Disable Tftp Firmware Upgrade; Disable Port 77Fe (Hex); Disable Web Setup; Enable Enhanced Password - Lantronix SecureBox SDS1100 User Manual

SDS1100 User Guide

Disable TFTP Firmware Upgrade

This setting disables the use of TFTP to perform network firmware upgrades. With
this option, firmware upgrades can be performed only by using a *.hex file over the
serial port of the unit.

Disable Port 77FE (Hex)

Port 77FE is a setting that allows the Lantronix Device Installer utility to configure the
unit remotely. Disabling Port 77FE will prevent remote access to the unit from the
Lantronix Device Installer utility. You can configure the unit only by using Web pages,
Telnet, or serial configuration.

Disable Web Setup

This setting disables the use of the Web Page Configuration tool that is built into the
unit. Browser initiated sessions to port 80 on the SDS will be disabled. Configuration
via HTTP will be disabled. Port 80 will be closed.

Enable Enhanced Password

This setting defaults to the N (option), which allows you to set a 4-character
password that protects the Configuration Menu via Telnet and Web pages. The Y
(Yes) option allows you to set an extended security password of 16-characters for
protecting Telnet access.

Enable Encryption

Rijndael is the block cipher algorithm chosen by the National Institute of Science and
Technology (NIST) as the Advanced Encryption Standard (AES) to be used by the
US government. The SDS supports 128-, 192-, and 256-bit encryption key lengths.
Follow the steps below to configure AES encryption on the SDS.
NOTE:
the serial port of the SDS, or via a secured network connection. Initial
configuration information including the encryption key are sent in clear text
over the network.
1. Telnet to the configuration port on the SDS (Port 9999).
An example of a Telnet command syntax is shown below. In the command
examples below, replace the x's with the IP address of the SDS.
Microsoft Windows command syntax: xxx.xxx.xxx.xxx 9999
Unix command syntax: xxx.xxx.xxx.xxx 9999
2. When prompted, press Enter to go into setup mode.
3. At the Change Setup menu, select option 6 for security.
Configuring encryption should be done through a local connection to
45
3: Configuring the Unit