Table of Contents
Advertisement
Defining Profile Rules
Access profiles can contain up to 128 rules that determine which users can manage the switch module, and by
which methods. Users can also be blocked from accessing the device. Rules are composed of filters including:
•
Rule Priority
•
Interface
•
Management Method
•
Source IP Address
•
Prefix Length
•
Forwarding Action
The rule order is essential as packets are matched on a first-fit basis. To define profile rules:
1.
Click System > Management Security > Authentication > Profile Rules. The Profile Rules Page opens.
Figure 59: Profile Rules Page
The Profile Rules Page contains the following fields:
•
Access Profile Name — Displays the access profile to which the rule is attached.
•
Priority — Defines the rule priority. When the packet is matched to a rule, user groups are either granted per-
mission or denied device management access. The rule number is essential to matching packets to rules, as
packets are matched on a first-fit basis.
•
Interface — Indicates the interface type to which the rule applies. The possible field values are:
–
Port — Attaches the rule to the selected port.
–
LAG — Attaches the rule to the selected LAG.
–
VLAN — Attaches the rule to the selected VLAN.
•
Management Method — Defines the management method for which the rule is defined. Users with this
access profile can access the device using the management method selected. The possible field values are:
Page 110
Configuring Device Security
Configuring Management Security
Advertisement
Table of Contents
