Creating an ace – Allied Telesis AT-S63 User Manual
Page 451
AT-S63 Management Software Web Browser Interface User’s Guide
Section VII: Management Security
451
Creating an ACE
To add a new ACE to the management ACL, perform the following
procedure:
1. From the home page, select Configuration.
The System page is displayed with the General tab selected by default,
as shown in Figure 5 on page 38.
2. From the Configuration menu, select the Mgmt. Security option.
The Mgmt. Security page is displayed with the Mgmt. ACL tab selected
by default, as shown in Figure 181 on page 449.
Any ACEs already existing in the management ACL are listed in the
middle section of the tab.
3. To add a new ACE, configure the following parameters in the Mgmt.
ACT tab:
MACL ID
Enter an identification number for the access control entry. Every ACE
must have a unique number. The range is 1 to 256.
Mgmt. ACL IP Address
Enter the IP address of a management workstation you want to allow
to manage the switch (for example, 149.11.11.11). Alternatively, you
can specify a subnet. You must enter an IP address. If you enter an IP
address of a specific management node, then that node will be
permitted remote management access to the switch. If you enter a
subnet, any management node in the subnet will be permitted remote
management access to the switch.
Mgmt. ACL IP Mask
Enter a mask that indicates the parts of the IP address the switch
should filter on. A binary “1” indicates the switch should filter on the
corresponding bit of the address, while a “0” indicates that it should
not. If you are filtering on a specific IP address, use the mask
255.255.255.255. If you are filtering on a subnet, the mask will depend
on the address. For example, to allow all management workstations in
the subnet 149.11.11.0 to manage the switch, you would enter the
mask 255.255.255.0.
Application
Specify the application you want the management station to be able to
use to manage the switch. You can select more than one by holding
down the Shift key when making the selections. The options are:
Telnet - Allows Telnet management.