beautypg.com

Configuring the at-s39 software security features, Configuring the management passwords – Allied Telesis AT-S39 User Manual

Page 48

background image

Section II: Local and Telnet Management

48

Configuring the AT-S39 Software Security Features

The AT-S39 software has several security features that can help prevent
unauthorized individuals from changing the parameter settings of an
AT-8000 Series switch. The security features are:

❑ Manager and Operator Passwords - The management software

has two standard, management login accounts: Manager and
Operator. The Manager acount allows you to configure all switch
parameters, while the Operator account only allows you to view
the parameter settings. The default login for Manager access is
“manager” and the password is “friend”. Both login and password
for Operator access are “operator”. Logins and passwords are
case-sensitive. For instructions on how to change a password,
refer to Configuring the Management Passwords on page 48.
(You can create additional management login accounts for the
switch if your network contains a TACACS+ or RADIUS
authentication protocol server. For instructions, refer to Chapter
17
, TACACS+ and RADIUS Protocols on page 191.)

❑ Console Timeout - This parameter causes the management

software to automatically end a management session if it does
not detect any activity from the local or remote management
station after the specified period of time. This security feature can
prevent unauthorized individuals from using your management
station should you step away from your system while configuring
a switch. The default for the console timeout value is 10 minutes.
For instructions on how to set this security feature, refer to
Configuring Management Access on page 51.

❑ Web Access - You can disable the web browser management

feature on the switch, and so prevent individuals from managing
the switch remotely using a web browser. By default, Web access
is enabled. For instructions on how to set this security feature,
refer to Configuring Management Access on page 51.

❑ SNMP Access - You can also disable the SNMP management

feature on the switch, and so prevent individuals from managing
the switch remotely using a SNMP management program. By
default, SNMP access is disabled. For instructions on how to set
this security feature, refer to Configuring Management Access
on page 51.

Configuring the

Management

Passwords

There are two levels of management access on an AT-8000 Series switch:
Manager and Operator. When you log in as a Manager, you can view and
configure all of a switch’s operating parameters. When you log in as an
Operator, you can only view the operating parameters; you cannot
change any values.