MNS-BB Software User Guide
-35-
7.6 Operating and Troubleshooting Notes:
7.6.1 Network Security Precautions:
You can enhance your network’s security by keeping physical access to the switch restricted to
authorized personnel, using the password features built into the switch, and preventing unauthorized
access to data on your management stations.
Modem and Direct Console Access: Configuring authorized IP manager does not protect against
access to the switch through a modem or direct Console (RS-232) port connection.
7.6.2 Duplicate IP Addresses:
If the IP address configured in an authorized management station is also configured in another station,
the other station can gain management access to the switch even though a duplicate IP address
condition exists.
7.6.3 Web Proxy Servers:
If you use the web browser interface to access the switch from an authorized IP manager station, it is
recommended that you avoid the use of a web proxy server in the path between the station and the
switch. This is because switch access through a web proxy server requires that you first add the web
proxy server to the Authorized Manager IP list. This reduces security by opening switch access to
anyone who uses the web proxy server. The following two options outline how to eliminate a web
proxy server from the path between a station and the switch:
Even if you need proxy server access enabled in order to use other applications, you can still
eliminate proxy service for web access to the switch. To do so, add the IP address or DNS name of
the switch to the non-proxy, or “Exceptions” list in the web browser interface you are using on the
authorized station. (e.g. in Microsoft Explorer go to tools, internet options, connections, lan settings,
use a proxy server check, and advanced and enter it there).
If you don’t need proxy server access at all on the authorized station, then just disable the proxy
server feature in the station’s web browser interface.
7.6.4 Global Access
User can authorize the services globally. Here is the list of commands.
snmp <enable|disable>
dhcp <enable|disable>
telnet <enable|disable>
web <enable|disable>
ssl <enable|disable>
For example,
LE2425A(access)##snmp disable
It disables the SNMP Access to everyone.
7.7 Web: Viewing and Configuring Global Access Information
In the web browser interface:
1. Click on the [Administration]
2. Click on [Access Ctrl].
4. Click on [Add] button.
5. After you make the desired changes, click on [OK] button.
6. Click [Save] to save the configuration.
7.7.1 Web: Viewing and Configuring System Information
In the web browser interface:
1. Click on the [Administration]
2. Click on [System].
4. Click on [Modify] button.
5. After you make the desired changes, click on [OK] button.
6. Click [Save] to save the configuration.
To Next Page
Loading...
