Raritan DOMINION SX -, Инструкция по установке и эксплуатации

Страница: 56 / 172

46 D
OMINION
SX I
NSTALLATION AND
O
PERATIONS
M
ANUAL
The new GUI command buttons assist in editing the Dominion SX configuration:
Insert Insert a new rule, e.g., rule 0 in the example in Figure 48 denies access from all IP
Addresses in the range 192.168.2.10 to 192.168.2.255, and will not log the activity.
Append Allows administrator to append a new rule to the existing rules.
Move Move a rule up or down on the list; this changes the order in which a rule (filter) is
applied. A rule must be selected (highlighted) before it can be moved.
Edit Allows the administrator to edit the values in a rule already on the list. A rule must be
selected (highlighted) before it can be edited.
Remove Removes a rule from the list. A rule must be selected (highlighted) before it can be
removed.
Enable Enables the IP ACL policy management.
The main screen input consists of the following fields for each policy/rule for Deny/Allow.
Starting IP
Address This is the starting IP Address (Only valid IP addresses in dot notation should be
entered).
Ending IP
Address This will be the end range, to apply the policy of Allow/Deny.
Allow This flag will decide the action based on the filter criteria.
Enable Log Log flag in the IPTables will be set for this policy.
Done Saves the current changes and apply the filter to the IPTables.
Cancel Cancels all the changes and do not save any modifications.
Allowing or Denying Access to the Dominion SX
Allowing Dominion SX Access
To allow access to the Dominion SX from a particular address, set both the Starting IP Address and the
Ending IP Address to a specific address and check the Allow checkbox. Click Done when finished. Click
on the IP ACL enabled checkbox, and then click Save to save the IP ACL configuration to the non-volatile
memory of the Dominion SX. This rule allows connections from this address, and attempts to connect from
all other IP addresses will be denied. Please note warnings in the
Overview section, above.
Example:
To Allow access to the Dominion SX from only one IP address (or a range of IP addresses), see
rules, below.
Administrator goal: to allow access to the Dominion SX unit from only IP address 192.168.51.80, and deny
access to the Dominion SX unit from ALL other IP addresses.
The following rules will be needed:
0.) 192.168.51.80 192.168.51.80 Allow No
1.) 0.0.0.1 255.255.255.255 Deny No
Rule 0 is to allow access from the IP address listed; it could be any range of IP address that the user wants.
Rule 1 denies access from all IP addresses, other than those explicitly listed in Rule 0.
Great care must be taken when entering Rule 0, because if a user does not enter the IP address (or address
range) in Rule 0 correctly, and then enters Rule 1, the user will functionally be locked out of accessing the
Dominion SX unit. The only recovery is to reset the Dominion SX unit to factory default in order to get out
of this situation, and, as a result, all user entered settings will be lost.
Denying Dominion SX Access
To deny access to the Dominion SX unit from a particular IP address, set both the Starting IP Address and
the Ending IP Address to a specific address. Do not check the Allow checkbox (make certain it is
unchecked) to deny access from the particular IP address listed. Click Done when finished. Click on the IP
ACL enabled checkbox, and then click Save to save the IP ACL configuration to the non-volatile memory
of the Dominion SX. This rule denies all connections from this address. Please note that this will ALLOW
access to the unit from ALL other IP addresses - other than the one specified in Rule 0. Also, please note
warnings in the
Overview section, above.