set accesscontrol

Purpose

Used to specify information that limits network access to this device, or display current access-control settings. For the Digi Connect WAN, the access-control settings also limit routing of packets through the device.

Required permissions

For Digi products with two or more users permissions must be set to set permissions s‑accesscontrol=read to display the access control settings, or set permissions s‑accesscontrol=rw to display and configure access control settings.

Syntax

Configure access control settings

set accesscontrol [enabled={on|off}] 
[autoaddsubnets={on|off}]
[addrip[1-64]=ipaddress]
[subnip[1-32]=ipaddress]
[subnmask[1-32]=mask]

Display current access-control settings

set accesscontrol 

Options

enabled={on|off}

Used to enable access control.

Take care when using this option, as improper settings can render the device inaccessible from the network. Specifically, setting the enabled=on without specifying any addrip option values disables all access.

on

Enables access control.

off

Disables access control.

autoaddsubnets={on|off}

Used to enable the automatic adding of subnets and subnet masks to this table. The IP subnets for the device server's network interfaces (Ethernet and PPP), may be automatically added to the table. This permits access by all IP sources on the device server's networks, without having to explicitly identify either the subnet IP addresses (and netmasks) or individual IP addresses.

on

Enables automatic adding of subnets and subnet masks.

off

Disables automatic adding of subnets and subnet masks.

addrip[1-64]=ipaddress

Up to 64 individual IP addresses that are allowed to access this device.

subnip[1-32]=ipaddress

Up to 32 subnet IP addresses. Any IP address in these subnets will be allowed to access this device server.

subnmask[1-32]=mask

A subnet mask associated with one of the 32 subnet IP addresses.

Examples

Set access control settings

#> set accesscontrol enabled=on addrip1=143.191.1.228

Set access control for a specific subnet

This command allows any IP address in the subnet 143.191.2.0 (netmask 255.255.255.0) to access this Digi device:

#> set accesscontrol enabled=on subnip1=143.191.2.0 subnmask1=255.255.255.0

Display access control settings

#> set accesscontrol

See also