Telnet Connection Even With OAM IP Security

Asset ID:	1-71-1956175.1
Update Date:	2016-12-01
Keywords:

Solution Type Technical Instruction Sure

Solution 1956175.1 : Telnet Connection Even With OAM IP Security

Applies to:

Oracle Communications EAGLE (Hardware) - Version EAGLE 43.x and later
Information in this document applies to any platform.

Goal

Eagle is answering the Telnet connection despite the activation of the feature "OA&M IP security"

Solution

Eagle is no longer allowing access thru telnet when the OAM IP security feature is enabled
The OAM IP security feature only leads to the use of SSH instead of Telnet. SSH is not involved in adding access security. The purpose of SSH is to use encrypted data.

Eagle is accepting the telnet connection command to analyze it and to know what to do with it.
It lasts about one minute until we receive the message “Connection closed by foreign host” from the Eagle (the foreign host being the Eagle)
During this checking time, there is no connection with the Eagle and Eagle is ignoring all entered commands. There is no possible login and no commands can be entered.

There can be unknown methods that attackers can use, but Oracle cannot prevent unknown methods.
However there is not any known telnet security vulnerability with this OAM IP security feature.

Attachments

This solution has no attachment