Security
246
7.2
The security checklist
BAT54-Rail/F..
Release
7.54
06/08
U Have you activated the IP masquerading?
IP masquerading is the hiding place for all local computers for connec-
tion to the Internet. Only the router module of the unit and its IP address
are visible on the Internet. The IP address can be fixed or assigned
dynamically by the provider. The computers in the LAN then use the
router as a gateway so that they themselves cannot be detected. The
router separates Internet and intranet, as if by a wall. The use of IP mas-
querading is set individually for each route in the routing table. The rout-
ing table can be found in the LANconfig in the 'IP router' configuration
section on the 'Routing' tab.
U Have you excluded certain stations from access to the
router?
Access to the internal functions of the devices can be restricted using a
special filter list. Internal functions in this case are configuration sessions
via LANconfig, WEBconfig, Telnet or TFTP. This table is empty by default
and so access to the router can therefore be obtained by TCP/IP using
Telnet or TFTP from computers with any IP address. The filter is acti-
vated when the first IP address with its associated network mask is
entered and from that point on only those IP addresses contained in this
initial entry will be permitted to use the internal functions. The circle of
authorized users can be expanded by inputting further entries. The filter
entries can describe both individual computers and whole networks. The
access list can be found in LANconfig in the 'TCP/IP' configuration sec-
tion on the 'General' tab.
U Is your saved BAT configuration stored in a safe place?
Protect the saved configurations against unauthorized access in a safe
place. A saved configuration could otherwise be loaded in another
device by an unauthorized person, enabling, for example, the use of your
Internet connections at your expense.
To Next Page
Loading...
Need help?
General
