HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 561 / 594

Using Authorized IP Managers
Options
Options
You can configure:
■
Up to 100 authorized manager
addresses
, where each address applies to
either a single management station or a group of stations
■ Manager or Operator access privileges
C a u t i o n
Configuring Authorized IP Managers does not protect access to the switch
through a modem or direct connection to the Console (RS-232) port. Also, if
an unauthorized station “spoofs” an authorized IP address, it can gain man­
agement access to the switch even though a duplicate IP address condition
exists. For these reasons, you should enhance your network’s security by
keeping physical access to the switch restricted to authorized personnel, using
the username/password and other security features available in the switch,
and preventing unauthorized access to data on your management stations.
Access Levels
For each authorized manager address, you can configure either of these access
levels:
■ Manager: Enables full access to all screens for viewing, configuration,
and all other operations available.
■
Operator: Allows read-only access. (This is the same access that is
allowed by the switch’s operator-level password feature.)
Defining Authorized Management
Stations
■ Authorizing Single Stations: The table entry authorizes a single man­
agement station to have IP access to the switch. To use this method, just
enter the IP address of an authorized management station in the Autho­
14-3