6200(config)# snmp-server vrf default
6200(config)# snmp-server vrf mgmt
6200(config)# snmp-server system-contact netadmin@hcmus.edu.vn
6200(config)# snmp-server system-description Aruba-6200-NDH
6200(config)# snmp-server system-location Aruba-6200-NDH
6200(config)# snmp-server community CSLT@hcmus
6200(config-community)# access-level ro
deny-local-routing
no…
This command disables routing traffic between two clients of an IAP on different VLANs. Routing traffic between the clients will be sent to the upstream device to make the forwarding decision.
Use this command to prevent the local routing of traffic if you have security and traffic management policies defined for upstream devices.
The following command disables local routing:
(Instant Access Point)(config)# deny-local-routing
(Instant Access Point)(config)# end
(Instant Access Point)# commit apply
https://www.arubanetworks.com/techdocs/Instant_40_Mobile/Advanced/Content/CLI_commands/deny-local-routing.htm
Restricting access to an Aruba switch GUI and CMD via VLAN router IP
Exam:
- Allow all 10.29.3.0/24 , 10.29.4.0/24, 10.29.5.0/24
- Allow all icmp
- Deny all
access-list ip quantriswitch
20 permit any 10.29.5.0/255.255.255.0 any
21 permit any 10.29.4.0/255.255.255.0 any
22 permit tcp 10.29.3.0/255.255.255.0 any
23 permit icmp any any
90 deny any any any
apply access-list ip quantriswitch control-plane vrf default
https://community.arubanetworks.com/discussion/cx6000-restricting-access-to-management-ip-of-switch