User`s guide

5-43
Basic Configuration
5.9.3.1. AddingIPAddressestotheAllowandDenyLists
To add an IP Address to the Allow or Deny list, and begin configuring the IP Security
feature, proceed as follows.
Notes:
• Both the Allow and Deny list can include Linux operators, wild cards, and
net/mask pairs.
• In some cases, it is not necessary to enter all four "digits" of the IP Address.
For example, if you wish to allow access to all IP addresses that begin with
"192," then you would only need to enter "192."
• The IP Security Configuration menu is only available when you have
accessed command mode using an account that permits Administrator level
commands.
• In order to use domain names in the Allow List and/or Deny List, you must
first define IP address(es) for the desired Domain Name Server(s) as
described in Section 5.9.5.
1. Access the IP Security Configuration Menu.
a) TextInterface: Type /N [Enter] to define addresses in IPv4 format, or type
/N6 and press [Enter] to define addresses in IPv6 format. The Network
Configuration Menu will be displayed. From the Network Configuration Menu,
type 5 [Enter] to display the IP Security Menu.
b) WebBrowserInterface: Place the cursor over the "Network Configuration"
link on the left hand side of the screen. When the fly-out menu appears, click
on the "IP Security" Link to display the IP Security Menu. The IP Security
menu in the Web Browser Interface will accept addresses in either IPv4 or IPv6
format.
2. AllowList: Enter the IP Address(es) for the clients that you wish to allow. Note that
if an IP Address is found in the Allow list, the client will be allowed to connect, and
the VMR/NPS will not check the Deny list.
a) TextInterface: Note the number for the first empty field in the Allow list, then
type that number at the command prompt, press [Enter], and then follow the
instructions in the resulting submenu.
b) WebBrowserInterface: Place the cursor in the first empty field in the
parameters menu, then key in the desired IP Address, operators, wild cards,
and/or net/mask pairs.
3. DenyList: Enter the IP Address(es) for the clients that you wish to deny. Note that
if the client’s IP Address is not found in the Deny List, that client will be allowed to
connect. Use the same procedure for entering IP Addresses described in Step 2
above.