
Configuring Remote Access for AN and Passport ARN Routers
2-10
308614-14.20 Rev 00
Restricting TFTP Access to Specified Directories
To restrict TFTP access to a specific directory:
1.
Log in to your UNIX workstation as
root
.
2.
Insert the appropriate line in the
/etc/inetd.conf
file.
The examples in
Table 2-4
restrict access to the
/tftpboot
directory. You can
substitute any directory you want.
3.
Create a symbolic link in the specified directory for every startup file
path name.
For example, to set up symbolic links in the
/tftpboot
directory:
a.
Enter the following command to move to the
/tftpboot
directory:
cd tftpboot
b.
Enter the following commands to create symbolic links:
ln -s . usr
ln -s . tftpboot
Table 2-4.
Restricting TFTP Access to Specified Directories
Operating
System
Sample Line to Insert in /etc/inetd.conf File, or Other Instruction
SunOS
tftp dgram udp wait root /usr/etc/in.tftpd in.tftpd -s
/tftpboot
Solaris
tftp dgram udp wait root /usr/sbin/in.tftpd in.tftpd
-s /tftpboot
HP-UX
tftp dgram udp wait root /etc/tftp tftp -s /tftpboot
AIX
Use the System Management Interface Tool (SMIT) to configure TFTP.
For instructions, see the IBM guides on TCP/IP daemons and TFTP.
Note:
Do not insert a slash (/) in the
cd tftpboot
command. A symbolic link
cannot contain references to directories above the directory specified in the
tftpd
command line.