Using The Secure Web Server; Secure Telnet; Server Certificate Replacement - AudioCodes Mediant 2000 User Manual

User's Manual
18.2.2

Using the Secure Web Server

To use the secure Web server, take these 3 Steps:
1. Navigate your browser to the following URL:
https://[hostname] or [ip address]
Depending on the browser's configuration, a security warning dialog may be
displayed. The reason for the warning is that the Mediant 2000's initial certificate is not
trusted by your PC. The browser may allow you to install the certificate, thus skipping
the warning dialog the next time you connect to the Mediant 2000
2. If you are using Internet Explorer, click View Certificate and then Install
Certificate.
3. The browser also warns you if the host name used in the URL is not identical to
the one listed in the certificate. To overcome this, add the IP address and host
name (ACL_nnnnnn where nnnnnn is the serial number of the Mediant 2000) to
your hosts file, located at /etc/hosts on UNIX or
C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts on Windows; then use the host
name in the URL, e.g., https://ACL_280152 .Below is an example of a host file:
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# Location: C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
#
127.0.0.1
10.31.4.47
18.2.3

Secure Telnet

The Mediant 2000 has an embedded Telnet server allowing easy command-line
access to the device configuration and management interface. The Telnet server is
disabled by default. To enable it, set the parameter, TELNETServerEnable to 1
(standard mode) or 2 (SSL mode).
No information is transmitted in the clear when using SSL mode.
If the Telnet server is set to SSL mode, a special Telnet client is required on your PC
to connect to the Telnet interface over a secure connection; examples include C-
Kermit for UNIX, Kermit-95 for Windows, and AudioCodes' acSSLTelnet utility for
Windows (which requires prior installation of the free OpenSSL toolkit).
18.2.4

Server Certificate Replacement

The Mediant 2000 is shipped with a working SSL configuration consisting of a unique
self-signed server certificate. When a Mediant 2000 is upgraded to firmware version
4.6, a unique self-signed server certificate is created. If an organizational PKI (public
key infrastructure) is in place, you may wish to replace this certificate with one
provided by your security administrator.
Version 5.0
localhost
ACL_280152
437
18. Appendix - Security
June 2006