Setting a whitelist

Virtual Storage Platform One SDS Block System Administrator Guide

Version
1.16.x
Audience
anonymous
Part Number
MK-24VSP1SDS001-03

To prevent unauthorized management operations, you can set the IP address of a controller node in a whitelist. The maximum number of IP addresses that can be set is 10.

CAUTION:
  • Immediately after you set or change a whitelist, a REST API, CLI, or VSP One SDS Block Administrator operation cannot be performed temporarily. Wait for approximately 30 seconds before you perform an operation.

  • To use a VMware vCenter Server plugin, set the IP address of VMware vCenter Server in the whitelist. If you have not set VMware vCenter Server in the whitelist, information cannot be referenced from VMware vCenter Server.

  • (Bare metal) Operations on the console interface cannot be restricted by whitelist settings. If you want to restrict console interface operations, use the security settings provided by iLO for each storage node. For details, refer to the iLO User Guide provided by the vendor of the physical server to be used as the storage node.

  • Required role: Security

  1. Edit the whitelist setting.

    Run the command with the following specified: whether the whitelist is enabled and the IP address (IPv4) of the controller node to be set in the whitelist. The set content is overwritten.

    REST API: PATCH /v1/objects/web-server-access-setting

    CLI: web_server_access_setting_set

    Verify the job ID which is displayed after the command is run.

  2. Verify the state of the job by specifying the job ID.

    REST API: GET /v1/objects/jobs/<jobID>

    CLI: job_show

    If the job state is "Succeeded", the job is completed.

  3. Verify that the whitelist is set correctly.

    REST API: GET /v1/objects/web-server-access-setting

    CLI: web_server_access_setting_show

    After running the command, you receive a response indicating the set content.

  4. (Bare metal) Back up the configuration information.

    Perform this step by referring to Backing up the configuration information (Bare metal).

    If you continue operations with other procedures, you must back up the configuration information after you have completed all operations.