GE ML1600 Switch User Manual


 
CHAPTER 6: ACCESS CONSIDERATIONS CONFIGURING PORT SECURITY THROUGH THE COMMAND LINE INTERFACE
MULTILINK ML1600 ETHERNET COMMUNICATIONS SWITCH – INSTRUCTION MANUAL 6–11
Note
It is assumed here that the user is familiar with IP addressing schemes (e.g. class A, B, C,
etc.), subnet masking and masking issues such as how many stations are allowed for a
given subnet mask.
In Example 6-7, any computer on 3.94.245.10 network is allowed (note how the subnet
mask indicates this). Also, a specific station with IP address 3.94.245.25 is allowed (again
note how the subnet mask is used). An older station with IP address 3.94.245.15 is
removed.
Example 6-7: Allowing/blocking specific IP addresses
ML1600#
access
ML1600(access)##
allow ip=3.94.245.10 mask=255.255.255.0 service=teln
e
Service(s) allowed for specified address
ML1600(access)## allow ip=3.94.245.25 mask=255.255.255.255 service=te
l
Service(s) allowed for specified address
ML1600(access)## remove ip=3.94.245.15 mask=255.255.255.255
Access entry removed
ML1600(access)## exit
ML1600#
show ip-access
============================================================
IP Address | Mask | Telnet | Web | SNMP |
============================================================
3.94.245.10 255.255.255.0 ALLOWED DENIED DENIED
3.94.245.25 255.255.255.255 ALLOWED DENIED DENIED