Remote Access

Contents

NetWare* Administrator enables you to remotely configure Novell* Internet Access Server remote access software parameters.

Overview

Procedures

Setting Remote Access Service Parameters

Setting Remote Access User Parameters

Setting Remote Access Parameters for NDS Containers

For information on how to use online help, press F1.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Remote Access Software

Overview

Novell* Internet Access Server 4.1 provides a server-based software solution for remote computing that consolidates inbound and outbound client communications activities.  The remote access software component provides a common platform through which remote node, remote control, terminal emulators, and other communications packages can share centralized devices.  The remote access software consists of several components:

Asynchronous Input-Output (AIO)

NetWare Connect* Service Selector (NWCSS)

NetWare Connect* Supervisor (NWCSU)

NetWare Connect* Configuration (NWCCON)

Point-to-Point Protocol Remote Node Service (PPPRNS)

NASI* Connection Service (NCS)

AppleTalk** Remote Access Service (ARAS)

Asynchronous Input-Output Packet Assembler-Disassembler (AIOPAD)

Remote Access Management Agent (RAMA)

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Asynchronous Input-Output (AIO)

The AIO.NLM file controls a group of NetWare* Loadable Modules* (NLM*) files that enable ports to be configured for various services on the Novell* Internet Access Server.  You can install and configure the AIO software as part of the remote access software configuration.  AIO facilitates port sharing, independent modem control, logical port management, and automatic port acquisition.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


NetWare Connect Service Selector (NWCSS)
NetWare Connect* Service Selector (NWCSS)

Because the remote access software supports diverse client types, it features the NetWare Connect* Service Selector (NWCSS), which automatically routes incoming calls to the appropriate service.  The Service Selector interfaces with AIO and monitors ports on behalf of the registered services.  After the appropriate destination of the incoming data has been determined, the Service Selector relinquishes port control to the appropriate service.  In a remote control dial-in connection, the remote access software queries the caller about which available session (network workstation) the caller wants to connect to.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


NetWare Connect Supervisor (NWCSU)
NetWare Connect* Supervisor (NWCSU)

The NetWare Connect* Supervisor (NWCSU) provides configuration and dynamic reconfiguration support.  It also supports security, license checking, network management, and updates port status.  NWCSU provides a library of functions, such as security, dial-back, audit trail, and alert logging.  It interacts with the other product components and enforces product serialization and licensing mechanisms.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


NetWare Connect Configuration (NWCCON)
NetWare Connect* Configuration (NWCCON)

NetWare Connect* Configuration (NWCCON) is the server-based configuration utility for th remote access software.  This utility is used to install licenses and to configure and manage the remote access software.  NWCCON spawns several other configuration and status-related utilities, but they must be started from NWCCON.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Point-to-Point Protocol Remote Node Service (PPPRNS)

Point-to-Point Protocol Remote Node Services (PPPRNS) provides PPP support for remote DOS and Windows** clients using the Internet Packet Exchange* (IPX*) software or IP.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


NASI* Connection Service (NCS)

NetWare Asynchronous Services Interface* (NASI*) Connection Services (NCS) establishes a logical connection between a Novell* Internet Access Server port and a network workstation.  This connection enables network workstations (PCs and Macintosh** computers) to dial out of the network with third-party applications using a pool of modems on the server.

Similarly, dial-in users (PCs) can use third-party remote control applications to remotely control a dedicated workstation or an applications server on the network through NCS.  NCS manages the connection between the calling PC and the network workstation.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


AppleTalk** Remote Access Service (ARAS)

AppleTalk** Remote Access Service (ARAS) supports remote Macintosh** clients.  The Macintosh clients dial in to become remote nodes on the network.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Asynchronous Input-Output Packet Assembler-Disassembler (AIOPAD)

The Novell* Internet Access Server supports the transmission of asynchronous data over synchronous protocols, such as X.25.  The remote access software enables network workstations to use an X.25 packet-switched network to dial out to host computers and enables remote users to dial in and access network resources.  This module provides an AIO (asynchronous input-output) interface to an X.25 driver.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Remote Access Management Agent (RAMA)

The Remote Access Management Agent (RAMA) enables the remote access software to be managed from any SNMP-based console on the network.  RAMA interfaces with other management consoles through SNMP.  It provides all remote access information to the ConnectView* software and other SNMP-based management software.

