Orion 2000 manual Web-access, CMaccess-list 41 permit 00d0.5921.3354 ffff.ffff.ffff

Web-access

¾web-access cpe {enabledisable} Enabledisable the CM web access via CPE interface

¾web-access cable {enabledisable} Enabledisable the CM web access via Cable interface

Access-list

¾access-list{1~2021~4041~60} {denypermit} {anysource IPmac address} [wildcard bit] The standard access list performs packet filtering based on source IP address from the CPE host(s).

The management access list performs packet filtering based on destination IP address matching the Cable Router IP address. The standard MAC access list performs frame filtering based on source MAC address from the CPE host(s). Basically, the access list works as a source address packet filter, if the access list is empty, the cable router will forward any packet, if access list is not empty, packet filtering will be enforced according to the access list(s).

1~20, access list ID, for standard IP access list 21~40, access list ID, for management access list 41~60, access list ID, for standard MAC access list

Example:

1)Set the access list to permit source IP 192.168.100.xxx to access network. CM>access-list 1 permit 192.168.100.1 0.0.0.255

Note: 0.0.0.255 means 192.168.100.1~192.168.100.255

2)Set the access list to permit source IP 192.168.100.10 to access cable router (telnet, web-page, snmp) CM>access-list 21 permit 192.168.100.10 0.0.0.0

Note: No network packet will be filtered

3)Set the access list to permit source MAC 00D0.5921.3354 to access network

CM>access-list 41 permit 00d0.5921.3354 ffff.ffff.ffff

Note: The cable router only forward packet with this source MAC, all other packet will be discarded.
User’ Guide	54