Displaying, Adding, Or Activating An Access Profile - Cisco SF 300-08 Administration Manual

Configuring Security
Access Profiles
STEP 1
Cisco Small Business 300 Series Managed Switch Administration Guide
- Secure HTTP (HTTPS)
- Simple Network Management Protocol (SNMP)
- All of the above
• Action—Permit or deny access to an interface or source address.
• Interface—Which ports, LAGs, or VLANs are permitted to access or
denied access to the web-based switch configuration utility.
• Source IP Address—IP addresses or subnets. Access to management
methods might differ among user groups. For example, one user group
might be able to access the switch module only by using an HTTPS
session, while another user group might be able to access the switch
module by using both HTTPS and Telnet sessions.
Active Access Profile
The Access Profiles Page displays the access profiles and all access profiles
created by users. Only a one access profile can be active on the switch and any
attempt to access the switch must fit the rules in the active access profile.
The lookup in the active access profile is done by using a first-match method. The
switch looks to see if the active access profile explicitly permits management
access to the switch. If no match is found, access is denied.
When an attempt to access the switch is in violation of the active access profile,
the switch generates a SYSLOG message to alert the system administrator of the
attempt.
If a console-only access profile has been activated, the only way to deactivate it is
through a direct connection from the management station to the physical console
port on the switch.
After an access profile has been defined, additional rules can be added or edited
by using the Profiles Rules Page.

Displaying, Adding, or Activating an Access Profile

To display, add, or select a different active access profile:
Click Security > Mgmt Access Method > Access Profiles. The Access Profiles
Page displays.
This page displays all of the access profiles, active and inactive.
16
202