Cli_Security; Connect_Security - Bay Networks 5390 Administering

Communications server

Hide thumbs Also See for 5390:

Table of Contents

Conﬁguration Parameters

cli_security

This asynchronous port parameter enables user authentication by the host-based ACP server for all

CLI connections. When disabled, you cannot use any Model 5390 security mechanism other than

the administrative password for CLI ports. A Y enables this parameter, an N disables it. The default

This Model 5390 parameter deﬁnes the ﬁle name for the conﬁguration ﬁle maintained on the load

host. This ﬁle contains information about gateways, rotaries, macros, and services; it must reside

in the directory

/usr/spool/erpcd/bfs. The default ﬁle name is conﬁg.annex.

This asynchronous port parameter enables the host-based security policy for access from the CLI

to the network (using telnet and rlogin only). If connect_security is enabled, the user must receive

authorization to connect to a host on the network. The supplied security policy scans the ﬁle /

install-directory/acp_restrict to authorize a connection to a host from the Model 5390 server. If

authorization is not granted, the connection is not made. A Y enables this parameter, an N disables

it. The default is N.

Formatting Codes for Model 5390 Prompts (continued)

The user name deﬁned for the port; if none, a null string.

NOTE: When cli_security is enabled, the Model 5390 server logs

PPP/SLIP logins/logouts to the acp_logﬁle.