HP 6200YL - Manual (Page 143)

IPv6 Management Security Features
Authorized IP Managers for IPv6
to 0 (“off”) and allow the corresponding bits in an authorized IPv6 address to
be either “on” or “off”. As a result, only the four IPv6 addresses shown in Figure
6-5 are allowed access.
1st
Block 2nd
Block 3rd
Block 4th
Block 5th
Block 6th
Block 7th
Block 8th
Block
IPv6 Mask FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFC
IPv6 Address Entered with the “ipv6 2001 DB8 0000 0000 244 17FF FEB6 D37D
authorized-managers” Command
Other Authorized IPv6 Addresses 2001 DB8 0000 0000 244 17FF FEB6 D37C
2001 DB8 0000 0000 244 17FF FEB6 D37E
2001 DB8 0000 0000 244 17FF FEB6 D37F
Figure 6-5. Example: How Hexadecimal C in a Mask Authorizes Four IPv6 Manager Addresses
Example. Figure 6-6 shows an example in which a mask is applied to the
IPv6 address: 2001:DB8:0000:0000:244:17FF:FEB6:D37D/64. The specified mask
FFFF:FFFF:FFFF:FFF8:FFFF:FFFF:FFFF:FFFF configures eight management stations as
authorized IP manager stations.
Note that, in this example, the IPv6 mask is applied as follows:
■ Eight management stations in different subnets are authorized by the
value of the fourth block (
FFF8) in the 64-bit prefix ID (FFFF:FFFF:FFFF:FFF8)
of the mask. (The fourth block of the prefix ID is often used to define
subnets in an IPv6 network.)
The binary equivalent of FFF8 that is used to specify valid subnet IDs in the
IPv6 addresses of authorized stations is: 1111 1111 1111 1000.
The three “off” bits (1000) in the last part of the this block ( FFF8) of the
mask allow for eight possible authorized IPv6 stations:
2001:DB8:0000:0000:244:17FF:FEB6:D37D
2001:DB8:0000:0001:244:17FF:FEB6:D37D
2001:DB8:0000:0002:244:17FF:FEB6:D37D
2001:DB8:0000:0003:244:17FF:FEB6:D37D
2001:DB8:0000:0004:244:17FF:FEB6:D37D
2001:DB8:0000:0005:244:17FF:FEB6:D37D
2001:DB8:0000:0006:244:17FF:FEB6:D37D
2001:DB8:0000:0007:244:17FF:FEB6:D37D
6-9