HP ProCurve 5406zl Access Security Guide

Using Authorized IP Managers
Operating Notes
Additional Examples for Authorizing Multiple Stations
Entries for Authorized
Manager List
Results
IP Mask 255 255 0 255 This combination specifies an authorized IP address of 10.33.xxx.1. It could be
Authorized 10 33 248 1
applied, for example, to a subnetted network where each subnet is defined by the
Manager IP
third octet and includes a management station defined by the value of “1” in the
fourth octet of the station’s IP address.
IP Mask 255 238 255 250 Allows 230, 231, 246, and 247 in the 2nd octet, and 194, 195, 198, 199 in the 4th octet.
Authorized 10 247 100 195
Manager IP
Operating Notes
■ Network Security Precautions: You can enhance your network’s secu-
rity by keeping physical access to the switch restricted to authorized
personnel, using the password features built into the switch, using the
additional security features described in this manual, and preventing
unauthorized access to data on your management stations.
■ Modem and Direct Console Access: Configuring authorized IP manag-
ers does not protect against access to the switch through a modem or
direct Console (RS-232) port connection.
■ Duplicate IP Addresses: If the IP address configured in an authorized
management station is also configured (or “spoofed”) in another station,
the other station can gain management access to the switch even though
a duplicate IP address condition exists.
■ Web Proxy Servers: If you use the web browser interface to access the
switch from an authorized IP manager station, it is recommended that you
avoid the use of a web proxy server in the path between the station and
the switch. This is because switch access through a web proxy server
requires that you first add the web proxy server to the Authorized Manager
IP list. This reduces security by opening switch access to anyone who
uses the web proxy server. The following two options outline how to
eliminate a web proxy server from the path between a station and the
switch:
12-12

HP ProCurve 5406zl Specifications

General

Product Name	HP ProCurve 5406zl
Category	Switch
Layer	Layer 3
Operating Temperature	32°F to 131°F (0°C to 55°C)
Operating Humidity	15% to 95% non-condensing
Management	SNMP, CLI
Power Supply	Redundant power supplies (optional)
Memory	128 MB flash, 512 MB SDRAM