Optimizing the NetWare Client Software

Improving Security

netware dos requester

signature level = 2

Replace number with 0, 1, 2, or 3. The default is level 1, which provides the most flexibility while still offering protection from forged packets.

See “SIGNATURE LEVEL=number” for details on how to configure for

NCP packet signature support on the client workstation.

NOTE:Some LAN drivers might not operate correctly using this parameter. If you experience trouble, disable this parameter or update the version of your LAN driver.

Server Setting

To ensure that the SET parameter “NCP PACKET SIGNATURE OPTION” is added to the system at each server you want NCP packet signature support on, type the following command at each server console:

SET NCP PACKET SIGNATURE OPTION = number <Enter>

Replace number with 0, 1, 2, or 3. The default is level 1, which provides the most flexibility while still offering protection from forged packets.

See “Preventing Packet Forgery,” in Chapter 7 of Supervising the NetWork for details on how to configure for NCP packet signature support on the server.

Disabling Packet Signature

To disable NCP packet signature support at the client workstation, add this line to the NET.CFG file under the “NetWare DOS Requester” option heading:

signature level = 0

For example, you would type

netware dos requester

signature level = 0

For explanations of packet signature levels and their combined use, see

Table 1-1.

1-12

Page 30
Image 30
HP UX Internet and Networking Software manual Disabling Packet Signature, Server Setting