Bay Networks 5390, Administering, Page: 242 / 888

A10-18 893-741-B
AppleTalk
Zone Security
Every user can have a zone list assigned via remote ACP. If a list is not available via ACP, the Model
5390 server provides all the zones it has learned from the network. If local security is used, use the
per Model 5390 parameter default_zone_list. For more details, see at_zone on page A15-20.
Logging
The Model 5390 server logs activity and errors from the ARA session. The log is accessed via
remote ACP and syslog (see Logging User and Model 5390 Events on page B1-22 for more details).
Network-Visible Entity (NVE) Filtering
NVE filtering controls a remote access Apple user’s view of network resources: when using Chooser
to select resources, only the resource set defined for the user by the administrator will be visible.
The administrator can specify the NVE filter on a per-user basis. This feature complements the
existing zone list, described above, by offering a higher level of control.
The administrator uses the nve_filter entry in the acp_userinfo file to specify a list of filters on a
per-user basis. See at_nve_filter starting on page A15-22 for detailed information on creating
nve_filter entries.
AppleTalk over PPP
AppleTalk over PPP allows Apple PowerBook and Macintosh computers to connect as an endpoint
node to an AppleTalk network. The same Macintosh can also simultaneously run IP over the
connection, allowing the user to use either IP or AppleTalk services as the need arises.
CAUTION: This method of limiting NBP traffic is not secure, and can
be circumvented by a person willing to write some code to probe the
network without using NBP. Also, this feature has no local Model 5390
security equivalent.