Additional Examples For Authorizing Multiple Stations; Operating Notes - HP Q.11.XX Manual

Procurve 2510 series switches
Table of Contents

Advertisement

Using Authorized IP Managers

Operating Notes

Entries for Authorized
Manager List
IP Mask
255 255 0
Authorized
10
33
248 1
Manager IP
IP Mask
255 238 255 250
Authorized
10
247 100 195
Manager IP
10-12

Additional Examples for Authorizing Multiple Stations

Results
255
This combination specifies an authorized IP address of 10.33.xxx.1. It could be
applied, for example, to a subnetted network where each subnet is defined by the
third octet and includes a management station defined by the value of "1" in the
fourth octet of the station's IP address.
Allows 230, 231, 246, and 247 in the 2nd octet, and 194, 195, 198, 199 in the 4th octet.

Operating Notes

Network Security Precautions: You can enhance your network's
security by keeping physical access to the switch restricted to autho-
rized personnel, using the password features built into the switch,
using the additional security features described in this manual, and
preventing unauthorized access to data on your management stations.
Modem and Direct Console Access: Configuring authorized IP
managers does not protect against access to the switch through a
modem or direct Console (RS-232) port connection.
Duplicate IP Addresses: If the IP address configured in an autho-
rized management station is also configured (or "spoofed") in another
station, the other station can gain management access to the switch
even though a duplicate IP address condition exists.
Web Proxy Servers: If you use the Web browser interface to access
the switch from an authorized IP manager station, it is recommended
that you avoid the use of a Web proxy server in the path between the
station and the switch. This is because switch access through a Web
proxy server requires that you first add the Web proxy server to the
Authorized Manager IP list. This reduces security by opening switch
access to anyone who uses the Web proxy server. The following two
options outline how to eliminate a Web proxy server from the path
between a station and the switch:

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

U.11.xxProcurve 2510-24Procurve 2510-48

Table of Contents