Configuring Ip Filtering (Ip Range) - Dell iDRAC6 User Manual

Configuring IP Filtering (IP Range)

IP address filtering (or IP Range Checking) allows iDRAC6 access only
from clients or management workstations whose IP addresses are within a
user-specified range. All other login requests are denied.
IP filtering compares the IP address of an incoming login to the IP address
range that is specified in the following cfgRacTuning properties:
• cfgRacTuneIpRangeAddr
• cfgRacTuneIpRangeMask
The cfgRacTuneIpRangeMask property is applied to both the incoming
IP address and to the cfgRacTuneIpRangeAddr properties. If the results are
identical, the incoming login request is allowed to access iDRAC6.
Logins from IP addresses outside this range receive an error.
The login proceeds if the following expression equals zero:
cfgRacTuneIpRangeMask & ( <incoming-IP-address> ^
cfgRacTuneIpRangeAddr)
where & is the bitwise AND of the quantities and ^ is the bitwise exclusive-
OR.
See "cfgRacTuning" for a complete list of cfgRacTuning properties.
Table 15-5. IP Address Filtering (IPRange) Properties
Property
cfgRacTuneIpRangeEnable
cfgRacTuneIpRangeAddr
Description
Enables the IP range checking feature.
Determines the acceptable IP address bit pattern,
depending on the 1's in the subnet mask.
This property is bitwise anded with
cfgRacTuneIpRangeMask to determine the upper
portion of the allowed IP address. Any IP address that
contains this bit pattern in its upper bits is allowed to
log in. Logins from IP addresses that are outside this
range fail. The default values in each property allow
an address range from 192.168.1.0 to 192.168.1.255
to log in.
Using the RACADM Command Line Interface
257