ECS 3.6.1 Administration Guide

Introduction

• By default, there is no restriction set for a user.
• CAS user IP restriction is applicable for users across all VDCs.
• Default IP limit for a user is 10, and it is configurable.
  NOTE To change the default IP limit value contact ECS Remote Support.

To set user IP restrictions

PUT /object/user-cas/ip-restrictions/{namespace_name}/{user_name}

response body example 1: (by default when there is no IP restriction set for the user)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions>
  <user_name>clientuser</user_name>
</user_ip_restrictions>

response body example 2: (only the below provided client IP will have access to the user)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_param>
<ip_restrictions>128.128.128.128</ip_restrictions>
< ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</user_ip_restrictions_param>

To get user IP restrictions

GET /object/user-cas/ip-restrictions/{namespace_name}/{user_name}

request body example 1:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><user_ip_restrictions_param></user_ip_restrictions_param>

request body example 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions>
<ip_restrictions>128.128.128.128</ip_restrictions>
<ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</user_ip_restrictions>

To list user IP restrictions

GET /object/user-cas/ip-restrictions/

response body example 1:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_list>
<userIpRestriction>
<user_name>clientuser</user_name>
</userIpRestriction>
<userIpRestriction>
<user_name>wuser1@sanity.local</user_name>
</userIpRestriction>
</user_ip_restrictions_list>

response body example 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_list>
<userIpRestriction>
<ip_restrictions>128.128.128.128</ip_restrictions>
<ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</userIpRestriction>
<userIpRestriction>
<user_name>wuser1@sanity.local</user_name>
</userIpRestriction>
</user_ip_restrictions_list>

response body example 1: example for a user without any client IP restriction set. (By default there won’t be any restriction set for a user) 
response body example 2: example for user when client IP restriction is set