HP IPv6 3500yl, IPv6 6200yl, IPv6 2900, IPv6 5400zl Authorized IP Managers for IPv6, Usage Notes

IPv6 Management Security Features

Authorized IP Managers for IPv6

Authorized IP Managers for IPv6

The Authorized IP Managers feature uses IP addresses and masks to deter- mine which stations (PCs or workstations) can access the switch through the network. This feature supports switch access through:

■Telnet and other terminal emulation applications

■Web browser interface

■SNMP (with a correct community name)

As with the configuration of IPv4 management stations, the Authorized IP Managers for IPv6 feature allows you to specify the IPv6-based stations that can access the switch.

Usage Notes

■You can configure up to ten authorized IPv4 and IPv6 manager addresses on a switch, where each address applies to either a single management station or a group of stations. Each authorized manager address consists of an IPv4 or IPv6 address and a mask that determines the individual management stations that are allowed access.

•You configure authorized IPv4 manager addresses using the ip autho- rized-managerscommand. For more information, refer to the “Using Authorized IP Managers” chapter in the Access Security Guide.

•You configure authorized IPv6 manager addresses using the ipv6 authorized-managerscommand. For more information, see “Configur- ing Authorized IP Managers for Switch Access” on page 6-5.

■You can block all IPv4-based or all IPv6-based management stations from accessing the switch by entering the following commands:

•To block access to all IPv4 manager addresses while allowing access to IPv6 manager addresses, enter the ip authorized-managers 0.0.0.0 command.

•To block access to all IPv6 manager addresses while allowing access to IPv4 manager addresses, enter the ipv6 authorized-managers ::com- mand. (The double colon represents an IPv6 address that consists of all zero’s: 0:0:0:0:0:0:0:0.)

6-3