Install guide

16 Release Note
Software Release 2.6.4
C613-10404-00 REV A
Remote Security Officer (RSO) Login
There are two section to this enhancement. The first section applies to switches
that support Remote Security Officer (RSO) and IPv4 only. The second section
applies to switches and routers that support RSO, IPv4, and IPv6.
Remote Security Officer Login and IPv4 Only
This section applies to the AT-8600, AT-8700XL, AT-8800, Rapier, and Rapier i
Series switches.
The Remote Security Officer (RSO) feature lets a remote user connect to a
switch via Telnet from an authorised IP address, and login using a name with
Security Officer privilege as if the user were at a terminal connected directly to
the switch. The RSO feature is configured by defining authorised IP addresses
using the ADD USER RSO and DELETE USER RSO commands. These
commands now accept ranges of IP addresses:
add user rso ip=ipadd [mask=ipadd]
add user rso ip=ipadd[-ipadd]
delete user rso ip=ipadd[-ipadd]
where ipadd is an IP address in dotted decimal notation. If a mask is not
specified, the default is 255.255.255.255.
Remote Security Officer Login, IPv4 and IPv6
This section only applies to the AT-8800, Rapier, and Rapier i Series switches.
IPv6 addresses are now also supported, enabling Remote Security Officers to
login over an IPv6 network:
add user rso ip=ipv6add[/prefix-length]
add user rso ip=ipv6add[-ipv6add]
delete user rso ip=ipv6add/prefix-length
delete user rso ip=ipv6add[-ipv6add]
where ipv6add is an IPv6 address. If a prefix length is not specified, the default
is 128.
For more information about Remote Security Officer, see the Operations chapter
of the Software Reference.