User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
167
NOTE: Each TD
name must be
unique on the Mesh
Point.
in which TDname is a descriptive identifier for the Trusted
Device,
MACaddr is the MAC address of the Trusted Device,
and
IPaddr either configures the Trusted Device to take any IP
address or specifies its network address. The
-state switch
enables/disables access for the Trusted Device. The
-ports
switch specifies commonly used port sets, by function,
accessible through the Trusted Device (comma delimited,
without spaces), or that
any port is accessible through the
Trusted Device.
CAUTION: Specify-
ing that
any port
can access a TD can
pose a significant secu-
rity risk.
Valid port set values are:
 web (ports 80, 443)
 ssh (port 22)
 snmp (ports 161, 162)
 email (ports 25, 110, 143, 220)
 fileshare (ports 137, 138, 139)
 telnet (port 23)
Maximize network security by specifying the narrowest
possible port access for Trusted Devices.
You must configure a name, MAC address and either
any or a
specific IP address for the Trusted Device when you add it to
the Mesh Point configuration. You must also assign either
any
or at least one port set.
You can leave out the
-state switch; Trusted Devices are
disabled by default.
Use the
update command to change Trusted Device settings,
as follows:
# update td guests
# update td guests -name guest -ip 192.167.1.12 -mac 11:2a:3b:4d:56:1a -state enable -ports
web
The update td command returns the current settings for the
specified Trusted Device, which you can edit and re-enter: use
the left/right arrow keys to navigate displayed fields, backspace
over current values or overwrite them. When you finish typing
in new values, strike
Enter↵ to save them.
You can also use the
td update command with only the
switches and arguments you need:
# update td guests -name visitor
The Mesh Point CLI returns [OK] when settings are
successfully changed.
Delete a single Trusted Device or all Trusted Devices from
Mesh Point management with the
del td command, as follows:
# del td <name> |-all
You must be logged on to an administrator -level account to
execute
add, update and del commands (refer to Section 2.2).