IP Filtering

Updated March 9, 2021. Written for LMS Version 6.2.

Overview

UCC: Inventory > Local Manager summary page > Network > Protocols

By default, the Local Manager allows SSH access from any IP address; however, access can be restricted to certain IP addresses or networks by using the config system protocols filter command. This command opens an editor that allows you to explicitly permit and deny access to source IP addresses and networks.

For example, specify your management subnet or your own computer and then use the deny all subcommand to block any IP address not explicitly allowed. This blocks all new communication with the Local Manager that is not sourced from the permitted IP address or network.

The filter automatically adds defined services such as the Control Center, TACACS, RADIUS, and NTP servers, as well as each device's specified management or dedicated IP address to the list of allowed IP addresses.

Filters are applied during both in-band and out-of-band communications.

Use the allow and deny subcommands to specify networks. Use the no modifier to remove previously configured behavior.

[admin@UplogixLM]# config system protocols filter
[config system protocols filter]# deny 192.0.2.1
[config system protocols filter]# deny 198.51.100.0/24
[config system protocols filter]# allow 10.10.10.25/24
[config system protocols filter]# no allow 10.10.10.25/24

Filtering subtracts the sum of the deny statements from the sum of allow statements.

Filtering only applies to new connections. If you deny an IP address while a user at that address has a CLI session open, the connection will not be affected. However, the user will not be able to open a new session.

Filters are applied after you exit the editor.

Not finding what you're looking for?

The Uplogix Technical Support team is standing by 24/7/365 to answer any questions you may have about the installation, configuration, and usage of our products. Give us a call at 888.663.6869 or email us at support@uplogix.com.

About Uplogix

Uplogix is the most evolved out-of-band solution on the market. Our intelligent console server monitors network devices and takes actions directly over the console port, like an onsite technician plugging in a laptop.

Want to find out how Uplogix can help manage your network? Drop us a note!

Learn more:

Solutions Products Resource Center About Us Schedule a demo

© 2022 Uplogix, Inc., All Rights Reserved.

Contact Uplogix Support
+1 (888) 663-6869
+1 (512) 857-7070
Sales Assistance
General Inquiries