Secure Access To The Switch; Setting Allowable Source Ip Address Ranges - HP GbE2c - Blc Layer 2/3 Fiber SFP Option Application Manual

See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem User Guide for a complete list of supported MIBs.

Secure access to the switch

Secure switch management is needed for environments that perform significant management functions across the
Internet. The following are some of the functions for secured management:
Limiting management users to a specific IP address range. See the "Setting allowable source IP address ranges"
section in this chapter.
Authentication and authorization of remote administrators. See the "RADIUS authentication and authorization"
section or the "TACACS+ authentication" section, both later in this chapter.
Encryption of management information exchanged between the remote administrator and the switch. See the
"Secure Shell and Secure Copy" section later in this chapter.

Setting allowable source IP address ranges

To limit access to the switch without having to configure filters for each switch port, you can set a source IP address
(or range) that will be allowed to connect to the switch IP interface through Telnet, SSH, SNMP, or the switch browser-
based interface (BBI).
When an IP packet reaches the application switch, the source IP address is checked against the range of addresses
defined by the management network and management mask. If the source IP address of the host or hosts is within this
range, it is allowed to attempt to log in. Any packet addressed to a switch IP interface with a source IP address
outside this range is discarded.
Configuring an IP address range for the management network
Configure the management network IP address and mask from the System Menu in the CLI. For example:
>> Main# /cfg/sys/access/mgmt/add
Enter Management Network Address: 192.192.192.0
Enter Management Network Mask: 255.255.255.128
Accessing the switch 17