Web Ui/Ssh Access; Web Ui Access; Web Ui Access Protocols; Figure 1 : Web Ui Access Settings - Grandstream Networks GXP21 Series Security Manual

Web UI Access

The GXP embedded web server responds to HTTP/HTTPS GET/POST requests. Embedded HTML pages
allow users to configure the device through a web browser such as Microsoft IE, Mozilla Firefox, Google
Chrome and etc. With this, administrators can access and configure all available GXP information and
settings. It is critical to understand the security risks involved when placing the IP Phones on public networks
and it's recommended not to do so.

Web UI Access Protocols

HTTP and HTTPS are supported to access the GXP's web UI and can be configured under web UI →
Maintenance → Security settings → Security.
To secure transactions and prevent unauthorized access, it is highly recommended to:
1. Use HTTPS instead of HTTP.
2. Avoid using well known port numbers such as 80 and 443.
3. The GXP allow access via SSH for advanced troubleshooting purpose. This is usually not needed
unless the administrator or Grandstream support needs it for troubleshooting purpose. SSH access
on the device is enabled by default with port 22 used. It's recommended to disable it for daily normal
usage. If SSH access needs to be enabled, changing the port to a different port other than the well-
known port 22 is a good practice.

WEB UI/SSH ACCESS

Figure 1 : Web UI Access Settings

GXP Security Guide
P a g e | 4