Specifications

The following table displays examples of allowed remote hosts.

Input format

Allowable Hosts

Base Host IP

Address

Subnet mask

Any host 0.0.0.0 0.0.0.0

192.168.1.120 192.168.1.120 255.255.255.255

192.168.1.1 - 192.168.1.254 192.168.1.0 255.255.255.0

192.168.0.1 -

192.168.255.254

192.168.0.0 255.255.0.0

192.168.1.1 - 192.168.1.126 192.168.1.0 255.255.255.128

192.168.1.129 -

192.168.1.254

192.168.1.128 255.255.255.128

Serial Port IP Filtering

Each serial port can be configured individually for IP filtering. To configure a serial port for IP filtering, do the following:

1. Access the web interface.

2. Under the Serial Port heading, choose Configuration.

3. Choose All under All port configuration to configure all the ports or a specific port under Individual port configuration > Port IP

filtering.

4. Enter the IP address and subnet mask for the remote host that is allowed access.

5. Choose Save & apply.

Figure 39- Serial Port IP filtering

Using IP Tables

Linux and UNIX systems have an IP filtering program called IPtables. Administrators desiring to add further security by controlling

access to the SERIMUX should look at this program. Information about IPtables can be found on most Linux or UNIX systems by

viewing the man pages.

Configuring User Access Control

Another method to control access to the serial ports on the SERIMUX is through the User Access Control configuration. This

configuration can be done on a per port basis or globally by selecting the All Ports option. There are three options for user access

control: None, Restricted user list, and Permitted user list. Users must have already been added to the system before they can be

entered on a Restricted or Permitted user list or for a Sniff Session user list.

• When None is selected, any user that is registered on the authentication server can access a serial port.

• When Restricted user list is selected, a user cannot access a serial port even if they are registered on an authentication

server.

• When Permitted user list is selected, only this user can access a specific serial port.

Note: Users do not necessarily need to be local, but can be users on any configured authentication server.