Enabling IP-Based Access Control

If the access control entry that refers to the ip attribute is located in the ACL files related to the Administration Server (gen*.proxy-admserv.acl), complete Steps 1 and 2 below.

If the access control entry that refers to the ip attribute is located in the ACL files related to a server instance, complete only Step 1 below for that particular ACL.

To Enable IP-Based Access Control

1. Edit the server-root/httpacl/gen*.proxy-admserv.acl files to add ip to the authentication list, in addition to user and group, as shown below:

   acl "proxy-admserv"; authenticate (user,group,ip) { database = "default"; method = "basic"; };

2. Add the following access control entry:

   deny absolute (all) ip !="ip_for_which_access_is_allowed";

   For example:

   acl "proxy-admserv"; authenticate (user,group,ip) { database = "default"; method = "basic"; }; deny absolute (all) ip !="205.217.243.119";