HP 2920 - LOCKING DOWN HOST ACCESS FOR SPECIFIC IP ADDRESSES

[bighead8181]

Im new to HP world and been given a number of switches to manage.  I need to lock down the device to specific source hosts.  Ive managed to find the solution for the 5920 but i simply cannot figure it out for the 2920 via CLI or find information online with the commnads.  Appreciate someones help. 

[Emil_G]

Hello, 

I am not sure if I understand the question correctly. If you want to limit the access to the management interfaces of the swich (SSH, Telnet WebUI) to specific source IP addresses then you can configure ip authorized-managers as described here.

https://techhub.hpe.com/eginfolib/networking/docs/switches/K-KA-KB/15-18/5998-8150_access_security_guide/content/c_Using_Authorized_IP_Managers.html

https://techhub.hpe.com/eginfolib/Aruba/16.09/5200-5898/index.html#c_Using_Authorized_IP_Managers.html

If something different should be achieved, I think we need some more details.

[bighead8181]

My desktop machine has an IP address of 192.168.0.50

HP 2920 management ip address 10.10.10.50

I would like to only permit ssh putty from my desktop to the hp switch,  blocking all other IP addresses.  From your response i believe this is what i can achieve?

[Emil_G]

Hello, 

Yes, this is exactly the use case of ip authorized-managers. Since you want to allow a single device to have management access this command should be sufficient.

HP Switch# config
HP Switch(config)# ip authorized-managers 192.168.0.50

[Emil_G · Accepted solution]

 Hello @bighead8181,

Did I answer your question? If yes, please mark it as an accepted solution. If not, please give us feedback!