Support Notes; Rom Update Required; Using Snmp To View And Configure Switch Authentication Features - HP ProCurve 3500yl Release Notes

Support Notes

Minimum Software Versions
Support Notes

ROM Update Required!

All yl and zl switches running K.12.45 system software or earlier, will have the BootROM updated by
this new version of system software. This software download will boot the switch twice, first to
update the BootROM to version K.12.14, and then to load the system software. Following file copy
to the switch flash and initiation of the reload, no additional user intervention is needed. Do not
interrupt power to the switch during this important update.
To confirm that the boot ROM and system software have updated successfully following a reload into
software version K.13.49 or newer, follow the process below at your switch CLI.
ProCurve_zl_yl_Switch# show flash
Image Size(Bytes)
----- ----------
Primary Image : 7497667
updated
Secondary Image : 7497667
Boot Rom Version: K.12.14 <-- Indicates the boot ROM is updated
Default Boot : Primary

Using SNMP To View and Configure Switch Authentication Features

Beginning with software release K.12.01, manager read/write access is available for a subset of the
SNMP MIB objects for switch authentication (hpSwitchAuth) features. That is, in the default state,
a device with management access to the switch can view the configuration for several authentication
features, and using SNMP sets, can change elements of the authentication configuration.
S e c u r i t y N o t e
In the default configuration for SNMP MIB object access, SNMP sets can be used to reconfigure
password and key MIB objects. This means that a device operating as a management station with
access to the switch can be used to change the SNMP MIB settings. This can pose a security risk if
the feature is used to incorrectly configure authentication features or to reconfigure authentication
features to unauthorized settings.
If you want to block the SNMP MIB object access described above, use the following command to
disable the feature:
17
Date Version
-------- -------
12/10/08 K.13.49 <--Indicates that system software is
12/10/08 K.13.49