beautypg.com

Allow list with a range of ip addresses, Deny list with distinct ip addresses – Epiphan Pearl User Manual

Page 196

background image

Pearl User Guide

IP Restriction Examples

Allow List with a Range of IP Addresses

Sometimes you’ll want a range of computer IP addresses to connect to your system. This may happen when
you have one range of IP addresses assigned to desktop computers (i.e. in the range 192.168.1.1 to
192.168.1.100) and another range assigned to boardroom computers (i.e. the range 192.168.1.200 to
192.168.1.250). If you only want the boardroom computers to connect to broadcasts from the system you
can specify the range of boardroom IP addresses rather than needing to type in each individual address. The
allow list looks as follows:

Allow: 192.168.1.200-192.168.1.250

Note that we could have specified two of the IP addresses in the previous example as a range.

Allow List with a Range of IP Addresses and One or More Specific
IP Addresses

Putting the first two examples together, we want to permit access to IP addresses in the range of boardroom
computers (192.168.1.200-192.168.1.250) and also want to add the desktop, laptop and tablet computers
of the CEO (IP addresses 192.168.1.50, 192.168.1.51, and 192.168.1.75, respectively). Note the first two IP
addresses are consecutive, so they can be added as a second range. Add these IP addresses to the list as
follows:

Allow: 192.168.1.200-192.168.1.250, 192.168.1.50-192.168.1.51, 192.168.1.75

Your list can have multiple ranges and multiple distinct IP addresses, provided they are separated by commas.

Deny List with Distinct IP Addresses

Another simple allow/deny list is to use the list of known IP addresses to list specific denied IP addresses. All
other addresses are allowed access to the broadcast.

For example imagine your system is accessible on your local area network (LAN) and you want to allow any
computer on the LAN can access the stream except your publicly-accessible boardroom (with IP address
192.168.1.211). You can use the following deny list (leave the allow list empty) to permit all computers except
the boardroom computer:

Deny: 192.168.1.211

As with Allow lists, your deny list can specify a range of IP addresses, and can specify multiple ranges or
distinct IP addresses in a comma-separated list.

183