Access Control - Siemens A31003-D3000-M100-01-76A9 Administrator User Manual

3.4.2 Access Control

A31003-D3000-M100-01-76A9, 02-2013
OpenScape Desk Phone IP, Phone Administration, Administrator Documentation
• RTP + SRTP - Both non-encrypted (non-secure) and encrypted (secure)
media connections are offered. Non-encrypted connections are preferred
over encrypted connections, i.e. the phone uses the non-encrypted RTP
connection if the remote party accepts it and only switches to SRTP if RTP is
not accepted.
• With SRTP only, only an encrypted (secure) media connection is allowed; if
the remote party should not support SRTP, no connection will be established.
• With SRTP + RTP, the phone will try to establish an SRTP connection, but fall
back to RTP if this should fail. This is the recommended option.
With SHA1-80 ranking and SHA1-32 ranking, the ranking for each crypto-suite
for negotiation is defined. Additionally, each crypto-suite can be enabled or
disabled.
Administration via WBM
System > Security > SDES config
Related Topics
The CCE access parameter controls TCP and UDP access for the CCE
(CommsChannel Extender). This affects the operation of the OpenStage
Manager, local CTI access, and HPT access. When Disable is selected, both
TCP and UDP are disabled. With Enable, there are no restrictions.
With Factory reset claw, the 'hooded claw' keypad mechanism to initiate a
factory reset without requiring an authenticated access can be enabled or
disabled.
The Serial port parameter controls access to the serial port. When set to No
password, a terminal connected to the port can interact with the phone's
operating system without restrictions. When Passwd reqd is selected, the serial
port requires a password for access (root user is not available). When
Unavailable is chosen, the serial port is not accessible.
As a prerequisite, the root user needs to create a user and to define a password
via Serial Access, so that access can be granted when the Password required
prompt is issued.
Administration
Security
71