HP ProCurve 2500 Configuring IP Authorized Managers for the Switch

Using Passwords, Port Security, and Authorized IP Managers To Protect Against Unauthorized Access

Using IP Authorized Managers

Configuring IP Authorized Managers for the Switch

Syntax: ip authorized-managers <ip address> [mask <mask-bits>] <operator manager>

To Authorize Manager Access. This command authorizes manager-level access for any station having an IP address of 10.28.227.0 through 10.28.227.255:

HP2512(config)# ip authorized-managers 10.28.227.101 mask 255.255.255.0 manager

Similarly, the next command authorizes manager-level access for any station having an IP address of 10.28.227.101 through 103:

HP2512(config)# ip authorized-managers 10.28.227.101 mask 255.255.255.252 manager

If you omit the mask when adding a new authorized manager, the switch automatically uses 255.255.255.255 for the mask. If you do not specify either Manager or Operator access, the switch automatically assigns the Manager access. For example:

HP2512(config)# ip authorized-managers 10.28.227.105

The result of entering the above example is:

•Authorized Station IP Address: 10.28.227.105

•IP Mask: 255.255.255.255, which authorizes only the specified station (10.28.227.105 in this case). (See “Configuring Multiple Stations Per Authorized Manager IP Entry” on page 7-37.)

•Access Level: Manager

To Edit an Existing Manager Access Entry. To change the mask or access level for an existing entry, use the entry’s IP address and enter the new value(s). (Notice that any parameters not included in the command will be set to their default.):

HP2512(config)# ip authorized-managers 10.28.227.101 mask 255.255.255.0 operator

The above command replaces the existing mask and access level for IP address 10.28.227.101 with 255.255.255.0 and operator.

Authorized and Security,	Port Passwords, Using
IP

7-35