User's Guide

Wireless Array
Installing the Wireless Array 73
Security
Securing Low Level Access to the Array
Most local management of the Xirrus Array is done via the Web Management
Interface (WMI) or CLI—see “The Command Line Interface” on page 397. The
Array also has a lower level interface: XBL (Xirrus Boot Loader), which allows
access to more primitive commands. You won’t normally use XBL unless
instructed to do so by Xirrus Customer Support. For proper security, you should
replace the default XBL login username and password with your own, as
instructed below. XBL has its own username and password, separate from the
ArrayOS Admin User and Password (used for logging in to the WMI and CLI)
that you may change on the Express Setup page (see Step 5 on page 163).
Xirrus also provides the Xircon utility for connecting to Xirrus XR Arrays that are
not reachable via the normal access methods (such as SSH or WMI) and that do
not have a physical console port (XR-500 and XR-1000 Series Arrays and some
XR-2000 models), or whose console port is not accessible. Xircon discovers
Arrays on your network subnet by sending IP/UDP broadcast packets. Once an
Array is discovered, Xircon can establish an encrypted console session to the
Array via the network even if the Array IP configuration is incorrect. Xircon
allows you to manage the Array using CLI, just as you would if connected to the
console port. Xircon also has an option for easily accessing XBL.
In normal circumstances Xirrus Arrays should be configured and managed
through secure shell (SSH) or via the Web Management Interface (WMI). A
connection is established using either the Array hostname or DHCP-assigned IP
address, or via the other options described in “Using the Ethernet Ports” on
page 70. Xircon may be needed in special circumstances as directed by Xirrus
Customer Support for troubleshooting Array problems or IP connectivity. (In this
case, see the Xircon User Guide for detailed information.)
Xircon access to the Array may be controlled:
z
You may enable or disable all Xircon access to the Array as instructed in
the procedure below. There are also options to allow access only to CLI
(i.e., ArrayOS access) or only to XBL.