10-17-2023 03:25 AM
I can create a simple ACL like below:
create access-list Mgmt-Access "source-address 192.168.40.0/24;" "permit;"
configure ssh2 access-profile add Mgmt-Access first
But how do I add another address range to this acl? Do I need to do:
create access-list Mgmt-Access2 "source-address 192.168.50.0/24;" "permit;"
configure ssh2 access-profile add Mgmt-Access2 after Mgmt-Access
A bit messy and was hoping to combine all my ranges in a single ACL. Is this possible?
This below makes it sound like you can:
create access-list <EntryName> "<MatchCondition>;<MatchCondition>;" "<Action>; <ActionModifier>;"
But when I use source-address twice it doesnt like it. Is there some other formatting?
Thanks
10-17-2023 08:33 AM
The most common way of creating an SSH access-profile is here using static ACLs:
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000090702
Otherwise, using dynamic ACLs is fine with the commands you listed. However, you cannot combine multiple ranges into a single dynamic ACL entry (only certain static ACLs), so you have to use multiple entries as you've identified.
10-17-2023 09:05 AM
Thanks, is there a way of creating static ACL's using ExtremecloudIQ? I can't seem to find it.
That's why I was using dynamic ACL's as I could then push out via a template and the supplemental CLi