About Setting Permissions to Connect to Remote Brokers across a Cluster Gateway
You configure ACLs on a cluster gateway so that the Broker requesting information from the remote Brokers on the other side of the gateway must be granted permission to receive data.
For a cluster gateway ACL, the user name ACL on the local gateway contains one entry: the SSL identity of the Broker Server on which the remote gateway resides.