Technical data

92
Management Security
With the following security control features, the user can prevent the router from being remotely managed via
Telnet and/or SNMP. Disabling SNMP will stop the Configuration Manager from accessing the router. In some
environments this is desirable.
Disable Telnet and SNMP
To completely disable remote management, the following commands should be entered from the command line.
login admin
system telnetport disable
system snmpport disable
save
reboot
Restore Telnet and SNMP
In order to reestablish the Telnet and SNMP services, you should restore the default values with the commands:
system telnetport default
system snmpport default
Validation of Telnet and SNMP clients
The following commands are used to validate Telnet, SNMP, or HTTP clients. They define a range of IP
addresses that are allowed to access the router via Telnet, SNMP, or HTTP. Only the IP addresses in the range
specified for Telnet, SNMP, or HTTP can access the router via Telnet, SNMP, or HTTP. This validation feature is
off
by default.
system addtelnetFilter <
fir
s
t ip addr
>
[
<
last ip addr
>] | LAN
system addSNMPFilter <
first ip addr
> [<
last ip addr
>] | LAN
system addHTTPFilter <
first ip addr
> [<
last ip addr
>] | LAN
Where:
first ip addr
First IP address of the client range
last ip addr
Last IP address of the client range. May be omitted if the range contains only one IP address.
LAN Local Ethernet LAN
Example:
system addsnmpfilter 192.168.1.5 192.168.1.12
Multiple range can be specified for Telnet and SNMP clients. If no range is defined, then access to the router is
through the LAN or WAN.
Note 1:
These commands do not
require a reboot and are effective immediately.