Limit web and ssh2 access administration to certains IP's CUCM 8.6

[Juan Gerardo Hernandez]

Hi all,

I would like to know if it is possible to prevent some IP's to access the web admin interface on the call Manager, form example, tell to the L3 switch,

"Only this subnet 10.2.1.X, can have access on this IP's on this port".

https://10.252.232.22:8443/ccmadmin/showHome.do

I want someting like a VPN TELNET access list on the VTY ports on the routers.

But I donw want the endusers, or services asociated at these (EM, presence, mobility, UDS) to be afected.

https://10.252.232.22/ccmuser/showHome.do

how can I improve my security?, What do you recomend?.

Reggards.

[Bruno Rangel]

Hi Juan

Yes you could limit the access for these pages, using ACL in Layer 2 and 3.

I think you can find the better way to setup this rules in the Network Infrastructure Communities, they can help you understanding the good way to set it in your enviroment correctly

Please rate this post