Configuring the Control Module and System Timing
Restricting administrative access
Stinger® MS+ Getting Started Guide
5-7
to which power has been applied, you are presented with the prompt for the
admin
user:
admin>
After you have supplied basic IP information, as described in “Providing a basic
system IP configuration” on page 5-9, you can access the Stinger command-line
interface by using Telnet from an IP host. Or, you can log in by using an SNMP
management station, such as NavisAccess™, from an IP host. These types of
connections require that you authenticate a User profile and supply a password to
acquire administrative permissions. During basic configuration, Lucent Technologies
recommends that you also configure the serial port to require username and
password authentication.
For details about User profiles, see the
Stinger Administration Guide
.
Restricting administrative access
Each Stinger unit is shipped from the factory with its security features set to defaults
that allow you to easily access the unit so you can configure it without any
restrictions. Before you bring the unit online, you must change the default security
settings to protect the configured unit from unauthorized access.
Changing defaults for serial-port logins
The factory default setting for the control module serial interface specifies that any
connection to that interface will use the
admin
User profile. To help protect the
system from unauthorized administrative access on the serial interface, change the
following default setting:
[in SERIAL/{ shelf-1 first-control-module 2 }]
user-profile = admin
A Stinger unit automatically creates a Serial profile for the control module. To list the
Serial profiles, use the Dir command as follows:
admin> dir serial
12 03/06/2003 02:57:48 { shelf-1 first-control-module 1 }
There is only one control module slot in Stinger MS+ units. The designation,
first-control-module
, refers to the slot labeled
CTRL
on the Stinger MS+ chassis.
This slot is referred to as slot
8
or
first-control-module
in the TAOS interface to
maintain the uniformity of the TAOS interface across the Stinger product line.
To make serial logins more secure, modify the Serial profile of the control module to
specify a null User profile name, as shown in the following example. Anyone trying
Parameter
Setting
User-Profile
Name of the User profile to be used for logins on the
control module serial port. User profiles set permissions and
other parameters for logins to the Stinger command-line
interface. If no name is specified, the system prompts for
both the name and password of a User profile, as it does for
Telnet logins.
