Configure security and authentication
Introduction
Digi CM User Guide
68
Introduction
The Digi CM unit provides four methods for controlling access to the network and the devices on the
network:
▪
Restricting or permitting IP filtering
This method allows or prevents users with specific IP addresses from accessing devices or serial
ports on the network. IP filtering can be permitted or restricted for all ports globally or per port.
▪
Restricting or permitting specific users
You easily can add users to or remove them from a list of restricted or permitted users list.
▪
Enabling sniff session access
This method allows multiple users to access a single port.
▪
Using a central point (System administration > Security profile) where you establish security
parameters per network, port, or password.
The Digi CM unit supports several authentication methods, including:
▪
Local
▪
RADIUS
▪
▪
LDAP
▪
Kerberos (The Kerberos module is not part of the normal firmware because of memory
constraints. You can download the module from
and place onto /usr2/ if required. To
copy files to /usr2/, use a scp tool such as WinSCP.)
▪
Custom PAM. You can configure authentication so that a secondary method is attempted if the
primary method fails.
Configure network IP filtering
The Digi CM unit offers built-in firewall functionality to limit TCP/IP traffic to and from certain
networks, TCP ports, and interfaces. The functionality implemented is based on the Linux tool IP
tables.
The next scenario shows that access to the device connected to the Digi CM is allowed only on the .1
subnet. The device at 192.168.1.108 can access the device connected to the Digi CM because it is in
the range allowed by the IP Filter rule.
Summary of Contents for Digi CM 16
Page 1: ...User Guide Digi CM 8 port 16 port 32 port and 48 port...
Page 63: ...Digi CM User Guide 63 User administration Administer users 64...
Page 130: ...Power Controller Cascade multiple Digi RPM units Digi CM User Guide 130...
Page 131: ...Digi CM User Guide 131 Port clustering Introduction 132 Configure port clustering 132...
