Dell PowerConnect 7048P User Manual - Page 213

Controlling Management Access (CLI) This section provides information about the commands you use to control access to the switch management interface. For more information about these commands, see the PowerConnect 7000 Series CLI Reference Guide. Configuring a Management Access List NOTE: Management ACLs can be applied only to in-band ports and cannot be applied to the OOB port. Beginning in Privileged EXEC mode, use the following commands to create a management access list. There is an implicit deny-all rule at the end of every management ACL. This means that any host that does not meet the criteria defined in a permit command is denied access to the management interface. Command Purpose configure Enter Global Configuration mode. management access-list Define an access list for management, and enter the name access-list for configuration. permit ip-source ip- Allow access to the management interface from hosts that address [mask mask | meet the specified IP address value and other optional prefix-length] [interface- criteria. type interface-number] • interface-type interface-number - A valid port, LAG, or [service service] [priority VLAN interface, for example gi1/0/13, port-channel 3, or priority-value] vlan 200. • ip-address - Source IP address. • mask mask - Specifies the network mask of the source IP address. • mask prefix-length - Specifies the number of bits that comprise the source IP address prefix. The prefix length must be preceded by a forward slash (/). (Range: 0-32) • service service - Indicates service type. Can be one of the following: telnet, ssh, http, https, tftp, snmp, sntp, or any. • priority priority-value - Priority for the rule. (Range: 1 - 64) Controlling Management Access 213