Operating modes and functions
|
|
ELSA LANCOM Wireless L-II
|
46
EN
Login barring
The configuration in the
ELSA LANCOM Wireless L-11
is protected against
“brute force attacks“ by barring logins. A brute-force attack is the attempt of
an unauthorized person to crack a password to gain access to a network, a
computer or another device. In order to do so, a computer can, for example,
go through all the possible combinations of letters and numbers until the right
password is found.
As a measure of protection against such attacks, the maximum allowed
number of unsuccessful attempts to login can be set. If this limit is reached,
the access will be barred for a certain length of time.
These parameters apply globally to all configuration options (outband, Telnet,
TFTP/
ELSA LANconfig
and SNMP). These parameters apply globally to all
configuration options (Telnet, TFTP/
ELSA LANconfig
and SNMP). If barring is
activated on one port all other ports are automatically barred too.
The following entries are provided in the
ELSA LANconfig
for configuring
login barring in the 'Management' configuration area on the 'Security' tab or
under
/Setup/Config-module
in the menu:
'Lock configuration after' (
Login errors
)
'Lock configuration for' (
Lock-minutes
)
Access control via TCP/IP
Access to the internal functions of the devices through TCP/IP can be
restricted using a special filter list. Internal functions in this case refer to
configuration sessions via
ELSA LANconfig
,
ELSA WEBconfig
, SNMP or
Telnet.
This table is empty by default and so access to the router can therefore be
obtained by TCP/IP from computers with any IP address. The filter is
activated when the first IP address with its associated netmask is entered
and from that point on only those IP addresses contained in this initial entry
will be permitted to use the internal functions. The circle of authorized users
can be expanded by inputting further entries. The filter entries can describe
both individual computers and whole networks.
The access list can be found in
ELSA LANconfig
in the 'TCP/IP' configuration
section on the 'General' tab, or in the
/Setup/TCP-IP
module/
Access list
menu.
100235 Wireless L-11.book Seite 46 Montag, 30. Oktober 2000 5:43 17
