Dell IDRAC6 Betriebsanweisung PDF herunterladen (Seite 359)

Configuring Security Features 359

IP Filtering (IpRange)

IP address filtering (or IP Range Checking) allows iDRAC6 access only

from clients or management workstations whose IP addresses are within a

user-specific range. All other logins are denied.

IP filtering compares the IP address of an incoming login to the IP address

range that is specified in the following cfgRacTuning properties:

• cfgRacTuneIpRangeAddr

• cfgRacTuneIpRangeMask

The cfgRacTuneIpRangeMask property is applied to both the incoming

IP address and to the cfgRacTuneIpRangeAddr properties. If the results of

both properties are identical, the incoming login request is allowed to access

the iDRAC6. Logins from IP addresses outside this range receive an error.

The login proceeds if the following expression equals zero:

cfgRacTuneIpRangeMask & (<incoming_IP_address> ^

cfgRacTuneIpRangeAddr)

where & is the bitwise AND of the quantities and ^ is the bitwise

exclusive-OR.

See the

RACADM Command Line Reference Guide for iDRAC6 and CMC

available on the Dell Support website at dell.com/support/manuals for a

complete list of cfgRacTuning properties.

Table 22-11. IP Address Filtering (IpRange) Properties

Property Description

cfgRacTuneIpRangeEnable Enables the IP range checking feature.

cfgRacTuneIpRangeAddr Determines the acceptable IP address bit pattern,

depending on the 1’s in the subnet mask.

This property is bitwise AND’d with

cfgRacTuneIpRangeMask to determine the upper

portion of the allowed IP address. Any IP address that

contains this bit pattern in its upper bits is allowed to

establish an iDRAC6 session. Logins from IP addresses

that are outside this range will fail. The default values

in each property allow an address range from

192.168.1.0 to 192.168.1.255 to establish an iDRAC6

session.

1 2 ... 354 355 356 357 358 359 360 361 362 363 364 ... 371 372

Keine Kommentare

Dell IDRAC6 Betriebsanweisung Seite 359