HP HP ProCurve series 2500, Management And Configuration Manual

Page: 175 / 392

7-35
Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access
Using IP Authorized Managers
Usi
n
g P
a
sswo
rds,
P
o
rt
S
ecu
ri
ty
, an
d A
u
th
or
iz
ed
I
P
Configuring IP Authorized Managers for the Switch
Syntax:
ip authorized-managers <ip address>
[mask <mask-bits> ]
<operator | manager>
To Authorize Manager Access. This command authorizes manager-level
access for any station having an IP address of 10.28.227.0 through
10.28.227.255:
HP2512(conf
ig
)# ip authorized-managers
10.28.227.101 mask 255.255.255.0 manager
Similarly, the next command authorizes manager-level access for any station
having an IP address of 10.28.227.101 through 103:
HP2512(config)# ip authorized-managers
10.28.227.101 mask 255.255.255.252 manager
If you omit the mask when adding a new authorized manager, the switch
automatically uses
255.255.255.255
for the mask. If you do not specify
either Manager or Operator access, the switch automatically assigns the
Manager access. For example:
HP2512(config)# ip authorized-managers 10.28.227.105
The result of entering the above example is:
• Authorized Station IP Address: 10.28.227.105
• IP Mask: 255.255.255.255, which authorizes only the specified station
(10.28.227.105 in this case). (See “Configuring Multiple Stations Per
Authorized Manager IP Entry” on page 7-37.)
• Access Level: Manager
To Edit an Existing Manager Access Entry. To change the mask or
access level for an existing entry, use the entry’s IP address and enter the new
value(s). (Notice that any parameters not included in the command will be set
to their default.):
HP2512(config)# ip authorized-managers
10.28.227.101 mask 255.255.255.0 operator
The above command replaces the existing mask and access level for IP
address 10.28.227.101 with
255.255.255.0
and
operator
.