2
0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-30 21:45:37 +00:00

[2066] revised text about xfrout acl config per my own suggestion

This commit is contained in:
JINMEI Tatuya
2012-08-14 12:31:06 -07:00
parent c22e36e2ff
commit a5c9a0e9e8

View File

@@ -2115,11 +2115,6 @@ http://bind10.isc.org/wiki/ScalableZoneLoadDesign#a7.2UpdatingaZone
<screen>&gt; <userinput>config show Xfrout/transfer_acl</userinput> <screen>&gt; <userinput>config show Xfrout/transfer_acl</userinput>
Xfrout/transfer_acl[0] {"action": "ACCEPT"} any (default)</screen> Xfrout/transfer_acl[0] {"action": "ACCEPT"} any (default)</screen>
<para>
You can configure it in the same way as any ACL
(<xref linkend="common-acl" />).
</para>
<para> <para>
If you want to require TSIG in access control, a system wide TSIG If you want to require TSIG in access control, a system wide TSIG
"key ring" must be configured. "key ring" must be configured.
@@ -2135,6 +2130,11 @@ Xfrout/transfer_acl[0] {"action": "ACCEPT"} any (default)</screen>
will use the system wide keyring to check will use the system wide keyring to check
TSIGs in the incoming messages and to sign responses.</para> TSIGs in the incoming messages and to sign responses.</para>
<para>
For further details on ACL configuration, see
<xref linkend="common-acl" />.
</para>
<note><simpara> <note><simpara>
The way to specify zone specific configuration (ACLs, etc) is The way to specify zone specific configuration (ACLs, etc) is
likely to be changed. likely to be changed.