Filter
Top Products
Filtering IPs for Management Access
83
NXA-ENET24 - Software Management Guide
Filtering IPs for Management Access
Overview
You can specify the client IP addresses that are allowed management access to the switch through the web
interface, SNMP, or Telnet.
Command Usage
The management interfaces are open to all IP addresses by default. Once you add an entry to a filter
list, access to that interface is restricted to the specified addresses.
If anyone tries to access a management interface on the switch from an invalid address, the switch
will reject the connection, enter an event message in the system log, and send a trap message to the
trap manager.
IP addresses can be configured for SNMP, web and Telnet access respectively. Each of these groups
can include up to five different sets of addresses, either individual addresses or address ranges.
When entering addresses for the same group (i.e., SNMP, web or Telnet), the switch will not accept
overlapping address ranges. When entering addresses for different groups, the switch will accept
overlapping address ranges.
You cannot delete an individual address from a specified range. You must delete the entire range,
and reenter the addresses.
You can delete an address range just by specifying the start address, or by specifying both the start
address and end address.
Command Attributes
Filtering IP Addresses for Management Access - Web
Click Security, IP Filter. Enter the addresses that are allowed management access to an interface, and click
Add IP Filtering Entry.
Command Attributes
• Web IP Filter: Configures IP address(es) for the web group.
• SNMP IP Filter: Configures IP address(es) for the SNMP group.
• Telnet IP Filter: Configures IP address(es) for the Telnet group.
• IP Filter List: IP addresses that are allowed management access to this interface.
• Start IP Address: A single IP address, or the starting address of a range.
• End IP Address: The end address of a range.
FIG. 83
Entering IP Addresses to be Filtered