Figure 223 cre – Brocade 6910 Ethernet Access Switch Configuration Guide (Supporting R2.2.0.0) User Manual

Page 964

Advertising
background image

908

Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

42

Filtering IP Addresses for Management Access

If anyone tries to access a management interface on the switch from an invalid address, the
switch will reject the connection, enter an event message in the system log, and send a trap
message to the trap manager.

IP address can be configured for SNMP, web and Telnet access respectively. Each of these
groups can include up to five different sets of addresses, either individual addresses or
address ranges.

When entering addresses for the same group (i.e., SNMP, web or Telnet), the switch will not
accept overlapping address ranges. When entering addresses for different groups, the switch
will accept overlapping address ranges.

You cannot delete an individual address from a specified range. You must delete the entire
range, and reenter the addresses.

You can delete an address range just by specifying the start address, or by specifying both the
start address and end address.

Parameters
These parameters are displayed:

Mode

Web – Configures IP address(es) for the web group.

SNMP – Configures IP address(es) for the SNMP group.

Telnet – Configures IP address(es) for the Telnet group.

Start IP Address – A single IP address, or the starting address of a range.

End IP Address – The end address of a range.

Interface
To create a list of IP addresses authorized for management access:

1. Click Security, IP Filter.

2. Select Add from the Action list.

3. Select the management interface to filter (Web, SNMP, Telnet).

4. Enter the IP addresses or range of addresses that are allowed management access to an

interface.

5. Click Apply

FIGURE 223

Creating an IP Address Filter for Management Access

Advertising