Technicolor - Thomson SpeedTouchTM620 manual SpeedTouch Remote Access, SpeedTouch access methods

Chapter 8

SpeedTouch™ Remote Access

8 SpeedTouch™ Remote Access

The SpeedTouch™ access methods

The SpeedTouch™ offers various access methods to allow configuration and monitoring of the device.

SpeedTouch™ HTTP

SpeedTouch™ HTTPs access

SpeedTouch™ Telnet access

SpeedTouch™ FTP access

SpeedTouch™ SSH access

However, for obvious security reasons, in the default configuration all these methods are denied from the WAN side. Explicit configuration is required in order to allow remote management from the WAN.

Restrictions Two important factors determine if you are allowed access via a specific method.

The SpeedTouch™ multi-level access policy:

It determines access rights for users.

For more information on the multi-level SpeedTouch™ access policy, please refer to the SpeedTouch™ Multi-Level Access Policy Configuration Guide.

The SpeedTouch™ system services:

The SpeedTouch™ access methods are linked to different SpeedTouch™

Services.

A Service is an application running on the SpeedTouch™. By activating a service, the SpeedTouch™ adds the appropriate NAT entries and firewall rules, for example to disable access to the SpeedTouch™ web host.

Access methods vs In the table below the access methods and their services are listed: system services

Access method	System service name
HTTP access	HTTP
HTTPs access	HTTPs
Telnet access	TELNET
SSH access	SSH
FTP access	FTP

Configuration via CLI To allow remote access (from the WAN side) for a certain service, add the WAN interface group to the interface access list of the service. See“ Configuration via CLI commands” on page 81

Remote Assistance It is possible to remotely access the SpeedTouch™ Web Interface for remote assistance purposes. For more information, refer to Chapter 6, section “6.5 Remote Assistance” on page 72.

E-DOC-CTC-20051017-0155 v1.0 79