Using an IP Address to Restrict Remote Access

Remote access using Telnet, SSH, SNMP, and Web Management to RUCKUS ICX devices can be controlled using IPv4 or IPv6 addresses.

By default, a RUCKUS device does not control remote management access based on the IP address of the managing device. You can restrict remote management access to a single IP address for the following access methods:

  • Telnet access

  • SSH access

  • SNMP access

  • Web management access

To simplify the configuration, you can restrict all access methods to the same IP address using a single command. Although each command line must contain only one IP address, up to 10 command lines can be configured for each remote access method. In this task, access to a device is restricted to one IP address for Telnet, SSH, SNMP, Web management, and all remote management access methods. Each step is optional and no specific order is implied.

Note: You cannot restrict management access using the Web Management interface.
  1. Enter global configuration mode.
    device# configure terminal
  2. Control Telnet access to a specific IP address.
    device(config)# telnet client 10.157.22.39
    This step allows Telnet access to the device only for the host with the IPv4 address 10.157.22.39.
  3. Control SSH access to a specific IP address.
    device(config)# ip ssh client ipv6 2001:DB8:0:ee44::1
    This step allows SSH access to the device only for the host with the IPv6 address 2001:DB8:0:ee44::1.
  4. Control SNMP access to a specific IP address.
    device(config)# snmp-client 10.157.22.14
    This step allows SNMP access to the device only for the host with the IPv4 address 10.157.22.39.
  5. Control Web Management access to a specific IP address.
    device(config)# web client 172.168.21.38
    This step allows Web Management access to the device only for the host with the IPv4 address 10.157.22.39.
  6. Control all remote access methods to allow access to a specific IP address.
    device(config)# all-client 172.168.21.11
    This step allows Telnet, SSH, Web Management, and SNMP access to the device only for the host with the IPv4 address 10.157.22.39.