AudioCodes Media Pack MP-112, User Manual

Page: 73 / 486

Version 5.8 73 September 2009
SIP User's Manual 3. Web-Based Management
3.3.3 Security Settings
The Security Settings menu allows you to configure various security settings. This menu
contains the following page items:

Web User Accounts (refer to ''Configuring the Web User Accounts'' 73 on page )

WEB & Telnet Access List (refer to ''Configuring the Web and Telnet Access List''
76
on
page )


Certificates (refer to ''
Firewall Settings (refer to Configuring the Firewall Settings on page 77 )
Configuring the Certificates'' 79 on page )

General Security Settings (refer to ''Configuring the General Security Settings''
83
on
page )


IKE Table (refer to ''
IPSec Table (refer to Configuring the IPSec Table on page 85 )
Configuring the IKE Table'' 87 on page )
3.3.3.1 Configuring the Web User Accounts
To prevent unauthorized access to the Web interface, two Web user accounts are available
(primary and secondary) with assigned user name, password, and access level. When you
login to the Web interface, you are requested to provide the user name and password of
one of these Web user accounts. If the Web session is idle (i.e., no actions are performed)
for more than five minutes, the Web session expires and you are once again requested to
login with your user name and password. Up to five Web users can simultaneously open
(log in to) a session on the device's Web interface.
Each Web user account is composed of three attributes:

User name and password:

enables access (login) to the Web interface.
Access level:
Table 3-9: Web User Accounts Access Levels and Privileges
determines the extent of the access (i.e., availability of pages and read /
write privileges). The available access levels and their corresponding privileges are
listed in the table below:
Access Level
Numeric
Representation*
Privileges
200
Security
Administrator
Read / write privileges for all pages.
100
Administrator
read / write privileges for all pages except
security-related pages, which are read-only.
50 User Monitor
No access to security-related and file-loading
pages; read-only access to the other pages.
This read-only access level is typically applied
to the secondary Web user account.
0 No Access No access to any page.
* The numeric representation of the access level is used only to define accounts in a RADIUS server
(the access level ranges from 1 to 255).