HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 5
... Enabling the Storage and Display of Security Credentials 2-11 Security Settings that Can Be Saved 2-11 Local Manager and Operator Passwords 2-12 Password Command Options 2-12 SNMP Security Credentials 2-13 802.1X Port-Access Credentials 2-14 TACACS+ Encryption Key Authentication 2-15 RADIUS... Important 2-23 Front-Panel Button Functions 2-24 Clear Button 2-25 Reset Button 2-25 Restoring the Factory Default Configuration 2-25 Configuring Front-Panel Security 2-27 Disabling the Clear Password Function of the Clear Button . . . 2-29 Re-Enabling the Clear Button and Setting or Changing...
... Enabling the Storage and Display of Security Credentials 2-11 Security Settings that Can Be Saved 2-11 Local Manager and Operator Passwords 2-12 Password Command Options 2-12 SNMP Security Credentials 2-13 802.1X Port-Access Credentials 2-14 TACACS+ Encryption Key Authentication 2-15 RADIUS... Important 2-23 Front-Panel Button Functions 2-24 Clear Button 2-25 Reset Button 2-25 Restoring the Factory Default Configuration 2-25 Configuring Front-Panel Security 2-27 Disabling the Clear Password Function of the Clear Button . . . 2-29 Re-Enabling the Clear Button and Setting or Changing...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 20
... Default Settings Flow Control (802.3x) File Transfers Friendly Port Names GVRP Identity-Driven Management (IDM) IGMP Interface Access (Telnet, Console/Serial, Web) IP Addressing Jumbo Packets LACP LLDP LLDP-MED Loop Protection MAC Address Management MAC Lockdown MAC Lockout MAC-based Authentication Monitoring and Analysis Network Management Applications (SNMP) Passwords and Password...
... Default Settings Flow Control (802.3x) File Transfers Friendly Port Names GVRP Identity-Driven Management (IDM) IGMP Interface Access (Telnet, Console/Serial, Web) IP Addressing Jumbo Packets LACP LLDP LLDP-MED Loop Protection MAC Address Management MAC Lockdown MAC Lockout MAC-based Authentication Monitoring and Analysis Network Management Applications (SNMP) Passwords and Password...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 25
... references are to prepare the switch for details. Access Security and Switch Authentication Features Default Setting Security Guidelines More Information and Configuration Details no password Configuring a local Manager password is indicated). For more in reducing the possibility of unauthorized access Password Security" on page through the switch's Web browser and console (CLI and 2-6 Menu...
... references are to prepare the switch for details. Access Security and Switch Authentication Features Default Setting Security Guidelines More Information and Configuration Details no password Configuring a local Manager password is indicated). For more in reducing the possibility of unauthorized access Password Security" on page through the switch's Web browser and console (CLI and 2-6 Menu...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 26
... Guidelines More Information and Configuration Details The default remote management protocols enabled on the switch is incomplete Configuration Guide. This enables you can gain access to the switch. • switch SSH and user password authentication: this case, the switch authenticates itself... the Web browser interface through encrypted, "Quick Start: Using the authenticated transactions of the Management and Configuration Guide for your passwords, secure and encrypted protocols such browser access, refer to the as SSH and SSL (see below for blocking unauthorized refer to...
... Guidelines More Information and Configuration Details The default remote management protocols enabled on the switch is incomplete Configuration Guide. This enables you can gain access to the switch. • switch SSH and user password authentication: this case, the switch authenticates itself... the Web browser interface through encrypted, "Quick Start: Using the authenticated transactions of the Management and Configuration Guide for your passwords, secure and encrypted protocols such browser access, refer to the as SSH and SSL (see below for blocking unauthorized refer to...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 27
...1-10 between the switch and management station clients Chapter 9, "Configuring capable of Configuration Guide, your network. TACACS+ uses username/password sets with associated privilege levels to grant or deny access through the following : • Telnet and other terminal emulation applications ...to a TACACS+ server for the necessary authentication service, it defaults to the switch Authorized IP Managers" across the network through either the switch's serial (console) port or remotely, with user password authentication. disabled This application uses a central server to allow ...
