Lucent Technologies PortMaster 4, Руководство по настройке

Страница: 114 / 191

Restricting User Access
8-12 PortMaster 4 Configuration Guide
Restricting User Access
Access filters enable you to restrict Telnet or rlogin connections to a specific host or
network, or a list of hosts or networks. You can create an access filter that restricts user
access to particular hosts.
Access filters work as follows:
1. The user specifies a host.
2. The host address is compared against the access filter.
3. If the address is permitted by the filter, the connection is established.
4. If the address is not permitted, the connection is denied unless access override is
enabled.
If you want a user to be able to override a port’s access filter, enable access override on
that port. In this case, the process is as follows:
1. Access is denied by the access filter.
2. The user is prompted for a username and password.
3. The user is verified by the user table or RADIUS.
4. The access filter defined for this user is used to determine if the user has permission
to access the specified host.
To enable users to override a port access filter with their own filter, use the following
command:
Command> set S0 access on