
Security
Server Configuration
4-16
Since modems do not log the user out when a connection is finished, you will probably want to have the
Break or Local key available so you can return to the ETS command line; see Set/Define Port Local for
more information. If you wish to disconnect from the modem session, use the Disconnect or Logout
command.
If a port and modem are to be used to allow dial in connections, you may wish to make the port Secure.
Secure status prevents dial-in users from changing the port characteristics and preventing other users from
being able to dial in properly.
4.7 Security
Security measures are available to monitor users and to restrict users from unwanted activity. Security can
be implemented server-wide, or it can be configured for individual ports as desired. The following section
discusses server-wide security measures; for port security measures, see Chapter 5, Ports.
4.7.1 Controlling Incoming Sessions
The Set/Define Server Incoming command allows or denies incoming LAT or Telnet connections. It can
also require incoming users to enter the ETS login password to log in from the network. The following
commands allow LAT and Telnet users to log into the ETS without having to enter a password.
Figure 4-31: Allowing Unrestricted Incoming Connections
For security-conscious systems, the following commands can be used to only allow authenticated logins.
That is, login attempts are subject to password verification.
Figure 4-32: Configuring Password for Incoming Connections
Connection Methods on page 2-15 explains in detail the mechanics of setting up incoming sessions. Note
that users logging in from the network are much harder to trace and monitor than those on attached physical
ports.
Make sure your ETS and network environment are reasonably secure if you allow network logins. Also,
refer to Enabling Server-Wide Port Characteristics on page 4-1 for details on configuring ports for network
logins. Note that you can configure the TCP/IP security table to enable or disable network connections from
certain hosts—see IP Security Table on page 4-16 for more information.
4.7.2 IP Security Table
The ETS provides an IP Security Table as a mechanism for restricting incoming and outgoing TCP/IP
sessions (including Telnet, Rlogin, SLIP, and RTEL). The security table allows the manager to enable or
disable access to and from the ETS based on port number as well as IP address. The IP security table does
not apply to print connections via RTEL.
Local> SET SERVER INCOMING BOTH
Local> SET SERVER INCOMING NOPASSWORD
Local> SET SERVER INCOMING PASSWORD
Local> SET SERVER LOGIN PASSWORD “8ball”