HP (Hewlett-Packard) HP Integrated Lights-Out ユーザーズマニュアル

IP address range restrictions enable the administrator to specify network 
addresses that are granted or denied access by the restriction. The address range 
is typically specified in a low-to-high range format. An address range can be 
specified to grant or deny access to a single address. Addresses that fall within 
the low to high IP address range meet the IP address restriction. 

 

IP address and subnet mask restrictions enable the administrator to specify a 
range of addresses that are granted or denied access by the restriction. This 
format has similar capabilities as an IP address range but might be more native to 
your networking environment. An IP address and subnet mask range is typically 
specified using a subnet address and address bit mask that identifies addresses 
that are on the same logical network. 

In binary math, if the bits of a client machine address, added with the bits of the 
subnet mask, match the restriction subnet address, then the client machine meets 
the restriction. 

 

DNS-based restrictions use the network naming service to examine the logical 
name of the client machine by looking up machine names assigned to the client 
IP addresses. DNS restrictions require a functional name server. If the name 
service goes down or cannot be reached, DNS restrictions cannot be matched and 
will fail. 

DNS-based restrictions can limit access to a single, specific machine name or to 
machines sharing a common domain suffix. For example, the DNS restriction, 
www.hp.com, matches hosts that are assigned the domain name www.hp.com. 
However, the DNS restriction, *.hp.com, matches any machine originating from 
HP. 

DNS restrictions can cause some ambiguity because a host can be multi-homed. 
DNS restrictions do not necessarily match one-to-one with a single system.