Configuring IP Authorized managers (WebAgent)

In the WebAgent you can configure IP Authorized managers as described below.

To Add, Modify, or Delete an IP Authorized manager address:

In the navigation tree, click on Security.
Click on IP Authorization.
Click on Add Address to add an IP Authorized manager. Enter the appropriate parameter settings for the operation you want.
To delete an IP authorized manager, select the Authorized Address and click on Delete.
To change IP Authorization parameters, click on Change in the IP Authorization Details box. Enter the information and click on Save.

Configuring Authorized manager access method in the WebAgent

Web proxy servers

If you use the WebAgent to access the switch from an authorized IP manager station, it is highly recommended that you avoid using a web proxy server in the path between the station and the switch. This is because switch access through a web proxy server requires that you first add the web proxy server to the Authorized manager IP list. This reduces security by opening switch access to anyone who uses the web proxy server.

How to eliminate the web proxy server

There are two ways to eliminate a web proxy server from the path between a station and the switch:

Add the IP address or DNS name of the switch to the non-proxy or Exceptions list in the web browser interface used on the authorized station.
If you don’t need proxy server access on the authorized station, disable the proxy server feature in the station’s web browser interface.


	NOTE: IP or MAC authentication can be used without a web proxy server.

Using a web proxy server to access the WebAgent


	CAUTION: This is NOT recommended. Using a web proxy server between the stations and the switch poses a security risk. If the station uses a web proxy server to connect to the switch, any proxy user can access the switch.

If it is necessary to use the WebAgent and your browser access is through a web proxy server, perform these steps:

Enter the web proxy server’s MAC address in the port’s Authorized Addresses list.
Enter the web proxy server’s IP address in the switch’s IP Authorized managers list.

You must perform both of these steps or the switch only detects the proxy server’s MAC address and IP address instead of your workstation addresses, and your connection is considered unauthorized.

prev	up	next
Defining authorized management stations	home	Building IP Masks