Setting IP access control

The golden rule with this feature is ‘Include before you exclude’ or to put it another way ‘Arrange allowed addresses in the list before the denied addresses’.

This is because the positions of entries in the list are vitally important. Once a range of addresses is denied access, it is not possible to make exceptions for particular addresses within that range. For instance, if the range of addresses from A to F are denied access first, then the address C could not be granted access lower down the list. Address C needs to be placed in the list before the denied range.

IMPORTANT: This feature should be configured with extreme caution as it is possible to deny access to everyone. If such an error occurs, see Clear IP access control for details about how to regain access.

In the list, access control addresses prefixed by ‘+’ are allow entries while those prefixed by ‘– ‘ are deny entries.

To get here

1Using VNC viewer or a browser, log on as the ‘admin’ user.

2Click the ‘Configure’ button in the top right corner.

3Click the ‘Network Configuration’ option.

To define a new IP access control entry

1 Click the Add button to display a popup dialog:

Network/Address	Mask	Access
Enter the network address	Enter an IP network mask	Use the arrow buttons to
that is to be allowed or denied	that indicates the range of	select either ‘Allow’ or
access. If a range of addresses	addresses that are to be	‘Deny’ as appropriate.
is being specified then specify	allowed or denied access.
any one of the addresses	For instance, if only a single
within the range and use the	specified IP address were to be
Mask entry to indicate the size	required, the mask entry would
of the range.	be 255.255.255.255 in order
	to specify a single location. See
	Calculating the mask for IP
	access control for details.

2Enter the base network address, the mask and select the appropriate access setting.

3Click the OK button.

To reorder access control entries

IMPORTANT: When reordering, ensure that any specific allowed addresses are listed higher in the list than any denied addresses. Take care not to invoke any deny access settings that would exclude valid users.

1In the access control list, click on the entry to be moved.

2Click the Up or Down buttons as appropriate.

To edit/remove access control entries

1In the access control list, click on the appropriate entry.

2Click either the Edit or Remove button as appropriate.

   

