Dell FCX624-S Laptop User Manual


  Open as PDF
of 1494
 
PowerConnect B-Series FCX Configuration Guide 1141
53-1002266-01
Restricting remote access to management functions
32
NOTE
In RADIUS, the standard attribute Idle-Timeout is used to define the console session timeout value.
The attribute Idle-Timeout value is specified in seconds. Within the switch, it is truncated to the
nearest minute, because the switch configuration is defined in minutes.
Restricting remote access to the device to
specific IP addresses
By default, a Dell PowerConnect device does not control remote management access based on the
IP address of the managing device. You can restrict remote management access to a single IP
address for the following access methods:
Telnet access
SSH access
Web management access
SNMP access
In addition, you can restrict all access methods to the same IP address using a single command.
The following examples show the CLI commands for restricting remote access. You can specify only
one IP address with each command. However, you can enter each command ten times to specify
up to ten IP addresses.
NOTE
You cannot restrict remote management access using the Web Management Interface.
Restricting Telnet access to a specific IP address
To allow Telnet access to the Dell PowerConnect device only to the host with IP address
209.157.22.39, enter the following command.
PowerConnect(config)#telnet-client 209.157.22.39
Syntax: [no] telnet-client <ip-addr> | <ipv6-addr>
Restricting SSH access to a specific IP address
To allow SSH access to the Dell PowerConnect device only to the host with IP address
209.157.22.39, enter the following command.
PowerConnect(config)#ip ssh client 209.157.22.39
Syntax: [no] ip ssh client <ip-addr> | <ipv6-addr>
Restricting Web management access to a specific IP address
To allow Web management access to the Dell PowerConnect device only to the host with IP address
209.157.22.26, enter the following command.
PowerConnect(config)#web-client 209.157.22.26
Syntax: [no] web-client <ip-addr> | <ipv6-addr>