HP ProCurve J8766A - User Manual

i
Release Notes:
Version L.11.09 Software
for the ProCurve Series 4200vl Switches
Release L.11.09 supports these switches:
■ ProCurve Switch 4204vl (J8770A), 4208vl (J8773A), 4202vl-72 (J8772A), 4202vl-48G (J8771A),
4204vl-48GS (J9064A), 4208vl-72GS (J9030A), 4208vl-96 (J8775A), and 4208vl-64G (J8774A).
These release notes include information on the following:
■ Downloading switch software and documentation from the Web (page 1)
■ Support added for the ProCurve J8766A 10-GbE X2 vl Module (page 7)
■ Clarification of operating details for certain software features (page 8)
■ A listing of software enhancements in this release (page 18)
■ A listing of software fixes included in releases L.10.01 through L.11.09 (page 106)
Security Note:
Downloading and booting software release L.10.20 or greater for the first time automatically enables
SNMP access to the hpSwitchAuth MIB objects. If this is not desirable for your network, ProCurve
recommends that you disable it after downloading and rebooting with the latest switch software. For more
information, refer to “Switch Management Access Security” on page 8 and “Using SNMP To View and
Configure Switch Authentication Features” on page 51.
Related Publications
For the latest version of any of the publications listed below, visit the ProCurve Networking Web site
at www.procurve.com
. Click on Technical support, then Product manuals.
■ Management and Configuration Guide* (part number 5990-6050)
■ Advanced Traffic Management Guide* (part number 5990-6051)
■ Access Security Guide* (part number 5990-6052)
*Covers the ProCurve Series Series 6400cl, Series 5300xl, Series 4200vl, and Series 3400cl switches.

HP ProCurve J8766A Specifications

General

Brand	HP
Model	ProCurve J8766A
Category	Software
Language	English

Summary

Software Management

Downloading Software to the Switch

Procedures for downloading switch software via TFTP or Xmodem transfer methods.

Saving Configurations While Using the CLI

Enforcing Switch Security

Switch Management Access Security

Measures to secure access to switch status and configuration settings.

Local Manager Password

Setting a password to reduce unauthorized access via web or CLI interfaces.

Inbound Telnet Access and Web Browser Access

Securing remote access by using SSH and SSL/TLS protocols.

SNMP Access (Simple Network Management Protocol)

Controlling SNMP access to prevent unauthorized viewing or modification.

Physical Access to the Switch

Network Access Security

Provisions to protect network access through the switch.

Access Control Lists (ACLs)

Using ACLs to permit or deny network traffic based on defined criteria.

Web and MAC Authentication

Port-based security using web or MAC address authentication for network access.

Secure Shell (SSH)

Using SSH for encrypted and authenticated remote access transactions.

802.1 X Access Control

Port-based authentication using RADIUS for controlled network access.

Port Security, MAC Lockdown, MAC Lockout, and IP Lockdown

Device-based security features controlling port and IP access.

Enhancements

DHCP Option 82: Using the Management VLAN IP Address for the Remote ID

Uni-Directional Link Detection (UDLD)

Feature to detect and block unidirectional link failures for network stability.

802.1 X Controlled Directions

DHCP Snooping Overview

Using DHCP snooping to mitigate DoS attacks by inspecting DHCP packets.

Spanning Tree Per-Port BPDU Filtering

Controls spanning-tree participation on a per-port basis.

Spanning Tree BPDU Protection

Security enhancement to disable ports receiving spoofed BPDUs.

Instrumentation Monitor

Adding SNMPv3 Users With AES

Configuring SNMPv3 users with AES privacy for secure network management.

Configuring Loop Protection

Configuring the Source IP Address for SNMP Requests and Traps

Dynamic ARP Protection

Protects against ARP poisoning by validating IP-to-MAC bindings.