Daxten LARA, Manual, Page: 69 / 89

5.5. ADMINISTRATION 57
Table 5.18.: IP access control parameters
Parameter Description
Enable IP Access Con-
trol Enables access control based on IP source addresses.
Default policy This option controls what to do with arriving IP packets that
don’t match any of the configured rules. They can be accepted
or dropped.
ATTENTION:
If you set this to DROP and you have no ACCEPT rules config-
ured, access to the Web front-end over LAN is actually disabled!
To enable access again you can change the security settings via
modem or ISDN dial in or by temporarily disabling IP access
control with the initial configuration procedure (see Section
4.1
on page 15 ).
Rule Number This should contain the number of a rule for which the follow-
ing commands will apply. This field will be ignored, in case of
appending a new rule.
IP/Mask Specifies the IP address or IP address range for which the rule
applies.
Examples (the number concatenated to an IP address with a
‘/’ is the number of valid bits that will be used of the given IP
address):
192.168.1.22
or 192.168.1.22/32 matches the IP Address
192.168.1.22
192.168.1.0/24 matches all IP packets with source addresses from
192.168.1.0 to 192.168.1.255
0.0.0.0/0 matches any IP packet
Policy The policy determines what to do with matching packets. They
can be accepted or dropped.
NOTE: The order of the rules is important. The rules are checked
in ascending order until a rule matches. All the rules below the
matching one will be ignored. The default policy applies if no
match has been found.
Appending a rule Enter the IP/Mask and set the policy. Finally, press ‘Append’.
Inserting a rule Enter the rule number, the IP/Mask and set the policy. Finally,
press ‘Insert’.
Replacing a rule Enter the rule number, the IP/Mask and set the policy. Finally,
press ‘Replace’.
Continued on next page