Table of Contents
Advertisement
Web OS 10.0 Application Guide
Setting Allowable Source IP Address
Ranges
The allowable management IP address range is configured using the system mnet and mmask
options available on the Command Line Interface (CLI) System Menu (/cfg/sys).
N
OTE
ent purpose.
When an IP packet reaches the Management Processor, the source IP address is checked
against the range of addresses defined by mnet and mmask. If the source IP address of the host
or hosts are within this range, they are allowed to attempt to log in. Any packet addressed to a
switch IP interface with a source IP address outside this range is discarded silently.
Example:
255.255.255.128. This defines the following range of allowed IP addresses: 192.192.192.1 to
192.192.192.127.
n
A host with a source IP address of 192.192.192.21 falls within the defined range and
would be allowed to access the switch Management Processor.
n
A host with a source IP address of 192.192.192.192 falls outside the defined range and is
not granted access. To make this source IP address valid, you would need to shift the host
to an IP address within the valid range specified by the mnet and mmask or modify the
mnet to be 192.192.192.128 and the mmask to be 255.255.255.128. This would put the
192.192.192.192 host within the valid range allowed by the mnet and mmask
(192.192.192.128-255).
N
OTE
face Protocol (RIP) updates received by the switch will be discarded if the source IP address of
the RIP packet(s) falls outside the specified range. You can correct this by configuring static
routes.
n
100
Chapter 5: Secure Switch Management
–
The mnet and mmask commands in the /cfg/slb/adv menu are used for a differ-
Assume that the mnet is set to 192.192.192.0 and the mmask is set to
–
When the mnet and mmask Management Processor filter is applied, Routing Inter-
212777-A, February 2002
Advertisement
Table of Contents
