4.4.3.3SerialSecurityServicesUsingCSS
224.100.102.nnn,wherennnis:100+(2*channelnumber)-1
TheBaseRadio/ComparatorPairingNumberisnotusedforcircuit(V .24or4-wire/V .24hybridlink)
congurations.
See4.4.3.1SettingtheDeviceIPAddressandPairingNumberUsingCSS,page4-7onhowtosetthepairing
number.ThepairingnumbercanalsobeperformedusinganEthernetconnection.See4.4.5.1SettingtheBR/CM
PairingNumberUsingCSS,page4-14.
4.4.3.3SerialSecurityServicesUsingCSS
Thissectiondescribeshowtoenablethesecureservicesandchangethedevicepassword.Performthesestepsbefore
changingtheSNMPv3congurationandusercredentialsfromCSSonaselecteddeviceinthesite.
Priortoenablingthisparameter,anyloginandpasswordmaybeusedontheFileTransferAccessServiceslogin
windowtoaccessadevice.AfterAuthenticationServicesareenabled,theloginandpasswordprovidedischecked
againstthefollowingauthenticationsources:
•Storedpassword—RFsitedevicessupportacongurablepasswordfortheLocalServiceandElevated
Privilegesaccounts.Thepasswordisveriedagainstthestoredpasswordfortheseaccounts.
•Built-inloginsandpasswords—RFsitedevicessupportbuilt-inlogin/passwordcombinationsforlogin
byservicessuchasSoftwareDownloads(SWDL).OnlycertainSWDLloginnamesareauthenticated
inthisway.
•CentralizedAuthentication—ForauthenticationthroughcentralizedaccountsinsteadofLocalService,
ElevatedPrivileges,andbuilt-inuseraccounts,youneedtoConguretheCentralizedAuthentication
parameterinCSSfortheCHAPprotocol.SeeChapter7,“Enabling/DisablingCentralizedAuthentication
UsingCSS”intheAuthenticationServicesmanual.NotethatthisprocedurerequiresanEthernetconnection
tothedevicebeingcongured.
4.4.3.3.1SettingtheSerialSecurityServicesUsingCSS
Prerequisites:
Ensuretherequiredcredentialsinformation(localserviceaccountpasswordandelevatedprivilegespassword)to
congurethesitedevicesbeforeproceeding.Theusercredentialsinformationincludesboththecurrentandnew
credentials.Withoutthecurrentcredentials,youcannotaccessthedeviceandcannotchangetheusercredentials.
See8.2.4.2ResettingPasswordsandSNMPv3Passphrases,page8-6.Changingtotheincorrectusercredentials
mayleadtonotbeingabletoaccessthedevicethroughCSSorSSH.
6871022P86-A-November20124-9