[Contents] [Prev] [Next] [Index] [Report an Error]

Securing the Console Port

You can use the console port on the Services Router to connect to the Routing Engine through an RJ-45 serial cable. From the console port, you can use the CLI to configure the router. By default, the console port is enabled. To secure the console port, you can configure the Services Router to do the following:

Log out the console session when you unplug the serial cable connected to the console port.
Disable root login connections to the console.
Disable the console port. We recommend disabling the console port to prevent unauthorized access to the Services Router, especially when the router is used as customer premises equipment (CPE).

To secure the console port:

Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
Perform the configuration tasks described in Table 18.
If you are finished configuring the network, commit the configuration.

Table 18: Securing the Console Port

Task	J-Web Configuration Editor	CLI Configuration Editor
Navigate to the Console level in the configuration hierarchy.	In the J-Web interface, select Configuration>View and Edit>Edit Configuration. Next to System, click Configure or Edit. Next to Ports, click Configure or Edit. Next to Console, click Configure or Edit.	From the [edit] hierarchy level, enter edit system ports console
Secure the console port.	Select one of the following check boxes: Disable—Console port is disabled. Insecure—Root login connections to the console are disabled. Log out on disconnect—Logs out the console session when the serial cable connected to the console port is unplugged. Click OK.	Do one of the following: To disable the console port, enter set disable To disable root login connections to the console, enter set insecure To log out the console session when the serial cable connected to the console port is unplugged, enter set log-out-on-disconnect

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Console level in the configuration hierarchy.

In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
Next to System, click Configure or Edit.
Next to Ports, click Configure or Edit.
Next to Console, click Configure or Edit.

From the [edit] hierarchy level, enter

edit system ports console

Secure the console port.

Select one of the following check boxes:
- Disable—Console port is disabled.
- Insecure—Root login connections to the console are disabled.
- Log out on disconnect—Logs out the console session when the serial cable connected to the console port is unplugged.
Click OK.

Do one of the following:

To disable the console port, enter
set disable
To disable root login connections to the console, enter
set insecure
To log out the console session when the serial cable connected to the console port is unplugged, enter
set log-out-on-disconnect

[Contents] [Prev] [Next] [Index] [Report an Error]