Cisco Small Business 200, Руководство администратора

Страница: 266 / 351

Security
Defining Management Access Method
253 Cisco Small Business 200 Series Smart Switch Administration Guide
17
Access profiles consist of one or more rules. The rules are executed in order of
their priority within the access profile (top to bottom).
Rules are composed of filters that include the following elements:
• Access Methods —Methods for accessing and managing the device:
- Hypertext Transfer Protocol (HTTP)
- Secure HTTP (HTTPS)
- Simple Network Management Protocol (SNMP)
- All of the above
• Action —Permit or deny access to an interface or source address.
• Interface —Which ports, LAGs, or VLANs are permitted to access or are
denied access to the web-based configuration utility.
• Source IP Address —IP addresses or subnets that are allowed access.
Active Access Profile
The Access Profiles page displays the access profiles that are defined and
enables selecting one access profile to be the active one.
When a user attempts to access the device through an access method, the device
looks to see if the active access profile explicitly permits management access to
the device through this method. If no match is found, access is denied.
When an attempt to access the device is in violation of the active access profile,
the device generates a SYSLOG message to alert the system administrator of the
attempt.
For more information see Defining Profile Rules .
Use the Access Profiles page to create an access profile and to add its first rule. If
the access profile only contains a single rule, you are finished. To add additional
rules to the profile, use the Profile Rules page.
STEP 1
Click Security > Mgmt Access Method > Access Profiles .
This page displays all of the access profiles, active and inactive.
STEP 2
To change the active access profile, select a profile from the Active Access
Profile drop down menu and click Apply . This makes the chosen profile the active
access profile.