Supermicro SSE-G2252, Руководство пользователя

Страница: 326 / 1401

Chapter 13: Security Measures
Filtering IP Addresses for Management Access
– 333 –
C
OMMAND
U
SAGE
•
The management interfaces are open to all IP addresses by default.
Once you add an entry to a filter list, access to that interface is
restricted to the specified addresses.
•
If anyone tries to access a management interface on the switch from an
invalid address, the switch will reject the connection, enter an event
message in the system log, and send a trap message to the trap
manager.
•
IP address can be configured for SNMP, web and Telnet access
respectively. Each of these groups can include up to five different sets
of addresses, either individual addresses or address ranges.
•
When entering addresses for the same group (i.e., SNMP, web or
Telnet), the switch will not accept overlapping address ranges. When
entering addresses for different groups, the switch will accept
overlapping address ranges.
•
You cannot delete an individual address from a specified range. You
must delete the entire range, and reenter the addresses.
•
You can delete an address range just by specifying the start address, or
by specifying both the start address and end address.
P
ARAMETERS
These parameters are displayed:
•
Mode
•
Web – Configures IP address(es) for the web group.
•
SNMP – Configures IP address(es) for the SNMP group.
•
Telnet – Configures IP address(es) for the Telnet group.
•
All – Configures IP address(es) for all groups.
•
Start IP Address – A single IP address, or the starting address of a
range.
•
End IP Address – The end address of a range.
W
EB
I
NTERFACE
To create a list of IP addresses authorized for management access:
1.
Click Security, IP Filter.
2.
Select Add from the Action list.
3.
Select the management interface to filter (Web, SNMP, Telnet, All).
4.
Enter the IP addresses or range of addresses that are allowed
management access to an interface.