Opengear ACM5000, Руководство пользователя

Страница: 65 / 335

User Manual
Advanced Console Server & RIM Gateway User Manual
65

Select the Accessible Port(s) that the new rule is to be applied to

Then enter the Network Address of the subnet to be permitted access

Then specify the range of addresses that are to be permitted by entering a Network Mask for that permitted IP
range e.g.

To permit all the users located with a particular Class C network (204.15.5.0 say) connection to the nominated
port then you would add the following Trusted Network New Rule:
Network IP Address 204.15.5.0
Subnet Mask 255.255.255.0

If you want to permit only the one users who is located at a specific IP address (204.15.5.13 say) to connect:
Network IP Address 204.15.5.0
Subnet Mask 255.255.255.255

If however you want to allow all the users operating from within a specific range of IP addresses (say any of
the thirty addresses from 204.15.5.129 to 204.15.5.158) to be permitted connection to the nominated port:
Host /Subnet Address 204.15.5.128
Subnet Mask 255.255.255.224

Click Apply
Note The above Trusted Networks will limit access by Users and Administrators to the console serial ports. However
they do not restrict access by the Administrator to the console server itself or to attached hosts. To change the
default settings for this access, you will to need to edit the IPtables rules as described in the Chapter 14 -
Advanced.
4.6 Serial Port Cascading
Cascaded Ports enables you to cluster distributed console servers so a large number of serial ports (up to 1000) can be
configured and accessed through one IP address and managed through the one Management Console. One console
server , the Master, controls other console servers as Slave units and all the serial ports on the Slave units appear as if
they are part of the Master.
Opengear’s clustering connects each Slave to the Master with an SSH connection. This is done using public key
authentication so the Master can access each Slave using the SSH key pair (rather than using passwords). This ensures