Replacing Insecure Protocols and Default Passwords

From the Device Access Privileges region on the Infrastructure Server profile, you can configure the devices currently using Telnet to switch to SSH, and devices using SNMPv2 to use SNMPv3.

You can also specify replacement passwords for devices that are currently using the manufacturer default passwords for SNMPv2, Telnet, and SNMPv3.

The following table lists which devices support the options in the Security tab:

Devices	Replace Telnet with SSH	Replace SNMPv2 with SNMPv3	Replace Defaults for SNMPv2	Replace Defaults for Telnet	Replace Defaults for SNMPv3
Symbol WS 5100 V3.0+, RFS 6000, RFS 7000	yes	yes	yes	yes	yes
Symbol WS 2000	yes	no	yes	no	no
Symbol AP 7131, 51x1	yes	no	yes	no	no
Symbol AP 4131	yes (firmware 3.95‑04 and later)	no	yes	password only	no
Symbol AP 4121	no	no	yes	password only (firmware 02.70‑12 and later)	no
Cisco IOS	yes	no	yes	yes	no
Cisco VxWorks	no	no	yes	no	no
Proxim	yes	no	yes	password only	no
Avaya/SYSTIMAX	no	no	no	no	no

To change Telnet or SNMP settings:

In the Profiles tab, select the profile for which you are defining privileges.

Click Edit.

In the Device Access Privileges region, select the Security tab.

•

If you want to change all Telnet communication to SSH, enable the Enable secure protocols and disable insecure protocols option. This will also change SNMPv2 to SNMP v3 on devices that support this feature.

Note: Disabling this check box after the settings have been applied will not enable Telnet or SNMPv2. If you want to revert to using Telnet or SNMPv2, you will need to change the device properties using the Infrastructure Site Console.

•

If you want to change manufacturer default SNMP or Telnet credentials, enable the Replace default SNMP and Telnet credentials option, then type the new names/passwords in the appropriate text boxes.

Note: If you change the credentials on the Security tab, ensure you also change the credentials on the corresponding Device Access Privileges tab.

Save your changes.

The settings are applied the next time a device is queried after the settings have been deployed to the server.