Grey Headline (continued)
System Administrator Access
TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE
Overview
About Administrator Access
While it is possible to administer the TANDBERG VCS via a PC connected directly to the unit via a serial cable, you may wish to access the system remotely over IP.
You can do this using either or both:
•the web interface via HTTPS
•a command line interface via SSH or Telnet.
By default, access via HTTPS and SSH is enabled; access via Telnet is disabled.
You can also enable access via HTTP. However, this mode works by redirecting HTTP calls to the HTTPS port, so HTTPS must be enabled for access via HTTP.
!the web server. If HTTPS mode is turned off, TMS will not be able to access it.
It is possible to have more than one Administrator
!session running at the same time. These sessions could
be via the web interface, command line interface, or aTandberg Management Suite (TMS) accesses the VCS via
mixture of both. This may cause issues if each Administrator session is attempting to make the same configuration changes.
Configuring Administrator Access
To configure the ways in which your system is accessed:
•System Configuration > System.
You will be taken to the System Administration page.
In the Admin Access section, select Off or On from the drop- down boxes for each service.
•xConfiguration Administration
You must restart the system for any changes to the Administrator settings to take effect.
Administrator Account Password
All administration requires you to log in to the administration account with the username admin (all lower case) and a password. Both the username and password are
Default Administrator Password
The default password is TANDBERG (all upper case). You should change this as soon as possible. Choose a strong password, particularly if administration over IP is enabled.
Changing the Administrator Password
To change the administrator password:
•Maintenance > Passwords.
You will be taken to the Passwords page.
In the Administrator Password section, enter and then retype the new password.
To set an empty password via the web UI, tick the Delete password box.
•xConfiguration SystemUnit Password
To set an empty password via the CLI, type: xConfiguration SystemUnit Password: ""
Resetting the Administrator Password
If you forget your password, it is possible to set a new password using the following procedure:
1.Connect a PC to the VCS using the serial cable as per the instructions in steps 1 and 2 of Initial Configuration via Serial
Cable.
2.Reboot the VCS.
3.Login from the PC with the username pwrec. No password is required.
4.You will be prompted for a new password.
The pwrec account is only active for one minute following a restart. Beyond that time you will have to restart the system again to change the password.
Administrator Session Timeout
By default, Administrator sessions do not time out – they remain active until you logout.
However, you can set the system to timeout an Administrator session after a set number of minutes of inactivity. The timeout period will apply to Administrator sessions using both the Web Interface and the Command Line Interface.
To set the timeout period:
•System Configuration > System.
You will be taken to the System Administration page. In the Admin Access section, in the Session time out (minutes) box, enter the number of minutes of inactivity after which an administrator session should time out.
•xConfiguration Administration TimeOut
Values must be between 0 and 10,000. A value of 0 means that Administrator sessions will never time out.
Security Considerations
To securely manage the VCS you should disable Telnet, using the encrypted HTTPS and SSH protocols instead.
For further security, disable HTTPS and SSH as well and use the serial port to manage the system.
Because access to the serial port allows the password to ! be reset, it is recommended that you install the VCS in a
physically secure environment.
Root Account
The VCS provides a root account with the same password as the admin account. This account should not be used in normal operation, and in particular system configuration should not be conducted using this account. Use the admin account instead.
Introduction | Getting Started | Overview and |
| System |
| VCS |
| Zones and |
| Call |
| Bandwidth |
Status |
| Configuration |
| Configuration |
| Neighbors |
| Processing |
| Control | ||
|
|
|
|
|
|
| ||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
D14049.03 |
|
|
|
|
|
|
| 20 |
|
| ||
MAY 2008 |
|
|
|
|
|
|
|
|
| |||
Firewall Maintenance Appendices Traversal
