Cisco 350XG series Administration Manual page 421

Security
Management Access Method
STEP 7
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
Network Mask
-
belongs and enter the subnet mask in dotted decimal format.
Prefix Length
-
comprise the source IP address prefix.
Click Apply. The access profile is written to the Running Configuration file. You can
now select this access profile as the active access profile.
Profile Rules
Access profiles can contain up to 128 rules to determine who is permitted to
manage and access the device, and the access methods that may be used.
Each rule in an access profile contains an action and criteria (one or more
parameters) to match. Each rule has a priority; rules with the lowest priority are
checked first. If the incoming packet matches a rule, the action associated with the
rule is performed. If no matching rule is found within the active access profile, the
packet is dropped.
For example, you can limit access to the device from all IP addresses except IP
addresses that are allocated to the IT management center. In this way, the device
can still be managed and has gained another layer of security.
To add profile rules to an access profile:
Click Security > Mgmt Access Method > Profile Rules.
Select the Filter field, and an access profile. Click Go.
The selected access profile appears in the Profile Rule Table.
Click Add to add a rule.
Enter the parameters.
• Access Profile Name—Select an access profile.
• Rule Priority—Enter the rule priority. When the packet is matched to a rule,
user groups are either granted or denied access to the device. The rule
priority is essential to matching packets to rules, as packets are matched on
a first-fit basis.
• Management Method—Select the management method for which the rule
is defined. The options are:
—Select the subnet to which the source IP address
—Select the Prefix Length and enter the number of bits that
19
407