TELES CellX 3G-4, System Manual

Page: 45 / 64

5 Adapting the config files
Page 45 CELLX box 17.1/002
5.2.1 Setting the password for the GATE Manager
The CELLX Box comes with no password set for GATE Manager access. If you do not define
a password, access to the system via GATE Manager takes place without one, and FTP access
takes place with the default password
tcs-ag
.
The password is set with the command
RemotePassword=< password >
in the
[system]
sec-
tion of the pabx.cfg . The value <
password
> contains the encrypted text of the password.
Define the encrypted text with the GATE Manager as follows:
1. Open the GATE Manager,
2. Select the menu
Edit | Encode Password…
3. Enter the password in clear text in the Encode Password box and click OK .
4. In the screenshot above, the clear text password is
Weihnachtsmann@Bln.
The
encoded password is
vDLGTEBIZUNDMR@fNP54B
.
5. Enter the encoded password as shown in Example 5.1 .
6. Transfer the
pabx.cfg
to the CELLX Box using the GATE Manager. After the file has
been transferred reboot the CELLX Box. The system can than be accessed only with
the correct password. Don’t forget to memorize it!
5.2.2 Adjusting the firewall setting
If the CELLX Box is running in a DMZ (Demilitarized zone (computing)) the firewall must be
activated in the
ip.cfg
(see Chapter 2.2.15 on page -16) .
The firewall used on CELLX Box is iptables. The documentation is freely available on the inter-
net . Only the table filter is used in the
ip.cfg
. Outgoing traffic is allowed unless otherwise
specified. Incoming and forwarded traffic is dropped unless otherwise specified.
The options used in Example 5.2 are listed in Table 5.1 .
Example 5.1
pabx.cfg
with an encoded password
RemotePassword=
vDLGTEBIZUNDMR@fNP54B
Table 5.1 iptable options used in Example 5.2
Option Description
-P INPUT DROP Policy for the chain (INPUT, OUTPUT, FORWARD) used if no other filter rule
is defined. The action used in this case is DROP. For the other rules, use the
action ACCEPT.
-A INPUT Policy added to the INPUT chain.
-d <destination IP> This policy is only true for packets with the given destination IP address.