Zte ZXR10 2900E Series - Page 231

Chapter6
Management
TableofContents
Remote-Access..........................................................................................................6-1
SSH...........................................................................................................................6-3
Privilege...................................................................................................................
6-11
SNMP......................................................................................................................6-13
RMON......................................................................................................................6-18
ZGMP......................................................................................................................
6-21
sFlow.......................................................................................................................6-28
Web.........................................................................................................................
6-29
M_Button..................................................................................................................6-49
Telnet.......................................................................................................................6-52
6.1Remote-Access
Remote-AccessOverview
Remote-Accessisamechanismforlimitingnetworkmanagementuserstomanagethe
switchthroughT elnet,SSH,SNMPandWeb,thatis,itisusedtorestricttheaccess.This
functionistoenhancethesecurityofthenetworkmanagementsystem.
Afterthisfunctionisenabled,specifyanetworkmanagementusertoaccesstheswitch
onlyfromaspeciedIPaddress,theusercannotaccesstheswitchfromotherIP
addresses.Whenthisfunctionisdisabled,thenetworkmanagementusercanaccessthe
switchthroughT elnet,SSH,SNMPandWebfromanyIPaddress.
ConguringRemote-Access
TheRemote-Accesscongurationincludesthefollowingcommands:
CommandFunction
zte(cfg)#setremote-access{any|specific}Enablesordisablestheremote
accesscontrolfunction.
zte(cfg)#setremote-accessipaddress<A.B.C.D>[<A.B.C.D>][{s
nmp|telnet|ssh|web}{permit|deny}]
Permitsordeniesswitchaccess
fromaspeciedIPaddress
ornetworksegmentthrough
SSH/SNMP/Telnet/Web.
zte(cfg)#clearremote-accessallDeletesallIPaddress
congurations.
6-1
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential