SG300 - How to block managment access

Hello and thanks in advance for you help.
I have a SG300 switch working in layer 3 mode.
I created 3 VLANS and the intervlan communication is working fine. I want to know how to block acces to switch managment from the Vlans.
One of the vlan is allowed to access the switch but not the others vlans.
What is the best way to implement this? with ACL or with Managment Access Method, creating an access profile?
thanks againg!

Hi Angel
Access list work on packets traversing through the switch/
Try the following method to restrict access to the management interface.
Have a look at the GUI section on Security > Mgmt Access Method > Profile rules and see which methods or restrictions better suit your needs.
regards Dave

Similar Messages

How to block internet access for RDS and RemoteApp users?

Hi everyone,
This question might partially belong to security forum but I think anyone using RDS services comes across this. I would like to TOTALLY block all internet access including "updates" to any software, windows updates, anti-virus updates, TCP, UDP,
or ANY other protocol out of the server. I would like to only allow traffic both ways for established traffic (e.g. accessing the remote apps).
How can I achieve this without involving a third party firewall software?
Thanks

In our visitor center, we setup a computer with fake proxy server and add our website to the exception so that the visitors access our website only and no other website. If this RDS is for internal use only, you may disable default gateway. This link may
give you more options.
how to
restrict internet access
How to restrict Internet Access. You may have many options to disable a user or
computer to access the Internet. Some options can be adopted for many users
www.chicagotech.net/Internet/restrictie0.htm
Bob Lin, MVP, MCSE & CNE Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.howtonetworking.com

How can I manage access to dimension members in a layout?

Hello,
I have a dimension member list of materials (400) on a "material" dimension. But some people have access to one portion of the whole group and others may have access to other groups. But the materials can be shared between groups so I cannot group them in differents hierarchies.
The problem is in the layout you need to select a hierachy to show various rows (the whole group of materiales). The layout shows all the list of materials. Even if the user only have access to 10 of them. I don't know how is the best way for presenting this to the user? It should presents only the 10 rows corresponding to his materials.
One way that I found (but I don't find it acceptable because of the hard effort that represents the maintenance) is to create differents member access profiles and denied the access to each material (dimension member - 390) that the user cannot modified. Then in excel I have to run a macro that hides all the rows that have an empty description in the cell of the material name.
How can I achive this?
Is there a function in BPC to see if a user have access or not to a dimension member?
The only way to show in a layout various rows is to set in the view a hierarchy?
Thanks & Regards
SU

hi
pl. verify whether this will suit your requirements:
Material           UG1           UG2
MAT1               Y
MAT2                                 Y
MAT3               Y
MAT4                                 Y
MAT5               Y               Y
Now UG1,UG2 diff user groups and property in Material. Assignment of Y is one time job.
At the time of accessing the dimension members can restrict on the basis of UG1="Y" or UG2="Y" property
Here MAT5 is common in both UG1 and UG2
(Hardly may have 3-4 set of users: Accordingly can have UG1,UG2,UG3,UG4 etc.)
sri

How to configure Manage Access in Administration page?

I installed Adobe Reader Extension and is able to login into Administration page. Can any one teach me how to configure the Manage Acess - especially on LDAP Server portion?
I tried to put local server name in LDAP server then press Apply. Error pop-out:
Validation Error
You must correct the following error(s) before proceeding:
Internal Error : Error 2505: A problem occured while creating a controller -- Cause: com.adobe.server.AuthenticateException: The LDAP host cannot be contacted, please check your settings.
Can any one help me on this?
Thank you.
Wong

you should add
PlsqlNetServiceNameFormat=cn=asdb,cn=oraclecontext NetServiceNameFormat
in your dtds.conf
and you also need modify your ldap.ora fiile which stored in your portal/infra server directory. the directory maybe looks like .../ldap/admin/ldap.ora

How can I manage access to time capsule disc?

