---

Access Control Tab

The Access Control tab lets you determine which groups or specific IP Addresses can access specific resources. The Access dialog contains the following tabs:

• Users tab
• Groups tab
• Group Access tab
• Address Filter tab
• Directory Listing tab

Click on a tab name or scroll down for specific information regarding that tab.

The Users Tab

The Users tab lets you specify individual users of the server, their passwords and home page. With this tab, you can:

• add a user
• remove a user
• set a user's password
• change a user's password
• set a user's home page
• permit or deny access

Adding a New User

1. Enter the Name of the user in the Name field.
2. Enter an initial password for the user in the Password field.
3. Enter the same initial password in the Confirm field.
4. Select a Home page the user views when he accesses the server in the Home field. You can also click on the Browse button to browse for the home page.
5. Click on the Apply button. The new user and home page are added to the list. You can save the changes by clicking Save at the bottom of the frame.

Removing a User

1. Select the user you want to remove from the Name/Home Page table.
2. Click on the Remove button to remove the user from the Name/Home Page table. You can save the changes by clicking Save at the bottom of the frame.

---

Setting a User's Password

1. Enter the name of the user in the Name field.
2. Enter a new password for the user in the Password field.
3. Enter the same password in the Confirm field.
4. Click on the Apply button. The new password is now set for the user. You can save the changes by clicking Save at the bottom of the frame.

Changing a User's Password

1. Enter the Name of the user in the Name field.
2. Enter a new password for the user in the Password field.
3. Enter the same password in the Confirm field.
4. Click on the Apply button. The new password is now set for the user. You can save the changes by clicking Save at the bottom of the frame.

 

Setting a User's Home Page

The home page is the page the user first views when accessing the server.

To set a user's home page:

1. Enter the user's name in the Name field.
2. Enter the file name with complete path in the Home field. You can browse to locate this file by selecting the Browse button.
3. Click the Apply button. The Home page is added to the Name/Home Page table. You can save the changes by clicking Save at the bottom of the frame.

Groups tab

The Groups tab lets you create users groups that have authenticated users. This is useful for allowing different classes of users that can have different levels of access to the server. For example, you may want to create an administrator group containing only a few trusted users, with specific IP addresses, as they could then access the configuration utilities of the server. On the other end of the security spectrum; you may want to define a guest group that would allow access to anyone in a particular subnet. In this way, departments that are on a particular subnet can then have specific access privileges With this tab, you can:

• create a users group
• remove a users group

• add a user
• remove a user
• change a user's IP address

---

Creating a Users Group

Before you can specify access privileges or specify any groups access, you must first create a users group.

To create a users group:

1. Enter the name of the group in the Group field.
2. specify the host IP address of the workstation they use or a subnet using the "*" wildcard. If you do not specify a host, *.*.*.* is the default and anyone using that name can access the resources you allocate using the Group Access tab.
3. Select a user from the Users table that you added using the Users tab.
4. Click the Add button. The group is added to the Group table.

You can save the changes by clicking Save at the bottom of the frame.

---

Removing a Users Group

Often it is necessary to remove an entire group. The users that you added using the Users tab will not be deleted by removing any groups.

To remove a users group:

1. Select the group from the Group table or enter the group name in the Group field.
2. Click the remove button. The group is removed from the Group table. You can save the changes by clicking Save at the bottom of the frame.

---

Adding a User

1. Enter a group name in the Group field or select a group from the Group table.
2. Select a user from the Users table that you added using the Users tab.
3. Enter the IP address in the host field. you can use the "*" wildcard to mask any segment of the address or you can enter an entire address.
4. Click the Add button. The User is added to the Group. You can save the changes by clicking Save at the bottom of the frame.

---

Removing a User from a Group

1. Select the users name from under the Group you want to remove him from, in the User/Host table (Not from the Users table.).
2. Click the Remove button. The User is removed from the group. You can save the changes by clicking Save at the bottom of the frame.

---

Changing an IP Address

Often it is necessary to change the IP address for a particular user or group. People may move to a new workstation or the department may move to a new subnet etc.

To change an IP address:

1. Select the group or user from the User/Host table.
2. Change the IP address in the Host field.
3. Click the Add button. The new entry is added to the User/Host table.
4. Select the original entry.
5. Click the Remove button. The original entry is removed from the User/Host table. You can save the changes by clicking Save at the bottom of the frame.

