Restricting external accesses using the IP address

Automatically specifying the IP Address to restrict accesses

Restrict devices that can access this machine depending on the range of IP addresses.

  1. Select [Network] - [TCP/IP Setting] - [IP Address Filtering] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the following settings.

    Setting

    Description

    [IPv4 Filtering (Permit Access)]

    Specify an IPv4 address to allow access to this machine.

    • [IPv4 Filtering (Permit Access)]: When specifying the IPv4 address that allow access, set this option to ON (default: OFF).

    • Range 1 to Range 5: Enter the range of IPv4 addresses that allow access using the following format.
      Entry example: "192.168.1.1 - 192.168.1.10"
      If a single IPv4 address is allowed to access, you can only enter the address in one side of the range.

    [IPv4 Filtering (Deny Access)]

    Specify an IPv4 address to deny access to this machine.

    • [IPv4 Filtering (Deny Access)]: When specifying the IPv4 address that deny access, set this option to ON (default: OFF).

    • Range 1 to Range 5: Enter the range of IPv4 addresses that deny access using the following format.
      Entry example: "192.168.1.1 - 192.168.1.10"
      To deny access from a single IPv4 address, you can only enter the address in one side of the range.

    [IPv6 Filtering (Permit Access)]

    Specify an IPv6 address to allow access to this machine.

    • [IPv6 Filtering (Permit Access)]: When specifying the IPv6 address that allow access, set this option to ON (default: OFF).

    • Range 1 to Range 5: Enter the IPv6 address and prefix length to specify the range of IPv6 addresses that allow access.

    [IPv6 Filtering (Deny Access)]

    Specify an IPv6 address to deny access to this machine.

    • [IPv6 Filtering (Deny Access)]: When specifying the IPv6 address that deny access, set this option to ON (default: OFF).

    • Range 1 to Range 5: Enter the IPv6 address and prefix length to specify the range of IPv6 addresses that deny access.

  2. Select [Network] - [TCP/IP Setting] - [Filtering Type] - [IP Address Filtering] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and click [OK].

Automatically Auto the IP Address to restrict accesses

If the quick IP filtering function is employed, the range of the IP addresses accessible to this machine is set automatically, enabling you to quickly specify access restrictions.

  1. Select [Network] - [TCP/IP Setting] - [Quick IP Filtering] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the following settings.

    Setting

    Description

    [Quick IP Filtering]

    Select the method to specify the IP address for which access is restricted (default: [Synchronize IP Address]).

    • [Synchronize IP Address]: For the IPv4 address, this option only permits access for the IPv4 address set to this machine, and the IPv4 addresses of which the high-order 3 bytes are the same.
      Example: When the IPv4 address of this machine is set to "192.168.0.134", the range of IPv4 addresses that allow access is as follows.
      192.168.0.0 to 192.168.0.255
      For the IPv6 address, this option only permits access for the global unicast address (2000::/3). Also, this option only permits access for the IPv6 address set to this machine, and the IPv6 addresses of which the high-order 64 bits are the same.
      Example: When the IPv6 address of this machine is set to "2345:1:2:3:4:5:6:7", the range of IPv6 addresses that allow access is as follows.
      2345:1:2:3::0 to 2345:1:2:3:FFFF:FFFF:FFFF:FFFF

    • [Synchronize Subnet Mask]: For the IPv4 address, this option only permits access for IPv4 addresses that belong to the same network using the IPv4 address set to this machine and subnet mask.
      If no subnet mask is set or "0.0.0.0" is specified, this option permits the IPv4 address set to this machine, and the IPv4 addresses each of which only the suffix is different. This results in the same operation as for [Synchronize IP Address].
      Example: When the IPv4 address of this machine is set to "192.168.17.134" and the subnet mask is set to "255.255.252.0", the range of IPv4 addresses that allow access is as follows.
      192.168.16.*** to 192.168.19.***
      For the IPv6 address, this option only permits access for the global unicast address (2000::/3). Also, filtering is carried out using the global IPv6 address set to this machine and prefix.
      If the prefix is not specified, filtering is carried out in the same way as when the 64-bit prefix is specified.
      Example: When the IPv6 address of this machine is set to "2345:1:2:3:4:5:6:7" and Prefix is set to "/64", the range of IPv6 addresses that allow access is as follows.
      2345:1:2:3::0 to 2345:1:2:3:FFFF:FFFF:FFFF:FFFF

    • [No Filtering]: Does not use the filtering function.

  2. Select [Network] - [TCP/IP Setting] - [Filtering Type] - [Quick IP Filtering] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and click [OK].

Tips

  • If the quick IP filtering function is used, the range of IP addresses for which access is to be restricted is specified automatically. To manually specify the range of IP addresses for which access is to be restricted, set [Network] - [TCP/IP Setting] - [IP Address Filtering] or [Packet Filtering] instead of using [Quick IP Filtering].