Not able to assign access list to CMP interface of Nexus 7K.

[Chermatwi_2]

Hello,

I am trying to harden my Nexus box and I am not able to ACL assigment command. Following are the commands I am trying to add. Is anybody experience teh same issue?

interface cmp-mgmt module 5

Ip access-group NETWORK_MANAGEMENT_ACCESS in

Thanks,

Cheriyan

[InayathUlla Sharieff]

Hi Cheriyan,

Could you please be more specific on what exactly are you trying to do?

Are you trying to apply the access list on the cmp interface ? and you are not able to do?

If yes then whats the sw version running on nexus? If you are on 4.2 version then you need to telnet to CMP and configure the acl over there.

Example :

Switch CMP Configuration Example:

telnet server enable

# ssh server is enabled by default

ip access-list cmp-telnet-ssh-permit

   permit tcp 172.17.0.0/16 range 0 65535 0.0.0.0/0 range 22 23

   permit tcp 172.20.0.0/16 range 0 65535 0.0.0.0/0 range 22 23

interface cmp-mgmt

  ip address 192.168.201.2 255.255.255.0

  ip access-group cmp-telnet-ssh-permit in

Regards

Inayath