5-32
Basic Configuration
5.9.3.1. Adding IP Addresses to the Allow and Deny Lists
To add an IP Address to the Allow or Deny list, and begin configuring the IP Security feature,
proceed as follows.
Notes:
• Both the Allow and Deny list can include Linux operators, wild cards, and net/
mask pairs.
• In some cases, it is not necessary to enter all four "digits" of the IP Address. For
example, if you wish to allow access to all IP addresses that begin with "192,"
then you would only need to enter "192."
• The IP Security Configuration menu is only available when you have accessed
command mode using an account that permits Administrator level commands.
1. Access the IP Security Configuration menu. In the Text Interface, the IP Security menu
is accessed via the Network Configuration menu. In the Web Browser Interface, the IP
Security Configuration menu is accessed via the Network Configuration flyout menu.
2.
Allow List:
Enter the IP Address(es) for the clients that you wish to allow. Note that if
an IP Address is found in the Allow list, the client will be allowed to connect, and the RPS
will not check the Deny list.
3.
Deny List:
Enter the IP Address(es) for the clients that you wish to deny. Note that if the
client’s IP Address is not found in the Deny List, that client will be allowed to connect.
5.9.3.2. Linux Operators and Wild Cards
In addition to entering a specific IP address or partial IP address in the Allow or Deny list, you
may also use standard Linux operators or wild cards. In most cases, the only operator used is
"EXCEPT" and the only wild card used is "ALL," but more experienced Linux users may note
that other operators and wild cards may also be used.
EXCEPT:
This operator creates an exception in either the "allow" list or "deny" list. For
example, if the Allow list includes a line which reads "192. EXCEPT 192.255.255.6," then all IP
address that begin with "192." will be allowed; except 192.255.255.6 (providing that this address
appears in the Deny list.)
ALL:
The ALL wild card indicates that all IP Addresses should be allowed or denied. When
ALL is included in the Allow list, all IP addresses will be allowed to connect; conversely, if
ALL is included in the Deny list, all IP Addresses will be denied (except for IP addresses listed
in the Allow list.) For example, if the Deny list includes a line which reads "ALL EXCEPT
168.255.192.192," then all IP addresses except 168.255.192.192 will be denied (except for IP
addresses that are listed in the Allow list.)
Net/Mask Pairs:
An expression of the form "n.n.n.n/m.m.m.m" is interpreted as a "net/mask"
pair. A host address is matched if "net" is equal to the bitwise AND of the address and the
"mask." For example, the net/mask pattern "131.155.72.0/255.255.254.0" matches every address
in the range "131.155.72.0" through "131.155.73.255."
