Remote Spectrum Monitors : Secure Mode
 
Secure Mode
Overview
Secure Mode prevents unauthorized access to both the setup parameters and measurement data stored on the monitor. The following sections detail the method and commands for securing a Remote Spectrum Monitor (RSM). Steps are listed to turn On or Off the Secure Mode for the desired remote spectrum monitor. Placing the RSM in secure mode requires a password. Users should determine that password before going through the setup. The default password is described in Setup Step 5. Communication to the RSM is done through port 8001. Port 8001 is always available whether Secure Mode is on or off.
A command is also provided to reset passwords to default. If this command is used, all setup parameters and measurement data stored on the RSM unit will be cleared. This ensures that unauthorized users will not have access to this information if they are able to gain physical access to the monitor. The secure mode will be off.
To communicate to the RSM unit, you must download Anritsu RSM Secure Mode.zip from the Anritsu website. This allows you to run the utility script, Anritsu RSM Secure Mode.exe, that communicates with the remote spectrum monitor.
Setup
Utility Program
1. Download from the Anritsu website Anritsu RSM Secure Mode.zip. Unzip the file on to your computer.
2. Insure you are connected to the remote spectrum monitor either via Ethernet or wireless. You will need to know either the monitor’s IP address or DNS name.
3. Double-click Anritsu RSM Secure Mode.exe to run the utility script. Insure that all the unzipped files are in the same directory. The following command window opens.
Command Window for Secure Mode
4. At the prompt, enter the DNS name or the IP address of the remote spectrum monitor.
Command Window Waiting for Password
5. Enter the default password if setting up Secure Mode for the first time. The default password is a combination of the RSM MAC address and the word “system”. For example, if the MAC address is 00:00:82:e1:63:40, the password is 00s00y82se1t63e40m. Successfully entering the password will return the following response and Secure Mode commands shown in Figure: Command Window with the Default Password Entered. The MAC address can be found on a label on the RSM unit.
Command Window with the Default Password Entered
6. Enter the number of the desired command to execute the corresponding action. The Commands illustrate what happens when a specific number in the command window is entered.
7. To end the Secure Mode, enter 7 to exit the Anritsu RSM Secure Mode utility script.
Commands
set_secure_mode,<system override password>,<on/off>
Description
Sets Secure Mode on or off. Responds with “ok” if secure mode has been successfully turned ON or OFF. If secure mode is OFF, sending “on” turns secure mode ON (blocking all users not on the whitelist from accessing any port except 8001) and adds the user to a whitelist. If secure mode is ON already and the user sends “on”, the user is simply added to the whitelist. Sending “off” triggers a master reset and unblocks ports for all users. Responds with “password_match_fail” if provided System Override password is incorrect. Responds with “command_match_fail” if “on” or “off” is not sent. The maximum number of registered clients is 100. Responds with “exceeded_max_secure_mode_users_fail” if max number of secure mode users have already been reached prior to the command being sent.
Parameters
<system overide password>,<on or off>
Syntax Example
set_secure_mode,<demopassword>,<on>
force_reboot,<system override password>
Description
Reboots the remote spectrum analyzer. Responds with “ok” if command is accepted. A response of “password_match_fail” is returned if the provided System Override password is incorrect.
Parameters
<system override password>
Syntax Example
force_reboot,<demopassword>
change_password,<System Override Password>,<New Password>
Description
Changes the System Override Password. A response of “ok” if password has successfully been changed.
“password_match_fail” is returned if the provided System Override password is incorrect.
“command_match_fail” is returned if the new password is empty.
“password_over_50_characters_fail” is returned if the password length is greater than 50 characters.
Parameters
<system override password>,<new password>
Syntax Example
change_password,<demopassword>,<newdemopassword>
reset_password
Description
Resets the System Override password back to the default value. A response of “ok” is returned when the password has successfully been reset.
Parameters
None
Syntax Example
reset_password
query_secure_mode_state
Description
Retrieves secure mode state, ON or OFF. A response of “on” is returned if secure mode is ON or “off” if secure mode is OFF.
Parameters
None
Syntax Example
query_secure_mode_state