Enabling The Ip Permit List - Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual

Chapter 34 Configuring the IP Permit List
This example shows how to add IP addresses to the IP permit list and verify the configuration:
Console> (enable) set ip permit 172.16.0.0 255.255.0.0 telnet
172.16.0.0 with mask 255.255.0.0 added to telnet permit list.
Console> (enable) set ip permit 172.20.52.32 255.255.255.224 snmp
172.20.52.32 with mask 255.255.255.224 added to snmp permit list.
Console> (enable) set ip permit 172.20.52.3 all
172.20.52.3 added to IP permit list.
Console> (enable) show ip permit
Telnet permit list feature enabled.
Snmp permit list feature enabled.
Permit List
----------------
172.16.0.0
172.20.52.3
172.20.52.32
Denied IP Address
-----------------
172.100.101.104
172.187.206.222
Console> (enable)

Enabling the IP Permit List

You can enable either the SNMP permit list, the Telnet permit list, or both lists. If you do not specify a
permit list, both the SNMP and Telnet permit lists are enabled.
Before enabling the IP permit list, make sure you add the IP address of your workstation or network
Caution
management system to the permit list, especially when configuring through SNMP. Failure to do so
could result in your connection being dropped by the switch you are configuring. We recommend that
you disable the IP permit list before clearing IP permit entries or host addresses.
To enable the IP permit list on the switch, perform this task in privileged mode:
Task
Step 1 Enable the IP permit list.
Step 2 If desired, enable the IP permit trap to generate
traps for unauthorized access attempts.
Step 3 If desired, configure the logging level to see
syslog messages for unauthorized access
attempts.
Step 4 Verify the IP permit list configuration.
This example shows how to enable the IP permit list and verify the configuration:
Console> (enable) set ip permit enable
IP permit list enabled.
Console> (enable) set snmp trap enable ippermit
SNMP IP Permit traps enabled.
Console> (enable) set logging level ip 4 default
System logging facility <ip> set to severity 4(warnings)
78-13315-02
Mask Access Type
---------------- -------------
255.255.0.0 telnet
snmp telnet
255.255.255.224 snmp
Last Accessed Time Type
------------------ ------
01/20/97,07:45:20 SNMP
01/21/97,14:23:05 Telnet
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
Configuring the IP Permit List
Telnet Count SNMP Count
------------ ----------
14
7
Command
set ip permit enable [telnet | snmp | ssh]
set snmp trap enable ippermit
set logging level ip 4 default
show ip permit
show snmp
1430
236
34-3