Access controls on the ProtectServer Orange External is performed using IP tables.
In the following example, the desired access control configuration is to deny access to all but one IP address, that of your directory host. In this example, the directory host's IP address will be 10.1.3.10.
iptables -F INPUT iptables -A INPUT -s 10.1.3.10 -j ACCEPT iptables -A INPUT -j DROP /etc/init.d/iptables save active
Once the last command is entered, the HSM should respond with the following message.
Saving iptables ruleset: save "active" with counters Please refer to the ProtectServer Orange External installation guide for further details on the commands used.
Copyright © 2009 CA. All rights reserved. | Email CA about this topic |