Хочу настроить автоматическое отключение пользователей на циске. Делаю все по книге.
Т.е.
Код: Выделить всё
Extended IP access list 155
10 Dynamic test1 permit ip any any
20 permit ip host х.х.х.3 any (внешний УТМ)
30 permit ip host 10.0.0.251 any (внутренный УТМ)
Extended IP access list 156
10 Dynamic test2 permit ip any any
20 permit ip any host х.х.х.3
30 permit ip any host 10.0.0.251
username netup privilege 8 password 7 Пароль
no ip rcmd domain-lookup
ip rcmd rsh-enable
ip rcmd remote-host netup х.х.х.3 netup enable
Код: Выделить всё
Info : Feb 21 09:23:11 StreamManager: ID <0x4004> handler <0x085bcdc0>
Info : Feb 21 09:23:11 StreamManager: ID <0x4004> handler <0x085bcdc0>
Info : Feb 21 09:23:11 StreamManager: ID <0x4002> handler <0x085bcdc0>
Info : Feb 21 09:23:11 StreamManager: ID <0x4002> handler <0x085bcdc0>
Info : Feb 21 09:23:11 StreamConnection: Connection thread started. Peer 127.0.0.1:12758
Info : Feb 21 09:23:11 StreamConnection: Connection thread started. Peer 127.0.0.1:12758
?Debug : Feb 21 09:23:11 StreamConnection: Connection using TCP socket
?Debug : Feb 21 09:23:11 StreamConnection: System message recived
?Debug : Feb 21 09:23:11 StreamConnection: Challenge response sent
?Debug : Feb 21 09:23:11 StreamConnection: System message recived
Info : Feb 21 09:23:11 StreamConnection: Connection is not authorized, terminating
Info : Feb 21 09:23:11 StreamConnection: Connection is not authorized, terminating
?Debug : Feb 21 09:23:11 StreamConnection: closing connection [1]
Info : Feb 21 09:23:11 StreamConnection: Connection from 127.0.0.1:12758 closed
Info : Feb 21 09:23:11 StreamConnection: Connection from 127.0.0.1:12758 closed
ERROR : Feb 21 09:23:11 StreamManager: set_auth: connection closed
ERROR : Feb 21 09:23:11 StreamManager: set_auth: connection closed
*CRIT : Feb 21 09:23:11 RFW Config: Unable to login, check you configuration file settings
*CRIT : Feb 21 09:23:11 RFW Config: Unable to login, check you configuration file settings
*CRIT : Feb 21 09:23:11 RFW Config: Unable to login, check you configuration file settings
-Stats : Feb 21 09:23:11 StreamManager: Stats: Uptime: 00:00:00. Events: 0; Errors: 0
Notice: Feb 21 09:23:11 RFW Config: Pid file found: /var/run/utm5_rfw.pid; Overwriting
Notice: Feb 21 09:23:11 RFW Config: Pid file found: /var/run/utm5_rfw.pid; Overwriting
Код: Выделить всё
rfw_name=127.0.0.1
core_host=127.0.0.1
core_port=12758
rfw_login=rfw
rfw_password=rfw
firewall_type=cisco
#rfw_ssl_type=none
sync_flags=enable
firewall_path=/sbin/ipfw
#sudo_path=/usr/bin/sudo
#dont_fork=yes
cisco_ip=x.x.x.1
log_level=3
log_file_main=/netup/utm5/log/rfw.log
....
В админке:
В списке брандмауеров:
Тип cisco(rsh)
IP x.x.x.3
Логин netup
Правила:
на включение для всех польозвателей
access-template 155 test1 host UIP any
access-template 156 test any host UIP
На выключение для всех пользователей
clear access-template 155 test1 host UIP any
clear access-template 156 test2 any host UIP
utm5_rfw рестартил.
Правила не добавляются.
tcpdump -nXli eth1 -s 6500 port 514 - молчит.
В чем косяк?
