Epiphan Pearl Mini Live Video Production System with 512GB SSD (NA/JP) - Manual (Page 163)

Pearl Mini User Guide Restrict viewers by IP address
Example Description
broadcast.
For example imagine your system is accessible on your local area network
(LAN) and you want to allow any computer on the LAN can access the stream
except your publicly-accessible boardroom (with IP address 192.168.1.211).
You can use the following deny list (leave the allow list empty) to permit all
computers except the boardroom computer:
Deny: 192.168.1.211
As with allow lists, your deny list can specify a range of IP addresses, and can
specify multiple ranges or distinct IP addresses in a comma-separated list.
Deny list with a range of IP
addresses
Consider a situation where you want every computer on the network to access
the broadcast, with the exception of the CEO’s desktop, laptop and tablet
computers. Additionally, boardroom computers should not be permitted with
the exception of the cafeteria computer (IP address 192.168.1.222).
The deny list is an "exception" list for the allow list. So to craft the rule described
above we need to allow all the computers in the local subnet, then deny specific
sub-ranges including two groups of boardroom computers ensuring the
cafeteria computer's IP address is not in the deny list:
Allow: 192.168.1.1-192.168.1.250
Deny: 192.168.1.200-192.168.1.221, 192.168.1.223-192.168.1.250,
192.168.1.50-192.168.1.51, 192.168.1.75
152