Security Measures
171
Instruction Manual - NXA-ENET8-POE+
Perform these steps to display the ARP Inspection log:
1.
Click
Security
>
ARP Inspection
.
2.
Select
Show Information
from the Step list.
3.
Select
Show Log
from the Action list.
Filtering IP Addresses for Management Access
Use the Security > IP Filter page to create a list of up to 15 IP addresses or IP address groups that are allowed management access
to the switch through the web interface, SNMP, or Telnet.
Command Usage
The management interfaces are open to all IP addresses by default. Once you add an entry to a filter list, access to that
interface is restricted to the specified addresses.
If anyone tries to access a management interface on the switch from an invalid address, the switch will reject the
connection, enter an event message in the system log, and send a trap message to the trap manager.
IP address can be configured for SNMP, web and Telnet access respectively. Each of these groups can include up to five
different sets of addresses, either individual addresses or address ranges.
When entering addresses for the same group (i.e., SNMP, web or Telnet), the switch will not accept overlapping address
ranges. When entering addresses for different groups, the switch will accept overlapping address ranges.
You cannot delete an individual address from a specified range. You must delete the entire range, and reenter the
addresses.
You can delete an address range just by specifying the start address, or by specifying both the start address and end
address.
The following table lists the options on this page:
Perform these steps to create a list of IP addresses authorized for management access:
1.
Click
Security
>
IP Filter
.
2.
Select
Add
from the Action list.
3.
Select the management interface to filter (Web, SNMP, Telnet, All).
4.
Enter the IP addresses or range of addresses that are allowed management access to an interface.
5.
Click
Apply
.
FIG. 200
Displaying the ARP Inspection Log
Security - IP Filter Options
Mode
• Web - Configures IP address(es) for the web group.
• SNMP - Configures IP address(es) for the SNMP group.
• Telnet - Configures IP address(es) for the Telnet group.
• All - Configures IP address(es) for all groups.
Start IP Address
A single IP address, or the starting address of a range.
End IP Address
The end address of a range.
FIG. 201
Creating an IP Address Filter for Management Access