SignaMax SC30010, Справочное руководство CLI

Страница: 248 / 671

Chapter 8
| Authentication Commands
Management IP Filter
– 248 –
Command Usage
◆
The management interfaces are open to all IP addresses by default. Once
you add an entry to a filter list, access to that interface is restricted to the
specified addresses.
◆
If anyone tries to access a management interface on the switch from an
invalid address, the switch will reject the connection, enter an event
message in the system log, and send a trap message to the trap manager.
◆
IP address can be configured for SNMP, web, and Telnet access
respectively. Each of these groups can include up to five different sets of
addresses, either individual addresses or address ranges.
◆
When entering addresses for the same group (i.e., SNMP, web, or Telnet),
the switch will not accept overlapping address ranges. When entering
addresses for different groups, the switch will accept overlapping address
ranges.
◆ You cannot delete an individual address from a specified range. You must
delete the entire range, and re-enter the addresses.
◆
You can delete an address range just by specifying the start address, or by
specifying both the start address and end address.
Example
This example restricts management access to the indicated addresses.
Console(config)#management all-client 192.168.1.19
Console(config)#management all-client 192.168.1.25 192.168.1.30
Console#
show management
This command displays the client IP addresses that are allowed management
access to the switch through various protocols.
Syntax
show management { all-client | http-client | snmp-client |
telnet-client }
all-client - Displays IP addresses for all groups.
http-client - Displays IP addresses for the web group.
snmp-client - Displays IP addresses for the SNMP group.
telnet-client - Displays IP addresses for the Telnet group.
Command Mode
Privileged Exec