![SpectraLink 8440 Administration Manual Download Page 44](http://html.mh-extra.com/html/spectralink/8440/8440_administration-manual_1343808044.webp)
Spectralink 84-Series Series Wireless Telephones Administration Guide
1725-86984-000_P.docx
September 2016
44
Provisioning Server Security Notes
For organizational purposes, Spectralink recommends configuring a separate log file directory,
an override directory, and a contact directory. Each directory can have different access
permissions. Normally, LOG, CONTACTS, and OVERRIDES have full read and write access.
See
Understanding the Files Written by the Handsets
Ensure that the file permissions you create provide the minimum required access and that the
account has no other rights on the server.
Tip: Allowing File Uploads to Your Provisioning Server
Spectralink recommends that you allow file uploads to the provisioning server
where the security environment permits. File uploads allow event log files to be
uploaded to the provisioning server. File uploads provide backup copies (override
configuration files) of changes users make to the handset
’s configuration settings
through the Web server and/or local user interface. These override and log files
help service providers and Spectralink provide customer support when diagnosing
issues that may occur with the handset operation.
The handset
’s server account needs to be able to add files that it can write to in the log file
directory and the provisioning directory. It must also be able to access files in all directories
mentioned in the
<MAC-address>.cfg
file. All other files that the handset needs to read, such
as the application executable and the standard configuration files, should be made read-only
using file server file permissions.
Tip: Use RFC-Compliant Servers
Spectralink recommends that you use RFC-compliant servers.
Each handset may open multiple connections to the server.
The handset will attempt to upload log files, a configuration override file, and a directory file to
the server if changed. This requires that the handset
’s account has delete, write, and read
permissions. The handset will still function without these permissions, but will not be able to
upload or save files.
If you know the handset is going to download a file from the server, you should mark the file as
read-only.
Setting up an FTP Server as Your Provisioning Server
A basic provisioning configuration uses File Transfer Protocol or FTP. FTP servers are free,
require installation, and use logins and passwords. A free and popular server, FileZilla Server, is
available for Windows. FileZilla Server (version 0.9.xx) has been tested with the Spectralink
Software.