User Manual

Security Troubleshooting
11-32
Outgoing finger requests are permitted and incoming requests are prevented using this command:
Figure 11-67: Permitting Outgoing Finger Requests
To use firewall fw_i as an incoming filter list for site irvine, the Define Site Filter Incoming command is
used:
Figure 11-68: Configuring a Firewall
11.8.6 Dialback
An SCS must be configured to prevent all users from connecting with the exception of two users, sam and
paul. When sam and paul attempt to connect to the SCS, the modem must dial them back to verify their
identities.
The modem is connected to SCS port 2, and there isn’t a corresponding modem profile. The generic modem
profile must be used. The following example assumes that modem profile type 3 is the generic modem
profile (Use the List Modem command to view available modem profiles).
Figure 11-69: Enabling Modem Handling/Selecting a Modem Type
The following commands are used to configure dialback:
Figure 11-70: Configuring Dialback
11.9 Troubleshooting
To troubleshoot authentication problems, use event logging. To configure event logging, use the Set/Define
Logging command, discussed on page 12-174.
Local>> DEF FILT fw_i ADD ALLOW IP TCP SPORT EQ FINGER DPORT GT 1023 ACK
Local>> DEF SITE irvine FILTER INCOMING fw_i
Local>> DEFINE PORT 2 MODEM ENABLED
Local>> DEFINE PORT 2 MODEM TYPE 3
%Info: Port speed changed to 57600.
%Info: Port flow control changed to CTS.
Local>> DEFINE PORT 2 DIALBACK ENABLED
Local>> DEFINE DIALBACK sam “123-4567”
Local>> DEFINE DIALBACK paul “867-5309”
Local>> DEFINE DIALBACK BYPASS DISABLED
Local>> LOGOUT PORT 2