* Novell trademark. ** Third-party trademark. Press "Trademarks" for detailed trademark information.


Trademarks
Trademarks, Copyright, and Disclaimer

Copyright © 1996-1997 Novell, Inc.  All rights reserved.  No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

U.S. Patent Nos. 5,157,663; 5,349,642; and 5,455,932.  U.S. Patent Application No. 5,572,528. U.S. and International Patents Pending.

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.  Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.  Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Export Notice

This product may not be exported outside of the U.S. or Canada without prior authorization from the U.S. Department of Commerce.

Novell Trademarks

ConnectView is a registered trademark of Novell, Inc.

IPX (Internetwork Packet Exchange) is a trademark of Novell, Inc.

NetWare is a registered trademark of Novell, Inc. in the United States and other countries.

NetWare 3 is a trademark of Novell, Inc.

NetWare 4 is a trademark of Novell, Inc.

NetWare Asynchronous Services Interface and NASI are trademarks of Novell, Inc.

NetWare Loadable Module and NLM are trademarks of Novell, Inc.

Novell Directory Services and NDS are trademarks of Novell, Inc.

Novell is a registered trademark of Novell, Inc. in the United States and other countries.

Third-Party Trademarks

AppleTalk is a registered trademark of Apple Computer, Inc.

IBM is a registered trademark of International Business Machines Corporation.

Macintosh is a registered trademark of Apple Computer, Inc.

Windows is a registered trademark of Microsoft Corporation.

Windows 95 is a trademark of Microsoft Corporation.

Windows NT is a trademark of Microsoft Corporation.


Setting Remote Access Service Parameters

This dialog box enables you to configure user settings for remote access service parameters.  These settings include

AppleTalk** Remote Access Service (ARAS)

User Restrict Zone List

IPX*/PPPRNS Parameters

IPX* Address

IPX* Address Mask

Home Servers

IP/PPPRNS Parameters

Server Address

Domain Name

TFTP Server Address

Boot Filename

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


User Restrict Zone List

On an AppleTalk** network, an AppleTalk zone is a logical grouping of devices physically located on one or more networks.  Each nonextended network must have only one zone name assigned to it.  Each extended network must have at least one zone name and can have up to 255 zone names assigned to it.

To limit zones available to users, click this combo box button and select the desired restricted zones.  Either specify additional parameter changes or close this dialog box.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


IPX Address
IPX* Address

An Internetwork Packet Exchange* (IPX*) address is an unique hexadecimal address that is 1 to 8 alphanumeric characters long.

The remote access software uses this network address to create a virtual network containing remote IPX nodes.  A virtual network decreases network traffic by restricting the number of broadcast messages sent to the remote clients.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


IPX Address Mask
IPX* Address Mask

An Internetwork Packet Exchange* (IPX*) address mask is a range of hexadecimal numbers that can be used for users IPX addresses.

The default mask, FFFFFFFFFFFF, does not provide a range of IPX addresses.

When specifying the IPX address mask, ensure that the 1 bit is contiguous. IPX address masks cannot have leading zeros or zeros in the middle of the mask.  For example, the masks FFFFFC00FF00 and FFFFFFFFFFF4 are invalid. In hexadecimal, 4 equals 0100 (which places a zero in the middle of the mask).  Replacing 4 with 0, 8, C, E, or F would provide valid masks because in binary the masks would equal 0000, 1000, 1100, 1110, and 1111, respectively.

Note: Users might require more than one IPX address if they want to log in to the same server more than once.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Home Server
Home Servers

When a remote node PPP user dials in to a NetWare* network, the node is connected to the home server and retrieves network information from this server.  The home server can be set to enable the remote node to connect to a server in the client’s local site, providing users with the same view of the network through both local and remote access.

If more than one home server is selected, the remote node might connect to any of the home servers listed.

Note: Servers assigned as home servers must be reachable from all remote access servers that users will be dialing in to.  Also, home servers must be running IPXSERV software.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Server Address

This field specifies the network address of the domain name server to resolve hostnames for client requests.

