IBM TS4500, Введение и руководство по планированию

Страница: 80 / 218

Mapping groups to roles
Your remote authentication server must have one or more groups that have the
same name as a TS4500 role. Successfully authenticated users who are members of
those groups inherit the permissions of the corresponding TS4500 role. If a user is
a member of multiple groups that correspond to TS4500 roles, they inherit the
permissions of the first match found.
Ensure that any one user is a member of only one LDAP or Kerberos group that
corresponds to a TS4500 role.
IPv6 functionality
The TS4500 tape library supports internet protocol (IP) addresses in IPv4 and IPv6
formats.
Internet protocol version 6 (IPv6) is designed to allow the Internet to grow steadily,
both in terms of the number of hosts connected and the total amount of data traffic
transmitted. The TS4500 management GUI allows the definition of IPv4 and IPv6
addresses. The Key Proxy determines the IP version used and presents the correct
IP address and parameters to the IP Stack.
IPv4 and IPv6 address formats
Octets or segments, or a combination of both, make up Internet Protocol version 4
(IPv4) and Internet Protocol version 6 (IPv6) addresses.
An IPv4 address has the following format:
x . x . x . x
where x is called an octet
and must be a decimal value between 0 and 255. Octets are separated by periods.
An IPv4 address must contain three periods and four octets. The following
examples are valid IPv4 addresses:
v 1 . 2 . 3 . 4
v
01 . 102 . 103 . 104
An IPv6 address can have either of the following two formats:
v
Normal - Pure IPv6 format
v
Dual - IPv6 plus IPv4 formats
An IPv6 (Normal) address has the following format:
y : y : y : y : y : y : y
: y
where y is called a segment and can be any hexadecimal value between 0 and
FFFF. The segments are separated by colons - not periods. An IPv6 normal address
must have eight segments, however a short form notation can be used in the
TS4500 management GUI for segments that are zero, or those that have leading
zeros.
The following list shows examples of valid IPv6 (Normal) addresses:
v
2001 : db8: 3333 : 4444 : 5555 : 6666 : 7777 : 8888
v 2001 : db8 : 3333 : 4444 : CCCC : DDDD : EEEE : FFFF
v : :
(implies all 8 segments are zero)
v 2001: db8: :
(implies that the last six segments are zero)
v : : 1234 : 5678
(implies that the first six segments are zero)
v 2001 : db8: : 1234 : 5678
(implies that the middle four segments are zero)
v 2001:0db8:0001:0000:0000:0ab9:C0A8:0102
(This can be compressed to
eliminate leading zeros, as follows:
2001:db8:1::ab9:C0A8:102
)
62
IBM TS4500: Introduction and Planning Guide