diff --git a/src/test/java/com/alibaba/druid/bvt/support/http/StatViewSerlvetTest_allow.java b/src/test/java/com/alibaba/druid/bvt/support/http/StatViewSerlvetTest_allow.java
new file mode 100644
index 0000000000..f25dc0f3e1
--- /dev/null
+++ b/src/test/java/com/alibaba/druid/bvt/support/http/StatViewSerlvetTest_allow.java
@@ -0,0 +1,85 @@
+package com.alibaba.druid.bvt.support.http;
+
+import junit.framework.Assert;
+import junit.framework.TestCase;
+
+import org.springframework.mock.web.MockHttpServletRequest;
+import org.springframework.mock.web.MockServletConfig;
+
+import com.alibaba.druid.support.http.StatViewServlet;
+
+public class StatViewSerlvetTest_allow extends TestCase {
+
+    public void test_allow() throws Exception {
+        MockServletConfig servletConfig = new MockServletConfig();
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_ALLOW, "128.242.127.2");
+
+        StatViewServlet servlet = new StatViewServlet();
+        servlet.init(servletConfig);
+
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        request.setRemoteAddr("128.242.127.2");
+        Assert.assertTrue(servlet.isPermittedRequest(request));
+
+        Assert.assertFalse(servlet.isPermittedRequest("128.242.127.3"));
+    }
+
+    public void test_allow_1() throws Exception {
+        MockServletConfig servletConfig = new MockServletConfig();
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_ALLOW, "128.242.127.2,xx");
+
+        StatViewServlet servlet = new StatViewServlet();
+        servlet.init(servletConfig);
+
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        request.setRemoteAddr("128.242.127.2");
+        Assert.assertTrue(servlet.isPermittedRequest(request));
+
+        Assert.assertFalse(servlet.isPermittedRequest("128.242.127.3"));
+    }
+
+    public void test_allow_2() throws Exception {
+        MockServletConfig servletConfig = new MockServletConfig();
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_ALLOW, "128.242.127.2,,, ");
+
+        StatViewServlet servlet = new StatViewServlet();
+        servlet.init(servletConfig);
+
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        request.setRemoteAddr("128.242.127.2");
+        Assert.assertTrue(servlet.isPermittedRequest(request));
+
+        Assert.assertFalse(servlet.isPermittedRequest("128.242.127.3"));
+    }
+
+    public void test_allow_3() throws Exception {
+        MockServletConfig servletConfig = new MockServletConfig();
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_ALLOW, "128.242.127.2/24");
+
+        StatViewServlet servlet = new StatViewServlet();
+        servlet.init(servletConfig);
+
+        for (int i = 1; i <= 255; ++i) {
+            MockHttpServletRequest request = new MockHttpServletRequest();
+            request.setRemoteAddr("128.242.127." + i);
+            Assert.assertTrue(servlet.isPermittedRequest(request));
+        }
+        
+        Assert.assertFalse(servlet.isPermittedRequest("128.242.128.1"));
+    }
+    
+    public void test_allow_4() throws Exception {
+        MockServletConfig servletConfig = new MockServletConfig();
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_ALLOW, "128.242.127.2/24");
+        servletConfig.addInitParameter(StatViewServlet.PARAM_NAME_DENY, "128.242.127.4");
+
+        StatViewServlet servlet = new StatViewServlet();
+        servlet.init(servletConfig);
+
+        Assert.assertTrue(servlet.isPermittedRequest("128.242.127.1"));
+        Assert.assertTrue(servlet.isPermittedRequest("128.242.127.2"));
+        Assert.assertTrue(servlet.isPermittedRequest("128.242.127.3"));
+        Assert.assertFalse(servlet.isPermittedRequest("128.242.127.4"));
+        Assert.assertTrue(servlet.isPermittedRequest("128.242.127.5"));
+    }
+}