Bay Networks 6300, Инструкция к добавке

Страница: 243 / 593

A-215
Chapter 15 Using RA 6300 Security
Remote Annex 6300 Supplement to the Remote Annex Administrator’s Guide for UNIX
Book A
If you use your existing ACP-related files with the RA 6300, modifying
them only to specify the RA 6300’s IP address (when required), you will
affect the operation of the RA 6300 in the following ways:
• Specified ports (e.g., ports=1), port ranges (e.g., ports=1-10),
and port groups (e.g., ports=1,3,6,7,12,17) within profile criteria
of your existing ACP-related files will be recognized and
applied by the RA 6300 to internal RA 6300 asynchronous ports
(asy ports).
However, the RA 6300 will ignore ports specified by number,
range of numbers, or group of numbers for internal V.120
terminal adapter (ta) ports and synchronous PPP (syn) ports and
will apply profile criteria to all RA 6300 ta and syn ports.
• Port passwords specified in the acp_passwd file will affect
RA 6300 operation negatively since the passwords will be
matched to the equivalent RA 6300 internal asynchronous port.
As a result, asynchronous modem connections made to an
RA 6300 are subject to random password associations (i.e., each
prompt asking for a different password).
Editing Existing ACP Files
When editing existing ACP files for use with the RA 6300, keep in mind
that ACP profile criteria cannot be port specific and that you need to
modify your existing files accordingly. For example, an acp_userinfo file
user-end block that uses ports= for an RA 4000 on a per-port basis, as
shown below, should be modified for the RA 6300:
user group=eng;ports=1-5
climask telnet end
end