How to restrict access to tomcat manager to specific hosts?

[Nar Karapetyan]

Hi,

I need to allow access to tomcat manager 
(http://<servername>:<port>/manager/html)
only to the localhost using Tomcat's means.

Inspecting the request for the IP, and blocking a non-localhost ip is not 
accepted as per the requirement I have.

How can I do that?

I have tried to add the following to the catalina.policy file, but it didn't 
work:

grant codeBase "http://<server ip>:8080/manager/html" {
   permission java.net.SocketPermission "127.0.0.1", "connect";
};

Thank you,
Regards,
Nareg Garabedian