Managing The Ip Address Whitelist; Add An Ip Address To The Whitelist - Symmetricom TimeCreator 1000 User Manual

Chapter 5 Provisioning

Managing the IP Address Whitelist

Managing the IP Address Whitelist
The whitelist feature in TimeCreator allows the user to filter IP access addresses to
prevent malicious attacks. In the default condition, all IP addresses are allowed
access. Once the first IP address has been added to the whitelist, any future IP
sessions will only be accepted if they originate from IP addresses from the whitelist.
This feature is useful when the management port is connected to a public network
rather than a private network.
Note: Symmetricom recommends that the IP address of the
administrator station always be added to the whitelist first. This will
prevent an accidental lockout of the administrator via Telnet/SSH.
The whitelist must be committed before any changes to the whitelist will be
implemented.
Note: If the whitelist function is being use for a TimeCreator 1000 with
the TOD-source of NTP, the local host address (
added to the whitelist with the command "
127.0.0.1"

Add an IP Address to the Whitelist

Use the dot-decimal notation format xxx.xxx.xxx.xxx to enter the IP address
parameter.
1. Login at the Admin level (see Login, on page 74).
2. To view the current list of IP addresses on the whitelist, type
and press Enter.
3. To add a specific IP address to the whitelist, type
address>
192.168.5.10
4. To add IP addresses using a subnet mask, type
address>/<ip mask>
address are significant it is specified as a prefix number which is the number of
1s from the MSB with the remaining bits set to 0. A mask of 255.255.255.0 is set
with the value 24. (For example,
default value is 32, or 255.255.255.255, to match the full 32-bit IP address. .
5. Type
set whitelist commit
78 TimeCreator 1000 User's Guide
.
and press Enter. (For example,
).
and press Enter. The mask indicates which parts of the IP
and press Enter.
127.0.0.1)
set whitelist add
set whitelist add <ip
set whitelist add
set whitelist add <ip
set whitelist add 192.168.5.0/24
097-93100-01 Revision C – February, 2010
should be
show whitelist
) The