Tavve zoneranger User Manual page 258

ssl
Usage Guidelines
Each of the message-system commands will take effect immediately when executed. The
clauses are positional significant. Thus each clause takes an optional index position which de-
termines its place relative to the other rules. The indices start at 1. If no index position is
specified, the rule is placed at the bottom of the list.
message-system restricted-address ip_address_pattern position index
no message-system restricted-address ip_address_pattern position index
message-system ssl [ trusted-subject word position index ]
no message-system ssl [ trusted-subject word position index ]
Example
This example shows how to restrict the ZoneRanger from initiating communications with IP
addresses 10.1.10.*.
This example shows how to specify a new trusted subject for ZoneRanger to allow for com-
munications.
node
To manage Node Groups for this ZoneRanger. To remove a group, use the no form of this com-
mand .
ZoneRanger 5.5 User's Guide
Configure the SSL Trust for ZoneRanger communications
restricted-address Configure the addresses to which ZoneRanger cannot initiate
communications
ip_address_pattern IP address pattern to use for this restriction
position Position to place restricted-address rule (optional)
index Index position of rule starting at 1
no Delete message-system restricted-address rule
ssl Configure the SSL Trust for ZoneRanger communications
trusted-subject Specifies a Trusted Subject for ZoneRanger
word Specifies the Trusted Subject for ZoneRanger to use
position Position to place message-system rule (optional)
index Index position of rule starting at 1
no Delete message-system ssl rule
zr# message-system restricted-address 10.1.10.*
zr# message-system ssl trusted-subject "CN=Ranger
Gateway,OU=Engineering,O=Tavve,L=Morrisville,ST=North Carolina,C=US"
258