Lantronix ETS, Справочное руководство

Страница: 69 / 312

Server Configuration Security
4-17
Like other configurations, security table entries can be Set or Defined. To add an entry to the table, specify
an IP address (or range), which direction(s) to restrict, and a list of affected ports.
Figure 4-33: Setting Server Access
In order, the command in Figure 4-33:
1 Affects addresses from 192.0.1.1 through 192.0.1.254 using the 255 “wildcard” network address seg-
ment.
2 Prevents ports 4, 5, 6, and 7 from beginning sessions to hosts with these addresses using the Outgoing
Disabled keywords.
The IP address must be four segments of 0-255 each. A 255 in any segment applies to all numbers in that
range such that 192.0.1.255 includes all addresses of 192.0.1.n. A trailing zero in any address is shorthand
for “all addresses in this range are disabled, for both directions and for all ports.” The following two
commands are equal.
Figure 4-34: Set IPsecurity Command
Parameters can be added after the address term to change the defaults. Incoming and Outgoing Disabled are
the default settings for any Set/Define IPsecurity command. Incoming refers to users on other hosts
attempting to log into the ETS. Outgoing refers to local users connecting to other TCP/IP hosts.
Port number 0 corresponds to the virtual ports (that is, users who log into the ETS from the network). If no
ports are specified on the command line, all ports, both physical and virtual, are included by default.
Note:
SLIP is disabled by default for Set/Define IPsecurity commands.
Individual entries can be removed by entering Clear/Purge IPsecurity with no parameters other than the
address. This command form is not valid for any addresses with zeros in any segment.
Figure 4-35: Clear IPsecurity Command
The entire security table can be cleared with one command:
Figure 4-36: Clearing Security Table
Local> SET IPSECURITY 192.0.1.255 OUTGOING DISABLED PORT 4-7
Local> SET IPSECURITY 192.0.1.0
Local> SET IPSECURITY 192.0.1.255 OUT DISABLED IN DISABLED
Local> CLEAR IPSECURITY 192.1.1.102
Local> CLEAR IPSECURITY ALL