Limiting The Embedded Web Server To Read-Only Mode - AudioCodes Mediant 1000 User Manual

User's Manual
The default Monitoring access level Username and Password for all devices is:
Username: User
Password: User
The Enter Network Password dialog is case-sensitive.
If the Embedded Web Server is left idle for more than 5 minutes, the session is expires.
Subsequently, when a screen is accessed, you are prompted again for the Username and
Password.
For more information about changing the Password and Username for each access level or
resetting them to the defaults, refer to ''Changing the Password'' on page 169.
8.3.2

Limiting the Embedded Web Server to Read-Only Mode

Initially, the Embedded Web Server displays the default parameters that are pre-installed in
the board. These parameters can be modified using the Embedded Web Server, either by
modifying parameters on the various pages or by loading a text configuration file - an ini
file to the Mediant 1000.
Users can limit the Web Server to read-only mode by changing the default of ini file
parameter DisableWebConfig. The read-only mode feature can be used as a security
measure. This security level provides protection against unauthorized access (such as
Internet hacker attacks), particularly important to users without a firewall.
8.3.2.1 Limiting the Embedded Web Server to Read-Only Mode
Users can limit the Web Server to read-only mode by changing the default of ini file
parameter DisableWebConfig. Use the read-only mode feature as a security measure. This
security level provides protection against unauthorized access (such as Internet hacker
attacks), particularly important to users without a firewall.
To limit the Web Server to read-only mode:
Set the ini file parameter DisableWebConfig to 1 (Default = 0, i.e. read-write mode)
and send the modified ini file to the device. All Web pages are presented in read-only
mode. The ability to modify configuration data is disabled. In addition, users do NOT
have access to any file loading page, to the "Change Password" page, to the
"SaveConfiguration", or to the "Reset" page.
Note 1:
Note 2:
Version 4.6
'Read Only' policy also dan be employed by setting DisableWebConfig to 0
and distributing the Monitoring level and Administrator level user name
password pairs according to the organization's security policy.
When DisableWebConfig is set to 1 the Dual Access level scheme is
overridden, so that a user who is accessing the web server as an
Administrator level user to view the web GUI in 'Read Only' mode.
135
8. Mediant 1000 Management
August 2005