Note ¯ Whenever possible, especially if you have 100 or more users, you should use RADIUS for user authentication rather than the user table. To use RADIUS see
Chapter 3, "Global Commands," and the RADIUS Administrator's Guide.

The user table enables the PortMaster to authenticate and provide operational parameters on a user-by-user basis.

You can use the command line interface to create, edit, and delete four kinds of users:

• Normal login user begins an active shell session to a host on the network.

• Dialback login user is disconnected by the PortMaster, which then dials back to the user at a predefined telephone number.

• Normal network user establishes an active PPP or SLIP connection to the network.

• Dialback network user is disconnected by the PortMaster, which then dials back to the user at a predefined location. For more information about locations, refer to Chapter 14, "Locations and DLCIs."

  Note ¯ After making changes to a user, you must reset the port that the user is using.

   

Displaying User Information

• show table user

• show user username

Summary of User Commands

User Commands

Note ¯ Set commands can use user and netuser interchangeably, except that you cannot use set netuser for a login user. The add command requires add netuser for network users and add user for login users.

add netuser

This command adds an entry to the user table for a network user.

add netuser Username [password Password]

Username	A network username of 1 through 8 characters.
Password	A network user password of 0 through 16 characters.

Usage

Example

See Also

add user

This command adds an entry to the user table for a login user. Optionally, the user password can be added at the same time.

add user Username [password Password]

Username	A login username of 1 through 8 characters. Usernames cannot begin with a quotation mark or a question mark.
Password	A login user password of 0 through 16 characters.

Usage

Example

delete user

This command deletes a user or network user, password, and associated information from the user table.

delete user Username

Username

Username of a login user or network user.

Example

See Also

save user

This command writes any changes in the user table to the nonvolatile RAM of the PortMaster.

save user

Usage

Example

set user address|destination

This command sets the IP address of the network user.

set user Username address|destination assigned|negotiated|Ipaddress

Username	Name of a network user.
address|destination	Keywords address and destination are synonyms and generate the same result.
assigned	The PortMaster assigns a temporary IP address for this user from the assigned pool.
negotiated	This option is valid only for PPP sessions. The PortMaster attempts to learn the IP address of the remote host by IP Control Protocol (IPCP) negotiation.
Ipaddress	Uses the specified IP address, or hostname with a maximum of 39 characters. If Ipaddress is 0.0.0.0, the PortMaster does not use IP for this user.

Usage

Example

See Also

set user compression

This command sets Van Jacobson TCP/IP header compression and Stac LZS data compression for a network user.

set user Username compression on|off

Username	Name of a network user.
on	Enables compression. The PortMaster tries to negotiate both Van Jacobson and Stac LZS compression on PortMaster 3 and Office Router products, or Van Jacobson compression only on other PortMaster products. This is the default.
off	Disables compression.

Usage

Example

This command sets the callback telephone number for a callback login user, or the location for a callback network user.

set user Username dialback|callback Locname|String|none

Username	Username of a login user or network user.
dialback|callback	Keywords dialback and callback are synonyms and generate the same result.
Locname	Network user location name that is in the location table. Locname must be between 1 and 12 characters in length.
String	Login user callback telephone number-a maximum of 32 characters.
none	Disables callback for this user, who then becomes a normal login or network user.

Usage

To set a callback for a network user, enter the name of the location-already in the location table-to which the PortMaster establishes a network connection back to the user.

Examples

Command> set user mario dialback office
Username:	mario	Type:	Dialback Network User
Location:	office

See Also

set user host

This command indicates the login host for the login user.

set user Username host default|prompt|Ipaddress

Username	Username of a login user.
default	Connects the user to the default host for the serial port.
prompt	Allows the user to select a host (by IP address or name) to begin a login session.
Ipaddress	Connects the user to the specified IP address, or 39-character hostname.

Usage

login:

prompt:

host:

Setting the IP address to 0.0.0.0 sets the host to the default.

Example

See Also

set user idle

This command sets the length of time the line can be idle-in both directions-before the PortMaster disconnects the user.

set user Username idle Number [minutes|seconds]

Username	Name of a user.
idle Number	Timeout value from 0 to 240. The default value is 0.
minutes	Sets the idle time in minutes. This is the default.
seconds	Sets the idle time in seconds.

