Updating the IP Allowlist

This topic provides instructions for updating the IP allowlist.

About this task

The IP allowlist defines a set of IP addresses that are allowed to access the system console on any port. If the list is empty or has not yet been synced to the system IP tables, IP addresses are not filtered. If the list is populated and has been synced to the system IP tables, only the IP addresses in the list will be allowed to access the system console. Take great care in setting the IP allowlist to include all addresses prior to synchronization that need to access the system console. For example, if you are using AOS to edit the IP allowlist and do not include the IP addresses of the AOS broker, you will be locked out of using the system console until a local user edits the list to include the AOS broker’s IP address.

Procedure

  1. From the System console management GUI, select Console Settings > IP Allowlist.
  2. If you see the message Take Control of This Page From IBM Service, select Take Control of This Page From IBM Service.
    Note: To transfer control back to IBM service personnel, select Transfer Control of This Page to IBM Service.
  3. Type in the addresses that you want to allow system console access. When the list is satisfactory, click Sync List With IP Tables to enforce access to the system console by only the addresses on the list.