Western Telematic CMS-16 Switch User Manual


 
Example 1: Deny access to all hosts except 192.1.1.5:
Security Mask #1: 255.255.255.255 Mask #1 Action: Deny
Security Mask #2: 192.1.1.5 Mask #2 Action: Permit
Since 255 is a wild card, Mask #1 blocks all IP Addresses. Mask #2 then specifically grants
access to 192.1.1.5 only.
Example 2: Allow access only by addresses that begin with 192:
Security Mask #1: 255.255.255.255 Mask #1 Action: Deny
Security Mask #2: 192.255.255.255 Mask #2 Action: Permit
Since 255 is a wild card, Mask #1 blocks all IP addresses Mask #2 then grants access to all
addresses that begin with 192.
Example 3: Allow access only by addresses that begin with 192, deny access to 192.1.1.5.
Security Mask #1: 255.255.255.255 Mask #1 Action: Deny
Security Mask #2: 192.255.255.255 Mask #2 Action: Permit
Security Mask #3: 192.1.1.5 Mask #3 Action: Deny
Since 255 is a wild card, Mask #1 blocks all IP addresses. Mask #2 then grants access to all
addresses that begin with 192. Finally, Mask #3 specifically blocks access by 192.1.1.5.
Note:
Mask #5 has priority over the four other masks. If Mask #5 is set to deny access
by “255.255.255.255” (all wild cards), all IP addresses will be blocked, and you
will not be able to access the CMS Command Mode via network. Access will
only be allowed via the Console Port or Modem Port.
When using the wild card address “255.255.255.255” to block access by all IP
addresses, make certain that at least one higher priority mask permits access by
your IP address.
5-15
CMS Series - Console Management Switches, User's Guide Configuration