Disable Tftp And Auto-Tftp For Enhanced Security - HP PROCURVE 2520 Management And Configuration Manual

Disable TFTP and Auto-TFTP for Enhanced Security

Using the ip ssh filetransfer command to enable Secure FTP (SFTP) automat­
ically disables TFTP and auto-TFTP (if either or both are enabled).
ProCurve(config)# ip ssh filetransfer
Tftp and auto-tftp have been disabled.
ProCurve(config)# sho run
Running configuration:
; J9137A Configuration Editor; Created on release #S.14.XX
hostname "ProCurve"
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B24
ip address 10.28.234.176 255.255.240.0
exit
ip ssh filetransfer
no tftp-enable
password manager
password operator
Figure A-5. Example of Switch Configuration with SFTP Enabled
If you enable SFTP, then later disable it, TFTP and auto-TFTP remain disabled
unless they are explicitly re-enabled.
Operating rules are:
■ The TFTP feature is enabled by default, and can be enabled or disabled
through the CLI, the Menu interface, or an SNMP application. Auto-TFTP
is disabled by default and must be configured through the CLI.
Downloading Switch Software
Enabling SFTP automatically disables TFTP
and auto-tftp and displays this message.
Viewing the configuration shows that SFTP is
enabled and TFTP is disabled.
File Transfers
A-11