Restricting Tftp Access To Specified Directories; Table 2-4. Restricting Tftp Access To Specified Directories - Nortel Remote Access for AN and Passport ARN Routers Configuration Manual

Configuring Remote Access for AN and Passport ARN Routers

Restricting TFTP Access to Specified Directories

To restrict TFTP access to a specific directory:
Log in to your UNIX workstation as root.
1.
Insert the appropriate line in the /etc/inetd.conf file.
2.
The examples in
substitute any directory you want.
Table 2-4.
Operating
System
SunOS
Solaris
HP-UX
AIX
Create a symbolic link in the specified directory for every startup file
3.
path name.
For example, to set up symbolic links in the /tftpboot directory:
a.
Note: Do not insert a slash (/) in the cd tftpboot command. A symbolic link
cannot contain references to directories above the directory specified in the
tftpd
b.
2-10
Table 2-4
Restricting TFTP Access to Specified Directories
Sample Line to Insert in /etc/inetd.conf File, or Other Instruction
tftp dgram udp wait root /usr/etc/in.tftpd in.tftpd -s
/tftpboot
tftp dgram udp wait root /usr/sbin/in.tftpd in.tftpd
-s /tftpboot
tftp dgram udp wait root /etc/tftp tftp -s /tftpboot
Use the System Management Interface Tool (SMIT) to configure TFTP .
For instructions, see the IBM guides on TCP/IP daemons and TFTP .
Enter the following command to move to the /tftpboot directory:
cd tftpboot
command line.
Enter the following commands to create symbolic links:
ln -s . usr
ln -s . tftpboot
restrict access to the /tftpboot directory. You can
308614-14.20 Rev 00