HP 2520-8 Configuration Manual page 76

IPv6 Management Security Features
Authorized IP Managers for IPv6
1st 2nd
Block Block
IPv6 Mask FFFF FFFF
Authorized 2001 DB8
IPv6 Address
Figure 3-6. Example: Mask for Configuring Authorized IPv6 Manager Stations in Different Subnets
Fourth Block in Mask: FFF8
Fourth Block in Prefix ID of IPv6 Address: 0000
Bit Numbers Bit
15
Bit Value
FFF8: Fourth Block
in Mask
0000: Fourth Block
in IPv6 Address
Bit Setting:
Figure 3-7. Example: How a Mask Determines Authorized IPv6 Manager Addresses by Subnet
3-8
FFFF requires all bits in each corresponding block of an authorized IPv6
address to have the same "on" or "off" setting as the device ID in the
specified IPv6 address. In this case, each bit in the device ID (last four
blocks) in an authorized IPv6 address is fixed and can be only one value:
244:17FF:FEB6:D37D.
3rd 4th 5th
Block Block Block
FFFF FFF8 FFFF
0000 0000 244
Bit Bit Bit Bit Bit
14 13 12 11 10
F
= 1 (On) = 0 (Off)
6th 7th 8th Manager- or Operator-Level Access
Block Block Block
FFFF FFFF FFFF In this example, the IPv6 mask allows up
to four stations in different subnets to
17FF FEB6 D37D
access the switch. This authorized IP
manager configuration is useful if only
management stations are specified by
the authorized IPv6 addresses. Refer to
Figure 3-4 for how the bitmap of the IPv6
mask determines authorized IP manager
stations.
Bit Bit Bit Bit
9 8 7 6
F
Bit Bit Bit Bit Bit
5 4 3 2 1
F
8
Bit
0