beautypg.com

Configuring the at-s39 software security features – Allied Telesis AT-S39 User Manual

Page 45

background image

Section II: Local and Telnet Management

45

Configuring the AT-S39 Software Security Features

The AT-S39 software has several security features that can help prevent
unauthorized individuals from changing the parameter settings of an
AT-8000 Series switch. The security features are:

❑ Manager and Operator Passwords - The management software

has two standard, management login accounts: Manager and
Operator. The Manager acount allows you to configure all switch
parameters, while the Operator account only allows you to view
the parameter settings. The default login password for Manager
access is “admin”. The default password for Operator access is
“friend”. The passwords are case-sensitive. For instructions on
how to change a password, refer to Configuring the
Management Passwords
on page 46.
(You can create additional
management login accounts for the switch if your network
contains a TACACS+ or RADIUS authentication protocol server.
For instructions, refer to Chapter 15, TACACS+ and RADIUS
Protocols
on page 179.)

❑ Console Timeout - This parameter causes the management

software to automatically end a management session if it does
not detect any activity from the local or remote management
station after the specified period of time. This security feature can
prevent unauthorized individuals from using your management
station should you step away from your system while configuring
a switch. The default for the console timeout value is 10 minutes.
For instructions on how to set this security feature, refer to
Configuring Management Access on page 47.

❑ Web Access - You can disable the web browser management

feature on the switch, and so prevent individuals from managing
the switch remotely using a web browser. For instructions on how
to set this security feature, refer to Configuring Management
Access
on page 47.

❑ SNMP Access - You can also disable the SNMP management

feature on the switch, and so prevent individuals from managing
the switch remotely using a SNMP management program. For
instructions on how to set this security feature, refer to
Configuring Management Access on page 47.

❑ TFTP Server Access - Disabling TFTP server access prevents

anyone from downloading management software switch to
switch. For instructions on how to set this security feature, refer to
Configuring Management Access on page 47.