Configuring Administrator Access

The Device > Administrator Access page lets you configure the IP addresses and interface sources that administrators can use to access the Quantum Spark Appliance. You can also configure the Web and SSH ports.

First set the interface sources from which allowed IP addresses can access the appliance.

To set the interface sources from which administrator access is allowed:

Select one or more of the options:

  • LAN - All internal physical ports

  • Trusted wireless - Wireless networks that are allowed access to the LAN by default (only in Wireless Network models.)

  • VPN - Uses encrypted traffic through VPN tunnels from a remote site or uses a remote access client

  • Internet - Clear traffic from the Internet (not recommended to allow access from all IP addresses)

To allow administrator access from any IP address:

  1. Select the Any IP address option. This option is less secure and not recommended. We recommend you allow access from the Internet to specific IP addresses only.

  2. Change the WEB Port (HTTPS) and/or SSH port if necessary.

  3. Click Apply.

    An administrator can access the Quantum Spark Appliance using any IP address through the allowed interface sources.

To allow administrator access from specified IP addresses:

  1. Select the Specified IP addresses only option.

  2. Click New.

    The IP Address Configuration page appears.

  3. Select Type:

    • IPv4 address

    • IPv4 network

    • IPv6 address

    • IPv6 network

  4. Enter the IP address or click Get IP from My Computer.

  5. Click Apply.

    The IP address is added to the table.

  6. Change the WEB Port (HTTPS) and/or SSH port if necessary.

  7. Click Apply.

    An administrator can use the configured IP addresses to access the appliance through the allowed interface sources.

To allow administrator access from both specified and any IP addresses:

Select this option when it is necessary to allow administrator access from the Internet (you must define the specified IP addresses). Access from other sources is allowed from any IP address.

  1. Select the Internet source checkbox.

  2. Select the Specified IP addresses from the internet and any IP address from other sources option.

  3. Click New.

    The IP Address Configuration page shows.

  4. Select Type:

    • IPv4 address

    • IPv4 network

    • IPv6 address

    • IPv6 network

  5. Enter the IP address or click Get IP from My Computer.

  6. Click Apply.

    The IP address is added to the table.

  7. Change the WEB Port (HTTPS) and/or SSH port if necessary.

  8. Click Apply.

    An administrator can use the configured IP addresses to access the appliance through the allowed interface sources.

To delete administrator access from a specific IP address:

  1. Select the IP Address you want to delete from the IP Address table.

  2. Click Delete.

Important Notes:

  • Configuring different access permissions for LAN and Internet is not supported when your Internet Connection is configured in bridge mode (the option Allow administration access from does not show Internet or LAN).

  • An automatic implied rule is defined to allow the access specified here. There is no need to add an explicit rule in the Access Policy page to allow this access.

  • When you block the IP address or the interface group through which you are currently connected, you are not disconnected immediately. The access policy is applied immediately, but your current session remains active until you log out.