IP Access Control

Using IP access control, you can control access to your Dominion KSX. By setting a global Access Control List (ACL) you are by ensuring that your device does not respond to packets being sent from disallowed IP addresses.

Important: IP address 127.0.0.1 is used by the Dominion KSX local port. When creating an IP Access Control list, if 127.0.0.1 is within the range of IP addresses that are blocked, you will not have access to the Dominion KSX local port.

To use IP access control:

1. Open the IP Access Control page by selecting Security > IP Access Control. The IP Access Control page opens.
2. Select the Enable IP Access Control checkbox to enable IP access control and the remaining fields on the page.
3. Choose the Default Policy. This is the action taken for IP addresses that are not within the ranges you specify.
   • Accept - IP addresses are allowed access to the Dominion KSX device.
   • Drop - IP addresses are denied access to the Dominion KSX device.

To add (append) rules:

1. Type the IP address and subnet mask in the IP/Mask field.

   Note: The IP address should be entered using CIDR (Classless Inter-Domain Routing notation, CIDR notation consists of two parts. The most significant part is the network address, which identifies a whole network or subnet. The least significant portion is the identifier. The prefix length after the / identifies the length of the subnet mask.

2. Choose the Policy from the drop-down list.
3. Click Append. The rule is added to the bottom of the rules list.

To insert a rule:

1. Type a rule number (#). A rule number is required when using the Insert command.
2. Type the IP address and subnet mask in the IP/Mask field.
3. Choose the Policy from the drop-down list.
4. Click Insert. If the rule number you just typed equals an existing rule number, the new rule is placed ahead of the existing rule and all rules are moved down in the list.

Tip: Rule numbers allow you to have more control over the order in which the rules are created.

To replace a rule:

1. Specify the rule number you want to replace.
2. Type the IP address and subnet mask in the IP/Mask field.
3. Choose the Policy from the drop-down list.
4. Click Replace. Your new rule replaces the original rule with the same rule number.

To delete a rule:

1. Specify the rule number you want to delete.
2. Click Delete.
3. You are prompted to confirm the deletion. Click OK.