HP HP ProCurve series 2500, Руководство по управлению и настройке

Страница: 172 / 392

7-32
Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access
Using IP Authorized Managers
Usi
ng P
a
sswo
rds,
P
o
rt
Se
c
u
rity,
a
n
d
A
u
th
o
riz
e
d
IP
Overview of IP Mask Operation
The default IP Mask is 255.255.255.255 and allows switch access only to a
station having an IP address that is identical to the Authorized Manager IP
parameter value. (“255” in an octet of the mask means that only the exact value
in the corresponding octet of the Authorized Manager IP parameter is allowed
in the IP address of an authorized management station.) However, you can
alter the mask and the Authorized Manager IP parameter to specify ranges of
authorized IP addresses. For example, a mask of
255.255.255. 0 and any value for
the Authorized Manager IP parameter allows a range of 0 through 255 in the
4th octet of the authorized IP address, which enables a block of up to 254 IP
addresses for IP management access (excluding 0 for the network and 255 for
broadcasts). A mask of
255.255.255.25 2
uses the 4th octet of a given Authorized
Manager IP address to authorize four IP addresses for management station
access. The details on how to use IP masks are provided under “Building IP
Masks” on page 7-36.
N o t e
The IP Mask is a method for recognizing whether a given IP address is
authorized for management access to the switch. This mask serves a different
purpose than IP subnet masks and is applied in a different manner.