Bay Networks 6300 Supplement Manual page 253

Book A
Remote Annex 6300 Supplement to the Remote Annex Administrator's Guide for UNIX
Basic ACP Configuration
This section outlines procedures for configuring the basic ACP features
and describes what happens in each case if ACP goes down.
CLI Security
You can set up host-based security for CLI connections in which users
must provide a valid user name and password before they are granted
access to a CLI:
1. Set the cli_security parameter to Y, so that the RA 6300 will use
ACP.
2. Define a security server using the pref_secure1_host,
pref_secure2_host, or security_broadcast parameter (see
Configuring the Security Server
3. Create entries in the acp_regime file defining the authentication
systems to be used and the conditions under which to use
them.
The install program creates the acp_regime file, then prompts you
for a default regime and (in some cases) a password file name, which
it enters into acp_regime. Subsequently, you can add to and/or
change the contents of this file. (See
on page 15-245.)
4. Create entries in the appropriate password files (see
User Password Files
5. (Optional) Configure encryption for security messages (see
Encrypting Security Messages
If ACP is down, the RA 6300 acts as follows:
• First, the RA 6300 prompts for the password specified in the
port_password parameter. If the port_password parameter is
not set ("<unset>"), the RA 6300 does not connect the user to
the CLI.
Chapter 15
on page 15-230).
Configuring the acp_regime File
on page 15-247).
on page 15-232).
Using RA 6300 Security
Creating
A-225