【TongWeb7】M11开启远程访问控制台

TongWeb7.0.4.9_M11增加出厂默认访问安全策略。

• 默认仅本机可访问TongWeb控制台
• 通过命令行对开启控制台远程访问进行设置
• • 前置：修改cli用户密码
  • 开启console远程访问
  • • 关闭console远程访问
  • 开启heimdall远程访问
  • • 关闭heimdall远程访问
  • 开启cli用户的远程访问
  • • 关闭cli用户的远程访问
• 注意

默认仅本机可访问TongWeb控制台

• 只有修改控制台所有用户默认密码后，才可开启远程访问。
• 启动服务后访问控制台会提示

通过命令行对开启控制台远程访问进行设置

前置：修改cli用户密码

[root@localhost bin]# pwd
/opt/TongWeb7.0.4.9_M11_Enterprise_Linux/bin
[root@localhost bin]#
[root@localhost bin]# ./commandstool.sh change-admin-password
Please enter the admin user name>cli
Please enter the old admin password>cli123.com
Please enter the new admin password>Zxc124.com
Please enter the new admin password again>Zxc124.com
Command change-admin-password executed successfully.
[root@localhost bin]#

开启console远程访问

`注：第一次必须修改四个用户的默认密码！才能开启成功`
四个用户分别为系统管理员（thanos）、安全保密管理员（security）、安全审计员（auditor）、监视管理员（monitor）

[root@localhost bin]# ./commandstool.sh update-console-remote-access –thanosPassword=Zxc124.com –securityPassword=Zxc124.com –auditorPassword=Zxc124.com –monitorPassword=Zxc124.com remote
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
Console access type is set to: remote
Password update summary – updated users: [thanos, security, auditor, monitor], ignored users (already changed before): [none].
************************
Command update-console-remote-access executed successfully.
[root@localhost bin]#

关闭console远程访问

[root@localhost bin]# ./commandstool.sh update-console-remote-access local
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
Console access type is set to: local

************************
Command update-console-remote-access executed successfully.
[root@localhost bin]#

开启heimdall远程访问

`注：第一次必须修改四个用户的默认密码！才能开启成功`

四个用户分别为系统管理员（rig）、安全保密管理员（secadm）、安全审计员（audit）、监视管理员（monitor）

[root@localhost bin]# ./commandstool.sh update-heimdall-remote-access –rigPassword=Zxc124.com –secadmPassword=Zxc124.com –auditPassword=Zxc124.com –monitorPassword=Zxc124.com remote
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
heimdall access type is set to: remote
Password update summary – updated users: [rig, secadm, audit, monitor], ignored users (already changed before): [none].
************************
Command update-heimdall-remote-access executed successfully.
[root@localhost bin]#

关闭heimdall远程访问

[root@localhost bin]# ./commandstool.sh update-heimdall-remote-access local
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
heimdall access type is set to: local

************************
Command update-heimdall-remote-access executed successfully.
[root@localhost bin]#

开启cli用户的远程访问

[root@localhost bin]# ./commandstool.sh update-cli-remote-access remote
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
Cli access type is set to : remote
************************
Command update-cli-remote-access executed successfully.

关闭cli用户的远程访问

[root@localhost bin]# ./commandstool.sh update-cli-remote-access local
Please enter the admin user name>cli
Please enter the admin password>Zxc124.com
************************
Cli access type is set to : local
************************
Command update-cli-remote-access executed successfully.
[root@localhost bin]#

注意