M A G N U M 6 K S W I T C H E S , M N S - 6 K U S E R G U I D Edeny – deny specified services for specified IP addresses – IP addresses can be individualstations, a group of stations or subnets. The range is determined by the IP address andnetmask settingsremove – eliminate specified entry from the authorized manager listremoveall – remove all authorized managersservice – the services allowed or denied are telnet, web and SNMPIt is assumed here that the user is familiar with IP addressing schemes (e.g.Class A, B, C etc.), subnet masking and masking issues such as how manystations are allowed for a given subnet mask.In the examples – any computer on 192.168.5.0 network is allowed (note how the subnetmask is used to indicate that). Also a specific station with IP address 192.168.15.25 isallowed (again note how the subnet mask is used to allow only one specific station in thenetwork.) Older station with IP address 192.168.15.15 is removed.Magnum6K25# accessMagnum6K25(access)## allow ip=192.168.5.0 mask=255.255.255.0 service=telnetService(s) allowed for specified addressMagnum6K25(access)## allow ip=192.168.15.25 mask=255.255.255.255 service=telnetService(s) allowed for specified addressMagnum6K25(access)## remove ip=192.168.15.15 mask=255.255.255.255Access entry removedMagnum6K25(access)## exitMagnum6K25# show ip-access==========================================================================IP Address | Mask | Telnet | Web | SNMP |==========================================================================192.168.5.0 255.255.255.0 ALLOWED DENIED DENIED192.168.15.25 255.255.255.255 ALLOWED DENIED DENIEDFIGURE 67 – Steps to allow deny or remove specific servicesList of commands in this chapterSyntax set password – set or change password103
