Remote access to management function restrictions

To allow SSH access to the Brocade device to a host with any IP address and MAC address 0000.000f.e9a0, enter the following command.

Brocade(config)# ip ssh client any 0000.000f.e9a0

Syntax: [no] ip ssh client any mac-addr

Restricting HTTP and HTTPS connection

You can restrict an HTTP or HTTPS connection to a device based on the client IP address or MAC address.

To allow HTTP and HTTPS access to the Brocade device only to the host with IP address 10.157.22.40 and MAC address 0000.000f.ab1c, enter the following command.

Brocade(config)# web client 10.157.22.40 0000.000f.ab1c

Syntax: [no] web client ip-addr ipv6-addr mac-addr

The following command allows HTTP and HTTPS access to the Brocade device to a host with any IP address and MAC address 0000.000f.10ba.

Brocade(config)# web client any 0000.000f.10ba

Syntax: [no] web client any mac-addr

Defining the Telnet idle time

You can define how many minutes a Telnet session can remain idle before it is timed out. An idle Telnet session is a session that is still sending TCP ACKs in response to keepalive messages from the device, but is not being used to send data.

To configure the idle time for a Telnet session, use the following command.

Brocade(config)# telnet timeout 120

Syntax: [no] telnet timeout minutes

For minutes enter a value from 0–240. The default value is 0 minutes (no timeout).

Changing the login timeout period for Telnet sessions

By default, the login timeout period for a Telnet session is 1 minute. To change the login timeout period, use the following command.

Brocade(config)# telnet login-timeout 5

Syntax: [no] telnet login-timeout minutes

For minutes, enter a value from 1 to 10. The default timeout period is 1 minute.

8

Brocade ICX 6650 Security Configuration Guide

 

53-1002601-01

Page 28
Image 28
Brocade Communications Systems 6650 Defining the Telnet idle time, Changing the login timeout period for Telnet sessions