HP ProCurve 2510G Series Manual page 307

Access security guide
Hide thumbs Also See for ProCurve 2510G Series:
Table of Contents

Advertisement

1st
2nd
Octet
Octet
IP Mask
255
255
Authorized
10
28
IP Address
4th Octet of IP Mask:
4th Octet of Authorized IP Address:
Bit Numbers Bit
Bit
7
6
Bit Values
128
64
4th Octet of
IP Mask (249)
4th Octet of
IP Authorized
Address (125)
Figure 10-5. Example of How the Bitmap in the IP Mask Defines Authorized Manager Addresses
3rd
4th
Manager-Level or Operator-Level Device Access
Octet
Octet
255
249
In this example (figure 10-5, below), the IP mask allows a group of up to
4 management stations to access the switch. This is useful if the only
227
125
devices in the IP address group allowed by the mask are management
stations. The "249" in the 4th octet means that bits 0 and 3 - 7 of the 4th
octet are fixed. Conversely, bits 1 and 2 of the 4th octet are variable. Any
value that matches the authorized IP address settings for the fixed bits is
allowed for the purposes of IP management station access to the switch.
Thus, any management station having an IP address of 10.28.227.121, 123,
125, or 127 can access the switch.
249
5
Bit
Bit
Bit
Bit
5
4
3
2
32
16
8
4
Bit
Bit
1
0
2
1
Bits 1 and 2 in the mask are "off", and bits 0 and 3
- 7 are "on", creating a value of 249 in the 4th octet.
Where a mask bit is "on", the corresponding bit
setting in the address of a potentially authorized
station must match the IP Authorized Address
setting for that same bit. Where a mask bit is "off"
the corresponding bit setting in the address can be
either "on" or "off". In this example, in order for a
station to be authorized to access the switch:
• The first three octets of the station's IP address
must match the Authorized IP Address.
• Bit 0 and Bits 3 through 6 of the 4th octet in the
station's address must be "on" (value = 1).
• Bit 7 of the 4th octet in the station's address
must be "off" (value = 0).
• Bits 1 and 2 can be either "on" or "off".
This means that stations with the IP address
13.28.227.X (where X is 121, 123, 125, or 127) are
authorized.
Using Authorized IP Managers
Building IP Masks
10-11

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents