1. Use the "permit ip-source ipaddress" command to permit only the ip address of your management station.
2. Remove the IP address from VLAN 1 and bind it to interface 1/e24. This will basically make the port act as an out-of-band port. Only a client connected to the port will be able to manage the switch. However, the client will no longer participate on the network.

Hi Greg

the ACL management impact in other standard communications, for example ping, dns. http and https and etc?

Hello,

You can refer to the N series configuration guide and search for “management ACL” to see an example of a management ACL.

https://dell.to/4aCZrW0

For example on page 733, you may need to permit certain services that you need.

console(config)#management access-list mlist

……

console(config-ip-acl)#permit service any

                     console(config-ip-acl)#exit

iam refering on switch 6248

i have to permit management of the switch only (for exemple) for two subnets only and not stop others comunications

what iam testing is (config):

management access-list mlist
permit ip-source 10.10.1.1 mask 255.255.255.0 priority 1

permit ip-source 10.10.2.1 mask 255.255.255.0 priority 2

and now, what  iam understanding is i need to config this line:

permit service any

so basicaly i have to management ip address of the switches in subnet 10.10.1.1 and 10.10.2.1

thnks for the advices

Hello,

This may be able to assist you:

Management ACL Commands

Page 1137-1144

https://dell.to/3PTOfL6

Thanks a lot for the tips

Just a quick question this configuration only applies to management traffic of only the switch when this configuration in enabled.

So other types off traffic (https, http, and etc) of the machines conected to him for website or others devices is not affected?

Hello,

Yes, you're correct. The configuration of a management ACL (Access Control List) on your switch, such as the Dell 6248, is designed to control access to the management interface of the switch itself. This means it will only affect traffic that is intended to manage the switch, like SSH, Telnet, SNMP, etc.

Other types of traffic, such as HTTP, HTTPS, DNS, and ping, that are used by devices connected to the switch for general network communication, will not be affected by the management ACL. These types of traffic will continue to flow normally unless you have other ACLs or firewall rules in place that specifically restrict them.

thanks