Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 1038)

Brocade Mobility RFS Controller CLI Reference Guide 1029
53-1003098-01
16
restrict-access subnet {|log [all|denied-only]}
restrict-access subnet {host {log [all|denied-only]}}
Example
rfs7000-37FABE(config-management-policy-test)#restrict-access host
172.16.10.4 log denied-only
rfs7000-37FABE(config-management-policy-test)#show context
management-policy test
no http server
https server
ftp username superuser password 1
626b4033263d6d2ae4e79c48cdfcccb60fd4c77a8da9e365060597a6d6570ec2 rootdir dir
no ssh
aaa-login radius external
aaa-login radius policy test
idle-session-timeout 0
restrict-access host 172.16.10.4 log denied-only
rfs7000-37FABE(config-management-policy-test)#
Related Commands:
snmp-server
management-policy
Enables the Simple Network Management Protocol (SNMP) engine settings. SNMP is an
application layer protocol that facilitates the exchange of management information between the
controller and a managed device. SNMP enabled devices listen on port 162 (by default) for SNMP
packets from the controller’s management server. SNMP uses read-only and read-write community
strings as an authentication mechanism to monitor and configure supported devices. The read-only
community string gathers statistics and configuration parameters from a supported wireless
device. The read-write community string is used by a management server to set device parameters.
SNMP is generally used to monitor a system’s performance and other parameters.
subnet Restricts access to a specified subnet. Uses a subnet IP address to filter access requests
•
– Sets the IP address of the subnet in the A.B.C.D/M format
Optional. Use this option to add multiple subnets, if required, to the restrict access list.
log
[all|denied-only] Optional. Configures a logging policy for access requests. Sets the log type generated for access requests
•
all – Logs all access requests, both denied and permitted
•
denied-only – Logs only denied access (when an access request is received from a host denied
access, a record is logged)
subnet Restricts access to a specified subnet. Uses a subnet IP address to filter access requests
•
– Sets the IP address of the subnet in the A.B.C.D/M format
host Uses the host IP address as a second filter
•
– Specify the host IP address.
log
[all|denied-only] Optional. Configures a logging policy for access requests. Sets the log type generated for access requests
•
all – Logs all access requests, both denied and permitted
•
denied-only – Logs only denied access (when an access request is received from a host denied
access, a record is logged)
no Removes device access restrictions