User Manual

Security User Restrictions
11-19
11.5.1 Privileged Commands
Many of the SCS commands require privileged user (superuser) status. To become the privileged user, use
the Set Privileged command. The default privileged password is system.
Figure 11-36: Set Privileged Command
Note: To change the privileged password, use the Set/Define Server Privileged
Password command, described on page 12-124.
Only one user may have privileged status at any time. If another user currently has privileged status, the Set
Privileged Override command may be used to forcibly become the privileged user. To stop being the
privileged user, use the Set Noprivileged command.
11.5.2 IP Address Restriction
To avoid routing problems and enhance security, the SCS can restrict incoming remote networking callers
to a particular address or range of addresses.
Each site may specify a particular range of acceptable IP addresses. When an incoming caller requests to
use a specific address, it will be compared to this range. If the address falls within the range, the connection
will be permitted, if not, the connection attempt will fail.
To specify the beginning and end of the range, use the Define Site IP Remoteaddress command. Two
addresses must be specified: the beginning of the range and the end of the range.
Figure 11-37: Specifying Range of Addresses
Callers will not be permitted to use IP addresses with the host part of the address set to all zeroes or all ones.
These addresses are reserved to identify broadcast packets. If the range that you specify includes such an
address (for example, 192.4.5.0 or 192.4.5.255) and a caller requests this address, the connection will not
be permitted.
Note: For more information on IP address assignment, see IP Address Negotiation on
page 4-6.
11.5.3 Controlling Use of Set PPP/SLIP Commands
In order for incoming callers to start PPP or SLIP with the Set PPP/SLIP commands, PPP or SLIP must be
enabled on the port receiving the call. By default, PPP and SLIP are disabled.
Local>> SET PRIVILEGED
Password> system (not echoed)
Local>>
Local>> DEFINE SITE irvine IP REMOTEADDRESS 192.0.1.110 192.0.1.254