Details

In cases where configuring a Secure Management VLAN is too restrictive, it is possible to identify up to 10 IP addresses or address groups that are allowed management access to the switch via the network.

Solution

The command to configure the management stations is as followsn

ProCurve Switch(config)# ip authorized-manager mask n

Supportive Information

The following resource is also helpful.

• http://www.hp.com/rnd/pdfs/Hardening_ProCurve_Switches_White_Paper.pdf

This security hardening control applies to the following category of controls within NIST 800-53: Access Control, Configuration Management, System and Communications Protection.This control applies to the following type of system HPProCurve.

References

• 800-53|AC-2
• 800-53|CM-2
• 800-53|CM-6
• 800-53|SC-7

Source

• Tenable.com/audits