Configuring the at-s39 software security features – Allied Telesis AT-S39 User Manual
Page 45
Section II: Local and Telnet Management
45
Configuring the AT-S39 Software Security Features
The AT-S39 software has several security features that can help prevent
unauthorized individuals from changing the parameter settings of an
AT-8000 Series switch. The security features are:
❑ Manager and Operator Passwords - The management software
has two standard, management login accounts: Manager and
Operator. The Manager acount allows you to configure all switch
parameters, while the Operator account only allows you to view
the parameter settings. The default login password for Manager
access is “admin”. The default password for Operator access is
“friend”. The passwords are case-sensitive. For instructions on
how to change a password, refer to Configuring the
Management Passwords on page 46. (You can create additional
management login accounts for the switch if your network
contains a TACACS+ or RADIUS authentication protocol server.
For instructions, refer to Chapter 15, TACACS+ and RADIUS
Protocols on page 179.)
❑ Console Timeout - This parameter causes the management
software to automatically end a management session if it does
not detect any activity from the local or remote management
station after the specified period of time. This security feature can
prevent unauthorized individuals from using your management
station should you step away from your system while configuring
a switch. The default for the console timeout value is 10 minutes.
For instructions on how to set this security feature, refer to
Configuring Management Access on page 47.
❑ Web Access - You can disable the web browser management
feature on the switch, and so prevent individuals from managing
the switch remotely using a web browser. For instructions on how
to set this security feature, refer to Configuring Management
Access on page 47.
❑ SNMP Access - You can also disable the SNMP management
feature on the switch, and so prevent individuals from managing
the switch remotely using a SNMP management program. For
instructions on how to set this security feature, refer to
Configuring Management Access on page 47.
❑ TFTP Server Access - Disabling TFTP server access prevents
anyone from downloading management software switch to
switch. For instructions on how to set this security feature, refer to
Configuring Management Access on page 47.