...1-10 between the switch and management station clients Chapter 9, "Configuring capable of Configuration Guide, your network. TACACS+ uses username/password sets with associated privilege levels to grant or deny access through the following : • Telnet and other terminal emulation applications ...to a TACACS+ server for the necessary authentication service, it defaults to the switch Authorized IP Managers" across the network through either the switch's serial (console) port or remotely, with user password authentication. disabled This application uses a central server to allow ...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 31
... includes both configurable security options and physical access to the factory default configuration (and erasing any non-default configuration settings) 1-9 In its default configuration the switch is not used by unauthorized persons as an opportunity for these actions: • clearing (removing) local password protection • rebooting the switch • restoring the switch to the...
... includes both configurable security options and physical access to the factory default configuration (and erasing any non-default configuration settings) 1-9 In its default configuration the switch is not used by unauthorized persons as an opportunity for these actions: • clearing (removing) local password protection • rebooting the switch • restoring the switch to the...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 32
.../Telnet sessions The wizard can also be used to configure the Clear and Reset buttons, refer to view the pre-configured defaults and see page 1-12). For full details on page 2-23. Security Overview Getting Started with Access Security Keeping the switch...Configure the Clear button to prevent unauthorized physical access. It guides you can do the following switch operations or protocols: ■ setting local passwords ■ restricting SNMP access ■ enabling/disabling Telnet ■ enabling/disabling SSH ■ enabling/disabling remote Web management ■ restricting...
.../Telnet sessions The wizard can also be used to configure the Clear and Reset buttons, refer to view the pre-configured defaults and see page 1-12). For full details on page 2-23. Security Overview Getting Started with Access Security Keeping the switch...Configure the Clear button to prevent unauthorized physical access. It guides you can do the following switch operations or protocols: ■ setting local passwords ■ restricting SNMP access ■ enabling/disabling Telnet ■ enabling/disabling SSH ■ enabling/disabling remote Web management ■ restricting...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 44
...Credentials 2-10 Enabling the Storage and Display of Security Credentials 2-11 Security Settings that Can Be Saved 2-11 Local Manager and Operator Passwords 2-12 Password Command Options 2-12 SNMP Security Credentials 2-13 802.1X Port-Access Credentials 2-14 TACACS+ Encryption Key Authentication 2-15 RADIUS Shared-Secret...23 When Security Is Important 2-23 Front-Panel Button Functions 2-24 Clear Button 2-25 Reset Button 2-25 Restoring the Factory Default Configuration 2-25 Configuring Front-Panel Security 2-27 Disabling the Clear Password Function of the Clear Button . . . 2-29 2-1
...Credentials 2-10 Enabling the Storage and Display of Security Credentials 2-11 Security Settings that Can Be Saved 2-11 Local Manager and Operator Passwords 2-12 Password Command Options 2-12 SNMP Security Credentials 2-13 802.1X Port-Access Credentials 2-14 TACACS+ Encryption Key Authentication 2-15 RADIUS Shared-Secret...23 When Security Is Important 2-23 Front-Panel Button Functions 2-24 Clear Button 2-25 Reset Button 2-25 Restoring the Factory Default Configuration 2-25 Configuring Front-Panel Security 2-27 Disabling the Clear Password Function of the Clear Button . . . 2-29 2-1
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 46
... to "Using SNMP To View and Configure Switch Authentication Features" on -clear factory-reset password-recovery Default Menu none - Notes Overview Configuring Username and Password Security Overview Feature Set Usernames Set a Password Delete Password Protection show front-panel-security front-panel-security password-clear reset-on page 5-21. enabled - CLI Web - Console access includes both the...
... to "Using SNMP To View and Configure Switch Authentication Features" on -clear factory-reset password-recovery Default Menu none - Notes Overview Configuring Username and Password Security Overview Feature Set Usernames Set a Password Delete Password Protection show front-panel-security front-panel-security password-clear reset-on page 5-21. enabled - CLI Web - Console access includes both the...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 47
...the CLI, a prompt appears for either of access to the console interface will now be determined by which password is started for a password. That is the default level. A Manager password pair will be needed for your system). 2. If you set prior to starting the current console session,...enable command if you have protected both the Manager and Operator levels, the level of the following to the prompt. Configuring Username and Password Security Overview Level Actions Permitted Manager: Access to the Status and Counters menu, the Event Log, and the CLI*, but no ...
