|
|
This chapter describes the function and displays the syntax of AppleTalk Remote Access commands. See the Access Services Command Reference publication for more information about defaults and usage guidelines.
[no] arap authentication {default | list-name}
To enable TACACS+ authentication for ARA on a line, use the arap authentication line configuration command. Use the no form of the command to disable authentication for an ARA line.
| default | Use the default list created with the aaa authentication arap command. |
| list-name | Use the indicated list created with the aaa authentication arap command. |
To enable an ARA client to request a callback, use the arap callback global configuration command.
To configure a line to be used only as an ARA connection, use the arap dedicated line configuration command. Use the no form of the command to return the line to interactive mode.
To enable ARA for a line, use the arap enable line configuration command. Use the no form of this command to disable ARA.
[no] arap net-access-list net-access-list-number
To control Macintosh access to networks, use the arap net-access-list line configuration command. Use the no form of this command to return to the default setting.
| net-access-list- number | One of the list values configured using the AppleTalk access-list cable-range, access-list includes, access-list network, access-list other-access, and access-list within commands. |
arap network [network-number] [zone-name]
no arap network
To create a new network/zone and cause it to be advertised, use the arap network global configuration command. Use the no form of this command to prevent a new network/zone from being advertised.
| network-number | (Optional) The AppleTalk network number. The network number must be unique on your AppleTalk network. This network is where all ARAP users appear when they dial in to the network. |
| zone-name | (Optional) The AppleTalk zone name. |
arap noguest [if-needed]
no arap noguest
To prevent Macintosh guests from logging in to the access server, use the arap noguest line configuration command. Use the no form of this command to remove this restriction.
| if-needed | (Optional) Does not authenticate if the user already provided authentication. This allows users to log in as guests if they have already been authenticated through a username and/or password. |
To require users to enter their password manually at the time they log in, use the arap require-manual-password line configuration command.
arap timelimit [minutes]
no arap timelimit
To set the maximum length of an ARA session for a line, use the arap timelimit line configuration command. Use the no form of this command to return to the default of unlimited session length.
| minutes | (Optional) Maximum length of time (in minutes) for a session. |
arap use-tacacs [single-line]
no arap use-tacacs
To enable TACACS for ARAP authentication, use the arap use-tacacs line configuration command. Use the no form of this command to disable TACACS for ARAP authentication.
| single-line | (Optional) Accepts the username and password in the username field. If you are using an older version of TACACS, (before Extended TACACS) you must use this keyword. |
arap warningtime [minutes]
no arap warningtime
To set when a disconnect warning message is displayed, use the arap warningtime line configuration command. Use the no form of this command to disable this function.
| minutes | (Optional) Amount of time, in minutes, before the configured session time limit. At the configured amount of time before a session is to be disconnected, the access server sends a message to the Macintosh client, which causes a warning message to appear on the user's screen. |
[no] arap zonelist zone-access-list-number
To control what zones the Macintosh client sees, use the arap zonelist line configuration command. Use the no form of this command to disable the default setting.
| zone-access-list-number | One of the list values configured using the AppleTalk access-list zone or access-list additional-zones commands. |
debug arap {internal | memory | mnp4 | v42bis}
no debug arap
To debug ARA sessions, use the debug arap privileged EXEC command. Use the no form of this command to turn off the debugging function.
| internal | Debug internal ARA packets |
| memory | Debug memory allocation for ARA |
| mnp4 | Debug low-level asynchronous serial protocol |
| v42bis | Debug compression |
To display information about a running ARAP connection, use the show arap user EXEC command.
| line-number | (Optional) Number of the line on which an ARAP connection is established and active. |
|
|