Nortel 8300 Important Notice page 22

22 Administration and Security
NNCLI interface
NYK>:5(config)# access-policy policy 2 create
NYK>:5(config)# access-policy policy 2 name policy2
NYK>:5(config)# access-policy policy 2 mode deny
NYK>:5(config)# access-policy policy 2 network
47.81.113.152 255.255.255.255
NYK>:5(config)# access-policy policy 2 host
47.81.113.152
NYK>:5(config)# access-policy policy 2 precedence 10
NYK>:5(config)# access-policy policy 2 http
NYK>:5(config)# access-policy policy 2 rlogin
NYK>:5(config)# no access-policy policy 2 snmp
NYK>:5(config)# no access-policy policy 2 telnet
NYK>:5(config)# access-policy policy 2 tftp
NYK>:5(config)# access-policy policy 2 ftp
Allowing network management access for a specific station
With the following set of commands, you can create a policy to access the
switch for the specified station through SNMP and telnet services only.
CLI Interface
NYK>:5/config/sys/access-policy# policy 3
NYK>:5/config/sys/access-policy/policy/3# create
NYK>:5/config/sys/access-policy/policy/3# name POLICY3
NYK>:5/config/sys/access-policy/policy/3# mode allow
NYK>:5/config/sys/access-policy/policy/3# network
47.81.113.152/32
NYK>:5/config/sys/access-policy/policy/3# host
47.81.113.152
NYK>:5/config/sys/access-policy/policy/3# precedence 10
NYK>:5/config/sys/access-policy/policy/3# service
NYK>:5/config/sys/access-policy/policy/3/service# http
disable
NYK>:5/config/sys/access-policy/policy/3/service# rlogin
disable
NYK>:5/config/sys/access-policy/policy/3/service# snmp
enable
NYK>:5/config/sys/access-policy/policy/3/service# telnet
enable
NYK>:5/config/sys/access-policy/policy/3/service# tftp
disable
NYK>:5/config/sys/access-policy/policy/3/service# ftp
disable
NYK>:5/config/sys/access-policy/policy/3# network
47.81.113.152/32
Copyright © 2005-2007, Nortel Networks
.
Nortel Ethernet Routing Switch 8300
Important Notice — Administration and Security
NN46200-601 3.01 Standard
4.0 27 August 2007