Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 26)

8 Multi-Service IronWare Security Configuration Guide
53-1003035-02
Restricting remote access to management functions
1
The ipv6-acl-name variable specifies the IPv6 access list name.
These commands configure ACL 12, then apply the ACL as the access list for SSH access. The
device denies SSH access from the IPv4 addresses listed in ACL 12 and permits SSH access from
all other IP addresses. Without the last ACL entry for permitting all packets, this ACL would deny
SSH access from all IP addresses.
NOTE
In this example, the command ssh access-group 10 could have been used to apply the ACL
configured in the example for Telnet access. You can use the same ACL multiple times.
Using an ACL to restrict Web management access
NOTE
The Web Management Interface is only supported on the Brocade NetIron XMR and Brocade MLX
series devices.
To configure an ACL that restricts Web management access to the device, enter commands such
as the following:
Syntax: [no] web access-group {num | name | ipv6 ipv6-acl-name}
Use the ipv6 parameter if you are applying an IPv6 access list.
The num variable specifies the number of a standard IPv4 ACL, 1 – 99.
The name variable specifies the standard IPv4 access list name.
The ipv6-acl-name variable specifies the IPv6 access list name.
These commands configure ACL 12, then apply the ACL as the access list for Web management
access. The device denies Web management access from the IP addresses listed in ACL 12 and
permits Web management access from all other IP addresses. Without the last ACL entry for
permitting all packets, this ACL would deny Web management access from all IP addresses.
Brocade(config)# access-list 12 deny host 10.157.22.98
Brocade(config)# access-list 12 deny 10.157.23.0 0.0.0.255
Brocade(config)# access-list 12 deny 10.157.24.0/24
Brocade(config)# access-list 12 permit any
Brocade(config)# web access-group 12
Brocade(config)# write memory