mgmt_allow.config

The mgmt_allow.config file specifies the IP addresses of remote hosts allowed access or denied access to the Content Gateway manager.


	Important After you modify this file, run the following command to apply the changes: /opt/WCG/bin/content_line -x When you apply the changes to a node in a cluster, Content Gateway applies the changes to all nodes in the cluster.

Format

Each line in the mgmt_allow.config file has the following format:

src_ip=<ipaddress> action=<ip_allow|ip_deny>

Here, <ipaddress> is the IP address or range of IP addresses allowed to access the Content Gateway manager.

Use "action" to specify either ip_allow (grant access to the Content Gateway manager) or ip_deny (block access).

By default, the mgmt_allow.config file contains the following line, which allows all remote hosts to access the Content Gateway manager. Comment out or delete this line before adding rules to restrict access.

src_ip=0.0.0.0-255.255.255.255 action=ip_allow

Examples

The following example configures Content Gateway to allow only one user to access the Content Gateway manager:

src_ip=123.12.3.123 action=ip_allow

The following example configures Content Gateway to allow a range of IP addresses to access the Content Gateway manager:

src_ip=123.12.3.000-123.12.3.123 action=ip_allow

The following example configures Content Gateway to deny one IP address access to the Content Gateway manager:

src_ip=123.45.67.8 action=ip_deny