I-MO 520 Series Product Installation Manual - page 25
INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE
Version
1.2
ELECTRONIC MEDIA SERVICES LIMITED
PASSFIELD BUSINESS CENTRE, LYNCHBOROUGH ROAD, LIPHOOK, HAMPSHIRE, GU30 7SB, UK
Tel: 01428 751655 | Fax: 01428 751654 | E-mail: imo@ems-uk.com
Page
25
of
58
hostapd.deny
can contain a list of MAC address that should be denied access to the WiFi Access Point:
# List of MAC addresses that are not allowed to authenticate (IEEE 802.11)
# with the AP.
00:20:30:40:50:60
00:ab:cd:ef:12:34
00:00:30:40:50:60
hostapd.wpa_psk
can contain a list of MAC addresses and Pre Shared Keys:
# List of MAC addresses and the PSK used to authenticate (IEEE 802.11)
# with the AP.
11:22:33:44:55:66 a8ed05e96eed9df63bdc4edc77b965770d802e
22:33:44:55:66:77 eac8f79f06e167352c18c266ef56cc26982513
33:44:55:66:77:aa 550a613348ffe64698438a7e7bc319fc3f1f55
44:55:66:77:aa:bb ad328e5f2b16bdd9b44987793ed7e09e6d7cca
hostapd.vlan
defines vlans for the WiFi Access Point:
# VLAN ID to network interface mapping
1
vlan1
2
vlan2
3
vlan3
100
guest
# Optional wildcard entry matching all VLAN IDs. The first # in the inter-
face
# name will be replaced with the VLAN ID. The network interfaces are cre-
ated
# (and removed) dynamically based on the use.
*
vlan#
To apply any changes made to these file you must run the following command
systemctl restart hostapd.service
The files
hosts.allow
and
hosts.deny
are used to restrict access to services that are running on the i-MO
appliance. Typically this is used to limit access to SSH from external IP addresses. For example if the public
IP address of your network was 195.74.68.1 then you might use the following to restrict access only to that
address:
hosts.allow
# iMO default settings
sshd: 127.0.0.1 : ALLOW
sshd: 192.168. : ALLOW
sshd: 172.16.0.0/255.240.0.0 : ALLOW
sshd: 10. : ALLOW
sshd: 195.74.68.1
: ALLOW
sshd: ALL : DENY