ftp service on Mitel

[Mitelpassion]

Hi,

Was wondering if one is able to manuiplate (change) the ftp settings on the Mitel controller.

Issue is with regards to security concerns over the fact that FTP is running and it allows guest and anonymous access.

any views appreciated.

Thanks

 

[nytalkin]

although I've never heard of any problems with this you can change the ftp username and password in the Conroller Registry form. Keep in mind that you need to change the ftp username and password everytime you want to upgrade, backup or restore the system. This will probably annoy the hell out of the dealer techs but what should that matter?

NO GOOD DEED GOES UNPUNISHED!

 

[Mitelpassion]

issue is that the controller allows anonymous access and guest account is enabled according to their tests.

controller registry configures network printer ftp settings

 

[LoopyLou]

I don't know how to shut it off but there is most likely a VXWorks command to do so. It will restart however after any reboot. Can you restrict access of FTP to the voice VLAN?

The single biggest problem with communications is the illusion that it has taken place.

 

[nytalkin]

THe ftp username and password can be changed at the bootline. Password is limited to 19 characters. The ftp services can not be accessed unless the ESM username and password have a corresponding user profile.

Again, if you change the ftp parameters of the controller the software installer tool will have to be modified each time an upgrade is attempted, Backups and restores are also effected by this change.



NO GOOD DEED GOES UNPUNISHED!

 

[Mitelpassion]

the ftp in the bootline is the paremeters the controller uses to connect to a ftp service for upgrades and install. I'm referring to the FTP service running on the controller

 

[Supernova99]

I have just checked and you are correct it is possible to login to the FTP server using the anonymous account
This is a guest account with little or no access to the system it is not possible to enter most commands and those that you can it fails to submit with a guest access denied message.

Share what you know - Learn what you don't

 

[slapin]

Which version is it? I could not login to any of my controllers using anonymous account. ESM account worked fine.

 

[Supernova99]

I tested this on 4.1

Share what you know - Learn what you don't