Note: If the client uses complete hostnames, you can specify a domain name server address without specifying the domain name.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Domain Name

This field specifies the suffix to append to local hostnames.  For example, if the domain name is novell.com, the client appends that name to the local hostname to provide a complete name.  For example, if the local hostname is ca, the complete name is ca.novell.com.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


TFTP Server Address

This field specifies the network address of the server that provides the Trivial File Transfer Protocol (TFTP) used to access the BOOTP file.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Boot Filename

This field specifies the name of the boot file that the client uses to start the remote workstation.

Note: Most PCs have their boot files in local memory, so you might not be required to specify this parameter.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Setting Remote Access User Parameters

This dialog box enables you to modify the remote access user parameters.

Procedures

Allow User to Change Remote Client Password

Disable Remote Client Password

Use Default Maximum Connect Time

Specify Idle Timeout

Use Dial-In Port for Dialback

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Allow User to Change Remote Client Password

This option enables you to permit users to modify their remote client passwords.  Remote client passwords can be configured to be 8 or 16 bytes long. They might be required for the following types of callers to establish a connection:

Remote caller on a Macintosh** computer

Remote caller on a PC using the PAP or CHAP method of authentication

Remote caller accessing a remote control host session on the network

To permit users to change their remote client passwords, ensure that this check box is selected.  Otherwise, clear this check box.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Disable Remote Client Password

This option enables you to invalidate remote client passwords after a specified time.  Remote client passwords can be 8 or 16 bytes long. They might be required for the following types of callers to establish a connection:

Remote caller on a Macintosh** computer

Remote caller on a PC using the PAP or CHAP method of authentication

Remote caller accessing a remote control host session on the network

To invalidate users’ remote client passwords, ensure that this check box is selected and specify the desired number of days.  Otherwise, clear this check box.

Note: If NASI* Connection Service (NCS) dial-in security is enabled, you must enable the remote client password.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Use Default Maximum Connect Time

This field enables you to enable the default maximum connection time or to enter a specific number of minutes allowed.  By default, the maximum connection time is no limit.

To use the default maximum connection time (no limit), ensure that this check box is selected.

To specify a nondefault maximum connection time, ensure that this check box is clear and specify the desired number of minutes between 1 and 100,000 (1,667 hours).

Note: A maximum connection time of -1 is equivalent to the default of no limit.

You can specify the desired dialback mode as forced dialback or optional dialback .  Use the Dialback Mode combo box to select the desired mode.

In addition, you can specify the required dialback number in the Dialback Mode combo box.

Note: If forced dialback mode is used, Windows** and DOS callers must specify a blank for the dialback number or the call will be rejected.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Specify Idle Timeout

This field enables you to specify a timeout or wait period for the remote access services.  If no activity is detected for the specified amount of time, the remote access software disconnects the inactive connections.

Note: Specify -1 for no timeout limit.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Use Dial-In Port for Dialback

This field enables you to require the remote access software to use dialback to contact users on the same port that the caller used to dial in.

Note: Dialback is available only to dialers using the NWCAP authentication process.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Forced Dialback

There are two types of forced dialback modes:

Forced Dialback to a Specific Number

The remote access software dials back the caller at a preconfigured telephone number.  This dialback (also called security dialback)implements maximum security on your system.

When dialback is configured, the caller must not specify a dialback number when establishing the connection.  (In Windows** and DOS dialers, the caller must specify a blank for this parameter.)  Otherwise, the call will be rejected because of a mismatched server and remote client configuration.

Forced Dialback to a Caller-Specified Number

The dialback number is not preconfigured on the remote access software.  The caller specifies the dialback number at connection time.

Note: Dialback is available only to dialers using the NWCAP authentication process.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Optional Dialback

Optional dialback enables callers to request dialback and specify the dialback number at connection time.  This feature is supported for the PPPRNS service only.

If a caller wants the remote access software to dial back, the caller can direct it to do so to any number at the time of connection.

Optional dialback is the most flexible but least secure type of dialback.

Note: Dialback is available only to dialers using the NWCAP authentication process.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Setting Remote Access Parameters for NDS Containers
Setting Remote Access Parameters for NDS* Containers

This dialog box enables you to modify the remote access parameters for Novell Directory Services* (NDS*) containers.  The specified settings apply to the selected organizational unit (OU), organization (O), locality (L), and country (C) containers and the containers’ objects.

