02-System Management Configuration Guide

HomeSupportSwitchesS12500R SeriesConfigure & DeployConfiguration GuidesH3C S12500R Switch Router Series Configuration Guides(R51xx)-6W10102-System Management Configuration Guide
02-Device hardening configuration
Title Size Download
02-Device hardening configuration 45.37 KB

Hardening the device

Device hardening tasks at a glance

All device hardening tasks are optional. You can perform any of the tasks in any order.

·     Disabling password recovery capability

·     Disabling USB interfaces

Disabling password recovery capability

About this task

Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus. For more information about BootWare menus, see the release notes.

If password recovery capability is enabled, a console user can access the device configuration without authentication to configure a new password.

If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.

To enhance system security, disable password recovery capability.

Restrictions and guidelines

To access the device configuration without authentication, you must connect to the active MPU and access the BootWare menu while the MPU is starting up.

To access the device configuration without authentication, you must connect to the global active MPU and access the BootWare menu while the MPU is starting up.

Procedure

1.     Enter system view.

system-view

2.     Disable password recovery capability.

undo password-recovery enable

By default, password recovery capability is enabled.

Disabling USB interfaces

About this task

You can use USB interfaces to upload or download files or to connect a 3G modem. By default, all USB interfaces are enabled. You can disable USB interfaces as needed.

Prerequisites

Before using this command, use the umount command to unmount all USB partitions. For more information about this command, see Fundamentals Command Reference.

Procedure

1.     Enter system view.

system-view

2.     Disable USB interfaces.

usb disable

By default, all USB interfaces are enabled.

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网