Configuring the Switch
3-80
3
CLI
– This example configures filter ID 1 with three MAC addresses, then applies
the filter to port 1.
Filtering Addresses for Management Access
You create a list of up to 16 IP addresses or IP address groups that are allowed
access to the switch through the web interface, SNMP, or Telnet.
Command Usage
• The management interfaces are open to all IP addresses by default. Once you add
an entry to a filter list, access to that interface is restricted to the specified
addresses.
• If anyone tries to access a management interface on the switch from an invalid
address, the switch will reject the connection, enter an event message in the
system log, and send a trap message to the trap manager.
• IP address can be configured for SNMP, web and Telnet access respectively. Each
of these groups can include up to five different sets of addresses, either individual
addresses or address ranges.
• When entering addresses for the same group (i.e., SNMP, web or Telnet), the
switch will not accept overlapping address ranges. When entering addresses for
different groups, the switch will accept overlapping address ranges.
• You cannot delete an individual address from a specified range. You must delete
the entire range, and reenter the addresses.
• You can delete an address range just by specifying the start address, or by
specifying both the start address and end address.
Command Attributes
•
Web IP Filter
– Configures IP address(es) for the web group.
•
SNMP IP Filter
– Configures IP address(es) for the SNMP group.
•
Telnet IP Filter
– Configures IP address(es) for the Telnet group.
•
IP Filter List
– IP address which are allowed management access to this interface.
•
Start IP Address
– A single IP address, or the starting address of a range.
•
End IP Address
– The end address of a range.
•
Add/Remove Filtering Entry
– Adds/removes an IP address from the list.
Console(config)#network-access mac-filter 1 00-12-34-56-78-9A
4-96
Console(config)#network-access mac-filter 1 00-12-34-56-78-9B
Console(config)#network-access mac-filter 1 00-12-34-56-78-9C
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
4-97
Console(config-if)#end
Console#show network-access mac-filter 1
4-100
--------- -----------------
Filter-id MAC-Address
--------- -----------------
1 00-12-34-56-78-9A
1 00-12-34-56-78-9B
1 00-12-34-56-78-9C
Console#
Summary of Contents for 24/48 10/100 Ports + 2GE
Page 2: ......
Page 4: ...ES3526XA ES3552XA F2 2 6 3 E122006 CS R02 149100005500H...
Page 18: ...Contents xiv...
Page 22: ...Tables xviii...
Page 26: ...Figures xxii...
Page 34: ...Introduction 1 8 1...
Page 44: ...Initial Configuration 2 10 2...
Page 242: ...Configuring the Switch 3 198 3...
Page 498: ...Software Specifications A 4 A...
Page 511: ......
Page 512: ...ES3526XA ES3552XA E122006 CS R02D 149100005500H...
