User's Manual

VPN Mode Configuration Commands
213
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
vpn sslvpn users users ip_policies configure <row id>
This command configures source IP addresses from which a user is either allowed or denied
access. The command is not limited to SSL VPN users. After you have issued the vpn
sslvpn users users ip_policies configure command to specify the row ID that
represents the user, you enter the users-config [ip-policy] mode, and then you can configure
one keyword and associated parameter or associated keyword at a time in the order that you
prefer.
Step 1 Format vpn sslvpn users users ip_policies configure <row id>
Mode vpn
Step 2 Format allow_login_from_defined_addresses {Y | N}
ip_version {IPv4 | IPv6}
source_address_type {IPAddress {{source_address <ipaddress>} |
{source_address6 <ipv6-address>}} | IPNetwork
{{source_address <ipaddress>} {mask_length <mask length>} |
{source_address6 <ipv6-address>} {prefix_length
<prefix length>}}}
Mode users-config [ip-policy]
Keyword Associated Keyword to
Select or Parameter to Type
Description
allow_login_from_defined_addresses
Y or N Allows or denies login from a
single-source IP address or network IP
addresses.
ip_version IPv4 or IPv6 Specifies the IP version of the source
IP address:
• IPv4. The IP address or network
address is defined by an IPv4
address. You need to issue the
source_address keyword and
specify an IPv4 address. For a
network address, you also need to
issue the mask_length keyword
and specify a subnet mask length.
• IPv6. The IP address or network
address is defined by an IPv6
address. You need to issue the
source_address6 keyword and
specify an IPv6 address. For a
network address, you also need to
issue the prefix_length keyword
and specify a prefix length.