HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

 
MatrixQN
Visitor

HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Dear all,

I have 2 problems with HPE 5510 HI Switch, the first one is the routing of the MGMT port. I have a MGMT VLAN on another switch and secure by a Hardware Firewall, when I connected the MGMT port to MGMT VLAN, the traffic go directly from switch to that VLAN. How to config for the traffic go to Firewall throught MGMT port to MGMT VLAN?

Secondly, after configuration the https, the ssl show error:

This site can’t provide a secure connection

192.168.6.50 uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH
HIDE DETAILS
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite. This is likely to be caused when the server needs RC4, which is no longer considered secure.
 

Then, I undo https enable, i enable http

But, the login always show failed on http login.

Please help me!

Regards,

MatrixQN

 

5 REPLIES
Ian Vaughan
Honored Contributor

Re: HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Howdy,

Regarding the "out of band" management port -

If you find that it is very much "in band" on your device, the best course of action is to spin up a vpn-instance or VRF called "mgmt" and put the interface into that segregated network. I do this for all of them now so it doesn't matter if Mgmt0 interface initialy turns up in the global routing table as it gets cut over into the mgmt VPN as part of the build.

The odd behavior of the https access -

You can define an SSL server policy so that only certain ciphers etc are offered to clients

You could also run through the "fips mode enable" dialogue and lock down all of the insecure services as well as disabling the less secure ciphers

These are all covered in the security configuration guide

I hope that gives you a few clues

Thanks

Ian

Hope that helps - please click "Thumbs up" for Kudos if it does
## ---------------------------------------------------------------------------##
Which is the only cheese that is made backwards?
Edam!
Tweets: @2techie4me
MatrixQN
Visitor

Re: HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Thank Mr. Ian,

I have updated to the lastest firmware, the https is ok now. I will test with your sugestion about the MGMT.

Regards,

MatrixQN

MatrixQN
Visitor

Re: HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Hi Ian,

Could you provide me step by step about how to config the MGMT port?

Regards,

 

MatrixQN
Visitor

Re: HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Hi all,

I'm crazy now, i Config HTTP login as follow:

#system-view

#ip http enable

#local-user admin

#password simple admin

#authorization-attribute user-role level-3 (test with network-admin and network-operator)

#service-type http https

#quit

When I login to webbased, I always get the error: Failed to log in.

Please help!

Ian Vaughan
Honored Contributor

Re: HPE 5510 24G 4SFP+ HI 1-slot Switch JH145A-1111P01

Howdy,

To put an interface into a vpn instance it goes something like:

[sw] ip vpn-instance mgmt

[sw-vpn-instance-mgmt] route-distinguisher 111:1

[sw-vpn-instance-mgmt] vpn-target 111:1

[sw-vpn-instance-mgmt] quit

[sw] interface M-Gigabit 0/0/0

[sw-M-Gig0/0/0] ip binding vpn-instance mgmt

# Ip address will be removed from the interface as it is bound into the VPN

[sw-M-Gig0/0/0] ip address x.x.x.x /nn

There's a decent guide to vpn-instances or VRF's as well as route leaking here

HTH

Kudos and Solved buttons help others find useful posts - don't be shy about clicking!

Thanks

Ian

Hope that helps - please click "Thumbs up" for Kudos if it does
## ---------------------------------------------------------------------------##
Which is the only cheese that is made backwards?
Edam!
Tweets: @2techie4me