Setting IP access control
The golden rule with this feature is ‘Include before you exclude’ or to put it another way ‘Arrange allowed addresses in the list before the denied addresses’.
This is because the positions of entries in the list are vitally important. Once a range of addresses is denied access, it is not possible to make exceptions for particular addresses within that range. For instance, if the range of addresses from A to F are denied access first, then the address C could not be granted access lower down the list. Address C needs to be placed in the list before the denied range.
IMPORTANT: This feature should be configured with extreme caution as it is possible to deny access to everyone. If such an error occurs, see Clear IP access control for details about how to regain access.
In the list, access control addresses prefixed by ‘+’ are allow entries while those prefixed by ‘– ‘ are deny entries.
To get here
1Using VNC viewer or a browser, log on as the ‘admin’ user.
2 Click the ‘Configure’ button in the top right corner. 3 Click the ‘Network configuration’ option.
To define a new IP access control entry
1 Click the Add button to display a popup dialog:
Network/Address | Mask | Access |
Enter the network address | Enter an IP network mask | Use the arrow buttons to |
that is to be allowed or denied | that indicates the range of | select either ‘Allow’ or |
access. If a range of addresses | addresses that are to be | ‘Deny’ as appropriate. |
is being specified then specify | allowed or denied access. |
|
any one of the addresses | For instance, if only a single |
|
within the range and use the | specified IP address were to be |
|
Mask entry to indicate the size | required, the mask entry would |
|
of the range. | be 255.255.255.255 in order |
|
| to specify a single location. See |
|
| Calculating the mask for IP |
|
| access control for details. |
|
2Enter the base network address, the mask and select the appropriate access setting.
3 Click the OK button.
To reorder access control entries
IMPORTANT: When reordering, ensure that any specific allowed addresses are listed higher in the list than any denied addresses. Take care not to invoke any deny access settings that would exclude valid users.
1In the access control list, click on the entry to be moved.
2 Click the Up or Down buttons as appropriate.
To edit/remove access control entries
1In the access control list, click on the appropriate entry.
2 Click either the Edit or Remove button as appropriate.
49
