System information

Command Line Interface
4-82
snmp ip filter
This command sets the IP addresses of clients that are allowed management
access to the switch via SNMP. Use the no form the remove an IP address.
Syntax
[no] snmp ip filter ip_address subnet_mask
• ip_address - An IP address indicating a client or group of clients that are
allowed SNMP access to the switch.
• subnet_mask - An address bitmask of decimal numbers that represent the
address bits to match.
Default Setting
None
Command Mode
Global Configuration
Command Usage
• You can create a list of up to 16 IP addresses or IP address groups that are
allowed access to the switch via SNMP management software.
• Address bitmasks are similar to a subnet mask, containing four decimal
integers from 0 to 255, each separated by a period. The binary mask uses
“1” bits to indicate “match” and “0” bits to indicate “ignore.”
• If the IP is the address of a single management station, the bitmask should
be set to 255.255.255.255. Otherwise, an IP address group is specified by
the bitmask.
• The default setting is null, which allows all IP groups SNMP access to the
switch. If one IP address is configured, IP filtering is enabled and only
addresses in the specified IP group will have SNMP access.
• IP filtering does not affect management access to the switch using the Web
interface or Telnet.
Example
The following example enables SNMP IP filtering on the switch and allows SNMP
management access to client IP 10.1.2.3, and client IP group 10.1.3.0 to 10.1.3.255.
Related Commands
show snmp (4-83)
Console(config)#snmp ip filter 10.1.2.3 255.255.255.255
Console(config)#snmp ip filter 10.1.3.0 255.255.255.0
Console(config)#