Ip Address Restriction - Hitachi COMPUTE BLADE 500 SERIES Management Module Setup Manual

• CB 520H A1/B1, CB 520A A1, and CB 540A A1/B1 server blades do not
support settings for BMC TLS/SSL versions.
• TLS/SSL version settings for BMC are supported by the following firmware
versions.
- Management module
A0170 or later
- Server blade
CB 520H B2 with firmware version 04-22 or later
• TLS/SSL version settings for BMC are not taken over at N+M cold standby
failover. When configuring N+M cold standby, set the same BMC Security
strength to both the active and standby server blades.

IP address restriction

Each service, such as FTP, TELNET, SSH, HTTP, and HTTPS, can be configured
following settings.
• Enabled/disabled settings for services
• Connectable IP address settings (Set for both IPv4 and IPv6 addresses.)
• Changing port number only for HTTP and HTTPS
You must specify IP addresses that can connect for both IPv4 and IPv6
addresses. When connectable IP address is configured, the connection that is
other than configured IP address is refused. You can specify IP addresses that
can connect by specifying a range of network addresses. In addition, you can
specify one range for each service on both the IPv4 network and on the IPv6
network. When the service is disabled, the service cannot be used.
Tip:
• When you connect to a management module with SSH connection
settings disabled or connect to it from an IP address other than the SSH
connectable IP address configured, some terminal software may show the
login window. If so, you cannot log in because authentication always fails.
• Configure a subnet mask for the network address of the connectable IP
address to other than 255.255.255.255.
The following tables describe the IP address restriction settings.
Displaying/setting TELNET connecting
configuration
Displaying/setting FTP connecting
configuration
Displaying/setting SSH connecting
configuration
2-38
Hitachi Compute Blade 500 Series Management Module Setup Guide
Table 2-39 Web console operation
Item
Administration tab > Service > Telnet tab
Administration tab > Service > FTP tab
Administration tab > Service > SSH/SFTP tab
Functional detail
Operation