beautypg.com

Ip restriction examples – Epiphan Pearl User Manual

Page 46

background image

Pearl User Guide

User administration

 7. Type denied IP addresses or address ranges in the Deny IP’s field. Separate addresses with a comma.

 8. Click Apply.

If a user attempts to connect to the stream from a disallowed IP address, access is denied. If connecting by
internet browser, the message "IP address rejected." is displayed.

The following table describes the applicable fields.

Table 7

IP Based Restriction Fields

Label

Description/Options

Allow IP's

Enter individual IP Addresses or IP Address ranges, separated by commas. To specify a
range, use a hyphen (-). Optional spaces improve readability.

Users connecting from addresses in this list are permitted to view broadcasts from the
system, provided their IP address is not in the Deny IP’s list.

To allow all (except IP addresses in the deny list, if any), leave the field blank.

You can use the Allow list by itself, or in conjunction with the Deny IP’s list as an exception
to a rule in the allow list.

Deny IP's

Enter individual IP Addresses or IP Address ranges, separated by commas. To specify a
range, use a hyphen (-). Optional spaces improve readability.

Users connecting from addresses in this list are not allowed to view broadcasts from the
system, unless their IP address is in the Allow IP’s list. If a specific IP address is in both lists,
access to the stream is denied.

You can use the Deny list by itself, or in conjunction with the Allow IP’s list as an exception
to a rule in the allow list.

IP Restriction Examples

Allow List with Distinct IP Addresses

The simplest allow/deny list is to use the list of known IP addresses to craft a list of allowed IP addresses. All
other addresses are denied access to the broadcast.

For example if your system is accessible on your local area network (LAN) and you want to make sure only the
CEO’s specific desktop, laptop and tablet computers (with IP Addresses 192.168.1.50, 192.168.1.51, and
192.165.1.75, respectively) can connect to the broadcast, construct the following allow list:

Allow: 192.168.1.50, 192.168.1.51, 192.168.1.75

33