HP 6120XG HP ProCurve Series 6120 Blade Switches IPv6 Configuration Guide - Page 135

Authorized IP Managers for IPv6, Usage Notes

Get HP 6120XG PDF manuals and user guides View all HP 6120XG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 135 highlights

IPv6 Management Security Features Authorized IP Managers for IPv6 Authorized IP Managers for IPv6 The Authorized IP Managers feature uses IP addresses and masks to deter­ mine which stations (PCs or workstations) can access the switch through the network. This feature supports switch access through: ■ Telnet and other terminal emulation applications ■ Web browser interface ■ SNMP (with a correct community name) ■ SSH ■ TFTP As with the configuration of IPv4 management stations, the Authorized IP Managers for IPv6 feature allows you to specify the IPv6-based stations that can access the switch. Usage Notes ■ You can configure up to 100 authorized IPv4 and IPv6 manager addresses on a switch, where each address applies to either a single management station or a group of stations. Each authorized manager address consists of an IPv4 or IPv6 address and a mask that determines the individual management stations that are allowed access. • You configure authorized IPv4 manager addresses using the ip autho­ rized-managers command. For more information, refer to the "Using Authorized IP Managers" chapter in the Access Security Guide. • You configure authorized IPv6 manager addresses using the ipv6 authorized-managers command. For more information, see "Configur­ ing Authorized IP Managers for Switch Access" on page 6-5. ■ You can block all IPv4-based or all IPv6-based management stations from accessing the switch by entering the following commands: • To block access to all IPv4 manager addresses while allowing access to IPv6 manager addresses, enter the ip authorized-managers 0.0.0.0 command. • To block access to all IPv6 manager addresses while allowing access to IPv4 manager addresses, enter the ipv6 authorized-managers :: com­ mand. (The double colon represents an IPv6 address that consists of all zero's: 0:0:0:0:0:0:0:0.) 6-3

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
IPv6 Management Security Features
Authorized IP Managers for IPv6
Authorized IP Managers for IPv6
The Authorized IP Managers feature uses IP addresses and masks to deter-
mine which stations (PCs or workstations) can access the switch through the
network. This feature supports switch access through:
■
Telnet and other terminal emulation applications
■
Web browser interface
■
SNMP (with a correct community name)
■
SSH
■
TFTP
As with the configuration of IPv4 management stations, the Authorized IP
Managers for IPv6 feature allows you to specify the IPv6-based stations that
can access the switch.
Usage Notes
■
You can configure up to 100 authorized IPv4 and IPv6 manager
addresses
on a switch, where each address applies to either a single management
station or a group of stations. Each authorized manager address consists
of an IPv4 or IPv6 address and a mask that determines the individual
management stations that are allowed access.
•
You configure authorized IPv4 manager addresses using the
ip autho-
rized-managers
command. For more information, refer to the “Using
Authorized IP Managers” chapter in the
Access Security Guide
.
•
You configure authorized IPv6 manager addresses using the
ipv6
authorized-managers
command. For more information, see “Configur-
ing Authorized IP Managers for Switch Access” on page 6-5.
■
You can block all IPv4-based or all IPv6-based management stations from
accessing the switch by entering the following commands:
•
To block access to all IPv4 manager addresses while allowing access
to IPv6 manager addresses, enter the
ip authorized-managers 0.0.0.0
command.
•
To block access to all IPv6 manager addresses while allowing access
to IPv4 manager addresses, enter the
ipv6 authorized-managers ::
com-
mand. (The double colon represents an IPv6 address that consists of
all zero’s:
0:0:0:0:0:0:0:0
.)
6-3