Release K.12.06 Enhancements; Saving Security Credentials In A Configuration File - HP ProCurve 3500yl Release Notes

Software version k.13.49
Hide thumbs Also See for ProCurve 3500yl:
Table of Contents

Advertisement

Enhancements

Release K.12.06 Enhancements

Release K.12.06 Enhancements
Release K.12.06 includes the following enhancement:
Enhancement (PR_1000308332) — Passwords (hashed) can be saved to the configuration
file.

Saving Security Credentials in a Configuration File

In software release K.12.06 and greater, you can store and view the following security settings in the
running-config file associated with the current software image by entering the include-credentials
command. Earlier software releases store these security configuration settings only in internal flash
memory and do not allow you to include and view them in the running-config file.
Local manager and operator passwords and (optional) user names that control access to a
management session on the switch through the CLI, menu interface, or Web browser
interface
SNMP security credentials used by network management stations to access a switch,
including authentication and privacy passwords
Port-access passwords and usernames used as 802.1X authentication credentials for access
to the switch
TACACS+ encryption keys used to encrypt packets and secure authentication sessions with
TACACS+ servers
RADIUS shared secret (encryption) keys used to encrypt packets and secure authentication
sessions with RADIUS servers
Secure Shell (SSH) public keys used to authenticate SSH clients that try to connect to the
switch.
Benefits of Saving Security Credentials
The benefits of including and saving security credentials in a configuration file are as follows:
After making changes to security parameters in the running configuration, you can
experiment with the new configuration and, if necessary, view the new security settings
during the session. After verifying the configuration, you can then save it permanently by
writing the settings to the startup-config file.
By permanently saving a switch's security credentials in a configuration file, you can upload
the file to a TFTP server or Xmodem host, and later download the file to the ProCurve
switches on which you want to use the same security settings without having to manually
configure the settings (except for SNMPv3 user parameters) on each switch.
43

Advertisement

Table of Contents
loading

This manual is also suitable for:

Procurve 8212zlProcurve 5400zl6200yl

Table of Contents