HP HP ProCurve Series 6600, Access Security Manual

Page: 48 / 778

1-14
Security Overview
Getting Started with Access Security
authentication configuration (hpSwitchAuth). This means that the switch’s
default configuration now allows SNMP access to security settings in
hpSwitchAuth.
N o t e o n S N M P
A c c e s s t o
A u t h e n t i c a t i o n
M I B
Downloading and booting from the K.12. xx or greater software version for the
first time enables SNMP access to the authentication configuration MIB (the
default action). If SNMPv3 and other security safeguards are not in place, the
switch’s authentication configuration MIB is exposed to unprotected SNMP
access and you should use the command shown
below to disable this access.
If SNMP access to the hpSwitchAuth MIB is considered a security risk
in your network
, then you should implement the following security
precautions when downloading and booting from software release K.12. xx or
greater:
■
If SNMP access to the authentication configuration (hpSwitchAuth) MIB
described above is not desirable for your network, then immediately after
downloading and booting from the K.12.
xx or greater software for the first
time, use the following command to disable this feature:
snmp-server mib hpswitchauthmib excluded
■
If you choose to leave the authentication configuration MIB accessible,
then you should do the following to help ensure that unauthorized work-
stations cannot use SNMP tools to access the MIB:
a. Configure SNMP version 3 management and access security on the
switch.
b. Disable SNMP version 2c on the switch.
For details on this feature, refer to the section titled “Using SNMP To View
and Configure Switch Authentication Features” on page 6-32.
For more information on configuring SNMP, refer to the section “Using SNMP
Tools To Manage the Switch” in the chapter “Configuring for Network
Management Applications” in the Management and Configuration Guide
for your switch.