Bay Networks 5390, Administering, Page: 442 / 888

A15-22 893-741-B
Using Model 5390 Security
at_nve_filter
NVE filtering controls a remote access Apple user’s view of network resources: when using Chooser
to select resources, only the resource set defined for the user by the administrator will be visible.
The administrator can specify the NVE filter on a per-user basis. This feature complements the
existing zone list, described above, by offering a higher level of control.
The administrator uses the nve_filter entry in the acp_userinfo file to specify a finite list of filters
on a per-user basis. Only one nve_filter entry per user is permitted. The entry uses the format:
at_nve_filter [include|exclude] tuple,tuple tuple... end
Table A15-4. Entries for at_connect_time in the acp_userinfo File
Entry Description
time_value The format for this argument is <minutes>. For example:
at_connect_time 120
Table A15-5. Entries for at_nve_filter in the acp_userinfo File
Entry Description
include|
exclude The include or exclude qualifier controls how filters are used:
include filters allow only matching answers; exclude filters
discard matching answers and allow non-matching answers.
There is a 10-filters-per-user limit. The default is include.
tuple A three-part string that identifies all network resources. The
three parts of a tuple are: object, type, and zone. The format of
a tuple is: object:type@zone with asterisks as wild cards.
Any *, @, or : used as an NVE character within a tuple must
be preceded by the Escape (\) character. Characters in a tuple
are case-insensitive. Each field of an entity can be 32
characters long.