Nortel 2007 Firmware Release Notes page 11

Version 1.00
SECUREMENU item is not present at the end of the S4 part of the Full DHCP string, the
password protection is not enabled.
Note: the S4 set of data items is actually the third group of server data items in the Full
DHCP string. S3 is used in internal messaging between the TPS and the IP Phone 2007
and thus is not in the DHCP string.
The SECUREMENU item is an optional parameter. If it is present, then the full S4 string –
including action and retries – must be found. The S4 string is already present if the XAS support
has been configured through the DHCP. If XAS is not configured, the password protection can
still be enabled by setting the S4 IP address to 0.0.0.0 and the other fields to any value
(recommended configuration is 0).
The following examples show how to configure the menu password protection through the DHCP
string:
Menu protection on, graphic XAS configured:
"Nortel-i2004-A,xxx.xxx.xxx.xxx:pppppp,aaa,rrr;xxx.xxx.xxx.xxx:pppppp,aaa,rrr;
xxx.xxx.xxx.xxx:pppppp,aaa,rrr,SECUREMENU."
"Nortel-i2004-
A,147.19.11.70:4100,1,10;147.19.11.70:4100,1,5;37.165.238.90:44443,1,5,SECUREMENU."
Menu protection off, graphic XAS configured
"Nortel-i2004-A,xxx.xxx.xxx.xxx:pppppp,aaa,rrr;xxx.xxx.xxx.xxx:pppppp,aaa,rrr;
xxx.xxx.xxx.xxx:pppppp,aaa."
"Nortel-i2004-A,147.19.11.70:4100,1,10;147.19.11.70:4100,1,5;37.165.238.90:44443,1."
Menu protection on, no XAS configured
"Nortel-i2004-A,147.19.11.70:4100,1,10;147.19.11.70:4100,1,5;0.0.0.0:0,0,0,SECUREMENU."
With Menu protection enabled, a password prompt pop-up window appears when the Tools Menu
icon is pressed. The administrator or technician enters the password 26567*738 (color*set) from
the dial pad and the Tools Menu appears.
Access to the menu remains active for five minutes. During this five minute period, the Tools
menu can be freely navigated, exited, and entered, without being prompted again for the
password. Once the five minute period expires, the Tools menu closes, as do any active Tools
menu pages. The password must be reentered to access the Tools Menu. Pressing the Tools
Menu icon anytime during the five minute period restarts the five minute timer.
A new Tools menu item, Lock Menu, is displayed when the menu's password protection is
enabled. Selecting this item immediately exits the Tools menu, closes any open Tools menu
pages, and locks the menu. Letting the timer run out also locks the menu.
Currently, the password is fixed (Cisco uses a fixed password for this purpose, too).
When an incorrect password is entered, the Tools Menu does not open. The icon must be
clicked again to open the password prompt.
To prevent password guessing, only three incorrect password entries in a row are allowed. After
the third incorrect entry, further entries are ignored for a period of five minutes. During this
ignore period, though the password prompt displays and accepts entered digits, the IP PhOne
2007 does not process the incoming digits. The password prompt window simply closes, as in
the case of an incorrect password entry. Any further attempts to guess the password during the
five minute period are ignored. This effectively reduces the guess entry rate to three guesses
every five minutes.
C23 Firmware for Verification
IP Phone 2007 Firmware Release Notes
Page 10 July 19, 2005