[alcatel-nsp] ACL/Rule Set

[Coulter, John (John)]

Amit,

To filter traffic on the mgmt port you use management access filter under:

configure system security management-access-filter

Thanks,
John

From: alcatel-nsp [mailto:alcatel-nsp-bounces at puck.nether.net] On Behalf Of Amit Dhamija
Sent: Friday, April 26, 2013 7:43 AM
To: alcatel-nsp at puck.nether.net
Subject: Re: [alcatel-nsp] ACL/Rule Set

Hi

I managed to get the config , Facing one issue while applying the filters under CPM to restrict SSH,Telnet access , I am able to do it  for system & interfaces address . I am using out of band management if i want to restrict for same .How to do it ??

In Below statement i am dropping all TCP Port 23 , but out of band management is still working..

                ip-filter
                    entry 20 create
                        action drop
                        description "Telnet-Access"
                        match protocol tcp
                            dst-port 23 65535
                            src-ip 10.54.2.0/24<http://10.54.2.0/24>
                        exit
                    exit
                    entry 21 create
                        action drop
                        description "Untrusted Telnet access"
                        match protocol tcp
                            dst-port 23 65535
                        exit
                    exit

Thanks



On Fri, Apr 26, 2013 at 1:24 PM, Amit Dhamija <amiitdhamija at gmail.com<mailto:amiitdhamija at gmail.com>> wrote:
Hi

Could you please help me with config how to apply ACL's or rule set for Protcols SNMP,NTP,Telnet Server etc in ALU.

Also if i want to apply ACL on Interface /MDA Port what is the configuration for that.

Thanks
Amit

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/alcatel-nsp/attachments/20130426/b944d37b/attachment.html>