MNS-BB
Software User Guide
-34-
7.5.1
Configuring One Station Per Authorized Manager IP Entry
This is the easiest way to apply a mask. If you have ten or fewer management and/or operator
stations, you can configure them quickly by simply adding the address of each to the Authorized
Manager IP list with
255.255.255.255
for the corresponding mask. For example, if you configure an
IP address of
10.28.227.125
with an IP mask of 2
55.255.255.255
, only a station having an IP address
of
10.28.227.125
has management access to the switch.
1
st
Octet 2
nd
Octet 3
rd
Octet 4
th
Octet
Device Access
IP Mask
Authorized
Manager
IP
255 255 255 255
10 28 227 125
The “255” in each octet of the mask specifies
that only the exact value in that octet of the
corresponding IP address is allowed. This mask
allows management access only to a station
having an IP address of 10.28.227.125.
Table: Analysis of IP Mask for Single-Station Entries
7.5.2
Configuring Multiple Stations Per Authorized Manager IP
The mask determines whether the IP address of a station on the network meets the criteria you
specify. That is, for a given Authorized Manager entry, the switch applies the IP mask to the IP
address you specify to determine a range of authorized IP addresses for management access. As
described above, that range can be as small as one IP address (if
255
is set for all octets in the mask),
or can include multiple IP addresses (if one or more octets in the mask are set to less than
255
).
If a bit in an octet of the mask is “on” (set to 1), then the corresponding bit in the IP address of a
potentially authorized station must match the same bit in the IP address you entered in the Authorized
Manager IP list. Conversely, if a bit in an octet of the mask is “off” (set to 0), then the corresponding
bit in the IP address of a potentially authorized station on the network does not have to match its
counterpart in the IP address you entered in the Authorized Manager IP list. Thus, in the example
shown above, a “255” in an IP Mask octet (
all
bits in the octet are “on”) means only one value is
allowed for that octet—the value you specify in the corresponding octet of the Authorized Manager
IP list. A “0” (all bits in the octet are “off”) means that any value from 0 to 255 is allowed in the
corresponding octet in the IP address of an authorized station. You can also specify a series of values
that are a subset of the 0-255 range by using a value that is greater than 0, but less than 255.
1
st
Octet 2
nd
Octet 3
rd
Octet 4
th
Octet
Device Access
IP Mask
Authorized
Manager
IP
255 255 0 255
10 33 248 1
This combination specifies an authorized IP
address of 10.33.
xxx
.1. It could be applied, for
example, to a sub netted network where each
subnet is defined by the third octet and includes
a management station defined by the value of
“1” in the fourth octet of the station’s IP
address.
IP Mask
Authorized
Manager
IP
255 238 0 255
10 247 100 195
Allows 230, 231, 246, and 247 in the 2nd octet,
and 194, 195, 198, 199 in the 4th octet.
Table: Analysis of IP Mask for Multiple-Station Entries
NOTE
: User can set maximum 25 rules (Allow/Deny). 26
th
rule will overwrite the first rule.
