Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Restoring
access to the
Admin Console
Appendix F: Basic Troubleshooting
Restoring access to the Admin Console
To enable or disable authentication for the administrative kernel, follow the
steps below.
1 Log into the Admin Console, and select File Editor.
2 Click Start File Editor.
3 Select File > Open.
4 In the Source field, select Firewall File.
5 In the File field, type /etc/ttys and click OK.
6 To enable or disable administrative kernel authentication, edit the following
line:
console /usr/libexec/getty pccons” ibmpc3 on secure
• To require authentication, change the value to insecure.
• To disable authentication, change the value to secure.
7 Select File > Save to save your changes.
8 Select File > Exit to close the file editor.
If an administrator accidentally configures the active rule group in a way that
prevents an administrator from logging into the Sidewinder G2 (for example,
moving the deny_all rule to the first position or deleting certain access rules),
the following procedure allows you to regain access.
1 Reboot the Sidewinder G2 to the Administrative kernel. For information on
rebooting to the Administrative kernel, see “Powering up the system to the
Administrative kernel” on page 636.
2 At a console attached directly to the Sidewinder G2, run the following script:
restore_console_access
This script will create a temporarily proxy rule called
restore_console_access and adds it to the first position of the active proxy
rule group. This rule allows an administrator to log into the Sidewinder G2
directly (using a console that is directly attached to the Sidewinder G2).
3 When the script completes, reboot to the Operational kernel. See
“Rebooting or shutting down using a command line interface” on page 42.
4 When the Sidewinder G2 finishes rebooting, log in at a console attached
directly to the Sidewinder G2.
5 Using the command line, identify and correct the problem in your active
proxy rule group that is preventing administrator access. See Appendix A or
refer to the cf acl man page for information on configuring your active
rules via command line.
6 Once you have configured your active rules to allow administrator access,
you will need to delete the restore_console_access rule. If you do not
delete this rule and accidentally misconfigure the active rule group
(displacing the position of the restore_console_access rule), a new rule
cannot be configured and added in the correct position.
637