Configure MGT IP Filters

Before you begin, enable MGT IP Filter in the network policy settings. See Enable MGT IP Filters.

By default, ExtremeCloud IQ devices enable administrative access from all IP addresses. To provide tighter security, you can restrict administrative access. As soon as you apply a filter to a device—which you do by applying the filter to a network policy and then applying that policy to a device—the device denies access from all other IP addresses except those specified in the filter.

Use the following procedure to configure MGT IP Filter objects for use in network policies.

Go to Configure > Common Objects > Security > MGT IP Filters.
Select an existing MGT IP Filter and then select , or select .
Type a Name for the policy.
Enter an optional Description.
In the Permitted Management Traffic From section, select an IP address in the Available IP Address column from which you want to permit administrators to access the devices, and then select the single arrow ( > ) to move it to the Selected IP Address column.
Select Add Another IP Object to repeat the process.
Select Save MGT IP Filter.