Procedures

Specify NDS* Idle Timeout

Specify IPX*/PPPRNS Parameters

IPX* Address

IPX* Address Mask

Home Servers

Specify IP Parameters

Server Address

Domain Name

TFTP Server Address

Boot Filename

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Specify NDS Idle Timeout
Specify NDS* Idle Timeout

This field enables you to specify a timeout or wait period for Novell Directory Services* (NDS*) containers.  The setting applies to the selected organizational unit (OU), organization (O), locality (L), and country (C) containers and the containers’ objects.

If no activity is detected for the specified amount of time, the remote access software disconnects the inactive connections.

Note: Specify -1 for no timeout limit.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


IPX Address
IPX* Address

An Internetwork Packet Exchange* (IPX*) address is an unique hexadecimal address that is 1 to 8 alphanumeric characters long.

The remote access software uses this network address to create a virtual network containing remote IPX nodes.  A virtual network decreases network traffic by restricting the number of broadcast messages sent to the remote clients.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


IPX Address Mask
IPX* Address Mask

An Internetwork Packet Exchange* (IPX*) address mask is a range of hexadecimal numbers that can be used for users IPX addresses.

The default mask, FFFFFFFFFFFF, does not provide a range of IPX addresses.

When specifying the IPX address mask, ensure that the 1 bit is contiguous. IPX address masks cannot have leading zeros or zeros in the middle of the mask.  For example, the masks FFFFFC00FF00 and FFFFFFFFFFF4 are invalid. In hexadecimal, 4 equals 0100 (which places a zero in the middle of the mask).  Replacing 4 with 0, 8, C, E, or F would provide valid masks because in binary the masks would equal 0000, 1000, 1100, 1110, and 1111, respectively.

Note: Users might require more than one IPX address if they want to log in to the same server more than once.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Home Servers

When a remote node PPP user dials in to a NetWare* network, the node is connected to the home server and retrieves network information from this server.  The home server can be set to enable the remote node to connect to a server in the client’s local site, providing users with the same view of the network through both local and remote access.

If more than one home server is selected, the remote node might connect to any of the home servers listed.

Note: Servers assigned as home servers must be reachable from all remote access servers that users will be dialing in to.  Also, home servers must be running IPXSERV software.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Server Address

This field specifies the network address of the domain name server to resolve hostnames for client requests.

Note: If the client uses complete hostnames, you can specify a domain name server address without specifying the domain name.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Domain Name

This field specifies the suffix to append to local hostnames.  For example, if the domain name is novell.com, the client appends that name to the local hostname to provide a complete name.  For example, if the local hostname is ca, the complete name is ca.novell.com.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


TFTP Server Address

This field specifies the network address of the server that provides the Trivial File Transfer Protocol (TFTP) used to access the BOOTP file.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Boot Filename

This field specifies the name of the boot file that the client uses to start the remote workstation.

Note: Most PCs have their boot files in local memory, so you might not be required to specify this parameter.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


IP Filtering

This dialog box enables you to set IP filtering by primary or secondary IP address pool so that you can enable users to

Access the Internet, but not any locations on the Novell* Internet Access Server

Access multiple locations on the Novell Internet Access Server, but not any other locations or the Internet

Access the Internet and limited locations on the Novell Internet Access Server

Note:  If no filter is set, the user will have access to all locations on the Novell Internet Access Server.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


Adding IP Addresses

This dialog box enables you to specify the IP addresses, masks, packet types, and ports to be used as filters.

Select the desired filtering and click OK.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


 Configuring Dialback Port Group

To assign a dialback port group to a server, browse the Novell Directory Services* (NDS*) tree to view a list of available servers.  Select the desired server, then select the desired port group in the Dialback Port Group combo box.

ANY_PORT is the default port group that contains all remote access ports.

Note: Port groups are configured on the remote access server.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.


 Configuring Server Global Dialout Restriction

To remotely specify restricted dial-out numbers for authorized users, browse the Novell Directory Services* (NDS*) tree to view a list of available servers. Select the desired server, then click the Add button.  The Add dialog box appears.

Enter the restricted dial-out numbers and click OK.  Repeat this procedure for each server.

To remove a number from the restricted list, select the desired number and click Delete.

To remove all numbers from the restricted list, click Clear All.

* Novell trademark. ** Third-party trademark. Press “Trademarks” for detailed trademark information.