Securing the Console Port

You can use the console port on the device to connect to the Routing Engine through an RJ-45 serial cable. From the console port, you can use the CLI to configure the device. By default, the console port is enabled. To secure the console port, you can configure the device to do the following:

Log out the console session when you unplug the serial cable connected to the console port.
Disable root login connections to the console.
Disable the console port. We recommend disabling the console port to prevent unauthorized access to the device, especially when the device is used as customer premises equipment (CPE).

To secure the console port:

Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
Perform the configuration tasks described in Table 18.
If you are finished configuring the network, commit the configuration.

Table 18: Securing the Console Port

Task	J-Web Configuration Editor	CLI Configuration Editor
Navigate to the Console level in the configuration hierarchy.	In the J-Web interface, select CLI Tools>Point and Click CLI. Next to System, click Configure or Edit. Next to Ports, click Configure or Edit. Next to Console, click Configure or Edit.	From the [edit] hierarchy level, enter edit system ports console
Secure the console port.	Select one of the following check boxes: Disable—Console port is disabled. Insecure—Root login connections to the console are disabled. Log out on disconnect—Logs out the console session when the serial cable connected to the console port is unplugged. Click OK.	Do one of the following: To disable the console port, enter set disable To disable root login connections to the console, enter set insecure To log out the console session when the serial cable connected to the console port is unplugged, enter set log-out-on-disconnect

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Console level in the configuration hierarchy.

In the J-Web interface, select CLI Tools>Point and Click CLI.
Next to System, click Configure or Edit.
Next to Ports, click Configure or Edit.
Next to Console, click Configure or Edit.

From the [edit] hierarchy level, enter

edit system ports console

Secure the console port.

Select one of the following check boxes:
- Disable—Console port is disabled.
- Insecure—Root login connections to the console are disabled.
- Log out on disconnect—Logs out the console session when the serial cable connected to the console port is unplugged.
Click OK.

Do one of the following:

To disable the console port, enter
set disable
To disable root login connections to the console, enter
set insecure
To log out the console session when the serial cable connected to the console port is unplugged, enter
set log-out-on-disconnect