Table 4-9. Network Security Page Settings

Settings

Description

 

 

IP Range Enabled

Enables the IP Range checking feature, which defines a range of

 

IP addresses that can access the iDRAC. The default is off.

 

 

IP Range Address

Determines the acceptable IP address bit pattern, depending

 

on the 1's in the subnet mask. This value is bitwise AND’d with

 

the IP Range Subnet Mask to determine the upper portion of

 

the allowed IP address. Any IP address that contains this bit

 

pattern in its upper bits is allowed to establish an iDRAC6

 

session. Logins from IP addresses that are outside this range

 

will fail. The default values in each property allow an address

 

range from 192.168.1.0 to 192.168.1.255 to establish an

 

iDRAC6 session.

 

 

IP Range Subnet

Defines the significant bit positions in the IP address.

Mask

The subnet mask should be in the form of a netmask, where the

 

more significant bits are all 1's with a single transition to all

 

zeros in the lower-order bits. The default is 255.255.255.0.

 

 

IP Blocking

Enables the IP address blocking feature, which limits the

Enabled

number of failed login attempts from a specific IP address for a

 

preselected time span. The default is off.

 

 

IP Blocking Fail

Sets the number of login failures attempted from an IP address

Count

before the login attempts are rejected from that address.

 

The default is 10.

 

 

IP Blocking Fail

Determines the time span in seconds within which IP Block

Window

Fail Count failures must occur to trigger the IP Block Penalty

 

Time. The default is 3600.

IP Blocking Penalty The time span in seconds that login attempts from an IP address

Time

with excessive failures are rejected. The default is 3600.

 

 

56

Configuring the iDRAC6 Using the Web Interface

Page 56
Image 56
Dell IDRAC6 manual Network Security Page Settings Description