Orion 2000 - Manual (Page 54)

User’ Guide 54
Web-access
¾
web-access cpe {enable|disable}
Enable|disable the CM web access via CPE interface
¾
web-access cable {enable|disable}
Enable|disable the CM web access via Cable interface
Access-list
¾ access-list {1~20|21~40|41~60} {deny|permit} {any|source IP|mac address} [wildcard bit]
The standard access list performs packet filtering based on source IP address from the CPE host(s).
The management access list performs packet filtering based on destination IP address matching the Cable
Router IP address. The standard MAC access list performs frame filtering based on source MAC address
from the CPE host(s). Basically, the access list works as a source address packet filter, if the access list is
empty, the cable router will forward any packet, if access list is not empty, packet filtering will be enforced
according to the access list(s).
1~20, access list ID, for standard IP access list
21~40, access list ID, for management access list
41~60, access list ID, for standard MAC access list
Example:
1) Set the access list to permit source IP 192.168.100.xxx to access network.
CM>access-list 1 permit 192.168.100.1 0.0.0.255
Note: 0.0.0.255 means 192.168.100.1~192.168.100.255
2) Set the access list to permit source IP 192.168.100.10 to access cable router (telnet, web-page, snmp)
CM>access-list 21 permit 192.168.100.10 0.0.0.0
Note: No network packet will be filtered
3) Set the access list to permit source MAC 00D0.5921.3354 to access network
CM>access-list 41 permit 00d0.5921.3354 ffff.ffff.ffff
Note: The cable router only forward packet with this source MAC, all other packet will be discarded.