Switch security

•SNMP settings

•User name and password settings

•Default access to various management interfaces

•NTP settings

IMPORTANT: See "Runtime switching software default settings (on page 28)" for a complete list of default configuration settings.

When planning the switch configuration, secure access to the management interface by:

•Creating users with various access levels

•Enabling or disabling access to various management interfaces to fit the security policy

•Changing default SNMP community strings for read-only and read-write access

User, operator, and administrator access rights

To enable better switch management and user accountability, three levels or classes of user access have been implemented on the switch. Levels of access to CLI, Web management functions, and screens increase as needed to perform various switch management tasks. Conceptually, access classes are defined as:

•User interaction with the switch is completely passive. Nothing can be changed on the switch. Users can display information that has no security or privacy implications, such as switch statistics and current operational state information.

•Operators can only effect temporary changes on the switch. These changes will be lost when the switch is rebooted/reset. Operators have access to the switch management features used for daily switch operations. Because any changes an operator makes are undone by a reset of the switch, operators cannot severely impact switch operation.

•Administrators are the only ones that can make permanent changes to the switch configuration, changes that are persistent across a reboot/reset of the switch. Administrators can access switch functions to configure and troubleshoot problems on the switch. Because administrators can also make temporary (operator-level) changes as well, they must be aware of the interactions between temporary and permanent changes.

Access to switch functions is controlled through the use of unique surnames and passwords. Once connected to the switch via the local console, Telnet, or SSH, a password prompt appears.

NOTE: It is recommended to change the default switch passwords after initial configuration and as regularly as required under the network security policies. For more information, see the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Command Reference Guide.

The default user name and password for each access level are:

User account	Description and tasks performed	Password

User	The user has no direct responsibility for switch management. He or she	user
	can view all switch status information and statistics, but cannot make
	any configuration changes to the switch.

Installing the switch 17

GbE2c specifications

The HP GbE2c is a high-performance Ethernet Switch designed to meet the increasing demands of data center environments. As a critical component in Hewlett-Packard's networking lineup, the GbE2c provides a seamless blend of speed, reliability, and advanced networking capabilities, making it an essential tool for enterprises aiming to enhance their network infrastructure.

One of the standout features of the HP GbE2c is its support for Gigabit Ethernet, which allows for high-speed data transmission and reduced latency. This switch is designed to support the growing bandwidth needs of modern applications, ensuring that data is transmitted quickly and efficiently across the network. The GbE2c is particularly beneficial for organizations implementing virtualization technologies, as its Gigabit interfaces help in optimizing data flow between virtual machines.

The GbE2c also incorporates advanced Layer 2 and Layer 3 switching capabilities. This ensures that it can handle both basic and more complex networking tasks, such as routing traffic between different VLANs and enabling Internet Protocol (IP) addressing. The switch supports various protocols, enabling seamless integration into a wide range of network environments.

Additionally, the HP GbE2c is equipped with a robust management system that allows network administrators to easily configure and monitor network settings. With its user-friendly interface, administrators can gain insights into traffic patterns, performance metrics, and potential issues, helping to maintain optimal network performance.

Power efficiency is another key characteristic of the HP GbE2c. The switch is designed to minimize power consumption without sacrificing performance, making it a more sustainable choice for data centers aiming to reduce their carbon footprint. This energy-efficient design is crucial for enterprises looking to lower operational costs while maintaining a high level of service.

The HP GbE2c also boasts high availability features, including redundant power supplies and failover options, ensuring that the network remains operational even in the event of a component failure. This reliability is critical for businesses that require uninterrupted network access for their daily operations.

In summary, the HP GbE2c Ethernet Switch combines speed, versatility, and efficiency, making it an ideal choice for businesses seeking to enhance their networking capabilities. Its robust feature set, advanced management options, and focus on energy efficiency position it as a top-tier solution in the competitive networking landscape. Organizations can rely on the GbE2c to deliver high performance and reliability, thus meeting the demands of today's data-intensive environments.