Table of Contents
Advertisement
Configuring Security
Configuring Management Access Methods
STEP 5
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
Click Apply. The access profile is created, and the Running Configuration is
updated.
Configuring Profile Rules
Access profiles can contain multiple rules to determine who is permitted to
manage and access the switch, and the access methods that may be used.
Each rule in an access profile contains an action and a criteria (one or more
parameters) to match. Each rule has a priority; rules with the lowest priority are
checked first. If the incoming packet matches a rule, the action associated with the
rule is performed. If no matching rule is found within the active access profile, the
packet is dropped.
For example, you can limit access to the switch from all IP addresses except IP
addresses that are allocated to the IT management center. In this way, the switch
can still be managed and has gained another layer of security.
To add rules to an access profile:
Click Security > Management Access Method > Profile Rules.
Select an access profile, and click Go.
Click Add to add a rule for the selected access profile.
Enter the following information:
•
Access Profile Name—Select an access profile to be configured.
•
Rule Priority—Enter the rule priority. When the packet is matched to a rule,
user groups are either granted or denied access to the switch. The rule
priority is essential to matching packets to rules, as packets are matched on
a first-match basis. One is the highest priority.
•
Management Method—Select the management method for which the rule
is defined. The options are:
All
-
—Assigns all management methods to the rule.
Telnet
-
—Users requesting access to the switch who meet the Telnet
access profile criteria, are permitted or denied access.
Secure Telnet (SSH)
-
the Telnet access profile criteria, are permitted or denied access.
—Users requesting access to the switch who meet
16
190
Advertisement
Table of Contents
