Originating Group Security, Srvtab | HP LCS60 specification

A Originating Group Security

srvtab			A-1
Server Table			A-1
System Field			A-2
Service Field			A-3
Flags Field			A-4
User Field			A-5
Program Field			A-6
Initial Parms Field			A-7
Server Table Scanning Rules			A-8
		Modifications to the Server Table	A-9

		Server Table Validation and Matching	A-9

Issue 3

i

Image 267

HP LCS60 manual Originating Group Security, Srvtab

Contents

Issue 3 July Issue Table of Contents Hardware Installation LAN Connections General LCS60 Software ConfigurationPPP Configuration Administration LCS60 Configuration and Connection for PPP Service LCS60 Configuration and Connection for Arap Service Slip Configuration AdministrationArap Configuration Administration LCS60 Configuration and Connection for Slip Service Lcsadm Interface Gateway Services Configuration AdministrationUser Information Basics Logging On Maintenance StarKeeper II NMS Originating Group Security Manual Pages User Error MessagesSoftware Installation Fujitsu or Seagate ST5660N Drive Reload System Software Unix System Software Installation Glossary User Information Index Index Figures Figure F-8 PPP Connection Screen Tables Table of Contents Xiv Issue Screens Page Document Organization Reference Documentation OverviewLAN Protocols Network Security Copy Protection Remote Access ProtocolsIP Address Assignment by the LCS60 Hardware Features Multiple IP Subnetworks Manual Pages Customer Assistance Table of Contents Issue Document Organization User Information Software InstallationReference Documentation Man Pages Gateway References Apple References Other References OverviewPPP References Slip Reference Benefits LAN Protocols Domain Name Server DNS ResolverSimple Network Management Protocol Snmp AppleTalk Protocol Routing Information Protocol RIPSupported Traps and MIBs LCS60 as an AppleTalk Router AppleTalk Network Number and Zone Assignment IPX Virtual Network Assignment IPX Protocol TCP/Async Gateway Service Remote Access Protocols Serial Line IP Slip TCP Service Ports Van Jacobson TCP/IP Header Compression Point-to-Point Protocol PPP Compressed IPX Header Cipx AppleTalk Remote Access Protocol ArapMultiple IP Subnetworks IP Routing IP Routing with the LCS60 Security Groups IP Address Assignment Hardware Features IP Address Assignment by the LCS60Enhanced Processor Fiber Interface Network Security Administration Backup/RestoreCopy Protection R3.0 Upgrade Remote UpgradeCentralized Network Management Online Manual Pages Manual Pages Customer Assistance Where command is the name of the command Site Preparation AssemblyInstalling the LCS60 Introduction Ethernet Configuration of the Lucent Technologies Data Switch LCS60Power and Grounding LAN Connections Controls and Indicators Lists the LCS60 controls and indicatorsIntroduction Board Indicator Function Controls and IndicatorsControls Location Switch Function Indicators Specifications Cabling Space Requirements EMI Considerations Required EquipmentRequired Additional Equipment Rack Mounting AssemblyInstalling the LCS60 Unpacking Hardware Table-Top Mounting Wall Mounting 9600 bps Baud Rate ⎜ Flow Control Connecting the System ConsoleSystem Console and Port Configuration Serial Port Optioning DTE/DCE MVME712M Module Optioning Non-Default Optioning RS-232 Interface Direct Connection to the LCS60 Connection through a Data Switch Module Address Screen 2-1 TY Configuration DialogueCC0 enter group CC0 enter ty Screen Screen 2-2 MSM Configuration Dialogue CC0 enter msm CC0 restore msm Asynchronous Terminal Data Switch Connection through StarKeeper II NMS Connection through Modems System Console Connections through StarKeeper II NMS Routing the Optical Fiber Cable Connecting the Fiber Interface Installing the CPM-HS Module and Optical