Hello,
I use Time Capsule disc to save my pictures and my Aperture Library.
The security of the shared disc is done with the peripherical pasword...
I have a problem and this is that Aperture trash do not have access to the volume disc so I cannot delete any file from Aperture because of an acess problem.
If I see the information of the disc (at the uper level) I can see that there is a forbiden access to "everyone" so I think that the problem is there. When I want to change the authorisations to everyone (to make possible to read&write) I get a message saying that I do not have the required autorisations...
Can anybody help me about this?

You need to login to the TC with main admin account.
Or reset the passwords.. do soft reset so you can change the permissions..
Security on the TC is more apparent than real.. press the reset and the files are unaffected but the permissions return to default.
Reset doco
http://support.apple.com/kb/ht3728

When I download itunes, it says that Ipod Service failed to start. I checked the services under task manager and when I try to start it, it says access denied. How to I get access and for the ipod service to start and run?

Please help. My ipod classic could not be recognised by itunes when I connect my ipod to PC. Previously it has been recognised before I updated. This was a while ago now and so I removed all apple files and re installed the latest itunes but am having the same problem.
When I download itunes, it says that Ipod Service failed to start. I checked the services under task manager and when I try to start it, it says access denied. How to I get access and for the ipod service to start and run?

Some anti-virus programs (e.g., McAfee) have this rule that can be invoked under the "maximum protection" settings: PREVENT PROGRAMS REGISTERING AS A SERVICE. If that rule is set to BLOCK, then any attempt to install or upgrade iTunes will fail with an "iPod service failed to start" message.
If you are getting this problem with iTunes, check to see if your anti-virus has this setting and unset it, at least for as long as the iTunes install requires. Exactly how to find the rule and turn it on and off will vary, depending upon your anti-malware software. However, if your anti-virus or anti-malware software produces a log of its activities, examining the log may help you find the problem.
For example, here's the log entry for McAfee:
9/23/2009 3:18:45 PM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\WINDOWS\system32\services.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\iPod Service Common Maximum Protection:Prevent programs registering as a service Action blocked : Create
Note that the log says "Common Maximum Protection: Prevent programs registering as a service". The "Common Maximum Protection" is the location of the rule, "Prevent programs registering as a service" is the rule. I used that information to track down the location in the McAfee VirusScan Console where I could turn the rule off.
After I made the change, iTunes installed without complaint.

How do I replace someone else's Mac ID with my own? Bought iPhone second hand. Previous owner re-set the phone but his ICloud account stayed on now my phone. He uses his macID on his new iPhone now?? Any ideas, as this issue is blocking my access to iTune

How do I replace someone else's Mac ID with my own?
Bought iPhone second hand on TradeMe.
Previous owner re-set the phone but his ICloud account stayed on now my phone. He uses his AppleID on his new iPhone now and, understandably, does not want to give me his password. Any ideas?? Please.
This issue is blocking my access to iTunes and any other file from my home computer. It keeps on telling me that I have to autorise my computer to pass on files, yet, it seems, for all this to happen, I need to get logged in through the phone's Apple ID. This of course is different to my one on my computer - and I have no password for it.
This phone is not stolen!! I payed still a fair bit for it. Am still in contact with the previous owner. He doesn't know how to fix the problem either.
Would appreciate any suggestion ????
Thanks
SamSings

Settings>general>resets>erase all content and settings.
That will put it back to its out of the box state. Set it up with your own apple Id.

User Management - How to submit Additional Access Request on behalf of employee

User Management - how can we configure "Access Requests" so that Managers can submit Additional Access Requests, or Initial Access Requests on behalf of employee?
Have looked at "Manage Proxies" but this seems to allow access to everything - not ideal
Please assist with knowledge and/or experience
Many Thanks
Me

Additional Access Request Registration Process is complete
Giving access to User Management to users is not an option.
What I would like is the scenario below - is this achievable?
When employee goes to iProcurement > Preferences > Access Requests > Request Access | they can submit an access request on behalf of themselves.
Would like an option where a manager, navigates to same UI as above, has option to choose a subordinate, and request additional access on their behalf
The table UMX_REG_REQUESTS has columns REQUESTED_FOR_USER_ID & REQUESTED_BY_USER_ID - so it seems they don't have to be same person (manager can submit request on behalf of an employee)
Can this be achieved through UI for "Access Requests"?

