API Gateway 10.11 | Administering API Gateway | Security Configuration | Global IP Access Settings For Ports
 
Global IP Access Settings For Ports
 
Allowing Connections from Specified Hosts
Denying Connections from Specified Hosts
If You Inadvertently Deny IP Access to All Hosts
Configuring Restriction to IP Address based on Authentication
This section describes how to specify the global IP access setting for ports. The server uses this setting to determine IP access for ports that do not have a custom IP access setting. The default global setting is Allow by Default.
When you create a port, you can customize IP access for it, or you can specify that it use the global IP access setting for the server. If you use the global IP access setting and later change it, the server will use the new global setting for the port. For example, as shipped, the server uses Allow by Default as the global IP access setting (with no hosts explicitly denied). If you create a new port 6666 and do not customize IP access for it, the server uses Allow by Default for port 6666. If you later change the global IP access to Deny by Default, the server will then use Deny by Default for port 6666. If you later customize IP access to port 6666, subsequent changes to the global setting will have no effect on port 6666.
For any given port, you can specify IP access one of two ways:
*Deny by Default. Set up the port to deny requests from all hosts except for ones you explicitly allow. Use this approach if you want to deny most hosts and allow a few.
*Allow by Default. Set up the port to allow requests from all hosts except for ones you explicitly deny. Use this approach if you want to allow most hosts and deny a few.
You can specify access settings globally (for all ports) or individually (for one port). For more information, refer to respective sections listed in the following table:
Type of access
Section to refer
Configuring Global IP Access
Deny by Default
Allow by Default
Configuring IP Access for Individual Ports
Allow by Default
Deny by Default
To customize IP access for individual ports, see Allowing Access to All IP Hosts and Denying Access to All IP Hosts.