Chad Gilles ([log in to unmask]) wrote:
> Hello All,
>
>   Does anyone know how I can specify what LDEV number a session will get
> when it logs on using VT?
>   Here is my scenario: We have some modems attached to DTC ports that
> utilize the non-nailed feature of DTC manager to allow access to any
> of our three machines. We use Security/3000 and we want to log all
> accesses to these modems to satisfy internal auditing requirements.
> When someone logs on via one of these modems I don't think I can tell if
> the session is a non-nailed modem or a non-nailed port. If I can force
> the modems to a specific LDEV then Security/3000 can log them.
>   Am I just overlooking something obvious?
>
 
Why not simply nail the modem ports, via NMMGR? This will allow you to use
Security/3000 as you wish to.
 
Nailing these modem ports will still permit you to access any of your 3
machines. You just won't be able to access the same host more than once
concurrently from the same dtc port.
 
Multiple concurrent sessions to the same host is the only advantage of
configuring non-nailed ports that I can think of. The benefits of increased
control and auditability that nailed ports offer probably outweighs the
rarely-used (in my opinion) feature of multiple concurrent sessions to the
same host.
 
Of course only you can determine which feature is more important to you.