Fiber Cable LCS60 Define the Local Address for the LCS60 Dialogues Enter Group Name Level Enter local Type Enter mnemonic Name of the LCS60Morse Directory entry Configure the CPM-HS ModuleService state Address Power-Up Procedures Power and Grounding LCS60 Rear Panel AC Connections Etc/shutdown -g0 -y Power-Down ProceduresReboot Verify LCS60 Console Connection Verify Fiber Connection Ethernet Configure the LCS60Configure the LCS60 as directed in Chapters 3 through LAN Connections LAN Connections Starting the LCS60 Base Level Backup Table of Contents Example Network Preliminary Hardware Requirements LCS60 Software Preliminary Configuration Requirements Initial Setup Specific ServicesStep Initsetup Screen 3-1 LCS60 Top Directory == morse LCS60 ID Software KEY Configuration Parameters LCS60 Software ⎜ Service Command Protocol and Services Commands Srvsetup Configure Protocols and Gateway Services srvsetup PROTOCOL/SERVICES to be Started When Booting Configure Protocols and Gateway Services srvsetup == tcpasy LCS60 and Service Session Parameter Configuration Menu == asytcp LCS60 Software LCS60 Software LCS60 Software Reserved IP Addresses for Slip and PPP Services LCS60 Software Virtual Node Number Virtual Network Zone Name Configure Address and Zone for Appletalk Virtual NetworkTCP/IP Ethernet Interface Configuration Menu Virtual Network Number == m-net0 == morse-e0 IPX Configuration Management Ethernet Configuration Parameters== ethernet Virtual PPP Configuration Parameters Configure Default Route, DNS, and Snmp Default Route dftroute Default Route FunctionsNEW Domain Name Server dns Domain Name System DNS Configuration Snmp Manager snmp Simple Network Management Protocol Snmp Configuration Starting the LCS60 Base Level Backup Configuration Commands Config Directory Configuration Changes Administrative/Maintenance Commands Config Directory Administrative and Maintenance Commands Administrative and Maintenance Commands LCS60 Configuration and Connection For PPP Service Administration Table of Contents Issue Shows an example network using PPP service LCS60 Configuration and Connection for PPP Service Configuring PPP Service for IP, IPX, and AppleTalk Enter the lcsadm interface Add the PPP service Enter protocol from Config or config protocol from TopScreen 4-1 Configure IP Network Security Group Example Screen Screen 4-2 Configure Reserved IP Address Example PPP Screen 4-3 Configure IPX Parameters Example Screen Virtual PPP Configuration Parameters Screen 4-4 Configure AppleTalk Virtual Network Example == Research Lab Screen 4-5 Configure the Ethernet Interface Example PPP Service Connection Dialstrings PPP Privately Administered Static IP Address Reserved IP Address Destination mlkway/earth/morse.ppp..-uhartnell Dynamically Assigned IP Address Following screen shows how to check Show Session ExamplesFor example All Call Trace Example PeerTopSession# show ppp 1.1 ip Related Commands Log File# pg /usr/adm/lcs/ppp.log PPP LCS60 Configuration and Connection For Slip Service Table of Contents Issue Shows an example network using Slip service LCS60 Configuration and Connection for Slip Service Configuring Slip Service Screen 5-1 Configure IP Network Security Group Example == Library Screen 5-2 Configure Reserved IP Address Example Techs Quit Screen 5-3 Configure the Ethernet Interface Example == m-net0 Header Compression in Chapter Slip Service Connection Dialstrings Used Privately Administered IP AddressIP address is requested. This is not required when a NAC is Identifies the user either user name or numeric ID for whom Reserved IP Address Destination mlkway/earth/morse.slip..154.12.23.11 Destination mlkway/earth/morse.slip..