Can the SOURCE keyword be used to restrict a user to an IP address for IPV6 like the manuals have documented for IPv4?
search cancel

Can the SOURCE keyword be used to restrict a user to an IP address for IPV6 like the manuals have documented for IPv4?

book

Article ID: 13191

calendar_today

Updated On:

Products

Top Secret Top Secret - LDAP

Issue/Introduction

Can the SOURCE keyword be used to restrict a user to an IP address for IPV6 like the manuals have documented for IPv4?

For example:


  IPv4 HEX value of 127.0.0.1 with: SOURCE(7f000001)

IPV6 address 128 binary bits format-eight parts divided by colons&....example for localhost is ::1

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

The SOURCE restriction can be used with whatever is in the terminal field passed along the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, i.e. a signon. When connecting via an IPV6 type address and that field is filled up with acceptable characters, then it should be possible to use it as a SOURCE restriction. For example, if '::1' is passed in the terminal field on the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, then to restrict the signon to this source, use:


  TSS ADD(acid#) SOURCE(::1)