HP ProCurve 6120G/XG

Option 82 remote-id, MAC address … 10-11
Option 82 untrusted-policy, drop … 10-10
trusted ports, disabled … 10-8
DHCP snooping, none …1-8
dynamic arp protection, none …1-8
dynamic IP lockdown, none …1-8
dyn-autz-port 3799 … 5-19
factory reset, enabled …2-28
front panel security … 2-3, 2-27
instrumentation monitor
SNMP traps, disabled … 10-35
thresholds and parameters … 10-35
instrumentation monitor, disabled …10-35
IP mask, 255.255.255.255 … 14-4
MAC authentication, disabled …1-6
MAC lockdown and lockout, none …1-7
manager password, no password …1-3
passwords
clear password, enabled …2-27
password recovery, enabled … 2-28, 2-33
password-clear, enabled …2-29
reset-on-clear, disabled …2-28
username and passwords, none …2-3
port security, none …1-7
port security, off or ’continuous’ … 13-4
RADIUS
accounting, none …5-3
authentication, none …5-3
authorization, none …5-3
global parameters … 5-9
radius-server dead-time, 0 minutes …5-19
radius-server retransmit, 3 seconds …5-19
radius-server timeout, 3 seconds …5-19
server key, null …5-9
RADIUS authentication, disabled …1-5
secure management vlan, disabled …1-5
security
access security and authentication … 1-3
network security … 1-7
SNMP access … 1-15
SNMP access to the security MIB, open …5-30
SNMP, public, unrestricted …1-5
source-port filters … 11-2
spanning tree
bpdu filtering, none …1-8
bpdu protection, none …1-8
SSH, disabled … 1-4, 7-2
SSL, disabled … 1-5, 8-2
TACACS+
authentication configuration … 4-9
authentication, disabled …1-5, 4-2
login attempts, 3 …4-6
tacacs-server-timeout, 5 seconds …4-23
TCP port number for SSH connections,
22 …7-18
TCP port number for SSL connections,
443 …8-19
Telnet access, enabled …1-4
traffic filters, none … 11-2
traffic/security filters, none …1-7
UDP destination port for accounting,
1813 …5-7
UDP destination port for authentication,
1812 …5-7
user authentication, disabled …7-2
virus throttling, none …1-8
Web and MAC authentication … 3-3–3-55
Web authentication, disabled …1-6
Web-browser access, enabled …1-4
defualt settings
dyn-authorization, disabled … 5-16
denial-of-service
avoid attacks using DHCP snooping … 10-4
monitoring system resources … 10-33
DES …8-3
DHCP Option 82
IP-to-MAC binding database … 10-20, 10-28
DHCP protection
See DHCP snooping.
DHCP snooping … 10-4
authorized server … 10-5
binding database … 10-12
changing remote-id … 10-11
configuring authorized server address … 10-9
database … 10-5
denial-of-service attack … 10-4
DHCPACK … 10-5
DHCPDECLINE … 10-5
DHCPNACK … 10-5
DHCPOFFER … 10-5
DHCPRELEASE … 10-5
disable MAC check … 10-11
disabling … 10-5
dropping packets … 10-5
enabling … 10-5
debug logging … 10-13
6 – Index