SunScreen 3.2 Administration Guide

Modifying Access Rules for Remote Administration

To Add an Access Rule for Remote Administration

    Use the add subcommand with the accessremote argument to add an administrative access rule for remote administration:


    edit> add accessremote USER admin3 * SKIP_VERSION_2 admin-group
    DES-CBC DES-CBC MD5 NONE
    

    This administrative access rule allows the access level ALL for the admin 3 user at a remote Administration Station on the Internet to use the GUI and command line to administer the Screen.


    Note -

    Make a note of the encryption parameters if you change them, because they have to match the encryption parameters on the remote Administration Station.


To Edit an Access Rule for Remote Administration
  1. List the administrative access rules for remote administration, for example:


    edit> list accessremote
    

    The following approximates the output that is displayed:


    1 USER "admin" "*" SKIP_VERSION_2 "admin-group" "DES-CBC" 
    "DES-CBC" "NONE" "NONE" PERMISSION
    ALL
    2 USER "admin3" "*" SKIP_VERSION_2 "admin-group" "DES-CBC" 
    "DES-CBC" "NONE" "NONE" PERMISSION
    ALL


    Note -

    Make a note of the encryption parameters if you change them, because they have to match the encryption parameters on the remote Administration Station.


  2. Use the replace subcommand to replace an administrative access rule with the value or values for a particular user for remote administration with a new value (for example, STATUS, for the access level):


    edit> replace accessremote USER admin3 * SKIP_VERSION_2 admin-group
    DES-CBC DES-CBC NONE NONE PERMISSION STATUS
    

    This administrative access rule changes the access level for admin3 at a remote Administration Station on the Internet to STATUS.

To Delete an Access Rule for Remote Administration

Note -

Do not delete all the administrative access rules.


    Use the del subcommand to delete an administrative access rule for remote administration:


    edit> del accessremote 2
    

    Where 2 is the number, in the ordered rules, that you want to delete.