User guide

Chapter 8: Security Management
210
Configuring IP Access Control
Using IP access control, you can control access to your Dominion KX II.
By setting a global Access Control List (ACL) you are by ensuring that
your device does not respond to packets being sent from disallowed IP
addresses. The IP access control is global, affecting the Dominion KX II
as a whole, but you can also control access to your device at the group
level. See Group-Based IP ACL (Access Control List) (on page 153)
for more information ab
out gro
up-level control.
Important: IP address 127.0.0.1 is used by the Dominion KX II local
port. When creating an IP Access Control list, 127.0.0.1 is used by
the Dominion KX II and should not be within the range of IP
addresses that are blocked; you will not have access to the
Dominion KX II local port.
To use IP access control:
1. Open the IP Access Control page by selecting Security > IP Access
Control. The IP Access Control page opens.
2. Select the Enable IP Access Control checkbox to enable IP access
control and the remaining fields on the page.
3. Choose the Default Policy. This is the action taken for IP addresses
that are not within the ranges you specify.
 Accept - IP addresses are allowed access to the Dominion KX II
device.
 Drop - IP addresses are denied access to the Dominion KX II
device.
Note: Both IPv4 and IPv6 addresses are supported.
To add (append) rules:
1. Type the IP address and subnet mask in the IPv4/Mask or
IPv6/Prefix Length field.
Note: The IP address should be entered using CIDR (Classless
Inter-Domain Routing notation, in which the first 24 bits are used as
a network address).
2. Choose the Policy from the drop-down list.
3. Click Append. The rule is added to the bottom of the rules list.
To insert a rule:
1. Type a rule #. A rule # is required when using the Insert command.