This document provides instructions for configuring basic network settings and SNMP on an HP Procurve switch, including enabling DHCP relay, configuring RSTP, enabling IP routing between VLANs, resetting to factory defaults, enabling remote logging, and securing the switch by configuring SNMPv3 with users, groups, and disabling insecure SNMPv1/v2c access. Useful troubleshooting commands are also listed.
This document provides instructions for configuring basic network settings and SNMP on an HP Procurve switch, including enabling DHCP relay, configuring RSTP, enabling IP routing between VLANs, resetting to factory defaults, enabling remote logging, and securing the switch by configuring SNMPv3 with users, groups, and disabling insecure SNMPv1/v2c access. Useful troubleshooting commands are also listed.
This document provides instructions for configuring basic network settings and SNMP on an HP Procurve switch, including enabling DHCP relay, configuring RSTP, enabling IP routing between VLANs, resetting to factory defaults, enabling remote logging, and securing the switch by configuring SNMPv3 with users, groups, and disabling insecure SNMPv1/v2c access. Useful troubleshooting commands are also listed.
This document provides instructions for configuring basic network settings and SNMP on an HP Procurve switch, including enabling DHCP relay, configuring RSTP, enabling IP routing between VLANs, resetting to factory defaults, enabling remote logging, and securing the switch by configuring SNMPv3 with users, groups, and disabling insecure SNMPv1/v2c access. Useful troubleshooting commands are also listed.
HP Procurve Switch – Basic Configuration Guide II ITAdminGuide.
com
InterVLAN routing DHCP Relay Configure SNMPv3
(config)# vlan 192 !disable default and insecure snmp community
(vlan-192)# ip helper-address 172.20.100.1 (config)# no snmp-server community public
Configure Rapid Spanning Tree Protocol (config)# snmpv3 enable
Creating user 'initial' Authentication Protocol: MD5 (config)# spanning-tree Enter authentication password: ********** !Use RSTP (Rapid STP) instead, because of Privacy protocol is DES slow convergence of STP Enter privacy password: **********
User 'initial' is created
(config)# spanning-tree force-version rstp-operation Would you like to create a user that uses SHA? n !Inorder for users VLAN to communicate with Server VLAN Useful Troubleshooting Commands (self explanatory) User creation is done. SNMPv3 is now functional. (config)# ip routing Would you like to restrict SNMPv1 and SNMPv2c messages to have read only show system information access (you can set this later by the command 'snmp restrict-access'): y show vlans Reset to factory default show mac-address b40c25-ff6613 !If you want to add user to Manager group, privileged. show trunks !SNMPv3 access group should only use ver3 security model. (config)# erase startup-config show lacp (config)# snmpv3 group managerpriv user cacti sec-model ver3 Configuration will be deleted and device show spanning-tree rebooted, continue [y/n]? Y show power-over-ethernet brief !If you want to add user to Operator group, unprivileged. !summary of network traffic of each port (config)# snmpv3 group operatorauth user cacti sec-model ver3 show int display Enable Remote Logging (syslog) !Event logs !Specify your preferred username and password log –r //most recent first (config)# snmpv3 user cacti auth md5 authenticationpass priv aes privatepass (config)# logging 172.20.100.155 log [IP address] //events of specific IP !delete default initial user for security reasons. (config)# no snmpv3 user initial Configure SNMPv1 and SNMPv2c OPTIONAL !completely turn off snmpv1/2 !ITADMINCOM is community string. 172.20.100.150 is trap receiver. (config)# snmpv3 only (config)# snmp-server host 172.20.100.150 ITADMINCOM !Allow your server for operator access to HP switch !community with manager privilege can access all MIB objects, but read-only. (config)# ip authorized-managers 172.20.100.150 255.255.255.255 access operator config)# snmp-server community ITADMINCOM manager restricted TROUBLESHOOTING !community with operator privilege can access all MIB objects except CONFIG MIB, but read-only !To view all snmpv3 users config)# snmp-server community ITADMINCOM operator restricted (config)# show snmpv3 user TROUBLESHOOTING !To view all snmpv3 groups !displays information on all SNMP communities, trap receivers, traps information (config)# show snmpv3 groups (config)# show snmp-server