Lantronix SecureLinx User Manual page 19

HTTP/SSL
The HTTP/SSL configuration page is used to enable or disable HTTP and SSL
support, configure the port number that the HTTP server watches and responds to,
selection of the method of authentication used and SSL access level. For more
information on SSL see
Enabling or disabling HTTP or SSL support:
1. Select Enabled or Disabled from the appropriate Server drop-down menu and
press Apply.
Changing the HTTP server port number:
1. In the HTTP Port field, enter the port number and press Apply.
Note: The default port number for HTTP is 80.
Setting the HTTP authentication method:
The HTTP server supports two authentication methods for security and validation of
the username-password – Basic and MD5 digest.
The Basic method utilizes Base64 encoding to encode and deliver the username-
password over the network to the HTTP server for decoding and authentication. This
basic method is supported by all web browsers and offers a minimum level of
security.
Note: The Base64 algorithm is widely-known and susceptible to packet-
sniffer attack for acquisition of the encoded username-password string.
The MD5 digest method provides stronger protection utilizing one-way encoded hash
numbers, never placing the username-password on the network. Instead, the
sending browser creates a challenge code based on the hash algorithm, provided
username-password and unique items such as the device IP address and timestamp,
which is compared against the HTTP server internal user database of valid challenge
codes. The MD5 digest method offers a higher level of security than the Basic
method but at present is not supported by all browsers.
Note: MD5 is known to be fully supported by Internet Explorer 5.0+
Select Basic or MD5 from the Authentication drop-down menu and press Apply.
Setting SSL access level
SSL access may be configured as optional or required. The default access level is
set to optional.
Optional –Both non-secure (HTTP) and SSL encrypted connections (HTTPS)
are allowed access.
Required – ONLY SSL encrypted connections (HTTPS) are allowed access.
Select Optional or Required from the Secure Access drop-down menu and press
Apply.
Serial Port
The Serial Port configuration page is used for maintenance of the serial port.
SecureLinx SLP Remote Power Manager
on page 46.
Advanced Operations
3: Operations
19