|
A particular security installation can support the creation of several
hundred access groups (ACGs and ASGs). When you create each new access
group, you allocate some number of 'indices' to the client system of the
new ASG. This number reflects the number of subsequent 'child' ASGs that
can subsequently be created at the new client's system.
If zero indices are reserved, you cannot create
any lower-level ASG under the client of the new ASG. Thus, for example,
if you want to implement a multi-tiered security architecture consisting
of many ASGs, and you wanted to create them all from the Master Security
Client (MSC), zero indices would be allocated to each of the new ASGs
client platforms when they are created. If you create an ASG, and you reserve 25 indices
for the new ASG client platform, a child ASG created by this platform
will have a maximum of only 24 indices available to be reserved (one is
taken by the creation of the child ASG itself). This continues down the
ASG hierarchy as each lower level ASG is created. When you create an ASG from the MSC, a maximum
of 50 indices (or less if fewer are available) can be reserved. For all
other clients, the maximum depends on how many indices were reserved to
that client when its ASG was created, and on how many it has subsequently
allocated to its ASGs.
|
