IPv6 Configuration Guide K/KA/KB.15.15

of FFFF is 1111 1111 1111 1111, where 1 requires the same "on" or "off" setting in an authorized
address.)
Example 31 Configuring single station access
As shown in Table 2 (page 56), if you configure a link-local IPv6 address of
FE80::202:B3FF:FE1E:8329 with a mask of FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF, only a station
having an IPv6 address of FE80::202:B3FF:FE1E:8329 has management access to the switch.
Table 2 Mask for configuring a single authorized IPv6 manager station
Manager- or operator-level
access
8th
block
7th
block
6th
block
5th
block
4th
block
3rd
block
2nd
block
1st
block
The “FFFF” in each
hexadecimal block of the mask
specifies that only the exact
value of each bit in the
corresponding block of the IPv6
address is allowed. This mask
allows management access
only to a station having an IPv6
address of
FE80::202:B3FF:FE1E:8329.
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFIPv6 mask
8329FE1EB3FF202000000000000FE80
IPv6
address
Configuring multiple station access
To authorize multiple stations to access the switch without having to re–enter the ipv6
authorized-managers command for each station, carefully select the IPv6 address of an
authorized IPv6 manager and an associated mask to authorize a range of IPv6 addresses.
For more information on this topic, see “About configuring multiple station access” (page 63).
Viewing an authorized IP managers configuration
Use the show ipv6 authorized-managers command to list the IPv6 stations authorized to
access the switch.
56 IPv6 Management Security Features