Active Access Profile; Configuring Access Profiles - Cisco SF220-24 Administration Manual

Configuring Security
Configuring Management Access Methods
STEP 1
STEP 2
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x
• Source IP Address—IP addresses or subnets. Access to management
methods might differ among user groups. For example, one user group
might be able to access the switch module only by using an HTTPS
session, while another user group might be able to access the switch
module by using both HTTPS and Telnet sessions.

Active Access Profile

The Access Profiles page displays the access profiles that are defined and
enables selecting one access profile to be the active one. Only one access profile
can be active on the switch and any attempt to access the switch must fit the rules
in the active access profile.
When a user attempts to access the switch through an access method, the switch
looks to see if the active access profile explicitly permits management access to
the switch through this method. If no match is found, access is denied.
If a console-only access profile has been activated, the only way to deactivate it is
through a direct connection from the management station to the physical console
port on the switch.
After an access profile has been defined, additional rules can be added or edited
on the Profiles Rules page. See

Configuring Access Profiles

Use the Access Profiles page to create an access profile and to add its first rule. If
the access profile only contains a single rule, you are finished. To add additional
rules to the profile, use the Profile Rules page.
To add an access profile or select a different active access profile:
Click Security > Management Access Method > Access Profiles.
The Access Profiles Table displays all of the access profiles, active and inactive.
To change the active access profile, select a profile from the Active Access
Profile drop-down menu and click Apply. This makes the selected profile as the
active access profile.
A caution message appears if you selected Console Only. If you continue,
NOTE
you are immediately disconnected from the web-based interface and can only
access the switch through the console port.
Configuring Profile Rules
16
for more details.
194