Single station access configuration

To authorize only one IPv6-based station for access to the switch:

Enter the IPv6 address of the station and set the mask to FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.

NOTE:

If you do not enter a value for the ipv6-mask parameter when you configure an authorized IPv6 address, the switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default mask.

If you have 10 or fewer management and/or operator stations for which you want to authorize access to the switch, it might be more efficient to configure them by entering each IPv6 address with the default mask in a separate ipv6 authorized-managers command.

When used in a mask, "FFFF" specifies that each bit in the corresponding 16-bit (hexadecimal) block of an authorized station's IPv6 address must be identical to the same "on" or "off" setting in the IPv6 address entered in the ipv6 authorized-managers command. (The binary equivalent of FFFF is 1111 1111 1111 1111, where1 requires the same "on" or "off" setting in an authorized address.)

Configuring single station access

As shown below, if you configure a link-local IPv6 address of FE80::202:B3FF:FE1E:8329 with a mask of FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF, only a station having an IPv6 address of FE80::202:B3FF:FE1E:8329 has management access to the switch.

Mask for configuring a single authorized IPv6 manager station
 

1st block

2nd block

3rd block

4th block

5th block

6th block

7th block

8th block

Manager- or operator-level access

IPv6 mask

FFFF

FFFF

FFFF

FFFF

FFFF

FFFF

FFFF

FFFF

The “FFFF” in each hexadecimal block of the mask specifies that only the exact value of each bit in the corresponding block of the IPv6 address is allowed. This mask allows management access only to a station having an IPv6 address of FE80::202:B3FF:FE1E:8329.

IPv6 address

FE80

0000

0000

0000

202

B3FF

FE1E

8329