IPC@CHIP Documentation - SC12 @CHIP-RTOS V1.10

IPC@CHIP Documentation Index
Introduction
Security notes - SC12 @CHIP-RTOS V1.10
Here some notes how to protect the IPC@CHIP against unauthorized access.
By default most of the further described security features are disabled.
This to enable every starting user to have access to them from the start
for his IPC@CHIP development.
WEB server
Top of list
Index page
❍ WEB server
❍ TELNET server
❍ FTP server
❍ PPP server
❍ Chiptool UDP config server
❍ TFTP server
❍ General TCPIP network security
Steps to protect the IPC@CHIP against unauthorized access via HTTP:
TELNET server
1. Webserver default drive: Set a webserver root drive at chip.ini
2. Webserver root directory: Set a webserver root directory at chip.ini
3. Remove CGI page ChipCfg: Delete this preconfigured page from the CGI table with the CGI API
4. PUT Method User and Password: Define User and Password if you have a @CHIP-RTOS
Variant which provides the HTTP PUT method. Otherwise everyone can transfer files to your
server with the standard password and user 'WEB'. The HTTP PUT method wont be provided by
the standard CHIP-RTOS Variants LARGE, MEDIUM, SMALL, TINY.
5. Additional protection of a specified path: Access is only, if the user authenticate himself by a
defined username and password.
Steps to protect the IPC@CHIP against unauthorized access via Telnet:
1. Telnet timeout minutes: Define telnet idle timeout minutes at chip.ini
2. Telnet login delay: Enable telnet login delay at chip.ini
Page 395 / 400