-uhartnell Following screen shows an example of the stop slip command Stop ExampleDestination mlkway/earth/morse.slip # trace slip ErrorsFor Slip connection errors, refer to Appendix C Top# stop slip # pg /usr/adm/lcs/slip.log ∙ ping ∙ netstat Slip Arap Service Connection Dialstring LCS60 Configuration and Connection For Arap Service Table of Contents Issue Shows an example network using Arap service LCS60 Configuration and Connection for Arap Service Configuring Arap Service Virtual Node Number Screen 6-1 Configure AppleTalk Virtual Network Example Screen Arap Service Connection Dialstring Show Service ExampleDestination mlkway/earth/brown.arap Show Session Example Top sessionCRC # pg /usr/adm/lcs/arap.log ∙ atping ∙ atnetstat ∙ atlog Arap Service Ports Trace TCP/Async Error Messages Log Files Gateway Services Table of Contents Issue Shows an example network using gateway services LCS60 Configuration and Connection for Gateway Service Gateway Enter a number in the range 1024 Screen 7-1 Gateway Service Configuration Example TCP-TO-ASYNCHRONOUS Gateway Service Configuration Menu== telnet == directory NohupSID Press Return to continue == == wimsey == socket Disabled Telnet Service Access to Gateway Services Dialstrings An example is shown in the following screen Inactivity Timeout OptionHosts daytime TCP service, the user would specify port Port Are accessed by the telnet and/or socket service User InformationReturn to Destination Option Destination earth/brown.telnet Telnet open Async-to-TCP Gateway Service Destination earth/brown.telnet..moon TCP-to-Async Gateway Service Uucp Feature Data Switch to LCS60 to LAN$ telnet brown For tcpsock would be # lcsadm Top # config srvports LAN to LCS60 to Data Switch Example Uucp Service Using SunOS Usr/etc/rfsaddr -h 60name Example Uucp Service Using NCR Service Ports Following screens show a variety of port commandsTopPorts disable Conn Error MessagesTrace TCP/Async Following screen shows a typical trace Gateway Services Log Files Log Files⎜ Log File Information Directory Lcsadm Interface Typical Administrative TasksSystem Console Remote Administration Basics Logging On Backup and Restore Operations Network Access Password OptionStatus Error Messages Logging On Basics # cd /etc/opt/dk/srvtab Remote AdministrationSystem Console Edit the file lcsadm Delete the # sign from the line Lcsadm Interface # dkcu mlkway/earth/morse.lcsadm# lcsadm Need information e.g., help start Common CommandsThis command exits the lcsadm interface Help Top# manager Initial System Setup initsetupTop Directory Commands Screen 8-1 Top Directory Stop ? ⎪ dkhost ⎪ ipx ⎪ tcpip ⎪ atalk ⎪ slip ⎪ ppp ⎪ snmp ⎪ Routed ⎪ asytcp ⎪ tcpasy ⎪ arap ⎪ all Start/stop Command Dependencies Session Directory Commands Screen 8-2 Session Directory Following commands are available from the Session directory TopSession# show ppp 1.1 atalk Name trace Synopsis Screen 8-3 Ports Directory Ports Directory Commands Disable port# port#2 Top service Service Directory CommandsScreen 8-4 Service Directory Following commands are available from the Service directory Flush service-type service-type Manager Directory Commands Following commands are available from the Manager directory Screen 8-5 Manager DirectoryTop manager Screen 8-6 Server Directory Following commands are available from the Server directory Arap Ppp Slip Asytcp Atmgr Tcpasy Lcm Config Directory Commands Top config Screen 8-7 Config Directory Name subnet Synopsis subnet LCS60 ID Software KEY Configuration Parameters Administration Typical Administrative Tasks YES LCS60 Log Level Example Change the Default Route Example System Console Parameters- Autobaud Following screen illustrates the summary commandsSystem Console Configuration Parameters Summary Output Examples Backup and Restore Operations Generic vs. Variable Files Screen 8-8 LCS60 Backup and Restore Configuration Menu# lcsadm