Management Access cannot be restricted to single IP

[ThiruNathan18584]

Let me start with an overview of what I am trying to achieve. I have multiple vlans configured on the switch with an up link port(Trunk) to Meraki MX. I would like a single IP from a subnet 7 to access switch for management. Rest of the network should be blocked for switch management.

VLAN Table

VLAN ID VLAN   Name                       Type

2	Servers	Static
3	Users Printers	Static
6	Exec Admins	Static
7	Security	Static
8	IOT	Static
46	default	Default

Management Access Methods - Profile Rules

  Access Profile Name Priority Management Method Action Interface Source IP Address Prefix Length

Management_Security	1	All	Permit		10.1.7.3	32
Management_Security	100	All	Deny

I have management_security as active profile and it has the above two setup. Priority 1 is to allow only the source IP. Priority 100 is block rest of the network from managing the switch.

However, the rule is not effective since I am still able to reach the switch for management from any IP.

Any input will help

Thank you..

[balaji.bandi]

We need more information :

1. what switch is this?

2. how you applied the config on what interface? 

Can you pos relevant config to understand where went wrong?