Pearl-2 User Guide
IP restriction examples
Example
Description
computers except the boardroom computer:
Deny: 192.168.1.211
As with allow lists, your deny list can specify a range of IP addresses, and can
specify multiple ranges or distinct IP addresses in a comma-separated list.
Deny list with a range of IP
addresses
Consider a situation where you want every computer on the network to
access the broadcast, with the exception of the CEO’s desktop, laptop and
tablet computers. Additionally, boardroom computers should not be
permitted with the exception of the cafeteria computer (IP address
192.168.1.222).
The deny list is an "exception" list for the allow list. So to craft the rule
described above we need to allow all the computers in the local subnet, then
deny specific sub-ranges including two groups of boardroom computers
ensuring the cafeteria computer's IP address is not in the deny list:
Allow: 192.168.1.1-192.168.1.250
Deny: 192.168.1.200-192.168.1.221, 192.168.1.223-
192.168.1.250, 192.168.1.50-192.168.1.51, 192.168.1.75
201
