Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 31)

Multi-Service IronWare Security Configuration Guide 13
53-1003035-02
Restricting remote access to management functions
1
Restricting Web management access to a
specific VLAN
NOTE
The Web Management Interface is only supported on the Brocade NetIron XMR and Brocade MLX
series devices.
To allow Web management access only to clients in a specific VLAN, enter a command such as the
following.
Brocade(config)# web-management enable vlan 10
The command configures the device to allow Web management access only to clients connected to
ports within port-based VLAN 10. Clients connected to ports that are not in VLAN 10 are denied
management access.
Syntax: [no] web-management enable vlan vlan-id
Restricting SNMP access to a specific VLAN
To allow SNMP access only to clients in a specific VLAN, enter a command such as the following.
Brocade(config)# snmp-server enable vlan 40
The command configures the device to allow SNMP access only to clients connected to ports within
port-based VLAN 40. Clients connected to ports that are not in VLAN 40 are denied access.
Syntax: [no] snmp-server enable vlan vlan-id
Restricting TFTP access to a specific VLAN
To allow TFTP access only to clients in a specific VLAN, enter a command such as the following.
Brocade(config)# tftp client enable vlan 40
The command in this example configures the device to allow TFTP access only to clients connected
to ports within port-based VLAN 40. Clients connected to ports that are not in VLAN 40 are denied
access.
Syntax: [no] tftp client enable vlan vlan-id
Enabling specific access methods
You can specifically enable the following access methods:
• Telnet access
• Web management access
• SNMP access
NOTE
If you do not enable Telnet access, you can access the CLI using a serial connection to the
management module. If you do not enable SNMP access, you will not be able to use Brocade
Network Advisor or third-party SNMP management applications.