Certificates; Ssh; Https; Firewall - Nortel BCM50a Configuration Manual

Chapter 1 Getting to know your BCM50a Integrated Router 33

Certificates

The BCM50a Integrated Router can use certificates (also called digital IDs) to
authenticate users. Certificates are based on public-private key pairs. Certificates
provide a way to exchange public keys for use in authentication.

SSH

The BCM50a Integrated Router uses the SSH (Secure Shell) secure
communication protocol to provide secure encrypted communication between two
hosts over an unsecured network.

HTTPS

HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL is a
web protocol that encrypts and decrypts web sessions. Use HTTPS for secure
WebGUI access to the BCM50a Integrated Router.

Firewall

The BCM50a Integrated Router has a stateful inspection firewall with DoS
(Denial of Service) protection. By default, when the firewall is activated, all
incoming traffic from the WAN (Wide Area Network) to the LAN is blocked
unless it is initiated from the LAN. The BCM50a Integrated Router firewall
supports TCP/UDP inspection, DoS detection and protection, real time alerts,
reports and logs.

Brute force password guessing protection

The BCM50a Integrated Router has a special protection mechanism to discourage
brute force password guessing attacks on the BCM50a Integrated Router
management interfaces. You can specify a wait time that must expire before you
can enter a fourth password after entering three incorrect passwords.
BCM50a Integrated Router Configuration — Advanced