Interface Slot
JG258A - HP 5800-48G TAA-compliant Switch with 1 Interface Slot
JG243A - HP 5820-24XG-SFP+ TAA-compliant Switch
JG259A - HP 5820X-14XG-SFP+ TAA-compliant Switch with 2 Interface Slots + 1 OAA Slot

The software version is R1808P08.

Site to site Vpn configuration for check point

Wednesday, July 10, 2013

HP 5500 EI Switch Series, HP 4800G Switch Series,A new software update is now available

Products: HP 5500 EI Switch Series, HP 4800G Switch Series
Description: A new software update is now available.

JD373A - HP A5500-24G DC EI Switch
JD374A - HP A5500-24G-SFP EI Switch
JD375A - HP A5500-48G EI Switch
JD376A - HP A5500-48G-PoE EI Switch
JD377A - HP A5500-24G EI Switch
JD378A - HP A5500-24G-PoE EI Switch
JD379A - HP A5500-24G-SFP DC EI Switch
JG240A - HP A5500-48G-PoE+ EI Switch w 2 Intf Slt
JG241A - HP A5500-24G-PoE+ EI Switch w 2 Intf Slt
JD007A - HP E4800-24G Switch
JD008A - HP E4800-24G-PoE Switch
JD009A - HP E4800-24G-SFP Switch
JD010A - HP E4800-48G Switch
JD011A - HP E4800-48G-PoE Switch
JG252A - HP 5500-24G-PoE+ EI TAA-compliant Switch with 2 Interface Slots
JG253A - HP 5500-48G-PoE+ EI TAA-compliant Switch with 2 Interface Slots
JG250A - HP 5500-24G EI TAA-compliant Switch with 2 Interface Slots
JG249A - HP 5500-24G-SFP EI TAA-compliant Switch with 2 Interface Slots
JG251A - HP 5500-48G EI TAA-compliant Switch with 2 Interface Slots

The software version is R2220P02.

STP command for HP 5500 switch

5500 switch command for STP Edge port



[Hp-SW5500]interface Ethernet 1/3
[Hp-SW5500-Ethernet1/3]stp edged-port enable (Only for Pc or for Laptops, To avoid the STP calculation)
[Hp-SW5500-Ethernet1/3]quit
[Hp-SW5500]stp bpdu-protection   (BPDU guard in cisco devices to prevent the Loops, Same command in Hp device)

Wednesday, July 3, 2013

HP Networking Routers Maintenance Software HP 6600 Router Series


Products: HP Router Processing Modules, HP 6600 Router Series
Description: A new software update is now available.

JC177A - HP 6608 Router
JC177B - HP 6608 Router Chassis
JC178A - HP 6604 Router Chassis
JC178B - HP 6604 Router Chassis
JC496A - HP 6616 Router Chassis
JC165A - HP RPE-X1 A6600 Module

The software version is R3103P03.

Monday, June 10, 2013

Qos in Msr routers (it not good as cisco)

H3C>dis cur
#
version 5.20, Release 1910P02, Standard
#
sysname H3C
#
domain default enable system
#
telnet server enable
#
dar p2p signature-file cfa0:/p2p_default.mtd
#
port-security enable
#
acl number 2000
rule 0 permit
#
acl number 3500
rule 0 permit ip source 192.168.1.110 0
acl number 3501
rule 0 permit ip destination 192.168.1.110 0
acl number 3600
rule 0 permit ip source 192.168.1.111 0
acl number 3601
rule 0 permit ip destination 192.168.1.111 0
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
traffic classifier yewu-3600 operator and
if-match acl 3600
traffic classifier shipin1-3501 operator and
if-match acl 3501
traffic classifier yewu1-3601 operator and
if-match acl 3601
traffic classifier shipin-3500 operator and
if-match acl 3500
#
traffic behavior yewu-3600
queue af bandwidth 2048   //??????,??????????
traffic behavior shipin1-1536
queue af bandwidth 1536
car cir 2048 cbs 128000 ebs 0 green pass red discard  //????? 2M
traffic behavior yewu1-2048
queue af bandwidth 2048
traffic behavior shipin-1536
queue af bandwidth 1536
car cir 2048 cbs 128000 ebs 0 green pass red discard   //cbs??cir?7-10?
#
qos policy qose0-0
classifier shipin-3500 behavior shipin-1536
classifier yewu-3600 behavior yewu-3600
qos policy qose0-1
classifier shipin1-3501 behavior shipin1-1536
classifier yewu1-3601 behavior yewu1-2048
#
user-group system
#
local-user admin
password simple admin
authorization-attribute level 3
service-type telnet
#
cwmp
undo cwmp enable
#              
interface Aux0
async mode flow
link-protocol ppp
#
interface Cellular0/0
async mode protocol
link-protocol ppp
#
interface Ethernet0/0
port link-mode route
nat outbound 2000
qos max-bandwidth 4096  //???????????4M
ip address 192.168.0.222 255.255.255.0
qos reserved-bandwidth pct 100  //?????????????????????
qos lr outbound cir 4096 cbs 256000 ebs 0
qos apply policy qose0-0 outbound
#
interface Ethernet0/1
port link-mode route
qos max-bandwidth 4096  
ip address 192.168.1.1 255.255.255.0
qos reserved-bandwidth pct 100
qos lr outbound cir 4096 cbs 256000 ebs 0
qos apply policy qose0-1 outbound
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.0.100
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface tty 13
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
set authentication password simple admin
#
return

