Hi,

I have an X1052P switch (firmware 3.0.0.99) and want to limit access to the management interface to the protocols https and ssh, access to both should just be allowed from vlan1.

When I edit "access profiles and rules" in the Web UI, I can just allow or deny one protocol per access profile, not multiple ones. But there is a "priority" field which suggests that multiple access profiles can be active at once. But the screen to activate a profile just allows activating one, not several.

Then I tried it using the backup files. There are several entries with "management access-list" and just one entry "management access-class", the latter seems to denote the one active access list. So from this perspective it looks like really just one list can be active at once.

So I tried to include several entries in the access list like this:

management access-list sshhttps
permit service ssh vlan1 
permit service https vlan1 
exit
management access-class sshhttps

When restoring this file, the switch crashed and rebootet:

19-Sep-2018 15:03:44 %COPY-W-TRAP: The copy operation has failed
19-Sep-2018 15:03:46 %OS-F-MEMORY: OSMEMG_rn_free: Memory magic is invalid

***** FATAL ERROR *****
Reporting Task: GOAH.
Software Version: 3.0.0.99 (date  04-Sep-2018 time  13:03:59)
0x1a715c 
0x1a768c 
0x1a36ac 
0x842318 
0x5a43ac 
0x5a3168 
0x841798 
0x2c4050 
0x2b03bc 
0x2b0b4c 
0x2be254 
0x2b6cc4 
0x2b73bc 
0x2bf6d8 
0x2b3f00 
0x2ba348 
0x16b3b8 

So how do I limit access to two management methods/protocols and a specific vlan?

 

Thanks.