ACL over Virtual Terminal
When a Telnet or SSH connection is established, OcNOS identifies and associates it with a Virtual Terminal Lne (VTY). The ACL over VTY feature provides enhanced security for VTY-associated management functions.
Applying a standard ACL rule on a VTY line permits or denies only management access protocols such as SSH, Telnet, and SSH-Netconf.
OcNOS supports both IPv4 and IPv6 access lists for VTY lines, providing flexibility for network configurations. In addition, extended ACLs are also supported, but its function varies depending on the configured rules.
Note: The use of “out” filters for standard ACLs on VTY lines is not supported.
Last modified date: 10/19/2023