Configure MGT IP Filters

Before you begin, enable MGT IP Filter in the network policy settings. See Configure MGT IP Filter Policy Settings.

By default, ExtremeCloud IQ devices enable administrative access from all IP addresses. To provide tighter security, you can restrict administrative access. As soon as you apply a filter to a device—which you do by applying the filter to a network policy and then applying that policy to a device—the device denies access from all other IP addresses except those specified in the filter.

Use the following procedure to configure MGT IP Filter objects for use in network policies.

Go to Configure > Common Objects > Security > MGT IP Filters.
Select an existing MGT IP Filter and then select , or select .
Configure the settings.

See MGT IP Filter Settings.
To add a new IP Object, select Add Another IP Object, configure the settings, and then select SAVE SUBNET.

See Settings for IP Objects.
Select SAVE MGT IP FILTER.