Client IP

FTP > Configuration > Access Control Settings | Client IP tab

When selecting policies, both IPv4 and IPv6 policies will appear. Client Access Control accepts a single IPv6 address, an IPv6 range, or an IPv6 mask similar to what has been supported with IPv4.

You can have IWSVA prevent all clients not explicitly listed in the Client IP address list from using FTP.  

1. Specify the IP address or range of IP addresses that you will give Internet access.

2. Type a descriptive name in the Description field. (40 characters maximum)

3. Next, choose Enable FTP Access Based On Client IP. Once enabled, only those users specified here will be able to connect to the internet. All others will be denied.

The following rules apply:

2. Overlapping entries are not allowed.  

3. IP entries should be in a.b.c.d format.  

4. Masks can be in a.b.c.d format or specified as number of bits (0-32).

5. For entries where the mask is omitted, a default mask of 255.255.255.255 is assumed.

Formats:

• IP address

• IP range: start range to end range

• IP mask

Examples:

• 192.168.0.150
  # Only the machine whose IP address is 192.168.0.150

• 192.168.0.10-192.168.0.20  
  # Covers machines whose IP falls in the range 192.168.0.10 to 192.168.0.20

• 192.168.1.0/24
  # An alternate of all the machines in 192.168.1.x