16.10 - Creating IP Filters Containers and Inserting IP Filters - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

You can use IP filters to allow or deny user access to Teradata Database from particular IP addresses. Make sure you are familiar with the function of allow and deny type IP filters before configuring tdatIPFilter objects in the directory. For information, see Restricting Logons by IP Address.

If directory users log on through Unity, you must configure the same IP restrictions for each database system managed by Unity. IP restrictions are not configured on Unity, which only passes the user IP address to Teradata Database.
IP Filter Type and Setting Function
Restrictive

Set tdatAllowDeny to TRUE

Denies all IP addresses except those specifically allowed.
Permissive

Set tdatAllowDeny to FALSE

Allows all IP addresses except those specifically denied.