HP 3PAR Service Processor Software 2.5.x Release Notes (QR482-96663)

14 Service Processor Software 2.5.2.GA-11.P001 Release
(Optional)
What’s New in the Service Processor
The SP-2.5.2.GA-11.P001 patch is an optional patch that provides an update for the HP 3PAR
Service Processor when running remote operations. Additionally, the default password of the
spdood, spvar, and root users is reset to a new default password with this patch.
These patches are available as physical media or as self-install packages for deployment to Secure
Network Mode devices (available internally to HP only).
Installing this patch allows the disabling of Permissive Mode on the firewall and changing the
Customer Controlled Access settings using the 3parcust user account. For more information about
SP control functions and communication settings, see the HP 3PAR Service Processor Software
User’s Guide.
Disabling Permissive Mode on the Firewall
By default, Permissive node is enabled for the firewall. For increased security, you can disable
Permissive mode by using either SPMAINT or SPOCC. If you do this, you must add at least one
host to the firewall to access SPMAINT or SPOCC.
To disable Permissive mode by using SPMAINT:
1. Log in to the SPMAINT utility by using the 3parcust user account.
2. On the SPMAINT home page, enter 2 for Network Configuration.
3. Enter 3 for Firewall Manipulation.
4. Enter 6 for Toggle Permissive Public Firewall (currently On).
To disable Permissive mode by using SPOCC:
1. Log in to SPOCC by using the 3parcust user account.
2. In the left navigation pane, click SPMaint.
3. Click Network Configuration.
4. Click Firewall Manipulation.
5. Click Disable Permissive Mode.
Changing the Customer Controlled Access (CCA) Setting
To change the Customer Controlled Access setting by using SPOCC:
1. Log in to SPOCC by using the 3parcust user account.
2. On the SPOCC home page, click the SPmaint tab.
3. Click Network Configuration.
4. Click Customer Controlled Access.
5. Click the setting that you want. For example, to set outbound-only communications (and in
effect, disable remote operations), click Set outbound only HQ communications — no remote
access.
6. Click OK to confirm the change.
To change the CCA setting by using SPMAINT:
1. Log in to the SPMAINT utility by using the 3parcust user account.
2. From the SP Main menu, select option 2 for Network Configuration.
3. Enter 1 for Customer Controlled Access.
4. Enter 1 for Turn off HQ communications, 2 for Set outbound only HQ communications, or 3
for Set Bi-directional HQ Communications as desired to change the HQ connectivity control
setting.
22 Service Processor Software 2.5.2.GA-11.P001 Release (Optional)