Intel 480T, Руководство пользователя

Страница: 51 / 367

C H A P T E R 3 Accessing the Switch
49
Using Access Profiles
Access profiles are used by several switch features as a way to
restrict access. An access profile is typically a named list of IP
addresses and masks. To use access profiles, first define the list, and
then apply the named list to the desired application. Applications
that use access profiles for remotely managing the switch are as
follows:
• SNMP read-only access
• SNMP read-write access
• Telnet
• Web access
Access profiles can also be used in association with access policies
that control the flow of traffic. Access policies are discussed in
Chapter 14, Access Policies.
Creating an Access Profile
Access profiles are created to specifically permit or deny users
access to an application. Access is restricted by assigning an access
profile to the service that is being used for remote access. First,
create and configure the access profile with the desired controls.
Next, configure the application to use the access profile that you
have created. You must configure the application to use the named
access profile. Otherwise, no restrictions are applied. Table 10 lists
access profile commands.
Table 10: Access Profile Configuration Commands
Command Description
config access-profile <access_profile> add
{vlan <name> | ipaddress <ipaddress>
<mask>} Adds an IP address or VLAN name to the
access profile. The entry must be of the same
type as the access profile (for example, IP
address).
config access-profile <access_profile>
delete {vlan <name> | ipaddress
<ipaddress> <mask>} Deletes an IP address or VLAN name from the
access profile.