User Manual

Security User Restrictions
11-20
To enable or disable PPP or SLIP on a port, use the Define Ports PPP/Define Ports SLIP commands:
Figure 11-38: Disabling PPP and SLIP
11.5.4 Securing a Port
When a port is secure, users on that port will be prevented from editing many of the port’s settings. In
addition, they will only be able to display a limited amount of information using Show/Monitor/List
commands.
Note: Users logged in on secure ports cannot become privileged users.
It is recommended to secure ports used for public use; for example, ports used for public dial-in modem
pools. To secure a port, use the Set/Define Ports Security command:
Figure 11-39: Securing a Port
Note: The complete syntax of Set/Define Ports Security is discussed on page 12-76.
11.5.5 Locking a Port
The Lock command may be used to secure a port without disconnecting sessions. When Lock is entered,
the user will be prompted to enter a password. This port will then be locked until this password is used to
unlock it. Figure 11-40 displays an example:
Figure 11-40: Locking and Unlocking a Port
Note: Secure ports (set using the Set/Define Ports Security command) cannot be
locked.
To unlock a port without the Lock password, a privileged user must use the Unlock Port command
(discussed on page 12-91) or log out the port using the Logout Port command (discussed on page 12-47).
Logout will disconnect all sessions.
11.5.6 Forcing Execution of Commands
When a username is entered in the local authentication database (NVR), a series of commands may be
associated with that user. These commands will be executed when the user is successfully authenticated.
Local>> DEFINE PORT 2 PPP DISABLED
Local>> DEFINE PORT 2 SLIP DISABLED
Local>> DEFINE PORT 2 SECURITY ENABLED
Local> LOCK
Password> donut (not echoed)
Verification> donut (not echoed)
Unlock password> donut (not echoed)
Local>