config backup LCS60 Backup and Restore Configuration Menu Backup/Restore Tape Local Mode Local and Remote ModesTo Back Up to Tape Tape Backup Management Menu Screen 8-9 Backup/Restore MenuScreen 8-10 Tape Backup Management Menu BACKUP/RESTORE Menu To Restore from Tape To List the Contents of a Tape Centralized Backup/Restore Remote Mode Security Authorizing Clients and Servers Access to Backup/Restore Functions Clients Servers Screen 8-11 Centralized Backup/Restore Menu ServerCentralized BACKUP/RESTORE Menu -- Server Changing a Client to a Server Defining Backup/Restore Servers on a ClientScreen 8-12 Centralized Backup Server Definition Menu Centralized Backup Server Definition Menu == mlkway/earth/brown Defining Backup/Restore Clients on the ServerScreen 8-13 Centralized Backup Client Definition Menu Centralized Backup Client Definition Menu Changing a Server to a Client Backup or Restore FunctionsScreen 8-14 Centralized Backup Operations Menu Backup/Restore Functions From a Server Screen 8-15 Centralized Backup Operations Menu ServerCentralized Backup Operations Menu -- Server == backup1 == brown Restore from server example follows Creating a Tape Network Access Password OptionScreen 8-16 Tape Backup Management Menu Server Tape Backup Management Menu -- Server $ telnet # useradd -u444 nap # passwd nap Status Deleting the Network Access PasswordChanging the Network Access Password New password will become effective immediately LCS60 Status Report Error Messages Error Messages from the LCS60 Fiber Interface Console Error MessagesHardware Error Messages Optical connection between the receiver on the Vmedkhs Switch. Try manually restarting the interfaceWhen the condition has been cleared Switch network through the CPM-HS. This condition should be Server Error Messages Call Error Messages # pg /var/opt/dk/log/dksrvlog.morse Lucent Technologies Data Switch Server Log File Additional Log Files ⎜ tcplisten.log ⎜ TCP-to-Async service Log Files⎜ Log File Administration Reload System Software Installing an Upgrade on a Remote Upgrade Client Vmedkhs Diagnostics Connection Verification Memory DumpAfter the Dump is Completed Seagate ST11200N Unix System Software InstallationReload System Software Seagate ST5660N ?RETURN Screen 9-1 How to Enter System Responses NCD 1GB Scsi Seagate Continue with the dialogue as shown in the screen below Do not enter bo 0 # pkgadd -d /dev/rmt/ctape1 UFS Utility Fixes Tape InstallationScreen 9-2 UFS Utility Fixes Maintenance Tape Installation Remove the tape once you have completed the installation Inet Package Removal Screen 9-3 inet Package Removal# pkgrm inet LCS60 Application Software Installation Screen 9-4 LCS60 Application Software InstallationIndicates that the inet package has already been removed Important Notice System is Being Shut Down NOW # /etc/shutdown -g0 -y Unixr MP Removing the LCS60 Application Software # pkgrm lcs60 Screen 9-5 LCS60 Application Software Removal R2.0 Example Upgrade # pkginfo -l lcs60pVendor AT&T-LC Installing an Upgrade on a Remote Upgrade Client Remote Upgrade Remote Upgrade Installation Menu # pkgadd -d /var/spool/pkg ⎜ a Processor Board Firmware Update⎜ N ⎜ B ⎜ 0D Processor Board Firmware Update ⎜ Reset Local System CPU Y/N? Bugset Screen 9-6 set and env Commands Processor Diagnostics MVME197 Mask EcdmHEX Lanc Vmedkhs Diagnostics CC0 rem cpm CC0 diag cpm Screen 9-7 Example diag cpm for CPM-HS Module CC0 res cpm CC0 display conn mod Diagnostic Exits Connection Verification LCS60 to Data Switch Connected Host Verification dkcu Dkcu mlkway/earth/morse LCS60 to Data Switch Verification Loopback Test dkcuLCS60 to Local Ethernet Host Verification ping Dkcu mlkway/earth/watson Memory Dump Screen 9-8 Service Menu After the Dump is Completed Cd /stand Echo unix ⎪ cpio -oBc /dev/rmt/ctape1At the root prompt, remove the tape from tape drive Srvtab Originating Group Security Table of Contents Issue Server Table Srvtab These fields are described below System Field Service Field ⎜ File Service⎜ hyphen Null generally login ⎜ arap Table A-1 Server Table Flags Flags Field Table A-1 User Field Table A-2 User ID Mapping Options Program Field Initial Parms Field Table A-3 Program Arguments Specification Table A-3 Server Table Scanning Rules Server Table Validation and Matching Modifications to the Server Table Appendix a Alarms to StarKeeper II NMS Configuration of the StarKeeper Table of Contents Issue Diskette or Tape Installation Configuration of the StarKeeper II NMS For HardwareFor HP Then execute the following four commands Enter i Return when you see the followingEnter /usr/bin/installpkg then enter F to install Support for AT&T 6386 into the disk drive when instructed At Release enter StarKeeper II NMS Configuration Commands To indicate that StarKeeper If you are ready for StarKeeper Alarms to StarKeeper II NMS Description The inetinit process is not executing Action Reboot the system cd / /etc/shutdown -y -g0 Description The tlid process is not executing L600730 Process ipxd is down StarKeeper II NMS Slip Sessions User Error Messages Table of Contents Issue Cable Error Message Outgoing Call Error MessagesAccess denied Auto dialer failed to initiate call. Try again Address too longAll channels busy All trunk channels busy Could not complete your call. Try again Dial to vlp errorDialer error Dkserver Cant open line. Call System Administrator Dkserver Cant push your streams module Dkserver Dksrvtab not readable. Call System AdministratorDkserver Cant chroot. Call System Administrator Error During Call SETUP. Call System Endpoint hung up Host configuration mismatch. Call Network AdministratorHost protocol error Dkserver Call on a busy device or call collision, try again Insufficient CIR at module Network congestion--Call forward error. Try again laterNetwork congestion--Call timeout. Try again Network congestion--Connection error. Try again later Network hung up Network routing errorNo diagnostic channel Open channel error Remote node not answering Service mismatchSIM no access Receive window too small Incoming Error Messages Slip Sessions Ip address IP address is invalid Ipaserrno=error numberSlip is temporarily disabled Missing -s %h option in dksrvtab4 slip file Mtu=MTU size, must satisfy 296 = mtu = Seagate ST5660N Drive Reload System Software Unix System Software Installation Table of Contents Issue Unix System Software Installation If you have a Seagate ST11200N drive, refer to for Unix Sys Screen D-1 How to Enter System Responses Appendix D Add the following line to the file NCD See note below Return Appendix D Manual Pages Table of Contents Statlcs Telnet Table of Contents Issue Atlog Atlog 1M Atlog -d loglevel -t enprz0Atping1M Atnetstat 1M Atnetstat Atnetstat 1M Atping -dsec net.node packetsize count Atping 1M Usr/etc/atping Usr/etc/atlog Usr/etc/atnetstat Atping Atping 1M ˜ !cmd ˜ $cmd ˜ %take from to Dkcu 1C Opt/dk/bin Directory in which this command resides Transmit a Break to the remote system˜ ˜ Send the line ˜ . . . to the remote system Opt/dk/sbin Common Signaling Channel device for interfaceDkmaint 1M Dkmaint r i interface c channel FTP FTPWwsize Account passwd AllbinaryAppend local-file remote-file Binary DebugDisconnect Macdef mname Macls mname Macdel mname Prompt Nmap inpattern outpatternNtrans inchars outchars Open host port Rename remote-file new-name Proxy ftp-cmdPut local-file remote-file Quote arg Site arg Rstatus fileRunique Sendport System Umask maskVerbose Chmod1, umask1 Netrc4, services4 Join addr Ifconfig Ifconfig 1MBroadcast addr Hostgroups Netstat1 Inetinit.cf4 Metric