Security And Integrity Recommendations; Web: Enabling Group Configuration - HP 530 Management Manual

Parameter changes that are made using the CLI (after the write mem
command), the Web browser interface (after clicking the Update button), or
an SNMP request will all trigger synchronization.
Complete synchronization may take up to one minute to propagate, depending
on the size of the group and on network latency.
When a member leaves the group, the "oldest" of the remaining members
becomes the "reference". When a member returns to the group, its "age" is
reset to zero. This mechanism prevents the configuration of a rogue access
point from infecting the group.

Security and Integrity Recommendations

Although you can initiate changes to a group's configurations from any
member of the group, care should be taken to plan, and probably limit, access
to the management interfaces of the member access points in a group. If two
members of a group are being managed simultaneously, and incompatible
parameter changes are applied, the group's configuration could become
corrupted.
For instance, if one parameter is simultaneously set to two different values on
different APs, the group's configuration could be synchronized inconsistently.
Similarly, applying incompatible values to parameters with cross-dependen-
cies could also produce unpredictable results.
The recommended method for ensuring integrity of a group configuration is
to enforce a single administration point in the group. This ensures that
conflicting changes to the group configuration cannot be applied to the group.
Depending on administrative requirements, access to member APs can be
further restricted by disabling CLI, Web, and SNMP access, as appropriate.
(See "Web: Configuring Access Controls" on page 5-10 or "CLI: Configuring
Management Controls" on page 5-12 for more information.)

Web: Enabling Group Configuration

The Management – Group Configuration screen configures an access point to
join a group configuration.
The Web interface enables you to modify these parameters:
■ Group Configuration: Enables/Disables Group Configuration on the
current access point. (The default is Disabled.)
■ Group Name: Specifies the name of the group to which the access point
will belong (up to 40 characters).
General System Configuration
Managing Group Configuration
5-65