...the CLI, a prompt appears for either of access to the console interface will now be determined by which password is started for a password. That is the default level. A Manager password pair will be needed for your system). 2. If you set prior to starting the current console session,...enable command if you have protected both the Manager and Operator levels, the level of the following to the prompt. Configuring Username and Password Security Overview Level Actions Permitted Manager: Access to the Status and Counters menu, the Event Log, and the CLI*, but no ...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 54
...the configuration settings in the running -config file. Enabling the Storage and Display of the currently configured manager and operator usernames and passwords, RADIUS shared secret keys, SNMP and 802.1X authenticator (port-access) security credentials, and SSH client public-keys in the ... the Management and Configuration Guide. ■ "Configuring Local Password Security" on page 2-11 are used by the switch to authenticate SSH clients that Can Be Saved" on page 2-6 in the Management and Configuration Guide. Default: The security credentials described in "Security Settings that try...
...the configuration settings in the running -config file. Enabling the Storage and Display of the currently configured manager and operator usernames and passwords, RADIUS shared secret keys, SNMP and 802.1X authenticator (port-access) security credentials, and SSH client public-keys in the ... the Management and Configuration Guide. ■ "Configuring Local Password Security" on page 2-11 are used by the switch to authenticate SSH clients that Can Be Saved" on page 2-6 in the Management and Configuration Guide. Default: The security credentials described in "Security Settings that try...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 58
... can use RADIUS servers as "shared secret" or "secret" key.) For more information, see "Password Command Options" on the switch. If the switch fails to connect to any TACACS+ server, it defaults to its own locally assigned passwords for authentication control if it has been configured to contact a designated TACACS+ server for management...
... can use RADIUS servers as "shared secret" or "secret" key.) For more information, see "Password Command Options" on the switch. If the switch fails to connect to any TACACS+ server, it defaults to its own locally assigned passwords for authentication control if it has been configured to contact a designated TACACS+ server for management...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 66
.... The front-panel Security features are designed to prevent malicious users from: ■ Resetting the password(s) by pressing the Clear button ■ Restoring the factory default configuration by using the Reset+Clear button combination. ■ Gaining management access to the switch by... situations which require a higher level of security for clearing the password (Clear button) or restoring the switch to its factory default configuration (Reset+Clear buttons together). Configuring Username and Password Security Front-Panel Security Front-Panel Security The front-panel security ...
.... The front-panel Security features are designed to prevent malicious users from: ■ Resetting the password(s) by pressing the Clear button ■ Restoring the factory default configuration by using the Reset+Clear button combination. ■ Gaining management access to the switch by... situations which require a higher level of security for clearing the password (Clear button) or restoring the switch to its factory default configuration (Reset+Clear buttons together). Configuring Username and Password Security Front-Panel Security Front-Panel Security The front-panel security ...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 68
...To Reboot the Switch Restoring the Factory Default Configuration You can also use the Reset button together with the Clear button (Reset+Clear) to reboot. Clear Reset Figure 2-9. To do this: 1. Clear Reset Figure 2-8. Configuring Username and Password Security Front-Panel Security Clear Button ...the Reset button. Clear Reset 2-25 Press the Clear Button for Five Seconds To Reset the Password(s) Reset Button Pressing the Reset button alone for one second causes the switch to restore the factory default configuration for five seconds resets the password(s) configured on the switch.
...To Reboot the Switch Restoring the Factory Default Configuration You can also use the Reset button together with the Clear button (Reset+Clear) to reboot. Clear Reset Figure 2-9. To do this: 1. Clear Reset Figure 2-8. Configuring Username and Password Security Front-Panel Security Clear Button ...the Reset button. Clear Reset 2-25 Press the Clear Button for Five Seconds To Reset the Password(s) Reset Button Pressing the Reset button alone for one second causes the switch to restore the factory default configuration for five seconds resets the password(s) configured on the switch.
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 69
While holding the Reset button, press and hold the Clear button for greater then 2.5 seconds, configuration will be cleared, and the switch will reboot. This process restores the switch configuration to reboot. Clear Reset 4. Configuring Username and Password Security Front-Panel Security 2. Clear Reset 2-26 If the Clear button is held for five seconds. It can take approximately 20-25 seconds for the switch to the factory default settings. . Clear Reset 3. Release the Reset button.
