SOURCE Keyword For Terminal Source Restriction For The IPV6 128 Binary Address

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Can the SOURCE keyword be used to restrict a user to an IP address for IPV6 like the manuals have documented for IPv4. For example:

 

 	IPv4 HEX value of 127.0.0.1 with: SOURCE(7f000001) 

 

IPV6 address 128 binary bits format-eight parts divided by colons&....example for localhost is ::1

Environment

Release:
Component: AWAGNT

Resolution

Solution:

The SOURCE restriction can be used with whatever is in the terminal field passed along the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, i.e. a signon. When connecting via an IPV6 type address and that field is filled up with acceptable characters, then it should be possible to use it as aSOURCE restriction. For example, if '::1' is passed in the terminal field on the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, then to restrict the signon to this source, use:

 

 	TSS ADD(acid#) SOURCE(::1)