Siemens RUGGEDCOM RX1510, User Manual

Page: 38 / 856

Chapter 1
Introduction
RUGGEDCOM ROX II
User Guide
6 Security Recommendations
Feature Key
Feature
Layer 2 Standard
Edition (L2STD)
Layer 3 Standard
Edition (L3STD)
Layer 3 Security
Edition (L3SEC)
PIM-SM
û ü ü
Firewall
û ü ü
OSPF
û ü ü
BGP
û ü ü
RIP v1/v2
û ü ü
IS-IS
û ü ü
Traffic Prioritization
û ü ü
VPN
û û ü
IPSec
û û ü
a
Formerly 802.1s
For information about installing and viewing the contents of feature keys, refer to Section 3.13, “Managing
Feature Keys” .
Section 1.3
Security Recommendations
To prevent unauthorized access to the device, note the following security recommendations:
CAUTION!
Configuration hazard – risk of data corruption. Maintenance mode is provided for troubleshooting
purposes and should only be used by Siemens Canada Ltd. technicians. As such, this mode is not fully
documented. Misuse of this maintenance mode commands can corrupt the operational state of the
device and render it inaccessible.
CAUTION!
Accessibility hazard – risk of data loss. Do not misplace the passwords for the device. If both the
maintenance and boot passwords are misplaced, the device must be returned to Siemens Canada Ltd.
for repair. This service is not covered under warranty. Depending on the action that must be taken to
regain access to the device, data may be lost.
• Replace the default passwords for all user accounts and processes (where applicable) before the device is
deployed.
• Use strong passwords. Avoid weak passwords such as password1 , 123456789 , abcdefgh , etc. For more
information about creating strong passwords, refer to the password requirements in Section 4.10, “Managing
Passwords and Passphrases” .
• Make sure passwords are protected and not shared with unauthorized personnel.
• Passwords should not be re-used across different usernames and systems, or after they expire.
• Record passwords in a safe, secure, off-line location for future retrieval should they be misplaced.
• When RADIUS authentication is done remotely, make sure all communications are within the security perimeter
or on a secure channel.