TANDBERG Security Camera, Руководство администратора

Страница: 20 / 247

20
D14049.03
MAY 2008
Grey Headline (continued)
About Administrator Access
While it is possible to administer the TANDBERG VCS via a PC
connected directly to the unit via a serial cable, you may wish to
access the system remotely over IP.
You can do this using either or both:
the
•
web interface via HTTPS
a
•
command line interface via SSH or Telnet.
By default, access via HTTPS and SSH is enabled; access via
Telnet is disabled.
You can also enable access via HTTP. However, this
mode works by redirecting HTTP calls to the HTTPS port,
so HTTPS must be enabled for access via HTTP.
Overview
Security Considerations
To securely manage the VCS you should disable Telnet, using the
encrypted HTTPS and SSH protocols instead.
For further security, disable HTTPS and SSH as well and use the
serial port to manage the system.
Configuring Administrator Access
To configure the ways in which your system is accessed:
System Configuration > System
•
.
You will be taken to the System Administration page.
In the Admin Access section, select Off or On from the drop-
down boxes for each service.
xConfiguration Administratio
•
n
Administrator Account Password
All administration requires you to log in to the administration
account with the username
admin (all lower case) and a
password. Both the username and password are case-sensitive.
Default Administrator Password
The default password is TANDBERG (all upper case). You should
change this as soon as possible. Choose a strong password,
particularly if administration over IP is enabled.
Changing the Administrator Password
To change the administrator password:
Maintenance > Passwords.
•
You will be taken to the Passwords page.
In the Administrator Password section, enter and then retype
the new password.
To set an empty password via the web UI, tick the Delete
password box.
xConfiguration SystemUnit Passwor
•
d
To set an empty password via the CLI, type:
xConfiguration SystemUnit Password: ""
Resetting the Administrator Password
If you forget your password, it is possible to set a new password
using the following procedure:
Connect a PC to the VCS using the serial cable as per the 1.
instructions in steps 1 and 2 of Initial Configuration via Serial
Cable .
Reboot the VCS. 2.
Login from the PC with the username 3. pwrec . No password is
required.
You will be prompted for a new password.
4.
Administrator Session Timeout
By default, Administrator sessions do not time out – they remain
active until you logout.
However, you can set the system to timeout an Administrator
session after a set number of minutes of inactivity. The timeout
period will apply to Administrator sessions using both the Web
Interface and the Command Line Interface.
To set the timeout period:
System Configuration > System
•
.
You will be taken to the System Administration page.
In the
Admin Access section, in the Session time out
(minutes) box, enter the number of minutes of inactivity after
which an administrator session should time out.
xConfiguration Administration TimeOu
•
t
Values must be between 0 and 10,000. A value of 0 means that
Administrator sessions will never time out.
Root Account
The VCS provides a root account with the same password as
the
admin account. This account should not be used in normal
operation, and in particular system configuration should not be
conducted using this account. Use the admin account instead.
!
Tandberg Management Suite (TMS) accesses the VCS via
the web server. If HTTPS mode is turned off, TMS will
not be able to access it.
You must restart the system for any changes to the
Administrator settings to take effect.
!
Because access to the serial port allows the password to
be reset, it is recommended that you install the VCS in a
physically secure environment.
The pwrec account is only active for one minute following
a restart. Beyond that time you will have to restart the
system again to change the password.
!
It is possible to have more than one Administrator
session running at the same time. These sessions could
be via the web interface, command line interface, or a
mixture of both. This may cause issues if each Administrator
session is attempting to make the same configuration changes.
TANDBERG VIDEO COMMUNICATIONS SERVER
ADMINISTRATOR GUIDE
Introduction Getting Started
Overview and
Status
System
Configuration
VCS
Configuration
Zones and
Neighbors
Call
Processing
Bandwidth
Control
Firewall
Traversal
Maintenance Appendices
System Administrator Access