Controlling access to the Manager UI | Intel 1520 manual

3Select server, and press Enter.

4Select delete rules, and press Enter. Doing so displays a list of current rules. If no rules exist, a message displays at the bottom of the screen indicating such.

5Use the arrow keys to position the cursor over the rule you want to delete, and press Enter.

6Press CTRL-X to save your changes and return to the previous screen.

▼Viewing IP Allow rules

1Select the conﬁg menu, and press Enter.

2Select security, and press Enter.

3Select server, and press Enter.

4Select view rules, and press Enter. Doing so displays the ﬁle containing the IP Allow rules.

Controlling access to the Manager UI

The appliance uses Manager Allow rules to specify ranges of IP addresses that are allowed to access the Manager UI. If you want to deny Manager UI access to speciﬁc IP addresses, do not include them in a Manager Allow rule. You can add, delete, and view Manager Allow rules.

▼Adding Manager Allow rules

1 Select the conﬁg menu, and press Enter.

2 Select security, and press Enter.

3 Select mgmt, and press Enter.

4 Select add rules, and press Enter.

5 Enter a rule, and press Enter.

6 Press CTRL-X to save your rule and return to the previous screen.

Each rule must have the following format:

src_ip=IPaddress or IPaddress_range action=ip_allow

The IP address or range of IP addresses speciﬁed in the src_ip ﬁeld are allowed to access the Manager UI.

Examples

The following rule allows one user to access the Manager UI:

src_ip=123.12.3.123 action=ip_allow

The following rule allows a range of IP addresses to access the Manager UI:

