HP Procurve Switch – Basic Configuration Guide II ITAdminGuide.

com

InterVLAN routing DHCP Relay Configure SNMPv3

(config)# vlan 192 !disable default and insecure snmp community

(vlan-192)# ip helper-address 172.20.100.1
(config)# no snmp-server community public

Configure Rapid Spanning Tree Protocol (config)# snmpv3 enable

Creating user 'initial'
Authentication Protocol: MD5
(config)# spanning-tree
Enter authentication password: **********
!Use RSTP (Rapid STP) instead, because of Privacy protocol is DES
slow convergence of STP Enter privacy password: **********

User 'initial' is created

(config)# spanning-tree force-version rstp-operation
Would you like to create a user that uses SHA? n
!Inorder for users VLAN to communicate
with Server VLAN Useful Troubleshooting Commands (self explanatory) User creation is done. SNMPv3 is now functional.
(config)# ip routing Would you like to restrict SNMPv1 and SNMPv2c messages to have read only
show system information access (you can set this later by the command 'snmp restrict-access'): y
show vlans
Reset to factory default show mac-address b40c25-ff6613 !If you want to add user to Manager group, privileged.
show trunks !SNMPv3 access group should only use ver3 security model.
(config)# erase startup-config show lacp (config)# snmpv3 group managerpriv user cacti sec-model ver3
Configuration will be deleted and device show spanning-tree
rebooted, continue [y/n]? Y show power-over-ethernet brief !If you want to add user to Operator group, unprivileged.
!summary of network traffic of each port (config)# snmpv3 group operatorauth user cacti sec-model ver3
show int display
Enable Remote Logging (syslog) !Event logs !Specify your preferred username and password
log –r //most recent first (config)# snmpv3 user cacti auth md5 authenticationpass priv aes privatepass
(config)# logging 172.20.100.155 log [IP address] //events of specific IP
!delete default initial user for security reasons.
(config)# no snmpv3 user initial
Configure SNMPv1 and SNMPv2c
OPTIONAL
!completely turn off snmpv1/2
!ITADMINCOM is community string. 172.20.100.150 is trap receiver.
(config)# snmpv3 only
(config)# snmp-server host 172.20.100.150 ITADMINCOM
!Allow your server for operator access to HP switch
!community with manager privilege can access all MIB objects, but read-only.
(config)# ip authorized-managers 172.20.100.150 255.255.255.255 access operator
config)# snmp-server community ITADMINCOM manager restricted
TROUBLESHOOTING
!community with operator privilege can access all MIB objects except CONFIG MIB, but read-only
!To view all snmpv3 users
config)# snmp-server community ITADMINCOM operator restricted
(config)# show snmpv3 user
TROUBLESHOOTING
!To view all snmpv3 groups
!displays information on all SNMP communities, trap receivers, traps information
(config)# show snmpv3 groups
(config)# show snmp-server

ITAdminGuide.com Version 1.0