Reference Guide

112 Configuring System Information
DELL CONFIDENTIAL – PRELIMINARY 3/6/14 - FOR PROOF ONLY
A specific management access method may be completely disabled by
denying all user access to it (e.g. denying all users access to CLI/Telnet
management effectively disables CLI/Telnet as an available management
interface to the system).
By default, management access to the system, through all methods, is
enabled over all interfaces.
NOTE:
If you enable management access through a physical port, all VLANs and
IP interfaces on this port will be acceptable management traffic sources. If you
enable management access through a VLAN, all ports and IP interfaces on that
VLAN will be acceptable. If specific IP address(es) are specified, only traffic from
these specified IP addresses on the appropriate ports will be accepted.
Access Profiles Rules (Advanced Mode)
Each management access profile is composed of at least one rule, which acts
as a filter, and defines the device management method, interface type, source
IP address, network mask, and the device management access action.
Users can be blocked or permitted management access.
Rule priority sets the order in which the rules are implemented. Assigning an
access profile to an interface denies access via other interfaces. If an access
profile is not assigned to any interface, the device can be accessed by all
interfaces.
A total of 256 rules can be defined for all Management Access profiles.
To add rules to existing access profiles, see
Profile Rules
.
Creating an Access Profile
To define an access profile with a single rule:
1
Click
System
>
Management Security
>
Access Profiles
in the tree view
to display the
Access Profiles: Summary
page.
The currently-defined access profiles are displayed.
2
To activate an access profile, select it in the
Active Access Profile
field.
If you select
Console Only
, active management of the device can only be
performed using the console connection. This profile cannot be removed.