AudioCodes Mediant 8000, Installation, Operation & Maintenance Manual

Page: 389 / 924

Version 6.6 389 October 2014
Installation & Operation Manual 33. Configuring Security Settings
33.18.7 CLI Interface Access Control
SSH and Telnet services on SC boards are used to access the Media Gateway
Command Line Interface (CLI). In the default configuration, these services are
accessible from any IP address and user authentication is performed via username
and password (see Section CLI User Administration) for details.
For enhanced security, you may restrict access to the SSH and Telnet services on SC
boards by specifying an explicit list of IP addresses that are allowed to access the CLI
interface.

To enable access control on the CLI interface:
1.
Click to access the Media Gateway status screen.
2.
In the Navigation pane, select
Security
and then in the configuration pane, click
Security Settings
; the Security Settings screen is displayed.
3.
In the
CLI Access Control
section, configure the CLI Interface Access Control
parameters according to the table below.
Table 33-19: CLI Interface Access Control Parameters
Parameter Name Type Provisioning
Type
Description
CLI Access Control Enum
Disable, Enable
Instant Limit access to CLI interface on SC
boards. When enabled, SSH, SFTP,
SCP, Telnet and FTP services on SC
boards are granted only to IP's explicitly
specified by user. Note that CLI access is
always granted to SNMP managers
(EMS, NMS, OSS and APS).
CLI Access IP 1 IP Address Instant Defines the first IP address that is
allowed access to the SC board's CLI
interface.
CLI Access IP 2 IP Address Instant Defines the second IP address that is
allowed access to the SC board's CLI
interface.
CLI Access IP 3 IP Address Instant Defines the third IP address that is
allowed access to the SC board's CLI
interface.
CLI Access IP 4 IP Address Instant Defines the fourth IP address that is
allowed access to the SC board's CLI
interface.
CLI Access IP 5 IP Address Instant Defines the fifth IP address that is
allowed access to the SC board's CLI
interface.