Security Overview

Security

The DSU provides several methods of security by limiting user access to the ATI through option settings. Refer to the ATI Access section.

HEnable the Login Required option to require a Login ID for the:

ÐTerminal Port

ÐTelnet Session via the IP interfaces (the Management port or the IMC)

HLimit the access:

ÐPort Access Level option of 1, 2, or 3 for the Terminal port

ÐSession Access Level option of 1, 2 or 3 for the Telnet Session

HDisable the access:

ÐTelnet Session option

ÐManagement Port Use option

ÐIn-Band Management Channel Rate (bps) option for the IMC

ÐDial-In Access option for an External Device

Refer to Effective Access Levels , Table 4-1.

SNMP security is handled through Community Names with access levels and

IP address validation. Refer to the Controlling SNMP Access section.

7610-A2-GB20-10

November 1997

4-1

Page 28

Image 28

Paradyne SNMP DSU, 7610 manual Security Overview

Contents

Model 7610 Snmp DSU Copyright 1996 Paradyne Corporation All rights reserved Contents Customizing the Snmp DSU Monitoring the DSU Configuration Option Tables Glossary Index Document Purpose and Intended Audience About This GuideDocument Summary Product-Related Documents Appendix a Model 7610 Snmp DSU Features About the Snmp DSU Snmp Management Capabilities MIB Support Typical Snmp DSU Configurations Supported Link-Layer Protocols User Interface Types Rear Panel Interface ConnectionsModem Terminal Accessing the ATI Using the ATIConnecting to the Terminal Port Status Test Configuration Control Main MenuSelect Edit/Display What Affects Screen Displays Screen Format TypesUse the screen format Screen Work Areas Menu Path Keyboard Keys Navigating the ScreensPress Screen Function Keys For the screen function Select Press Return to Switching Between Screen Work Areas Ending a Session Customizing the Snmp DSU Entering Device and System Information Identity Information System Fields Configuration Option Areas Configuring the DSUConfiguration Option Area Configuration Option Set Saving Configuration Options Accessing and Displaying Configuration OptionsIf you select Then Establishing Call Setup Call Directories Screen Call Directory Phone Number Entries Characters Use Call Setup Screen Main Menu → Control → Call Setup Security Security Overview Creating a Login On the Administer Enter Logins screen, for Deleting a Login Effective Access Level ATI AccessEffective Access Levels ATI Access to Menu Functions Interface Idle appears User Interface AlreadyConnection Refused Controlling Snmp Access Assigning Snmp Community Names and Access Levels IP Addressing Selecting an IP Addressing Scheme IP Addressing Scheme Examples IMC Connection ± Same SubnetRemote Site Subnet Using Routers to Route DSU Management Data DDS If using Then Choosing a Default Network DestinationAssigning IP Addresses and Subnet Masks What to Monitor Monitoring the DSUDSU LEDs System LEDs Main Menu → Status → Display LEDs DM ± Data Mode OOS ± Out of ServiceNS ± No Signal Network LEDs Port LEDs Viewing Health and Status Unit StatusHhhmmss Yyyyyyyy Network Interface Status Self-Test Results Network Performance Statistics Network Performance Statistics Testing Detecting ProblemsAlarm Condition Trap ATI Status Ascii Alarm Screen If configured Tests Available Network Tests DSU or Internal Network Loopback CSU or External Network LoopbackSend V.54 Up/Down Sequences Data Port Tests Lamp TestTest Pattern for the Network Local Loopback Test Status Messages Ending an Active TestTest Status Messages 1 Meaning Test Status Messages 2 Meaning LoopbacksLoopbacks 1 Loopback Type Initiated By Device Reset Loopbacks 2 Loopback Type Initiated By If entering yes to prompt Then all Messages and Troubleshooting Messages and TroubleshootingAlarm Messages Ascii Alarms Ascii Alarm Messages Configuring Snmp Traps Dialing Out Snmp Traps Device Messages Device Messages 1 What Message Indicates What To Do Troubleshooting 1 Symptom Possible Cause Solutions TroubleshootingDevice Messages 2 What Message Indicates What To Do Troubleshooting 2 Symptom Possible Cause Solutions Tests Available section Configuration Option Tables Overview Configuration Option TablesSelect To Access To Configure Operating Mode System Options MenuTable A-1. System Options 1 Edit/Display Status Lads Timing Possible Settings Internal, External, Receive Table A-1. System Options 2DDS Line Rate Kbps Lads Line Rate Kbps Test Timeout Security Violation AlarmTable A-1. System Options 3 Test Duration min Network Interface Options Menu Table A-2. Network Interface Options 1Network-initiated DSU Loopback 64K CC Data Scrambling 64K CC Table A-2. Network