PVIQ™ CONNECTIVITY SYSTEM USER MANUAL V 1.0
175
o
Change the passwords for the
v3ShaAesUser
.
o
Optionally, you may rename the
v3ShaAesUser
to a new name and use it
in future commands.
•
Use the SNMPv3 Network Management Station or snmpset tool to set the
SNMPv3 trap username in the panduitNetSNMPTrapRecvUser OID
(.1.3.6.1.4.1.19536.2.2.2.3.2.1.7.1) using the new authentication and encryption
passwords:
o
snmpset -v3 -l authPriv -u
v3ShaAesUser
-a SHA -A
NEWAUTHENTICATIONPASSWORD -x AES -X
NEWENCRYPTIONPASSWORD
IPv4.ADDRESS.OF.TRAPRECEIVER
.1.3.6.1.4.1.19536.2.2.2.3.2.1.7.1 s v3ShaAesUser
To manage the device, always use the SNMPv3 user with authPriv.
SNMPv3 Traps are authenticated and encrypted.
Because Telnet does not provide confidentiality, it is recommended that Telnet access
only be used in exceptional situations, such as bulk re-configuration or troubleshooting.
Secure Deployment for HTTPS Access Only
This section is intended to help customers configure the product in a secure manner for
HTTPS Access Only. Secure Email Notifications are also configured.
•
Use Telnet to access the PViQ Panel Manager CLI.
o
config snmp disable all
•
Use a web browser to log in via https:// to the PViQ Panel Manager.
•
Navigate to the Users tab.
•
Change the admin user’s Protocol Access to “HTTP” to remove Telnet access.
•
Change the admin user’s password to a password that meets the customer’s
password policy.
•
Save.
•
Navigate to the Network tab.
•
Change the Web Setting’s TLS Certificate and EC Key PEM file.
•
Generate a proper TLS Certificate and Private Key for a HTTPS server. The help
