Set Up Local User Accounts; Restricting Remote Access To Management Functions; Using Acls To Restrict Remote Access - HP PROCURVE 6208M-SX Installation And Getting Started Manual

Table 3.1: Ways to secure management access to HP devices (Continued)
Access method
Web management access
TFTP access

Restricting Remote Access to Management Functions

You can restrict access to management functions from remote sources, including Telnet, the Web management
interface, and SNMP. The following methods for restricting remote access are supported:
• Using ACLs to restrict Telnet, Web management interface, or SNMP access
• Allowing remote access only from specific IP addresses
• Allowing remote access only to clients connected to a specific VLAN
• Specifically disabling Telnet, Web management interface, or SNMP access to the device
The following sections describe how to restrict remote access to an HP device using these methods.

Using ACLs to Restrict Remote Access

You can use standard ACLs to control the following access methods to management functions on an HP device:
• Telnet access
• Web management access
• SNMP access
To configure access control for these management access methods:
1. Configure an ACL with the IP addresses you want to allow to access the device
2. Configure a Telnet access group, web access group, and SNMP community strings. Each of these
configuration items accepts an ACL as a parameter. The ACL contains entries that identify the IP addresses
that can use the access method.
The following sections present examples of how to secure management access using ACLs. See the "Using
Access Control Lists (ACLs)" chapter in the Advanced Configuration and Management Guide for more information
on configuring ACLs.
How the access Ways to secure the access method
method is secured
by default
SNMP read or read­ Regulate Web management access using
write community ACLs
strings
Allow Web management access only from
specific IP addresses
Allow Web management access only to clients
connected to a specific VLAN
Disable Web management access

Set up local user accounts

Establish SNMP read or read-write community
strings
Configure TACACS/TACACS+ security
Configure RADIUS security
Not secured Allow TFTP access only to clients connected
to a specific VLAN
Securing Access
See
page
3-4
3-5
3-6
3-7
3-11
3-13
3-16
3-31
3-6
3 - 3