HP Switch Befehle Übersicht – Kurzbefehlsreferenz Procurve Switche

Weiterlesen →

HP ProCurve Switches – Error Message „SFTP for IPv4 must be disabled before enabling IPv4 tftp“ when Enabling the TFTP Client

Issue

When attempting to enable the TFTP client the error message SFTP for IPv4 must be disabled before enabling IPv4 tftp is reported.

Solution

The SFTP protocol must be disabled before the TFTP client can be enabled. The commands listed here display the output to determine if secure transfer is enabled and how to disable secure transfer protocol:

ProcurveSwitch# configure
ProcurveSwitch(config)# tftp client

SFTP must be disabled before enabling tftp :

ProcurveSwitch# show ip ssh

SSH Enabled : Yes
TCP Port Number : 22
Timeout (sec) : 120
Secure Copy Enabled : Yes <—-

SFTP deaktivieren:
ProcurveSwitch(config)# no ip ssh filetransfer

In der Config:

no telnet-server (turns off Telnet to switch)
telnet-server (turns on Telnet to server)

“BPDU protection is a security feature designed to protect the active STP topology by preventing spoofed BPDU packets from entering the STP domain. In a typical implementation, BPDU protection would be applied to edge ports connected to end user devices that do not run STP. If STP BPDU packets are received on a protected port, the feature will disable that port and alert the network manager …”

Standard bei unseren Switchen ist das bei Port 1-20 BPDU Protection aktiviert ist – d.h. wenn hier ein Swicht (bzw. ein gerät das STP Packete versendet) angesteckt wird, wird der Port sofort deaktiviert.

Dieses Feature kann nur über die Config Shell Konfiguriert werden:

1. Auf Switch per Putty anmelden
2. Eingabe: config
3. Aktivieren von BPDU: spanning-tree [PORT] bpdu-protection
    Deaktivieren vpn PBDU: no spanning-tree [PORT] bpdu-protection

Will man den Port und Switch zu einer bekannten MAC-Adresse ermittlent, sind diese beiden Commands sehr hilfreich:

cdp aktivieren = cdp run

cdp deaktivieren = no cdp run

show cdp neigbors detail = zeigt alle Details zu den Ports

This version of the boot command gives you the option of specifying whether

To view a list of port “friendly names” on an HP Procurve 2510G switch, login to the CLI and perform the following command:
show name

Once you’ve made changes to the configuration of an HP Procurve switch using the CLI, those changes need to be saved so that they persist after a switch reboot. To save the current running config so that it persists after a reboot, use the command:

write mem

To enable SSH access (and disable telnet access) to an HP switch, issue the following commands on the command-line:

ProCurve Switch(config)# crypto key generate ssh
ProCurve Switch(config)# ip ssh
ProCurve Switch(config)# no telnet–server