beautypg.com

Examples – Allied Telesis AT-S62 User Manual

Page 762

background image

Chapter 35: Management Access Control List

762

Section VII: Management Security

Examples

Following are several examples of ACEs.

This ACE allows the management station with the IP address
149.11.11.11 to remotely manage the switch using either the Telnet
application protocol or a web browser, and to ping the device:

IP Address:

149.11.11.11

Mask:

255.255.255.255

Application Type:

All

If the management ACL contained only the above ACE, then only that
management station would be allowed to remotely manage the switch.

This ACE allows all management stations in the subnet 149.11.11.0 to
remotely manage the switch using either the Telnet application or a web
browser, and to ping the device:

IP Address:

149.11.11.0

Mask:

255.255.255.0

Application Type:

All

This ACE allows all management stations in the subnet 149.11.11.0 to
remotely manage the switch using a web browser and to ping the device,
but prevents management with the Telnet application:

IP Address:

149.11.11.0

Mask:

255.255.255.0

Application Type:

Web, Ping

A management ACL can contain multiple ACEs. The two ACEs in this ACL
allow all management packets from the subnets 149.11.11.0 and
149.22.22.0 to manage the switch using just the Telnet application. They
cannot use a web browser and they cannot ping the device:

ACE #1

IP Address:

149.11.11.0

Subnet Mask:

255.255.255.0

Application Type:

Telnet

ACE #2

IP Address:

149.22.22.0

Subnet Mask:

255.255.255.0

Application Type:

Telnet