Admin IP Restrict

It's possible to restrict admin area access to a specific set of IP addresses. Administration of this feature is only available via CLI on the control server.

Adding an IP address

You can add as many addresses as you like.

From CLI run the following command:

vfcli-ctrl admin:ip-restrict addip IP_TO_ADD

Replace IP_TO_ADD with the address you would like to lock the admin area too. for example:

vfcli-ctrl admin:ip-restrict addip 10.0.100.200

You can also allow the whole range in the subnet by shortening the address:

vfcli-ctrl admin:ip-restrict addip 10.0.100.

This functionality also applies to IPv6.

Deleting an IP address

From CLI run the following command:

vfcli-ctrl admin:ip-restrict delip IP_TO_DELETE

Replace IP_TO_DELETE with the address you would like to delete. for example:

vfcli-ctrl admin:ip-restrict delip 10.0.100.200

Enable IP Restrict

Once you have added the IP addresses using the commands above, you will need to enable restrictions. You can do that by running the following command:

vfcli-ctrl admin:ip-restrict enable

Disable IP Restrict

If you need to turn restrictions off for any reason, run the following command:

vfcli-ctrl admin:ip-restrict disable