Filter
Top Products
1146 PowerConnect B-Series FCX Configuration Guide
53-1002266-01
Restricting remote access to management functions
32
You also can configure up to five default gateways for the designated VLAN, and associate a metric
with each one. The software uses the gateway with the lowest metric. The other gateways reside in
the configuration but are not used. To use one of the other gateways, modify the configuration so
that the gateway you want to use has the lowest metric.
If more than one gateway has the lowest metric, the gateway that appears first in the running-config
is used.
NOTE
If you have already configured a default gateway globally and you do not configure a gateway in the
VLAN, the software uses the globally configured gateway and gives the gateway a metric value of 1.
To configure a designated management VLAN, enter commands such as the following.
PowerConnect(config)#vlan 10 by port
PowerConnect(config-vlan-10)#untag ethernet 1/1 to 1/4
PowerConnect(config-vlan-10)#management-vlan
PowerConnect(config-vlan-10)#default-gateway 10.10.10.1 1
PowerConnect(config-vlan-10)#default-gateway 20.20.20.1 2
These commands configure port-based VLAN 10 to consist of ports 1/1 – 1/4 and to be the
designated management VLAN. The last two commands configure default gateways for the VLAN.
Since the 10.10.10.1 gateway has a lower metric, the software uses this gateway. The other
gateway remains in the configuration but is not used. You can use the other one by changing the
metrics so that the 20.20.20.1 gateway has the lower metric.
Syntax: [no] default-gateway <ip-addr> <metric>
The <ip-addr> parameters specify the IP address of the gateway router.
The <metric> parameter specifies the metric (cost) of the gateway. You can specify a value from 1 –
5. There is no default. The software uses the gateway with the lowest metric.
Device management security
By default, all management access is disabled. Each of the following management access methods
must be specifically enabled as required in your installation:
• SSHv2
• SNMP
• Web management through HTTP
• Web management through HTTPS
The commands for granting access to each of these management interfaces is described in the
following.
SSHv2
To allow SSHv2 access to the Dell PowerConnect device, you must generate a Crypto Key as shown
in the following command.
PowerConnect(config)#crypto key generate
Syntax: crypto key [generate | zeroize]
The generate parameter generates a dsa key pair.