Locking Down SSH and ICMP

[nshoe18]

I am new to the small business line, but have years of experience on enterprise switching. We have setup a switch as L3 with multiple VLANs, but I have a couple of networks I do not want to be able to telnet, SSH, manage, or ping the switches from.

I am struggling to figure out how to lock this down on the small business switch.

[devils_advocate · Accepted solution]

#management access-list [NAME]

#deny ip-source 172.100.1.0 mask 255.255.255.0 service ssh
#deny ip-source 172.100.1.0 mask 255.255.255.0 service telnet
#deny ip-source 172.100.1.0 mask 255.255.255.0 service https
#permit service http
#permit service ssh
#permis service telnet

-------------------------------------------------

#management access-class [NAME]

Modify as appropriate.