Brocade TurboIron 24X Series Configuration Guide - Manual (Page 103)

Brocade TurboIron 24X Series Configuration Guide 69
53-1003053-01
Restricting remote access to management functions
TurboIron(config)#all-client 10.157.22.69
Syntax: [no] all-client <ip-addr> | <ipv6-addr>
Restricting access to the device based on IP or
MAC address
You can restrict remote management access to the device, using Telnet, SSH, HTTP, and HTTPS,
based on the connecting client IP or MAC address.
Restricting Telnet connection
You can restrict Telnet connection to a device based on the client IP address or MAC address.
To allow Telnet access to the device only to the host with IP address 10.157.22.39 and MAC
address 0000.000f.e9a0, enter the following command.
TurboIron(config)#telnet client 10.157.22.39 0000.000f.e9a0
Syntax: [no] telnet client <ip-addr> | <ipv6-addr> <mac-addr>
The following command allows Telnet access to the device to a host with any IP address and MAC
address 0000.000f.e9a0.
TurboIron(config)#telnet client any 0000.000f.e9a0
Syntax: [no] telnet client any <mac-addr>
Restricting SSH connection
You can restrict SSH connection to a device based on the client IP address or MAC address.
To allow SSH access to the device only to the host with IP address 10.157.22.39 and MAC address
0000.000f.e9a0, enter the following command.
TurboIron(config)#ip ssh client 10.157.22.39 0000.000f.e9a0
Syntax: [no] ip ssh client <ip-addr> | <ipv6-addr> <mac-addr>
To allow SSH access to the device to a host with any IP address and MAC address 0000.000f.e9a0,
enter the following command.
TurboIron(config)#ip ssh client any 0000.000f.e9a0
Syntax: [no] ip ssh client any <mac-addr>
Restricting HTTP and HTTPS connection
You can restrict an HTTP or HTTPS connection to a device based on the client IP address or MAC
address.
To allow HTTP and HTTPS access to the device only to the host with IP address 10.157.22.40 and
MAC address 0000.000f.ab1c, enter the following command.
TurboIron(config)#web client 10.157.22.40 0000.000f.ab1c
Syntax: [no] web client <ip-addr> | <ipv6-addr> <mac-addr>