HP PROCURVE 2910AL, Access Security Manual

Page: 567 / 594

Using Authorized IP Managers
Web: Configuring IP Authorized Managers
access through a web proxy server requires that you first add the web proxy
server to the Authorized Manager IP list. This reduces security by opening
switch access to anyone who uses the web proxy server.
How to Eliminate the Web Proxy Server
There are two ways to eliminate a web proxy server from the path between a
station and the switch:
1. Add the IP address or DNS name of the switch to the non-proxy or
Exceptions list in the web browser interface used on the authorized
station.
2. If you don’t need proxy server access on the authorized station, disable
the proxy server feature in the station’s web browser interface.
N o t e
IP or MAC authentication can be used without a web proxy server.
Using a Web Proxy Server to Access the Web Browser
Interface
C a u t i o n
This is NOT recommended. Using a web proxy server between the stations
and the switch poses a security risk. If the station uses a web proxy server to
connect to the switch, any proxy user can access the switch.
If it is necessary to use the switch’s web browser interface and your browser
access is through a web proxy server, perform these steps:
1. Enter the web proxy server’s MAC address in the port’s Authorized
Addresses list.
2. Enter the web proxy server’s IP address in the switch’s IP Authorized
Managers list.
You must perform both of these steps or the switch only detects the proxy
server’s MAC address and IP address instead of your workstation addresses,
and your connection is considered unauthorized.
Web-Based Help
For web-based help on how to use the web browser interface screen, click on
the
[?]
button provided on the web browser screen.
14-9