User`s manual

DT-6061 User's Manual - Platform (Build 17.1)
12/14/09 Datatek Applications Inc. 26
6.4 S YSTEM P LATFORM C ONFIGURATION – IP N ETWORK R ELATED C OMMANDS
6.4.1 CLOSED USER GROUPS - CUG
Syntax: cug <cugnum>[ipaddr=<d.d.d.d>][submask=<d.d.d.d>]
The cug command is only allowed when the unit is logged in.
The <cugnum> parameter is the closed user group identifier used to assign the CUG to the
telnet platform console (with the console command) or to the SNMP interface (with the SNMP
command). If the console is configured with one or more CUGs, only callers belonging to those
CUGs may connect via telnet to the platform console, If SNMP is configured with one or more
CUGs, only callers belonging to those CUGs are allowed to issue GETs and SETs. If no CUG is
assigned to SNMP, any caller is allowed to do SETs and GETs. (SNMP also requires adherence
to the community strings configured for SET and GET.)
A single IP address and subnet-mask pair specifies each CUG. The ipaddr parameter is an IP
address or the base address of an IP subnetwork that identifies members of the group. The
caller’s IP address AND’ed with the submask must agree with a CUG's ipaddr value AND’ed
with the same submask value for the caller to belong to the CUG. Depending on the submask
value, this allows an individual (submask=255.255.255.255), intermediate, or network-wide level
of authorization.
Setting the ipaddr value to 0.0.0.0 deletes any prior configuration for the <cugnum>. A
<cugnum> may not be deleted if it is currently assigned to SNMP or the console.
A list of all configured CUGs is reported via the vfy cug command. The list of closed user groups
associated with SNMP is displayed as part of the vfy snmp command. The list of closed user
groups associated with the console is displayed by the vfy console command.
6.4.2 CONSOLE
Syntax: console cug=[+|-]<cuglist> | cug=none
Where <cuglist>=<cugnum>[-<cugnum>][,<cugnum> | ,<cugnum>-
<cugnum>]
The console command is only allowed when the unit is logged in. The console command
configures the list of closed user groups (CUGs) that defines which IP addresses are allowed to
connect to the platform telnet console. The closed user groups must first be configured using the
cug command; then they may be added to the console CUG list. A plus (+) adds the list of cug
numbers to the list; a minus (-) deletes them. Invoking the command with no plus or minus sign
before the list, resets the numbers in the console list to those specified, deleting any already
defined for the console. The list of cug numbers is separated by commas, or dashes may be used
for ranges.
6.4.3 IP ADDRESS(ES) – IPADDR, SUBMASK, IPOTHER, IPPUBLIC
Syntax: ipaddr [d.d.d.d] (IP address)
submask [d.d.d.d] (subnet mask)
The ipaddr, ipother, ippublic and submask commands are only allowed when the unit is logged
in. See also the local command, section 6.4.5, for a more convenient method to configure the IP
parameters.
The ipaddr field is the IP address of this unit.
The submask field is the subnet mask for the LAN segment on which the unit is located. It
defaults to 255.255.255.0.