MSR 2010 Configure static routing + PPPOE Internet

#
Version 5.20, Release 1719
#
sysname H3C
#
??domain Default enable system
#
enable DNS proxy
DNS Server 202.103.44.150
DNS Server 202.103.0.117
#
acl number 2000
rule 0 permit 192.168.1.0 0.0.0.255 Source
deny rule 1
#
vlan 1
#
domain system
authentication ppp local
Access-limit disable
State Active
idle-cut disable
self-service-url disable
IP pool 1 192.168.1.2 192.168.1.250
#
dhcp-pool 0 Server IP
Network 192.168.10.0 mask 255.255.255.0
192.168.10.254 Gateway-List
List 202.103.44.150 DNS-
domain-name fgj
expired Day 10 hour 12
#
user-group system
#
local-user A101
Password simple six hundred and twenty-nine thousand four hundred and seventy-six
#
interface AUX0
async mode Flow
link-protocol ppp
#
interface Ethernet0 / 0
Port link-mode route
Description LAN
NAT outbound
NAT outbound 2000
PPPoE-Server bind Virtual-Template 1
IP address 58.51.60.88 255.255.255.128
#
interface Virtual-Template1
ppp authentication-mode pap
ppp chap user e111
ppp ipcp remote-address Forced
ppp ipcp DNS 202.103.44.150 202.103.0.117
remote address pool 1
IP address 192.168.1.1 255.255.255.0
#
interface Virtual-Ethernet
#
interface NULL0
#
interface Vlan-interface 1
PPPoE-Server bind Virtual-Template 1
#
interface Ethernet0 / 1
Port link-mode Bridge
#
interface Ethernet0 / 2
Port link Bridge-mode
#
interface Ethernet0 / 3
Port link-mode Bridge
#
interface Ethernet0 / 4
Port link-mode Bridge
#
IP route-static 0.0.0.0 0.0.0.0 58.51.60.1
#
dhcp enable
#
NMS primary Monitor-interface Ethernet0 / 0
#
user-interface aux 0
user-interface vty 0 4
#
return

int vlan 1
IP address 192.168.10.254 24
#

GVRP,VTP protocol and Trunk technology.GVRP=VTP

GVRP, VTP protocol and Trunk technology


GVRP, VTP protocol and Trunk technology among many similarities: they all belong to the second floor agreement or Layer; in these three specific configuration commands, involving most aspects of the configuration VLAN configuration is; three wide range of applications are designed to streamline the network maintenance personnel to configure and manage network devices, for frequent and extensive use of the command. But between them, they are fundamentally different, following on the three examples, respectively, its comprehensive introduction.
One, GVRP on the switch application in H3C
GVRP (GARP VLAN Registration Protocol, GARP VLAN Registration Protocol) is a GARP (Generic Attribute Registration Protocol, Generic Attribute Registration Protocol) for an application. GARP applications include GMRP and GVRP, which GMRP (GARP Multicast Registration Protocol, GARP Multicast Registration Protocol) is based on a GARP Multicast Registration Protocol. Used to maintain the switch multicast registration information. While maintaining device GVRP dynamic VLAN registration information and propagates the information to other devices.
GVRP enabled device can receive data from other devices VLAN registration information, and dynamically update the local VLAN registration information, including the current VLAN members, ports through which the VLAN members can be reached. It thus ensures that local VLAN registration information to other devices communication so that all the devices within the same LAN VLAN information. VLAN registration information propagated by GVRP includes both manually configured local static registration information, but also from other devices dynamic registration information. Here's an example introduction through GVRP protocol on the application of the H3C switch.













