
303552-A Rev 00 3-1
Chapter 3
HTTP Server Security
The HTTP Server allows access to device information from anywhere in the
network. To protect your network information, you may want to implement
security controls. The HTTP Server offers two levels of access control:
user name/password security and network address filtering.
User Name/Password Security
The HTTP Server controls access to network device information by grouping that
information into collections that share the same security attributes, called realms.
The HTTP Server defines two security realms on the router: User and Manager.
These are the same as the logins for the Technician Interface. Similarly, a
user name/password authorization mechanism controls access to each realm.
• User access privileges let you view information.
• Manager access privileges grant complete access to the router, letting you, for
example, enable and disable an interface.
Before allowing any Manager-level operations, however, the HTTP Server
requires that the system administrator set a nonnull Manager password. If the
system administrator does not set a User password, the HTTP Server accepts an
empty (null) string as the password. Generally, the system administrator sets
passwords using Technician Interface commands, just as for console access
through the Technician Interface.
Topic Page
User Name/Password Security
3-1
Network Address Filtering 3-2
Comentarios a estos manuales