Remote-Access Configuration Example - Zte ZXR10 2900 Series User Manual

ZXR10 2900 Series User Manual
194 Confidential and Proprietary Information of ZTE CORPORATION
Command
set remote-access {any|spec
zte(cfg)#
ific}
set remote-access ipaddress
zte(cfg)#
<A.B.C.D>[<A.B.C.D>]{snmp|telnet|ssh
|web}{permit|deny}
set remote-access ipaddress<A
zte(cfg)#
.B.C.D><netmask>[snmp | telnet | ssh |
web]{permit | deny}
clear remote-access all
zte(cfg)#
clear remote-access ipaddress
zte(cfg)#
<A.B.C.D>[<A.B.C.D>]
show remote-access
zte(cfg)#
Remote-Access Configuration
Example
Example 1: Only allow the network management user to access
the switch from 10.40.92.0/24 through Telnet SSH SNMP Web.
zte(cfg)#set remote-access specific
zte(cfg)#set remote-access ipaddress 10.40.92.0 255.255.255.0
zte(cfg)#show remote-access
Whether check remote manage address: YES
Allowable remote manage address(es) and application(s):
10.40.92.0/255.255.255.0 snmp, telnet, ssh, web
Function
This disables/enables
the restrictive access.
The parameter any
represents any IP
address can access
switch . The parameter
specific represents
only the permitted IP
address can access
switch.
This permits/denies
the login mode of IP
address.
This configures the IP
address, subnet mask
and login mode of the
switch which can be
login.
[snmp | telnet | ssh |
web]{permit | deny}
is used to configure
the address-based
hierarchical
authorization, which
restricts the login mode
of remote login in
detail. By default ,
all login modes are
permitted.
This deletes all IP
addresses of restrictive
access.
This deletes an IP
address of restrictive
access.
This displays the
remote-access
configuration
information.