---

Group Access Tab

The Group Access tab lets you specify specific access privileges for each group that you defined using the Groups tab. This tab allows you to:

• allow read/write access
• allow read only access
• allow write only access
• deny access

---

Allowing Read/Write Access

1. Select the group name from the Group table.
2. Enter the path in the Path field. You can browse to locate the path using the Browse button.
3. Click the Allow button in the Access group.
4. Click the Add button. The permission is added to the Path/Permission/Group table. You can save the changes by clicking Save at the bottom of the frame.

---

Allowing Read Only Access

1. Select the group name from the Group table.
2. Enter the path in the Path field. You can browse to locate the path using the Browse button.
3. Click the Allow Only button in the Access group.
4. Check the Read box in the Access group.
5. Click the Add button. The permission is added to the Path/Permission/Group table. You can save the changes by clicking Save at the bottom of the frame.

---

Allowing Write Only Access

1. Select the group name from the Group table.
2. Enter the path in the Path field. You can browse to locate the path using the Browse button.
3. Click the Allow Only button in the Access group.
4. Check the Write box in the Access group.
5. Click the Add button. The permission is added to the Path/Permission/Group table. You can save the changes by clicking Save at the bottom of the frame.

---

Denying Access

1. Select the group name from the Group table.
2. Enter the path in the Path field. You can browse to locate the path using the Browse button.
3. Click the Deny button in the Access group.
4. Click the Add button. The permission is added to the Path/Permission/Group table. You can save the changes by clicking Save at the bottom of the frame.

Address Filter Tab

The Address Filter tab lets you allow or deny access to a particular IP address or subnet mask. This is useful if you want to tallow an entire group of people access without password protection or to block access to an entire subnet or individual IP address. With this tab you can:

• allow unprotected access to an entire subnet
• allow unprotected access to an individual
• deny access to an entire subnet
• deny access to an individual

---

Allowing Access to an Entire Subnet

Often within an organization it is best to have unprotected access to particular resources. When you allow access to an entire subnet, the users do not need a password to access the resources.

To allow access to an entire subnet:

1. Enter the subnet mask in the Subnet Mask field.
2. Click the Permit button.
3. Click the Add button. The entry is added to the Subnet Mask/Address/Permission table. You can save the changes by clicking Save at the bottom of the frame.

---

Allowing Access to an Individual IP Address

You can also allow access to an individual workstation. When you allow access to a workstation, the users of that workstation do not need a password to access the resources.

To allow access to an individual IP address:

1. Enter the subnet mask in the Subnet Mask field.
2. Enter the IP address in the Address field.
3. Click the Permit button.
4. Click the Add button. The entry is added to the Subnet Mask/Address/Permission table. You can save the changes by clicking Save at the bottom of the frame.

---

Denying Access to an Entire Subnet

You can deny access to a particular subnet. This is useful when you want to block a competitor from accessing your server or you have particular reason to block out a subnet.

To deny access to an entire subnet:

1. Enter the subnet mask in the Subnet Mask field.
2. Click the Deny button.
3. Click the Add button. The entry is added to the Subnet Mask/Address/Permission table. You can save the changes by clicking Save at the bottom of the frame.

---

Denying Access to an Individual

You can block access to any individual IP address as well. This ensures that a particular workstation can not access the server.

To deny access to an individual IP address:

1. Enter the subnet mask in the Subnet Mask field.
2. Enter the IP address in the Address field.
3. Click the Deny button.
4. Click the Add button. The entry is added to the Subnet Mask/Address/Permission table. You can save the changes by clicking Save at the bottom of the frame.

Directory Listing Tab

The Directory Listing tab lets you block directories from being viewed by people accessing the server. This is useful when you don't want people to be able to view or access your data on directories below the ones where they have access.

To block a directory listing:

1. Enter the directory in the Directory field. You can browse to locate the directory by selecting the Browse button.
2. Click the Add button. The entry is added to the Directory table. You can save the changes by clicking the Save button.

To remove a directory blocking :

1. Select the directory from the Directory table.
2. Click the Remove button. The entry is removed from the Directory table. You can save the changes by clicking the Save button.

Permitting or Denying Acccess

You can specify whether or not you want others to have access to your

To permit access:

1. Select the directory from the Directory table.
2. Click the Remove button. The entry is removed from the Directory table. You can save the changes by clicking Save at the bottom of the frame.

To deny access:

1. Select the directory from the Directory table.
2. Click the Remove button. The entry is removed from the Directory table. You can save the changes by clicking Save at the bottom of the frame.

Copyright© 1996, 1997, Cisco Systems All Rights Reserved.