Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


ccr_1016_config

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
ccr_1016_config [2015/04/08 14:31] – [Use USB serial port to connect to other devices (switch)] adminccr_1016_config [2021/10/09 15:14] (current) – external edit 127.0.0.1
Line 1: Line 1:
 {{tag>[hardware ccr 1016]}} {{tag>[hardware ccr 1016]}}
  
-~~TOC~~ 
 =====Cloud core router 1016-12 - Configuration ===== =====Cloud core router 1016-12 - Configuration =====
  
Line 14: Line 13:
   * Log in with new user, and disable the default admin user:<code>/user disable admin</code>   * Log in with new user, and disable the default admin user:<code>/user disable admin</code>
   * Create self signed certificate for HTTPS:<code>/certificate add name=ca-template common-name=CA key-usage=key-cert-sign   * Create self signed certificate for HTTPS:<code>/certificate add name=ca-template common-name=CA key-usage=key-cert-sign
-add name=server-template common-name=server+/certificate add name=server-template common-name=server
 /certificate sign ca-template name=CA /certificate sign ca-template name=CA
 /certificate sign ca=CA server-template name=server /certificate sign ca=CA server-template name=server
Line 23: Line 22:
   * Disable services, enable SSH / HTTPS:<code>/ip service disable telnet,ftp,www,api,api-ssl,winbox   * Disable services, enable SSH / HTTPS:<code>/ip service disable telnet,ftp,www,api,api-ssl,winbox
 /ip service enable ssh,www-ssl</code> /ip service enable ssh,www-ssl</code>
 +  * Enable strong crypto (RSA), requires version >= 6.31:<code>/ip ssh set strong-crypto=yes</code>
   * Disable default MAC telnet server:<code>/tool mac-server disable numbers=0   * Disable default MAC telnet server:<code>/tool mac-server disable numbers=0
 /tool mac-server mac-winbox disable numbers=0</code> /tool mac-server mac-winbox disable numbers=0</code>
ccr_1016_config.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1