SNMP/HTTP Access Control User Manual
Contents
1. 1 10 17 51 1234 Read Write 2 5678 Mot Access Y 0000 Not Access 4 0000 Mot Access segment 5 0 0 0 0 x Mot Access 6 0000 Not Access T 0000 Mot Access 8 0000 Mot Access Set Value 1 2 1 2 USHA 6 x In USHA 6 x this field can set IPv4 and IPv6 address If you want to set a network segment you can set 10 1 7 0 24 that mean the client with the IP address within the range from 10 1 7 0 to 10 1 7 255 If used IPv6 you can set 2001 d08 48 that mean the client with the IP address within the range from 2001 db8 0 0 0 0 0 0 to 2001 db8 0 ffff ffff ffff ffff fFfF SNMP HTTP Access Control Host IP Firewall Table NMS IP Address Community Access Type 1 1234 Read Write 2 55 8 Read Write 3 1111 NotAccess 4 Mot Access 5 Mot Access 6 Not Access 7 NotAccess 8 NotAccess Set Value Ingrasys 1 2 2 Community This field used to define a password When used this password login host will according access type connect to USHA web page This field default value is public If you do not set community and access type set Not Access or Read only this host will not be able to login If you cant login due to this situation you can use telnet or hyper terminal to reset this item 1 2 3 Access Type This field used to define this IP address access type There have Not Access Read Only and Read Write three types 1 2 3 1 Not Access Wh2. Read Write 4 Mot Access 5 Mot Access 6 i Not Access T Mot Access 8 El Mot Access set Value NMS IP Address wn Segment must setting at the last one When host try to connect to USHA system will compare host IP address and the first condition If the first condition is match will not to compare the next condition So if segment setting at the first index it will block 10 1 7 51 login in to USHA Ingrasys Appendix A Behavior flow chart e HTTP Security is enabled Matched Check username and password Read Write Become NotAccess Administr ator Not Match Matched HTTP Security Enabled Access Control Flowchart Ingrasys e HTTP Security is disabled Http Security Disabled Not Access Read Write Only Read Full Control Surf the Web page i No t Access Read Only Read Write Become 1 Administrator Access Check Control username amp username password password 2 Matched Matched Console FullControl 4 username password Not Match Not Match Only Read ingrasys Appendix B What is IP CIDR Classless Inter Domain Routing CIDR is a method for allocating IP addresses and routing Internet Protocol packets CIDR encompasses several concepts It is based on the VLSM technique with effective qualities of specifying arbitrary length prefixes CIDR notation is syntax of specifying IP addresses and t
3. 5 192 0 0 0 0 0 2 192 0 0 0 a b c d 28 255 255 255 240 a b c 0 20 255 255 240 0 a b 0 0 12 255 240 0 0 0 0 0 4 240 0 0 0 Gnarasy a b c d 25 255 255 255 128 a b c 0 17 255 255 128 0 a b 0 0 9 255 128 0 0 a 0 0 0 1 128 0 0 0
4. Access Control Table USHA Configuration UPS Parameters Access Control Table Domain User Table Trap Receiver Table SHMPu3 USM Table Reset Configuration To Default Restart USHA UPS Pass Through Exit Please Enter Your Choice gt 3 11 16 1 7 51 21 1 1 5 87 31 4 5 1 6 1 1 8 1 Hotccess Read Write MHotAccess Hotf ccess MHotAccess HotAccess Hotf ccess MotAccess E EEEE COMMANDS 1 Detail Uiew the details of a table entry 2 Modifu Modifu entru of table 3 Reset Reset an entry to default from table H Return to previous menu Please Enter Your Choice intry Humber 111 16 1 7 51 2 L3 1 41 5 1 6 1 D 1 8 1 Motficcess Motficcess MotAHccess Motf ccess HotAccess Motficcess Motf ccess Motficcess X RR X X KDE COMMANDS i Detail Uieu the details of a table entry 2 Modify Modify an entry of table 3 Reset Heset an entry to default from table H Return to previous menu Ingrasys 2 How to filter According to different configuration this function can filter one host or a network segment You also can set different access type at one host This function will effect for SNMP and HTTP 2 1 Host If you want to management one host you can set as below table You can set two passwords correspond to different access type If you enter community Read Write password you can set and read value if you enter Community Read Only
