User Management Levels; Ssh Access; Figure 5: Disable Ssh Access On Gac2500 - Grandstream Networks GAC2500 Security Manual

User Management Levels

Two user privilege levels are currently supported:
•
Admin
•
User
Admin login has access to all of the GAC2500's web UI pages and can execute all available operations.
User login has limited access to the web UI pages. With user login, the user is allowed to configure the
following settings:
•
Call
•
Contacts
•
Account: Call Settings
•
Advanced: MPK General Settings, MPK LCD Settings
•
Maintenance: Network Settings, Time & Language, Security Settings, Device Manager
•
Status: Account Status, Network Status, System Info
Even if user login can access certain web UI pages, it has less options compared to admin login.
It is recommended to keep admin login with administrator only. And end user should be provided with user-
level login only, if web UI access is needed.

SSH Access

The GAC2500 allows access via SSH for advanced troubleshooting purpose. This is usually not needed
unless the administrator or Grandstream support needs it for troubleshooting purpose. SSH access on
GAC2500 is enabled by default with port 22 used. It's recommended to disable it for daily normal usage. If
SSH access needs to be enabled, changing the port to a different port other than the well-known port 22 is
a good practice.
Figure 4: Disable SSH Access on GAC2500
GAC2500 Security Guide
P a g e | 6