Avaya S8100 Series Manual page 1185

!
SECURITY ALERT:
The Get and Set, community name strings are generally configured with default
SECURITY ALERT:
values of Public and Private, respectively. These community name strings
function as passwords for their respective SNMP operation. It is always a good
idea to change these community name strings to something other than the
default values. If a Network Management Station (NMS) is in operation on the
network, whatever these strings are changed to must be communicated to the
NMS administrator. If the defaults are left administered this could create a
serious security issue. For example, the default Set community name string,
with its widely known value of Private, could be used to reconfigure the Ethernet
switch via SNMP message.
7. Verify that spanning tree is enabled (the default setting).
Use the command set spantree enabled.
8. Set spanning tree version to rapid-spanning-tree (not the default). This command is
available on Avaya P363 Ethernet switches having firmware version 4.0 or later. You must
update the firmware to this version to use the command.
Use the command set spantree version rapid-spanning-tree.
Note:
For more information on the Spanning Tree CLI commands, see Installation and
Note:
Configuration Guide, Avaya C360 and Reference Guide, Avaya C360, available
at the Avaya Support Web site (http://www.avaya.com/support).
9. If IP-PNC, make sure all appropriate ports on the Ethernet switch are locked to 100 speed
using full duplex.
10. When completed, disconnect the services laptop computer from the Ethernet switch.
11. If two Ethernet switches are present for CNA, repeat steps 1 through 7 for the second
switch.
12. If a duplicated control network, repeat steps 1 through 9 for the remaining Ethernet
switch(es).
Enabling firewall settings, if necessary
For the media server to receive SNMP traps from the UPS and Avaya Ethernet switch, you must
enable the snmp trap, 162/udp port. The default is disabled.
1. Under Security, click Firewall.
2. Click Advanced Settings . . . to view the second page.
3. Scroll down until you see snmp trap, port 162/udp.
4. Select the box in the Input to Server column (far left) next to it.
Procedure
Issue 2.1 June 2006 1185