Black Box IC108A Guide d'installation télécharger pdf (Page 11)

Hardware Installation Guide

revision 1 — 153

30.4.2 Security Enhancements

Past installations may have contained vulnerabilities which could lead to unauthorized access to the CoBox

Micro 100. The recommended security settings are not necessary for the unit to work correctly; however,

they are highly recommended to bridge any security gaps left open from previous installations.

In order to configure the security settings, telnet into the unit to access the setup options:

telnet <IP Address> 9999

This command will open the unit using port 9999, which is reserved for configuration.

Note: Beyond securing the following internal settings of the Lantronix CoBox Micro 100,

networking firewalls should be used to mask services that should not be publicly exposed.

Many security problems can be avoided if servers and networks are appropriately configured.

Enhanced Password

By default, the Cobox Micro 100 does not have a password assigned. In Server Options, you may assign a 4-

digit password. While a 4-digit password is a step toward securing the unit, it is highly recommended to

enable Enhanced Passwords, which will allow for a maximum of 16 digits. This can be set under Security

(option 6).

Port 77FE

It is recommended that you disable port 77FE. This is an IP port that allows DeviceInstaller, Web-Manager,

and custom programs to configure the unit remotely. Disabling this port prevents unauthorized access to this

unit. If this is not done, it is possible to find this open port using a port scan tool. In addition, any networked

user who installs DeviceInstaller on their machine may be able to change settings to the unit. Note: Port

77FE must be enabled for DeviceInstaller Software to detect the unit.

Web Server

After configuration is completed, it is recommended that you disable Web Server. While it is helpful to

configure the unit via the Web Server, it does not support enhanced password protection. So it is a good idea

to turn this feature off.

30.4.3 Firmware

To ensure that enhanced security is in place, download the latest firmware. Download the latest firmware

from the Lantronix website, www.lantronix.com. There are two recommended methods to update the unit’s

internal operational code: via DeviceInstaller or via TFTP.

Upgrading Firmware via DeviceInstaller

Use the correct version of DeviceInstaller with the correct version of the firmware. For more information,

refer to the DeviceInstaller documentation. Microsoft .NET Framework version 1.1 is also required.

Upon running DeviceInstaller, the software searches for any devices on the LAN. If there are devices present

but they are not detected by the software, you must assign an IP address to it. Assign a TCP/IP address over

the network by using the ARP utility. If it is already configured but still does not show up in the

DeviceInstaller search, verify that port 77FE is enabled.

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 34 35

Pas de commentaire

Black Box IC108A Guide d'installation Page 11