KB.15.15

About using a mask to configure authorized management stations

The ipv6-mask parameter controls how the switch uses an IPv6 address to determine the IPv6

addresses of authorized manager stations on your network. For example, you can specify a mask

that authorizes:

• Single station access

• Multiple station access

NOTE: Mask configuration is a method for determining the valid IPv6 addresses that are authorized

for management access to the switch. In the authorized IP managers feature, the mask serves a

different purpose than an IPv6 subnet mask and is applied in a different manner.

About configuring multiple station access

As shown in Table 4 (page 63), if a bit in any of the 4-bit binary representations of a hexadecimal

value in a mask is "on" (set to 1), the corresponding bit in the IPv6 address of an authorized station

must match the "on" or "off" setting of the same bit in the IPv6 address you enter with the ipv6

authorized-managers command.

Conversely, in a mask, a "0" binary bit means that either the "on" or "off" setting of the

corresponding IPv6 bit in an authorized address is valid and does not have to match the setting

of the same bit in the specified IPv6 address.

Table 4 (page 63) shows the binary expressions represented by individual hexadecimal values in

an ipv6-mask parameter.

Table 4 Hexadecimal mask values and binary equivalents

Binary equivalentHexadecimal

value in an IPv6

mask

00000

00011

00102

00113

01004

01015

01106

01117

10008

10019

1010A

1011B

1100C

1101D

1110E

1111F

About using a mask to configure authorized management stations 63