Setting Additional Controls for Telnet Logons
To set controls for Telnet logons, select 1. Telnet Logon from the Telnet Security screen (STRFW > 12) as shown in Setting Additional Controls and Displaying Logs for Telnet.
The Work with Telnet Logon Security screen appears:
| Work with TELNET Logon Security Type options, press Enter. Subset . . . 1=Select 3=Copy 4=Delete 5=IP range Min Incoming pwd Assigned Opt IP Address Subnet Mask Terminal vld Logon Terminal *ALL 0.0.0.0 *ALL 0 *REJECT 1.1.1.3 255.255.255.254 *ALL 0 *ACCEPT *SAME 1.1.1.156 255.255.255.255 *ALL 0 *ACCEPT KOM* 1.1.1.156 255.255.255.255 AB* 0 *ACCEPT LOM* 1.1.1.156 255.255.255.255 ABCD 0 *ACCEPT MOM* 1.1.1.159 255.255.255.255 *ALL 0 *ACCEPT AAA03 1.1.1.198 255.255.255.255 *ALL 0 *ACCEPT *SAME 10.130.0.0 255.255.0.0 *ALL 0 *ACCEPT *SAME 178.249.3.48 255.255.255.255 *ALL 0 *REJECT Bottom F3=Exit F5=Refresh F6=Add new F8=Print F12=Cancel |
The body of the screen consists of seven fields, starting with an Opt field for entering options. Each line refers to a single IP address range.
The remaining fields are:
IP Address
The IP address that begins the range.
Subnet mask
The subnet mask for the address range.
Incoming Terminal
The terminal sending the request. This can be a single name, a generic* name, *ALL, or *BLANKS. For a list of known terminal names, press the F4 key.
Min pwd vld
The minimum password validation level needed for the logon. The possibilities include:
- 0: No password
- 1: With password
- 2: Encrypted password
- 3: SSL connection
Logon
How Firewall responds to the logon request. The possibilities include:
- *ACCEPT: Accept logon request
- *REJECT: Reject logon request
- *AUTOSIGNON: Sign on automatically if permitted by system configuration
- *FRCSIGNON: Force the user to sign on even if the system is configured to accept an automatic signon.
- *ACCEPTSIP: Accept logon request if it is from the same IP as your system.
Assigned Terminal
The name assigned to the terminal if the logon is accepted. This can be an exact name, a generic* name, *SAME, or *SYSTEM.
To add Firewall settings for an IP address range, press the F6 key. The Add TELNET Logon Security Setting screen appears, as shown in Adding Firewall Settings for Telnet Logons.
To modify Firewall settings for an IP address range, enter 1 in the Opt field for that IP address range. The Modify TELNET Logon Security Setting screen appears, as shown in Modifying Firewall Settings for Telnet Logons.
To copy Firewall settings from one IP address range to another, enter 3 in the Opt field for the original IP address range. The Copy TELNET Logon Security Setting screen appears, as shown in Copying Firewall Settings for Telnet Logons.
To delete Firewall settings for an IP address range, enter 4 in the Opt field for the IP address range. The Delete TELNET Logon Security Setting screen appears, as shown in Deleting Firewall Settings for Telnet Logons.