User Manual

54 Chapter 11 Configuring Security Features
• Secure, which means that SSH is the only service available to
inbound users
• High, which means that SSH, HTTP, HTTPS, SNMP, and RealPort
services are available to inbound users
• Normal, which means all services are available
• Custom, which means you can select services to turn off.
The default service level is normal, which means that all services are
available.
Procedure
Use this topic for information on using the web interface to turn services off.
1. Access the device server from a web browser by entering the Digi
device’s IP address in the URL window.
2. Log on as root. The default password is dbps.
3. From the main menu, choose Secure Access.
4. Use the wizard to disable services that you do not want to make avail-
able to inbound users. Use the context sensitive help for information on
configuration fields.
SSL Support
Introduction
The device server supports communication over the Secure Socket Layer
(SSL). Applications running on networked systems and devices can initiate
secure communication with a device connected to a Digi serial port by
using the SSL TCP port.
Setting Up for SSL Connections
No device server configuration is required to use SSL unless the
application cannot use the default SSL TCP port, which can be changed
using the sockets field on the set config command. See the Digi One/
PortServer TS Command Reference for more information.
Initiating an SSL Connection with a Digi Device
The formula for determining the correct TCP port is the following:
base socket + port + 600. See the following examples, which use the
default base socket (2000), to clarify how this works.
To Connect to ... Use This Command ... Example
Port 1 telnet ip-address 2601 Telnet 192.2.2.1 2601
Port 2 telnet ip-address 2602 Telnet 192.2.2.1 2602