user manual

5-8
Configuration
• Secondary NTP Address: Defines the IP address or domain name (up to 64
characters long) for the secondary, fallback NTP Server. (Default = undefined.)
• NTP Timeout: The amount of time in seconds, that will elapse between each
attempt to contact the NTP server. When the initial attempt is unsuccessful, the
RSM will retry the connection four times. If neither the primary nor secondary NTP
server responds, the RSM will wait 24 hours before attempting to contact the NTP
server again. (Default = 3 Seconds.)
5.4.2. The Invalid Access Lockout Feature
When properly configured and enabled, the Invalid Access Lockout feature will watch all
login attempts made at all RSM ports. If a given port exceeds the selected number of
invalid attempts, then that port will be automatically disabled for a user-defined length of
time. The Invalid Access Lockout feature uses three separate counters to track invalid
access attempts:
• Serial Port Counter: Counts invalid access attempts at each individual serial port.
If the number of invalid attempts at a given port exceeds the user-defined Lockout
Attempts value, then that port will be locked.
• Raw Socket Counter: Counts invalid attempts to connect to a port via Raw Socket
protocol. If the number of invalid attempts at a given port exceeds the user-defined
Lockout Attempts value, then Raw Socket connections to that port will be locked.
• Telnet, SSH and Web Browser Counter: Counts all invalid attempts to access
command mode via Telnet, SSH or Web Browser interface. If the number of
cumulative invalid attempts exceeds the user-defined Lockout Attempts value, then
the Network Port will be locked.
Note that when an Invalid Access Lockout occurs, you can either wait for the Lockout
Duration period to elapse (after which, the RSM will automatically reactivate the port), or
you can issue the /UL command (type /UL and press [Enter]) via the Text Interface to
instantly unlock all RSM serial ports.
Notes:
• Invalid Access Lockout parameters, defined via the System Parameters
menu, will apply to all RSM serial ports.
• When a Port is locked, an external modem connected to that port will not
answer.
• When a given RSM serial port is locked, the other RSM serial ports will
remain unlocked, unless the Invalid Access Lockout feature has been
triggered at those other ports.
• If any one of the RSM’s logical network ports is locked, all other network
connections to the unit will also be locked.
• All invalid access attempts at the RSM Network Port are cumulative (the count
for invalid access attempts is determined by the total number of all invalid
attempts at all 64 logical network ports.) If a valid login name/password is
entered at any of the logical network ports, then the count for all RSM logical
network ports will be restarted.
• A Port that has been locked by the Invalid Access Lockout feature will still
respond to the ping command (providing that the ping command has not
been disabled.)