Ip Address Restriction; Controlling Use Of Set Ppp/Slip Commands; Securing A Port - Lantronix SCS Reference Manual

Security

11.5.2 IP Address Restriction

To avoid routing problems and enhance security, the SCS can restrict incoming remote networking callers
to a particular address or range of addresses.
Each site may specify a particular range of acceptable IP addresses. When an incoming caller requests to
use a specific address, it will be compared to this range. If the address falls within the range, the connection
will be permitted, if not, the connection attempt will fail.
To specify the beginning and end of the range, use the Define Site IP Remoteaddress command. Two
addresses must be specified: the beginning of the range and the end of the range.
Local>> DEFINE SITE irvine IP REMOTEADDRESS 192.0.1.110 192.0.1.254
Callers will not be permitted to use IP addresses with the host part of the address set to all zeroes or all ones.
These addresses are reserved to identify broadcast packets. If the range that you specify includes such an
address (for example, 192.4.5.0 or 192.4.5.255) and a caller requests this address, the connection will not
be permitted.
For more information on IP address assignment, see IP Address Negotiation on
Note:
page 4-7.

11.5.3 Controlling Use of Set PPP/SLIP Commands

In order for incoming callers to start PPP or SLIP with the Set PPP/SLIP commands, PPP or SLIP must be
enabled on the port receiving the call. By default, PPP and SLIP are disabled.
To enable or disable PPP or SLIP on a port, use the Define Ports PPP/Define Ports SLIP commands:
Local>> DEFINE PORT 2 PPP DISABLED
Local>> DEFINE PORT 2 SLIP DISABLED

11.5.4 Securing a Port

When a port is secure, users on that port will be prevented from editing many of the port's settings. In
addition, they will only be able to display a limited amount of information using Show/Monitor/List
commands.
Users logged in on secure ports cannot become privileged users.
Note:
It is recommended to secure ports used for public use; for example, ports used for public dial-in modem
pools. To secure a port, use the Set/Define Ports Security command:
Local>> DEFINE PORT 2 SECURITY ENABLED
The complete syntax of Set/Define Ports Security is discussed on page 12-85.
Note:
Figure 11-37: Specifying Range of Addresses
Figure 11-38: Disabling PPP and SLIP
Figure 11-39: Securing a Port
11-20
User Restrictions