Nortel Switched Firewall 2.3.3 User’s Guide and Command Reference
The Command Line Interface
253
213455-L, October 2005
Adding items to the access list
The following CLI commands are used to permit remote management access to a specific IP
address or range of IP addresses.
1.
Select the Access List menu:
2.
Add trusted remote IP addresses to the list:
The
add
command can be repeated for as many remote managers as required. For example, to
allow IP addresses 201.10.14.7 and 214.139.0.0/24 to access remote management features, the
following commands could be used:
N
OTE
–
Although each remote management feature (Telnet, SSH, and BBI) can be enabled or
disabled independently, all share the same access list. All addresses on the access list are
permitted to access any enabled management feature. You cannot enable SSH for some and
Telnet for others.
3.
Apply the changes:
Using Telnet
A Telnet connection allows convenient management of the Nortel Switched Firewall from any
workstation connected to the network. Telnet access provides the same management options as
those available through the local serial port.
By default, Telnet access is disabled and all remote access is restricted. Depending on the
severity of your security policy, you may enable Telnet and permit remote access to one or
more trusted client stations (see
Defining the remote access list on page 252
).
>> #
/cfg/sys/accesslist
>> Access List#
add
<base IP address to permit>
<network mask for range>
>> #
/cfg/sys/accesslist
(Select access list menu)
>> Access List#
add 201.10.14.7 255.255.255.255
(Add single address)
>> Access List#
add 214.139.0.0 255.255.255.0
(Add range of addresses)
>> Access List#
apply
