Perle 833IS, Руководство пользователя

Страница: 186 / 340

Security
170 Perle 833IS User Guide
the number stored in the User database. Only if the user is at that phone number will
access be permitted.
Callback is detailed in“User Callback” on page 145.
Once a dial up session has been established, then the user is bound by the same
network security as a user that is directly on the LAN. Although the 833IS does not
control LAN security, in some cases you can restrict which networks and servers are
available to the 833IS.
Administration Privileges
To manage the 833IS, a user must have Administration privileges set in their user
record in the 833IS Internal database. If you are using RADIUS, you must set the
“Administrative” (value=6) or the “Administrative and Callback” (value=11) in the
RADIUS Service-Type parameter in order to grant a user permission to manage the
unit. If you are using Netware Bindery, Axent, SecurID or NT Domain, you still
must create a user record for anyone with Administration privileges.See “Add/Edit
User” on page 139.
Front Panel Password
The Front Panel Password restricts access to the control functions of the Front Panel.
It is recommended that you enable the Front Panel Password (See “Enable Front
Panel Password” on page 165). There is a Reset to Default function that deletes the
current configuration. Once deleted, it is possible to create a new configuration to
gain access. With the Front Panel password enabled, this function is restricted to
only those people that have the password.
If the Front Panel Password is enabled, it is still possible to use the 833IS Manager
to change settings. However, if for some reason the Manager cannot access the
unit, it will not be possible to reset the unit without the Front Panel password.
There is no "secret method" to circumvent this.
Static Routing
A server in an IPX network learns which networks and servers it can see. However,
by using the Static Routing Table feature of the 833IS, you can explicitly specify
which IPX servers and networks can be accessed. See “Static Route” on page 117.
You can use the IP Static Routing Table feature to restrict which IP networks and
hosts that remote users can access. See “Static Routes” on page 106. Note that if you
specify an IP Default Gateway in the configuration, the 833IS will attempt to use it
to route to any addresses not specified in the Static Routing Table.