11.25. Device management securiy Commands

11.25.1. ip telnet server acl

Command Purpose

To deny specified telnet client IP, use this command in configuration mode. To delete this configuration, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

ip telnet server acl NAME

no ip telnet server acl

Parameter

Parameter Description

Parameter Value

NAME

access-list name

String with up to 40 characters

Command Mode

Global Config

Default

No acl is specified

Usage

Use this command to deny specified telnet client IP.

The access-list should be created before using this command.

Examples

This example shows how to enabe telnet acl, which deny telnet client with source IP 1.1.1.1:

Switch# configure terminal
Switch(config)# ip access-list telnetACL
Switch(config-ip-acl)# 10 deny tcp host 1.1.1.1 any
Switch(config-ip-acl)# exit
Switch(config)# ip telnet server acl telnetACL

11.25.2. ip ssh server acl

Command Purpose

To deny specified SSH client IP, use this command in configuration mode. To delete this configuration, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

ip ssh server acl NAME

ip no ssh server acl

Parameter

Parameter Description

Parameter Value

NAME

access-list name

String with up to 40 characters

Command Mode

Global Config

Default

No acl is specified

Usage

Use this command to deny specified SSH client IP.

The access-list should be created before using this command.

Examples

This example shows how to enabe SSh acl, which deny SSH client with source IP 1.1.1.1:

Switch# configure terminal
Switch(config)# ip access-list telnetACL
Switch(config-ip-acl)# 10 deny tcp host 1.1.1.1 any
Switch(config-ip-acl)# exit
Switch(config)# ip ssh server acl telnetACL

Related Commands

None

11.25.3. service password-encryption

Command Purpose

To encrypt password of users and line vtys, use this command in configuration mode. To delete this configuration, use the no form of this command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

service password-encryption

no service password-encryption

Command Mode

Global Config

Default

None

Usage

Use this command to encrypt password of users and line vtys, after this command is configured, existed password or new configued password will be encrypted.

Examples

The following example shows how to encrypt user password:

Switch# configure terminal
Switch(config)# service password-encryption
Switch# show running-config
username admin privilege 4 password 8 56ab359baafb02a3

Related Commands

None

11.25.4. http server acl

Command Purpose

Configure access to the http/https service.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

http server acl NAME

no http server acl

Parameter

Parameter Description

Parameter Value

NAME

access-list name

String with up to 40 characters

Command Mode

Global Config

Default

No acl is specified

Usage

The access-list should be created before using this command. ACE must specify the tcp protocol and source ip address

Examples

This example shows only client with source IP 10.13.16.39 can access web:

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# ip access-list web1
Switch(config-ip-acl)# permit tcp 10.13.16.39 0.0.0.0 any
Switch(config-ip-acl)# quit
Switch(config)# http server acl web1

Related Commands

None

11.25.5. service rpc-api acl

Command Purpose

Configure access to the rpc-api http/https service

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

service rpc-api acl NAME

no service rpc-api acl

Parameter

Parameter Description

Parameter Value

NAME

access-list name

String with up to 40 characters

Command Mode

Global Config

Default

No acl is specified

Usage

The access-list should be created before using this command. ACE must specify the tcp protocol and source ip address

Examples

This example shows only client with source IP 10.13.16.39 can use rpc-api:

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# ip access-list a1
Switch(config-ip-acl)# permit tcp 10.13.16.39 0.0.0.0 any
Switch(config-ip-acl)# quit
Switch(config)# service rpc-api acl a1

Related Commands

None