Accton Technology 24/48-Port Filtering IP Addresses for Management Access, 41-17, 41-18, 41-19

Filtering IP Addresses for Management Access 12

CLI – This example enables SSH, sets the authentication parameters, and displays the current configuration. It shows that the administrator has made a connection via SHH, and then disables this connection.

Console(config)#ip		ssh server		41-17
Console(config)#ip		ssh timeout 100		41-18
Console(config)#ip		ssh authentication-retries 5		41-19
Console(config)#ip		ssh server-key size 512		41-19
Console(config)#end
Console#show ip ssh				41-22
SSH Enabled - version 2.0
Negotiation timeout: 120 secs; Authentication retries: 3
Server key size: 768 bits
Console#show ssh				41-22
Information of secure shell
Session Username Version Encrypt method Negotiation state
------- -------- ------- -------------- -----------------
0	admin	2.0	cipher-3des session-started
Console#disconnect		0		36-9
Console#

Filtering IP Addresses for Management Access

You can create a list of up to 16 IP addresses or IP address groups that are allowed management access to the switch through the web interface, SNMP, or Telnet.

Command Usage

•The management interfaces are open to all IP addresses by default. Once you add an entry to a filter list, access to that interface is restricted to the specified addresses.

•If anyone tries to access a management interface on the switch from an invalid address, the switch will reject the connection, enter an event message in the system log, and send a trap message to the trap manager.

•IP address can be configured for SNMP, web and Telnet access respectively. Each of these groups can include up to five different sets of addresses, either individual addresses or address ranges.

•When entering addresses for the same group (i.e., SNMP, web or Telnet), the switch will not accept overlapping address ranges. When entering addresses for different groups, the switch will accept overlapping address ranges.

•You cannot delete an individual address from a specified range. You must delete the entire range, and reenter the addresses.

•You can delete an address range just by specifying the start address, or by specifying both the start address and end address.

Command Attributes

•Web IP Filter – Configures IP address(es) for the web group.

•SNMP IP Filter – Configures IP address(es) for the SNMP group.

•Telnet IP Filter – Configures IP address(es) for the Telnet group.

•IP Filter List – IP address which are allowed management access to this interface.

•Start IP Address – A single IP address, or the starting address of a range.

12-13