Security Configuration Policies | HP Networking TopTool Products

Group Policies

Security Configuration Policies

	Special multicast routers/queriers communicate by using three message
	types - query, report, and leave group. The query message, sent by a querier,
	is used to discover which network interfaces belong to a multicast group. Each
	host responds to the query message with a report message that tells the querier
	the host is a member of the multicast group. The host also can send a report
	message to join a group or a leave message to leave a group.

N o t e	Using the console you can designate specific ports to always or never forward
	multicast packets.

C a u t i o n

Forward with High Priority

When Forward with High Priority is checked, any IGMP packets received by the switch will be forwarded in a prioritized manner, preceding packets with normal priority.

The Spanning Tree Protocol

The Spanning Tree Protocol (IEEE 802.1d) maintains a loop-free topology in networks with redundant bridges or switches. The spanning tree devices determine which devices will be active and which will be backups so that no two nodes in a network have more than one active path between them at any time. The Spanning Tree Protocol uses the most efficient path between segments. If a bridge or switch fails, the other bridges and switches reconfigure the network automatically. When the problem is repaired, the bridges and switches automatically return to the original network configuration.

Security Configuration Policies

To configure Security policies for a group, click on the Security button in the Configuration Policies main page. The Security Policies page for that group displays.

Communities

You can create up to five communities for each group. The default community is “public”.

Do not delete the “public” community.

The Read Access and Write Access choices are:

■None—Provides access to no tasks in HP TopTools

7-14

Image 76

HP Networking TopTool Products manual Security Configuration Policies, Spanning Tree Protocol, Communities

