Specifying Other Security Features

Specifying Other Security Features

Introduction

This section describes various security features on interactive ports.

Specifying Dedicated Service for LAT or Telnet Resources

The results of specifying a dedicated service on a port are as follows:

∙The device on the port appears hard-wired to a specific resource.

∙The access server establishes only one session for the port.

∙Local mode cannot be entered on that port, although login and service passwords can still be defined for the user on that port.

∙The access server automatically enables AUTOCONNECT for that port. AUTOCONNECT is not cleared when the dedicated service is cleared.

Kerberos Requirement

For Kerberos, the server name must be unique.

When you specify any LAT or Telnet resource to be a dedicated service, the host or service name, node name, and port name are limited to 16 characters each.

LAT Protocol Requirement

To set a LAT service as a dedicated service, the default protocol must be set to LAT. The following shows how to enable the LAT service, FILES, as the dedicated service on port 5:

Local> CHANGE PORT 5 DEDICATED FILES

You can specify that the connection be made to a particular node and/or port name of the LAT service. The following shows how to specify that port 5 connects to port JAMES on node MARKETING for service FILES:

Local> CHANGE PORT 5 DEDICATED FILES NODE MARKETING DESTINATION

JAMES

22-36 Managing Access Server Security