HP HP ProCurve series 2500, Руководство по управлению и настройке

Страница: 170 / 392

7-30
Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access
Using IP Authorized Managers
Usi
ng P
a
sswo
rds,
P
o
rt
Se
c
u
rity,
a
n
d
A
u
th
o
riz
e
d
IP
Using IP Authorized Managers
Authorized IP Manager Features
This feature enables you to enhance security on the switch by using IP
addresses to authorize which stations (PCs or workstations) can access the
switch. Thus, having the correct passwords is not sufficient for accessing the
switch through the network unless the station attempting access is also
included in the switch’s Authorized IP Managers configuration. Access con-
trols cover:
■
The switch’s web browser interface
■ Telnet (CLI or menu interface)
■
SNMP (network management)
■ File transfers using TFTP (for configurations and software updates)
You can configure:
■ Up to 10 authorized manager addresses, where each address applies to
either a single management station or a group of stations
■
Manager or Operator access level
N o t e
This feature does not protect access to the switch through a modem or direct
connection to the Console (RS-232) port. Also, if the IP address assigned to
an authorized management station is configured in another station, the other
station can gain management access to the switch even though a duplicate IP
address condition exists. For these reasons, you should enhance your net-
work’s security by keeping physical access to the switch restricted to autho-
rized personnel, using the password features built into the switch, and
preventing unauthorized access to data on your management stations.
Feature Default Menu CLI Web
Listing (Showing) Authorized
Managers n/a page 7-33 page 7-34 page 7-36
Configuring Authorized IP
Managers None page 7-33 page 7-34 page 7-36
Building IP Masks n/a page 7-36 page 7-36 page 7-36
Operating and Troubleshooting
Notes n/a page 7-39 page 7-39 page 7-39