Alteon Application Switch Operating System Application Guide
Securing Alteon
Document ID: RDWR-ALOS-V2900_AG1302 61
Setting Source IP Address Ranges for Management
To limit access to Alteon without having to configure filters for each Alteon port, you can set a source
IP address or range that allows you to connect to Alteon IP interface through Telnet, SSH, SNMP, or
the Browser-Based Interface (BBI). This also helps to prevent spoofing or attacks on the TCP/IP
stack.
When an IP packet reaches Alteon, Alteon checks the source IP address against the range of
addresses defined by the management network and mask. If the source IP address of the host or
hosts are within this range, Alteon allows the packets to attempt to log in. Any packet addressed to
an Alteon IP interface with a source IP address outside this range is discarded.
You can configure both IPv4 and IPv6 IP ranges with up to 128 management IP addresses and
mask/prefix pairs.
Example
Definition of a range of allowed source IP addresses between 192.192.192.1 to 192.192.192.127:
(continued)
Sp - Application Services Engine Statistics
-----------------------------------------------------
Client frames sent : Success: 0
Client frames sent : Failed: 0
Server frames sent : Success: 0
Server frames sent : Failed: 0
Packets received: 0
Packets dropped: 0
Invalid frames received: 0
Invalid Session index: 0
Memory allocation failures: 0
Letter sent to sp success: 0
Letter sent to sp failed: 0
Packet buffers allocated: 0
Packet buffers freed: 0
Packet allocation failures: 0
sameWire: 0 flood: 0
learn_SA: 84 match_SA: 955663336
match_DA: 0 move_SA: 0
resolve_DA_req: 0 resolve_DA_resp: 0
aged_entries: 440 old_entries: 70
age_zero: 370 deleted_entries: 70
delete mismatches: 0
VRRP MAC delete attempts: 0
age mismatches: 0
fill mismatches: 0
>> Main# /cfg/sys/access/mgmt add
Enter Management Network Address:192.192.192.0
Enter Management Network Mask: 255.255.255.128
To Next Page
Loading...
