TeleBoss 850 2.06.280_STD User Manual
Page 92
IP Address Restrictions
IP Address Restrictions is the primary defense against unauthorized access via a network or PPP connection. An
administrator can restrict access by configuring one or more IP addresses that will be the only ones allowed to access
the unit. Restrictions can also be configured to allow or deny access to larger groups of IP addresses using .0 and
.255 wildcards. IP Address Restrictions do not replace or override any restrictions set by User Profiles, but they do
provide an extra level of protection by causing the unit to ignore all network traffic except from the addresses allowed.
IP Address Restrictions are configured from the Setup/Network Settings/IP Address Restrictions menu in all network-
enabled Asentria products. When selected, you will see a submenu similar to the following. Selecting option A) Add
Item to Table, presents a list of the different kinds of restrictions you can configure.
TeleBoss 850 - IP Address Restrictions
No IP Restrictions Established
A) Add Item to Table
Enter your Selection: a
Enter IP addresses that are allowed access:
0.0.0.0 allows all IP addresses
255.255.255.255 restricts all IP addresses
XXX.XXX.XXX.0 allows all IP addresses in a subnet
XXX.XXX.XXX.255 restricts all IP addresses in subnet
New IP Restriction:
From the “New IP Restriction” prompt you can enter up to eight IP addresses that will be allowed access to the unit.
The list is exclusive by default, so if you define a single IP address, that one is allowed access while all others are
denied.
Wildcards are also available to allow or deny access to larger groups of IP addresses. 0 and 255 serve as wildcards
for access and no-access, respectively. For example, an IP restriction of 0.0.0.0 would allow all access to the unit
where 255.255.255.255 would allow none. More practically, 192.168.55.0 would only allow traffic from IP addresses
beginning with 192.168.55.
Keep in mind that certain outbound network functions in the unit, such as FTP push, Email alerts, and pings, require a
response from the receiving device. These devices should not be restricted so the function can be completed
successfully.
The Asentria unit evaluates the list of IP restrictions from top to bottom. When it finds an entry that specifically allows
or disallows access, it uses that entry and stops looking. For example, examine the following list:
TeleBoss 850 - IP Address Restrictions
1. 192.168.100.20
2. 192.168.100.1
3. 0.0.0.0
4. 192.168.99.255
A) Add Item to Table
B) Delete an Item from Table
C) Delete All Items from Table
A computer with a 192.168.99 IP would be granted access to the unit despite #4 because #3 is processed first. #3
allows everyone access. If you wanted to allow everyone access except computers on subnet 192.168.99 you should
switch number 3 and 4.
Note:
IP restrictions do not replace or override password protection; they simply provide an extra means of security
by causing the unit to ignore all traffic from disallowed IP addresses.
If no IP restrictions are defined in this menu, all incoming connections are allowed.
Содержание Teleboss 850
Страница 6: ......
