4 security 4.1 the security concept, 2 account types – AASTRA SIP-DECT (Release 1.8)-Installation- and Administration Guide EN User Manual

Page 68

Advertising
background image

Installation, Administration and Maintenance

Aastra

depl-0900/0.4

Page: 68 (104)

4 Security

4.1 The

Security

Concept

Additionally to the https access of the OMM each single RFP has two access
facilities, the OM Configurator and a ssh access. Each of this 3 independent
access types uses the same account data.

The account data can be altered at the https interface of the OMM. The OMM
delivers all the necessary account data to all connected RFPs’. The RFPs’
save the account data inside its permanent memory.

This has some implications:

A RFP out of the box uses the default account data as long as this
RFP is not connected to the OMM.

An RFP which was connected for at least one time with the OMM uses
the account data from the OMM.

When the account data are changed on the OMM any not connected
RFPs’ will continue to use the older passwords.

4.2 Account

types

There are 3 different account types:

1. Full access

This access type is the 'normal' access for all the configuration. Using
this access it is allowed to configure the OMM and each RFP. The
access type allows login on the ssh-interface of an RFP for debug
informations e. g. 'pinging an other RFP to check visibility.

The factory setting for this account is
Name:

'omm'

Password:

'omm'

Active:

'n/a'

2. Read only access

As the name suggests this access type is not allowed to configure any
item of the OMM installation. This access type is only allowed on the
https-interface. The account can be deactivated.

The factory setting for this account is
Name:

'user'

Password:

'user'

Active:

'yes'

3. root access

This access type is only applicable on the ssh interface of an RFP. Its
purpose is to get detailed information e. g. parameters from the kernel.
The access using this account type is not reachable from other hosts
hence a login using the full access type is necessary.
IMPORTANT: It is highly recomented not to use this account
type. It’s meant for technical support only.

The factory setting for this account is

Advertising