Eaton NetDirector B064-016-04-IPH Manual page 51

OSD Operation
Security
Login String
The Login String allows the KVMs IP address to be more secure
by adding extra text to the end of it. When text is entered
into the Login String field, users will need to include a forward
slash (/) and the Login String at the end of the URL to access
the KVM switch. For example, if a Login String of abcdefg is
entered, the user must enter a URL such as 192.168.0.126/
abcdefg.
The following characters are allowed in the login string:
0 through 9, a through z, A through Z, ~ ! @$^&*()_+'<>,.|
The following characters are not allowed:
%":/?#\[Space]
Note: If a Login String is not entered, anyone can access the KVM switch
using the IP Adress alone, making the installation less secure.
Encryption
This section allows you to set different encryption settings for the Keyboard/Mouse, Video and Virtual Media functions of the KVM
switch. You can choose any combination of encryption methods (DES, 3DES, AES and/or RC4), you can choose to randomly switch
between them or you can choose no encryption at all. Although enabling encryption will add more security to you installation, it
can also slow down system performance (mouse, keyboard, video), with the following having the most impact:
• RC4 impacts performance the least out of the four encryption methods. DES is second to least in impact, followed by 3DES and AES.
• Of all the possible combinations, a combination of RC4 and DES impacts performance the least.
Security Level
MAC Filtering
To add a MAC filter:
1. Click Add. A dialog box similar to the one below appears:
2. Type in the desired MAC address and click OK.
3. Repeat these steps for any additional MAC addresses you
want to filter.
To delete a MAC filter:
Select the desired MAC filter from the list and click Remove.
To modify a MAC filter:
1. Select the desired MAC filter from the list and click Edit. An
Edit dialog box box appears.
2. Delete the old address and replace it with the new one. Click
OK.
Note: To block a computer from accessing the B064-Series KVM Switch,
you do not need to filter both its IP address and its MAC address. Any
computer blocked by a MAC filter will be denied access to the KVM
switch, even if the computer is allowed to access the KVM switch under
the IP filters that are set up.
If any filters have been configured, they appear in the IP Filter and/or
MAC Filter list boxes.
Item Description
High High security level. Disable all services except:
SSHv2, HTTPS (TLS v1.2).
Medium-High Medium-high security level. Enable SSHv2,
redirect HTTP to HTTPs, HTTPs (TLS v1.2),
ICMP.
Medium Medium security level. Enable SSHv2,
redirect HTTP to HTTPs, HTTPs (TLS v1.0, 1.1,
1.2), ICMP.
Custom Click to check the following security options
you wish to apply:
Enable ICMP service.
Enable SNMP service.
Enable Telnet service.
Enable SSH session.
Enable HTTP session.
Enable HTTPS session (select between "TLS
1.2" or "TLS 1.0, 1.1, 1.2").
51