Configuring Remote Access for AN and Passport ARN Routers
2-10 308614-14.20 Rev 00
Restricting TFTP Access to Specified Directories
To restrict TFTP access to a specific directory:
1. Log in to your UNIX workstation as root.
2. Insert the appropriate line in the /etc/inetd.conf file.
The examples in Table 2 -4 restrict access to the /tftpboot directory. You can
substitute any directory you want.
3. Create a symbolic link in the specified directory for every startup file
path name.
For example, to set up symbolic links in the /tftpboot directory:
a. Enter the following command to move to the /tftpboot directory:
cd tftpboot
b. Enter the following commands to create symbolic links :
ln -s . usr
ln -s . tftpboot
Table2-4. Restricting TFTP Access to Specified Directories
Operating
System Sample Line to Insert in /etc/inetd.conf File, or Other Instruction
SunOS tftp dgram udp wait root /usr/etc/in.tftpd in.tftpd -s
/tftpboot
Solaris tftp dgram udp wait root /usr/sbin/in.tftpd in.tftpd
-s /tftpboot
HP-UX tftp dgram udp wait root /etc/tftp tftp -s /tftpboot
AIX Use the System Management Interface Tool (SMIT) to configure TFTP.
For instructions, see the IBM guides on TCP/IP daemons and TFTP.
Note: Do not insert a slash (/) in the cd tftpboot command. A symbolic link
cannot contain references to directories above the directory specified in the
tftpd command line.