Security
9-3
9124-A2-GH30-00
June 1999 - Preliminary
Controlling Telnet or FTP Access
The FrameSaver unit provides several methods for limiting access via a Telnet or
FTP session. Telnet or FTP access can be on a standard management link, or it
can be on a service provider’s troubleshooting (TS) management link.
Limiting Telnet Access
Methods for limiting access through a Telnet session include the following:
H
Disabling Telnet access completely.
H
Requiring a user ID or password to login for Telnet Sessions not on the
TS Management Link.
H
Assigning an access level for Telnet sessions.
H
Disabling special TS Management Link access (see
page 9-5
).
To limit Telnet access via a service provider’s troubleshooting management link,
follow the procedure on
page 9-5
.
"
Procedure
To limit Telnet access when the session is not on the TS Management Link:
1. Go to the Telnet and FTP Session Options screen.
Main Menu
→
Configuration
→
Management and Communication
→
Telnet and FTP Sessions
2. Set the following configuration options, as appropriate.
To . . .
Set the configuration option . . .
Disable Telnet access
Telnet Session to Disable.
Require a login
Login Required to Enable.
NOTE: User ID and password combinations
must be defined. See
Creating a Login
on
page 9-11.
Assign an access level
Session Access Level to Level-2 or Level-3.
NOTE: Regardless of a user’s login access
level, a user cannot operate at a level higher
than the access level specified for the Telnet
session (e.g., if a user has a Level-1 login and
Level-2 telnet access has been set, the
Level-1 user can only operate as a Level-2
user).
If you are going to allow users to configure the
unit, keep the access at Level-1.
3. Save your changes.
Summary of Contents for FrameSaver SLV 9124
Page 200: ...Configuration 8 78 9124 A2 GH30 00 June 1999 Preliminary This page intentionally left blank ...
Page 286: ...Menu Hierarchy A 4 9124 A2 GH30 00 June 1999 Preliminary This page intentionally left blank ...
Page 346: ...Index IN 12 9124 A2 GH30 00 June 1999 This page intentionally left blank ...