If the “Erişim engellendi (Trusted Host değil)” (access denied — not a trusted host) card appears when the management panel opens, with Tespit edilen IP (detected IP) shown below it, and you cannot move to other panel pages, the address you are connecting from is not in the list of addresses allowed to access the management panel (Trusted Hosts). This document explains the causes of the warning and how to add your address to the list from the CLI.
Why does this warning appear?
The management panel can only be accessed from addresses in the Trusted Hosts list. If the list is empty, it can be accessed from any address. The warning appears in the following cases:
- The address of the computer you are connecting from is not in the list (e.g. you are connecting from a different network or over VPN).
- The list was not carried over after the appliance was converted to the A/B layout.
Known issue: In some older versions, the A/B conversion did not carry over the Trusted Hosts list, and in the same versions the panel also incorrectly showed an empty list as “no access”. The current version fixes both. If you are using one of these versions, update the appliance and recreate the list with the steps below.
Tespit edilen IP (detected IP) is the client address seen by the appliance. If there is NAT or a proxy server in between, this address may differ from your computer's own address; the address seen by the appliance must be added to the list.
Solution
1. Check the list
Log in to the SignLogger CLI from the appliance console or over SSH, switch to write mode and display the list:
enable
show system trusted-hostYou can also use get system trusted-host list to see the list as a summary with number, address and comment.
2. Add your address
You can add a single address or a network (CIDR). The number after edit must be a sequence number not used in the list:
config system trusted-host
edit 1
set address 10.100.100.0/24
set comment "Yonetim agi"
next
end
execute commitexecute commit applies the change. Then refresh the panel page.
Warning: Once at least one address is added to the list, only the addresses in the list can access the panel. Make sure you add every network from which you manage the appliance; a wrong entry can lock you out of the panel. CLI access from the appliance console is always available.
3. Recreate the list after the conversion
If you know the list from before the A/B conversion, re-enter each address as in step 2. If you do not know the previous list, contact the support team.
Information for a support request
Collect the output of the following commands:
get system version
show system trusted-host
get log system 100Also provide the Tespit edilen IP (detected IP) value shown on the card and the network from which you connect to the appliance. For more comprehensive information collection, see Collecting information for a support request.
Frequently Asked Questions
What does the “access denied (not a Trusted Host)” warning mean?
The management panel can only be accessed from addresses in the Trusted Hosts list. Panel access is blocked because the address you are connecting from is not in this list. Add your address to the list from the CLI with config system trusted-host and apply it with execute commit.
I cannot access the panel. How do I change the Trusted Hosts list?
The list can also be managed from the CLI. Log in to the CLI from the appliance console or over SSH; CLI access from the console is always available. Switch to write mode with enable, add your address and apply it with execute commit.
Why is the detected IP different from my computer's IP?
If there is NAT or a proxy server between the appliance and your computer, the appliance sees the connection from that device's address. Add the Tespit edilen IP (detected IP) address shown on the card to the list, not your computer's address.
What happens if the Trusted Hosts list is empty?
If the list is empty, the panel can be accessed from any address. As soon as the first address is added, only the addresses in the list can access it; so make sure you add every network you manage the appliance from.