Specifying The Maximum Number Of Login Attempts For Telnet Access; Restricting Remote Access To The Device To Specific Vlan Ids - Dell PowerConnect B-RX Configuration Manual

4
Restricting remote access to management functions

Specifying the maximum number of login attempts for Telnet access

If you are connecting to the device using Telnet, the device prompts you for a username and
password. By default, you have up to3 chances to enter a correct username and password. If you
do not enter a correct username or password after 3 attempts, the device disconnects the Telnet
session.
You can specify the number of attempts a Telnet user has to enter a correct username and
password before the device disconnects the Telnet session. For example, to allow a Telnet user up
to 3 chances to enter a correct username and password, enter the following command.
BigIron RX(config)# telnet login-retries 5
Syntax: [no] telnet login-retries <number>
You can specify from 0 – 3 attempts. The default is 3 attempts.

Restricting remote access to the device to specific VLAN IDs

You can restrict management access to a device to ports within a specific port-based VLAN.
VLAN-based access control applies to the following access methods:
•
•
•
•
By default, access is allowed for all the methods listed above on all ports. Once you configure
security for a given access method based on VLAN ID, access to the device using that method is
restricted to only the ports within the specified VLAN.
VLAN-based access control works in conjunction with other access control methods. For example,
suppose you configure an ACL to permit Telnet access only to specific client IP addresses, and you
also configure VLAN-based access control for Telnet access. In this case, the only Telnet clients
that can access the device are clients that have one of the IP addresses permitted by the ACL and
are connected to a port that is in a permitted VLAN. Clients who have a permitted IP address but
are connected to a port in a VLAN that is not permitted still cannot access the device through
Telnet.
Restricting Telnet access to a specific VLAN
To allow Telnet access only to clients in a specific VLAN, enter a command such as the following.
BigIron RX(config)# telnet server enable vlan 10
The command configures the device to allow Telnet management access only to clients connected
to ports within port-based VLAN 10. Clients connected to ports that are not in VLAN 10 are denied
management access.
Syntax: [no] telnet server enable vlan <vlan-id>
68
Telnet access
Web management access
SNMP access
TFTP access
BigIron RX Series Configuration Guide
53-1001810-01