In this section we're going to talk about using your life to access configure and manage your devices.
So first of all what are the options.
Well it can connect locally with a console cable and this means basically connecting your PC or Mac
directly to Fort game console port The other option is to remotely connect to the front gate through
the network.
And this means you will either use the telnet on 4:23 or S-sh on for two of the full values to connect
to the device.
And this must be enabled in advance for connections to be accessed.
Remember what we said in a previous section that the box comes fully law and you have to enable options
and features as you go through configuration enabling your device in the network.
The other one is to go to Asia it is like we have just these cost and then access this your life from
the web based manager.
It was if you remember in the right top corner clicking there and the web page will just fire up a connection
for you and hopefully also have the opportunity to connect to the gate as we have talked.
Also with 40 Explorer you will be cabled directly for gate appliance.
Now let's talk a little bit about permissions.
So access profiles control the level of the access of every user route and then on the gate.
So once you launch in really right or no access rights we may provide the admin account that we have
just used up to this point exist by default and it cannot be deleted.
It makes sense as it will mean that you will be locked out you have no user password pair to log into
the device and do your job full permissions are associated with the admin account.
Similarly like the route and the straight account on Linux or Unix platforms you can create are granted
necessary admin access ESPERAR configuration.
So lets start first of all on configuring what's needed in order to remotely access configure and manage
your game device.
And then we are looking at the permissions section in order to get started.
First draw a little diagram so you can understand what I'll be doing.
So I'll just take a new page and here is how it looks.
So we have 240 Gates in our network now we have the one that we have just configure in you use all the
features and everything.
So this will be this will be the 40 says and this one is the 40 that we have moved to transpire at this
point.
I have a connection between these two for.
And it's on board three or three as well.
I will just configure an activity between the two.
I will take 10 0 0 0 that's sledged 24 and let's say the 40 access code will be the wire and the 40
transferred that to Arthur enabling connectivity and testing to ping
basically that these ICMP protocol will just enable port three on four to transfer Portugais to permit
let's say Thailand although it's not recommended as everything it's transmitted in plaintext so information
is not encrypted.
And then I also enable S-sh and last just to test our connectivity.
I will just connect on the 40 x x x again and fire up S-sh connections so that I get access for the
transport for the I have now logged in both in for gate access course and also for a transfer.
So first of all is there still exist.
It's mean and mean
and let's see how the configuration looks on port three shows system
show system interface or three.
Nothing has been configure its default configuration.
Let's configure it configure system interface
and Port three said I'd be about warm sledged twin for existence save the configuration.
So we have the admin password system interface or three basic default configuration configure system
interface and for three said IP then tells you that you the to sledged 24 umask
and let's say that it shows system interface for three gradely on this site.
Show system interface for three.
You have to do that you know about one.
And on the other one 10.0 that you rode up to let's see if we have been connectivity
exit executed being can go do those up to.
It seems that it's not working.
Got ICMP code 3 this nation unbridgeable.
Now why is that.
It's because on Wall Street we haven't enabled any ICMP or ping connectivity so let's do that config
system interface for three set allow access ping
being again
working.
Now why is the let's allow ICMP on the side as well of course show system interface 4:03.
We haven't allowed the configure system interface for three.
So basically at this point packets will go into the other gay we're coming back but they were injected
by this Watergate so we have to allow.
I simply want to get the on this part as well.
All three
said allow access being and say execute.
Been out there that you all got to
now and it means that configuration has been applied.
So let's see now.
OK so now we have connectivity between the two devices control See if you want to stop it so stop the
Bing before it's going to send for five packets.
So now that we have connectivity we can try
execute S-sh so we can try to S-sh or telnet to the other device.
Again it will not work as this court is not permitting
is not permitting anything else.
So ICMP So lets configure it now.
So compelled to allow access Telenet.
Mr. Sage and exit and the black liberation
exigeant S-sh on divides them.
10.0 first of all is age 2 0 0 to now we have a new host named Watergate 64 and as you can see it was
48 x and of course so we have successfully executed a remote connection to the other 40.
Let's exit the
connection to 10.00 to explode.
This is how easy it is to connect to get a device remotely.
So we don't have to be exactly near the device to configure it.
You can connect remotely at that age.
And again the NSA is the preferred way because the traffic between the devices is encrypted OK.
So we are now back the graphical user interface and then having our credentials and log in.
So I'm saying a little bit earlier about the access profiles what they are and why should we use them
for access profiles.
Control the level of administrative access of every user admin or admin on the fourth key.
So let's create another profile and another user and test it.
If you do have the same level of rights I will do basically an Access program that will be my configuration
and only permit ready access.
So let's go to System Admin profiles and create the new one the name will be really only we don't think
while and let's say that if you have only read on your rights when it successfully connects the phone
to get the plants it's OK.
Now we really do administrators create a new one.
So the admin is the default one of our own Read-Only admin.
The same for password cargo.
I mean it's a local user administrative profiler.
So this is really only prova to match the user and the profile.
This is the place and hit.
OK.
Good.
Let's see how things look when we just connect with really only one logout.
And now we say our and men are to me.
We have now connected with the with only administration is going to network interfaces and let's say
we want to do the sport.
We have selected and we don't have the added option.
Double click on it.
Well we can see the options here with the added interface.
It's not available at interface option.
Can we put an alias we can but we don't have the OK.
We cannot save our options.
So hit.
And that's it.
We log in with the rogue user admin just to get network interface is for fall.
We have the option of.