Initial Stand-alone Configuration
Restricting administrative access
The Stinger® Compact Remote ATM DSLAM Getting Started Guide
4-7
admin>
After you have configured basic IP information, as described in “Providing a basic
system IP configuration” on page 4-9, you can access the command-line interface of
the Stinger CR ATM DSLAM unit by using Telnet from an IP host. Or, you can log in
by using an SNMP management station from an IP host. These types of connections
require that you authenticate a User profile and supply a password to acquire
administrative permissions. During basic configuration, Lucent Technologies
recommends that you also configure the serial port to require username and
password authentication. For details about User profiles, see the
Stinger Administration
Guide
.
Restricting administrative access
Each stand-alone Stinger CR ATM DSLAM unit is shipped from the factory with its
security features set to defaults that allow you to easily access the unit so you can
configure it without any restrictions. Before you bring the unit online, you must
change the default security settings to protect the configured unit from unauthorized
access.
Changing defaults for serial-port logins
The factory default setting for the serial interface of the IP 2000 or control module
specifies that any connection to that interface will use the
admin
User profile. To help
protect the system from unauthorized administrative access on the serial interface,
change the following default setting:
[in SERIAL/{ shelf-1 control-module 2 }]
user-profile = admin
The TAOS software automatically creates a Serial profile for the serial interface of the
IP2000 or control module. To list the Serial profiles, use the Dir command as follows:
admin> dir serial
13 01/25/2004 02:57:48 { shelf-1 first-control-module 2 }
To make serial logins more secure, modify the Serial profile to specify a null User
profile name, as shown in the following example. Anyone trying to establish a
connection through the serial port is then required to provide a username and
password.
admin> read serial {1 8 2}
SERIAL/{ shelf-1 first-control-module 2 } read
admin> set user-profile =
Parameter
Setting
user-profile
Name of the User profile to be used for logins on the IP2000
module serial port. User profiles set permissions and other
parameters for logins to the Stinger CR ATM DSLAM
command-line interface. If no name is specified, the system
prompts for both the name and password of a User profile,
as it does for Telnet logins.