Cisco Systems OL-5742-01 manual Limiting SGM Client Access to the SGM Server Solaris Only, 18-40

Page 40

Chapter 18 Configuring SGM Security

Limiting SGM Client Access to the SGM Server (Solaris Only)

•To remove an SSL certificate from the SGM client, launch the SGM SSL Certificate Tool. SGM lists each imported certificate. Select the certificate you want to remove, and click Remove. SGM deletes the certificate from the list.

See the “Importing an SSL Certificate to an SGM Client” section on

page 18-33for more information on launching the SGM SSL Certificate Tool.

Limiting SGM Client Access to the SGM Server (Solaris Only)

By default, when you first install SGM, all SGM client IP addresses are allowed to connect to the SGM server. However, SGM enables you to limit client access to the server by creating and maintaining the ipaccess.conf file.

You can create the ipaccess.conf file and populate it with a list of SGM client IP addresses that can connect to the SGM server. SGM allows connections from only those clients, plus the local host. If the file exists but is empty, SGM allows connections only from the local host. (SGM always allows connections from the local host.)

When you first install SGM, the ipaccess.conf file does not exist and SGM allows all client IP addresses to connect to the SGM server. To create the ipaccess.conf file and work with the list of allowed client IP addresses, use the following procedure:

Step 1 Log in as the root user, as described in the “Becoming the Root User (Solaris Only)” section on page 2-3, or as a super user, as described in the “Specifying a Super User (Solaris Only)” section on page 18-24.

Step 2 Enter the following command:

# cd /opt/CSCOsgm/bin

 

Cisco Signaling Gateway Manager User Guide

18-40

OL-5742-01

Page 39 Page 41
Image 40
Page 39 Page 41
Contents Configuring SGM Security 18-1# cd /opt/CSCOsgm/bin # ./sgm useraccess enable Implementing SGM User-Based Access Solaris Only18-2 Sgm disablepass Sgm passwordage Sgm userpass Sgm adduser Sgm disableuser Sgm enableuser Sgm updateuser# ./sgm authtype local 18-3# ./sgm sgm adduser username # ./sgm authtype solaris18-4 Creating Secure Passwords 18-5DICTFILE=/dev/null 18-6Basic User Level 1 Access 18-7Power User Level 2 Access 18-8Network Administrator Level 4 Access 18-9Automatically Disabling Users and Passwords Solaris Only 18-1018-11 # ./sgm passwordage number-of-days # ./sgm inactiveuserdays number-of-days# ./sgm inactiveuserdays clear 18-12# ./sgm passwordage clear # ./sgm clitimeout number-of-minutes# ./sgm clitimeout clear 18-13Manually Disabling Users and Passwords Solaris Only # ./sgm disablepass username# ./sgm deluser username 18-14# ./sgm disableuser username 18-15# ./sgm userpass username # ./sgm enableuser username18-16 # ./sgm updateuser username 18-17# ./sgm newlevel username Displaying a Message of the Day18-18 18-19 # cd /opt/CSCOsgm/bin # ./sgm motd enable Decline# ./sgm motd edit 18-20Listing All Currently Defined Users Manually Synchronizing Local SGM Passwords18-21 Displaying the Contents of the System Security Log # cd /opt/CSCOsgm/bin # ./sgm restore security Restoring Security-Related SGM Data# ./sgm seclog clear 18-23Specifying a Super User Solaris Only Disabling SGM User-Bases Access18-24 18-25 Sgm webport Sgm xtermpath 18-26Enabling SSL Support in SGM 18-27# ./sgm keytool importcert certfilename 18-28# ./sgm keytool importkey keyfilename certfilename 18-29Right-clickDownload SGM Server SSL Certificate 18-30# cd /opt/CSCOsgm/bin # ./sgm certgui Launching the SGM Certificate Tool for SSL18-31 18-32 Importing an SSL Certificate to an SGM Client DetailsExit HelpExporting an SSL Certificate 18-34Save 18-35Viewing Detailed Information About an SSL Certificate 18-3618-37 Certificate Information Dialog18-38 Disabling SSL Support in SGM Managing SSL Support in SGM18-39 Limiting SGM Client Access to the SGM Server Solaris Only 18-40# ./sgm ipaccess edit # ./sgm ipaccess add18-41 18-42
Related manuals
Manual 136 pages 55.23 Kb

OL-5742-01 specifications

Cisco Systems OL-5742-01 represents an essential advancement in the field of network infrastructure, tailored for organizations that demand robust, reliable, and scalable solutions. As part of Cisco's offerings, this device stands out for its comprehensive features and the technologies embedded within its design.

One of the main features of the OL-5742-01 is its support for advanced routing protocols. The device is engineered to handle both static and dynamic routing, making it versatile for different networking environments. This flexibility allows organizations to efficiently manage data traffic, ensuring optimal performance and minimal downtime. In addition, its built-in redundancy mechanisms ensure that network operations remain uninterrupted, offering peace of mind for mission-critical applications.

The OL-5742-01 is also designed with a focus on security. It incorporates a variety of security features, including advanced encryption protocols, firewall capabilities, and intrusion detection systems. This multilayered approach helps safeguard sensitive data from a myriad of cyber threats, which is particularly crucial in today's digital landscape where data breaches and cyberattacks are prevalent.

Furthermore, the device supports a range of connectivity options, making it suitable for various deployment scenarios. With multiple Ethernet ports and options for fiber connections, it adapts to the specific requirements of an organization's infrastructure. Its ability to support both wired and wireless connections enhances flexibility, allowing for seamless integration into existing networks.

Another noteworthy characteristic of the OL-5742-01 is its scalability. Organizations can easily upgrade their network infrastructure by adding additional units or expanding current capacity without overhauling their entire system. This feature is invaluable for businesses anticipating growth, as it aligns with their evolving needs.

The management of the OL-5742-01 is streamlined through its user-friendly interface, which allows network administrators to monitor and manage the device efficiently. Advanced diagnostic tools assist in troubleshooting, enabling rapid identification and resolution of issues, thus reducing potential network downtime.

In conclusion, Cisco Systems OL-5742-01 is a powerful networking device that encapsulates security, scalability, and advanced routing capabilities. Its features and technologies cater effectively to the demands of contemporary organizations, making it a reliable choice for building and maintaining resilient network infrastructures.
Top Page Image Contents