Apply an ACL to the Management VRF

Hello,

 

VTY ACLs are used only to block the source IP hosts which connect through SSH or telnet to the device management IP.

 

You cannot use these ACLs with any other qualifiers such as UDP or TCP port, destination IP, ICMP, and so on.

 

There is no implicit deny rule, so you need to add a deny rule at the end.

 

Here are instructions how to configure Management ACL to block Management access on OS10 Switches:

https://dell.to/490SkE3

 

The VTY ACL configuration syntax does not need to change for management VRF, however please check if any of these need to be changed:

 

Configure the SSH server to be reachable on the management VRF using the ip ssh server vrf command.

 

OS10(config)# ip ssh server vrf management

To allow Telnet TCP/IP connections to an OS10 switch, enable the Telnet server.

OS10(config)# ip telnet server vrf management

Configures an SNMP agent to receive SNMP traps for the management VRF instance.

OS10(config)# snmp-server vrf management