Grandstream Networks UCM6204 User Manual

P a g e | 63
UCM6200 Series User Manual
Table 15: Fail2Ban Settings
Global Settings
Enable Fail2Ban
Enable Fail2Ban. The default setting is disabled. Please make sure both "Enable
Fail2Ban" and "Asterisk Service" are turned on to use Fail2Ban for SIP
authentication on the UCM6200.
Banned Duration
Configure the duration (in seconds) for the detected host to be banned. The default
setting is 300. If set to -1, the host will be always banned.
Max Retry Duration
Within this duration (in seconds), if a host exceeds the max times of retry as
defined in "MaxRetry", the host will be banned. The default setting is 5.
MaxRetry
Configure the number of authentication failures during "Max Retry Duration" before
the host is banned. The default setting is 10.
Fail2Ban Whitelist
Configure IP address, CIDR mask or DNS host in the whitelist. Fail2Ban will not
ban the host with matching address in this list. Up to 5 addresses can be added
into the list.
Local Settings
Asterisk Service
Enable Asterisk service for Fail2Ban. The default setting is disabled. Please make
sure both "Enable Fail2Ban" and "Asterisk Service" are turned on to use Fail2Ban
for SIP authentication on the UCM6200.
Protocol
Configure the listening port number for the service. Currently only 5060 (for UDP)
is supported.
MaxRetry
Configure the number of authentication failures during "Max Retry Duration" before
the host is banned. The default setting is 10. Please make sure this option is
properly configured as it will override the "MaxRetry" value under "Global Settings".
Login Attack Defense
Enables defense against excessive login attacks to the UCM’s web GUI.
The default setting is disabled.
Listening Port
Number
This is the Web GUI listening port number which is configured under System
SettingsHTTP ServerPort. The default is 8089.
MaxRetry
When the number of failed login attempts from an IP address exceeds the
MaxRetry number, that IP address will be banned from accessing the Web GUI.
Blacklist
Black List
Users will be able to view the IPs that have been blocked by UCM.
SSH Access
SSH switch now is available via Web GUI and LCD. User can enable or disable SSH access directly from Web
GUI or LCD screen. For web SSH access, please log in UCM6200 web interface and go to Web GUISystem
SettingsSecurity SettingsSSH Access. By default, SSH access is disabled for security concerns. It is
highly recommended to only enable SSH access for debugging purpose.

Grandstream Networks UCM6204 Specifications

General

Brand	Grandstream Networks
Model	UCM6204
Category	PBX
Language	English