Version 6.6 311 October 2014
Installation & Operation Manual 33. Configuring Security Settings
33.5.2 Disabling a Direct Remote Root Login
This section describes how to disable the remote root login. You should perform this
procedure in one of the following circumstances:
If you have performed the Online Software Upgrade from the version where
remote root login was enabled.
Note: Ensure that at least one CLI user is defined on both SC boards and
provisioned with a known password. Otherwise, you will be unable to establish
connection with the SC board's terminal over the IP network..
If you have manually enabled the remote root login as described in the previous
section.
To disable a direct remote ROOT login:
Repeat the steps described in 'Enabling a Direct Remote Root Login' on page
310; however at the Enable/Disable Remote root Login prompt, type disable
and press Enter.
33.6 OS Hardening
The Mediant 8000 software automatically performs “hardening” of the Operating
System on all its boards to minimize the risk of service disruption on any Mediant 8000
component by malicious user (hacker).
For SC boards, OS hardening is implemented according to the DoD IASE Security
Technical Implementation Guidelines (STIGs) and includes the following:
Unnecessary Solaris services and daemons are shut down.
Permissions on OS configuration and binary files are adjusted to prevent their
modification by malicious users.
TCP/IP stack is tuned to prevent DoS attacks (including SYN and Smurf attacks).
For the Media Gateway (TP-6310 and TP-8410) and ES boards, OS hardening is
achieved via the use of non-generic real-time OS and real-time design of the software
that implements only services that are imperative for the board's operation.
To Next Page
Loading...
