Security And Integrity Recommendations; Web: Enabling Group Configuration - HP ProCurve 530 NA (J8986A) Management And Configuration Manual

Complete synchronization may take up to one minute to propagate, depending
on the size of the group and on network latency.
When a member leaves the group, the "oldest" of the remaining members
becomes the "reference". When a member returns to the group, its "age" is
reset to zero. This mechanism prevents the configuration of a rogue access
point from infecting the group.

Security and Integrity Recommendations

Although you can initiate changes to a group's configurations from any
member of the group, care should be taken to plan, and probably limit, access
to the management interfaces of the member access points in a group. If two
members of a group are being managed simultaneously, and incompatible
parameter changes are applied, the group's configuration could become
corrupted.
For instance, if one parameter is simultaneously set to two different values on
different APs, the group's configuration could be synchronized inconsistently.
Similarly, applying incompatible values to parameters with cross-dependen-
cies could also produce unpredictable results.
The recommended method for ensuring integrity of a group configuration is
to enforce a single administration point in the group. This ensures that
conflicting changes to the group configuration cannot be applied to the group.
Depending on administrative requirements, access to member APs can be
further restricted by disabling CLI, Web, and SNMP access, as appropriate.
"Web: Configuring Access Controls" on page 5-10
(See
on page 5-12
for more information.)

Web: Enabling Group Configuration

The Management – Group Configuration screen configures an access point to
join a group configuration.
The Web interface enables you to modify these parameters:
■ Group Configuration: Enables/Disables Group Configuration on the
current access point. (The default is Disabled.)
■ Group Name: Specifies the name of the group to which the access point
will belong (up to 40 characters).
Member ID: An optional text string identifying the access point within
■
the group.
■ [Update]: Updates the Group Configuration settings on the access point.
General System Configuration
Managing Group Configuration
"CLI: Configuring Management Controls"
or
5-65