Allow few pages based on IPs | Community

Level 5

Solved

Allow few pages based on IPs

Forum|Forum|2 years ago
May 24, 2023
5 replies
1630 views

Hi Team,

We are trying to allow/restrict few page access based on IP adress. Requirement is if user is connected with VPN, can access resource /content/mysite/us/en/private/*, if not connected, it should give 403 to all.

What we tried as below but its not working. Although IP address is correct in our real filter.

/filter {

........................

......................
   /0110 {
       /type "deny"
       /path "/content/mysite/us/en/private/*"
       /ips {
           "0.0.0.0/0"
       }
   }
   /0111 {
       /type "allow"
       /glob "/content/mysite/us/en/private/*"
       /ips {
           "192.0.0.0/8"

       }
   }

}

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by rawvarun

Checkout https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/implementing/using-cloud-manager/ip-allow-lists/introduction.html?lang=en for AEM as Cloud.

For other AEM versions, checkout https://blogs.perficient.com/2022/02/15/ip-whitelisting-through-aem-dispatcher-in-5-easy-steps/

Saravanan_Dharmaraj

Community Advisor

Community Advisor

@arvind-1 If you know the audience and can create a group for them then you can use the Closed User Groups(CUG) on the published site.

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/cug.html?lang=en

Sorry thats not what you asked for, but i am throwing the idea since the IP changes needs to be maintained in dispatcher level.

Level 5

Thanks @saravanan_dharmaraj .

Unfortunately CUG/audience is not known. we need to deny/allow based on IP only.

Making change at Dispatcher level is in our scope so Its not an issue 🙂

Community Advisor

Community Advisor

Hello @arvind-1

Can you configure two virtual host at the dispatcher level?

one for your intranet
one for your internet

Deny rule for the internet and an allow rule for the intranet.

Aanchal Sikka

praveenk9057427

Level 2

Hi @arvind-1 , Have you tried using 'allowedClients'.

/allowedClients {
/0 { /type "deny" /glob "0.0.0.0" }
/1 { /type "allow" /glob "192.0.0.0" }

}

Community Advisor

Community Advisor

Do you have CDN?
It will be better, safe and easy if you manage these kind of stuff at CDN level.

Hope this helps

Umesh Thakur

Community Advisor

Accepted solution

Community Advisor

Checkout https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/implementing/using-cloud-manager/ip-allow-lists/introduction.html?lang=en for AEM as Cloud.

For other AEM versions, checkout https://blogs.perficient.com/2022/02/15/ip-whitelisting-through-aem-dispatcher-in-5-easy-steps/

Level 5

Thanks all for your kind reply. It helped.

We followed below link and able to get the same done.

https://experienceleague.adobe.com/docs/experience-cloud-kcs/kbarticles/KA-17455.html?lang=en#