Configuring single station access

Procedure

To authorize only one IPv6-based station for access to the switch, enter the IPv6 address of the station and set the mask to FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF, to authorize only one IPv6-based station for access to the switch.
If you do not enter a value for the ipv6-mask parameter when you configure an authorized IPv6 address, the switch automatically uses FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF as the default mask. If you have 10 or fewer management and/or operator stations for which you want to authorize access to the switch, it may be more efficient to configure them by entering each IPv6 address with the default mask in a separate ipv6 authorized-managers command.

When used in a mask, "FFFF" specifies that each bit in the corresponding 16-bit (hexadecimal) block of an authorized station's IPv6 address must be identical to the same "on" or "off" setting in the IPv6 address entered in the ipv6 authorized-managers command. (The binary equivalent ofFFFF is 1111 1111 1111 1111, where 1 requires the same "on" or "off" setting in an authorized address). As shown in the table, if you configure a link-local IPv6 address of FE80::202:B3FF:FE1E:8329 with a mask of FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF, only a station having an IPv6 address of FE80::202:B3FF:FE1E:8329 has management access to the switch.

Table 13: Mask for configuring a single authorized IPv6 manager station
	1st block	2nd block	3rd block	4th block	5th block	6th block	7th block	8th block	Manager- or Operator-level access
IPv6 mask	FFFF	FFFF	FFFF	FFFF	FFFF	FFFF	FFFF	FFFF	The “FFFF” in each hexadecimal block of the mask specifies that only the exact value of each bit in the corresponding block of the IPv6 address is allowed. This mask allows management access only to a station having an IPv6 address of FE80::202:B3FF:FE1E:8329.
IPv6 address	FE80	0000	0000	0000	202	B3FF	FE1E	8329