NOTE: IPv6 requires a minimum MTU of 1280. If IPv6 is enabled, and cfgNetTuningMtu is set to a lower value,
the CMC uses an MTU of 1280.
Configuring Network Security Settings
You can configure the network security settings for IPv4 only.
Configuring Network Security Settings Using CMC Web Interface
NOTE: To perform the following tasks, you must have the Chassis Configuration Administrator privilege.
To configure the network security settings using CMC Web interface:
1.
In the left pane, click Chassis Overview, and then click Network . The Network Configuration page is displayed.
2.
In the IPv4 Settings section, click Advanced Settings. The Network Security page is displayed.
3.
Specify the IP range and IP blocking values. For more information, see the
4.
To save your settings, click Apply.
Configuring CMC Network Security Settings Using RACADM
IP filtering compares the IP address of an incoming login to the IP address range that is specified in the following
cfgRacTuning properties:
•
cfgRacTuneIpRangeAddr
•
cfgRacTuneIpRangeMask
A login from the incoming IP address is allowed only if the following are identical:
•
cfgRacTuneIpRangeMask bit-wise and with incoming IP address
•
cfgRacTuneIpRangeMask bit-wise and with cfgRacTuneIpRangeAddr
Configuring Virtual LAN Tag Properties for CMC
VLANs are used to allow multiple virtual LANs to co-exist on the same physical network cable and to segregate the
network traffic for security or load management purposes. When you enable the VLAN functionality, each network
packet is assigned a VLAN tag.
Configuring VLAN Tag Properties for CMC Using RACADM
1.
Enable the VLAN capabilities of the external chassis management network:
racadm config -g cfgLanNetworking -o
cfgNicVLanEnable 1
2.
Specify the VLAN ID for the external chassis management network:
racadm config -g cfgLanNetworking -o cfgNicVlanID <VLAN id>
The valid values for <VLAN id> are 1– 4000 and 4021– 4094. Default value is 1.
For example:
racadm config -g cfgLanNetworking -o cfgNicVlanID
1
Online Help .
67