Veritas NetBackup™ Appliance Commands Reference Guide
- Overview
- Appendix A. Main > Appliance commands
- Appendix B. Main > Manage > FibreChannel commands
- Appendix C. Main > Manage > HighAvailability commands
- Appendix D. Main > Manage > Libraries commands
- Appendix E. Main > Manage > Libraries > Advanced > ACS commands
- Appendix F. Main > Manage > License commands
- Appendix G. Main > Manage > MountPoints commands
- Appendix H. Main > Manage > NetBackup CLI commands
- Appendix I. Main > Manage > OpenStorage commands
- Appendix J. Main > Manage > Software commands
- Appendix K. Main > Manage > Storage commands
- Appendix L. Main > Manage > Tapes commands
- Appendix M. Main > Monitor commands
- Appendix N. Main > Network commands
- Appendix O. Main > Network > Security commands (DeviceCert)
- Appendix P. Main > Reports commands
- Appendix Q. Main > Settings commands
- Appendix R. Main > Settings > Alerts commands
- Appendix S. Main > Settings > Notifications view commands
- Appendix T. Main > Settings > Security commands
- Appendix U. Main > Support commands
Name
Main > Settings > Security > NetworkAccessControl — configure and manage the allowed list IP addresses to control network access on an appliance.
SYNOPSIS
AddIP
DeleteIP
Show
DESCRIPTION
The NetworkAccessControl command lets you control which IPv4 or IPv6 addresses are allowed to access the appliance.
Appliance access is allowed through HTTPS for the NetBackup Appliance Web Console or rest APIs, and through SSH for the NetBackup Appliance Shell Menu. To permit access to a specific appliance, add the necessary client IP addresses to the allowed list for that appliance. Any client IP addresses that are not included in the allowed list cannot access the appliance. Any interface level restrictions are managed separately and are also appliance-specific.
For high availability (HA) setups, you must configure the NetworkAccessControl options manually on both appliance nodes and the configurations must match.
Note the following limitations:
You cannot enter a client hostname and automatically link to the associated client IP address.
Adding only the IPv6 address of a client does not allow access for that client when using IPv4. You must add both IPv4 and IPv6 addresses for the client to have access using either method.
When you add IP addresses, make sure that you do not overlap with any existing configured IP address, address range, or subnet CIDR (Classless Inter-Domain Routing). In these scenarios, an error message appears to inform you that the entered IP address or addresses were not added.
For high availability (HA) setups, only after the HA setup has been created and the partner node added to it, you can configure and enable the NetworkAccessControl feature. You must configure this feature manually on both appliance nodes and the configurations must match.
If your appliance is configured as an Appliance Management Server (AMS) or is an agent for an AMS, make sure that you add those IP addresses to the allowed list. The AMS must include the IP addresses of the agents, and the agents must include the IP address of the AMS.
OPTIONS
The following describes the options for the NetworkAccessControl command:
- AddIP
Add one or more client IP addresses to the allowed list on the current appliance. To add multiple addresses, choose from the following:
To enter multiple addresses, add a comma (,) between each address.
To enter a range of consecutive IP addresses, add a hyphen or dash (-) between the IP addresses. For example: 10.188.133.105-10.188.133.109
You can also use CIDR notation to enter a range of IP addresses. For example: 10.188.133.100/30
- DeleteIP
Delete one or more existing IP addresses from the allowed list on the current appliance.
- Show
Display the configured IP addresses in the allowed list on the current appliance.