Configuring the T300 Firewall Whitelist

[Windsor]

Hi all, I have configured a white list on the WAN network interface (using Easergy Builder) that contains a list of approved IP addresses that should be able to access the RTU web pages.

After downloading the configuration to the RTU a laptop whose IP address is not in the white list can still be connected to the WAN ports on the HU250 and access the web pages.

Is there anything else that needs to be done to make the white list active/operational?

Note: I can see from the web pages that the correct IP addresses are listed as a white list for the WAN interface.

The firmware version of the HU250 is 2.8.4 (1679)

Thanks in advance

[Mathieu_Lansoy]

Hello,

Could you please share the settings for the WAN IP configuration and Whitelist (especially the masks) ?

Thanks,

  Mathieu.

[Windsor]

Hi @Mathieu_Lansoy 

The WAN interface has a single IP address defined: 172.16.90.80 with subnet mask 255.255.0.0

The WAN firewall has the following whitelist entries:

[Mathieu_Lansoy]

Hi,

in the whitelist, 172.16.90.101 with mask 255.255.0.0 will enable all 172.16.x.x IP addresses, so other lines are useless. If you want to enable only one IP at a time, use mask 255.255.255.255. For a range of IP, use a different mask. This might be the problem.

For a full support, please share the IPs of the computer (good test, bad test).

   Mathieu.

[Windsor]

Thanks for the quick response. I will try this out.