Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 80

NSM Infranet Controller Configuration Guide
Related
Documentation
62
Users > User Roles > Select Role > General > Restrictions > Source IP Restrictions
to configure source IP access restrictions for user roles.
Users > User Realms > Authentication Policies > Source IP to configure source IP
access restrictions for user realms.
Add or modify settings as specified in Table 11 on page 62.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 11: Source IP Access Restrictions Configuration Details
Option Function
Allow Specifies from which IP
addresses users can access an
Infranet Controller sign-in page,
be mapped to a role, or access
a resource.
Source IP Address Specifies the source IP address.
Source IP Netmask Specifies the IP netmask.
Access Specifies whether to allow or
deny access.
Enable Specifies whether or not
Administrators to administrators can sign in from
sign in on the the external port
External Port
Enable Specifies whether or not
Administrators to administrators can sign in from
sign in on the the internal port.
Internal Port
Configuring Infranet Controller Browser Access Restrictions (NSM Procedure) on
page 63
Configuring Infranet Controller Certificate Access Restrictions (NSM Procedure) on
page 64
Configuring Infranet Controller Password Access Restrictions (NSM Procedure) on
page 66
Your Action
Select Users from any IP address to
enable users to sign into the Infranet
Controller from any IP address.
Select Users from IP addresses which
pass the specified matching policies
to allow access only to the listed IP
addresses.
Enter the IP address.
Enter the IP netmask.
Select Allow to allow the user to use
the IP address.
Select Deny to prevent users from
using the IP address.
Select this option to enable
administrators to sign in on the external
port..
NOTE: This setting can be configured
only for admin realms.
Select this option.
NOTE: This setting can be configured
only for admin realms.
Copyright © 2010, Juniper Networks, Inc.