While holding the Reset button, press and hold the Clear button for greater then 2.5 seconds, configuration will be cleared, and the switch will reboot. This process restores the switch configuration to reboot. Clear Reset 4. Configuring Username and Password Security Front-Panel Security 2. Clear Reset 2-26 If the Clear button is held for five seconds. It can take approximately 20-25 seconds for the switch to the factory default settings. . Clear Reset 3. Release the Reset button.
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 70
...button does not remove the local usernames and passwords configured on the switch (and thus removes local password protection from the switch). Disabled means that pressing the Clear button erases the local usernames and passwords configured on the switch. (Default: Enabled.) 2-27 Disabling the Clear button... the Clear button when used alone, but does not restore the switch's factory default configuration settings. (Use of the Reset button alone, to reboot the switch after clearing any usernames and passwords in the switch have been cleared. • Modify the operation of the Reset...
...button does not remove the local usernames and passwords configured on the switch (and thus removes local password protection from the switch). Disabled means that pressing the Clear button erases the local usernames and passwords configured on the switch. (Default: Enabled.) 2-27 Disabling the Clear button... the Clear button when used alone, but does not restore the switch's factory default configuration settings. (Use of the Reset button alone, to reboot the switch after clearing any usernames and passwords in the switch have been cleared. • Modify the operation of the Reset...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 71
... to be used with the Clear button (page 2-25) to reset the switch to its factory-default configuration and create a new password. If you disable password-recovery and then lose the password, you press the Clear button on the front panel, the manager and operator usernames and... more information about storing security credentials, see "Saving Security Credentials in a Config File" on the switch. The Default Front-Panel Security Settings 2-28 Configuring Username and Password Security Front-Panel Security Reset-on-clear: Shows the status of the switch. When reset-on-clear is disabled ...
... to be used with the Clear button (page 2-25) to reset the switch to its factory-default configuration and create a new password. If you disable password-recovery and then lose the password, you press the Clear button on the front panel, the manager and operator usernames and... more information about storing security credentials, see "Saving Security Credentials in a Config File" on the switch. The Default Front-Panel Security Settings 2-28 Configuring Username and Password Security Front-Panel Security Reset-on-clear: Shows the status of the switch. When reset-on-clear is disabled ...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 72
..., pressing the Clear button on the switch's front panel erases any local usernames and passwords. (Default: Enabled.) Note: Although the Clear button does not erase passwords when disabled, you want to its factory default configuration, as described under "Restoring the Factory Default Configuration" on page 2-25. In this case the Show command does not include...
..., pressing the Clear button on the switch's front panel erases any local usernames and passwords. (Default: Enabled.) Note: Although the Clear button does not erase passwords when disabled, you want to its factory default configuration, as described under "Restoring the Factory Default Configuration" on page 2-25. In this case the Show command does not include...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 73
...and Setting or Changing the "Reset-On-Clear" Operation Syntax: [no front-panel-security password-clear reset-on-clear • To enable password-clear with reset-on-clear also enabled, use it to its default configuration (enabled, with the Reset button (Reset+Clear) to restore the switch to its... factory default configuration. password-clear: Enabled. - For example, suppose that password-clear is pressed. reset-on the switch's front panel. • Specifies whether the switch reboots if the Clear button is ...
...and Setting or Changing the "Reset-On-Clear" Operation Syntax: [no front-panel-security password-clear reset-on-clear • To enable password-clear with reset-on-clear also enabled, use it to its default configuration (enabled, with the Reset button (Reset+Clear) to restore the switch to its... factory default configuration. password-clear: Enabled. - For example, suppose that password-clear is pressed. reset-on the switch's front panel. • Specifies whether the switch reboots if the Clear button is ...
HP ProCurve Series 6120 Blade Switches Access Security Guide
Page 80
... option, you must also specify whether to set a new password. For example, suppose that password-clear is pressed. Thus: • To enable password-clear with reset-on-clear disabled, use it to its default configuration (enabled, with reset-on-clear disabled). 2-30 To re-enable password-clear, you can still use this syntax: front-panel...
... option, you must also specify whether to set a new password. For example, suppose that password-clear is pressed. Thus: • To enable password-clear with reset-on-clear disabled, use it to its default configuration (enabled, with reset-on-clear disabled). 2-30 To re-enable password-clear, you can still use this syntax: front-panel...