topic RE: How to enable telnet for specific IP? in ExtremeSwitching (Other)

How to enable telnet for specific IP?

jaime_quintana — Mon, 16 Mar 2015 23:58:00 GMT

How to enable telnet for specific IPS
for example for ip 167.28.170.99 & 167.28.137.57

RE: How to enable telnet for specific IP?

Bill_Stritzinge — Tue, 17 Mar 2015 00:59:00 GMT

Jamie,

The best and most secure way to do this is to create a access profile that includes all of the specific IP's of stations you want to be able to telnet from. Once you create the profile (really just an ACL) you can then apply that to Telnet, SSH or SNMP.. Here is a link to the instructions..

http://documentation.extremenetworks.com/exos/EXOS_All/Switch_Management/c_access-profile-logging-fo...

Bill

RE: How to enable telnet for specific IP?

jaime_quintana — Tue, 17 Mar 2015 00:59:00 GMT

something like this:

Telnet_2.pol

entry AllowTheseSubnets {
if match any {
source-address 167.28.170.99 /32;
source-address 167.28.157.37 /32;
} then {
permit;
}
}
entry dontAllowTheRest {
if {
; #none specified
} then {
deny;
}
}

RE: How to enable telnet for specific IP?

jaime_quintana — Tue, 17 Mar 2015 01:08:00 GMT

Thank Bill

RE: How to enable telnet for specific IP?

Bill_Stritzinge — Tue, 17 Mar 2015 04:04:00 GMT

Yes, but make sure you use the correct indents as in the documentation. For the example you gave, the two IP addresses would be allowed like this... (assume your addresses are /24 - Match CIDR..)

MyAccessProfile.pol entry AllowTheseSubnets { if match any { source-address 167.28.170.99 /24; source-address 167.28.137.57 /24; } then { permit; } }
Once you create the file and copy to the switch, use the command "check policy MyAccessProfile" to make sure the format for the file is correct. The above will only let those two addresses access telnet. Once you create the file you can use that with SSH and SNNMP too.

Bill