Figure 1 three H3C S3100 switch twenty-two Internet icon

Shown in Figure 1, three switch models are H3C S3100-52TP-SI, twenty-two interconnection. The connections between the devices are as follows:

1.  S3100-A Eth 1/0/1 < ----- > S3100-B Eth 1/0/1 
2.  S3100-B Eth 1/0/2 < ----- > S3100-C Eth 1/0/1 
3.  S3100-C Eth 1/0/2 < ----- > S3100-A Eth 1/0/2

In the configuration on S3100-A:

1.  [S3100-A] gvrp 
2.  / / Enable GVRP globally, by default, the global GVRP is disabled 
3.  [S3100-A] interface ethernet 1/0/1 
4.  [S3100-A-Ethernet1/0/1] port link-type trunk 
5.  [S3100-A-Ethernet1/0/1] port trunk permit vlan all 
6.  [S3100-A] interface ethernet 1/0/2 
7.  [S3100-A-Ethernet1/0/2] port link-type trunk 
8.  [S3100-A-Ethernet1/0/2] port trunk permit vlan all 
9.  / / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all VLAN through 
10.[S3100-A-Ethernet1/0/1] gvrp 
11.[S3100-A-Ethernet1/0/2] gvrp 
12./ / In the two functions enable GVRP on the Trunk port, by default port GVRP is disabled 

13.[S3100-A] vlan 2 
14./ / Configure static VLAN2 
15.In the configuration on S3100-B: 
16.[S3100-B] gvrp 
17./ / Enable GVRP globally 
18.[S3100-B] interface ethernet 1/0/1 
19.[S3100-B-Ethernet1/0/1] port link-type trunk 
20.[S3100-B-Ethernet1/0/1] port trunk permit vlan all 
21.[S3100-B] interface ethernet 1/0/2 
22.[S3100-B-Ethernet1/0/2] port link-type trunk 
23.[S3100-B-Ethernet1/0/2] port trunk permit vlan all 
24./ / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all the VLAN. 
25.[S3100-B-Ethernet1/0/1] gvrp 
26.[S3100-B-Ethernet1/0/2] gvrp 
27./ / In the two Enable GVRP on the Trunk port function 
28.[S3100-B-Ethernet1/0/2] gvrp registration fixed 
29./ / Configure port registration mode is Fixed, default, GVRP port registration mode to Normal 
30.[S3100-B] vlan 3 
31./ / Configure static VLAN3 
32.In the configuration on S3100-C: 
33.[S3100-C] gvrp 
34./ / Enable GVRP globally 
35.[S3100-C] interface ethernet 1/0/1 
36.[S3100-C-Ethernet1/0/1] port link-type trunk 
37.[S3100-C-Ethernet1/0/1] port trunk permit vlan all 
38.[S3100-C] interface ethernet 1/0/2 
39.[S3100-C-Ethernet1/0/2] port link-type trunk 
40.[S3100-C-Ethernet1/0/2] port trunk permit vlan all 
41./ / The two Ethernet ports Ethernet1/0/1 and Ethernet1/0/2 as a Trunk port and allows all the VLAN. 
42.[S3100-C-Ethernet1/0/1] gvrp 
43.[S3100-C-Ethernet1/0/2] gvrp 
44./ / Enable GVRP on the Trunk port function 
45.[S3100-C-Ethernet1/0/1] gvrp registration forbidden 
46.[S3100-C-Ethernet1/0/2] gvrp registration forbidden 
47./ / Configure the two ports are Forbidden registration mode 
48.[S3100-C] vlan 4 
49./ / Configure static VLAN4



