KB.15.15

Example 32 show ipv6 authorized-managers

HP Switch# show ipv6 authorized-managers

IPv6 Authorized Managers

---------------------------------------

Address : 2001:db8:0:7::5

Mask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Access : Manager

Address : 2001:db8::a:1c:e3:3

Mask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:fffe

Access : Manager

Address : 2001:db8::214:c2ff:fe4c:e480

Mask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Access : Manager

Address : 2001:db8::10

Mask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00

Access : Operator

By analyzing the masks displayed in Example 32 (page 57), the IPv6 stations shown in Table 3

(page 57) are granted access.

Table 3 How masks determine authorized IPv6 manager addresses

Number of

authorized

addressesAuthorized IPv6 addressesMask

42001:db8:0:7::4 through 2001:db8:0:7::7FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFC

22001:db8::a:1c:e3:2 and 2001:db8::a:1c:e3:3FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFE

12001:db8::214:c2ff:fe4c:e480FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

2562001:db8::0 through 2001:db8::FFFFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00

Authorizing manager access

The following IPv6 commands authorize manager-level access for one link-local station at a time.

When you enter a link-local IPv6 address with the ipv6 authorized-managers command,

you must also enter a VLAN ID in the format: %vlanvlan-id.

HP Switch(config)# ipv6 authorized-managers

fe80::07be:44ff:fec5:c965%vlan2

HP Switch(config)# ipv6 authorized-managers

fe80::070a:294ff:fea4:733d%vlan2

HP Switch(config)# ipv6 authorized-managers

fe80::19af:2cff:fe34:b04a%vlan5

If you do not enter an ipv6-mask value when you configure an authorized IPv6 address, the

switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default IPv6 mask. Also,

if you do not specify an access value to grant either manager- or operator-level access, by default,

the switch assigns manager access.

Configuring authorized IP managers for switch access 57