I'm trying t set up management on a 5324 so that only one station can manage the switch using HTTP. I want to restrict access to only port 24. I have been able to create a similar management scheme on a 3448, but not the 5324. Here is the management section of the configuration.
interface vlan 1
ip address 192.168.120.28 255.255.255.224
exit
ip default-gateway 192.168.120.30
management access-list Manager
permit ip-source 192.168.120.30 vlan 1 service snmp
deny service snmp
permit ip-source 192.168.120.29 ethernet g24 service http
permit ip-source 192.168.120.30 vlan 1 service http
deny service telnet
deny vlan 1 service ssh
deny vlan 1 service https
deny vlan 1 service http
exit
management access-class Manager
I can manage the switch from a PC with IP address 192.168.120.30 plugged into port 24, but not from a PC with IP address 192.168.120.29 plugged into port 24 with the management access-class Manager enabled. With the management access-class Manager disabled, I can manage from either IP address. A similar configuration works on the 3448.
This has been identified as a bug in the latest version of the code available online for the 5324. We have a fix for it in a newer version of the code which we have in-house. We will be releasing this code officially next month. Sorry for the inconvenience.
etnavy
19 Posts
159
0
Posted July 17th, 2006 14:00