Single station access configuration
To authorize only one IPv6-based station for access to the switch:
Enter the IPv6 address of the station and set the mask to FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
If you do not enter a value for the
ipv6-mask parameter when you configure an authorized IPv6 address, the switch automatically uses
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default mask.
If you have 10 or fewer management and/or operator stations for which you want to authorize access to the switch, it might be more efficient to configure them by entering each IPv6 address with the default mask in a separate
ipv6 authorized-managers command.
When used in a mask, "FFFF" specifies that each bit in the corresponding 16-bit (hexadecimal) block of an authorized station's IPv6 address must be identical to the same "on" or "off" setting in the IPv6 address entered in the
ipv6 authorized-managers command. (The binary equivalent of
FFFF is 1111 1111 1111 1111, where1 requires the same "on" or "off" setting in an authorized address.)
Configuring single station access
As shown below, if you configure a link-local IPv6 address of FE80::202:B3FF:FE1E:8329 with a mask of FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF, only a station having an IPv6 address of FE80::202:B3FF:FE1E:8329 has management access to the switch.
1st block |
2nd block |
3rd block |
4th block |
5th block |
6th block |
7th block |
8th block |
Manager- or operator-level access |
|
|---|---|---|---|---|---|---|---|---|---|
IPv6 mask |
FFFF |
FFFF |
FFFF |
FFFF |
FFFF |
FFFF |
FFFF |
FFFF |
The “FFFF” in each hexadecimal block of the mask specifies that only the exact value of each bit in the corresponding block of the IPv6 address is allowed. This mask allows management access only to a station having an IPv6 address of FE80::202:B3FF:FE1E:8329. |
IPv6 address |
FE80 |
0000 |
0000 |
0000 |
202 |
B3FF |
FE1E |
8329 |