THOMSON SpeedTouch 620, Руководство оператора

Страница: 89 / 216

Chapter 8
SpeedTouch™ Remote Access
E-DOC-CTC-20051017-0155 v1.0
79
8 SpeedTouch™ Remote Access
The SpeedTouch™
access methods
The SpeedTouch™ offers various access methods to allow configuration and
monitoring of the device.
SpeedTouch™ HTTP
SpeedTouch™ HTTPs access
SpeedTouch™ Telnet access
SpeedTouch™ FTP access
SpeedTouch™ SSH access
However, for obvious security reasons, in the default configuration all these
methods are denied from the WAN side. Explicit configuration is required in order
to allow remote management from the WAN.
Restrictions
Two important factors determine if you are allowed access via a specific method.
The SpeedTouch™ multi-level access policy :
It determines access rights for users.
The SpeedTouch™ system service s:
The SpeedTouch™ access methods are linked to different SpeedTouch™
Services.
A Service is an application running on the SpeedTouch™. By activating a
service, the SpeedTouch™ adds the appropriate NAT entries and firewall rules,
for example to disable access to the SpeedTouch™ web host.
Access methods vs
system services
In the table below the access methods and their services are listed:
Configuration via CLI
To allow remote access (from the WAN side) for a certain service, add the WAN
interface group to the
interface access list of the service. See “ Configuration via CLI
commands” on page 81
Remote Assistance
It is possible to remotely access the SpeedTouch™ Web Interface for remote
assistance purposes. For more information, refer to Chapter
6 , section “6.5 Remote
Assistance” on page 72 .
For more information on the multi-level SpeedTouch™ access policy,
please refer to the SpeedTouch™ Multi-Level Access Policy
Configuration Guide.
Access method System service name
HTTP access HTTP
HTTPs access HTTPs
Telnet access TELNET
SSH access SSH
FTP access FTP