Configuring Access to the Appliance


IP Access Protocols panel


Setting Administrative Access through Specific Protocols

Administration Access settings let you designate specific protocols you want to use on an IP address to administer the appliance. This lets you restrict what protocols can be used to administer the appliance.

For example, you might not want to allow the appliance to be administered through Telnet because there is no password authentication provided by Telent. When the Telnet protocol is enabled, all users potentially have access to the Nterprise Branch Office console. Users without the Supervisor right cannot execute commands, but they can monitor console activity. Enable the Telnet protocol only in cases when the supervisor does not have physical access to the Nterprise Branch Office appliance and specific commands need to be executed at the console. When the necessary commands have been executed, disable the Telnet protocol immediately. All other protocols are password restricted.

HINT:  You set the Supervisor password during the Nterprise Branch Office Setup Wizard. This password is valid for all protocols except Telent, which does not use any password authentication.

  1. Click Configuration > IP Access Protocols.

  2. In the Administration Access table, configure the protocols you want used to administer the appliance by clicking the corresponding button at the top of the Administration Access table and then checking Enable in the configuration page.

    HTTPS enables appliance administration via the HTTPS protocol on the specified port (this is the preferred method).

    FTP enables appliance administration via the FTP protocol on the specified port. To administer the appliance, you must upload a .nbo file and import it to the appliance. For more information, see Importing/Exporting Configuration Settings .

    Telnet enables appliance administration via the Telnet protocol on the specified port. Telnet sessions are not secure and should be used only on the local network.

  3. To activate a protocol, check the corresponding check box.

  4. Click Apply All Settings when you have finished updating settings.


Setting Data Access Methods

You can select one or more protocols for users to access data on the appliance. Before configuring data access methods, you must have completely configured all authentication sources you plan to use.

Novell NetWare® (NCPTM) and Windows (CIFS) protocols allow users to access their folders in Windows Explorer and in other standard ways. If you enable HTTP, users can access their folders in a browser by specifying an IP address that is enabled for HTTP data access or by specifying the DNS name assigned to the IP address. If UNIX (NFS*) users need access to the data, you can specify volumes that will appear as shares in UNIX.


IP Access Protocols panel

You can specify a specific authentication source for each protocol and you can enable each protocol on one or more IP addresses by doing the following:

  1. Click Configuration > IP Access Protocols.

  2. In the Data Access table, click the button for the protocol you want to modify.

  3. Check the Enable protocol_name Protocol check box, provide the necessary protocol configuration information, then click OK.

    Windows Networking (CIFS) specifies the name and workgroup name the appliance will appear under in Windows and specifies authentication source users will use to authenticate (Appliance local, Windows NT* Domain, or Remote LDAP directory authentication). You can also specify which Nterprise Branch Office volumes can be accessed as Windows NT shares. These share names must start with a backslash (\).

    IMPORTANT:  If workstations are running the Novell ClientTM for Windows and users will have access to data through both the NetWare (NCP) and Windows (CIFS) protocols, the CIFS and NCP names must be different.

    WARNING:  You can import users only from one NT Domain. If you change this domain information, all imported users from the first domain are deleted automatically.

    UNIX Networking (NFS) specifies which UNIX volumes will appear as shares.

    IMPORTANT:  UNIX is case sensitive. If users need to access a shared directory using NFS, the correct directory path with the correct syntax must be entered in the NFS page. The example directory shown in the NFS page shows the syntax for the most common directory, SHARED. To locate the correct path syntax of another directory, click the directory name in the File Access panel and the exact path and syntax appear above the file access tree. Copy the path starting after DATA:/ and paste it in the Shared Directories path in the NFS panel. You might have to edit the path. The path must start with a backslash (\) and you might have extraneous characters at the end of the path due to copying the text from an HTML page.

    Web Browser (HTTP) specifies the port and MIME Type information.

    NetWare Networking (NCP) specifies the name that appears in Network Neighborhood.

    Secure Web Browser (HTTPS) specifies the port.

    Internet File Transfer (FTP) specifies the port.

    IMPORTANT:  You cannot use FTP protocol if filenames or directory names include extended characters.

    Apple File Protocol (AFP) (Optional) changes the name for the Nterprise Branch Office volume that you want the users to see when they log in from their Macintosh* workstations. Otherwise, the volume is data.

    IMPORTANT:  AFP does not support filenames longer than 32 characters.

  4. Repeat the above steps until all protocols used to access data are configured.

  5. To activate a protocol, check the corresponding check box.

  6. Click Apply All Settings when you have finished updating settings.