JANUS DEFINEIPGROUP: Difference between revisions

From m204wiki
Jump to navigation Jump to search
(Automatically generated page update)
 
m (add IPV6 address format)
 
(2 intermediate revisions by the same user not shown)
Line 2: Line 2:
<span class="pageSubtitle">Create named group of ip addresses</span>
<span class="pageSubtitle">Create named group of ip addresses</span>


This command creates a named group which contains any number of IP addresses. The <var class="term">groupname</var> can then be used to control ''[[Janus Web Server]]'' or ''[[Janus Sockets]]'' access based on IP address.
This command creates a named group which contains any number of IP addresses. The <var class="term">groupname</var> can then be used to control <var class="product">[[Janus Web Server]]</var> or <var class="product">[[Janus Sockets]]</var> access based on IP address.


==Syntax==
==Syntax==
<p class="syntax"> JANUS DEFINEIPGROUP groupname ipaddress(es)
<p class="syntax"> JANUS DEFINEIPGROUP <span class="term">groupname ipaddress(es) </span>
</p>
</p>


Where each parameter is positional and required:
Where each parameter is positional and required:


<table class="syntaxTable">
<table>
<tr><th>groupname</th>
<tr><th>groupname</th>
<td>A 1 - 30 character name of the group with which IP addresses are being associated for <var>ALLOW</var> and <var>DISALLOW</var> rules in <var>JANUS WEB</var>, <var>JANUS CLSOCK</var>, or <var>JANUS SRVSOCK</var> commands.</td></tr>
<td>A 1 - 30 character name of the group with which IP addresses are being associated for <var>ALLOW</var> and <var>DISALLOW</var> rules in <var>JANUS WEB</var>, <var>JANUS CLSOCK</var>, or <var>JANUS SRVSOCK</var> commands.</td></tr>
<tr><th>ipaddress(es)</th>
<tr><th>ipaddress(es)</th>
<td>A list of IP addresses or subnet masks in "dotted" format. IP addresses are formatted nnn.nnn.nnn.nnn. For example, 198.242.244.47 is a valid IP address. Subnet masks are formatted in one of two ways:
<td>A list of IP addresses or subnet masks, in any combination, separated by spaces or commas. Each value can be an IPV4 dotted-decimal address, an IPV6 address (as of version 7.7 of Model&nbsp;204), or it can be a subnet.  
 
<ul>
<li>IPV4 subnets are indicated by an IP address followed by one of these:
<ul>
<ul>
<li>With a slash separating the subnet identifier from the subnet mask, as in "198.242.244.0/255.255.255.0"</li>
<li>A forward slash (<tt>/</tt>) followed by a netmask (with no intervening blanks)</li>
<li>With a dash (&#x201C;-&#x201D;) separating the subnet identifier from the number of subnet mask bits, as in "198.242.244.0-24".</li>
</ul>


All formats may be used in any combination, separated by spaces or commas, on the same command.  
<li>A hyphen (<tt>-</tt>) followed by the number of bits in the subnet mask (with no intervening blanks)</li>
</ul>
<p>
For example, <code>198.242.244.97</code> is a simple IP address that must be matched exactly. <code>.198.242.244.0/255.255.255.0</code>, which is equivalent to <code>198.242.244.0-24</code>, indicates that any machine on subnet 198.242.244.0 is to be allowed access to <var class="term">url</var>. </p>


Note: Translation of a name to an IP address is not supported on this command.
<li>IPV6 addresses are 128-bit integers, represented with eight, colon-separated, 16-bit (four hex-digit) groups, which may be abbreviated and represented with fewer groups. For example,
<code>fe80:0000:0000:0000:0200:0000:0300:0016</code> or <code>fe80::200:0:300:16</code>.
<p>
An IPV6 subnet is indicated by the first address in the range, followed by a forward slash, and a decimal value equal to the number of bits in the network prefix. A subnet that includes the example address above is: <code>fe80::200:0/48</code>. </p></li>
</ul>
<p class="note"><b>Note:</b> Translation of a name to an IP address is not supported on this command. </p>
</td></tr>
</td></tr>
</table>
</table>
Line 30: Line 37:
The <var>DEFINEIPGROUP</var> command may be abbreviated <var>DEFIPGROUP</var>, <var>DEFIPG</var>, and <var>DEFINEIPG</var>.  
The <var>DEFINEIPGROUP</var> command may be abbreviated <var>DEFIPGROUP</var>, <var>DEFIPG</var>, and <var>DEFINEIPG</var>.  


==Example==
The following example builds an IP group called <code>PRIVILEGED</code> made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7.
The following example builds an IP group called <code>PRIVILEGED</code> made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7.


Line 35: Line 43:
</p>
</p>


See [[List_of_Janus_commands|The list of Janus commands]]
==See also==
<ul>
<li>[[List of Janus commands]]
</ul>
 
[[Category:Janus commands|JANUS DEFINEIPGROUP]]
[[Category:Janus commands|JANUS DEFINEIPGROUP]]

Latest revision as of 21:47, 6 December 2016

Create named group of ip addresses

This command creates a named group which contains any number of IP addresses. The groupname can then be used to control Janus Web Server or Janus Sockets access based on IP address.

Syntax

JANUS DEFINEIPGROUP groupname ipaddress(es)

Where each parameter is positional and required:

groupname A 1 - 30 character name of the group with which IP addresses are being associated for ALLOW and DISALLOW rules in JANUS WEB, JANUS CLSOCK, or JANUS SRVSOCK commands.
ipaddress(es) A list of IP addresses or subnet masks, in any combination, separated by spaces or commas. Each value can be an IPV4 dotted-decimal address, an IPV6 address (as of version 7.7 of Model 204), or it can be a subnet.
  • IPV4 subnets are indicated by an IP address followed by one of these:
    • A forward slash (/) followed by a netmask (with no intervening blanks)
    • A hyphen (-) followed by the number of bits in the subnet mask (with no intervening blanks)

    For example, 198.242.244.97 is a simple IP address that must be matched exactly. .198.242.244.0/255.255.255.0, which is equivalent to 198.242.244.0-24, indicates that any machine on subnet 198.242.244.0 is to be allowed access to url.

  • IPV6 addresses are 128-bit integers, represented with eight, colon-separated, 16-bit (four hex-digit) groups, which may be abbreviated and represented with fewer groups. For example, fe80:0000:0000:0000:0200:0000:0300:0016 or fe80::200:0:300:16.

    An IPV6 subnet is indicated by the first address in the range, followed by a forward slash, and a decimal value equal to the number of bits in the network prefix. A subnet that includes the example address above is: fe80::200:0/48.

Note: Translation of a name to an IP address is not supported on this command.

The DEFINEIPGROUP command may be abbreviated DEFIPGROUP, DEFIPG, and DEFINEIPG.

Example

The following example builds an IP group called PRIVILEGED made of all IP addresses in the 198.242.0.0 subdomain (using 16 mask bits), all addresses in the 169.231.11.0 subdomain (using 24 mask bits) and the single IP address 184.194.222.7.

JANUS DEFIPG PRIVILEGED 198.242.0.0-16 169.231.11.0-24 184.194.222.7

See also