LEGRAND Raritan SRC-0100, User Manual

Page: 472 / 698

Chapter 8: Using the Command Line Interface
460
Option Description
false Disables the role-based access control feature.

<policy> is one of the options: allow or deny.
Policy Description
allow Accepts traffic from all IP addresses regardless
of the user's role.
deny Drops traffic from all IP addresses regardless of
the user's role.
Tip: You can combine both commands to modify all role-based access
control parameters at a time. See
Multi-Command Syntax (on page
517).
Managing Role-Based Access Control Rules
You can add, delete or modify role-based access control rules.

An IPv4 role-based access control command for managing rules
begins with
security roleBasedAccessControl ipv4 rule.

An IPv6 role-based access control command for managing rules
begins with
security roleBasedAccessControl ipv6 rule.
Adding a Role-Based Access Control Rule
Depending on where you want to add a new rule in the list, the command
syntax for adding a rule varies.

IPv4 commands
Add a new rule to the bottom of the IPv4 rules list:
config:# security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy>
Add a new IPv4 rule by inserting it above or below a specific rule:
config:# security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role>
<policy> <insert> <rule_number>

IPv6 commands
Add a new rule to the bottom of the IPv6 rules list: