Bay Networks Remote Annex Instrukcja Użytkownika Pobierz pdf (Strona 23)

Configuring the Nortel Networks Remote Access Concentrators and the DMS-10 for Remote Access.March 31, 1999 23

working with a simple security function such as VCLI. Using VCLI allows you to still

have console CLI access while you work out any bugs. See below.

5.5.6 VCLI Security

VCLI security deals with telnet (and rlogin) access to the CLI. Figure 13 shows a over-

view of the parameters associated with VCLI security.

FIGURE 13. VCLI Security Setup

From the figure above you can see that there are two levels of security. There is a annex

based password, vcli_password, for access to VCLI and also RADIUS capability which is

enabled through vcli_security. Table 1 shows the precedence between the two security

schemes.

TABLE 1. Precedence of VCLI Security

vcli_security vcli_password

Host Security

status*

Action

no unset don’t care No security (no password)

yes set up Will use host based security

yes set down Use local vcli password

no set don’t care Use local vcli password

Note:

The interface will need to be reset inorder for the changes to take affect.

VCLI Parameters

max_vcli: unlimited cli_prompt: "%a%c"

vcli_security:*Y vcli_password: "<unset>"

vcli_inactivity: off

show annex vcli

Local password for VCLI access security

Parameter sets inactivity in minutes that VCLI can be inactive

Command to view VCLI parameters

Maximum number of virtual CLI connections allowed.

Values are 0 to 254 or unlimited.

Virtual Command Line Interface security.

Note: Commands are executed in the admin portion of CLI. Example to set the vcli_security parameters

Controls vcli_security. The default is No. This should be set for Y

to insure unwanted users will be blocked by the RADIUS seurity.

the command is “set annex vcli_security y”

1 2 ... 18 19 20 21 22 23 24 25 26 27 28 ... 37 38

Brak uwag

Bay Networks Remote Annex Instrukcja Użytkownika Strona 23