Motorola Enterprise Series Routers, 6161252-00-01 manual Suggested Security Measures

Security 10-1

Chapter 10

Security

Motorola Netopia® Embedded Software Version 8.7.4 provides a number of security features to help protect its configuration screens and your local network from unauthorized access. Although these features are optional, it is strongly recommended that you use them.

This section covers the following topics:

•“Suggested Security Measures” on page 10-1

•“Telnet Tiered Access – Two Password Levels” on page 10-1

•“Advanced Security Options” on page 10-5

•“RADIUS server authentication” on page 10-6

•“TACACS+ server authentication” on page 10-7

•“Warning alerts” on page 10-8

•“Telnet Access” on page 10-19

•“About Filters and Filter Sets” on page 10-20

•“Working with IP Filters and Filter Sets” on page 10-27

•“Policy-based Routing using Filtersets” on page 10-35

•“Firewall Tutorial” on page 10-38

•“Configuration Management” on page 10-45

Suggested Security Measures

In addition to setting up user accounts, Telnet access, and filters (all of which are covered later in this chapter), there are other actions you can take to make the Router and your network more secure:

•Change the SNMP community strings (or passwords). The default community strings are universal and could easily be known to a potential intruder.

•Set the answer profile so it must match incoming calls to a connection profile.

Telnet Tiered Access – Two Password Levels

Motorola Netopia® Embedded Software Version 8.7.4 offers tiered access control for greater security and protection against accidental or malicious misconfiguration. Service providers and network administrators can now limit the access of other users to the various configuration screens to prevent misconfigurations.