Manuals / Cisco Systems / Household Appliance / Home Security System

Cisco Systems OL-5742-01 manual 18-42

Models: OL-5742-01

1 42

Download 42 pages 34.07 Kb

Page 42

Image 42

Any changes you make to the ipaccess.conf file take effect when you restart the SGM server.

Chapter 18 Configuring SGM Security

Limiting SGM Client Access to the SGM Server (Solaris Only)

Any changes you make to the ipaccess.conf file take effect when you restart the SGM server.

SGM also enables you to limit the IP addresses that can send traps to the server by creating and maintaining the trapaccess.conf file. For more information, see the “Limiting Traps by IP Address (Solaris Only)” section on page 19-40.

	Cisco Signaling Gateway Manager User Guide
18-42	OL-5742-01

Page 42

Image 42

Cisco Systems OL-5742-01 18-42, Any changes you make to the ipaccess.conf file take effect when you restart the SGM server

Contents

Creating Secure Passwords, page 18-5 Required Configuring SGM User-BasedAccessConfiguring SGM User-BasedAccess, page Implementing SSL Support in SGM, pageImplementing SGM User-BasedAccess Solaris Only #cd /opt/CSCOsgm/bin #./sgm useraccess enable18-2 sgm updateuser sgm disablepass -sgm passwordage -sgm userpasssgm adduser -sgm disableuser -sgm enableuser #./sgm authtype local# ./sgm authtype solaris # ./sgm sgm adduser username18-4 Creating Secure Passwords 18-5Network Operator Level 3 Access, page Basic User Level 1 Access, pagePower User Level 2 Access, page Network Administrator Level 4 Access, pageBasic User Level 1 Access 18-7Power User Level 2 Access Network Operator Level 3 Access18-8 Network Administrator Level 4 Access System Administrator Level 5 Access18-9 18-10 System Messages and Logs# ./sgm badlogindisable number-of-attempts # ./sgm badloginalarm number-of-attempts# ./sgm badloginalarm clear # ./sgm badlogindisable clear# ./sgm inactiveuserdays clear # ./sgm passwordage number-of-days# ./sgm inactiveuserdays number-of-days 18-12# ./sgm clitimeout clear # ./sgm passwordage clear#./sgm clitimeout number-of-minutes 18-1318-14 # ./sgm disablepass username# ./sgm deluser username # cd /opt/CSCOsgm/bin# ./sgm disableuser username 18-15page # ./sgm enableuser username# ./sgm userpass username 18-16# ./sgm updateuser username 18-17Displaying a Message of the Day # ./sgm newlevel username18-18 Description Last UpdatedField or Button Message of the Day# ./sgm motd edit #cd /opt/CSCOsgm/bin #./sgm motd enableDecline 18-20Listing All Currently Defined Users Manually Synchronizing Local SGM Passwords# ./sgm motd disable # ./sgm motd cat#cd /opt/CSCOsgm/bin #./sgm seclog Disabled# ./sgm listusers username 18-22# ./sgm seclog clear #cd /opt/CSCOsgm/bin #./sgm restore securityRestoring Security-RelatedSGM Data 18-23Specifying a Super User Solaris Only Disabling SGM User-BasesAccess#cd /opt/CSCOsgm/bin #./sgm useraccess disable # ./sgm restartsgm cleandb -sgm cw2ksetup -sgm evilstop sgm backup -sgm browserpath -sgm certguisgm certtool -sgm clean -sgm cleanall sgm reboot -sgm restore -sgm restorepropsEnabling SSL Support in SGM, page Implementing SSL Support in SGMsgm webport -sgm xtermpath Launching the SGM Certificate Tool for SSL, pageManaging SSL Support in SGM, page Enabling SSL Support in SGMExporting an SSL Certificate, page Disabling SSL Support in SGM, pageopt/CSCOsgm/etc/ssl/server.csr is a CSR # ./sgm keytool import cert cert filename18-28 18-29 Step 5 Restart the SGM client18-30 SGM displays the SGM Server Home pageLaunching the SGM Certificate Tool for SSL #cd /opt/CSCOsgm/bin #./sgm certgui18-31 Expiration Date Issued toIssued by ImportExit Importing an SSL Certificate to an SGM ClientDetails HelpLook In CancelExporting an SSL Certificate File NameField or Button Save In18-35 DescriptionCancel Save18-36 Field or ButtonCisco Signaling Gateway Manager User Guide 18-37Chapter 18 Configuring SGM Security Figure 18-5Certificate Information DialogVersion IssuerSubject Serial numberManaging SSL Support in SGM Disabling SSL Support in SGM18-39 18-40 Step 2 Enter the following command# cd /opt/CSCOsgm/bin #./sgm ipaccess add #./sgm ipaccess edit18-41 18-42 Any changes you make to the ipaccess.conf file take effect when you restart the SGM server