Remote Access Parameters in NetWare Administrator

You can use the NetWare Administrator utility to configure many of the same remote access parameters that you configure using NIASCFG. These parameters include AppleTalk Remote Access Service (ARAS) zones, IPX^TM /IP settings, Remote Client password, maximum connection time, dialback mode and number, and idle timeout. It might be easier for you to configure or change these parameters from a PC using the NetWare Administrator utility if the parameters affect a user, organization, organizational unit, country, or locality.

NOTE:  If you still have NetWare Connect 2.0 servers on your network, you should be able to use the new NetWare Administrator snap-ins to administer NetWare Connect 2.0. If you do use the new snap-ins, you should apply the snap-ins to the NetWare Administrator version that comes with NetWare 5.

Setting Remote Access User Parameters

Perform this procedure to configure remote access user parameters, including the Remote Client password, connection time, idle timeout, and dialback.

To set remote access user parameters, complete the following steps:

1. Select a user from the Novell Directory tree in the NetWare Administration main window by double-clicking the username, or right-clicking the username and selecting Details from the pop-up menu.

   The NetWare Administrator Details window is displayed. You can view or modify object properties from this window.

2. Scroll down the list of choices on the right side of the window and click Remote Access 1.

   The Remote Access 1 dialog box is displayed.

3. For the Remote Client password, specify one or more of the following options:

   • Allow User to Change Remote Client Password---Select this check box to permit users to change their Remote Client passwords.
   • Disable Remote Client Password---Select this check box to invalidate the Remote Client password after a specified number of days. Enter the number of days in the text box.

     NOTE:  You must enable the Remote Client password if NASI^TM (NetWare Asynchronous Services Interface^TM ) Connection Service (NCS) dial-in security is enabled.

4. To change the Remote Client password, click Change Remote Client Password, then enter the new password.

5. For the Connect Time, do one of the following:

   • Select the Use Default Maximum Connect Time check box to select the default of no limit.
   • If you did not select the Use Default Maximum Connect Time check box, enter the number of minutes (between -1 and 100,000) in the Maximum Connect Time text box. A value of -1 indicates no limit.

6. Select Specify Idle Timeout and enter a number for the timeout, in minutes, between 1 and 100,000.

   A value of -1 indicates no limit.

7. In the Dialback box, do the following:

   1. Select a dialback mode.

   2. Enter a dialback number, if Force Dialback to a Specific Number is selected as the dialback mode.

   3. Select the Use Dial-In Port for Dialback check box, if applicable to the dialback mode selected.

      NOTE:  If you select a forced dialback option, Windows and DOS callers must specify a blank for the dialback number or the call will be rejected.

8. Click OK and save your changes, or continue with the next procedure.

Setting Remote Access Service Parameters

Perform this procedure to configure remote access service parameters for a user, organization, organization unit, country, or locality, including the ARAS zone and IPX/IP parameters. You can also set the idle timeout for an organization, organization unit, country, or locality.

To set remote access service parameters, complete the following steps:

1. Select an object from the Novell Directory tree in the NetWare Administration main window by double-clicking the object, or right-clicking the name and selecting Details from the pop-up menu.

   The NetWare Administrator Details window is displayed. You can view or modify object properties from this window.

2. Scroll down the list of choices on the right side of the window and click Remote Access 2. (Click Remote Access if you selected an organization, organization unit, country, or locality.)

   The Remote Access 2 or Remote Access dialog box is displayed.

3. For ARAS, select a user restrict zone from the list.

   If the ARAS user restrict zone is not listed, click the three-dot button to the right. This displays a dialog box that lets you add or delete zones from the user restrict zone list.

   NOTE:  This parameter is not available if you selected an organization, organization unit, country, or locality in Step 1.

4. If you are working with an organization, organization unit, country, or locality, select the Specify Idle Timeout check box and enter a number for the timeout, in minutes, between -1 and 100,000.

   A value of -1 indicates no limit.

   NOTE:  This parameter is not available if you selected a user in Step 1.

5. For IPX, select the Specify IPX Address for User check box, then specify the following:

   • IPX Address---Enter a unique hexadecimal address containing from 1 to 12 characters. Remote access uses this address to create a virtual network containing remote IPX nodes.
   • IPX Address Mask---Enter the hexadecimal address used for user IPX addresses. Make sure that the 1 bit is contiguous and there are no leading zeros or zeros in the middle of the mask.
   • Home Server(s)---Select the home server to which the remote node can attach at the client's local site.

     NOTE:  Servers assigned as home servers must be reachable from all remote access servers to which the user will be dialing, and they must be running IPXRTR software. If servers are not functioning when you configure this parameter, the user must enter the server's IPX address.

6. For IP, select the Specify Domain Information check box, then specify the following:

   • Server Address---Enter the network address of the domain name server to resolve hostnames for client requests.
   • Domain Name---Enter the suffix to append to local hostnames.

7. For IP, select the Set Boot Parameters check box, then specify the following:

   • TFTP Server Address---Enter the network address of the server that provides the Trivial File Transfer Protocol (TFTP) used to access the boot file.
   • Boot File Name---Enter the name of the boot file that the client uses to start the remote workstation.

8. Click OK and save your changes.

Setting Remote Access IP Filtering

Perform this procedure to configure remote access IP filtering parameters for a user, organization, organization unit, locality, or country. This option might or might not be available on your system.

You can set IP filtering by primary or secondary IP address pool so that users can do the following:

• Access the Internet, but not access any locations on Novell Internet Access Server 4.1.
• Access multiple locations on Novell Internet Access Server 4.1, but not any locations on the Internet.
• Access the Internet and limited locations on Novell Internet Access Server 4.1.

If no filter is set, the users will have access to all locations on the server.

To set remote access IP filtering, complete the following steps:

1. Select an object from the Novell Directory tree in the NetWare Administration main window by double-clicking the object, or right-clicking the name and selecting Details from the pop-up menu.

   The NetWare Administrator Details window is displayed. You can view or modify object properties from this window.

2. Scroll down the list of choices on the right side of the window and click Remote Access 3. (Click Remote Access 2 if you selected an organization, organization unit, country, or locality.)

   The Remote Access 3 dialog box is displayed.

3. Select whether to use the primary or secondary IP address pool.

   The display box shows the IP addresses that the user can send packets to and receive packets from. You can change the filtering parameters.

4. Click Add to add an IP address to IP filtering.

   The IP Filter dialog box is displayed.

   NOTE:  You can also click Edit to change IP filtering information for an IP address.

5. Specify the following information:

   • IP Address---Enter the address of the IP network you want to filter.
   • Mask---Enter the mask for the IP network.
   • Packet Type---Click one of the choices: Any, TCP, UDP, or ICMP.
   • Ports---Click one of the options: Any, Range, or Service.

6. Click OK and save your changes.