System Settings
Whitelisting Client IP Addresses
As described above, a whitelist is a list of IP addresses or categories that will be allowed to pass,
regardless of whether they are identified as potentially malicious in the IRDB database. The
command format used to "block" addresses is similar to the format used to "pass" addresses
(explained above). The
pass
command permits inbound IP addresses found in the IRDB database
to access clusters defined on the ADC.
You can whitelist a single IP or a list of IPs. The list is comma separated. In the example below a
list of IP addresses is shown:
eqcli >
reputation whitelist 172.16.1.170,172.16.1.175,172.16.3.245
Verify your entry by entering:
eqcli >
show reputation whitelist
Allowed IP Name
Start IP Address
End IP Address
Allowed Direction
172.16.1.170
172.16.1.170
172.16.1.170
inbound
172.16.1.175
172.16.1.175
172.16.1.175
inbound
172.16.3.245
172.16.3.245
172.16.3.245
inbound
eqcli >
You could also enter a range of IP addresses to pass .If, for example, you enter
10.0.0.5 -
10.0.0.11
, all of the addresses from 10.0.0.5 to 10.0.0.11 will be passed. The following format is
used:
eqcli >
reputation pass
start IP
-
end IP
You can enter a range of ip addresses using CIDR notation. For example, you could enter the
following:
eqcli >
reputation pass 192.168.100.0/22
260
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
Содержание Equalizer GX Series
Страница 18: ......
Страница 32: ...Overview 32 Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc ...
Страница 42: ......
Страница 52: ......
Страница 64: ......
Страница 72: ......
Страница 76: ......
Страница 123: ...Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc All Rights Reserved 123 Equalizer Administration Guide ...
Страница 228: ......
Страница 238: ......
Страница 411: ...Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc All Rights Reserved 411 Equalizer Administration Guide ...
Страница 459: ...Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc All Rights Reserved 459 Equalizer Administration Guide ...
Страница 476: ......
Страница 492: ......
Страница 530: ......
Страница 614: ......
Страница 626: ......
Страница 638: ......
Страница 678: ......
Страница 732: ...Using SNMP Traps 732 Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc ...
Страница 754: ......
Страница 790: ......
Страница 804: ......
Страница 842: ......
Страница 847: ...Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc All Rights Reserved 847 Equalizer Administration Guide ...
Страница 866: ......