Nortel SMC 2450, Руководство по внедрению

Страница: 89 / 262

Installation and configuration Page 89 of 260
Secure Multimedia Controller Implementation Guide
Note: When you log on to the Web UI with the temporary certificate,
you are warned that the certificate is not signed or authenticated. Permit
the use of the temporary certificate only during initial configuration,
when the system is not attached to active networks that could be a source
of attack. Install a signed and authenticated certificate prior to connecting
any untrusted network.
4 Enter
apply
to apply the changes.
End of Procedure
Result : Secure HTTP is now enabled and a certificate is generated. A PC on
the Intranet can now use HTTP to access the Web UI on the SMC.
Defining the remote access list
You can remotely manage the SMC using Telnet, SSH, or the Web UI. For
security purposes, access to these features is restricted through the remote
access list.
Using the remote access list, you can specify IP addresses or address ranges
that are permitted remote access to the system. There is only one remote
access list, which is shared by all remote management features.
If a client whose IP address is not on the list requests remote management
access, the request is dropped. By default, the access list is empty, meaning
that all remote management access is initially blocked.
Displaying the access list
The following CLI command is used to view the access list:
>> # /cfg/sys/accesslist/list
IMPORTANT!
Nortel recommends that you add trusted management clients to the
access list when initially enabling any remote management feature. It is
also vital that you review the access list regularly and keep it up to date.