Device Online Help

Controlling access to a switch

You can control access to the switch by creating an access policy. An access policy specifies the hosts or networks that can access the switch through various services, such as Telnet, SNMP, HTTP, rsh, and rlogin.

You can define network stations that are explicitly allowed to access the switch or network stations that are explicitly forbidden to access the switch. For each service you can also specify the level of access, such as read-only or read/write/all.

To create a new access policy:

1. From the Device Manager menu bar, choose Edit > Security.

The Security dialog box opens with the Access Policies tab active.

2. In the Security dialog box, click Insert.

The Security, Insert Access Policies dialog box opens. The fields are defined in the Access Policies tab and Security, Insert Access Policies fields table. All fields are optional except ID.

3. Make sure PolicyEnable is checked.
4. Select the mode to allow or deny a service.
5. Select a service.
6. Set a precedence number for the service (lower numbers mean higher precedence).
7. Enter an IP address in the NetAddr field.
8. Enter the NetMask used for the NetAddr field.
9. Enter an IP address for the trusted host.
10. Enter a user name for the trusted host.
11. Select the access level for the service.
12. Select AccessStrict, if desired.
    
    

    Note: When you select this option, you specify that a user must have an access level identical to the one you selected in the dialog box to be able to use this service.

    
    
13. Click Insert.

• Access Policies tab and Security, Insert Access Policies fields