Examples – Allied Telesis AT-S62 User Manual
Page 762

Chapter 35: Management Access Control List
762
Section VII: Management Security
Examples
Following are several examples of ACEs.
This ACE allows the management station with the IP address
149.11.11.11 to remotely manage the switch using either the Telnet
application protocol or a web browser, and to ping the device:
IP Address:
149.11.11.11
Mask:
255.255.255.255
Application Type:
All
If the management ACL contained only the above ACE, then only that
management station would be allowed to remotely manage the switch.
This ACE allows all management stations in the subnet 149.11.11.0 to
remotely manage the switch using either the Telnet application or a web
browser, and to ping the device:
IP Address:
149.11.11.0
Mask:
255.255.255.0
Application Type:
All
This ACE allows all management stations in the subnet 149.11.11.0 to
remotely manage the switch using a web browser and to ping the device,
but prevents management with the Telnet application:
IP Address:
149.11.11.0
Mask:
255.255.255.0
Application Type:
Web, Ping
A management ACL can contain multiple ACEs. The two ACEs in this ACL
allow all management packets from the subnets 149.11.11.0 and
149.22.22.0 to manage the switch using just the Telnet application. They
cannot use a web browser and they cannot ping the device:
ACE #1
IP Address:
149.11.11.0
Subnet Mask:
255.255.255.0
Application Type:
Telnet
ACE #2
IP Address:
149.22.22.0
Subnet Mask:
255.255.255.0
Application Type:
Telnet