HP 6200YL - Manual (Page 144)

IPv6 Management Security Features
Authorized IP Managers for IPv6
■ Each authorized station has the same 64-bit device ID ( 244:17FF:FEB6:D37D)
because the value of the last four blocks in the mask is FFFF (binary value
1111 1111).
FFFF requires all bits in each corresponding block of an authorized IPv6
address to have the same “on” or “off” setting as the device ID in the
specified IPv6 address. In this case, each bit in the device ID (last four
blocks) in an authorized IPv6 address is fixed and can be only one value:
244:17FF:FEB6:D37D.
1st
Block 2nd
Block 3rd
Block 4th
Block 5th
Block 6th
Block 7th
Block 8th
Block Manager- or Operator-Level Access
IPv6 Mask FFFF FFFF FFFF FFF8 FFFF FFFF FFFF FFFF
Authorized 2001 DB8 0000 0000 244 17FF FEB6 D37D
IPv6 Address
In this example, the IPv6 mask allows up
to four stations in different subnets to
access the switch. This authorized IP
manager configuration is useful if only
management stations are specified by
the authorized IPv6 addresses. Refer to
Figure 6-4 for how the bitmap of the IPv6
mask determines authorized IP manager
stations.
Figure 6-6. Example: Mask for Configuring Authorized IPv6 Manager Stations in Different Subnets
Fourth Block in Mask: FFF8
Fourth Block in Prefix ID of IPv6 Address: 0000
Bit Numbers Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
Bit Value F F F 8
FFF8: Fourth Block
in Mask
0000: Fourth Block
in IPv6 Address
Bit Setting: = 1 (On) = 0 (Off)
Figure 6-7. Example: How a Mask Determines Authorized IPv6 Manager Addresses by Subnet
6-10