SOURCE Keyword For Terminal Source Restriction For The IPV6 128 Binary Address

book

Article ID: 18192

calendar_today

Updated On:

Products

CA Cleanup CA Datacom CA DATACOM - AD CA CIS CA Common Services for z/OS CA 90s Services CA Database Management Solutions for DB2 for z/OS CA Common Product Services Component CA Common Services CA Datacom/AD CA ecoMeter Server Component FOC CA Easytrieve Report Generator for Common Services CA Infocai Maintenance CA IPC Unicenter CA-JCLCheck Common Component CA Mainframe VM Product Manager CA Chorus Software Manager CA On Demand Portal CA Service Desk Manager - Unified Self Service CA PAM Client for Linux for zSeries CA Mainframe Connector for Linux on System z CA Graphical Management Interface CA Web Administrator for Top Secret CA CA- Xpertware CA Top Secret CA Top Secret - LDAP CA Top Secret - VSE

Issue/Introduction

Description:

Can the SOURCE keyword be used to restrict a user to an IP address for IPV6 like the manuals have documented for IPv4. For example:


 	IPv4 HEX value of 127.0.0.1 with: SOURCE(7f000001) 

IPV6 address 128 binary bits format-eight parts divided by colons&....example for localhost is ::1

Solution:

The SOURCE restriction can be used with whatever is in the terminal field passed along the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, i.e. a signon. When connecting via an IPV6 type address and that field is filled up with acceptable characters, then it should be possible to use it as aSOURCE restriction. For example, if '::1' is passed in the terminal field on the RACROUTE REQUEST=VERIFY,ENVIR=CREATE, then to restrict the signon to this source, use:


 	TSS ADD(acid#) SOURCE(::1)

Environment

Release:
Component: AWAGNT