Nortel 100 Installationsanweisungen
Appendix B Workstation support
93
Installing the BayStack Instant Internet Management Software Version 7.11
Identifying IP workstations
Instant Internet makes it easy to track and restrict users’ access to the Internet.
These features depend on a secure and consistent method for identifying the
specific user logged into a workstation. While several identification methods exist
in the Internet protocol suite, consistent support for these methods is not available
on many workstations. Furthermore, the existing methods do not make use of the
existing Novell and NT directory services that you may already be using.
These features depend on a secure and consistent method for identifying the
specific user logged into a workstation. While several identification methods exist
in the Internet protocol suite, consistent support for these methods is not available
on many workstations. Furthermore, the existing methods do not make use of the
existing Novell and NT directory services that you may already be using.
To address this problem, Instant Internet provides a workstation-side application,
iiLogin, which identifies exactly who is logged in to the Instant Internet unit. This
application is automatically installed and placed into the Startup group when you
install the Instant Internet software on an IP workstation.
iiLogin, which identifies exactly who is logged in to the Instant Internet unit. This
application is automatically installed and placed into the Startup group when you
install the Instant Internet software on an IP workstation.
In addition, iiLogin provides additional diagnostic and notification services to the
user and the administrator, such as error notification and current status
information.
user and the administrator, such as error notification and current status
information.
Users on workstations that are not running iiLogin cannot be identified by name.
Instead they are identified by the IP address of the workstation. For example,
if user SCOTTS, a member of the Development NT domain, is working on
workstation 10.2.1.99, and that workstation is not running iiLogin, then all
Instant Internet reporting and administrative features refer to 10.2.1.99. However,
if iiLogin is running, the correct user SCOTTS[Development] is identified.
Instead they are identified by the IP address of the workstation. For example,
if user SCOTTS, a member of the Development NT domain, is working on
workstation 10.2.1.99, and that workstation is not running iiLogin, then all
Instant Internet reporting and administrative features refer to 10.2.1.99. However,
if iiLogin is running, the correct user SCOTTS[Development] is identified.
Host name access controls for IP workstations
The Domain Name Service (DNS) is the mechanism used by IP workstations to
convert host names such as www.nortelnetworks.com to IP addresses. Queries
from a workstation to a DNS server present the host name and ask for the
corresponding IP address. Once translated, the workstation application uses the
IP address to contact the named host.
convert host names such as www.nortelnetworks.com to IP addresses. Queries
from a workstation to a DNS server present the host name and ask for the
corresponding IP address. Once translated, the workstation application uses the
IP address to contact the named host.
For IPX and other Winsock-based workstations, host name access control
checking occurs within the workstation, before any DNS query is performed.
checking occurs within the workstation, before any DNS query is performed.