Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring a Network Device Protection Profile Authorized Administrator

An account for root is always present in a configuration and is not intended for use in normal operation. In the evaluated configuration, the root account is restricted to the initial installation and configuration of the evaluated device.

An authorized administrator must have all permissions, including the ability to change the router configuration.

To configure an authorized administrator:

  1. Create a login class named security-admin with all permissions.
  2. Define your authorized administrator.

    OR

  3. Configure the authentication algorithm for plain-text passwords as SHA-256.
  4. Commit the changes.
Note:

The root password should be reset following the change to SHA-256 for the password storage format. This ensures the new password is protected using a SHA-256 hash, rather than the default password hashing algorithm. To reset the root password, use the set system login user root password password command, and confirm the new password when prompted.

There are the following additional security characteristics on the Administrator access which may be configured on the TOE:

  • For any remote session, the administrator may configure an inactivity timer. Whenever an activity occurs, the TOE resets the timer. If the timer value reaches the maximum allowed value (i.e. the administrator has not been active), the TOE shall terminate the session to prevent reuse of an open but inactive administrative session. The remote session inactivity is configured using the Client Alive mechanism. The administrator sets up the Client Alive interval value (in seconds) and the maximum number the counter can be reached before terminating the session. For example, the following sets the value to a hundred seconds (Client Alive interval value 20 seconds with the maximum number of counter values reached 5):

  • For local administrative sessions, the administrator may set a similar timer which sets the inactivity threshold after which the TOE shall terminate the administrative session. The command allows the value never but it must not be used in the evaluated configuration. The default value is 30 seconds. The configuration is through the login class definition below, followed by an example of how to set the value to 45 seconds.

Related Documentation