Adder Technology 5000 manual Setting IP access control, To define a new IP access control entry

Page 67

Setting IP access control

The golden rule with this feature is ‘Include before you exclude’ or to put it another way ‘Arrange allowed addresses in the list before the denied addresses’.

This is because the positions of entries in the list are vitally important. Once a range of addresses is denied access, it is not possible to make exceptions for particular addresses within that range. For instance, if the range of addresses from A to F are denied access first, then the address C could not be granted access lower down the list. Address C needs to be placed in the list before the denied range.

IMPORTANT: This feature should be configured with extreme caution as it is possible to deny access to everyone. If such an error occurs, see Clearing IP access control for details about how to regain access.

In the list, access control addresses prefixed by ‘+’ are allow entries while those prefixed by ‘– ‘ are deny entries.

To get here

1Using VNC viewer or a browser, log on as the ‘admin’ user.

2Click the ‘Configure’ button in the top right corner.

3Click the ‘Network Configuration’ option.

To define a new IP access control entry

1 Click the Add button to display a popup dialog:

Network/Address

Mask

Access

Enter the network address

Enter an IP network mask

Use the arrow buttons to

that is to be allowed or denied

that indicates the range of

select either ‘Allow’ or

access. If a range of addresses

addresses that are to be

‘Deny’ as appropriate.

is being specified then specify

allowed or denied access.

 

any one of the addresses

For instance, if only a single

 

within the range and use the

specified IP address were to be

 

Mask entry to indicate the size

required, the mask entry would

 

of the range.

be 255.255.255.255 in order

 

 

to specify a single location. See

 

 

Calculating the mask for IP

 

 

access control for details.

 

2Enter the base network address, the mask and select the appropriate access setting.

3Click the OK button.

To reorder access control entries

IMPORTANT: When reordering, ensure that any specific allowed addresses are listed higher in the list than any denied addresses. Take care not to invoke any deny access settings that would exclude valid users.

1In the access control list, click on the entry to be moved.

2Click the Up or Down buttons as appropriate.

To edit/remove access control entries

1In the access control list, click on the appropriate entry.

2Click either the Edit or Remove button as appropriate.

   



66

Image 67
Contents AdderView CATxIP Contents Further information Index Many computers CAM formatsCascade installations Creating larger installationsEnterprise installations AdderView CATxIP 5000 features front and rear What you may additionally need What’s in the box  Single unit rack brackets MountingDouble unit rack brackets    ConnectionsFrom video monitor From USB keyboard and mouse Local userTo connect the local user port AdderView CATxIP Rear panelTo connect the IP network port for global users Global users IP network portAdderView CATxIP Front panel To connect a computer system Computer system via CAMTo connect the power supply Power in connectionOutput lead from Power adapter To connect and address the switch boxes Power control portSwitch Multiple video head connections Host computer port/channel Remote switching controlCable from serial Control device Overall initial configuration ConfigurationInitial configuration Security Main menuMenu layout HotkeysRegistering users and host computers General security and configuration stepsTo enable general security To set an Admin passwordTo clear a password and restore factory default settings What to do if the Admin password has been forgottenWhat is IP access control? Clearing IP access controlTo clear IP access control To configure the unit from a global user location Full configuration by global userAdderView CATxIP 5000 encryption settings Encryption settingsViewer encryption settings Positioning AdderView CATxIP 5000 in the network Networking issuesFirewall/router address Port settingsPlacing AdderView CATxIP 5000 behind a router or firewall AddressingDNS addressing To discover a DHCP-allocated IP addressEnsuring sufficient security Placing AdderView CATxIP 5000 alongside the firewallPorts To control two or more ports simultaneously Power switching configurationPower control sequences To configure the power sequences for each host computerUpgrading AdderView CATxIP 5000 models Recovering from a failed upgradeTo upgrade AdderView CATxIP 5000 models To invoke backup/recovery modeFront panel indicators Accessing the AdderView CATxIPSelecting a computer Local user accessSelect Host menu here you can select computers by name To select a computer using the Select Host menuWhen choosing Standard hotkeysLogging in and out Show All UsersConfirmation status box To enable/disable the confirmation boxUser preferences and functions Orange dot indicators in the Select Host menu What will I see when I first login? Global user accessHow do multiple users coexist? Options button Global user access via VNC viewerTo access via the VNC viewer To download the VNC viewerTo access via your web browser Global user access via web browserWhen using the viewer window Using the viewer windowMenu bar To select a host ConfigureMouse pointers Host selectionRe-synchronise mouse Access mode shared/privatePower switching Auto calibrateControls Keyboard Control Enable Sun TranslationWhen entering codes Video SettingsScreen contains only host system information Using automatic configurationsIncreased by 50% when a slow link is detected Setting the Threshold manuallyReduced Blanking Advanced Video SettingsShow All Users Custom Video ModesVNC hotkey selection If you need to enter a port number Viewer encryption settingsSupported web browsers US +1 888 275 TroubleshootingWhen logging on using VNC viewer, I cannot enter a username Getting assistanceTo access the local setup menus Appendix 1 Local setup menusFunctions Power ControlRestore Standard Mouse Restore IntellimouseScreen Saver Settings Blank, Moving LogoSettings Disabled, Enabled User PreferencesOSD Dwell Time Mouse SwitchingUser Timeout Global PreferencesLogon Security Setup OptionsAuto Logout IP address, net mask, VNC port, etc ConfigurationIP admin password, encryption settings, etc Completely resets the AdderView CATxIP 5000 unitUnit Configuration Network Configuration Options Port Serial ConfigurationSettings Power Control, Sync Units Settings 1200, 2400, 4800, 9600, 19200, 38400, 57600To reset the AdderView CATxIP 5000 configuration Reset ConfigurationTo access the remote configuration pages Appendix 2 Configuration pages via viewerMain configuration Logged on users User accounts Unit configuration Advanced unit configuration Time & date configuration IP Gateway Network configurationIP Access Control IP Network MaskTo edit/remove access control entries Setting IP access controlTo define a new IP access control entry To reorder access control entriesOptions Port Use Serial port configurationBaud Rate Sort Host configurationErase Host Configuration Add entry for unrecognised hostFor further details To get here Logging and statusTo copy and paste the log Syslog Server IP AddressLdap configuration Preferred encoding Appendix 3 VNC viewer connection optionsColour/Encoding Auto selectCustomise Enable all inputsDisable all inputs view-only mode InputsMisc Custom Size ScalingNo Scaling Scale to Window SizeLoad / Save Defaults ReloadDefaults Save IdentitiesAppendix 4 VNC viewer window options Encoding and colour level Appendix 5 Browser viewer optionsSecurity IP addresses Appendix 6 Addresses, masks and portsNet masks Binary octet after Net masks the binary explanationOperation with net mask Binary equivalentAddress ranges Calculating the mask for IP access controlSingle locations All locationsPorts Security issues with portsSee also Appendix 7 Cascading multiple unitsCascade tree Tips for successful cascading Connecting units in cascadeTo connect units in cascade Addressing computers in a cascade Using cascaded computersMulti-head synchronisation cable Appendix 8 Cable and connector specificationsAdderView CATxIP 5000 to power switch cable Power switch to power switch daisy chain cablePermissible key presses Appendix 9 Hotkey sequence codesCreating macro sequences Appendix 10 Supported video modes Safety information WarrantyGeneral Public License Linux End user licence agreement Canadian Department of Communications RFI statement Radio Frequency EnergyEuropean EMC directive 89/336/EEC FCC Compliance Statement United StatesHoe Huat Industrial Building Index Options port Upgrade failure Connection Baud rate