Access Security Guide K/KA/KB.15.15

To edit an existing manager access entry
To change the mask or access level for an existing entry, use the entry's IP address and enter the
new value(s). (Notice that any parameters not included in the command will be set to their default.):
HPswitch(config)# ip authorized-managers 10.28.227.101 255.255.255.0 access operator
The above command replaces the existing mask and access level for IP address 10.28.227.101
with 255.255.255.0 and operator.
The following command replaces the existing mask and access level for IP address 10.28.227.101
with 255.255.255.255 and manager(the defaults) because the command does not specify either
of these parameters.
HPswitch(config)# ip authorized-managers 10.28.227.101
To delete an authorized manager entry
This command uses the IP address of the authorized manager you want to delete:
HPswitch(config)# no ip authorized-managers 10.28.227.101
Configuring IP Authorized Managers for the switch (CLI)
See the IPv6 Configuration Guide for information about Authorized IP manager configuration with
IPv6 addresses.
Syntax:
[no] ip authorized-managers ip-address ip-mask access [
manager | operator ] access-method [ all | ssh | telnet | web
| snmp | tftp ]
[no] ipv6 authorizedmanagers ip-address ip-mask access [
manager | operator ] access-method [ all | ssh | telnet | web
| snmp | tftp ]
Configures one or more authorized IP addresses.
access [ manager | operator ]
Configures the privilege level for <ip-address>. Applies only to access through
telnet, SSH, SNMPv1, SNMPv2c, and SNMPv3.
Default: manager
access-method [ manager | operator ] access-method [ all | ssh
| telnet | web | snmp | tftp ]
Configures access levels by access method and IP address. Each management
method can have its own set of authorized managers. Default
all
Figure 305 Configuring IP authorized manager access method SSH
To Authorize Manager Access
This command authorizes manager-level access for any station with an IP address of 10.28.227.0
through 10.28.227.255:
HP Switch(config)# ip authorized-managers 10.28.227.101
255.255.255.0 access manager
Similarly, the next command authorizes manager-level access for any station having an IP address
of 10.28.227.101 through 103:
414 Authorized IP Managers