98Cyclades® ACS 5000 Installation/Administration/User Guide

9.Fill in the form according to your local setup of the Kerberos server.

10.Click apply changes.

To configure a NIS authentication server:

Perform the following procedure to configure a NIS authentication server when the console server or any of its ports are configured to use NIS authentication method or any of its variations (Local/NIS, NIS/Local or NISDownLocal).

1.Go to Security - Authentication - NIS in Expert mode.

2.Fill in the form according to your configuration of the NIS server.

3.Click apply changes.

NOTE: NIS does not work if the Security Profile is set to Moderate or Secured. It only works if the Security Profile is Open.

Security Profiles

A Security Profile consists of a set of parameters that can be configured in order to have more control over the services that are active at any time.

Pre-defined security profiles

There are three pre-defined security profiles:

Secure - The Secure profile disables all protocols except sshv2, HTTPS and SSH to serial ports. Authentication to access serial ports is required and SSH root access is not allowed.

NOTE: SSH root access is enabled when the security profile is set to Moderate or Open. If a Secured security profile is selected, you need to switch to a Custom security profile and enable the allow root access option.

Moderate - The Moderate profile is the recommended security level. This profile enables sshv1, sshv2, HTTP, HTTPS, Telnet, SSH and Raw connections to the Serial Ports. In addition, ICMP and HTTP redirection to HTTPS are enabled. Authentication to access the serial ports is not required.

Open - The Open profile enables all services such as Telnet, sshv1, sshv2, HTTP, HTTPS, SNMP, RPC, ICMP and Telnet, SSH and Raw connections to the serial ports. Authentication to access serial ports is not required.

Default security profile

The Default Security Profile uses the same parameters as the Moderate profile. See the following tables for the list of enabled services when the Default security profile is used.

Page 106
Image 106
Avocent ACS 5000 manual Security Profiles, To configure a NIS authentication server