Enabling The Ip Permit List - Cisco WS-C2948G-GE-TX Configuration Manual

Chapter 18 Configuring the IP Permit List
172.20.0.0
172.20.52.0
172.20.52.3
Denied IP Address
-----------------
172.100.101.104
172.187.206.222
Console> (enable)

Enabling the IP Permit List

You can enable either the SNMP permit list, the Telnet permit list, or both lists. If you do not specify a
permit list, both the SNMP and Telnet permit lists are enabled.
Caution Before enabling the IP permit list, make sure that you add the IP address of your workstation or network
management system to the permit list, especially when configuring through SNMP. Failure to do so
could result in your connection being dropped by the switch that you are configuring. We recommend
that you disable the IP permit list before clearing IP permit entries or host addresses.
To enable the IP permit list on the switch, perform this task in privileged mode:
Task
Step 1
Enable the IP permit list.
Step 2 If desired, enable the IP permit trap to generate traps
for unauthorized access attempts.
Step 3 If desired, configure the logging level to see syslog
messages for unauthorized access attempts.
Step 4
Verify the IP permit list configuration.
This example shows how to enable the IP permit list and verify the configuration:
Console> (enable) set ip permit enable
Telnet, Snmp and Ssh permit list enabled
Console> (enable) set snmp trap enable ippermit
SNMP IP Permit traps enabled.
Console> (enable) set logging level ip 4 default
System logging facility <ip> set to severity 4(warnings)
Console> (enable) show ip permit
Telnet permit list enabled.
Ssh permit list enabled.
Snmp permit list enabled.
Permit List
----------------
172.16.0.0
172.20.0.0
172.20.52.0
172.20.52.3
Denied IP Address Last Accessed Time Type
----------------- ------------------ ------
Denied IP Address
-----------------
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
255.255.0.0 snmp
255.255.255.224 ssh
telnet ssh snm
Last Accessed Time Type
------------------ ------
01/20/97,07:45:20 SNMP
01/21/97,14:23:05 Telnet
Mask Access-Type
---------------- -------------
255.255.0.0 telnet
255.255.0.0 snmp
255.255.255.224 ssh
telnet ssh snmp
Last Accessed Time Type
------------------ ------
Configuring the IP Permit List on the Switch
Telnet Count SNMP Count
------------ ----------
14 1430
7 236
Command
set ip permit enable [ssh | snmp | telnet]
set snmp trap enable ippermit
set logging level ip 4 default
show ip permit
show snmp
Telnet Count SNMP Count
------------ ----------
18-3