Using Passwords, Port Security, and Authorized IP

Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access

Using IP Authorized Managers

 

Overview of IP Mask Operation

 

The default IP Mask is 255.255.255.255 and allows switch access only to a

 

station having an IP address that is identical to the Authorized Manager IP

 

parameter value. (“255” in an octet of the mask means that only the exact value

 

in the corresponding octet of the Authorized Manager IP parameter is allowed

 

in the IP address of an authorized management station.) However, you can

 

alter the mask and the Authorized Manager IP parameter to specify ranges of

 

authorized IP addresses. For example, a mask of 255.255.255.0 and any value for

 

the Authorized Manager IP parameter allows a range of 0 through 255 in the

 

4th octet of the authorized IP address, which enables a block of up to 254 IP

 

addresses for IP management access (excluding 0 for the network and 255 for

 

broadcasts). A mask of 255.255.255.252 uses the 4th octet of a given Authorized

 

Manager IP address to authorize four IP addresses for management station

 

access. The details on how to use IP masks are provided under “Building IP

 

Masks” on page 7-36.

 

 

N o t e

The IP Mask is a method for recognizing whether a given IP address is

 

authorized for management access to the switch. This mask serves a different

 

purpose than IP subnet masks and is applied in a different manner.

 

 

7-32