Restrict access to Cisco Switch based on IP address – Knowligent
Restrict access to Cisco Switch based on IP address

Restrict access to Cisco Switch based on IP address

Home › How to, Tech › Restrict access to Cisco Switch based on IP address
Summary by Helpdeskgeek com • CBT Nuggets on Youtube • Published 8 years ago

We have reviewed the 500-page manual for you

How to restrict intra-VLAN traffic

For added security, I wanted to restrict access to my Cisco SG300-10 switch to just one IP address on my local subnet. After first configuring my new switch a few weeks ago, I wasn’t thrilled with the thought that anyone connected to my LAN or WLAN could reach the login page by just knowing the device’s IP address.

I finally dug through the 500 page manual to figure out how to block all IP addresses except the ones I wanted for management access. After a lot of testing and several posts on the Cisco forums, I figured it out! In this article, I'll walk you through the steps to configure access profiles and profile rules for your Cisco switch.

Note: The next method I'm going to describe will also allow you to restrict access to any number of enabled services on your switch. For example, you can restrict access to SSH, HTTP, HTTPS, Telnet, or all of these services based on IP address.