THOMSON SpeedTouch 620, Руководство оператора

Страница: 98 / 216

Chapter 8
SpeedTouch™ Remote Access
E-DOC-CTC-20051017-0155 v1.0
88
8.3 Remote Telnet Access
About Secure Remote
Telnet Access and SSH
The SpeedTouch™ Telnet host is provided by the SpeedTouch™ Telnet server.
Access to this server and hence the Telnet interface is controlled by the Telnet
service. By default, the Telnet service is configured to let the Telnet server accept
telnet sessions from LAN side only. In addition the SpeedTouch™ provides SSH
remote access.
SSH provides a more secure way of accessing the SpeedTouch™ CLI interface and
should therefore be used.
Default Telnet
service configuration
Use the following CLI command to see the default Telnet service configuration.
Configuration via
CLI commands
To have Telnet access via WAN, additional configuration of the SpeedTouch™ Telnet
service is needed.
Use the following CLI command to allow WAN Telnet access to the SpeedTouch™.
Use the following CLI command to take a look at the Telnet service configuration,
you will see that the
wan group is added to the
Interface Access List
:
=> :service system list name=TELNET expand=enabled
Idx Name Protocol SrcPort DstPort Group State
--------------------------------------------------------------------
1 TELNET tcp 23 enabled
Description................ Virtual Terminal
Properties................. server
Managed parameters......... state port acl map log
Interface Access List...... lan
Ip Access List............. any
NAT Port List.............. 23
=>
=> :service system ifadd name=
TELNET
group=wan
=>
=> :service system list name=TELNET expand=enabled
Idx Name Protocol SrcPort DstPort Group
-----------------------------------------------------------------------
1 TELNET tcp 23
Description................ Virtual Terminal
Properties................. server
Attributes................. state port aclip aclif aclifgroup map log
User Managed Attributes.... state port aclip aclif aclifgroup map log
Attribute Values :
State...................... enabled
Port....................... 23
Ip Access List............. any
Interface Access List...... any
Interface Group Access List lan
wan
Map List................... 23
Logging.................... disabled
=>