Manual

AT-S62 User’s Guide
Section VII: Management Security 565
Mask
You need to enter a mask that indicates the parts of the IP address the
switch should filter on. A binary “1” indicates the switch should filter on
the corresponding bit of the address, while a “0” indicates that it should
not. If you are filtering on a specific IP address, use the mask
255.255.255.255. If you are filtering on a subnet, the mask will depend on
the subnet address. For example, to allow any management workstation
in the subnet 149.11.11.0 to manage the switch, you would enter the
mask 255.255.255.0.
Protocol
The software allows you to choose TCP, UDP, or both as the protocol for
the management packets. Since Telnet and web browser management
packets for an AT-8524M switch are exclusively TCP, only that protocol
should be specified as the protocol.
Interface
This interface parameter allows you control whether the remote
management station can manage the switch using Telnet, a web
browser, or both. For example, you might create an ACE that states that
a particular remote management station can only use a web browser to
manage the switch.
Management
ACL Guidelines
Here are guidelines to observe when using the Management ACL:
❑ The default setting for this feature is disabled.
❑ A switch can have only one Management ACL.
❑ A Management ACL can have up to 256 ACEs.
❑ An ACE must have an IP address and mask.
❑ All Management ACEs are implicit “permit” statements. A
management packet that meets the criteria of an ACE is accepted
by the switch. Consequently, the ACEs you enter into the
Management ACL should specify which management packets
you want the switch to process. Management packets that do not
meet any of the ACEs in the Management ACL are discarded.
❑ A management packet that meets an ACE is immediately
processed by the switch and is not compared against any
remaining ACEs in the Management ACL.
❑ The ACEs are performed in the order in which they are entered in
the ACL. However, since all ACEs in a Management ACL are
implicit permit statements, it does not matter in which order you