src_ip=123.12.3.000-123.12.3.123 action=ip_allow

Chapter 5 Using the Command-Line Interface

83

Image 95

Intel 1520 manual Controlling access to the Manager UI

Contents

Intel NetStructure 1520 Cache Appliance Copyright 2000, Intel Corporation. All rights reserved Contents Configuring the Appliance Using the Command-Line Interface Troubleshooting Problems 109 Error Messages 151 Changing network address configuration on the NIC Contents 106 Preface Bold Who should read this manualConventions used in this manual Convention Purpose Introduction Chapter Web proxy cache What is an Intel NetStructure Cache Appliance?Why use this caching appliance? Flexible cache architecture Intel NetStructure Cache Appliance features Broad protocol support Secure, single-point administrationMultithreading process support High-speed caching To find out about … See … How to use this guideSnmp Network Management Performance reportingPage Getting Started Starting the system for the first time Controls and physical features on your system Command-line interface‚ on Hhmmss Getting Started Accessing the Manager UI Dashboard Using Monitor and Configure mode Monitor mode frame Configure mode frame Verifying that caching works Using online helpAccessing the command-line interface Changing passwordsPage Monitoring Appliance Performance Using the Dashboard Accessing monitor pages Alert light Condition Description Resolving alarmsDashboard alert lights Exposing node detail Changing the selected node Using the Node Using the ARM Using the GraphsUsing the Protocols Using the Cache Using the Mrtg Using the Other Configuring the Appliance Using the Server Basics Accessing configure pages Option Description Setting general optionsNetStructure Cache section What are virtual IP addresses? Setting Web management optionsSetting virtual IP addressing options Using virtual IP addressing for node failover Adding entries to the Virtual IP address list Configuring load-shedding Setting browser auto configuration optionsSetting throttling of network connections Enabling Snmp agents Option Definition Configuring Http Configuring Nntp Name and port see Option Definition FTP Configuring FTP Cache activation Freshness Storage For IMS If Modified Since revalidation requests Following table describes the variable conﬁguration options Variable content Link displays the Change Administrator’s Password Using the SecurityUsing the Routing Setting Http parent caching options Establishing ICP peers Setting ICP options Field Description Option Description Setting server accelerator options Checking Wccp Using the Host DatabaseChecking transparency Configuring the host database Another invalid hostname message to the user Using the Snapshots Configuring DNS Reaching the Snapshots Using the Command-Line Interface Starting the appliance the first time Starting the command-line interfaceUsing the appliance after initial start-up To do this Do this Navigating the command-line interface Changing network addresses configuration Using the setup menu Changing the gateway address Changing the controller speed and transmission modeChanging the DNS address and domain name Using the main menu Configuring time zone settingsConfiguring date and time settings Viewing current network address settings Stopping the appliance Checking the status of the Server and ManagerStarting the appliance Viewing and maintaining versions of the software Installing a new version of the appliance software Application upgrade Running a different version of the appliance software Patch upgradeOS/Application upgrade Deleting a version of the appliance software Clearing statistics Halting the System Rebooting the System Preparing a cache disk Resetting to factory settingsUsing the config menu Setting general controls Configuring Http options Configuring protocol options Configuring Nntp options Conﬁguring Nntp servers Tag Description Following table describes the tags you can use in a rule Tag Description Examples Conﬁguring Nntp access If access is Authenticator is User is Pass is Following table lists the access directive options Configuring FTP options Configuring Secure Socket Layer SSL port Primary Destination Allowed Value Setting filter rules Action Value Secondary Specifier Allowed Value Setting remap rules Target Enabling caching for different protocols Configuring the cache Setting object freshness options Setting disk storage options Following table shows the options Configuring caching rules Request URL method use one of the following Destip=112.12.12.12 scheme=ftp action=never-cache Controlling client access to the appliance Configuring security options Controlling access to the Manager UI Viewing and modifying ICP rules Configuring routing optionsConfiguring and maintaining ICP peers Following table describes each ﬁeld Mcttl Example Enabling and disabling ICP Viewing current ICP settings Enabling and disabling multicast in ICP Setting the ICP port numberSetting the ICP query timeout Controlling parent proxy caching Action Tag Allowed Value Secondary Specifiers Allowed Value Action Tag Allowed Value Configuring Wccp options Enabling and disabling transparent redirection Configuring the Adaptive Redirection Module ARM Rule Description Configuring ARM bypass rules Rule Format Bypass rules have the following format Configuring load-shedding options Configuring the host database options Option Description Configuring logging options Progress Using the monitor menuViewing Node statistics Statistic Description Cache Statistics Description Viewing Protocol statisticsStatistic Description Network Server Statistics Description Client Statistics Description Operations From this Node Statistics Description QueriesOriginating From ICP Peers Viewing Cache statistics Viewing Other statistics Statistic Description Using the expert menu Using the logoff menu Using the save menuUsing the load menu Troubleshooting Problems Rebooting your system from the CLI Rebooting your system Upgrading software Page Appendix a Caching Solutions and Performance Day in the life of a cache request Web proxy caching Cache miss Ensuring cached object freshness Last-Modiﬁed / Date header test Revalidating objectsHttp object freshness tests Expires header test Revalidate rules Default testDeciding whether to serve Http objects Configuring Http revalidation Configuring Http freshness options To cache or not to cache? Configuring Http cachabilityCaching Http alternates Directive source Caching directives Transparent proxy caching Interception strategies Serving requests transparently Using a layer 4-aware switch to filter transparency requests Using a WCCP-enabled router for transparency Using policy-based routing to filter transparency requests ARM redirection Using a router to ﬁlter Http requests More about bypass rules Adaptive interception bypassAppliance adaptive bypass Destination bypass Configuring bypass optionsStatic and dynamic adaptive bypass Source bypass Server acceleration Retrieving requested documents Advantages of server accelerationHow server acceleration works Whereas the corresponding proxy request would look like this Web server redirects Understanding server acceleration mapping rules User Request Translated Request Examples of rules and translations User Request Origin Server Header Translated Header Http cache hierarchies Understanding cache hierarchies Miss ICP cache hierarchies Bombay Nntp cache hierarchies News article caching Supporting several parent news servers Appliance as a news serverAppliance as a caching proxy news server Several servers supplying different groups Blocking particular groupsClustering Several news servers supplying the same groups Pull the overview information for speciﬁed groups Maintaining the cache updates and feedsTransparency Posting Take a partial feed push for speciﬁed groups Configuring Access controlPull the articles for speciﬁed groups Dynamically subscribe to speciﬁed groups Carrier-class architecture Self-tuning DataFlow coreObeying Nntp control messages Client bandwidth throttling Fast space reclamation Fine-grained parallelismRaw-disk object store Alias-free caching Fast kernel packet engine AlarmsAdvanced protocol features High-availability Monitor Dashboard Virtual IP failover Load shedding Node fault toleranceExpansion capabilities Centralized administration Client ACL Page Appendix B Error Messages Title Code Description Html messages sent to clients Appendix B Error Messages 153 Message Description Standard Http response messages Appendix B Error Messages 155 Page Glossary DNS ISP POP Wccp Page Index News server features