config-agent permit ip-address

Function

The config-agent permit ip-address command configures trusted host computers.

The undo config-agent permit ip-address command deletes the configuration of trusted host computers.

By default, no trusted host computer is configured.

Format

config-agent permit ip-address ip-address { net-mask | mask-len }

undo config-agent permit ip-address

Parameters

Parameter	Description	Value
ip-address	Specifies the IP address of a trusted host computer.	The value is in dotted decimal notation.
net-mask	Specifies the mask of the IP address of a trusted host computer.	The value is in dotted decimal notation.
mask-len	Specifies the mask length.	The value is an integer that ranges from 0 to 32.

Views

IoT profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To prevent unauthorized devices from attacking an AP, you can configure trusted host computers. In this way, only hosts within the specified IP address range can communicate with the AP functioning as a server and send the AP the configuration to be delivered to the IoT card.

If no trusted host computer is configured, any host computers with reachable routes to the AP can communicate with the AP, which brings security risks to the AP.

Precautions

After the type cas-edu command is executed to set the card type to cas-edu, the config-agent permit ip-address command cannot be executed.

Example

# Configure the IP address of a trusted host computer and its mask.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] iot-profile name wlan-iot
[HUAWEI-wlan-iot-prof-wlan-iot] config-agent permit ip-address 10.2.3.4 255.255.255.0