Using Authorized Ip Managers - HP 4108GL Management And Configuration Manual

Using Authorized IP Managers for Increased Management Security

Using Authorized IP Managers

Using Authorized IP Managers

Authorized IP Manager Features
Feature
Listing (Showing) Authorized
Managers
Configuring Authorized IP
Managers
Building IP Masks
Operating and Troubleshooting
Notes
This feature enables you to enhance security on the switch by using IP
addresses to authorize which stations (PCs or workstations) can access the
switch. Also, when configured in the switch, Authorized IP Managers take
precedence over TACACS+ and local user-name/password pairs as indicated
in table 10-1, "Management Access Security Features" on page 10-2.
Thus, with Authorized IP Management configured, having the correct pass-
words is not sufficient for accessing the switch through the network unless
the station attempting access is also included in the switch's Authorized IP
Managers configuration.
Options. You can configure:
I
I
C a u t i o n
Configuring Authorized IP Managers does not protect access to the switch
through a modem or direct connection to the Console (RS-232) port. Also, if
the IP address assigned to an authorized management station is configured in
another station, the other station can gain management access to the switch
even though a duplicate IP address condition exists. For these reasons, you
should enhance your network's security by keeping physical access to the
switch restricted to authorized personnel, using the TACACS+ and user-name/
password features built into the switch, and preventing unauthorized access
to data on your management stations.
10-4
Up to 10 authorized manager addresses, where each address applies to
either a single management station or a group of stations
Manager or Operator access level
Default Menu
n/a page 10-7
None page 10-7
n/a page 10-10 page 10-10 page 10-10
n/a page 10-13 page 10-13 page 10-13
CLI Web
page 10-8 page 10-10
page 10-8 page 10-10