Restricting MTA access with multiple IP addresses using the CLI

Prev Next

Use the CLI commands in this topic to configure the MTA access restriction with multiple IP addresses.

To configure the MTA access restriction with multiple IP addresses:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify up to ten IP addresses for the MTA access restriction.

    The following example command restricts all MTA hosts except the specified three IPv4 addresses in Drop analysis mode:

    hostname (config) # email-analysis mta mynetworks 192.168.5.5 192.168.65.4 172.16.244.10

    MODE is drop

    The following example command restricts all MTA hosts except the specified two IPv4 addresses and one IPv6 address in Drop analysis mode:

    hostname (config) # email-analysis mta mynetworks 192.168.5.5 192.168.65.4 2001:470:84a7:3066::aa0

    MODE is drop

    IPv6 enabled

    The following example command restricts all MTA hosts except one IPv4 address and mask with one IPv6 address and mask in Drop analysis mode:

    hostname (config) # email-analysis mta mynetworks 192.168.0.0/16 2001:470:84a7:3066::/64

    MODE is drop

    IPv6 enabled

  3. Verify your changes.

    hostname (config) # show email-analysis mta mynetworks

    Note

    The internal loopback address is not displayed in the show email-analysis mta mynetworks command output. Only values that you entered are displayed.

  4. Save your changes.

    hostname (config) # write memory

Examples

This example shows that all MTA hosts are restricted except the specified three IPv4 addresses.

hostname (config) # show email-analysis mta mynetworks

192.168.5.5 192.168.65.4 172.16.244.10

This example shows that all MTA hosts are restricted except the specified two IPv4 addresses and one IPv6 address.

hostname (config) # show email-analysis mta mynetworks

192.168.5.5 192.168.65.4 [2001:470:84a7:3066::aa0]

This example shows all MTA hosts are restricted except one IPv4 address and mask with one IPv6 address and mask .

hostname (config) # show email-analysis mta mynetworks

192.168.0.0/16 [2001:470:84a7:3066::/64]