Technical data

4 ServerIron ADX Administration Guide
53-1002434-01
Setting up local user accounts
1
Restricting Telnet management access
You can restrict Telnet management access to the Brocade device to the host whose IP address
you specify. No other device except the one with the specified IP address can access the Brocade
device’s CLI through Telnet. You can use the command up to ten times for up to ten IP addresses.
If you want to restrict access from SNMP or the Web, use one or two of the following commands:
• snmp-client – restricts SNMP access (including IronView).
• web client – restricts web access.
If you want to restrict all management access, you can use the commands above and the telnet
client command or you can use the following command: all-client.
To restrict Telnet access (which includes IronView) to the Brocade device to the host with IP address
209.157.22.26, enter the following command.
ServerIronADX(config)# telnet client 209.157.22.26
Syntax: [no] telnet client <ip-addr>
Changing the Telnet login timeout period
To change the login timeout period for Telnet sessions, enter the following command.
ServerIronADX(config)# telnet login-timeout 5
Syntax: [no] telnet login-timeout <minutes>
The <minutes> parameter specifies 1 – 10 minutes. The default is 2 minutes.
Enabling or disabling Telnet access
By default, Telnet access is enabled on the system.
To disable Telnet access to a ServerIron ADX, enter the following command.
ServerIronADX(config)# no telnet server
Syntax: [no] telnet server
Allowing Telnet access only to clients in a VLAN
You can allow Telnet access only to clients in a specific VLAN.
The following command configures the device to allow Telnet management access only to clients
connected to ports within port-based VLAN 10. Clients connected to ports that are not in VLAN 10
are denied management access.
ServerIronADX(config)# telnet server enable vlan 10
Syntax: [no] telnet server enable vlan <vlan-id>
Suppressing the rejection message
You can suppress the rejection message the device sends in response to a denied Telnet client.