HP 6120XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 66
Front-Panel Security, When Security Is Important
View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 66 highlights
Configuring Username and Password Security Front-Panel Security Front-Panel Security The front-panel security features provide the ability to independently enable or disable some of the functions of the two buttons located on the front of the switch for clearing the password (Clear button) or restoring the switch to its factory default configuration (Reset+Clear buttons together). The ability to disable Password Recovery is also provided for situations which require a higher level of switch security. The front-panel Security features are designed to prevent malicious users from: ■ Resetting the password(s) by pressing the Clear button ■ Restoring the factory default configuration by using the Reset+Clear button combination. ■ Gaining management access to the switch by having physical access to the switch itself When Security Is Important Some customers require a high level of security for information. Also, the Health Insurance Portability and Accountability Act (HIPAA) of 1996 requires that systems handling and transmitting confidential medical records must be secure. It used to be assumed that only system and network administrators would be able to get access to a network switch because switches were typically placed in secure locations under lock and key. For some customers this is no longer true. Others simply want the added assurance that even if someone did manage to get to the switch that data would still remain secure. If you do not invoke front-panel security on the switch, user-defined passwords can be deleted by pushing the Clear button on the front panel. This function exists so that if customers forget the defined passwords they can still get back into the switch and reset the passwords. This does, however, leave the switch vulnerable when it is located in an area where non-authorized people have access to it. Passwords could easily be cleared by pressing the Clear button. Someone who has physical access to the switch may be able to erase the passwords (and possibly configure new passwords) and take control of the switch. 2-23