R2511-HP MSR Router Series Terminal Access Configuration Guide(V5)

57
of a pseudo terminal must be present in the /dev directory and must start with tty. To configure pseudo
terminal names not to start with "tty", you must use a full path name starting with "/dev/".
"accesstime 2 8:00-12:00 13:00-18:00" in the sample entry specifies that the terminal can be connected
to the Unix server during two periods only: 8:00 to 12:00 and 13:00 to 18:00. Up to four access periods
can be defined for a terminal. By default, no time restriction is imposed. Note that access periods are
synchronized with the system clock of the FEP. This parameter only functions in TTY one-to-one mode.
ttyp30 10.110.96.44 1 mac 02-f3-22-3e-2e-01
This sample entry specifies that the router with the IP address of 10.110.96.44 has a MAC address of
02-f3-22-3e-2e-01, and that the router must send its MAC address for authentication before it can perform
normal operations. After this command is used, MAC address binding must also be configured on the
router.
To configure authentication and access periods at the same time, you must configure them in the same
line and make sure the access period is configured before the authentication. See the following example:
ttyp30 10.110.96.44 1 accesstime 1 8:00-18:00 mac 02-f3-22-3e-2e-01
ttyp30 10.110.96.44 1 <str> ccc-01 </str>
"<str> ccc-01 </str>" indicates the character string that the router with the IP address of 10.110.96.44
needs to send for authentication. The router needs to send its authentication character string. If the
authentication character string matches the one in the configuration file, the authentication succeeds.
Otherwise, the authentication fails. After this command is used, character string binding must also be
configured on the router.
To configure authentication and access periods at the same time, you must configure them in the same
line and make sure the access period is configured before the authentication. See the following example:
ttyp30 10.110.96.44 1 accesstime 1 8:00-18:00 <str> ccc-01 </str>
exit 1
You can type "exit" on the terminal to terminate the TCP connection between the terminal and the Unix
server. The default is 0, meaning the TCP connection will not be terminated.
NOTE:
W
hen too many terminals are confi
g
ured in a confi
g
uration file, the file is liable to be modified
improperly. Confi
g
ure multiple confi
g
uration files on a Unix server with many pseudo terminals, so that a
configuration error does not affect too many applications.
Modifying the ccbtelnetd configuration file
See the configuration guide related to the ccbtelnet service program.
Modifying route configuration file
In terminal access, the router is usually connected to the Unix server through WANs and therefore
located on an IP subnet different from that of the Unix server, in which case you must configure a route
on the Unix server. The following example shows how to do this:
# route add 10.110.96.0 -netmask 255.255.255.0 63.1.1.250
In the example above, 10.110.96.0 is the destination subnet, with the subnet mask of 255.255.255.0 and
the next hop IP address of 63.1.1.250.