Disable Element Manager from TLAN 1

[msobkowi]

How do I go ahead and disable access to the Element Manager from the TLAN, but keep it open on ELAN?

Thanks
Mathew

 

[johnpoole]

i would unplug the ethernet cable in the switchroom.. if i had router access i would just do a shut on that... data commands are a lot faster in the cisco world

john poole
bellsouth business
columbia,sc

 

[msobkowi]

Unplugging the TLAN interface on the Signaling Server is not really an option... if thats what you mean.

There has to be a way of disabling the Element Manager from the TLAN so its only accessible from the ELAN side.

Mathew

 

[biv343]

No way that I'm aware of to disable it from the sig server or PBX.

Since the ELAN and TLAN are different networks, build an ACL/filter that disallows port 80 traffic to the TLAN on the router/routing switch. Issue solved.

 

[spanton]

I got this from the Sig server install docs. not sure if it helps.

Restricting web access to ELAN
By default, Element Manager can be accessed from management
workstations (web browsers) on any subnet. A security flag can be enabled to
restrict Element Manager access to hosts on the ELAN subnet.
Procedure 10
Changing the web server security flag
If this Succession Signaling Server's IP Telephony node is already managed
using Element Manager, then ensure that the Succession Signaling Server
has the latest node files before performing this procedure, by performing a
node file transfer.
1 Open the Tools Menu in the Succession Signaling Server Install Tool.
a. Load the Succession Signaling Server Install Tool.
b. At the Main Menu, enter ‘t’ to open the Tools Menu.
2 Enter ‘e’ to change the web server security flag. The current value of the
flag displays:
Currently, the flag is set to: DISABLED
3 Change the flag:
a. To disable the web server security flag, enter ‘a’. The new value of
the flag displays.
b. To enable the web server security flag, enter ‘b’. The new value of the
flag displays.
c. To exit this menu without changing the web server security flag, enter
‘q’.
4 Enter ‘m’ to exit the Succession Signaling Server Install Tool.
5 Import the IP Telephony node files for the web security flag change to
take affect. Refer to “Importing IP Telephony node files” on page 84.
If this is a first-time Succession Signaling Server or node installation, the
pre-configured IP Telephony node files are imported. If this is an upgrade
of the Succession Signaling Server, the web server security flag change
is saved to the master copy of the node files on the Succession Call
Server.

Hope it helps

 

[biv343]

Good information. Never saw that before.

 

[vztech]

youll need the install disk to boot from to get this menu

It's only dialtone-VZ