Raritan PX-1000 Series, Руководство пользователя

Страница: 135 / 442

Chapter 5: Using the Web Interface
120
c. Select the action you want from the Default Policy drop-down list.

Allow: Accepts traffic from all IPv6 addresses regardless of the
user's role.

Deny: Drops traffic from all IPv6 addresses regardless of the
user's role.
4. Click OK to save the changes.
Creating Role-Based Access Control Rules
Role-based access control rules accept or drop traffic, based on the user's
role and IP address. Like firewall rules, the order of rules is important,
since the rules are executed in numerical order.
To create role-based access control rules:
1. Choose Device Settings > Security > Role Based Access Control. The
Configure Role Based Access Control Settings dialog appears.
2. Click the IPv4 tab for creating firewall rules, or click the IPv6 tab for
creating IPv6 firewall rules.
3. Ensure the Enable Role Based Access Control for IPv4 checkbox is
selected on the IPv4 tab, or the Enable Role Based Access Control for
IPv6 checkbox is selected on the IPv6 tab.
4. Create specific rules:
Action Do this...
Add a rule to the end of
the rules list

Click Append. The "Append new Rule" dialog appears.

Type a starting IP address in the Starting IP Address
field.

Type an ending IP address in the Ending IP Address
field.

Select a role from the drop-down list in the Role field.
This rule applies to members of this role only.

Select Allow or Deny from the drop-down list in the
Policy field.

Allow: Accepts traffic from the specified IP address
range when the user is a member of the specified
role

Deny: Drops traffic from the specified IP address
range when the user is a member of the specified
role

Click OK to save the changes.
The system automatically numbers the rule.