RDS 2012 R2 - How do I lockdown access to Local Computer Management and Windows Backup via Group Policy

Greetings all,
I am needing assistance in how to lockdown access to Local Computer Management and Windows Backup via Group Policy for users that access RDS service. I have followed this awesome guide - h t t p://w w w.it.ltsoy.com/windows/lock-down-remote-desktop-services-server-2012/
- but it is missing two important resources that I would like to lock down.Currently, I have successfully locked down Control Panel for users via Group Policy, but I cannot find any group policy or guide on how to restrict user access
to Computer Management (different to Server Manager). When using Win-X shortcut to open the 'Administrator's shortcuts' near the windows icon, I have locked down everything except Computer Management. Computer Management gives direct access to Disk Management,
Shares etc, which are locked down for users. But Windows Server Backup is still accessible. Can someone please guide me on how to restrict access to both Computer Management and Windows Server Backup.
Thanks in advance.
Terry.

Prevent running of Windows Server Backup
Computer Configuration\Policies\Windows Settings\Security Settings\File System
Right click on File System - Add File - Drill down to \System32\wbadmin.msc
On the Database Security ACL that pops up - Remove Creator Owner, Remove Users and check Adminstrators have Full Access.
On the Object window - choose Propagate inheritable permissions to all... (Default)

How to installl sun access manager in windows xp

Hi,
Can any one guide me how to install sun access managment in windows xp. I have downloaded access managment 7.x version i didnt find any installation shield nor exe file to install. More over i didnt find any document regarding installation for sun access managnement.
Can any one please suggest me the good document for installationa and configuring the sun access managment and realted pdf's.
regards
ravi

I found the directory with java.exe on my XP client. After updating my Path and then typing 'java -versions' I still see a 'java not found message'. No problem though - a README.TXT says that I have JRE 1.1.7B.
One final question - a co-worker who also has XP just starting seeing a pop-up window saying 'Runtime' error when running a Java applet. His java.exe is in a path that includes the sub-directory 'JRE' On my XP client, java.exe is in a path which includes a 'JRE11' sub-directory. We therefore seem to have different versions of the JRE. Since I don't see the Runtime error when running the same applet, should my co-worker try upgrading his JRE?
Thank you.

My access was blocked because i left my pc on at home and now i cannot access anymore with thunderbird only via browser how can i restore access??

I cannot access anymore via thunderbird while with the same pw i can access via browser after my account was blocked how can i restore access via email program?

I was on my gmail account and looked at settings forward and pop/imap
be sure they are activated.
Imap if you want to access it from several places. That way you have the original on Gmail-server and copies on your pc.
Pop on the other hand loads down the emails. perfect if its just one pc.
(i'm not sure the Gmail-server deletes them thou).

I linux inode which contains 13 member array wich stores the actual block address of data .Similarly in windows how data is managed in disk ?. How many members in this array ?

I linux inode which contains 13 member array wich stores the actual block address of data .Similarly in windows how data is managed in disk ?. How many members in this array ?

