Page 1 of 1

Disable HTTP remote access on a Billion 7800GZ but keep SSH?

Posted: Fri Feb 28, 2014 3:49 pm
by akushnir
Due to security concerns we need to disable HTTP access and only keep SSH access on the billion device.
> remoteaccess disable --service HTTP
> remoteaccess show
remote access for FTP is disabled
remote access for HTTP is disabled
remote access for ICMP is enabled
remote access for SNMP is enabled
remote access for SSH is enabled
remote access for TELNET is disabled
remote access for TFTP is disabled
> save
When I log out of my current SSH CLI session and try to connect using another SSH session it seems the SSH remote access gets closed as well.
ICMP to the billion is fine but seems all remote capability is disabled to the device when you just disable the HTTP service.
NMAP shows it being closed as well.

Starting Nmap 4.76 ( http://nmap.org ) at 2014-02-28 10:45 EST
Interesting ports on X.X.X.X
Not shown: 999 filtered ports
PORT STATE SERVICE
1723/tcp closed pptp

Nmap done: 1 IP address (1 host up) scanned in 5.27 seconds

Anyone have any insight on this?

thanks.

Re: Disable HTTP remote access on a Billion 7800GZ but keep

Posted: Mon Mar 03, 2014 9:57 am
by billion_fan
You can do it by editing your Backup configuration file as below line 33 :

lan = Only LAN can access

enable = LAN and WAN both can access

Re: Disable HTTP remote access on a Billion 7800GZ but keep

Posted: Mon Mar 03, 2014 2:23 pm
by akushnir
Thanks but this doesn't work either, it disables all remote services. apparently billion says remote access is tied to http and if you disable it you disable all remote access.