GE 23954 Manuel D’Utilisation
Modifications reserved
Page 44/58
OPM_CNT_SNM_BAS_CRD_1GB_V012.doc
Operating Manual SNMP/Web Adapter
7 SECURITY
As any other device connected to a network, the adapters are exposed to security threats. This section
details the advanced security features provided by the SNMP/Web adapters. Users should use the
information provided in this section to correctly configure the cards and implement all security features
deemed appropriate to the installation environment.
details the advanced security features provided by the SNMP/Web adapters. Users should use the
information provided in this section to correctly configure the cards and implement all security features
deemed appropriate to the installation environment.
7.1 USER AUTHENTICATION & AUTHORISATION
In this context, authentication means establishing the digital identity of anyone attempting to access
the adapters though one of the available interfaces. Most of the supported protocols implement a
username/password pair as a mean for user identification.
This is different from authorisation, which means verifying whether a user is allowed to have access to
data or specific services.
The SNMP/Web adapters allow making full use of both protection mechanisms.
the adapters though one of the available interfaces. Most of the supported protocols implement a
username/password pair as a mean for user identification.
This is different from authorisation, which means verifying whether a user is allowed to have access to
data or specific services.
The SNMP/Web adapters allow making full use of both protection mechanisms.
7.1.1 User Management
The adapters come with a predefined supervisor user, whose default username and password are ge
and ge. New users can then be created using either the console or the web interface.
NOTE Only the supervisor user can create new users.
To create a new user, the following information shall be specified:
and ge. New users can then be created using either the console or the web interface.
NOTE Only the supervisor user can create new users.
To create a new user, the following information shall be specified:
• Username / password
• User class (access rights)
• Available services
• User class (access rights)
• Available services
7.1.2 User class
Users are divided in three separate classes based on access rights.
Supervisor
Supervisor
Predefined user; it can be renamed but not deleted; it cannot be created
(only one supervisor user is allowed).
This user has all access rights. It is the only user who can perform user
management (creation/deletion of users).
(only one supervisor user is allowed).
This user has all access rights. It is the only user who can perform user
management (creation/deletion of users).
Read/write access
(rw)
(rw)
Access with read/write rights. Can access and modify all setting with the
exception of user management.
These access rights should be restricted to professional users (e.g. Network
Administrators).
exception of user management.
These access rights should be restricted to professional users (e.g. Network
Administrators).
Read-only access
(ro)
(ro)
Access only for reading. Can access most settings but cannot modify them.
Most users are expected to be created with this profile.
Most users are expected to be created with this profile.
7.1.3 Selective service activation
The SNMP/Web adapters allow selective service activation – that is, the various interfaces can be
enabled on a user basis. For each user, access to the following services can be enabled:
http
enabled on a user basis. For each user, access to the following services can be enabled:
http
Web interface
Controls access with HTTP and HTTPS protocols
telnet
Remote console interface
Controls access with Telnet and SSH (Secure SHell) protocols
ftp
File transfer
Controls access with FTP and SFTP (Secure FTP) protocols