IncentivesPro Forum Index IncentivesPro
Leading USB solutions
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

ACL for USB Device

 
Post new topic   Reply to topic    IncentivesPro Forum Index -> USB Redirector
View previous topic :: View next topic  
Author Message
uru



Joined: 03 Mar 2021
Posts: 3

PostPosted: Wed Mar 03, 2021 9:22 pm    Post subject: ACL for USB Device Reply with quote

Hello!

Is it to possible to implement ACL for USB Device/port.

Imagine, we have 3 USB tokens.
Token 1 - allowed to connect from computer 1 and computer 3 IPs
Token 2 - allowed to connect only from computer 2 IP
Token 3 - allowed to connect from any IP

Also, maybe it's possible to restrict visibility of USB device which is not allowed to connect from specific IP.

I believe such feature could be very convinient and good step forward in competition with other usb redirection solutions.

Best regards.
Back to top
View user's profile Send private message
Peter
Site Admin


Joined: 01 Aug 2007
Posts: 653

PostPosted: Thu Mar 04, 2021 7:36 am    Post subject: Reply with quote

Hello uru,

Please check here:
https://www.incentivespro.com/helps/usb-redirector/features_access_control_list.htm
Back to top
View user's profile Send private message
uru



Joined: 03 Mar 2021
Posts: 3

PostPosted: Thu Mar 04, 2021 9:19 am    Post subject: Reply with quote

Wow amazing!

I purchased USB Redirector long time ago (USB Redirector for Linux v.3.2.2) and didn't checked for new versions since then, becourse it was already outstanding.

Is this feature also available in Linux USB Redirector ?
Back to top
View user's profile Send private message
Peter
Site Admin


Joined: 01 Aug 2007
Posts: 653

PostPosted: Thu Mar 04, 2021 9:35 am    Post subject: Reply with quote

Thanks for purchasing Smile

Yes, there is preliminary ACL support in the latest version of USB Redirector for Linux.

The generic command-line format is as follows:
Code:
usbsrv <command>


The <command> can be one of the following:
Code:
-list-acl <device>
-add-acl <rule> <device>
-add-acl <rule> <deviceid>
-add-acl <rule> "<device name>"
-remove-acl <deviceid>-<ruleid>
-remove-acl <rule>|all <device>
-remove-acl <rule>|all <deviceid>
-remove-acl <rule>|all "<device name>"
-set-acl-mode disabled|allow|deny <device>
-set-acl-mode disabled|allow|deny <deviceid>
-set-acl-mode disabled|allow|deny "<device name>"


<device> specifies the device in the same way as with other commands, it can be a combination of the following parameters:
Code:
-vid <vendorid>    Vendor ID of a USB device.
-pid <productid>    Product ID of a USB device.
-usb-port <port>    USB port number as displayed by USB Redirector.
-serial <serial>    USB device serial number as displayed by USB Redirector.
-device-name "<name>"    USB device name as displayed by USB Redirector. The name must be enclosed in double quotes.


<rule> specifies the host name, computer name, IP address, IP range or IP subnetwork in a form of a string, e.g.:
Code:
192.168.1.5
192.168.1.5-192.168.1.55
192.168.1.0/24
myhost.com
LUCY-WORKSTATION


<rule> can also be a 1-based index of an existing rule specified as follows:
Code:
-ruleid <number>


Examples:
usbsrv -set-acl-mode allow -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -serial 1234567890
usbsrv -add-acl 192.168.1.5 -usb-port 1-2
usbsrv -add-acl 192.168.1.5 -device-name "USB Flash Ddrive"
usbsrv -remove-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -remove-acl -ruleid 1 -vid 0123 -pid 4567
usbsrv -remove-acl all -vid 0123 -pid 4567
usbsrv -list-acl 1

Hope it helps.
Back to top
View user's profile Send private message
uru



Joined: 03 Mar 2021
Posts: 3

PostPosted: Thu Mar 04, 2021 6:13 pm    Post subject: Reply with quote

That's exaclty what i'm looking for.

Great job!

Thank you.
Back to top
View user's profile Send private message
luogu



Joined: 17 Oct 2020
Posts: 2

PostPosted: Sun May 02, 2021 11:27 am    Post subject: Reply with quote

USB server in the LAN, through the router port forwarding, external network connection can not normally identify the host name and IP address. This causes the Use access control list to be invalid. Only the router's host name and IP address can be displayed.


Peter wrote:
Thanks for purchasing Smile

Yes, there is preliminary ACL support in the latest version of USB Redirector for Linux.

The generic command-line format is as follows:
Code:
usbsrv <command>


The <command> can be one of the following:
Code:
-list-acl <device>
-add-acl <rule> <device>
-add-acl <rule> <deviceid>
-add-acl <rule> "<device name>"
-remove-acl <deviceid>-<ruleid>
-remove-acl <rule>|all <device>
-remove-acl <rule>|all <deviceid>
-remove-acl <rule>|all "<device name>"
-set-acl-mode disabled|allow|deny <device>
-set-acl-mode disabled|allow|deny <deviceid>
-set-acl-mode disabled|allow|deny "<device name>"


<device> specifies the device in the same way as with other commands, it can be a combination of the following parameters:
Code:
-vid <vendorid>    Vendor ID of a USB device.
-pid <productid>    Product ID of a USB device.
-usb-port <port>    USB port number as displayed by USB Redirector.
-serial <serial>    USB device serial number as displayed by USB Redirector.
-device-name "<name>"    USB device name as displayed by USB Redirector. The name must be enclosed in double quotes.


<rule> specifies the host name, computer name, IP address, IP range or IP subnetwork in a form of a string, e.g.:
Code:
192.168.1.5
192.168.1.5-192.168.1.55
192.168.1.0/24
myhost.com
LUCY-WORKSTATION


<rule> can also be a 1-based index of an existing rule specified as follows:
Code:
-ruleid <number>


Examples:
usbsrv -set-acl-mode allow -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -serial 1234567890
usbsrv -add-acl 192.168.1.5 -usb-port 1-2
usbsrv -add-acl 192.168.1.5 -device-name "USB Flash Ddrive"
usbsrv -remove-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -remove-acl -ruleid 1 -vid 0123 -pid 4567
usbsrv -remove-acl all -vid 0123 -pid 4567
usbsrv -list-acl 1

Hope it helps.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    IncentivesPro Forum Index -> USB Redirector All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group