Allied Telesis AT-S63 - Manual (Page 435)

AT-S63 Management Software Features Guide
Section IX: Management Security 435
Guidelines
Below are guidelines for the management ACL:
ˆ The default setting for this feature is disabled.
ˆ A switch can have only one management ACL.
ˆ A management ACL can have up to 256 ACEs.
ˆ An ACE must have an IP address and mask.
ˆ All management ACEs are implicit “permit” statements. A management
packet that meets the criteria of an ACE is accepted by the switch.
Consequently, the ACEs you enter into the management ACL should
specify which management packets you want the switch to process.
Management packets that do not meet any of the ACEs in the
management ACL are discarded.
ˆ A management packet that meets an ACE is immediately processed
by the switch and is not compared against any remaining ACEs in the
management ACL.
ˆ The ACEs are performed in the order of their identification number,
starting with 1.
ˆ The management ACL does not control local management or remote
SSH or SNMP management of a switch.
ˆ Activating this feature without specifying any ACEs prohibits you from
managing the switch remotely using a Telnet application or web
browser because the switch discards all Telnet and web browser
management packets.
ˆ You can apply management ACLs to both master and slave switches
in an enhanced stack. A management ACL on a master switch filters
management packets intended for the master switch as well as those
intended for any slave switches that you manage through the master
switch. A management ACL applied to a slave switch filters only those
management packets directed to the slave switch.