CONFIGURING OTHER ADVANCED OPTIONS

File Attributes

Access to files on an system will be controlled by configuration through Manage Mode. File access attributes are associated with the existing system device id’s (GUEST and ADMIN) to allow configuration of file access rights.

Configuration of the TFTP feature through Manage Mode allows the administrator to restrict upload and download access for each particular file type. The administrator can also disable the entire feature or a portion of the feature through Manage Mode.

The system provides both a TFTP client and a TFTP Server function. The TFTP Client is invoked via system commands from an administration session on the system console. The TFTP client uses the file access attributes of the currently logged in device id, either GUEST or ADMIN.

The TFTP Server function is invoked remotely from a TFTP host device connected to either a LAN or WAN network interface. The administrator sets the file access attributes for the TFTP Server function by associating an system device ID (GUEST or ADMIN) with the TFTP Server function. Whenever a remote host invokes the TFTP Server function in the system, the file access rights associated with the configured device ID are applied to all file accesses by the remote host.

Each device has pre-assigned configurable access rights to the TFTP permissible file types. The access rights are configurable using the fileattr change Manage Mode command. Refer to File Attributes for more information regarding configuring the file attributes.

When a device remotely access the TFTP server, it doesn’t matter what level the device is logged in as. What matters is the device level that is configured for the Server on the system that is being logged into. It is this file access level (or device login level) that controls all remote devices accesses.

FILE ATTRIBUTES

CONFIGURING FILE ATTRIBUTES

Note: You cannot configure file attributes through CFGEDIT. The configuration can only be done through Manage Mode commands.

USING MANAGE MODE COMMANDS

fileattr

This command displays the current access rights for each access level depending on file types.

fileattr change

This command allows you to change the access rights for each access level, depending on file types.

FILE ATTRIBUTES CONFIGURATION ELEMENTS

FILE ATTRIBUTE

The access right for each access level assigned to each file type. Access rights include:

read only access (R)

write only access (W)

read and write access (RW)

no access rights (N)

Central Site Remote Access Switch 415

Page 415
Image 415
Enterasys Networks CSX6000, CSX5500, CSX7000 manual Configuring File Attributes, File Attributes Configuration Elements