Digi IX20-WAG4 User Manual page 410

Services
d. Click  again to list additional IP addresses or networks.
To limit access to specified IPv6 addresses and networks:
n
a. Click IPv6 Addresses.
b. For Add Address, click .
c. For Address, enter the IPv6 address or network that can access the device's web
d. Click  again to list additional IP addresses or networks.
To limit access to hosts connected through a specified interface on the IX20 device:
n
a. Click Interfaces.
b. For Add Interface, click .
c. For Interface, select the appropriate interface from the dropdown.
d. Click  again to allow access through additional interfaces.
To limit access based on firewall zones:
n
a. Click Zones.
b. For Add Zone, click .
c. For Zone, select the appropriate firewall zone from the dropdown.
d. Click  again to allow access through additional firewall zones.
6. Multicast DNS (mDNS) is enabled by default. mDNS is a protocol that resolves host names in
small networks that do not have a DNS server. To disable mDNS, or enable it if it has been
disabled, click Enable mDNS.
7. For SSL certificate, if you have your own signed SSL certificate, paste the certificate and
private key. If SSL certificate is blank, the device will use an automatically-generated, self-
signed certificate.
The SSL certificate and private key must be in PEM format.
n
The private key can use one of the following algorithms:
n
l
l
l
l
Example:
a. Generate the SSL certificate and private key, for example:
# openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365
-out certificate.pem
IX20 User Guide
administration service. Allowed values are:
A single IP address or host name.
l
A network designation in CIDR notation, for example, 2001:db8::/48.
l
any: No limit to IPv6 addresses that can access the web administration service.
l
See Firewall configuration
RSA
DSA
ECDSA
ECDH
Note Password-protected certificate keys are not supported.
Configure the web administration service
for information about firewall zones.
410