Cli; Security; Security Considerations - HP MSM3xx Management And Configuration Manual

Management

CLI

HTTP authentication
When enabled, access to the SOAP interface is available via HTTP with the specified
username and password.
TCP port
Specify the number of the TCP port that SOAP uses to communicate with remote
applications. Default is 448.

Security

Use these settings to control access to the SOAP interface.
 Allowed addresses: List of IP address from which access to the SOAP interface is
permitted. To add an entry, specify the IP address and appropriate Mask, and then
select Add.
When the list is empty, access is permitted from any IP address.
 Active interfaces: Enable the checkboxes that correspond to the interfaces from which
to allow access to the SOAP interface.

Security considerations

 The SOAP server is configured for SSL/TLS mode, and the use of a X.509 client certificate
is mandatory for SOAP clients.
 The SOAP server is configured to trust all client certificates signed by the default
Colubris SOAP CA installed on the AP.
 Users should generate and install their own SOAP CA private key/public key certificate to
protect their devices from unauthorized access. This is important because the default
SOAP CA and a valid client certificate are provided as an example to all customers. (See
Managing certificates on page
CLI
The AP provides a command line interface (CLI) that can be used to perform configuration
and management tasks via the serial port or an IP connection on any of the AP interfaces.
A maximum of three concurrent CLI sessions are supported regardless of the connection
type. For information on using the CLI, see the CLI Reference Guide.
2-12
6-12.)