Security Issues - Compaq ProLiant Interconnect Switch User Manual

When planning the configuration, consider the default settings for the following parameters:
•
Switch IP settings
•
VLAN and Group VLAN Registration Protocol (GVRP) settings
•
STP settings
•
Port names and types
•
Multilink trunk settings
•
CoS settings
•
Interswitch cross-connect settings
•
SNMP/RMON settings
•
User name and password settings
•
Default access to various management interfaces
•
IGMP Snooping settings
IMPORTANT: Refer to Appendix C for a complete list of default configuration settings.

Security Issues

When planning the configuration for a GbE Interconnect Switch, to secure access to the
management interface:
•
Create users with various access levels to the local console, remote Telnet, and Web
interface. Refer to Table 2-1 for the three levels of user access privileges.
•
Enable or disable access to various management interfaces to fit the security policy.
•
Change default SNMP/RMON community strings for read-only and read-write access.
Root, User+, and User Privileges
There are three levels of user privileges: Root, User+, and User. Some menu selections
available to users with Root privileges may not be available to those with User+ and User
privileges. The following table summarizes the user privileges.
Table 2-1: User Privileges
Privilege
Configuration
Network Monitoring
Community Strings and Trap Stations
Update Firmware and Configuration Files
System Utilities
Compaq ProLiant BL p-Class GbE Interconnect Switch User Guide
COMPAQ CONFIDENTIAL Codename: Vanilla Part Number: 263680-001 Last Saved On: 4/23/02 9:57 AM
Setting Up and Installing the GbE Interconnect Switch
Root User+
Yes Read-only
Yes Read-only
Yes Read-only
Yes No
Yes Ping-only
User
Read-only
Read-only
Read-only
No
Ping-only
continued
2-5