Allowing Connections from Specified Hosts

The following procedure describes how to change the global IP access setting to Deny by Default and specify some hosts to allow.

Important:
If you inadvertently lock all hosts out of the server, you can correct the problem by following the steps given in the If You Inadvertently Deny IP Access to All Hosts section.

To allow connection from specified IP hosts

1. Expand the menu options icon

, in the title bar, and select Administration.

2. Select Security > Ports.

The ports page lists all the ports configured with API Gateway, if any.

3. Click Configure Global IP Access Settings.

The options to configure IP access settings at global level are displayed.

4. Select Deny by default.

Note:
If you select Deny by default, ensure that you configure the IP that must be allowed to access ports. Otherwise, ports cannot be accessed by external hosts.

5. In the Allow List field, provide the names of hosts for which you want to allow access to the port and click Add.

You can specify the host names (for example, workstation5.webmethods.com) or IP addresses (for example, 132.906.19.22 or 2001:db8:85a3:8d3:1319:8a2e:370:7348) in the above fields. Repeat this step to add the required host names and IP addresses to the list.

The host names or IP addresses can include upper and lower case alphabetic characters, digits (0-9), hyphens (-), and periods (.) but cannot include spaces. For IPv6, IP addresses can also include colons (:) and brackets ([]).

Note:
IP addresses are harder to spoof, and therefore more secure.

You can use the following pattern-matching characters to identify several clients with similar host names or IP addresses.

Char	Description	Example
*	Matches any number of characters	r*.webmethods.com
?	Matches any single character	workstation?.webmethods.com

6. Click Save.

The changes are saved.