SMC Networks 8124PL2, Management Manual

Page: 124 / 491

Filtering Management Access
3-79
• IN – ACL for ingress packets.
• ACL Name – Name of the ACL.
Web – Click Security, ACL, Port Binding. Mark the Enable field for the port you want
to bind to an ACL for ingress traffic, select the required ACL from the drop-down list,
then click Apply.
Figure 3-47. Mapping ACLs to Port Ingress Queues
CLI – This examples assigns an IP access list to port 1, and an IP access list to port
2.
Filtering Management Access
You can specify the client IP addresses that are allowed management access to the
switch through the web interface, SNMP, or Telnet.
Command Usage
• The management interfaces are open to all IP addresses by default. Once you add
an entry to a filter list, access to that interface is restricted to the specified
addresses.
• If anyone tries to access a management interface on the switch from an invalid
address, the switch will reject the connection, enter an event message in the
system log, and send a trap message to the trap manager.
• IP address can be configured for SNMP, web and Telnet access respectively. Each
of these groups can include up to five different sets of addresses, either individual
addresses or address ranges.
Console(config)#interface ethernet 1/1 4-111
Console(config-if)#ip access-group david in 4-92
Console(config-if)#exit
Console(config)#interface ethernet 1/2
Console(config-if)#ip access-group david in
Console(config-if)#