Defining Authorized Management Stations - HP ProCurve Switch 2900yl-24G Access Security Manual

Using Authorized IP Managers

Defining Authorized Management Stations

11-4
For each authorized manager address using Telnet, SNMPv1, or SNMPv2c,
you can configure either of these access levels:
■ Manager: Enables full access to all web browser and console interface
screens for viewing, configuration, and all other operations available in
these interfaces.
Operator: Allows read-only access from the web browser and console
■
interfaces. (This is the same access that is allowed by the switch's oper-
ator-level password feature.)
Defining Authorized Management
Stations
Authorizing Single Stations: The table entry authorizes a single man-
■
agement station to have IP access to the switch. To use this method, just
enter the IP address of an authorized management station in the Autho-
rized Manager IP column, and leave the IP Mask set to 255.255.255.255. This
is the easiest way to use the Authorized Managers feature. (For more on
this topic, see "Configuring One Station Per Authorized Manager IP Entry"
on page 11-10.)
■ Authorizing Multiple Stations: The table entry uses the IP Mask to
authorize access to the switch from a defined group of stations. This is
useful if you want to easily authorize several stations to have access to
the switch without having to type in an entry for every station. All stations
in the group defined by the one Authorized Manager IP table entry and its
associated IP mask will have the same access level—Manager or Opera-
tor. (For more on this topic, refer to "Configuring Multiple Stations Per
Authorized Manager IP Entry" on page 11-11.)
To configure the switch for authorized manager access, enter the appropriate
Authorized Manager IP value, specify an IP Mask, and select either Manager
or Operator for the Access Level. The IP Mask determines how the Authorized
Manager IP value is used to allow or deny access to the switch by a manage-
ment station.