User guide

Chapter 4: DSView Management Software 39
3. You must configure the CPS appliance for DS appliance management. Begin by establishing a
Telnet application session to your CPS appliance. From the CPS appliance command line,
enter the following command in a single line, with each parameter separated by spaces:
server security authentication=ds
encrypt=<DES>,<3DES>,<128>,<none>
dsauth=<pri_ip>,<secondary_ip>,<any> dsclear lockout=<hours>
Parameter usages for this command are described below:
•Type
encrypt to specify the type of authentication you wish to use. You may specify mul-
tiple values or
none if you do not wish to authenticate users.
• In place of <
pri_ip> and <secondary_ip>, enter the IP address of the DSAuth Server(s)
on which you wish to perform authentication. You may specify a primary only, a second-
ary only, a primary and secondary or
any to use any DS authentication server.
NOTE: If any is specified, the first DSAuth Server adding the CPS appliance to its database will install
credentials on the CPS appliance that place it in Secure mode. While in Secure mode, the CPS appliance may
not be accessed by other DSAuth Servers.
If the first DSAuth Server adding the CPS appliance to its database is configured with a backup DSAuth Server,
the credentials of both DSAuth Servers will be installed on the CPS appliance.
•Type dsclear if you wish to clear any stored DS appliance/DSR switch credentials and
authentication server credentials.
•Type
lockout to enable or disable Security Lock-out. In place of <hours>, enter the num-
ber of hours to lock out a DS user in the range 1-99. To disable, specify a 0 value.
In the following example, any DSAuth Server may authenticate users, with the strongest
encryption negotiated between triple DES and 128-bit:
server security authentication=ds dsauth=any encrypt=3des,128
In the following example, a primary and secondary server may authenticate users with 3DES
encryption, clearing stored credentials and locking out a DS user for one hour after five
unsuccessful login attempts:
server security authentication=ds dsauth= 12.34.45.78,90.98.76.54 encrypt=3des
dsclear lockout=1
Press Enter to accept the configuration.
4. From the DSView management software, select File - New - CPS. The Properties dialog box
will appear.
5. In the Device Identification tab, enter the IP address for the CPS appliance that you are adding.
This is the IP address that you assigned in the Terminal Applications menu. See the CPS
Installer/User Guide for more information.
6. Enter a name for the CPS appliance and select the type of CPS appliance that you are adding.