我要评分
获取效率
正确性
完整性
易理解

Updating the IP Address Trustlist or Listening IP Address Segment

On an offload node, run the haf-tool config command to configure the IP address trustlist and listening IP address segment. The command is as follows:

su -s /bin/bash - haf -c "haf-tool config -s <key> -v <value> --offload"

Restart haf_daemon for the configuration to take effect.

su -s /bin/bash - haf -c "haf-tool restart"

Table 1 Parameter description

Option

Description

Mandatory

-s option key

The value can be service_ip or ip_white_list.

  • service_ip: IP address segment listened by the HAF.
  • ip_white_list: IP address trustlist.

Yes

-v option value

Value of the HAF configuration item.

  • service_ip: valid IP address segment (for example, 10.175.119.0/24).
  • ip_white_list: valid IP addresses. Use commas (,) to separate multiple IP addresses (for example, 10.175.119.0,127.0.0.1).

Yes

--offload

The operation is performed on an offload node.

Yes

  1. Use SmartKit to resend the IP address trustlist. The command is as follows:

    Parameter

    Description

    Task Name

    Updating the IP address trustlist

    Task Description

    Updating the IP address trustlist of offload nodes

    Run Directory

    /opt/haf-software

    Run Command

    On an offload node:

    su -s /bin/bash - haf -c "haf-tool config -s ip_white_list -v ip_list --offload"

    Whether to Check Return Code

    Yes

    Expected Return Code

    0

  2. Use SmartKit to update a listening IP address segment. The command is as follows:

    Parameter

    Description

    Task Name

    Updating the IP address trustlist

    Task Description

    Updating the IP address trustlist of offload nodes

    Run Directory

    /opt/haf-software

    Run Command

    On an offload node:

    su -s /bin/bash - haf -c "haf-tool config -s service_ip -v sevice_ip_value --offload"

    Whether to Check Return Code

    Yes

    Expected Return Code

    0