EndRun Meridian II, Руководство пользователя

Страница: 84 / 240

M e r i d i a n I I U s e r M a n u a l 64
C H A P T E R F I V E
65 M e r i d i a n I I U s e r M a n u a l
S E C U R I T Y
Re-Enable SNMP, SSH and HTTPS
If you have disabled SNMP, SSH or HTTPS, and you want to re-enable it, all you need to do is re-
move the rc file from the /boot/etc/rc.d directory using one or more of these commands:
rm /boot/etc/rc.d/rc.snmpd
rm /boot/etc/rc.d/rc.sshd
rm /boot/etc/rc.d/rc.httpd
Reboot Meridian II when done for the changes to take effect.
Is the Protocol Disabled?
Telnet, TIME and DAYTIME: To determine if one of these protocols is disabled, use the
inetdcon-
fig
command.
SNMP, SSH and HTTPS: To determine if one of these protocols is disabled, issue the following
command:
ls -l /boot/etc/rc.d
If you see one of the following files listed, and there is NOT an ‘*’ after the file name, then the cor-
responding protocol is disabled:
-rw-r--r-- 1 root root 1144 Feb 19 01:52 rc.httpd
-rw-r--r-- 1 root root 1168 Oct 26 2012 rc.snmpd
-rw-r--r-- 1 root root 2684 Feb 18 02:16 rc.sshd
If rc.httpd, rc.snmp, or rc.ssh is not listed, or it is listed and there is an ‘*’ after the file name, then the
protocol is enabled. Here is an example:
-rwxr-xr-x 1 root root 1168 Oct 26 2012 rc.snmpd*
OpenSSH
The secure shell protocol server running in Meridian II is based on the portable OpenSSH for Linux.
As such it supports both SSH1 and SSH2 protocol versions. By default, only SSH2 is enabled in
Meridian II due to security issues with SSH1. For more information about OpenSSH, and to obtain
client software, refer to the OpenSSH website:
http://www.openssh.com
An excellent book which describes operation and configuration of the various SSH implementations,
including OpenSSH is:
SSH, The Secure Shell , Barrett & Silverman, O’Reilley & Associates, 2001.
NOTE: To disable the SSH protocol see Disable SNMP, SSH and HTTPS above. To restrict access
see
Restrict Access - Telnet, SSH and SNMP
above.