Interface Options 2 Cross Pair Detection AlarmIMC Routing Information Protocol No Signal Alarm Out of Service AlarmOut of Frame Alarm Excessive BPV Alarm In-Band Framing Alarm Table A-2. Network Interface Options 4 Data Port Options Menu Table A-3. Data Port Options 1Invert Transmit Clock Bilateral Loopback Carrier Control by RTS Table A-3. Data Port Options 2Rlsd Control User Interface Options Menu Terminal Port OptionsTable A-3. Data Port Options 3 Table A-4. Terminal Port Options 1 Login Required Port Access Level Possible Settings Level 1, Level 2, LevelTable A-4. Terminal Port Options 2 Parity Table A-4. Terminal Port Options 3 Management Port OptionsTable A-5. Management Port Options 1 Table A-5. Management Port Options 2 Port Type Possible Settings Asynchronous, SynchronousClock Source Table A-5. Management Port Options 3 External Device Options for the Management PortRouting Information Protocol External Device Commands Dial-In AccessTable A-6. External Device Options 1 Connect Prefix Connect Indication String Table A-6. External Device Options 2Escape Sequence Telnet Session Options Table A-6. External Device Options 3Table A-7. Telnet Session Options 1 Disconnect String Table A-7. Telnet Session Options 2 Disconnect Time minutes Alarms & Traps Options Menu Table A-8. Alarms & Traps Options 1Ascii Alarm Messages Alarm & Trap Dial-Out Table A-8. Alarms & Traps Options 2 Snmp Trap DisconnectCall Retry Alternate Dial-Out Directory Communication Protocol Options Snmp & Communication Options MenuTable A-9. Communication Protocol Options 1 Table A-9. Communication Protocol Options 2 Default Network DestinationManagement Port Link Protocol Name 1 Access General Snmp Management OptionsTable A-10. General Snmp Management Options 1 Snmp Management Name 2 Access Snmp NMS Security OptionsTable A-10. General Snmp Management Options 2 Table A-11. Snmp NMS Security Options 1 Access Level Table A-11. Snmp NMS Security Options 2 Snmp Traps Options Table A-12. Snmp Traps Options 1Snmp Traps Number of Trap Managers Link Traps Possible Settings Disable, Up, Down, Both Table A-12. Snmp Traps Options 2Enterprise Specific Traps Link Trap Interfaces Ascii Characters Hex Sequence Table A-13. Ascii Non-Printable Characters SequenceHex Configuration Worksheets Configuration Option SettingsWorksheets Overview Network Interface None, Proprietary Management Port Terminal PortExternal Device Enable, Disable Communication ProtocolGeneral Snmp Management Snmp NMS Security MIB Description Overview MIB DescriptionsMIB II ± RFC 1213 and RFC RS-232-Like MIB ± RFC Enterprise MIB Objects System Group Physical 1 ± LayerDatalink/subnetwork 2 ± Internet 4 ± Layer Interfaces Group InterfacesIfEntry Software Revision PPP Testing3 state Management port is Extension to Interface Table ifXTable IfXEntry Testing3 Interface Stack GroupInterface Test Table Down2 InSyncWithBitErrors InSyncNoBitErrors ifTestCode 2 ±IfTestEntry2 Generic Receive Address Table Table C-6. IP Group Objects 1 Description Setting/ContentsIP Group Table C-6. IP Group Objects 2 Description Setting/Contents Icmp Group TCP GroupUDP Group Transmission Group RS-232-Like MIB, RFC Number of RS-232-Like Ports ObjectGeneral Port Table Objects Rs232PortEntry Asynchronous Port Table Objects Rs232Async PortEntry Rs232Async Synchronous Port Table ObjectsRs232Sync Input Signal Table Objects Integer number ± representsRs232Sync PortEntry Rs232InSigEntry Output Signal Table Objects Rs232OutSigEntry Device Configuration Variable pdn-common Port Usage Table, pdn-devPortUsage pdn-interfacesDDS Interface Specific Definitions, pdn-dds pdn-interfaces Device Security, pdn-security pdn-common Standards Compliance for Snmp Traps Snmp Traps OverviewTrap authentificationFailure Snmp Trap Description Possible Cause Traps linkUp and linkDown Trap warmStartInterface LinkUp/Down Variable-Bindings Possible Cause Traps Enterprise Specific Trap What It Indicates Possible Cause 7610-A2-GB20-10 Cables and Pin Assignments Cabling Overview Management Port EIA-232 Connector Terminal Port EIA-232 ConnectorSignal Direction Pin # Signal User Data Port ConnectorDirection Pin Socket Connector Standard EIA-232-D Crossover Cable Pin LAN Adapter Converter and Cable Modular RJ48S DDS Network Interface CableRJ48S DDS Network Interface Cable Functions Circuit Pin # Cable Plug to Modular Jack LAN Adapter Glossary Factory defaults EIA-232Enterprise MIB Excessive BPV Reset Latching loopbackLink layer protocol Loopback Router RS-232Subnet Subnet address Index Numbers IN-2 IN-3

Security

Security Overview

Refer to Effective Access Levels, Table 4-1.

Refer to Effective Access Levels , Table 4-1.