Lucent Technologies PortMaster, Руководство по настройке

Страница: 157 / 364

Configuring Filters 9-15
Restricting User Access
Restricting User Access
Access filters enable you to restrict Telnet or rlogin connections to a specific host or
network, or a list of hosts or networks. You can create an access filter that restricts user
access to particular hosts.
Access filters work as follows:
1. The user specifies a host.
2. The host address is compared against the access filter.
3. If the address is permitted by the filter, the connection is established.
4. If the address is not permitted, the connection is denied unless access override is
enabled.
If you want a user to be able to override a port’s access filter, enable access override on
that port. In this case, the process is as follows:
1. Access is denied by the access filter.
2. The user is prompted for a user name and password.
3. The user is verified by the user table or RADIUS.
4. The access filter defined for this user is used to determine if the user has permission
to access the specified host.
To enable a user to override a port’s access filter with his or her own filter, use the
following command:
Command> set S0 access on