Terminal-Server Administrative Tasks
Disconnecting user Telnet connections
MAX Administration Guide
3-9
Disconnecting user Telnet connections
To disconnect a specified user’s Telnet connection use the terminal-server command-line
interface. Disconnect the user by specifying the session ID. The resulting disconnect code is
identical to the RADIUS disconnect code, allowing you to track all administrative disconnects.
To terminate a Telnet session, enter the command as follows:
kill session ID
where
session ID
is the session ID as displayed by the Show Users command described in
the preceding section. The reported disconnect cause is DIS_LOCAL_ADMIN. The active
Security profile must have Edit All Calls set to
Yes
. If
Edit All Calls=No
, the following
message appears when you enter the Kill command:
Insufficient security level for that operation.
When the session is properly terminated, a message similar to the following appears:
Session 216747095 killed.
When the session is not terminated, a caution similar to the following appears:
Unable to kill session 216747095.
Using Set commands
The MAX unit supports administrative Set commands such as Set All, Set Term, and
Set Password. To display all of the Set commands, enter the Set ? (command with a question
mark), as in the following example:
ascend% set ?
Use the Set All command to display the current settings. For example:
ascend% set all
term = vt100
dynamic password serving = disabled
Enable password mode
The Set Password command puts the terminal-server in password mode, in which a Security
Dynamics ACE/Server or Enigma Logic SafeWord server at a secure site can display password
challenges dynamically in the terminal-server command-line interface.
Dynamics ACE/Servers use ACE authentication, a form of token-card authentication in which
RADIUS forwards a connection request to a Security Dynamics ACE/Server. The ACE/Server
sends an Access-Challenge packet back through the RADIUS server and the MAX unit to the
user who is dialing in. The user sees the challenge message, obtains the current token from the
card, and enters the token. A token is a type of password that travels back through the MAX
unit and the RADIUS server to the ACE/Server. The ACE/Server sends a response to the
RADIUS server specifying whether the user has entered the proper user name and token. If the
user enters an incorrect token, the ACE/Server returns another challenge, and the user can
again attempt to enter the correct token. The server sends up to three challenges. After three