Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools

Trace:
ccr_1016_config

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Last revisionBoth sides next revision
ccr_1016_config [2015/04/08 14:31] – [Use USB serial port to connect to other devices (switch)] adminccr_1016_config [2015/08/25 17:39] – [Authentication / Security] admin
Line 14: Line 14:
   * Log in with new user, and disable the default admin user:<code>/user disable admin</code>   * Log in with new user, and disable the default admin user:<code>/user disable admin</code>
   * Create self signed certificate for HTTPS:<code>/certificate add name=ca-template common-name=CA key-usage=key-cert-sign   * Create self signed certificate for HTTPS:<code>/certificate add name=ca-template common-name=CA key-usage=key-cert-sign
-add name=server-template common-name=server+/certificate add name=server-template common-name=server
 /certificate sign ca-template name=CA /certificate sign ca-template name=CA
 /certificate sign ca=CA server-template name=server /certificate sign ca=CA server-template name=server
Line 23: Line 23:
   * Disable services, enable SSH / HTTPS:<code>/ip service disable telnet,ftp,www,api,api-ssl,winbox   * Disable services, enable SSH / HTTPS:<code>/ip service disable telnet,ftp,www,api,api-ssl,winbox
 /ip service enable ssh,www-ssl</code> /ip service enable ssh,www-ssl</code>
 +  * Enable strong crypto (RSA), requires version >= 6.31:<code>/ip ssh set strong-crypto=yes</code>
   * Disable default MAC telnet server:<code>/tool mac-server disable numbers=0   * Disable default MAC telnet server:<code>/tool mac-server disable numbers=0
 /tool mac-server mac-winbox disable numbers=0</code> /tool mac-server mac-winbox disable numbers=0</code>
ccr_1016_config.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1