5. BOOTP DHCP Control 5 IFIPA AHTTIP Upgrade Control 6 PING Echo Control Y Telnet Control 9 SNMP Control A SHIP Port B SSH Control puhlic Disabled Enabled Enabled H Return to previous menu Please Enter Your Choice gt B HTTP Control Enabled HTTP Port 8H HTTP Security Control Enabled UPnP Control Disabled HTTP Authentication Both Return to previous menu HTTP Control Enabled HTTP Port 8H Security Control Disabled UPnP Control Disabled HTTP lt s gt Authentication Both Return to previous menu Please Enter Your Choice gt 3 Enable Disable Security Disabled 1 Enable 2 Disable Please Enter Your Choice gt 1 4 UPnP Control 5 HITP lt s gt gt Authentication Return to previous menu Ingrasys 1 2 IP Firewall Table SNMP HTTP Access Control IP Firewall Table 1 2 Index NMS IP Address Access Type 1 Mot Access 2 s 4 Not Access 5 E Not Access 6 Not Access Not Access 8 Not Access Set Value 1 2 1 NMS IP Address This field used to set an IP address or a network segment You can management this IP or segment according to access type 1 2 1 1 USHA 5 x In USHA 5 x this field only can set IPv4 address If you want to set a network segment you can set 10 1 7 255 that mean the client with the IP address within the range from 10 1 7 0 to 10 1 7 255 Host SNMP HTTP Access Control NMS IP Address
6. Not Access and HTTP security is disabled host still can access to USHA via HTTP f UPS Monitor Windows Internet Explorer C3 J El monos o Aall 8 el File Edit Tools Help dir Favorites Hotmail T urs Monitor ta E 1 Safety Tools e Ei Control MENU Comprehensive UPS Status On Line Current Utility Line Voltage Volt 219 2 d Selection Output Voltage Volt 220 0 Output Load 6 20 a Battery Capacity Remaining 100 Current Battery Voltage Volt 18 1 UPS Temperature C 32 5 Input Frequency Hertz 59 6 PS Next Off Time hh mm dd mm yyyy PS Next On Time hh mm dd mm yyyy c lt USHA System Date dd mm yyyy 24 05 2012 USHA System Time hh mm ss 17 17 21 USHA Up Time days hh mm ss Oday 00 01 05 Done Internet vi 100 7 ingrasys 1 1 2 HTTP Security enabled HTTP Control HTIP Port Enabled aH Enabled Disabled Local User HTTP Security Control UPnP Control HTTP s gt Authentication Return to previous menu If HTTP security is enabled will popup login windows immediately when host connect to USHA We suggest make HTTP security is enabled and configuration access control function and then you can have higher security Dr http 10 1 5 2 dip Favorites 5 FreeHotmal z J Connecting amp 1 Safety To
7. SNMP HTTP Access Control User Manual 1 Security Control Configuration 0 0 0 eee eccsccesseeeeseeeseseeeeseeesseeesseeeseteeeseeeens 3 ATI 3 1 1 4 Security 2 2000 000 3 1 1 2 Security 4 1 1 5 egi P Security 20 442 5 22 7 1 2 1 NMS IP Address 2 2 7 12 2 9 2 PICCCSS 9 1 3 Reset Access Control 11 2 WOW IO TIGE 12 Ds PIS 12 2 2 Network segment E MB eese 13 2 3 Allow one IP address to login in segment 14 Appendix A Behavior flow chart 15 Appendix B What is 17 1 Security Control Configuration 1 1 HTTP Security 1 1 1 HTTP Security disabled Control HTTP Port Enabled Disabled Disabled Local User HTTP Security Control UPnP Control HTTP s gt Authentication Return to previous menu Default is HTTP security disabled When HTTP security is disabled the login windows would not popup immediately Host can connect to USHA directly If you set access type is
8. en access type is Not Access and HTTP Security Control is enabled host would not access web page When access type is Not Access and HTTP Security Control is disabled host can access web page but read only Blank Page Windows Internet Explorer DES htpi10 1 5 2 sllslixi El Ps d Favorites 5s 2 Free Hotmail 4 Connecting B 1 de Pager Safety Tools nnect to 10 1 5 2 The server 10 1 5 2 at UPS SNMP HTTP Agent requires username an d password in is server is requesting that your username and in an insecure manner basic authentication onnection 4 C Remember my passwor d Waiting For http 10 1 5 2 CIT Internet ay 100 1 2 3 2 Read Only Host can access web page but read only Ingrasys UPS Monitor Windows Internet Explorer GS le http 10 1 5 2 Ba 9 lt bE File Edit Favorites View Tools Help Vy Favorites 3 El suggested Sites Free Hotmail Web Slice Gallery UPS Monitor Control MENU EMgg UPS Monitoring e UPS Management B USHA Management Date and Time A USHA Configuration A USHA Control A USHA Upgrade A Authentication Confi SNMP HTTP Acces SNMP TRAP Recei A WakeOnLAN Target Homepage Refresh A Email Notification E External Links Setu aga UPS History ag Language Selection Waiting For h
