ITSA Recommended HP switch configuration:

Lead: Chris Leopold

Description:

Switches managed by ITSA are configured with special accounts and settings. Example settings for the HP 2650 and the HP 2626 are documented below. Note that the VLAN numbers, names and tagging details will vary with subnet and you should contact Chris Leopold to coordinate those details.

Note that the 10/100 ports are configured for fast mode. This allows someone plugging into those to immediately get an IP number without waiting on the order of 30 seconds for routing loop detection (by which time most clients would give up). The GB uplink ports are not so configured.

Also note that telnet is disabled in favor of SSH (PuTTY SSH client recommended).

Example HP 2650 configuration:

; J4899A Configuration Editor; Created on release #H.08.92

hostname "B497R108-WG-HP2650" 
snmp-server contact "IFAS ITSA 352-392-5180" 
snmp-server location "McCarty C Rm 108 Student Carrols" 
time timezone -300 
time daylight-time-rule Continental-US-and-Canada 
cdp run 
no telnet-server 
ip default-gateway 10.242.15.1 
sntp server 128.227.128.24 
timesync sntp 
sntp unicast 
snmp-server community "itsnmpns" Unrestricted 
snmp-server host 10.227.242.62 "public" 
vlan 1 
   name "DEFAULT_VLAN" 
   untagged 50 
   no ip address 
   no untagged 1-49 
   exit 
vlan 756 
   name "Ext_Auth" 
   untagged 1-49 
   no ip address 
   tagged 50 
   exit 
vlan 757 
   name "McCartyC" 
   ip address 10.242.15.13 255.255.255.0 
   tagged 50 
   exit 
ip authorized-managers 128.227.242.0 255.255.255.0 
ip authorized-managers 10.227.242.62 
no stack 
management-vlan 124 
spanning-tree
spanning-tree protocol-version STP
spanning-tree 1 mode Fast
spanning-tree 2 mode Fast
spanning-tree 3 mode Fast
spanning-tree 4 mode Fast
spanning-tree 5 mode Fast
spanning-tree 6 mode Fast
spanning-tree 7 mode Fast
spanning-tree 8 mode Fast
spanning-tree 9 mode Fast
spanning-tree 10 mode Fast
spanning-tree 11 mode Fast
spanning-tree 12 mode Fast
spanning-tree 13 mode Fast
spanning-tree 14 mode Fast
spanning-tree 15 mode Fast
spanning-tree 16 mode Fast
spanning-tree 17 mode Fast
spanning-tree 18 mode Fast
spanning-tree 19 mode Fast
spanning-tree 20 mode Fast
spanning-tree 21 mode Fast
spanning-tree 22 mode Fast
spanning-tree 23 mode Fast
spanning-tree 24 mode Fast
spanning-tree 25 mode Fast
spanning-tree 26 mode Fast
spanning-tree 27 mode Fast
spanning-tree 28 mode Fast
spanning-tree 29 mode Fast
spanning-tree 30 mode Fast
spanning-tree 31 mode Fast
spanning-tree 32 mode Fast
spanning-tree 33 mode Fast
spanning-tree 34 mode Fast
spanning-tree 35 mode Fast
spanning-tree 36 mode Fast
spanning-tree 37 mode Fast
spanning-tree 38 mode Fast
spanning-tree 39 mode Fast
spanning-tree 40 mode Fast
spanning-tree 41 mode Fast
spanning-tree 42 mode Fast
spanning-tree 43 mode Fast
spanning-tree 44 mode Fast
spanning-tree 45 mode Fast
spanning-tree 46 mode Fast
spanning-tree 47 mode Fast
spanning-tree 48 mode Fast
ip ssh
ip ssh version 1-or-2
password manager
password operator

Example HP 2626 configuration:

; J4900B Configuration Editor; Created on release #H.08.72

hostname "B497R416a-WG-2626" 
snmp-server contact "IFAS ITSA 352-392-5180" 
snmp-server location "Building 497 Room 416a" 
time timezone -300 
time daylight-time-rule Continental-US-and-Canada 
no cdp run 
no telnet-server 
ip default-gateway 10.242.15.1 
sntp server 128.227.128.24 
timesync sntp 
sntp unicast 
snmp-server community "itsnmpns" Unrestricted 
snmp-server host 10.227.242.62 "itsnmpns" 
vlan 1 
   name "DEFAULT_VLAN" 
   untagged 1-26 
   ip address 10.242.15.12 255.255.255.0 
   exit 
ip authorized-managers 128.227.242.0 255.255.255.0 
ip authorized-managers 10.227.242.62 
no stack 
spanning-tree
spanning-tree protocol-version STP
spanning-tree 1 mode Fast
spanning-tree 2 mode Fast
spanning-tree 3 mode Fast
spanning-tree 4 mode Fast
spanning-tree 5 mode Fast
spanning-tree 6 mode Fast
spanning-tree 7 mode Fast
spanning-tree 8 mode Fast
spanning-tree 9 mode Fast
spanning-tree 10 mode Fast
spanning-tree 11 mode Fast
spanning-tree 12 mode Fast
spanning-tree 13 mode Fast
spanning-tree 14 mode Fast
spanning-tree 15 mode Fast
spanning-tree 16 mode Fast
spanning-tree 17 mode Fast
spanning-tree 18 mode Fast
spanning-tree 19 mode Fast
spanning-tree 20 mode Fast
spanning-tree 21 mode Fast
spanning-tree 22 mode Fast
spanning-tree 23 mode Fast
spanning-tree 24 mode Fast
ip ssh
password manager
password operator