85Setting IP access controlThe golden rule with this feature is ‘Include before you exclude’ or to put itanother way ‘Arrange allowed addresses in the list before the denied addresses’.This is because the positions of entries in the list are vitally important. Once arange of addresses is denied access, it is not possible to make exceptions forparticular addresses within that range. For instance, if the range of addressesfrom A to F are denied access first, then the address C could not be grantedaccess lower down the list. Address C needs to be placed in the list before thedenied range.IMPORTANT: This feature should be configured with extreme caution as it ispossible to deny access to everyone. If such an error occurs, see Clearing IPaccess control for details about how to regain access.To define a new IP access control entry1 Click the Add button to display a popup dialog:2 Enter the base network address, the mask and select the appropriateaccess setting.3 Click the OK button.To reorder access control entriesIMPORTANT: When reordering, ensure that any specific allowed addresses arelisted higher in the list than any denied addresses. Take care not to invoke anydeny access settings that would exclude valid users.1 In the access control list, click on the entry to be moved.2 Click the Up or Down buttons as appropriate.To edit/remove access control entries1 In the access control list, click on the appropriate entry.2 Click either the Edit or Remove button as appropriate.Network/AddressEnter the network addressthat is to be allowed or deniedaccess. If a range of addressesis being specified then specifyany one of the addresseswithin the range and use theMask entry to indicate the sizeof the range.MaskEnter an IP network maskthat indicates the range ofaddresses that are to beallowed or denied access.For instance, if only a singlespecified IP address were to berequired, the mask entry wouldbe 255.255.255.255 in orderto specify a single location. SeeCalculating the mask for IPaccess control for details.AccessUse the arrow buttons toselect either ‘Allow’ or‘Deny’ as appropriate.In the list, access control addresses prefixed by ‘+’ are allow entries while thoseprefixed by ‘– ‘ are deny entries.To get here1 Using VNC viewer or a browser, log on as the ‘admin’ user.2 Click the ‘Configure’ button in the top right corner.3 Click the ‘Network configuration’ option.