HP Cisco MDS 9216i Cisco MDS 9000 Family Fabric Manager Configuration Guide, R - Page 811

Chapter 42 Configuring IPv4 and IPv6 Access Control Lists Example IP-ACL Configuration Send documentation comments to [email protected] You see the newly associated access list in the list of IP-ACLs. Example IP-ACL Configuration To define an IP-ACL that restricts management access using Device Manager, follow these steps: Step 1 Step 2 Step 3 Choose Security > IP ACL. You see the IP-ACL dialog box in Figure 42-2. Click Create to create an IP-ACL. You see the Create IP ACL Profiles dialog box shown in Figure 42-3. Enter RestrictMgmt as the profile name and click Create. This creates an empty, IP-ACL named RestrictMgmt (see Figure 42-8). Figure 42-8 RestrictMgmt Profile Added to the List Step 4 Step 5 Step 6 Select RestrictMgmt and click Rules. You see an empty list of IP filters associated with this IP-ACL. Click Create to create the first IP filter. You see the Create IP Filter dialog box shown in Figure 42-5. Create an IP filter to allow management communications from a trusted subnet: a. Choose the permit Action and select 0 IP from the Protocol drop-down menu. b. Set the source IP address to 10.67.16.0 and the wildcard mask to 0.0.0.255. Note The wildcard mask denotes a subset of the IP Address you want to match against. This allows a range of addresses to match against this filter. c. Check the any check box for the destination address. d. Click Create to create this IP filter and add it to the RestrictMgmt IP-ACL. Repeat Step a through Step d create an IP filter that allows communications for all addresses in the 10.67.16.0/24 subnet. OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 42-11