NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Restrict Management access not working
Hi all, hoping someone can help. I have an M4300-8X8F switch which i have configured the management interface to use the OOB service port. my parent company has passed along a security requirement w...
Best I could work out is the ACLs don't apply to networkng on the OOB service port but it's not mentioned in the documentation. I had to change to use a switchport instead
Best I could work out is the ACLs don't apply to networkng on the OOB service port but it's not mentioned in the documentation. I had to change to use a switchport instead
The OOB (out of band!) should never be connected to the production network. The (expensive) solution is maintaining a dedicated network allowing the management plane to remain accessible during network outages or maintenance - we introduced such designs during the 1980ties for finance and government networks already. The less expensive version is a dedicated management VLAN where OOB, serial console servers et all are connected to - undoubted much less secure.
Not aware Netgear does offer the ability to put up ACLs on the OOB interfaces as e.g. NX-OS (add much more $$$) allows. LaurentMa ?
Hi, there is no ACL on the OOB out-of-band management port. Per design, OOBM (out-of-band management) is meant for a separate management network, traditionally secure because not in the network, not connected to the internet, etc. In that case, In-band management can be shut down using Management ACLs when separate OOBM network.
We do provide ACLs on the in-band of course - as you know the Source Management for the switch can be either OOB, or Management VLAN on the in-band, or a specific hardware interface (port) on the in-band too. For the last two, ACLs can be put in place.
I hope it helps,
Regards
LaurentMa True dedicated OOB band networks are a luxury good CIO can't get adjusted with the CFO and CEO of security sensitive businesses anymore. Rephrasing my question a little bit:
Does Netgear consider to offer the ability to put up ACLs on the OOB interfaces as e.g. NX-OS (add much more $$$) allows?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
