Restrict NETCONF operations
A basic example that shows how to restrict access, so that specific NETCONF clients cannot query NETCONF in Vyatta NOS.
NETCONF operates over an SSH session that uses TCP port 830
. You can use this to restrict usage through configuration of the firewall.
In this example, we restrict access so that NETCONF clients on subnet 10.100.100.0/24
cannot perform NETCONF queries.
10.100.100.0/24
subnet will not be able to perform a NETCONF query to Vyatta NOS on port 830
.