Access Security Guide K/KA/KB.15.15

Table 44 Analysis of IP Mask for Single-Station Entries (continued)
Manager-Level or Operator-Level Device Access4th Octet3rd Octet2nd Octet1st Octet
authorized IP address settings for the fixed bits is allowed
for the purposes of IP management station access to the
switch. Thus, any management station having an IP
address of 10.28.227.121, 123, 125, or 127 can
access the switch.
Figure 308 How the Bitmap in the IP Mask Defines Authorized Manager Addresses
Table 45 Additional examples for authorizing multiple stations
ResultsEntries for authorized manager list
This combination specifies an authorized IP address of
10.33.xxx.1. It could be applied, for example, to a
2550255255IP mask
12483310Authorized
manager IP
subnetted network where each subnet is defined by the
third octet and includes a management station defined
by the value of "1" in the fourth octet of the station's
IP address.
Allows 230, 231, 246, and 247 in the 2nd octet, and
194, 195, 198, 199 in the 4th octet.
250255238255IP mask
19510024710Authorized
manager IP
Overview
Overview
The Authorized IP Managers feature uses IP addresses and masks to determine which stations (PCs
or workstations) can access the switch through the network. This covers access through the following
means:
Telnet and other terminal emulation applications
The WebAgent
SSH
SNMP versions 1, 2 and 3(with a correct community name)
TFTP
418 Authorized IP Managers