System Administration Access; Overview; Security Considerations; Configuring Administration Access - Cisco TelePresence Administrator's Manual

Grey Headline (continued)

System administration access

About administration access
While you can administer the VCS by using a PC connected
directly to the unit via a serial cable, you may want to access the
system remotely over IP.
You can do this using either or both:
•
the web interface via HTTPS
•
a command line interface (CLI) via SSH or Telnet.
By default, access via HTTPS and SSH is enabled; access via
Telnet is disabled. These can be enabled and disabled according
to your requirements.
You can also enable access via HTTP. However, this mode works
by redirecting HTTP calls to the HTTPS port, so HTTPS must be
enabled for access via HTTP.
Cisco TelePresence Management Suite (Cisco TMS)
!
accesses the VCS via the web server. If HTTPS mode is
turned off, Cisco TMS will not be able to access it.

Security considerations

To securely manage the VCS you should disable Telnet, using
the encrypted HTTPS and SSH protocols instead. For further
security, disable HTTPS and SSH as well and use the serial port
to manage the system.
Because access to the serial port allows the password to
!
be reset, it is recommended that you install the VCS in a
physically secure environment.
Overview and System
Introduction
status configuration
D14049.08
November 2010

Configuring administration access

To configure the services by which your system can be accessed:
•
System configuration > System.
You will be taken to the System administration page.
In the Admin Access section, select Off or On from the drop-
down boxes for each service.
xConfiguration Administration
•
You must restart the system for any changes to the
administration settings to take effect.
Cisco VCS Zones and Clustering and
configuration neighbors peers

Overview

Administration session timeout

By default, administration sessions do not time out – they remain
active until you log out.
You can set the system to time out an administration session
after a set number of minutes of inactivity. The timeout period will
apply to all administration sessions using both the web interface
and the command line interface.
To set the timeout period:
•
•
Values must be between 0 and 10,000. A value of 0 means that
administration sessions will never time out.
Call Bandwidth
processing control
167
CISCO TELEPRESENCE VIDEO COMMUNICATION SERVER
System configuration > System.
You will be taken to the System administration page.
In the Admin Access section, in the Session time out
(minutes) box, enter the number of minutes of inactivity after
which an administration session should time out.
xConfiguration Administration TimeOut
You must restart the system for any changes to the
administration settings to take effect.
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Appendices