Contents

HP TopTools for Hubs & Switches User Guide Page HP TopTools for Hubs & Switches User Guide Applicable Product Contents Hardware and Software Requirements Listing Devices Configuring PollingDevice Topology Node Port Table Custom Groups Searching for Devices Locating a Node Monitoring Network Traffic Top Conversations Inventory of End Nodes Quality of Service Overview Basic Operation Managing Switches Viii Performing Diagnostics How to Update the Map Files Appendix a Starting HP TopTools for Hubs Switches Quick Start Getting Around in HP TopTools Quick Start Devices Viewing Your Network DevicesMaps Using the Panner Quality of ServicePolicies Configuration Policies Examining Alerts Configuring and Monitoring Devices List of Networking Devices T e Viewing Network Traffic Traffic Monitor Network Meter Optimizing Your NetworkTop Talkers How to Get Support Introduction to HP TopTools IntroductionTopics covered in this chapter include HP TopTools for Hubs & Switches Introduction HP TopTools for Hubs & Switches Home Ware running and know how to use your network utilities Network Devices Features Viewing a List of Devices Network Traffic Network GrowthHP Devices Supported Group Policies Snmp HP Switches Supported J2611A Learning to Use HP TopTools HP Procurve Switches & Hubs Technical Support HP TopTools Technical Product Support Introduction System Requirements Hardware and Software RequirementsSystem Requirements Requirements System Requirements Discovering Your Devices Beginning Discovery Selecting Networks Discovery StatusDiscovering Your Devices Networks Page of Settings for Discovery Adding Devices for Discovery Configuring Discovery Settings Settings Page of Settings Discovery Troubleshooting Discovery Additional Community Names Inventory of Devices Alerts Interpreting the Alert Log Automatic Fault FindingThis chapter contains information on Alerts Alerts Common Faults Fault Description, Cause and Actions Check for faulty cabling, transceivers, and NICs Acknowledging Alerts Launching the Device ViewClosing Alerts First Time Installation Information Filtering AlertsSorting Alerts Selecting Alert Log Filters Selecting Alert Log Filters Topology Filtering by Alert StateFiltering by Alert Severity Filtering by Device Selecting Alert Log Filters Search Selecting Alert Log Filters Custom GroupsClick on the + or boxes to add or remove search criteria Configuring Action on Alerts Search Configure Actions on Alerts Deleting Closed Alerts Alerts Networking Devices Listing Devices Configuring Polling Communication from the list Device Communication Settings SNMP/Trap Configuration Selecting Actions for Devices Device Topology Thresholds Dialog Box Write in order for your devices to be mapped Topology of Networking Devices Node Port Table When a link has been clicked on, it is no longer blueCustom Groups Searching for Devices Custom Groups Search Networking Devices Group Policies Creating Groups Members of a group Viewing the Devices in a GroupGroup Policies Adding a Group Modifying a Group Group Configuration Modify Group Adding a Device to a Group Removing a Device from a Group Changing the Group Name Configuring Group Policies Main Configuration Policies General Configuration Policies Snmp System Information Alert Configuration Policies Checking Firmware Versions Sending Alerts to the HP TopTools Management Station Setting Fault SensitivityRemoving Trap Receivers Advanced Switch Features Advanced Switch Features Automatic Broadcast Control ABC Enabling Broadcast Control for IP Enabling Broadcast Control for IPX Automatic IP Gateway Configuration Internet Group Management Protocol Igmp Security Configuration Policies Spanning Tree ProtocolCommunities Forward with High Priority Adding a Community Security Policies Configuring Authorized Managers Modifying a CommunityDeleting a Community Adding or Deleting an Authorized Manager Viewing Your Maps Displaying Maps Map Server Settings Viewing Your Maps Default View Automatic Map Generation Cluster Size Map Styles Launching a Map Spacing Using the Panner Launching the Device View SNMP/Trap Configuration Options for Displaying MapsOptions Refresh Maps Options-Labeling Changing Map Views Locating a NodeOptions-Legend Monitor Viewing Your Maps Using Traffic Monitor Monitoring Network Traffic Traffic Monitor Main Monitoring Network Traffic Reading the Traffic Information Gauges Reading the Segment Histogram Selecting Segment Groups and Segments Setting ThresholdsComparing Segments Across Different Medias Thresholds Window Displaying the Network Meter Who Are the Top 5 Talkers? Options Button Top 5 Talkers Other Top Talkers Not in Selected Minute Others Top5 View Menu ItemsLocating a Segment or End Node Data sampler for this segment Traffic Data Collector Settings Manual Monitoring Automatic MonitoringDiscovery/Topology Data Automatic is checked Configuring Ports for Manual Monitoring Adding Ports for Manual MonitoringRemoving Selected Devices Remove All Devices Traffic Data Collector Storage Settings Traffic Data Storage Traffic Data Collector Performance Troubleshooting Traffic Monitor Traffic Data Collector Performance Connection to Server Lost Monitoring Network Traffic Meeting the Challenges Planning for Network GrowthThis chapter includes the following topics Planning with the Network Performance Advisor Using Network ToolsPlanning for Network Growth Starting the Network Performance Advisor 10-3 Creating a New Report Welcome Page for Network Performance Advisor Modifying Your Settings Report Generation Page of Network Performance Advisor To cancel a report, click on the Cancel analysis button Worsen network performance during periods of normal useYou can only create one report at a time 10-6 Viewing a Report Report Properties Section Summary of Recommendations Section With Data Available Reorganize Your Current Equipment 10-9 Recommendation Details Section 10-11 How the Data is Analyzed Add or Upgrade EquipmentDividing Segments into Workgroups Traffic pattern before dividing into workgroups Traffic Pattern after Dividing into Workgroups 10-14 Converting