Acl - IBM WebSphere XS40 Command Reference Manual

Datapower xml security gateway
Table of Contents

Advertisement

Examples
v Enables lockout behavior for accounts that on the fifth login failure, the account
v Disables lockout behavior.

acl

Enters Access Control List configuration mode for a specified service provider.
Syntax
acl name
acl ssh
acl web-mgmt
acl xml-mgmt
no acl name
Parameters
name
ssh
web-mgmt
xml-mgmt
Guidelines
While in Access Control List configuration mode, you can configure an ACL for a
specific service provider or for later assignment to a service provider.
An ACL contains one or more clauses. Each clause consists of an IP address range
that is defined by an IP address and net mask and a Boolean value (ALLOW or DENY).
IP addresses are evaluated against each clause in the order in which they are in the
is locked out locked out until reset by a privileged administrator:
# account lockout-duration 0
# account max-login-failure 4
# account max-login failure 0
Specifies the name of an object-specific or standalone ACL.
v Can be the name of the service provider (for example, the name of a
DataPower service or the name of a CLI Telnet service) in which case the
enters Access Control List configuration mode to create an object-specific
ACL.
v Can be the name of a standalone ACL, which can later be assigned to a
service provider, or to any of the Protocol Handler types.
The name can contain a maximum of 128 characters. For restrictions,
refer to "Object name conventions" on page xxiv.
Identifies the SSH service. In this case, the command enters ACL
configuration mode to create an SSH-specific ACL.
Identifies the WebGUI Management Interface. In this case, the command
enters ACL configuration mode to create a WebGUI Management
Interface-specific ACL.
Identifies the XML Management Interface. In this case, the command enters
ACL configuration mode to create an XML Management Interface-specific
ACL.
Chapter 2. Global configuration mode
21

Advertisement

Table of Contents
loading

Table of Contents