HP 2520-8 Configuration Manual page 74

IPv6 Management Security Features
Authorized IP Managers for IPv6
1st 2nd
Block Block
IPv6 Mask FFFF FFFF
IPv6 Address 2001 DB8
Figure 3-3. Example: Mask for Configuring Four Authorized IPv6 Manager Stations
Last block in Mask: FFFC
Last block in IPv6 Address: D37D
Bit Numbers Bit Bit
15
Bit Value
FFFC: Last Block
in Mask
D37D: Last Block
in IPv6 Address
Bit Setting: = 1 (On)
Figure 3-4. Example: How a Mask Determines Four Authorized IPv6 Manager Addresses
3-6
Example. Figure 3-3 shows an example in which a mask that authorizes
switch access to four management stations is applied to the IPv6 address:
2001:DB8:0000:0000:244:17FF:FEB6:D37D. The mask is:
FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFC.
3rd 4th 5th
Block Block Block
FFFF FFFF FFFF
0000 0000 244
Bit Bit Bit Bit
14 13 12 11 10
F
= 0 (Off)
As shown in Figure 3-4, if you use a mask of
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFC with an IPv6 address, you can authorize
four IPv6-based stations to access the switch. In this mask, all bits except the
last two are set to 1 ("on"); the binary equivalent of hexadecimal C is 1100.
Therefore, this mask requires the first corresponding 126 bits in an authorized
IPv6 address to be the same as in the specified IPv6 address:
2001:DB8:0000:0000:244:17FF:FEB6:D37C. However, the last two bits are set
6th 7th 8th Manager- or Operator-Level Access
Block Block Block
FFFF FFFF FFFC The "F" value in the first 124 bits of the
mask specifies that only the exact value
17FF FEB6 D37D
of each corresponding bit in an
authorized IPv6 address is allowed.
However, the "C" value in the last four
bits of the mask allows four possible
combinations (D37C, D37D, D37E, and
D37F) in the last block of an authorized
IPv6 address.
Bit Bit Bit Bit
9 8 7 6
F F
Bit Bit Bit Bit Bit
5 4 3 2 1
C
Bit
0