Cisco 500 Series Administration Manual page 449

21
STEP 4
STEP 5
STEP 6
447
Click Add to open the Add Access Profile page. The page allows you to configure
a new profile and one rule.
Enter the Access Profile Name. This name can contain up to 32 characters.
Enter the parameters.
• Rule Priority—Enter the rule priority. When the packet is matched to a rule,
user groups are either granted or denied access to the device. The rule
priority is essential to matching packets to rules, as packets are matched on
a first-match basis. One is the highest priority.
• Management Method—Select the management method for which the rule
is defined. The options are:
- All—Assigns all management methods to the rule.
- Telnet—Users requesting access to the device that meets the Telnet
access profile criteria are permitted or denied access.
- Secure Telnet (SSH)—Users requesting access to the device that meets
the SSH access profile criteria, are permitted or denied access.
- HTTP— Users requesting access to the device that meets the HTTP
access profile criteria, are permitted or denied.
- Secure HTTP (HTTPS)—Users requesting access to the device that
meets the HTTPS access profile criteria, are permitted or denied.
- SNMP—Users requesting access to the device that meets the SNMP
access profile criteria are permitted or denied.
• Action—Select the action attached to the rule. The options are:
- Permit—Permits access to the device if the user matches the settings in
the profile.
- Deny—Denies access to the device if the user matches the settings in
the profile.
• Applies to Interface—Select the interface attached to the rule. The options
are:
- All—Applies to all ports, VLANs, and LAGs.
- User Defined—Applies to selected interface.
• Interface—Enter the interface number if User Defined was selected.
Cisco 500 Series Stackable Managed Switch Administration Guide
Security
Management Access Method