Users Guide

Table Of Contents
where <mtu> is a value between 5761500 (inclusive; default is 1500).
NOTE: IPv6 requires a minimum MTU of 1280. If IPv6 is enabled, and cfgNetTuningMtu is set to a lower value, the CMC
uses an MTU of 1280.
Configuring CMC Network and Login Security
Settings
The IP address blocking and User blocking features in CMC allow you to prevent security issues due to password guessing
attempts. This feature enables you to block a range of IP addresses and users who can access CMC. By deafult, the IP address
blocking feature is enabled in CMC. You can set the IP range attributes using CMC web interface or RACADM. To use the
IP address blocking and user blocking features, enable the options using CMC web interface or RACADM. Configure the login
lockout policy settings to enable you to set the number of unsuccessful login attempts for a specific user or for an IP address.
After exceeding this limit, the blocked user can log in only after the penalty time expires.
NOTE: Blocking by IP address is applicable only for IPV4 addresses.
Configuring IP Range Attributes Using CMC Web Interface
NOTE: To perform the following task, you must have Chassis Configuration Administrator privilege.
To configure the IP range attributes using CMC web interface:
1. In the left pane, go to Chassis Overview and click Network > Network. The Network Configuration page is displayed.
2. In the IPv4 Settings section, click Advanced Settings.
The Log in Security page is displayed.
Alternatively, to access the Log in Security page, in the left pane, go to Chassis Overview, click Security > Log in.
3. To enable the IP range checking feature, in the IP Range section, select the IP Range Enabled option.
The IP Range Address and IP Range Mask fields are activated.
4. In the IP Range Address and IP Range Mask fields, type the range of IP addresses and IP range masks that you want to
block from accessing CMC.
For more information, see the Online Help.
5. Click Apply to save your settings.
Configuring IP Range Attributes Using RACADM
You can configure the following IP Range attributes for CMC using RACADM:
IP range checking feature
Range of IP addresses that you want to block from accessing CMC
IP Range Mask that you want to block from accessing CMC
IP filtering compares the IP address of an incoming login to the IP address range that is specified. A login from the incoming IP
address is allowed only if both the following are identical:
cfgRacTuneIpRangeMask bit-wise and with incoming IP address
cfgRacTuneIpRangeMask bit-wise and with cfgRacTuneIpRangeAddr
To enable the IP range checking feature, use the following property under cfgRacTuning group:
cfgRacTuneIpRangeEnable <0/1>
To specify the range of IP addresses that you want to block from accessing CMC, use the following property under
cfgRacTuning group:
cfgRacTuneIpRangeAddr
Configuring CMC
77