TMS zl Management and Configuration Guide ST.1.2.100916

2-33
Initial Setup in Routing Mode
Configure Management Access Settings
4. Enable management access from a zone:
For example, enter this command to enable management access from the
Internal zone:
hostswitch(tms-module-C:config)# management zone
internal
This command automatically creates the access policies that you will need to
manage the module, such as allowing HTTPS and SNMP traffic from the
management-access zone to Self (the module). (For more information on
management-access zones, see “Management-Access Zones” on page 2-10.)
To prevent Denial of Service (DoS) attacks on your Web server, you may want
to later modify the automatically-created access policies to limit management
access to certain IP addresses. For more information, see “Default Access
Policies” in Chapter 4: “Firewall.”
5. Associate a VLAN with the management-access zone:
When you first set up management access for the module, associate your
management workstation’s VLAN with the management-access zone that
you just enabled.
For example, enter this command to associate VLAN 5 with the Internal
zone:
hostswitch(tms-module-C:config)# vlan 5 zone internal
Syntax: management zone <zone>
Enables management access from a zone.
Replace <zone> with the zone from which you want to
permit management traffic to the module.
Syntax: vlan <VLAN ID> zone <zone>
Associates a VLAN with a zone.
Replace <VLAN ID> with the number of a VLAN to associate
with the zone.
Replace <zone> with the name of a zone.