HP PROCURVE 6208M-SX Installation And Getting Started Manual: Set Up Local User Accounts

Hewlett-packard switch user manual.
Hide thumbs

Advertisement

Table 3.1: Ways to secure management access to HP devices (Continued)
Access method
Web management access
TFTP access
Restricting Remote Access to Management Functions
You can restrict access to management functions from remote sources, including Telnet, the Web management
interface, and SNMP. The following methods for restricting remote access are supported:
Using ACLs to restrict Telnet, Web management interface, or SNMP access
Allowing remote access only from specific IP addresses
Allowing remote access only to clients connected to a specific VLAN
Specifically disabling Telnet, Web management interface, or SNMP access to the device
The following sections describe how to restrict remote access to an HP device using these methods.
Using ACLs to Restrict Remote Access
You can use standard ACLs to control the following access methods to management functions on an HP device:
Telnet access
Web management access
SNMP access
To configure access control for these management access methods:
1.
Configure an ACL with the IP addresses you want to allow to access the device
2.
Configure a Telnet access group, web access group, and SNMP community strings. Each of these
configuration items accepts an ACL as a parameter. The ACL contains entries that identify the IP addresses
that can use the access method.
The following sections present examples of how to secure management access using ACLs. See the "Using
Access Control Lists (ACLs)" chapter in the Advanced Configuration and Management Guide for more information
on configuring ACLs.
How the access
Ways to secure the access method
method is secured
by default
SNMP read or read­
Regulate Web management access using
write community
ACLs
strings
Allow Web management access only from
specific IP addresses
Allow Web management access only to clients
connected to a specific VLAN
Disable Web management access

Set up local user accounts

Establish SNMP read or read-write community
strings
Configure TACACS/TACACS+ security
Configure RADIUS security
Not secured
Allow TFTP access only to clients connected
to a specific VLAN
Securing Access
See
page
3-4
3-5
3-6
3-7
3-11
3-13
3-16
3-31
3-6
3 - 3

Advertisement

   Related Manuals for HP PROCURVE 6208M-SX

Comments to this Manuals

Symbols: 0
Latest comments: