
Starting and Configuring the HTTP Server
300019-B Rev. 00 1-5
User Name/Password Security Concepts
The HTTP Server controls access to network device information by grouping that
information into collections, called realms, that share the same security attributes.
The HTTP Server defines two security realms on the router: User and Manager.
These are the same as the login names for the Technician Interface. Similarly, a
user name/password authorization mechanism controls access to each realm.
• User access privileges let you view information.
• Manager access privileges grant complete access to the router, letting you, for
example, enable and disable an interface.
Before allowing any Manager-level operations, however, the HTTP Server
requires that the system administrator set a nonnull Manager password. If the
system administrator does not set a User password, the HTTP Server accepts an
empty (null) string as the password. Generally, the system administrator sets
passwords using Technician Interface commands, just as for console access
through the Technician Interface.
If you have User privileges and attempt to access information requiring Manager
privileges (or, if you attempt to use the Manager login with a null password), the
HTTP Server prompts you for the Manager password. If you do not provide the
appropriate password, an error message appears, and you cannot perform that
operation. You control the level of access authentication protection when you
configure the Authentication parameter.
For specific information about how to set user names and passwords, see Using
Technician Interface Software. For information about securing a router as part of
the Quick-Start procedure, see Quick-Starting Routers.
Basic Access Authentication
In basic access authentication, the user name and password are passed over the
network as clear text. While this serves to verify the identity of the user, the
information is vulnerable to anyone with a sniffer or similar device.
Kommentare zu diesen Handbüchern