Filter
Top Products
Chapter 37: Management Access Control List
434 Section IX: Management Security
Parts of a Management ACE
An ACE has the following three parts:
IP address
Subnet mask
Application
IP Address You can specify the IP address of a specific management station or a
subnet.
Mask The mask indicates the parts of the IP address the switch should filter on.
A binary “1” indicates the switch should filter on the corresponding bit of
the address, while a “0” indicates that it should not. If you are filtering on a
specific IP address, use the mask 255.255.255.255. If you are filtering on
a subnet, the mask would depend on the address. For example, to allow
all management stations in the subnet 149.11.11.0 to manage the switch,
you would enter the mask 255.255.255.0.
Application The application parameter allows you control whether the remote
management station can manage the switch using Telnet, a web browser,
or both. For example, you might create an ACE that states that a particular
remote management station can only use a web browser to manage the
switch. You can also use this option to control whether the management
station can ping the switch.