HP PROCURVE 2910AL Configuration Manual page 137

to 0 ("off") and allow the corresponding bits in an authorized IPv6 address to
be either "on" or "off". As a result, only the four IPv6 addresses shown in Figure
6-5 are allowed access.
IPv6 Mask
IPv6 Address Entered with the "ipv6
authorized-managers" Command
Other Authorized IPv6 Addresses
Figure 6-5. Example: How Hexadecimal C in a Mask Authorizes Four IPv6 Manager Addresses
Example. Figure 6-6 shows an example in which a mask is applied to the
IPv6 address: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64. The specified mask
FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF configures eight management stations as
authorized IP manager stations.
Note that, in this example, the IPv6 mask is applied as follows:
■
1st 2nd 3rd
Block Block Block
FFFF FFFF FFFF
2001 DB8 0000
2001 DB8 0000
2001 DB8 0000
2001 DB8 0000
Eight management stations in different subnets are authorized by the
value of the fourth block (FFF8) in the 64-bit prefix ID (FFFF:FFFF:FFFF:FFF8)
of the mask. (The fourth block of the prefix ID is often used to define
subnets in an IPv6 network.)
The binary equivalent of FFF8 that is used to specify valid subnet IDs in the
IPv6 addresses of authorized stations is: 1111 1111 1111 1000.
The three "off" bits (1000) in the last part of the this block (FFF8) of the
mask allow for eight possible authorized IPv6 stations:
2001:DB8:0000:0000:244:17FF:FEB6:D37D
2001:DB8:0000:0001:244:17FF:FEB6:D37D
2001:DB8:0000:0002:244:17FF:FEB6:D37D
2001:DB8:0000:0003:244:17FF:FEB6:D37D
2001:DB8:0000:0004:244:17FF:FEB6:D37D
2001:DB8:0000:0005:244:17FF:FEB6:D37D
2001:DB8:0000:0006:244:17FF:FEB6:D37D
2001:DB8:0000:0007:244:17FF:FEB6:D37D
IPv6 Management Security Features
Authorized IP Managers for IPv6
4th 5th 6th 7th
Block Block Block Block
FFFF FFFF FFFF FFFF
0000 244 17FF FEB6
0000 244 17FF FEB6
0000 244 17FF FEB6
0000 244 17FF FEB6
8th
Block
FFFC
D37D
D37C
D37E
D37F
6-9