HP HP ProCurve Series 6600, Access Security Manual

Page: 234 / 778

5-30
Authentication
Operating Notes
Operating Notes
■ If you configure Authorized IP Managers on the switch, it is not
necessary to include any devices used as servers in the
authorized manager list. That is, authentication traffic between a
server and the switch is not subject to Authorized IP
Manager controls configured on the switch. Also, the switch does not
attempt authentication for a management station that the
Authorized IP Manager list excludes because, independent of
, the switch already denies access to such stations.
■ When is not enabled on the switch—or when the switch’s
only designated servers are not accessible— setting a local
Operator password without also setting a local Manager password
does not protect the switch from manager-level access by unauthor-
ized persons.
■ When using the
copy
command to transfer a configuration to a TFTP
server, any optional, server-specific and global encryption keys (page
5-17) in the TACACS configuration will not be included in the trans-
ferred file. Otherwise, a security breach could occur, allowing access
to the username/password information.