Configuring the outbound firewall rules

Last Updated : Sep 10, 2020 |

About this task

When you configure the outbound firewall rule, System Manager can connect only to those destination system that are added in the allowed whitelist. Therefore, when you add the very first outbound firewall rule, ensure that you add all the required destination IP Addresses in the allowed whitelist to which System Manager will connect to.

Procedure

  1. Log in to the System Manager command line interface with CLI user credentials that you create during application deployment.
  2. Do one of the following:

    • To add the list of destination IPv4, IPv6, FQDN, and Network with CIDR notation IP addresses in the whitelist, type configureOutboundFirewall add -s <destination IPv4/IPv6/FQDN/CIDR IPs>, and press Enter.

      You can add multiple entries with comma-separated values.

      For example, to add the specific entries, type the following:

      configureOutboundFirewall add -s 10.10.10.10,10.10.10.11,test.avaya.com,10.10.10.12/24,2a07:2a42:adc0:19::9:25

    • To add the list of destination IPv4, IPv6, FQDN, and Network with CIDR notation IP addresses in the whitelist through a file, type configureOutboundFirewall add -f <absolute path of the.txt file>, and press Enter.

      You can add each entry in a separate line in the <nameofthefile>.txt file.

      For example, the format of the file is:

      
cat /home/location/filename.txt
 10.10.10.10
 10.10.10.11
 2a07:2a42:adc0:19::9:25
 test.avaya.com
 10.10.10.12/24

      For example, to add the entries through the file, type the following:

      configureOutboundFirewall add -f /home/location/filename.txt

    While processing the FQDN, System Manager resolves the FQDN to its IP Address, and then adds, removes, or overwrites that IP address in the whitelist.

  3. If the system prompts, type y to continue.

    In the Geographic Redundancy setup, System Manager displays the following message:

    Geographic Redundancy configuration detected. Separate configuration of Outbound Firewall is required on the Primary and Secondary servers.

    In the Geographic Redundancy setup, if you need to configure the outbound firewall rules, then you need to add the peer IP addresses on the primary and secondary System Manager servers.

    System Manager adds the specified IP Addresses and FQDN in the whitelist.

Related information
configureOutboundFirewall command