Digi TS 2/4, TS 4 manual Configuring Security Features

Page 65

Chapter 12

Configuring Security Features

In This Chapter

This chapter describes Digi One/PortServer TS 2/4 security features and discusses how to configure them. It presents the following topics:

• Controlling Access to the Digi One/PortServer TS 2/4 Configuration . . . . . . 12-2

• Controlling Access to Inbound Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2

• Controlling Access to Outbound Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-3

• Controlling Access to the Digi One/PortServer TS 2/4 Command Line . . . . . 12-3

• Issuing User Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4

• Configuring SSH Version 2 for Secure Communication . . . . . . . . . . . . . . . . . 12-5

Configuring Security Features

12-1

Image 65

Contents 92000307B Page Contents Configuring DNS Configuration Examples Page This Chapter IntroductionSetup Overview Supported Devices About Entering Commands on the Command LineAbout This Guide Other Documents in the Library Access Resource CD CardDownloading a Configuration File About Configuration MethodsLogging On As Root from the Command Line Configuration PrerequisitesAccessing the Command Line from a Telnet Session Accessing the Configuration from the Web InterfaceConfiguring the IP Address Options Options for Configuring the IP Address and MaskStarting Point Configuring the Ethernet Interface with DPA-RemoteProcedure Configuring the IP Address Using Ping-ARP Configuring an IP Address using Dhcp and Rarp Configuring the Ethernet Interface from the Command LineManual Configuration Procedure Manual Configuration ExampleConfiguring an IP Address using Dhcp and Rarp Configuring Ports for RealPort Configuring the RealPort Software What is RealPort?Configuration Options About RealPortConfiguring Ports Web Interface Example Configuring Ports for RealPort Command LineConfiguring Ports for Printers Configuration Considerations Configuring Printer Connections Command Line Configuring Ports for Printers Web InterfaceTips for telnet and rsh Printing Related InformationConfiguring Printer Connections Command Line Configuring a Port for Direct-Access Printing Configuring a Port for Direct-Access Printing Configuring Ports for Modems Tips on Configuring a Modem Configuring Ports for Modems Web Interface Before You Begin Configuring Ports for Terminals Port Defaults Configuring Ports for Terminals Web InterfaceConfiguring Ports for Terminals Command Line About Computer Connections Configuring Typical PC ConnectionsAbout Computer Connections Configuring Autoconnection About Autoconnection Configuring a Port for Autoconnection Web InterfaceConfiguring Autoconnection By Port Command Line Configuring a User for Autoconnection Command Line Configuring a User for Autoconnection Web InterfaceConfiguring a User for Autoconnection Command Line Configuring PPP Configuring PPP Connections Web Interface Configuring Inbound PPP Connections Command Line Configuring Inbound PPP Connections Example Configuring Outbound PPP Connections Command Line Set user name=name n1=telephone-number Configuring IP Routing Types of Routing What is RoutingIntroduction to Routing About RIP Routing Updates Digi One/PortServer TS 2/4 Participation in RIP Updates Example Route Using a PPP Link Configuring Static RoutesExample Route Using the Ethernet Interface Example Dynamic Routes Configuring Dynamic Routes Using RIPConfiguring Proxy ARP Configuring Proxy ARP Configuring Console Management About Console Management Configuring Console Management Web InterfaceConfiguring Console Management Command Line Example Alternate IP Addresses Example SSH2 and Menu Access10-4 Configuring About Modbus Configuring Modbus Using the Web Interface Configuring Modbus from the Command Line 11-5 Examples Configuring Network-Connected MastersConfiguring a Port-Connected Master Configuring Security Features Default Access Restrictions Controlling Access to Inbound PortsOptions for Removing Access Restriction Procedure for Changing a Port’s Access RequirementsDefault Access Controlling Access to Outbound PortsRestricting Access to Outbound Ports Method 1 AutoconnectionIssuing User Passwords Using a Public Key Configuring SSH Version 2 for Secure CommunicationPassword Protection 12-6 Configuring DNS About the Domain Name System Procedure for Using a Host File Configuration ProceduresProcedure for Using a Name Server 13-4 Configuring Snmp About Snmp and the Digi One/PortServer TS 2/4 Agent Configuration Example Configuration Procedure Web InterfaceConfiguration Procedure Command Line 14-4 Configuring Users Common User Features About Configuring UsersConfiguring a User Web Interface Configuring a User Command Line Examples Managing the OS and Configuration Upgrading the OS Firmware Web Interface Prerequisite Task Upgrading the OS Firmware Command LineWhen To Use Remote Configuration Configuring Digi One/PortServer TS 2/4 from a Remote HostRules for Editing a Configuration file Copying the Configuration File to a HostCpconf fromhost=199.250.121.12cnfg-fle Resetting the Configuration to Defaults Configuration Examples Configuration Terminal Server Configuration Without RealPortConfiguration Notes IllustrationTerminal Server Configuration Using Autoconnection Terminal Server Configuration Using RealPort Digi One/PortServer TS 2/4 Troubleshooting Procedures Symptom Digi One/PortServer TS 2/4 Does Not BootAssumptions Symptom Cannot Telnet to the Digi One/PortServer TS 2/4Running Digi One/PortServer TS 2/4 Customer Diagnostics Symptom Trouble Accessing a PortVerifying Tftp on a Unix System Troubleshooting Tftp ProblemsKey to Interpreting Digi One/PortServer TS 2/4 LEDs Kill -1inetdPID Pinging an IP Address Verifying the Digi One/PortServer TS 2/4 IP AddressChecking for Duplicate IP Addresses Verifying the Network Cabling AIX Verifying the RealPort Process Verifying the RealPort ProcessHP-UX Verifying the RealPort Process Linux Verifying the RealPort ProcessSolaris Verifying the RealPort Process Windows NT Verifying the RealPort ServiceWindows 2000 Verifying the RealPort Service Digi International Bren Road East Minnetonka, MN Digi Contact Information18-12