86
Chapter 11
Security Options
5. In the User field, enter the name of the user allowed to access Traffic Manager.
6. In the Password field, enter the password for the user, then enter the password again in the Password
(retype) field.
7. In the Access drop-down list, select which Traffic Manager activities the user can perform:
o
Select Access Disabled to disable Traffic Manager access for the user.
o
Select Monitor Only to allow the user to view statistics from the Monitor tab only.
o
Select Monitor and View Configuration to allow the user to view statistics from the Monitor tab and
to view configuration options from the Configure tab.
o
Select Monitor and Modify Configuration to allow the user to view statistics from the Monitor tab
and to change configuration options from the Configure tab.
8. Click the Add button.
9. Repeat
step 4.
through
step 8.
for each user allowed to access Traffic Manager.
10. Click the Make These Changes button.
11. Click the Configure Security link to return to the Control Access to the Traffic Server Manager section
of the Security page.
12. Select Authentication (basic): On to enable authentication.
Traffic Server checks user names and passwords only if this option is enabled.
13. Click the Make These Changes button.
Controlling host access to Traffic Manager
In addition to using an administrator ID and accounts, you can control which hosts have access to Traffic
Manager.
To control which hosts can access Traffic Manager:
1. Telnet into the HP web cache appliance and select Shell Access as described in
Overview of Access
Methods‚ on page 7
.
2. Open the
mgmt_allow.config
file located in Traffic Server’s
config
directory with Vi.
By default, the file contains the following line that allows all hosts to access Traffic Manager:
src_ip=0.0.0.0-255.255.555.255
action=ip_allow
3. Comment out the default line, as shown below.
#src_ip=0.0.0.0-255.255.555.255
action=ip_allow
4. Using the following format, add a line for each IP address or range of IP addresses allowed to access
Traffic Manager:
src_ip=IPaddress or range of IPaddressses
action=ip_allow
where
IPaddress or range of IPaddresses
is the IP address or range of IP addresses of the hosts
allowed to access Traffic Manager.
For example, to allow a host with the IP address 11.11.11.1 and a host with the IP address 1.1.1.1 to access
Traffic Manager, enter the following lines in the
mgmt_allow.config
file:
src_ip=11.11.11.1
action=ip_allow
src_ip=1.1.1.1
action=ip_allow
5. Save and close the
ip_allow.config
file.
