ProCurve 2510G Series Guia de Instalação

Release Notes:Version Y.11.16 Softwarefor the ProCurve 2510G-24 and 2510G-48 SwitchesReleases Y.11.01 through Y.11.16 supports these switches: ProCur

5 Downloading Software to the SwitchSaving Configurations While Using the CLISaving Configurations While Using the CLIThe switch operates with two

6Downloading Software to the SwitchProCurve Switch, Routing Switch, and Router Software KeysProCurve Switch, Routing Switch, and Router Software K

7 Downloading Software to the SwitchOS/Web/Java Compatibility TableOS/Web/Java Compatibility TableThe switch web agent supports the following combi

8Downloading Software to the SwitchMinimum Software VersionsMinimum Software Versions For the ProCurve 2510G-24 and 2510G-48 Switches and Hardware

9 Enforcing Switch SecuritySwitch Management Access SecurityEnforcing Switch SecurityProCurve switches are designed as “plug and play” devices, all

10Enforcing Switch SecuritySwitch Management Access SecurityIt is important to evaluate the level of management access vulnerability existing in y

11 Enforcing Switch SecuritySwitch Management Access SecuritySNMP Access (Simple Network Management Protocol)In the default configuration, the swit

12Enforcing Switch SecuritySwitch Management Access SecurityNote on SNMP Access to Local Authentication MIB Objects Downloading and booting U.11.0

13 Enforcing Switch SecurityNetwork Security FeaturesOther Provisions for Management Access Security Authorized IP Managers. This feature uses IP a

14Enforcing Switch SecurityNetwork Security Features switch SSH and user password authentication: this option is a subset of the client public-ke

© Copyright 2008-2010 Hewlett-Packard Development Company, LP. The information contained herein is subject to change without notice.Publication Numb

15 Known IssuesRelease Y.11.01Known IssuesRelease Y.11.01The following problems are known issues in release Y.11.01. RADIUS/Web Management (PR_100

16EnhancementsRelease Y.11.01 EnhancementsEnhancementsUnless otherwise noted, each new release includes the features added in all previous release

17 EnhancementsRelease Y.11.10 EnhancementsRelease Y.11.10 Enhancements No new enhancements. Not a public release.Release Y.11.11 Enhancements Rele

18EnhancementsRelease Y.11.12 EnhancementsCustomized Banner without Password Configured. When a custom MOTD banner is configured and there is no p

19 EnhancementsRelease Y.11.15 EnhancementsRelease Y.11.15 Enhancements Release Y.11.15 includes the following enhancements. (Not a public release.

20EnhancementsRelease Y.11.15 EnhancementsAdditional RestrictionsSome authentication servers prevent the usage of special symbols such as the back

21 EnhancementsRelease Y.11.16 EnhancementsRelease Y.11.16 Enhancements Release Y.11.16 includes the following enhancement: Enhancement (PR_000004

22EnhancementsRelease Y.11.16 Enhancements Commands accounting: Provides records containing information on CLI command execu-tion during user ses

23 EnhancementsRelease Y.11.16 EnhancementsNoteIn Unique Acct-Session-ID operation, the Command service type is a special case in which the Acct-Se

24EnhancementsRelease Y.11.16 EnhancementsThe figure below shows Unique mode accounting operation for a new session in which two commands are exec

iiiContentsSoftware ManagementSoftware Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

25 EnhancementsRelease Y.11.16 EnhancementsCommon Acct-Session-ID Operation. In this case, all service types running in a given manage-ment session

26EnhancementsRelease Y.11.16 EnhancementsConfiguring RADIUS AccountingNoteThis section assumes you have already: Configured RADIUS authenticatio

27 EnhancementsRelease Y.11.16 Enhancements– Optional—if you are also configuring the switch for RADIUS authentication, and need a unique encryptio

28EnhancementsRelease Y.11.16 EnhancementsFor example, suppose you want the switch to use the RADIUS server described below for both authenticatio

29 EnhancementsRelease Y.11.16 EnhancementsFigure 3. Example of Configuring for a RADIUS Server with a Non-Default Accounting UDP Port NumberThe r

30EnhancementsRelease Y.11.16 EnhancementsFigure 4. Accounting Configured for the Common Option3. Configure Accounting Types and the Controls for

31 EnhancementsRelease Y.11.16 Enhancements Stop-Only: Applies to the network, exec, system, and command service types, as described below:• Send

32EnhancementsRelease Y.11.16 EnhancementsExample. To configure RADIUS accounting on the switch with start-stop for Exec functions, stop-only for

33 EnhancementsRelease Y.11.16 EnhancementsExample. If the switch is configured with RADIUS accounting on the switch to use start-stop for Exec, S

34EnhancementsRelease Y.11.16 EnhancementsTo continue the example in figure 5, suppose that you wanted the switch to:• Send updates every 10 minut

ivEnhancementsRelease Y.11.01 Enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

35 EnhancementsRelease Y.11.16 EnhancementsViewing RADIUS StatisticsGeneral RADIUS StatisticsFigure 8. Example of General RADIUS Information from S

36EnhancementsRelease Y.11.16 EnhancementsTable 1. Values for Show Radius Host Output (Figure 9)Term DefinitionRound Trip Time The time interva

37 EnhancementsRelease Y.11.16 EnhancementsRADIUS Authentication StatisticsFigure 10. Example of Login Attempt and Primary/Secondary Authentication

38EnhancementsRelease Y.11.16 EnhancementsRADIUS Accounting StatisticsFigure 12. Listing the Accounting Configuration in the SwitchFigure 13. Exam

39 EnhancementsRelease Y.11.16 EnhancementsFigure 14. Example Listing of Active RADIUS Accounting Sessions on the SwitchChanging RADIUS-Server Acc

40Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.01Software Fixes in Releases Y.11.01 - Y.11.16Software fixes are listed in chronologica

41 Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.07Release Y.11.07No Problems Resolved in Release Y.11.07. (Not a Production Build.)Rele

42Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.10 802.1X (PR_0000012568) — There is a problem with the switch login error message. M

43 Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.11 Authentication (PR_0000013472) — Port-access authentication may not occur when ther

44Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.12access mac-based functions. Software versions that contain this fix will not allow th

vRelease Y.11.14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

45 Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.12Message 3:Configuration change denied for port <number>. Only Web or MAC-authen

46Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.13 Config (PR_0000039026) — The switch reloads into a configuration that is copied to

47 Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.14TLB Miss: Virtual Addr=0x00000000 IP=0x800ab0f8 Task='mSnmpCtrl'Task ID=0x8

48Software Fixes in Releases Y.11.01 - Y.11.16Release Y.11.15Release Y.11.15The following problems were resolved in build Y.11.15. (Not a public r

© 2008-2010 Hewlett-Packard Development Company, LP. The information contained herein is subject to change without notice.Part Number 5992-3098Februar

1 Software ManagementSoftware ManagementSoftware UpdatesCheck the ProCurve Networking Web site frequently for software updates for the various ProC

2Downloading Software to the SwitchDownloading Software to the SwitchCautionThe startup-config file generated by the latest software release may n

3 Downloading Software to the SwitchTFTP Download from a ServerSyntax: copy tftp flash <ip-address> <remote-os-file> [< primary | se

4Downloading Software to the SwitchXmodem Download From a PC or Unix WorkstationThis procedure assumes that: The switch is connected via the Cons