SSH and ip authorized-managers on HP5304XL

[Magnus Johansson_1]

The ip authorized-managers command dont stop access to the switch if you are using SSH instead of telnet from what I have seen.

Is this a bug or a feature?

Possibly this apply to other platforms than the 5304XL that I have tried it on.

/Magnus

[The Real MD]

SSH uses public/private key encryption and hence the password cannot be sniffed from the network. The assumtion is made that if you know the password then you have been authorised to login. Telnet uses clear text passwords over the network so another
layer of security is used, in this case IP asddress.


hope this helps

Martin.

[Magnus Johansson_1]

Ofcourse it is encrypted and so on, but if you can reach the service there is a possibility to make an attack thru that service. And there is the possibility that there is a securitybug in the service, it has happened before with SSH, and it will probobly happen again.

/Magnus

[Ardon]

Hi Magnus,

We just fixed this issue on the 25XX platform. So what code was your 53XX running? If you are runnig E.08.01 I will post a PR (problem report) at the US lab.

Ardon

[Magnus Johansson_1]

Right now we are actually runnig 8.03 because of some bugs in 8.01. it is not an official release yet but we had the same problem in 8.01 i think.
Is there the same problem in 41xxGL-series?

/Magnus

[Ardon]

Hi Magnus,

I checked with both E.08.01 and E.08.03 and could not confirm your observed behavior. In other words. I would configure SSH Access and verfied to have access. Then I would configure an Authorized IP Manager which was NOT my clients IP and indeed I did NOT get access anymore. Maybe there was a problem with your Wildcard setting?
Please mention to me the Client's IP and the Config of the Switch and I will check again.
Regards, Ardon