Hello Vijay Nerkar,
Your question is not related to Windows Forms General. What is the data you mean and also what is that array?
If you are looking for something related to Windows File System, see some words here:
http://en.wikipedia.org/wiki/File_system
For example
"Windows makes use of the
FAT, NTFS,
exFAT and ReFS file systems (the last of these is only supported and usable in
Windows Server 2012; Windows cannot boot from it).
Windows uses a drive letter abstraction at the user level to distinguish one disk or partition from another. For example, the
path <tt>C:\WINDOWS</tt> represents a directory <tt>WINDOWS</tt> on the partition represented by the letter C. Drive C: is most commonly used for the primary hard disk partition, on which Windows is usually installed and from which it boots. This "tradition"
has become so firmly ingrained that bugs exist in many applications which make assumptions that the drive that the operating system is installed on is C. The use of drive letters, and the tradition of using "C" as the drive letter for the primary hard disk
partition, can be traced to
MS-DOS, where the letters A and B were reserved for up to two floppy disk drives. This in turn derived from
CP/M in the 1970s, and ultimately from IBM's
CP/CMS of 1967.
For more details, consider consult on MS Answers:
http://answers.microsoft.com/en-us/windows
Regards,
Barry Wang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How do you authorize access to itunes while blocking the access of the rest of the computer?

How do you authorize access to itunes while blocking the access of the rest of the computer? I want to do a party and let people have access to the music but I don't want them to look in my files. I have windows 7.
I cannot log off and let the music play. Ideally I would want to have a password for access to the rest of the computer.
Thank you!

The following may help with the file sharing issues: OS X Mavericks: Share your files

I am running windows xp home edition on my netbook. I have Kaspersky virus protection. Your new 6.0 blocks my access to Kaspersky. How do I get the older level that works with it?

It blocked the access to Kaspersky and corrupted my Kaspersky database. I had to reload. Not much of a good "upgrade" experience

See Kaspersky for a Firefox 6 compatibility update.

How Solaris Volume Manager sync submirrors

HI Gurus,
I have a question on how Solaris volume manager (SVM) does re-synchronization (in raid 1). In another word, in case of one submirror was modified during boot process, how SVM detects it and how SVM validate which sumirror is gold.
One scenario I ran into: We had a software installed, this software updated /etc/name_to_sysnum which conflicts with new Solaris 10 release. So the system could not boot any more (not even to single user mode) after software installed. This box had root disk mirrored. To fix this, we boot from CDROM and mounted 1st mirror drive root partition (c0t0d0s0) and remove the bad entry in /etc/system (we did not break the mirror to make the changes). Then the box was able to boot up. After server was up, it was found /etc/system was rolled back with bad entries. Apparently it was synced back from 2nd mirror. So now the question is how SVM decides which submirror is invalid and should be re-sync from good submirror?
2nd scenario I saw: someone accidently added one root file system submirror into zone as a file system. But during zone installation, system got panic and rebooted. During reboot, system kept crashing. We managed to boot from network, break the mirror (update /etc/vfstab and /etc/system) and finally was able to boot the system. So in case one submirror was accidently accessed, how does SVM protect data and will the corrupted data written to disk slice synced to good submirror?
Please share your thoughts and point me with some good references. I could not find related info in SVM doc.
Thanks,
Wei

SVM doesnt "sync" disks ie copy data from one disk to another except in the case when your first setting up a mirror. Or your replacing a disk etc.
Those are circumstances when it realises the disks are out of sync.
Once it has a mirrored pair, it will keep them in sync since all writes will go to both sides.
And reads take alternate blocks from both disks.
So if the the two sides of a mirror have gotten out of sync, you will see strange results as half your content will come from one and half your content will come from the other. Even inside a single file, assuming the file is bigger than the stripe size.
So anything writing to one side of the mirror outside of SVM's control will corrupt things. And SVM has no mechanisms for detecting this and "fixing" things up.
So its vital to break the mirror if your going to be writing to the disk outside of SVM control.
If your brave and the amount of changes is small, you can try to edit both sides of the mirror.
But you have to remember that SVM works at the block level, not the filesystem level.
So if you do anything to make the two sides even minorly different. Even something as miror as update 2 files in a different order.
Then the layout of blocks on the disks in the 2 halves could be different. And your're screwed.
So don't do it on any system you care about. Its really easy to make a mistake and the consequences are usually catastrophic.
When in doubt break the mirrors. Its the only safe way.

SG300 - How to block managment access

Similar Messages

Maybe you are looking for