Comments on: Sample HP Procurve Configuration http://itknowledgeexchange.techtarget.com/techstop/sample-hp-procurve-configuration/ Sun, 08 Nov 2009 14:49:41 +0000 http://wordpress.org/?v=2.6.2 By: Arr2036 http://itknowledgeexchange.techtarget.com/techstop/sample-hp-procurve-configuration/#comment-3 Arr2036 Mon, 28 Jul 2008 22:35:31 +0000 http://itknowledgeexchange.techtarget.com/techstop/sample-hp-procurve-configuration/#comment-3 Don't force STP-Compatible spanning tree, the switch will automatically adjust spanning tree behaviour on ports that recieve legacy STP BPDUs, it's in the RSTP spec. Besides all managed ProCurve switches since the 2500 series support RSTP (Rapid Spanning Tree Protocol), which is much better to use. STP can have a delay of up to 30 seconds between a device being connected, and the port transitioning to a forwarding state, by which time most windows DHCP clients will have timed out. As you appear to be configuring a 2610 in your example, just issuing the spanning-tree command will be sufficient, this should enable MSTP. Ports on which RSTP and STP BPDUs are detected will be added into a single default MST instance on the switch, thus allowing backwards compatiblity with 802.1D spanning stree protocols. According to posts on the HP forums, memory is 'hard' allocated for VLANs depending on the max-vlan parameter. So I wouldn't set it to 256, but something more modest. If you're running GVRP i'd set it to the maximum number of VLANs on your network, plus 20 to allow for expansion (rebooting the switch every time you alter max-vlans gets to be annoying). Additionally it's worth enabling SSH and disabling telnet. crypto key generate ssh ip ssh no telnet-server And disabling the plaintext http server no web-management plaintext web-management ssl Don’t force STP-Compatible spanning tree, the switch will automatically adjust spanning tree behaviour on ports that recieve legacy STP BPDUs, it’s in the RSTP spec. Besides all managed ProCurve switches since the 2500 series support RSTP (Rapid Spanning Tree Protocol), which is much better to use. STP can have a delay of up to 30 seconds between a device being connected, and the port transitioning to a forwarding state, by which time most windows DHCP clients will have timed out.

As you appear to be configuring a 2610 in your example, just issuing the spanning-tree command will be sufficient, this should enable MSTP. Ports on which RSTP and STP BPDUs are detected will be added into a single default MST instance on the switch, thus allowing backwards compatiblity with 802.1D spanning stree protocols.

According to posts on the HP forums, memory is ‘hard’ allocated for VLANs depending on the max-vlan parameter. So I wouldn’t set it to 256, but something more modest. If you’re running GVRP i’d set it to the maximum number of VLANs on your network, plus 20 to allow for expansion (rebooting the switch every time you alter max-vlans gets to be annoying).

Additionally it’s worth enabling SSH and disabling telnet.
crypto key generate ssh
ip ssh
no telnet-server

And disabling the plaintext http server
no web-management plaintext
web-management ssl

]]>