hese three H3C configuration commands on the switch looked like the same, but in fact in the most critical areas will have subtle differences. Mainly in the configuration port registration mode, three ports on the switch configuration is not the same. S3100-A of the two ports is no special configuration register mode, but is used by default Normal mode, so the S3100-A of Ethernet1/0/1 and Ethernet1/0/2 port registration mode is Normal; S3100-B on Ethernet1/0/1 no special configuration register mode, so it is also the Normal mode, and S3100-B of Ethernet1/0/2 port registration mode configuration into Fixed mode; S3100-C became a two-port configuration on Forbidden mode. So that several ports in the actual operation, the propagation of VLAN mechanism will vary.
You can use the command "display vlan dynamic" to see the validation of each port operating mechanism, the dynamic parameters of the command is to display the system dynamically created VLAN number and number, dynamic VLAN through GVRP is generated under or through Radius server hair VLAN. Below is performed separately on all three switches "display vlan dynamic" display results:
1.  [S3100-A] display vlan dynamic  
2.  Now, the following dynamic VLAN exist (s):  
3.  3  
4.  / / Display the S3100-A dynamic VLAN information on  
5.  [S3100-B] display vlan dynamic  
6.  Now, the following dynamic VLAN exist (s):  
7.  2  
8.  / / Display the S3100-B dynamic VLAN information on  
9.  [S3100-C] display vlan dynamic  
10.Now, the following dynamic VLAN exist (s):  
11.No dynamic vlans exist!  
12./ / Display the S3100-C dynamic VLAN information on 
The output from the above results can be seen, S3100-A and S3100-B can be exchanged between the two switches are created VLAN, this is because the Ethernet1/0/1 S3100-A and S3100-B's Ethernet1 / 0 / a port of registration mode is Normal mode, this mode allows the port to dynamically register and propagate dynamic and static VLAN information. But in the S3100-A and S3100-B is not visible on the two switches S3100-C switch created VLAN 4, while S3100-C, also see S3100-A and S3100-B VLAN created two switches 2 and VLAN 3 information, this is because although respectively S3100-A and S3100-B's Ethernet1/0/2 port configured on Normal and Fixed mode, but the S3100-C two ports registered patterns are Forbidden, so the S3100 -C and the other between the two switches will not exchange all outside except VLAN 1 VLAN information. Port GVRP registration mode has the following three:
Normal mode: Allows the port to dynamically register and deregister VLAN, dynamic and static VLAN propagate information.
Fixed Mode: Disables the port to dynamically register and deregister VLAN, only propagate a static VLAN information is not propagated dynamic VLAN information. That is set to Fixed mode Trunk port allows all VLAN even pass through a VLAN can only be manually configured that part.
Forbidden Mode: Disables the port to dynamically register and deregister VLAN, VLAN1 does not propagate anything other VLAN information. That is configured to Forbidden - Trunk port even allows all VLAN to pass through a VLAN can only be VLAN1.
In addition, through a number of "display gvrp" command to display GVRP configuration, operation, or view the display and verify the configuration. Command is as follows:
1.  [H3C-S3100] display gvrp status  
2.      / / Display the global GVRP status information  
3.  [H3C-S3100] display gvrp statistics [interface interface-list]  
4.      / / Display the GVRP statistics  
5.      [H3C-S3100] display gvrp state interface interface-type interface-number vlan vlan-id   
6.      / / Display the GVRP state machine information      
7.  [H3C-S3100] display gvrp vlan-operation interface interface-type interface-number  
8.      / / Display current information about dynamic VLAN operations 








Wednesday, May 29, 2013

Simple ospf configuration for MSR routers

Msr router configuration for OSPF

ospf 1
 import-route static         -------------   redistribution of static route to ospf network
 area 0.0.0.1 --------------------------------Area 1 configuration
 description Ospf area 1 configuration  ---------------- description
  network 10.161.0.0 0.0.31.255  ----------- published network in ospf
  network 172.16.10.192 0.0.0.63
  network 172.16.13.172 0.0.0.3
  network 172.16.15.172 0.0.0.3
  stub  -----------------------------------Stub configuration  in msr routers


same configuration in Cisco devices 

#config t
#router ospf 1
network 10.161.0.0 0.0.31.244 area 1
Network 172.16.10.192 0.0.0.63 area 1
Stub
#



(Note : in MSR AD values are different  static route is having default 60 as in cisco it is 1) 

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...