HP 2530 User Manual

with the correct port, even when another device is acting as a DHCP relay or when the server is
on the same subnet as the client.
NOTE: DHCP snooping only overrides Option 82 settings on a VLAN with snooping enabled,
not on VLANS without snooping enabled.
If DHCP snooping is enabled on a switch where an edge switch is also using DHCP snooping, HP
recommends that you have the packets forwarded so the DHCP bindings are learned. To configure
the policy for DHCP packets from untrusted ports that already have Option 82 present, use the
following command in the global configuration context.
Syntax:
[no] dhcp-snooping option 82 [ remote-id <mac | subnet-ip | mgmt-ip> ]
[ untrusted-policy <drop | keep | replace> ]
Enables DHCP Option 82 insertion in the packet, using the following parameters:
remote-id Set the value for the remote-id field to one of the following.
DetailTaskParameter
Default.The switch MAC address for the
remote-id.
mac
If subnet-ip is specified but the value is
not set, the MAC address is used.
The IP address of the VLAN the packet
was received on for the remote-id.
subnet-ip
If mgmt-ip is specified but the value is not
set, the MAC address is used.
The management VLAN IP address of
the remote-id.
mgmt-ip
untrusted-policy: Configure DHCP snooping behavior when forwarding a DHCP packet from an
untrusted port that already contains DHCP relay information (Option 82).
TaskParameter
The packet is dropped (default).drop
The packet is forwarded without replacing the option information.keep
The existing option is replaced with a new Option 82 generated by the switch.replace
NOTE: The default drop policy remains in effect if any untrusted nodes, such as clients, are
directly connected to this switch.
Changing remote-id from a MAC to an IP address
By default, DHCP snooping uses the MAC address of the switch as the remote-id in Option 82
additions. To use the IP address of the VLAN where the packet was received or the IP address of
the management VLAN, enter the following command with the associated parameter:
HP Switch(config)# dhcp-snooping option 82 remote-id <mac|subnet-ip|mgmt-ip>
Configuring advanced threat protection 11

HP 2530 Specifications

General

Layer	Layer 2
Operating Temperature	32°F to 113°F (0°C to 45°C)
Model	HP 2530
Power over Ethernet (PoE)	PoE+
Management	Web interface, CLI, SNMP
Memory	128 MB flash
Input Voltage	100-240 VAC
Jumbo Frame Support	Yes
Operating Humidity	15% to 95% non-condensing

Summary

1 Updates for the HP Switch Software Access Security Guide

Configuring advanced threat protection

Covers advanced threat protection features like DHCP snooping, Dynamic ARP protection, and Instrumentation monitor.

DHCP snooping

Details DHCP snooping for preventing DoS attacks by distinguishing trusted and untrusted ports.

Dynamic ARP protection

Explains how to protect networks from ARP poisoning attacks using dynamic ARP protection.

Dynamic IP Lockdown

This feature prevents IP source address spoofing by enforcing IP-to-MAC bindings.

Using the instrumentation monitor

How to use the instrumentation monitor to detect security anomalies and irregular operations.

Configuring RADIUS server support for switch services

Introduction

Explains configuring CoS, rate-limiting, and ACL client services via a RADIUS server.

Configuring and using dynamic (RADIUS-assigned) access control lists

Describes applying RADIUS-assigned ACLs to filter IP traffic from authenticated clients.

2 Updates for the HP Switch Software IPv6 Configuration Guide

Access Control Lists (ACLs)

Details configuring, applying, and editing static IPv6 ACLs for traffic filtering.

ACL applications

Covers filtering traffic from hosts, subnets, and applying ACLs at network edges.

RADIUS-assigned ACLs

Explains ACLs configured on a RADIUS server and assigned to authenticated clients.

Planning and configuring ACLs

Outlines steps for identifying ACL actions, designing ACLs, and applying them.

ACL operation

Describes how ACLs apply to ports, trunks, and filter traffic types.

Guidelines for planning ACL structure

Covers determining ACL application points and the order of ACEs for resource efficiency.

ACL configuration structure

Details the basic structure of an ACL, including identity, remarks, and ACEs.