NEC express5800 A2010b User Manual page 426

Chapter 3 Setup
•
oemnec_deniedaccessips
This specifies the IP addresses that reject access from the network. Divide IP addresses by "," (ex.
192.168.1.2, 192.168.1.2, ...) or use asterisk (ex. 192.168.1.*), if you would like to set multiple reject IP
address. Set "0.0.0.0" or no <value> (*) to this property, if you would like to clear the value of this property. It
becomes effective at next login if you change it. The value of this property is cleared if
oemnec_allowedaccessips is set.
* When not specifying any value, use [Enter] key next to "=" as shown below:
set oemnec_deniedaccessips=[Enter]
Shown below is an example of access limitation.
Example: To permit access from 192.168.1.* and 192.168.3.4.
set oemnec_allowedaccessips=192.168.1.*,192.168.3.4
Tips
To modify the DHCP setting, enter the following command at the command prompt to move the current default
target to /admin1/sp1/enetport1/lanendpt1/ipendpt1.
cd /admin1/sp1/enetport1/lanendpt1/ipendpt1
Enter the following command to confirm properties of the DHCP target.
show
Enter the following command to modify a property of the DHCP target.
set <property>=<new value>
The properties related to DHCP that can be viewed and modified are as follows:
•
AddressOrigin
This specifies whether DHCP is enabled for the network. Note that, the valid values for this property are "3"
or "4". "3" means that the DHCP is disabled. "4" means that the DHCP is enabled. This is the dynamic
setting.
•
oemnec_FloatingIPv4Address
Shows IP address (floating IP address) for BMC. This property is read-only.
•
IPv4Address
Shows the IP address for BMC (for RMCP+). This property is read-only.
•
SubnetMask
Shows the subnet mask for the network. This property is read-only.
An example of DHCP setting is shown below.
426
•
Clear all oemnec_allowedaccessips/oemnec_deniedaccessips values, if you would like
NOT to restrict access by IP address for the management LAN.
•
The communication with NEC ESMPRO Manager is also restricted by this
configuration. Permit the IP address used by the communication with NEC ESMPRO
Manager if you would like to use NEC ESMPRO Manager.
•
You cannot restrict an access from an IP address used by logging in to the BMC's SSH
server. In this case, log out once, and log in by using other IP address permitted. Then
change the configuration.
•
Up to 222 characters can be used for setting of access limitation. The show command
can display up to 255 characters. Up to 255 characters can be used for setting of
access limitation via web browser.
Express5800/A1040b, A2040b, A2020b, A2010b User's Guide
8. SMASH-CLP