Configuring Username and Password Security
Saving Security Credentials in a Config File
■
By storing different security settings in different files, you can test
different security configurations when you first download a new software
version that supports multiple configuration files, by changing the
configuration file used when you reboot the switch.
For more information about how to experiment with, upload, download, and
use configuration files with different software versions, refer to the following:
■
The chapter on “Switch Memory and Configuration” in the
Management
and Configuration Guide
.
■
“Configuring Local Password Security” on page 2-6 in this guide.
Enabling the Storage and Display of Security
Credentials
To enable the security settings, enter the
include-credentials
command.
Syntax:
[no] include-credentials
Enables the inclusion and display of the currently configured
manager and operator usernames and passwords, RADIUS shared
secret keys, SNMP and 802.1X authenticator (port-access) security
credentials, and SSH client public-keys in the running
configuration. (Earlier software releases store these security
configuration settings only in internal flash memory and do not
allow you to include and view them in the running-config file.)
To view the currently configured security settings in the running
configuration, enter one of the following commands:
■
show running-config
:
Displays the configuration settings in the
current running-config file
.
■
write terminal
:
Displays the configuration settings in the current
running-config file
.
For more information, refer to “Switch Memory and
Configuration” in the Management and Configuration Guide.
The “
no
” form of the command disables only the display and copying
of these security parameters from the running configuration, while
the security settings remain active in the running configuration.
Default: The security credentials described in “Security Settings
that Can Be Saved” on page 2-11 are not stored in the running
configuration.
Security Settings that Can Be Saved
The security settings that can be saved to a configuration file are:
■
Local manager and operator passwords and user names
2-11
Summary of Contents for PROCURVE 2910AL
Page 1: ...Access Security Guide ProCurve Switches W 14 03 2910al www procurve com ...
Page 2: ......
Page 3: ...HP ProCurve 2910al Switch February 2009 W 14 03 Access Security Guide ...
Page 84: ...Configuring Username and Password Security Front Panel Security 2 36 ...
Page 156: ...TACACS Authentication Operating Notes 4 30 ...
Page 288: ...Configuring Secure Socket Layer SSL Common Errors in SSL setup 8 22 ...
Page 416: ...Configuring Advanced Threat Protection Using the Instrumentation Monitor 10 28 ...
Page 572: ...Using Authorized IP Managers Operating Notes 14 14 ...
Page 592: ...12 Index ...
Page 593: ......