3Com TP-1610, Руководство пользователя

Страница: 349 / 496

V6100 and V7122 User Guide
349
6002, 6012
and up
- T.38 traffic Always adjacent to the RTCP port number
5060 5060 SIP
Configurable (LocalSIPPort [UDP],
TCPLocalSIPPort [TCP]).
5061 5061 SIP over TLS (SIPS) Configurable (TLSLocalSIPPort)
(random) >
32767
514 Syslog Disabled by default (EnableSyslog).
(random) >
32767
- Syslog ICMP Disabled by default (EnableSyslog).
(random) >
32767
- ARP listener
(random) >
32767
162 SNMP Traps Can be disabled (DisableSNMP)
(random) >
32767
- DNS client
Recommended Practices
To improve network security, the following guidelines are recommended when configuring
the V7122:
ƒ
Set the password of the primary web user account (see Configuring the Web User
Accounts ) to a unique, hard-to-hack string. Do not use the same password for several
devices as a single compromise may lead to others. Keep this password safe at all times
and change it frequently.
ƒ
If possible, use a RADIUS server for authentication. RADIUS allows you to set different
passwords for different users of the V7122, with centralized management of the
password database. Both Web and Telnet interfaces support RADIUS authentication
(see
SRTP ).
ƒ
If the number of users that access the Web and Telnet interfaces is limited, you can use
the ‘Web and Telnet Access List’ to define up to ten IP addresses that are permitted to
access these interfaces. Access from an undefined IP address is denied (see
Configuring the Web and Telnet Access List ).
ƒ
Use IPSec to secure traffic to all management and control hosts. Since IPSec encrypts
all traffic, hackers cannot capture sensitive data transmitted on the network, and
malicious intrusions are severely limited.
ƒ
Use HTTPS when accessing the Web interface. Set HTTPSOnly to 1 to allow only
HTTPS traffic (and block port 80). If you don't need the Web interface, disable the Web
server (DisableWebTask).
ƒ
If you use Telnet, do not use the default port (23). Use SSL mode to protect Telnet traffic
from network sniffing.