IP Services, WEB Server, CLI Conﬁguration | Patton electronic 2621

Models 2603, 2621, and 2635 Getting Started Guide	9 • IP Services

IP Services

Certain System Services can be enabled or disabled. They are DNS Relay, FTP, TFTP, SNMP, and the WEB Server.

The importance of disabling any of these services is an issue of security. If you are not using a particular service, it is best to disable it. By disabling it, the associated port is not active, which means it is not available to abuse with the intent of unauthorized access.

Figure 67. System Services conﬁguration web page

WEB Server

The System Service which must be wisely disabled is the WEB Server. After you disable the WEB Server from the web page, you can no longer access the any of the IPLink’s web pages. The only way to enable it is through the Command Line Interface (CLI).

CLI Conﬁguration

After conﬁguring a terminal emulator to access the IPLink’s serial port, there are two commands for the enabling or disabling the WEB Server. The following command enables the WEB Server so you can access the management web pages via a browser. Remember that by only doing this command, the change is saved only in volatile memory. Be sure to execute the next command to save it in non-volatile memory.

→webserver enable

→system config save

The next command disables the WEB server.

→ webserver disable

IP Services

94

Image 94

Patton electronic 2621, 2635 manual IP Services, WEB Server, CLI Conﬁguration, Next command disables the WEB server

Contents

IPLink Series High Speed Routers Mailsupport@patton.com Summary Table of Contents Contents Models 2603, 2621, and 2635 Getting Started Guide Remote Site Configuration Central site configuration EMC Ethernet Cable 123 Adapter Models 2603, 2621, and 2635 Getting Started Guide List of Figures Models 2603, 2621, and 2635 Getting Started Guide List of Tables Audience About this guideStructure Safety when working with electricity PrecautionsImpaired functioning Factory default parameters General observations Typographical conventions used in this document General conventions Chapter contents General Information IPLink Series High Speed Routers overview General attributes PPP Support EthernetProtocol support WAN Interfaces Security Logging or Smtp on events POST, Post errors, PPP/DHCP, IPFront Panel Status LEDs and Console Port Console port Rear panel connectors and switchesOn the rear panel from left to right are the following Power connector Ethernet port outlined in green General Information Product Overview Introduction Applications Overview Sync Serial Application Initial Conﬁguration Interface cable installation Hardware installationWhat you will need RJ-48C pinout diagram Initial Configuration Ethernet connector Interface connector RJ-45 DB-15 Case being opened with a screwdriver Ethernet connector Interface connector RJ-45 DB-25 Installing the AC power cord DCE Initial Configuration Installing the Ethernet cable Do the following Web Operation and Conﬁguration IP address modiﬁcationIP address has now been successfully changed PC Conﬁguration Model 2603 home Model 2635 home Ethernet LAN Port LAN Connections Ethernet Port Basic Ethernet port attributes Conﬁgurable Ethernet parameters Serial Port Conﬁguration Serial Interface WAN Serial Port ConﬁgurationVariables Web Interface Conﬁguration T1/E1 Interface Conﬁguration Conﬁguring the IPLink Series 2603 for T1 Operation Web Conﬁguration , enter username See ﬁgure Line Options Fractional T1 Conﬁguring the IPLink Series 2603 for E1 Operation Serial Port Configuration WAN Services PPP Bridged WAN Services PPP Conﬁguration WAN Service ConﬁgurationPPP Bridged Leave User name and Password blank. Click on Create PPP Routed Remote site conﬁguration Click on Create PPP Routed Conﬁguration menu Click the Update button Edit IP address of WAN port PPP link status LMI Management Frame Relay links Username blank Password blank Click on the Create buttonLMI Conﬁguration Web Conﬁguration Methods Frame Relay Conﬁguration Dlci Number Use Frame Relay bridged Frame Relay bridged creation Central site conﬁguration Frame Relay Routed Relay Description FR routed Frame Relay Channel Routed conﬁguration Cost Interface frame-0 IP route for Frame Relay routed application WAN Services Security Click on Create a new service Conﬁguring the router Click on the Create a new Ip route... hyperlink Conﬁguring the security interfaces Valid gateway route Security conﬁguration home Conﬁguring Security Policies Click on the hyperlink New Policy... See ﬁgure Firewall Portﬁlters Enabling the FirewallDeleting a security Policy Security Triggers You can now ping between the two networks Conﬁguring TCP port ﬁlter for FTP Adding trigger for FTP data transfer Intrusion Detection System IDS Attack Name Protocol Attacking Host Blacklisted? Security Enabling NAT Introduction to NATGlobal address pool and reserved map Click on Add Global Address Pool button Dhcp and DNS Conﬁguration Services and features normally associated with each other Dhcp Server NAT Dhcp Server web Parameters for the Dhcp Server subnet Dhcp server conﬁguration web IP Addresses to be available on this subnet Next section see ﬁgure 58. has three parameters Example based on default range of IP address pool DNS server option information Dhcp Relay Default gateway option informationAdditional option information Conﬁguration of the Dhcp Relay Dhcp Relay webpage DNS Relay Conﬁguring the DNS Relay DNS Relay conﬁguration webpage IP Services WEB Server IP ServicesNext command disables the WEB server CLI Conﬁguration Associated Ports for the different System IP Services System Conﬁguration Authentication Authentication web page showing default superuser Alarm Access the conﬁguration and status of the alarms Remote Access Alarm & Alarm Error Log conﬁguration Backup/Restore UpdateSave Website Settings Restart Error Log Snmp Daemon System Tools Snmp Daemon conﬁguration Sntp Client Conﬁguration Sntp Client Mode Conﬁguration Parameters Conﬁguring the Sntp Client System Clock Setting Sntp Client General Conﬁguration Parameters Conﬁguration of the internal system calendar clock System Status System Status Port Connection Status WAN Status LAN StatusMAC address the MAC address of the Ethernet port Hardware Status Status LEDs Contacting Patton for assistance Contact information Warranty coveragePatton support headquarters in the USA Return for credit policy Out-of-warranty serviceReturns for credit RMA numbers Appendix a Compliance information EMC CE Declaration of Conformity ComplianceRadio and TV Interference FCC Part FCC Part 68 Acta Statement Model 2603 only Industry Canada Notice 2603 Model only Appendix B Speciﬁcations Sync Serial Interface General CharacteristicsEthernet T1/E1 Interface PPP Support Protocol SupportManagement AC universal power supply DimensionsPower and Power Supply Speciﬁcations VDC power supply Appendix C Cable Recommendations Ethernet Cable Adapter Appendix D IPLink Physical Connectors RJ-45 shielded 10/100 Ethernet port Assuming the MDI-X switch is in the out positionRJ-45 non-shielded RS-232 console port EIA-561 35 M/34 and DB-25 Connector Serial port 21 DB-15 Connector Pin No Circuit Signal Name Direction E1/T1 RJ-48C Connector Pin No Signal Appendix E Command Line Interface CLI Operation Produces a list of numbered transport objects Using the ConsoleCLI Terminology Local VT-100 emulation Another example shows when the user must provide a parameter Then Enter the new password twice as prompted Administering user accountsSetting user passwords Adding new users Controlling user access Changing user settingsControlling login access For example, to change the security level for fred, enter