Technical data

92 ServerIron ADX Administration Guide
53-1002434-01
Restricting remote access to management functions
2
Restricting remote access to management functions
You can restrict access to management functions from remote sources, including Telnet, the Web
Management Interface, and SNMP. The following methods for restricting remote access are
supported:
• Using ACLs to restrict Telnet, Web Management Interface, or SNMP access
• Allowing remote access only from specific IP addresses
• Allowing remote access only to clients connected to a specific VLAN
• Specifically disabling Telnet or Web Management Interface access to the device
The following sections describe how to restrict remote access to a ServerIron using these methods.
Web management access
IPv4 and IPv6 addresses
SNMP read or
read-write
community
strings
Regulate Web management access using
ACLs
page 94
Allow Web management access only from
specific IP addresses
page 95
Allow Web management access only to
clients connected to a specific VLAN
page 97
Disable Web management access page 99
Set up local user accounts page 104
Establish SNMP read or read-write
community strings for SNMP versions 1
and 2
page 137
Establishing user groups for SNMP version
3
Configure TACACS or TACACS+ security page 106
Configure RADIUS security page 122
SNMP (IronView) access
IPv4 addresses
SNMP read or
read-write
community
strings and the
password to the
Super User
privilege level
Note: SNMP read
or read-write
community
strings are always
required for
SNMP access to
the device.
Regulate SNMP access using ACLs page 94
Allow SNMP access only from specific IP
addresses
page 96
Disable SNMP access page 92
Allow SNMP access only to clients
connected to a specific VLAN
page 97
Establish passwords to management
levels of the CLI
page 100
Set up local user accounts page 104
Establish SNMP read or read-write
community strings
page 106
TFTP access
IPv4 and IPv6 addresses
Not secured Allow TFTP access only to clients
connected to a specific VLAN
page 97
TABLE 6 Ways to secure management access to ServerIrons (Continued)
Access method How the access
method is secured
by default
Ways to secure the access method See page