9. heir associated routing prefix It appends to the address a slash character and the decimal number of leading bits of the routing prefix e g 192 0 2 0 24 for IPv4 and 2001 db8 32 for IPv6 CIDR blocks An IP address is part of a CIDR block and is said to match the CIDR prefix if the initial n bits of the address and the CIDR prefix are the same The length of an IPv4 address is 32 bits an n bit CIDR prefix leaves 32 n bits unmatched meaning that 2327 IPv4 addresses match a given n bit CIDR prefix For example the CIDR address 10 1 7 64 26 indicates a block of 64 IP addresses So this segment range is 10 1 7 64 to 10 1 7 127 If we want to know 10 1 7 100 and 10 1 7 166 is the same network segment We can convert the IP to binary Because prefix based 26 bits are different so 10 1 7 100 and 10 1 7 166 are in different block 10 1 7 64 001010 00000001 00000111 01000000 7 0 Same block 10 1 7 64 26 10 1 7 100 00001010 00000001 0000011 O1 o0100 10 1 7 128 26 4 CIDR con leer a b c d 32 255 255 0 0 255 0 0 0 a b c d 31 255 254 0 0 254 0 0 0 a b c d 30 255 252 0 0 252 0 0 0 a b c d 27 255 255 255 224 a b c 0 19 255 255 224 0 a b 0 0 11 255 224 0 0 0 0 0 3 224 0 0 0 a b c d 29 255 255 255 248 a b c 0 21 255 255 248 0 a b 0 0 13 255 248 0 0 0 0 0 5 248 0 0 0 a b c d 26 255 255 255 192 a b c 0 18 255 255 192 0 a b 0 0 10 25
10. os Connect to 10 1 5 2 server 10 1 5 2 at UPS SNMPJHTTP Agent requires username and password Warning This server is requesting that your username and password be sent in an insecure manner basic authentication without a secure connection User name v Password Remember my password Waiting For http 10 1 5 2 Internet 3 100 injrasys 1 1 3 HTTP Security Control 1 Launch hyper terminal or telnet connect to USHA then enter password 2 Go to USHA Configuration 1 USHA Configuration 2 UPS Parameters 3 Access Control Table 4 Domain User Table 5 Trap Receiver Table 6 SNMPu3 USM Table Y Reset Configuration To Default 8 Restart USHA 9 UPS Pass Through H Exit lease Enter Your Choice gt 1 Sustem Group Control Group Parameter Group Email Group Web Authentication Group Ping Group Return to previous menu ce Ll 2 Gontrol Group 4 Email Group 5 Web Authentication Group 6 Ping Group H Return to previous menu Please Enter Your Choice HTTP Login Username Community Read Only Community Read Write BOOTP DHGP Control TFTF HTTF Upgrade Control PING Echo Control Telnet Control HTTP Control SNMP Control SMTP Port SSH Control Return to previous menu public Disabled Enabled Enabled ingrasys 4 Goto HTTP Control i HTTP Login Username 2 Community Read Only 3 Community Read Write 4
11. password you just read but not set value If you login by read only password and you want to set value you need login again and enter read write password SNMP HTTP Access Control IP Firewall Table NMS IP Address 1 10 1 5 100 1234 Read Write 2 10 1 5 100 56 8 Head Only lt a Not Access E Not Access 5 di Not Access 6 Mot Access i Not Access 8 j Not Access Set Value Ingrasys 2 2 Network segment If you want allow or deny a segment you can set as below This setting can allow all IP to login and set value in 10 X X X segment and allow all IP to login in 172 16 X X segment All IP in 192 168 1 X will be blocked to login SNMP HTTP Access Control IP Firewall Table NMS IP Address 1 10 0 0 0 8 1234 Read Write 2 172 16 0 0 16 55 8 Read Only d 192 168 1 0 24 9012 Not Access 4 Mot Access 5 Not Access 6 Mot Access T m Mot Access 8 Mot Access If you want to set a segment you can use IP CIDR format to represent IPv4 or IPv6 segment For example 192 168 0 0 16 IPv4 network addresses range from 192 168 0 0 to 192 168 255 255 Ingrasys 2 3 Allow one IP address to login in segment If you just want allow one IP address to login in segment you can set as below This setting can block all IP to login in 10 1 7 X segment except 10 1 7 51 SNMP HTTP Access Control IP Firewall Table 1 10 1 7 51 Head Write 2 10 1 7 0 24 Not Access S
12. ttp 10 1 5 2 Page PageElink html 1 2 3 3 External Links index Screen Text Link Address Status Connect to 10 1 5 2 Disabled 77 I Disabled I Disabled I Disabled The server 10 1 5 2 at UPS SNMP HTTP Agent requires username and password Become Administrator Warning This server is requesting that your username and password be sent in an insecure manner basic authentication without a secure connection Remember my password User name Ca Password cm Internet 7 Read Write Host can access web page and configuration all parameter 100 UPS Monitor Windows Internet Explorer P mcam x e rn http 10 1 5 2 ADMIN ENG index html RIS gt lt ej File Edit Favorites Tools Help 3 Favorites g Suggested Sites Free Hotmail PE Web Slice Gallery UPS Monitor amp Control MENU HE UPS Monitoring se UPS Management Eg USHA Management UPS History Af Language Selection Done 1 v Pager Safety Tools e External Links 1 Disabled 2 Disabled 3 Disabled 4 Disabled D Internet 4 100 1 3 Reset Access Control Table 1 Launch hyper terminal or telnet connect to USHA then enter passvvord 2 Go to
Download Pdf Manuals
Related Search