Enterasys 6E2 Series, Руководство пользователя

Страница: 153 / 436

Access Control List Screen
Module Configuration Menu Screens 5-27
Table 5-7 Access Control List Screen Field Descriptions
Use this field… To…
Access Control Lists
(Toggle) Enable or disable ACL to restrict SNMP/IP access to a limited number
of IP addresses. This field toggles between ENABLED and
DISABLED. DISABLED is the default setting.
When ACL is enabled, all module access is limited to the 16 IP
addresses and /or range of addresses as shown in the screen example.
The limited access applies to all IP access including, but not limited to,
SLIP/PPP connections, Telnet, Ping, SNMP and HTTP. When locally
connected to the COM port of the host switch module), ACL does not
restrict access to local management.
ACL cannot be enabled unless a valid IP address is listed.
When ACL is disabled, host access is not restricted to the devices with
an IP address in the Access Control List.
IP Addresses
(Modifiable) Enter a new IP address of the devices that you want to have access to
SNMP/IP management. The default value is “0.0.0.0”.
Up to 16, individual user IP addresses and/or range of user IP addresses
can be entered. For individual IP address settings, the mask value must
be “255.255.255.255”.
For a range of IP addresses, both the IP address and appropriate Mask
value must be entered to indicate the range of IP addresses.
Only a user with a Super User status can view and modify the ACL.
NOTE: Clearing NVRAM will remove all IP address entries
and return the access control state to DISABLED.
For details on entering IP addresses, refer to Section 5.6.1 .
MASK
(Modifiable) Enter a mask value to establish an IP address range based on the IP
address in the associated IP address field. For example, in the screen
example in
Figure 5-10 , the IP address and Mask entries 182.15.2.1
and 255.255.0.0 sets the switch module to allow access to all users with
addresses starting with 182.15.x.x (x = I don’t care.) Address ranges
may overlap without any consequences.
The default value is “255.255.255.255”. For details, refer to
Section 5.6.1
.