HP 6200YL Guida all'installazione

The information contained herein is subject to change without notice.

The ProCurve 3500yl/5400zl/6200yl Switch

Software Update NPI Technical Training

NPI Technical Training

Version 1.0b

6 December 2006

The information contained herein is subject to change without notice.

Traffic Mirroring Section

Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems

Advantages

•Allows you to monitor traffic from the local switch or from multiple

remote switches

•Eliminates the need for a monitoring port on every switch

•Reduces the number of necessary security appliances

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

Traffic is selected based

on port, VLAN, or ACL.

Selected traffic is mirrored

to another switch.

Destination switch

forwards mirrored

traffic to IDS/IPS.

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Remote Traffic Mirroring

Allows you to monitor traffic to detect threats or troubleshoot

problems from across the network and bring information back to

the analyzer.

Network

Stations 5400zl Switch

3500yl Switch

IDS/IPS*

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

*Intrusion detection system (IDS)/ Intrusion prevention system (IPS)

Guidelines for Using Traffic

Mirroring

Two types of traffic mirroring:

•Local mirroring—source and destination are on the same switch

•Remote mirroring—source and destination are on different switches

Each switch can be the:

•Originator for four mirror sessions, with the destination on either the

local switch or another switch

•Destination for 32 mirror sessions

Network

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M

Four mirror sessions originate on

the local 5400zl Switch.

The 3500yl Switch can receive

up to 28 additional mirror

sessions.

Guidelines for Using Traffic

Mirroring

Continued

For local mirroring, configure exit ports:

•Configure multiple mirror sessions to use the same exit port

•Load balance mirror sessions across multiple exit ports

1357 11

812246 Core

IDS/IPS

Overview of Configuration

Steps

1. Configure the destination switch for remote traffic

mirroring.

2. Configure the source switch.

•Define the session number and the destination for the mirror

session on the source switch.

–Local traffic mirroring—port on the same switch

–Remote traffic mirroring—another 3500yl, 5400zl, or 6200yl Switch

•Define the source interface and the direction of traffic

–Ports, including mesh ports

–Static trunks

–Static virtual LANs (VLANs)

–Direction of traffic—inbound, outbound, or both directions

•Apply an optional Access Control List (ACL) to further select traffic.

–Select inbound traffic on the source interface with an extended or

standard ACL

Overview of Configuration

Steps

3. For remote traffic mirroring, enable jumbo frames to

mirror information fields larger than 1446 bytes

(untagged) or (tagged)

• On both source and destination switches

• Any infrastructure switches in between

• The end stations, in this case the IPS/IDS if you know the

originating frame was larger than 1522 bytes.

5400zl Switch

3500yl Switch

IPS/IDS

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xl module

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkMode T15 T16M M

hpprocurve

Gig-T/GBIC

xlmodule

J4907A xlmodule

10/100/1000-TPorts(1-14,15T,16T)-portsareIEEEAutoMDI/MDI-X Dual-PersonalityPorts:10/100/1000-T(T)orMini-GBIC(M)

8 14

Useonlyone(TorM)foreachDual-PersonalityPort

LinkMode

LinkModeT15 T16M M Mirror session originates on the

local 5400zl Switch.

The destination is on

the remote 3500yl

Switch.

ProCurve (config)# vlan <vlan_id> jumbo

Configuring the Destination

Switch

1. For remote traffic mirroring, configure the source and destination of

the mirror session on the destination switch

ProCurve_dst_switch(config)# mirror endpoint ip <src-ip-add>

<src-udp-port> <dst-ip-add> port <port#>

Options

IP address of the VLAN or subnet for the exit

port on the destination switch

<dst-ip-add>

The unique UDP port number to use for the

session

<src-udp-port>

Exit port on the destination switch

IP address of the VLAN or subnet on which the

mirrored traffic enters or leaves the source

switch

<port#>

<src-ip-add>

These settings

must match the

settings you will

configure on the

source switch.

Configuring the Source Switch

Remote traffic mirroring

2. Configure the source switch

—For remote traffic mirroring, identify the mirror session, the source,

and the destination.

–Replace <1-4> with the number to identify this mirror session.

–Assign an optional name if you want an easier way to identify the session.

–Ensure the other settings match those configured on the destination

switch.

ProCurve_source_switch(config)# mirror <1-4> [name <name>]

remote ip <src-ip-add> <src-udp-port> <dst-ip-add>

Altri manuali per 6200YL

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali HP Interruttore

HP ProCurve Series 2810 Manuale utente

HP 5830 series Manuale utente

HP 6125XLG Manuale utente

HP StorageWorks 2/140 - Director Switch Manuale utente

HP 376227-B21 - ProLiant InfiniBand 4x Fabric Copper... Guida di riferimento rapido

HP 2520 Series Istruzioni utente

HP 1920 Gigabit Ethernet Switch Series Manuale utente

HP PROCURVE 2910AL Manuale utente

HP 262586-B21 - IP Console Switch 3x1x16 KVM Manuale utente

HP 5300 Manuale utente

HP A7533A - Brocade 4Gb SAN Switch Base Manuale di servizio

HP 6125G Manuale di installazione

HP StorageWorks 2/140 - Director Switch Manuale utente

HP E4510-48G Manuale operativo

HP A5120 EI Series Manuale utente

HP FlexFabric 12900 series Manuale utente

HP 2920 Series Manuale utente

HP FlexNetwork 5140 EI Series Manuale utente

HP A3100-8 v2 SI Manuale di installazione

HP Aruba Instant On 1930 Istruzioni per il montaggio

HP ProCurve Switch 1800-24G Manuale utente

HP FlexFabric 5700 series Manuale utente

HP ProCurve 8212zl Series Manuale

HP 445860-B21 - 10Gb Ethernet BL-c Switch Manuale utente

Manuali Interruttore popolari di altre marche

URC

URC Total Control MFS-8 Manuale utente

Azbil

Azbil HPQ-D11 Manuale utente

Sony

Sony DFS-900M Manuale utente

SICK

SICK i17S Manuale utente

F&F

F&F SZR-277 Manuale utente

Shure

Shure UAMS/BK Manuale utente

Dräger

Dräger X-zone Switch Off Manuale utente

Asco

Asco Joucomatic 349 Series Manuale utente

BT Mini Hub Manuale utente

D-Link

D-Link DES-1226G Manuale utente

Johnson Controls

Johnson Controls FS80-C Manuale utente

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuale utente

MicroNet

MicroNet SP1200A Manuale utente

Ruijie

Ruijie RG-PF2920 Series Manuale di installazione e funzionamento

Altinex

Altinex DA1914SX Manuale utente

MiLAN

MiLAN MIL-SM2401M Manuale utente

RJM

RJM MASTERMIND PBC/6X Manuale utente

Atlas

Atlas MMK-KVM8 Manuale utente