IP Filtering
39
Model 2285 Getting Started Guide
3 • Network configuration
Option and IP address/mask
Input field to describe a specific range of host on the network. The user may allow a host or a group of hosts to
access the Model 2285. The user must then enter the IP address and subnet of access. Any user on a remote
host must stay in the specified subnet boundary to access the Model 2285. To allow only a specific host to
access the Model 2285, enter the IP address of the specific host and just give 255.255.255.255 for the subnet
with Normal option. To allow any hosts to have access to the Model 2285, give 0.0.0.0 for both of the IP
address and subnet with Normal option also. Refer to
table 4
for more details.
Service
Service to which will be applied to the IP filtering rule. User can select one of Telnet, SSH, HTTP, HTTPS or
each serial port
Chain rule
Set the basic rule for the host to access the Model 2285 as one of Accept or Drop.
Figure 14. IP filtering configuration for each service and serial port
The Model 2285 also provides users with simple configuration way to block a specific service(s) or serial ports
from all hosts. If the user should set any service option as “Drop all” (see
table 14
), then all access to the service
from the network will be blocked.
Table 4. Input examples of Option and IP address/mask combination
Allowable Hosts
Input format
Option
IP address/mask
Any host
0.0.0.0/0.0.0.0
Normal
192.168.1.120
192.168.1.120/255.255.255.255
Normal
Any host except 192.168.1.120
192.168.1.120/255.255.255.255
Invert
192.168.1.1 ~ 192.168.1.254
192.168.1.0/255.255.255.0
Normal
192.168.0.1 ~ 192.168.255.254
192.168.0.0/255.255.0.0
Normal
192.168.1.1 ~ 192.168.1.126
192.168.1.0/255.255.255.128
Normal
192.168.1.129 ~ 192.168.1.254
192.168.1.128/255.255.255.128
Normal
None
0.0.0.0/0.0.0.0
Invert