NEC EXPRESSSCOPE Engine 3 User Manual page 48

The properties which the access limitation target contains are as follows:
• oemnec_allowedaccessips
This specifies the IP addresses that permit access to the management LAN. Divide IP
address by "," (ex. 192.168.1.2, 192.168.1.2, ...) or use asterisk (ex. 192.168.1.*), if
you would like to set multiple permit IP address. Set "0.0.0.0" or no <value> (*) to this
property, if you would like to clear the value of this property, It becomes effective at
next login if you change it. The value of this property is cleared if
oemnec_deniedaccessips is set.
* "Set no <value>" means to input [Enter] key next to "=" key like following example.
set oemnec_allowedaccessips=[Enter]
• oemnec_deniedaccessips
This specifies the IP addresses that reject access to the management LAN. Divide IP
address by "," (ex. 192.168.1.2, 192.168.1.2, ...) or use asterisk (ex. 192.168.1.*), if
you would like to set multiple reject IP address. Set "0.0.0.0" or no <value> (*) to this
property, if you would like to clear the value of this property, It becomes effective at
next login if you change it. The value of this property is cleared if
oemnec_allowedaccessips is set.
* "Set no <value>" means to input [Enter] key next to "=" key like following example.
set oemnec_deniedaccessips=[Enter]
For example, enter the following command when you would like to permit access from
192.168.1.* and 192.168.3.4.
set oemnec_allowedaccessips=192.168.1.*,192.168.3.4
Clear all oemnec_allowedaccessips/oemnec_deniedaccessips values,
if you would like NOT to restrict access by IP address for the
management LAN.
The communication with ESMPRO/ServerManager is also restricted by
this configuration. Permit the IP address used by the communication
with ESMPRO/ServerManager if you would like to use ESMPRO/
ServerManager.
To restrict access by IP address used by logging in to the BMC's SSH
server is impossible. So, if you would like to restrict the IP address,
the following procedures are necessary.
At first, log out of current BMC's SSH session using the IP address
and log in to the BMC's SSH server once again by using other IP
address permitted by oemnec_allowedaccessips /
oemnec_deniedaccessips (Access Permission Address)
Configuration. Then change the configuration for NOT permitting the
IP address which is previously used by the BMC's SSH server.
You can set the access restriction settings to 222 characters. The
indication by the show command is displayed to 255 characters. The
access restriction settings from Web browser are possible to 255
characters.
- -
48