This table locks ranges of IP hosts (addresses) to ports. Entries in this table represent explicit permissions. The host(s) represented by a range entry may exchange packets with this router if it (they) match the port specified in the entry. Optionally physical address may be locked as well.

This table functions in concert with the workgroup security level as defined in the IP Work Group Definition Table entry. For hosts not entered in this table the default for a low security workgroup is to permit packet exchange, whereas the default for medium and high security is to deny packet exchange.