5.5.5. Implementing IP Security
The CMS can be configured to restrict unauthorized IP addresses from Telneting to the unit.
This allows the user to grant Telnet access to only a specific group of IP addresses, or block a
particular IP address from gaining access. In the default state, the CMS accepts incoming IP
connections from all hosts. To configure the IP Security feature, proceed as follows:
Note: In the default state, the CMS will allow all IP addresses to Telnet to the unit.
1. Access the Network Parameters menu as described in Section 5.5.4. Note that the
Network Parameters menu is only available in Supervisor Mode.
2. When the Network Parameters menu appears, type 4 and press [Enter] to access the IP
Security menu (Figure 5.4).
3. The IP Security Menu lists five IP Security “masks” along with the selected permit/deny
action for each mask.
a) Each Security Mask prompt is used to define a specific IP address or range of IP
addresses. Each Mask Action prompt is used to select the permit/deny action for the
corresponding mask.
b) Masks are listed in order of ascending priority; Mask 1 has the lowest priority, and
Mask 5 has the highest priority.
c) Masks have a cumulative effect; high priority masks supersede the effect of lower
priority masks.
d) Each IP Address consists of a series of four eight bit numbers. The number 255 is
used as a wild card.
5-14
CMS Series - Console Management Switches, User's Guide Configuration
IP SECURITY:
1. Security Mask #1: (undefined)
2. Mask #1 Action: Permit
3. Security Mask #2: (undefined)
4. Mask #2 Action: Permit
5. Security Mask #3: (undefined)
6. Mask #3 Action: Permit
7. Security Mask #4: (undefined)
8. Mask #4 Action: Permit
9. Security Mask #5: (undefined)
10. Mask #5 Action: Permit
Enter: #<CR> to Select Menu,
<ESC> for Previous Menu ...
Figure 5.4: IP Security Menu