SunScreen 3.1 Installation Guide

To Use Command-Line SKIP on the Administration Station

  1. On the Administration Station, open a terminal window and become root.

  2. To enable unencrypted communication from the Administration Station to all hosts other than the Screen, type:


    # skiphost -a default
    
  3. Add a rule so that encrypted communication is possible between the Administration Station and the Screen by typing:


    # skiphost command_from_ss_install
    

    This command is in the AdminSetup.readme file. The command is in the following form, which has been divided into lines for readability:

    skiphost -a name_of_Screen -r NSID_type

    -R Screen's_certificate_ID -s NSID_type

    -S Administration_Station's_certificate_ID

    -k key_encryption_algorithm

    -t data_encryption_algorithm -m MAC_algorithm

  4. Turn on SKIP by typing:


    If Screen has only one interface:
    # skiphost -o on
    If Screen has more than one interface, for each interface:
    # skiphost -i name_of_interface -o on
    


    Note -

    To display the interfaces, type: ifconfig -a


  5. Save the SKIP settings by typing:


    # skipif -i all -s
    

  6. Restart the SKIP daemon by typing:


    # skipd_restart
    

    Refer to the SunScreen SKIP 1.5.1 User's Guide for more information on operating SKIP, if needed.


    Note -

    After configuring SKIP, check that the encryption parameters and 32-character certificate ID (MKID) values match on both the Administration Station and the Screen.


  7. To configure and manage your Screen from your Administration Station, run a Java-enabled Web browser compliant with JDK 1.1.3 or later, and launch the administration GUI by typing the following URL:


    http://Name_of_Screen:3852/
    

See the SunScreen 3.1 Administration Guide for instructions on how to use the administration GUI.