Table of Contents
Advertisement
B: IPMI 2.0 Management Utility
B-192
•
IP Access Control: This section enables you to configure the IP Access Control settings
listed below.
•
Enable IP Access Control: Check this box to enable the function of IP Access Control. This
function is used to limit user access to the network by identifying them by their IP addresses.
(This function is available to the LAN interface only.)
•
Default Policy: When IP Access Control set to "enabled," you can select either "accept" or
"drop", allowing access or denying access according to pre-defined rules.
•
If this option is set to "drop," and you do not have a set of rules to accept the internet
connection, then the internet connection over LAN is impossible. In this case, you need to
change your security settings via modem or by disabling the IP Access Control.
•
Rule#: Enter a rule number in the box for a command (or commands) that is used by the IP
Access Control.
•
IP/Mask: Enter the IP Address or an IP Address Range for which the command(s) are
applied.
•
Policy: This item instructs the IPMI what to do with the matching packages.
Note: The sequence or the order of the rules is important. The rules are checked in the
ascending order until a rule matches. All rules below the matching rule are ignored. The
default policy applies if no matching rules are found.
•
Append: Select this option to add IP Address/Mask, rules or commands to the existing ones.
•
Insert: Select this option to insert IP Address/Mask, rules or commands to the existing ones.
•
Replace: Select this option to replace an old IP Address/Mask, rule or command with a new
one.
•
Delete: Select this option to delete (a part of) an existing IP Address/Mask, rule or
command.
•
User Blocking: This window enables you to set the conditions how a user is blocked.
•
Max. Number of Failed Logins: Enter the maximum number of failed attempts or failed
logins allowed for a user. If the number of failed logins or attempts exceeds this maximum
number allowed, the user is blocked from system.
Note: If this box is left empty, the user is allowed to try to login to the server indefinitely. For
network security, this is not recommended.
007-5467-001
Advertisement
Table of Contents