nMtu mtu Netmask mask Ifstat Ifstat 1M Ifstat -adfstz-linterval config file cntrlr num Etc/ifstat.conf Linterval Ifstat Ifstat 1M Count Iftrace 1MIftrace gdpbhrtn f diskfile i count keywords Diskfile Keywords Iftrace Iftrace 1M Ipxping1M Ipxnetstat 1MIpxnetstat -ir dv -p rip ⎪ ipx interval Etc/lcs/ipxas.cf Usr/etc/ipxnetstat Ipxping Ipxping 1M Ipxping networknode packetsize count intervalUsr/etc/ipxping Usr/etc/ipxnetstat Netstat -AainrsSv-p protocol interval Netstat Named1M, route1M, routed1M Hosts4, networks4, protocols4, services4 Help NslookupNslookup host server nslookup server Host server Nodebug Server host lserver hostNoaaonly Nod2 Root=host Timeout=xNorecurse Retry=x Named1M Resolver3 Named.boot4, resolv.conf4 Netstat1 Ifconfig1M Ping 1MPing -r-vhost packetsize count Long Names Symbolic LinksPull Pull 1C Pull L destination filename ... directory Multiple Interfaces Push lxho9 /tmp/two ! a/b D/e Push Push 1CPush lxho9 a/b c a/d/e /tmp/one Creates files /tmp/one/b, /tmp/one/c, and /tmp/one/e, while Symbolic Links Local machine will be used as the file modification time Route flush net⎪host Route 1M Route Route 1M Statlcs 1M Statlcs -tUsr/etc/statlcs Telnet Telnet -ec-8 host portCrmod Linemode Help command ? commandNegotiate command option Escape c Transnvt command Open -ec-8host portOptions Telnetd4 Introduction Client Software Configuration PPP Service ExamplesSlip Service Examples Connection via Modem Arap Service Example All users Client Software Configuration Client Packages Mac Connection CCL ScriptUsers with a NAC security server @ORIGINATE Screen F-1 CCL Script Example Screen F-1 Exit USERID, PasswordCCL and Modem Hints Nj/exch/system.ppp Be sure you dont have conflicts with existing label numbers PPP Service ExamplesWindows 95 IPX over PPP Modem PC Configuration Figure F-1 Windows 95 IPX Over PPP Example Screens Destination mlkway/earth/morse.ppp PPP Connection Screen F-2 Sample LCS60 dialup.scr Screen F-2 Figure F-3 PC/TCP Example Screens 14400 154.12.22.81 Connection InterPPP User Information Figure F-5 Network Control Panel Figure F-7 IP Address Screen Figure F-9 AppleTalk Status Window Figure F-8 PPP Connection Screen ChameleonNFS Slip Service Examples Figure F-11 Custom Setup Window TYPE=SLIP SLIP1 DefaultScreen F-3 slip.ini File Fragment TYPE=SLIP SLIP0 Connection via Modem Arap Service Example Information Figure F-15 Arap Remote Access Setup Modem Example Figure F-16 Arap Remote Access Status Screen Example User Information Report Fields General Parameters Table of Contents Issue General Glossary Network InterfaceInternet IP Network AppleTalk Network/Zone atalkas Parameters Ethernet Interface etherif Define Service Sessions maxsessions SLIP/PPP Service ipas/ipxDNS Resolver dns TCP-to-Asynchronous Gateway Services srvports Subnetwork Configuration subnet Sesid Session ID number Report FieldsSession Directory Show Arap Show Slip Time Idle Time Char ModeShow Async/TCP Connect Show PPP Link, IP, IPX, AppleTalk Peer Addr MagicProto Comp Addr Comp Trace Arap Trace Async/TCP Trace Slip Trace PPP Show Configurations Ports DirectoryShow Statistics Service Directory SummaryShow Max CfgUse Cap Psid # Service NameManager Directory Server Directory Inuse Startup TimeServer Name # Index Index Issue Index Backup, 8-18,see Backup/restore Async-to-TCP gateway serviceAuthentication Autoboot reset Network security group, 4-3,5-3 PPP, F-2 Mac, F-1 Data switch, G-1 Data switchInstallation D8AH connector, 2-13,2-18 Server log file Index Dialstrings Ifconfig, E-19 Index Maintenance, 9-1,D-1 Local backup/restoreLogin, A-3 Configuration, F-1,F-22 Example, F-13 NAC Index RS-232 connections, 2-4,2-9 to Routing IP packets SID Index Restore from How to enter, 9-2,D-2Backup to List contents Version LCS60 console connection Index