Usage

You can set user idle timeout in the user table using this command, or you can use the RADIUS Idle-Timeout attribute. The RADIUS attribute is specified in seconds, but when greater than 240 seconds it is rounded up to minutes by the PortMaster.

Examples

See Also

set user ifilter

This command sets the input packet filter for packets entering the PortMaster on the interface established by the network user.

set user Username ifilter [Filtername

Username	Name of a user.
Filtername	Input filter name. The maximum is 15 characters.

]

Usage

An access control filter, using a valid filter name from the filter table, can be set for login users to restrict which hosts they can log into, as follows:

• The user logs in and specifies a host.

• The host address is compared against the access filter.

• If the address is permitted by the filter, the connection is established; otherwise, the connection is denied.

  You remove the filter by entering the command without a filter name.

Example

See Also

set user host prompt - page 13-10

set user ofilter - page 13-19

set user ipxnet

This command sets the IPX network number for the user's network connection.

set user Username ipxnet Ipxnetwork

Username	Name of a network user.
Ipxnetwork	Number of IPX network to be used for a serial link-a 32-bit hexadecimal value.

Usage

Example

See Also

set ipx on - page 3-8

set user local-ip-address

This command sets the IP address of the PortMaster serial port to the IP address of a network user.

set user Username local-ip-address Ipaddress

Username	Name of a network user.
Ipaddress	IP address. A hostname is not accepted.

Usage

This command is used to create a dial-out point-to-point network connection when both ends require an IP address.

Note ¯ The point-to-point connection is a network of two nodes and requires its own IP subnet.

Example

See Also

set reported_ip - page 3-18

set user map

This command sets the PPP asynchronous map to replace nonprinting ASCII characters found in the data stream.

set user Username map Hex

Username	Name of a network user.
Hex	A 32-bit hexadecimal number. The default is 0x00000000.

Usage

The command set user Username map 0 disables the asynchronous mapping.

Example

This command, if set, limits the number of network dial-in ports the user can use on the PortMaster for Multilink V.120, Multilink PPP, and asynchronous multiline load-balancing.

set user Username maxports Number

Username	Name of a user.
Number	Number between 0 and 64.

Usage

Example

See Also

set user mtu

This command sets the maximum transmission unit (MTU) for the network user.

set user Username mtu MTU

Username	Name of a network user.
MTU	MTU value from 100 to 1500 bytes.

Usage

Example

See Also

set user netmask

This command defines the netmask of the user's system on the remote end of the connection.

set user Username netmask Ipmask

Username	Name of a network user.
Ipmask	IP netmask in dotted decimal notation.

Usage

Example

See Also

set user ofilter

This command sets the output packet filter for packets leaving the PortMaster on the interface established by this dial-in network user.

set user Username ofilter [Filtername

Username	Name of a network user.
Filtername	Output filter name. The maximum is 15 characters.

]

Usage

You remove the filter by entering the command without a filter name.

Note ¯ This command does not apply to login users.

Example

See Also

add filter - page 15-4

set user password

This command sets the password for a login user or network user.

set user Username password Password

Username	Username of a login user or network user.
Password	User password of 0 through 16 characters.

Usage

Example

This command sets the transport protocol for a network user.

set user Username protocol slip|ppp|x75-sync

Username	Name of a network user.
slip	SLIP protocol. This is the default.
ppp	PPP protocol.
x75-sync	X.75 protocol.

Usage

Example

See Also

set user service

This command selects the login service for the login user.

set user Username service netdata|portmaster|rlogin|telnet [Tport]

Username	Name of a login user.
netdata	Uses a netdata connection (TCP clear channel).
portmaster	Uses the PortMaster login service to connect to in.pmd on login host. This is the default.
rlogin	Uses the rlogin protocol to connect to the login host.
telnet	Uses Telnet to connect to the login host.
Tport	Designated TCP port on the host, a 16-bit number from 1 through 65535. The default is 23.

Example

See Also

set user session-limit

This command sets the maximum length of a session permitted before the PortMaster disconnects the user.

set user Username session-limit Minutes

Username	Name of a user.
Minutes	Session limit in minutes, any value from 0 to 240. The default is 0.

Usage

Examples

See Also

show table user

This command shows the current users in the user table.

show table user

Example

See Also

show user

This command shows the configuration of the specified user.

show user Username

Username

A username of 1 through 8 characters.

Example

See Also