Segments to Desktop Switching Top ConversationsUpgrading Segments to Faster Speed Media Dedicating Bandwidth to Top Talkers Top Conversations Inventory of End Nodes 10-17 When There Are No Recommendations AdministrationControlling Data Storage May not be valid Collects Data How the Network Performance AdvisorUnderstanding HP Sampling 10-20 Potential Problems with Data Collection Segments that do not have Devices with Sampling Capability Segments Excluded from AnalysisSegments not Selected for Analysis Quality of Service Overview HP Procurve Switch 8000M HP Procurve Routing Switch 9308M and 9304MHP Procurve Routing Switch 6308M-SX and 6208M-SX Switch using the switchs web browser or console interface HP TopTools QoS operates on two levels as described below Basic Operation11-3 Viewing All Currently Configured QoS Policies Configuring QoS for Specific Devices IP Addresses Adding a Policy for a Specific IP Address Adding a Policy for an IP Address ToS Configuration Options Configuring a QoS Policy for IP Type Service ToS11-6 Differentiated Services Switch Ports11-7 Outbound ToS Option Procurve How To Configure a ToS Policy Vlan Configuring a QoS Policy for Specific Protocols DECNet AppleTalk QoS Policy for a Specific Protocol Configuring a QoS Policy for a Specific Click on the Return button to return to the Main QoS 11-12 Accessing Hub Features Device Management Features Viewing Device Identity Information Accessing Hub Features12-2 Interpreting Device Status Reading the Performance Gauges Performance Gauges for a Hub Switching Hub Global Counters Global CountersHub Global Counters Gauge Attributes Counters are described in the following table Global Counters12-6 Counter Description Port Counters Configuring Your DeviceSee the online help for information on each counter Fault Detection Hub Device View Configuring IP System Information Switching Hub IP Configuration Hub IP Configuration12-10 Port Configuration Setting DescriptionInformation is described in the following table Port Information Bridge Enable/Disable Backup Links Backup Link Parameters Configuring Load Balancing-Switching HubsParameter Description Support URL Select Technical Support 12.The Support 12-15 12-16 Managing Switches Displaying Switch StatusStatus Overview This chapter has information on Managing Switches Graph Area Port Status Alert Log Area Port Status Settings Port Status settings are described in the following table13-4 Switch Identity Information Identity Page for HP Switch 800T Configuring Switch Features Device View Device View for the HP Procurve Switch 2424M IP Configuration Characteristics of Bootp and Dhcp Help for that device 13-9 Port Settings Class of Service13-10 Using VLANs to Maximize the CoS Benefit Is, CoS enables you toWhen it is received on the switch 13-11 Basic Operation Definitions13-12 QoS Setting Outbound Port Queue Operation Default Vlan as a tagged VlanCoS Priority Switch Queues Criteria for Prioritizing Outbound PacketsPriority Mapping Table Tagged Vlan TopTools Guidelines for Configuring CoS Priorities Steps for Configuring CoS PriorityPriority Criteria and Precedence Assigning a Monitoring Port 13-16 Setting Device Features Monitoring Selected Ports on a Switch HP Procurve Stack Management 11.Configuration Page for HP 8000M as Commander of a Stack Stack Management with VLANs Vlan ConfigurationBenefits of Stack Management Enabling VLANs Adding a VlanRenaming a Vlan Removing a Vlan Enabling Gvrp Security Modifying Port Vlan ConfigurationConfirm removal of the Vlan Support URL Support/Management URLs13-23 Management Server URL 13-24 Setting Up Security for a Device Device Passwords Manager/Operator Password Combinations Setting Up Security for a Device Passwords Read Write Results Protected Password SettingsFunction of Community Names Set Snmp Community Names Configuring for Community Names Select the Additional Devices tabRun Discovery again This improves the Discovery process Hub Port Security Address Selection Authorized Address Send AlarmEavesdrop Prevention Disable Port Setting Security Policy for Selected Ports14-9 Setting the Security Policy for Selected Ports Hub Intrusion Log Switch Port Security Basic Operation Configuring Port Security-Planning Port Security Control Parameters Learn Mode 14-13 Configuring Authorized IP Managers 14-14 Access Levels Overview of IP Mask OperationDefining Authorized Management Stations 14-15 Configuring Port Security Enter an Authorized Manager IP address Port Security Overview Select Yes to Prevent Eavesdropping Switch Intrusion LogClick on the Apply Changes button 10.Security Violation Entries in the Alert Log Keeping the Intrusion Log Current by Resetting Flags Operating Notes for Port SecurityIdentifying the IP Address of an Intruder How the Intrusion Log Operates Proxy Web Servers Security Violations 14-22 Performing Diagnostics Performing a Ping/Link Test Rebooting a Device Performing Diagnostics Resetting a Hub to Factory Default Settings Device Reboot Resetting a Switch 15-4 Producing a Configuration Report 15-5 15-6 HP Procurve Switches HP Procurve Hubs Other HP Switches Software Update UtilityDownloading Software Actions button and select Update Firmware Starting the Software Update UtilityDownloading Software Obtaining the Software from the Web 16-3 Software updates are downloaded to Accepting the Licensing Agreement Scheduling the Software Update 16-5 Downloading Software Alert Log Showing Successful Software Update Obtaining New Software from HP HP Download ManagerDevice types Download Control Time, and click OK Make sure you leave the CD in the drive New software version data How to Update the Map Files16-11 16-12 Appendix a Agent Firmware VersionsVerifying Device Agent Versions Appendix a contains the following topics Preparing Network Devices Device Network AddressesIPX Networks IP Networks Configuring IP Parameters Globally Assigned IP Network Addresses T e Network Bootp Server Appendix a Index Index-1 Index-2 Index-3 Full Network button … Index-4 Index-5 Index-6 Index-7 Undo Last Load Balancing … 12-13 Update Discovery … Index-8