BELL LABS INNOVATIONS Lucent Technologies Access Security Gateway Guard, Руководство пользователя

Страница: 61 / 266

49
6. Modifying the User Database
6.1 What This Chapter Contains
•
Overview
•
User Maintenance Functions Menu
•
How to Add, Delete and Change Information in the User Database
•
Description of Access Level and Authentication Methods
6.2 Overview
The ASG Guard/ASG Guard Plus maintains a database of authorized users. Each user who
accesses the ASG Guard/ASG Guard Plus or a host(s) through a dial-up port or network
connection must have been added to the database. By limiting access through each of the ports,
the ASG Guard/ASG Guard Plus provides access security to both the ASG Guard/ASG Guard
Plus and protected host devices.
The ASG Guard User Database actually conists of two distinct sets of users: Lucent users and
Lucent customer users. The portion of the User Database that specifies the Lucent users is called
the
Lucent User Table
. The portion of the User Database that specifies the Lucent customer
users is called the Customer User Table .
The User Database residing in the ASG Guard/ASG Guard Plus contains information about each
user, including: the users name, access class, and authentication method. The information
included in the database is listed below. The user database can hold information for 75 users.
Each record in the database contains the following information about the user:
•
User Name (ID)
•
Password or key
•
Access Class
•
Whether user access is blocked
•
User Access Expiration Date
•
Number of sessions allowed
•
Primary and Secondary Authentication Methods
•
Auto Execute Command
•
Comments
Each user is assigned an access class that determines his/her access and administrative
privileges. Users assigned the access class "Host" can only access host ports and have no
administrative privileges on the ASG Guard/ASG Guard Plus. Sysop and Master users can also
administer the ASG Guard/ASG Guard Plus, in addition to accessing the host ports.
NOTE:
Only a user with CMaster access privileges can add, delete or modify customer user
profiles in the database.