Cambium Networks PTP 800 Series, Руководство пользователя

Страница: 92 / 648

Syst em m anagem ent Chapt er 1: Product descript ion
1- 52 phn- 2513_004v000 ( Oct 2012)
HTTPS/TLS requires installation of a private key and a public key certificate where the
common name of the subject in the public key certificate is the IP address or host name of
the PTP 800 unit.
HTTPS/TLS operation is configured through the web-based interfaces using the Security
Wizard.
Details of the security material needed for HTTPS/TLS are provided in Security planning
on page 2-22 .
The PTP 800 has no default public key certificate, and Cambium is not able to generate
private keys or public key certificates for specific network applications.
User account management
PTP 800 allows a network operator to configure a policy for login attempts, the period of
validity of passwords and the action taken on expiry of passwords. See
Configuring local
user accounts on page 6-42 for further details.
Identity-based user accounts
The PTP 800 web-based interface provides two methods of authenticating users:
•
Role-based user authentication allows the user, on entry of a valid password, to access
all configuration capabilities and controls. This is the default method.
•
Identity-based user authentication supports up to 10 users with individual usernames
and passwords.
When identity-based user accounts are enabled, a security officer can define from one to
ten user accounts, each of which may have one of the three possible roles:
•
Security officer.
•
System administrator.
•
Read only.
Identity-based user accounts are enabled in the Local User Accounts page of the web-
based interface.
Password complexity
PTP 800 allows a network operator to enforce a configurable policy for password
complexity. Password complexity configuration additionally allows a pre-determined best
practice configuration to be set. See
Configuring local user accounts on page 6-42 for
further details.