LEGRAND Server Technology PRO3X User Manual page 191

When traffic reaches or is sent from the PRO3X, the rules are executed in numerical order.
Only the first rule that matches the IP address determines whether the traffic is accepted or
discarded. Any subsequent rules matching the IP address are ignored.
• •
Prefix length is required.
When typing the IP address, you must specify it in the CIDR notation. That is, BOTH the
address and the prefix length are included. For example, to specify a single address with
the 24-bit prefix length, use this format:
x.x.x.x/24
/24 = the prefix length.
Note: Valid IPv4 addresses range from 0.0.0.0 through 255.255.255.255.
▶
To configure IPv4 or IPv6 access control rules:
1) Choose Device Settings > Security > IP Access Control.
2) Select the 'Enable IPv4 access control' or "Enable IPv6 access control" checkboxes to enable the
access control rules.
3) For either type, determine the default policy.
• Accept: Accepts traffic from all IPv4 OR IPv6 addresses. •
• Drop: Discards traffic from all IPv4 OR IPv6 addresses, without sending any failure notification to •
the source host.
• • Reject: Discards traffic from all IPv4 OR IPv6 addresses, and an ICMP message is sent to the source
host for failure notification.
4) Go to the Inbound Rules section or the Outbound Rules section according to your needs.
• Inbound rules control the data sent to the PRO3X. •
• Outbound rules control the data sent from the PRO3X. •
5) Create rules.
• Click Append to add a row, then add the IP address and subnet mask. Select Policy. For each rule, •
the policy affects only the specified IP address.
• Click Insert Above to add a rule above another rule. •
• The system automatically numbers the rules. •
• Use the arrow buttons to sort the priority order. •
6) Click Save. The rules are applied. Make sure to click Save in each section if changes are made.
191