48
Initial setup
•
restricted
. The session remains intact, but access is
restricted in accordance with the rights specified in the
access rules for the group.
•
teardown
. The SSL session is torn down.
The default is
restricted
.
Use restricted (teardown/restricted) action for Nortel
Health Agent check failure?
[yes]:
24
Create the default user and group.
The action to be performed when the Nortel Health Agent check
fails depends on your selection in
step f
.
Using ’restricted’ action for Nortel Health Agent check
failure.
Setting up user account policies...
Create default user account [yes]:
User name:
nha
User password:
nha
Creating SRS rule ’srs-rule-test’ for compliancy
check.
This rule check for the presence of the file
C:\tunnelguard\tg.txt
Creating client filter ’nha_passed’.
Creating client filter ’nha_failed’.
Creating linkset ’nha_passed’.
Creating linkset ’nha_failed’.
Creating group ’nhauser’ with secure access.
Associating group ’nhauser’ with srs rule ’srs-rule-te
st’.
Creating extended profile, full access when
nha_passed
Enter green vlan id [110]:
<VID>
Creating extended profile, remediation access when
nha_failed
Enter yellow vlan id [120]:
<VID>
Creating user ’nha’ in group ’nhauser’.
Setting up system account policies...
Create default system account [yes]:
System account name:
sys
System account password:
sys
Creating client filter ’nha_passed’.
Creating client filter ’nha_system_failed’.
Creating SRS rule ’srs-rule-syscred-test’ for
compliancy check.
This rule check for the presence of the file
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100
03.01
Standard
28 July 2008
Copyright © 2007, 2008 Nortel Networks
.
Summary of Contents for 425 series
Page 525: ......