mgmt_allow.config

The mgmt_allow.config file specifies the IP addresses of remote hosts allowed access or denied access to the Content Gateway manager.


	Important After you modify this file, run content_line -x from the Content Gateway bin directory (/opt/WCG/bin) to apply the changes. When you apply the changes to a node in a cluster, Content Gateway applies the changes to all nodes in the cluster.

Format

Each line in the mgmt_allow.config file has the following format:

src_ip=ipaddress action=ip_allow|ip_deny

where ipaddress is the IP address or range of IP addresses allowed to access the Content Gateway manager.

action must specify either ip_allow to allow access to the Content Gateway manager, or ip_deny to deny access.

By default, the mgmt_allow.config file contains the following line, which allows all remote hosts to access the Content Gateway manager. Comment out or delete this line before adding rules to restrict access.

src_ip=0.0.0.0-255.255.255.255 action=ip_allow

Examples

The following example configures Content Gateway to allow only one user to access the Content Gateway manager:

src_ip=123.12.3.123 action=ip_allow

The following example configures Content Gateway to allow a range of IP addresses to access the Content Gateway manager:

src_ip=123.12.3.000-123.12.3.123 action=ip_allow

The following example configures Content Gateway to deny the IP address 123.45.67.8 access to the Content Gateway manager:

src_ip=123.45.67.8 action=ip_deny