AudioCodes MediaPack MP-114, Руководство пользователя

Страница: 82 / 164

User's Manual 82 Document #: LTRT-71405
MediaPack Series
6.5.1.5.1.3 Web Security Settings
The Web Security Settings page is used to define a secure Web access communication
method. For a description of these parameters, see 'Web and Telnet Parameters' in the
Product Reference Manual

To define Web access security:
1. Open the WEB Security Settings page ( Configuration tab > System menu >
Management > WEB Security Settings ).
Figure 45: Web Security Settings
2. Configure the parameters as required.
3. Click Submit to apply your changes.
4. To save the changes to flash memory, see Saving Configuration on page 125.
6.5.1.5.1.4 Web Login Authentication using Smart Cards
You can enable Web login authentication using certificates from a third-party, Common
Access Card (CAC) with user identification. When a user attempts to access the device
through the Web browser (HTTPS), the device retrieves the Web user’s login username
(and other information, if required) from the CAC. The user attempting to access the device
is only required to provide the login password. Typically, a TLS connection is established
between the CAC and the device’s Web interface, and a RADIUS server is implemented to
authenticate the password with the username. Therefore, this feature implements a two-
factor authentication - what the user has (i.e., the physical card) and what the user knows
(i.e., the login password).
This feature is enabled using the EnableMgmtTwoFactorAuthentication parameter.
Note: For specific integration requirements for implementing a third-party smart
card for Web login authentication, contact your AudioCodes representative.

To log in to the Web interface using CAC:
1. Insert the Common Access Card into the card reader.
2. Access the device using the following URL: https://<host name or IP address>; the
device prompts for a username and password.
3. Enter the password only. As some browsers require that the username be provided,
it’s recommended to enter the username with an arbitrary value.