Download Print this page

AKCP SP+ Manual

Network access control
Hide thumbs Also See for SP+:

Advertisement

Quick Links

www.AKCP.com
SP+ Network Access Control
Manual
Copyright © 2021, AKCP

Advertisement

loading
Need help?

Need help?

Do you have a question about the SP+ and is the answer not in the manual?

Questions and answers

Summary of Contents for AKCP SP+

  • Page 1 SP+ Network Access Control Manual Copyright © 2021, AKCP...
  • Page 2 SP+ Network Access Control Manual Introduction The Network Access Control (NAC) is a new feature for SP+ F7 and H7 units, starting with firmware 5605. It is an incoming packet filter (network firewall) which supports low-level filtering of all IPv4 and IPv6 traffic.
  • Page 3 SP+ Network Access Control Manual Blacklist mode As noted above, in blacklist mode, the unit will block access from certain IP addresses or address ranges from accessing the unit in any way. Click on the Add button and add your IP address(es) or address range(s) one by one. Important: You can only define a maximum of 10 entries! - 3 -...
  • Page 4 SP+ Network Access Control Manual Note that you must always specify the subnet mask for even a single IP address. Examples: Block a single IPv4 host (subnet mask 32): 192.168.1.137/32 Block a single IPv6 host (subnet mask 128): fd00::1/128 Block all IPv4 addresses from 192.168.0.x network (subnet mask 24): 192.168.0.1/24 Block all IPv4 addresses from 172.16.x.x network (subnet mask 16): 172.16.1.1/16...
  • Page 5 SP+ Network Access Control Manual Whitelist mode As noted above, in whitelist mode ONLY the allowed IP addresses can connect to the unit, and any other IPs will be blocked. Therefore, this mode must be used carefully to prevent locking out yourself. The configuration is exactly the same as for the blacklist mode (see above).
  • Page 6 SP+ Network Access Control Manual Reset button function for NAC In case you misconfigure NAC feature and you can no longer access the unit, the Reset button can be used to disable NAC. Note that doing so will also reset the passwords for the built-in WebUI user accounts (User, Viewer, Admin) if you have set a custom password for them.
  • Page 7 SP+ Network Access Control Manual IPv4 subnet ranges Source: https://packetlife.net/media/library/15/IPv4_Subnetting.pdf - 7 -...
  • Page 8 SP+ Network Access Control Manual IPv6 subnet ranges IPv6 CIDR Subnet Number of IPs /128 /127 /126 /125 /124 /123 /122 /121 /120 /119 /118 1,024 /117 2,048 /116 4,096 /115 8,192 /114 16,384 /113 32,768 /112 65,536 /111 131,072 /110 262,144 /109...
  • Page 9 SP+ Network Access Control Manual 137,438,953,472 274,877,906,944 549,755,813,888 1,099,511,627,776 2,199,023,255,552 4,398,046,511,104 8,796,093,022,208 17,592,186,044,416 35,184,372,088,832 70,368,744,177,664 140,737,488,355,328 281,474,976,710,656 562,949,953,421,312 1,125,899,906,842,624 2,251,799,813,685,248 4,503,599,627,370,496 9,007,199,254,740,992 18,014,398,509,481,985 36,028,797,018,963,968 72,057,594,037,927,936 144,115,188,075,855,872 288,230,376,151,711,744 576,460,752,303,423,488 1,152,921,504,606,846,976 2,305,843,009,213,693,952 4,611,686,018,427,387,904 9,223,372,036,854,775,808 Residential – /64 18,446,744,073,709,551,616 36,893,488,147,419,103,232 73,786,976,294,838,206,464 147,573,952,589,676,412,928 295,147,905,179,352,825,856 590,295,810,358,705,651,712 1,180,591,620,717,411,303,424 2,361,183,241,434,822,606,848...
  • Page 10 SP+ Network Access Control Manual 302,231,454,903,657,293,676,544 604,462,909,807,314,587,353,088 Business – /48 1,208,925,819,614,629,174,706,176 2,417,851,639,229,258,349,412,352 4,835,703,278,458,516,698,824,704 9,671,406,556,917,033,397,649,408 19,342,813,113,834,066,795,298,816 38,685,626,227,668,133,590,597,632 77,371,252,455,336,267,181,195,264 154,742,504,910,672,534,362,390,528 309,485,009,821,345,068,724,781,056 618,970,019,642,690,137,449,562,112 1,237,940,039,285,380,274,899,124,224 2,475,880,078,570,760,549,798,248,448 4,951,760,157,141,521,099,596,496,896 9,903,520,314,283,042,199,192,993,792 19,807,040,628,566,084,398,385,987,584 39,614,081,257,132,168,796,771,975,168 ISP – /32 79,228,162,514,264,337,593,543,950,336 158,456,325,028,528,675,187,087,900,672 316,912,650,057,057,350,374,175,801,344 633,825,300,114,114,700,748,351,602,688 1,267,650,600,228,229,401,496,703,205,376 2,535,301,200,456,458,802,993,406,410,752 5,070,602,400,912,917,605,986,812,821,504 10,141,204,801,825,835,211,973,625,643,008 20,282,409,603,651,670,423,947,251,286,016 40,564,819,207,303,340,847,894,502,572,032 81,129,638,414,606,681,695,789,005,144,064 162,259,276,829,213,363,391,578,010,288,128 324,518,553,658,426,726,783,156,020,576,256 649,037,107,316,853,453,566,312,041,152,512...
  • Page 11 SP+ Network Access Control Manual 664,613,997,892,457,936,451,903,530,140,172,288 1,329,227,995,784,915,872,903,807,060,280,344,576 IPv6 Subnet Reference Prefix Lengths: 2402:9400:0000:0000:0000:0000:0000:0001 XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX ||| |||| |||| |||| |||| |||| |||| ||| |||| |||| |||| |||| |||| |||128 ||| |||| |||| |||| |||| |||| ||124 ||| |||| |||| |||| |||| |||| |120 ||| |||| |||| |||| |||| |||| 116 ||| |||| |||| |||| |||| |||112 ||| |||| |||| |||| |||| ||108...
  • Page 12 SP+ Network Access Control Manual Please contact support@akcp.com if you have any further technical questions or problems Thanks for Choosing AKCP! - 12 -...