148
Sequence Number: 5
Action......................................... permit
Match All...................................... TRUE
4.5.
Service Prohibit Access
In the network design, the switch front ports are usually used for normal L2/L3 traffic and the service port is
used for switch management and monitoring. The better way to prevent malicious hacker trying to access
switch via switch front port is to isolate management traffic via service port only. The Service Prohibit
Access feature allows you to disable telnet/ssh/snmp access via switch front port.
4.5.1.
Configuring Service Prohibit
The following command sequence enables Service Prohibit Access feature:
1.
enable Service Prohibit Access and deny snmp/ssh/telnet access via switch front ports.
(Switch)#configure
(Switch) (Config)#service prohibit access snmp
(Switch) (Config)#service prohibit access ssh
(Switch) (Config)#service prohibit access telnet
(Switch) (Config)#show service prohibit access
2.
Verify Service Prohibit Access feature status
(Switch) (Config)#show service prohibit access
Prohibit access SNMP from front ports.......... ENABLE
Prohibit access SSH from front ports........... ENABLE
Prohibit access Telnet from front ports........ ENABLE
Summary of Contents for QuantaMesh QNOS5
Page 1: ...QuantaMesh Ethernet Switch Configuration Guide QNOS5 NOS Platform ...
Page 209: ...209 Table 7 8 IPv6 Neighbor Discovery Settings ...
Page 226: ...226 Table 8 2 L3 Multicast Defaults ...
Page 254: ...254 Appendix A Term and Acronyms Table 9 5 Terms and Acronyms ...
