User guide

Configure Security Features
42 Chapter 1 Command Line Configuration Tasks
Control Access to Services
You can disable services, such as Telnet and Rlogin, for inbound users,
which means that users cannot access the Digi device using those
services. This feature allows you to turn off individual services or to specify
a security level, which means that all services not included in that level are
turned off. To control access to services for inbound users, see
"set secureaccess" on page 194.
Services that Can Be Disabled
The following services can be disabled:
• HTTP
• RealPort
• Reverse TCP
• Reverse Telnet
• Remote login
• Remote shell
•SNMP
•SSH
• Telnet
Service Levels
The service levels, or levels of secure access, are as follows:
• “secure” means that SSH is the only service available to inbound users.
• “high,” means that SSH, HTTP, SNMP, and RealPort services are
available to inbound users.
• “normal,” means all services are available.
• “custom,” means you can select services to turn off.
The default service level is “normal.”
Examples
Disable inbound Telnet connections
#> set secureaccess telnet=off
Disable all services except SSH
#> set secureaccess level=secure