User Manual Part 2

User’s Guide Version 1.0
Edit – click to edit the default access status [allow/deny].
New – click to create new access control rule for specific network to specific service(s) [all/
/ssh/telnet/snmp].
To configure the access control, click the edit button and specify the network address and select
services to allow/deny:
Figure 179 –Modify Access Control
Service – select services that access you need to control [all/ssh/telnet/snmp].
Telnet service must be separately enabled under system | access | telnet to
enable the telnet deamon on the controller.
BW1330 will first match the allow rules, then match the deny rules. In another
words, allow rules has the higher priority than the deny rules.
The default access rule has the lowest priority to other rules whenever its status is
allow or deny.
Network Address – specify the network or host address with netmask in bit format separated by a
forward slash.
The /N stands for the number of bits that are in the network address. There are 32 bits, so we have
32-N bits left that are part of the network. The first N bits of x.x.x.x correspond to x.0.0.0 when N=8,
our network address, and the netmask is 255.0.0.0 (when N=8).
bits netmask
/32
255.255.255.255
/31 255.255.255.252
/30 255.255.255.248
… …
/26 255.255.255.192
/25 255.255.255.128
/24 255.255.255.0
… …
/16 255.255.0.0
… …
/8 255.0.0.0
… …
/0 0.0.0.0
Access – select the access policy: [allow/deny].
Up to 255 different access control rules can be set.
BROWAN Page
103